Trojaner-Board - Spyware-Schlüssel in der Registry, Adware und Pups...

Seite 1 von 2

100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Spyware-Schlüssel in der Registry, Adware und Pups... (https://www.trojaner-board.de/175224-spyware-schluessel-registry-adware-pups.html)

Baba Yaga

19.01.2016 17:19

Spyware-Schlüssel in der Registry, Adware und Pups...

...trotz Emsisoft Anti-Malware.

Hallo zusammen,

mit Hilfe und unter Anleitung von Schrauber habe ich letztes Jahr meinen PC von etlichen Problemen befreit und mir auf sein Anraten hin Emsioft Anti-Malware gekauft.
Am Anfang war ich sehr zufrieden, leider scheine ich aber nun nach ca. 6 Monaten wieder am Anfang zu stehen und habe trotz Dateiwächter, Verhaltensanalyse und Surfschutz durch Emsisoft Anti-Malware gravierende Probleme:

ich habe den Verdacht, dass Emsisoft Anti-Malware nicht mehr (richtig) funktioniert:

1. Beim Updaten werden manchmal keine Dateien herunter geladen, trotzdem steht im Infobereich bereits nach ein paar Sekunden 100% und der gesamte Vorgang mit Installation benötigt nur knapp 10 Sekunden.
Das ist nicht üblich, denn meine Auto-Update steht auf "alle 3 Stunden", daher müsste es erfahrungsgemäß länger dauern.

2. Ich habe mit verschiedenen Tools (JRT, AdwCleaner, SpyBot) Adware und Pup gefunden.

3. In der Registry waren Spyware-Schlüssel.

4. Beim Spiel "Pflanzen gegen Zombies" läuft ein Behavior.CodeInjector (Maus- und Tastatur), den muss ich bei jedem Spiel erlauben, obwohl ich "Immer erlauben" drücke und es in den Protokollen als "von Regel erlaubt" eingestellt ist.

5. Beim Surfen mit Firefox blinken angewählte Links oder Tabs für Millisekunden schwarz auf.
Firefox an sich ist auch extrem langsam, wenn ich z.B. mehrere youtube-Videos in verschiedenen Tabs habe, läuft keines der angewählten Videos, trotz ausreichend Buffering laden sie immer weiter und wenn sie laufen, dann nur der Ton und das Bild hängt. Der Vollbildmodus und 1080p sind schier unmöglich. (HTML5)

Hoffe auf Hilfe,
Gruß,
Baba Yaga.

Anbei FRST-Addition.txt

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:18-01-2016

durchgeführt von Besitzer (2016-01-19 15:03:16)

Gestartet von C:\Users\Besitzer\Desktop

Windows 7 Home Premium Service Pack 1 (X64) (2011-04-01 09:03:06)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-2472162299-3273411272-195361004-500 - Administrator - Disabled) => C:\Users\Administrator.LAVAMAT

Besitzer (S-1-5-21-2472162299-3273411272-195361004-1000 - Administrator - Enabled) => C:\Users\Besitzer

Gast (S-1-5-21-2472162299-3273411272-195361004-501 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Emsisoft Anti-Malware (Enabled - Out of date) {15510D9D-6530-DA29-224F-7BA1BDD1CB58}

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

AS: Emsisoft Anti-Malware (Enabled - Out of date) {AE30EC79-430A-D5A7-18FF-40D3C65681E5}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

3D Bowling (HKLM-x32\...\3D Bowling) (Version:  - )

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.010.20056 - Adobe Systems Incorporated)

Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.188 - Adobe Systems Incorporated)

Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.2.172 - Adobe Systems, Inc.)

Alabama Smith: Flucht aus Pompeji (HKLM-x32\...\Alabama Smith: Flucht aus Pompeji) (Version: 0.0.0.0 - INTENIUM GmbH)

Amazon MP3-Downloader 1.0.18 (HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)

Beetle Ju 2 (HKLM-x32\...\Beetle Ju 2) (Version: 1.0.0.0 - INTENIUM GmbH)

Big Fish: Game Manager (HKLM-x32\...\BFGC) (Version: 3.3.0.2 - )

Billard2 (HKLM-x32\...\Billard2_is1) (Version:  - )

CCleaner (HKLM\...\CCleaner) (Version: 5.04 - Piriform)

Codec Decoder Pack (HKLM-x32\...\Codec Decoder Pack) (Version: 1.0 - Codec Decoder)

Cosmic Ball (HKLM-x32\...\Cosmic Ball_is1) (Version:  - My Real Games Ltd)

Crazy Barrels (HKLM-x32\...\Crazy Barrels) (Version:  - )

Crazy Golf World Tour (HKLM-x32\...\Crazy Golf World Tour1.0) (Version: 1.0 - Oxygen Interactive Ltd.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Der bartlose Zauberer (HKLM-x32\...\Der bartlose Zauberer) (Version: 2.0.0.0 - INTENIUM GmbH)

Der Exorzist (HKLM-x32\...\Der Exorzist) (Version: 1.0.0.0 - INTENIUM GmbH)

DesignPro 5 (x32 Version: 5.5.708 - Avery Dennison) Hidden

DEUTSCHLAND SPIELT GAME CENTER (HKLM-x32\...\DSGPlayer) (Version: 2.4.2.14 - INTENIUM GmbH)

Die Tuttles (HKLM-x32\...\Die Tuttles) (Version:  - )

Dr Kawashima (HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\DrKawashima) (Version: 1.0 - )

Druids: Operation Mistelzweig (HKLM-x32\...\Druids: Operation Mistelzweig) (Version: 1.0.0.0 - INTENIUM GmbH)

Emsisoft Anti-Malware (HKLM-x32\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 9.0 - Emsisoft Ltd.)

Folderico 4.0 RC12 (HKLM-x32\...\Folderico) (Version: 4.0 RC12 - Shedko ( www.softq.org ))

Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Frankenstein: Meister des Schreckens (HKLM-x32\...\Frankenstein: Meister des Schreckens) (Version: 0.0.0.0 - INTENIUM GmbH)

Free Studio version 6.5.1.415 (HKLM-x32\...\Free Studio_is1) (Version: 6.5.1.415 - DVDVideoSoft Ltd.)

Freemake Video Converter Version 4.1.6 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.6 - Ellora Assets Corporation)

Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)

Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden

Haus der 1000 Türen 2: Das Juwel des Zarathustra (HKLM-x32\...\Haus der 1000 Türen 2: Das Juwel des Zarathustra) (Version: 1.0.0.0 - INTENIUM GmbH)

Haus der 1000 Türen: Familiengeheimnisse (HKLM-x32\...\Haus der 1000 Türen: Familiengeheimnisse) (Version: 1.0.0.0 - INTENIUM GmbH)

HP Deskjet 1050 J410 series - Grundlegende Software für das Gerät (HKLM\...\{C3F12DD0-54B1-4B2B-A82B-FA43502BC550}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)

HP Deskjet 1050 J410 series Hilfe (HKLM-x32\...\{5C90D8CF-F12A-41C6-9007-3B651A1F0D78}) (Version: 140.0.66.66 - Hewlett Packard)

HP Update (HKLM-x32\...\{97486FBE-A3FC-4783-8D55-EA37E9D171CC}) (Version: 5.005.000.001 - Hewlett-Packard)

HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden

IcoFX 1.6.4 (HKLM-x32\...\IcoFX_is1) (Version:  - )

ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden

Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle)

Jump Jack (HKLM-x32\...\Jump Jack) (Version:  - )

Jumpin'Jack (HKLM-x32\...\Jumpin'Jack) (Version:  - )

Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Kingdom Chronicles: Königreich in Gefahr (HKLM-x32\...\Kingdom Chronicles: Königreich in Gefahr) (Version: 1.0.0.0 - INTENIUM GmbH)

Logon Screen (HKLM\...\{1730D13B-7517-4321-A88B-64627CF67CDC}_is1) (Version:  - Daniel Rebelo)

Media Preview (HKLM\...\{8680D34A-E765-4579-877F-DEA8FB174DA7}) (Version: 1.4.3.429 - BabelSoft)

Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)

MiniGolfPro (HKLM-x32\...\MiniGolfPro) (Version:  - )

Moai: Erschaffe deinen Traum (HKLM-x32\...\Moai: Erschaffe deinen Traum) (Version: 1.0.0.0 - INTENIUM GmbH)

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Mozilla Firefox 43.0.4 (x86 de) (HKLM-x32\...\Mozilla Firefox 43.0.4 (x86 de)) (Version: 43.0.4 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.4.5848 - Mozilla)

Mp3tag v2.70 (HKLM-x32\...\Mp3tag) (Version: v2.70 - Florian Heidenreich)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

Next Generation Visualisations (HKLM-x32\...\{2E376AD9-5C49-4F7D-A0BA-6A44E8FA5A3B}) (Version: 1.0.0 -  Microsoft)

NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 353.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 353.62 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.7.4.10 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.7.4.10 - NVIDIA Corporation)

NVIDIA Grafiktreiber 353.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.62 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)

OpenAL (HKLM-x32\...\OpenAL) (Version:  - )

OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)

paint.net (HKLM\...\{3F5F509B-E226-417C-8CD1-CAAE756C328A}) (Version: 4.0.0 - dotPDN LLC)

Pale Moon 25.8.1 (x64 en-US) (HKLM\...\Pale Moon 25.8.1 (x64 en-US)) (Version: 25.8.1 - Moonchild Productions)

PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )

Prince of Persia T2T (HKLM-x32\...\{DFFE2B1F-07E0-45A9-8801-CD8514CAA876}) (Version:  - )

QT Lite 4.1.0 (HKLM-x32\...\quicktime_lite_is1) (Version: 4.1.0 - )

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.)

Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Schatzjäger 2 (HKLM-x32\...\{1D0DD240-7752-48B5-A6EF-AC6509E16ABE}) (Version: 1.00.0000 - )

Sherlock Holmes und der Hund der Baskervilles (HKLM-x32\...\Sherlock Holmes und der Hund der Baskervilles) (Version: 1.0.0.0 - INTENIUM GmbH)

SHIELD Streaming (Version: 4.1.0240 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.7.4.10 - NVIDIA Corporation) Hidden

Ski Challenge 16 (HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\sc16-GAMETWIST_MAIN) (Version:  - )

Sky Taxi 4: Streng Geheim (HKLM-x32\...\Sky Taxi 4: Streng Geheim) (Version: 1.0.0.0 - INTENIUM GmbH)

Supercow (VOLLVERSION) (HKLM-x32\...\Supercow (VOLLVERSION)) (Version:  - )

SuperTux Version 0.3.4 (HKLM-x32\...\{5095BBEC-9A2F-4DA1-B5EF-511C728A2FF6}_is1) (Version: 0.3.4 - SuperTux Development Team)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Tiger Eye (HKLM-x32\...\Tiger Eye) (Version:  - )

Turtix (HKLM-x32\...\Turtix) (Version:  - )

Turtix 2 (HKLM-x32\...\Turtix 2) (Version: 0.0.0.0 - INTENIUM GmbH)

Unlocker 1.9.1-x64 (HKLM\...\Unlocker) (Version: 1.9.1 - Cedrick Collomb)

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

VirtualDJ 8 (HKLM-x32\...\{9ADBBA93-4625-4898-BB0D-BCE7EA9F8B4A}) (Version: 8.0.0 - Atomix Productions)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0B8BE318-7B69-461A-8C64-0EB3DD41DAC3} - System32\Tasks\{C1561D4A-B44B-49DD-A0F8-EF52562CBD95} => pcalua.exe -a "C:\Program Files\Eigene Programme\VLC\VLCPortable\VLCPortable.exe" -d "C:\Program Files\Eigene Programme\VLC\VLCPortable"

Task: {57FE0623-8D4E-4FB1-91C8-9A88F98A7279} - System32\Tasks\{68A1FC85-0D22-4FFD-8AFD-E46FD6FA28CD} => pcalua.exe -a C:\Windows\SysWOW64\DivXControlPanelApplet.cpl -c DivX Control Panel

Task: {5A40E926-9E86-4B89-9CFD-B12311724371} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto

Task: {5D726D9D-298E-4D9A-99AC-10988B4FE942} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-03-13] (Piriform Ltd)

Task: {65ABCEE0-8155-427C-8661-D8EA03BCD36B} - System32\Tasks\{A5ED2DA0-1C3C-492C-AB78-B1E3EC3D00BC} => pcalua.exe -a J:\OpenOfficePortable\OpenOfficeWriterPortable.exe -d J:\OpenOfficePortable

Task: {6FC8A5D1-2675-4C4B-BB06-1BFCD7B1721C} - System32\Tasks\{906A96A5-4B4C-488D-BF30-A8AF8F8FF547} => pcalua.exe -a C:\Users\Besitzer\Downloads\avira_antivir_antirootkit_en(1).exe -d C:\Users\Besitzer\Downloads

Task: {81A2F243-F15D-4F24-81AF-29F76B55FE2D} - System32\Tasks\{7561AFB8-E02B-4BB2-B905-D83B7A1A31AB} => pcalua.exe -a "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA StereoUSB Driver\nvUSBInst.exe" -d "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA StereoUSB Driver"

Task: {8E2A7A38-D385-41AE-9304-70B125AC482D} - System32\Tasks\{205D5359-6194-4D3A-AA1F-6E0491BDCC95} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{714B9C6C-70FC-4750-98E2-61520B906C45}\setup.exe" -c -runfromtemp -l0x0009 -removeonly

Task: {92251C15-658B-4399-8F50-03FDA2362D62} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)

Task: {B568EABF-E7AE-418E-BC17-66A2605C9A0B} - System32\Tasks\{0D19AD70-C41F-4F22-9003-E0EAB1EE5BE0} => pcalua.exe -a E:\setup\setup.exe -d E:\setup

Task: {C3C296A5-40E8-4763-B0DF-C9D7776A8EE5} - System32\Tasks\{7840164C-A73D-4726-941A-5B45F6B89279} => pcalua.exe -a E:\Start.exe -d E:\

Task: {C9326867-66E5-4B89-80A2-C8731A92B9A8} - System32\Tasks\{4A1360EB-55A7-47DC-B77C-4C620B730949} => pcalua.exe -a C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe -c /M{F82C6574-AD88-4B40-A432-970BC77F1BD2}

Task: {D31429BC-581F-430B-A934-886EAEF9B323} - System32\Tasks\{5145A4DA-87D0-45AC-AB29-C9EE4A8A24E8} => pcalua.exe -a "C:\Program Files (x86)\OXXOGames\GPlayer\MyInstall.exe" -d C:\Windows\system32 -c ScriptUInst "C:\Program Files (x86)\OXXOGames\GPlayer\Install\\Game_NSoftSupercowCD.log"

Task: {D4C17D60-38D1-4714-9D81-1BD33E46B25C} - System32\Tasks\{B00E5003-544E-43D9-9CA9-8A38122A743F} => pcalua.exe -a "C:\Eigene Programme\VLCPortable\VLCPortable.exe" -d C:\Users\Besitzer\Videos\Flash -c "C:\Users\Besitzer\Videos\Flash\Faithless - Insomnia.flv"

Task: {DD9F510C-95F4-499A-90C8-BAC5BC372FF4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask => start sppsvc

Task: {F2C7EC5A-0213-416A-926C-77CBE8D63546} - System32\Tasks\{D1BB4EFD-0219-483A-BBAE-B14982220F81} => pcalua.exe -a "C:\Users\Besitzer\Desktop\Neuer Ordner\s_install.exe" -d "C:\Users\Besitzer\Desktop\Neuer Ordner"

Task: {F51ABCD2-3A7B-42A6-8941-2E6850D51057} - System32\Tasks\{2D0A611E-70E9-471E-A485-252A68A189C8} => pcalua.exe -a E:\SETUP.exe -d E:\

Task: {FBA7811A-9E7E-4C85-8DEC-14811BAF73C5} - System32\Tasks\{DE59C836-6D79-4D21-9562-2CC82BEF1148} => C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe [2014-03-31] (Microsoft Corporation)

Task: {FF6210FB-C7D2-466B-A1C1-17C6937D0059} - System32\Tasks\{DFE22B96-877E-43BA-8F3F-6AF3E3146E08} => pcalua.exe -a C:\Users\Besitzer\Downloads\avira_antivir_antirootkit_en.exe -d C:\Users\Besitzer\Downloads
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2012-05-11 23:08 - 2015-07-23 02:31 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2010-07-15 05:44 - 2010-07-15 05:44 - 00020032 _____ () C:\Program Files (x86)\Unlocker\UnlockerCOM.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\ProgramData\TEMP:2CB9631F

AlternateDataStreams: C:\ProgramData\TEMP:DE220DE0
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 03:34 - 2015-03-07 20:36 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
 

127.0.0.1       localhost
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: Datenträger ist nicht mit dem Internet verbunden.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: )

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

MSCONFIG\Services: AdobeARMservice => 2

MSCONFIG\Services: Avira.ServiceHost => 2

MSCONFIG\Services: GfExperienceService => 2

MSCONFIG\Services: gupdate => 2

MSCONFIG\Services: gupdatem => 3

MSCONFIG\Services: IePluginServices => 2

MSCONFIG\Services: IMFservice => 2

MSCONFIG\Services: Nero BackItUp Scheduler 4.0 => 2

MSCONFIG\Services: NvNetworkService => 2

MSCONFIG\Services: NvStreamNetworkSvc => 3

MSCONFIG\Services: NvStreamSvc => 2

MSCONFIG\Services: Origin Client Service => 3

MSCONFIG\Services: StumbleUponUpdater => 2

MSCONFIG\Services: SXDS10 => 3

MSCONFIG\Services: WSWNA3100 => 2

MSCONFIG\startupfolder: C:^Users^Besitzer^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Tintenwarnungen überwachen - HP Deskjet 1050 J410 series.lnk => C:\Windows\pss\Tintenwarnungen überwachen - HP Deskjet 1050 J410 series.lnk.Startup

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: Avira SystrayStartTrigger => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe

MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"

MSCONFIG\startupreg: ProductUpdater => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe

MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{7995B5C5-743E-41C3-BF8B-5EFDEA48A645}] => (Allow) C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\USBSetup.exe

FirewallRules: [{79E355A7-1CFB-460A-9802-5E54DE6C310A}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{DAFB63D4-7CE8-4042-9019-E910E5680FEE}] => (Allow) LPort=2869

FirewallRules: [{D50C9D88-2E02-4883-87B5-7482344FE710}] => (Allow) LPort=1900

FirewallRules: [{04D2E93A-C507-4737-9FD5-DC313B918596}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{69F1F8CB-B55E-4C2B-8B56-748EFEA3D6BD}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{A5762040-DFFB-4E56-BE96-10F599A4AC75}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{9A743D4B-C25C-41F5-A53D-F6617B16655F}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{581FC581-7CA0-45C6-AA4A-9EED6FDAC6E9}] => (Allow) C:\Program Files (x86)\Torya\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe

FirewallRules: [{27751150-0CB5-4FFC-9949-DFB1B10A9C3A}] => (Allow) C:\Program Files (x86)\Torya\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe

FirewallRules: [{1E0F717F-733F-4652-9543-9410AF9469D1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{DD4CEFF7-5085-4372-8F3C-880608BBE7E8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{1614BDBC-75B7-4898-BD14-90D06CD60EDF}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{B8480563-DF97-4165-ADD1-2347DB6A1626}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{6528B5FC-0C4F-4AFF-B7B5-DEE7DA529E9C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{8F38F99B-CB7A-43BC-B0AF-4BF4D85F9139}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{6979EED2-941D-4AF9-B92D-D805DAD809D1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{99F88277-5A71-4C1A-9C75-FB67C5318ADA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{6822BE0D-F8B1-4956-AA01-A904E632EFE3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
 

==================== Wiederherstellungspunkte =========================
 

13-01-2016 01:43:11 Windows Update

14-01-2016 00:23:00 Windows Update

14-01-2016 18:54:01 Windows Update

19-01-2016 14:58:54 Revo Uninstaller's restore point - Spybot - Search & Destroy
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 

Name: NVIDIA GeForce 7025 / NVIDIA nForce 630a

Description: NVIDIA GeForce 7025 / NVIDIA nForce 630a

Class Guid: {4d36e968-e325-11ce-bfc1-08002be10318}

Manufacturer: NVIDIA 

Service: nvlddmkm

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 

Name: Realtek PCIe FE Family Controller

Description: Realtek PCIe FE Family Controller

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Realtek

Service: RTL8167

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (01/19/2016 02:58:55 PM) (Source: VSS) (EventID: 8193) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-2472162299-3273411272-195361004-1004.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.

.
 
 

Vorgang:

   OnIdentify-Ereignis

   Generatordaten werden gesammelt
 

Kontext:

   Ausführungskontext: Shadow Copy Optimization Writer

   Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}

   Generatorname: Shadow Copy Optimization Writer

   Generatorinstanz-ID: {09f0e609-b253-4f39-9564-27ed962a5a34}
 

Error: (01/19/2016 12:24:48 PM) (Source: Windows Search Service) (EventID: 7010) (User: )

Description: Der Index kann nicht initialisiert werden.
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (01/19/2016 12:24:48 PM) (Source: Windows Search Service) (EventID: 3058) (User: )

Description: Die Anwendung kann nicht initialisiert werden.
 

Kontext: Windows Anwendung
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (01/19/2016 12:24:48 PM) (Source: Windows Search Service) (EventID: 3028) (User: )

Description: Das Gatherer-Objekt kann nicht initialisiert werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (01/19/2016 12:24:48 PM) (Source: Windows Search Service) (EventID: 3029) (User: )

Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 

Details:

        Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)
 

Error: (01/19/2016 12:24:48 PM) (Source: Windows Search Service) (EventID: 3029) (User: )

Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (01/19/2016 12:24:48 PM) (Source: Windows Search Service) (EventID: 9002) (User: )

Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 

Details:

        Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)
 

Error: (01/19/2016 12:24:48 PM) (Source: Windows Search Service) (EventID: 7042) (User: )

Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (01/19/2016 12:24:48 PM) (Source: Windows Search Service) (EventID: 7040) (User: )

Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4700} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (01/19/2016 12:24:48 PM) (Source: Windows Search Service) (EventID: 9000) (User: )

Description: Der Jet-Eigenschaftenspeicher kann von Windows Search nicht geöffnet werden.
 

Details:

        0x%08x (0xc0041800 - Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800))
 
 

Systemfehler:

=============

Error: (01/19/2016 02:58:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/19/2016 02:58:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/19/2016 02:58:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/19/2016 02:58:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/19/2016 02:58:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/19/2016 02:58:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/19/2016 02:58:05 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/19/2016 02:58:05 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/19/2016 02:58:05 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/19/2016 02:58:02 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 
 

CodeIntegrity:

===================================

  Date: 2015-12-01 17:26:19.980

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.946

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.889

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.854

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.801

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.766

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.621

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.587

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.501

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.468

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: AMD Athlon(tm) II X2 220 Processor

Prozentuale Nutzung des RAM: 47%

Installierter physikalischer RAM: 2815.24 MB

Verfügbarer physikalischer RAM: 1473.86 MB

Summe virtueller Speicher: 5628.69 MB

Verfügbarer virtueller Speicher: 3561.11 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:200 GB) (Free:101.39 GB) NTFS

Drive d: (Volume) (Fixed) (Total:265.66 GB) (Free:265.51 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 1D884D44)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=200 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=265.7 GB) - (Type=07 NTFS)
 

==================== Ende von Addition.txt ============================

Anbei FRST-Shortcut.txt

Code:

Untersuchungsergebnis der Verknüpfungen des Benutzers (x64) Version:18-01-2016

durchgeführt von Besitzer (2016-01-19 15:03:36)

Gestartet von C:\Users\Besitzer\Desktop

Start-Modus: Normal
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 
 
 
 
 

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk -> C:\Windows\Installer\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}\SC_Reader.ico (Flexera Software LLC)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk -> C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAME CENTER.lnk -> C:\Program Files (x86)\OXXOGames\GPlayer\GPlayer.exe (Intenium GmbH)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk -> C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe (Google)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk -> C:\Windows\ehome\ehshell.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2010.lnk -> C:\Windows\Installer\{95140000-0070-0000-0000-0000000FF1CE}\oobeicon.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk -> C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk -> C:\Program Files (x86)\Paint.Net\PaintDotNet.exe (dotPDN LLC)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk -> C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk -> C:\Windows\System32\WindowsAnytimeUpgradeUI.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk -> C:\Program Files\DVD Maker\DVDMaker.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk -> C:\Program Files (x86)\Windows Live\Mail\wlmail.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk -> C:\Windows\System32\xpsrchvw.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Walsingham‘s Manor - Verlies der Seelen\Walsingham‘s Manor - Verlies der Seelen deinstallieren.lnk -> C:\Spiele\Walsingham‘s Manor - Verlies der Seelen\unins000.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Walsingham‘s Manor - Verlies der Seelen\Walsingham‘s Manor - Verlies der Seelen starten.lnk -> C:\Spiele\Walsingham‘s Manor - Verlies der Seelen\ghost_painting.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Turtix 2\GAME CENTER.lnk -> C:\Program Files (x86)\OXXOGames\GPlayer\GPlayer.exe (Intenium GmbH)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SuperTux\SuperTux.lnk -> C:\Spiele\SuperTux 0.3.4\supertux2.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Beetle Ju 2.lnk -> C:\Spiele\BeetleJu2CD\BeetleJu2_og.exe (INTENIUM GmbH)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Der bartlose Zauberer.lnk -> C:\Spiele\DerBartloseZauberer\DerBartloseZauberer_og.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Der Exorzist.lnk -> C:\Spiele\DerExorzist\DerExorzist_og.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Die Tuttles.lnk -> C:\Spiele\DieTuttles\DieTuttles_og.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Druids Operation Mistelzweig.lnk -> C:\Spiele\DruidsOperationMistelzweig\DruidsOperationMistelzweig_og.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Frankenstein - Meister des Schreckens.lnk -> C:\Spiele\1Downloads\FrankensteinMeisterDesSchreckens\FrankensteinMeisterDesSchreckens_og.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Haus der 1000 Türen 2 Das Juwel des Zarathustra.lnk -> C:\Spiele\HausDer1000Tueren2\HausDer1000Tueren2_og.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Haus der 1000 Türen Familiengeheimnisse.lnk -> C:\Spiele\HausDer1000Tueren\HausDer1000Tueren_og.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Kingdom Chronicles Königreich in Gefahr.lnk -> C:\Spiele\KingdomChronicles\KingdomChronicles_og.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Moai Erschaffe deinen Traum.lnk -> C:\Spiele\MoaiErschaffeDeinenTraum\MoaiErschaffeDeinenTraum_og.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Sherlock Holmes und der Hund der Baskervilles.lnk -> C:\Spiele\SherlockHolmesHundBaskervilles\SherlockHolmesHundBaskervilles_og.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Sky Taxi 4 Streng Geheim.lnk -> C:\Spiele\SkyTaxi4StrengGeheim\SkyTaxi4StrengGeheim_og.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger 2\Anleitung.lnk -> C:\Spiele\Game\Anleitung.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger 2\Schatzjäger 2 spielen.lnk -> C:\Spiele\Game\Schatzjäger2.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger\Anleitung.lnk -> C:\Spiele\Morrhuhn Schatzjäger 1\Anleitung.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger\Moorhuhn im Internet.lnk -> C:\Spiele\Morrhuhn Schatzjäger 1\Moorhuhn im Internet.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger\phenomedia im Internet.lnk -> C:\Spiele\Morrhuhn Schatzjäger 1\phenomedia im Internet.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger\Schatzjäger deinstallieren.lnk -> C:\Spiele\Morrhuhn Schatzjäger 1\Uninstall.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger\Schatzjäger spielen.lnk -> C:\Spiele\Morrhuhn Schatzjäger 1\Schatzjäger.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in trouble ...again! - Demo\ReadMe.lnk -> C:\Spiele)\Santa Claus in trouble ...again! - Demo\ReadMe.txt (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in trouble ...again! - Demo\Santa Claus in trouble ...again! - Demo deinstallieren.lnk -> C:\Spiele)\Santa Claus in trouble ...again! - Demo\Uninstall\UNWISE.EXE (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in trouble ...again! - Demo\Santa Claus in trouble ...again! - Demo.lnk -> C:\Spiele)\Santa Claus in trouble ...again! - Demo\Run\SC2.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in trouble ...again! - Demo\www.cdv.de.lnk -> C:\Spiele)\Santa Claus in trouble ...again! - Demo\Misc\publisherweb.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in trouble ...again! - Demo\www.joymania.de.lnk -> C:\Spiele)\Santa Claus in trouble ...again! - Demo\Misc\developerweb.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in trouble ...again! - Demo\www.santaclaus2.de.lnk -> C:\Spiele)\Santa Claus in trouble ...again! - Demo\Misc\gameweb.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in Trouble\Liesmich.doc.lnk -> C:\Program Files (x86)\Spiele\Santa Claus in Trouble\Liesmich.doc (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in Trouble\Liesmich.pdf.lnk -> C:\Program Files (x86)\Spiele\Santa Claus in Trouble\Liesmich.pdf (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in Trouble\Santa Claus in Trouble rausschmeißen.lnk -> C:\Program Files (x86)\Spiele\Santa Claus in Trouble\Uninstall\UNWISE.EXE (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in Trouble\Santa Claus in Trouble.lnk -> C:\Program Files (x86)\Spiele\Santa Claus in Trouble\SantaClausInTrouble.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in Trouble\www.cdv.de.lnk -> C:\Program Files (x86)\Spiele\Santa Claus in Trouble\cdv.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in Trouble\www.joymania.de.lnk -> C:\Program Files (x86)\Spiele\Santa Claus in Trouble\joymania.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\Turtix\Turtix deinstallieren.lnk -> K:\Purplehills\Turtix\UNWISE.EXE (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\Turtix\Turtix.lnk -> K:\Purplehills\Turtix\Turtix.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\Tiger Eye\Tiger Eye deinstallieren.lnk -> C:\Spiele\1Sammlung\Tiger Eye\UNWISE.EXE ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\Tiger Eye\Tiger Eye.lnk -> C:\Spiele\1Sammlung\Tiger Eye\Tiger Eye.exe (PassionFruit Games)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\Jumpin'Jack\Jumpin'Jack deinstallieren.lnk -> K:\Purplehills\Jumpin'Jack\UNWISE.EXE (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\Jumpin'Jack\Jumpin'Jack.lnk -> K:\Purplehills\Jumpin'Jack\Jumpin'Jack.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\BestOfWin8\MiniGolfPro\MiniGolfPro deinstallieren.lnk -> C:\Spiele\MiniGolfPro\UNWISE.EXE ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\BestOfWin8\MiniGolfPro\MiniGolfPro.lnk -> C:\Spiele\MiniGolfPro\MiniGolfPro.exe (SunnyGamesLLC)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\BestOfWin8\Crazy Barrels\Crazy Barrels deinstallieren.lnk -> C:\Spiele\Crazy Barrels\UNWISE.EXE ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\BestOfWin8\Crazy Barrels\Crazy Barrels.lnk -> C:\Spiele\Crazy Barrels\crazy barrels.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\BestOfWin8\3D Bowling\3D Bowling deinstallieren.lnk -> C:\Spiele\3D Bowling\UNWISE.EXE ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\BestOfWin8\3D Bowling\3D Bowling.lnk -> C:\Spiele\3D Bowling\3D Bowling.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\phenomedia\Moorhuhn Winter\Moorhuhn Winter deinstallieren.lnk -> C:\Spiele\Moorhuhn Winter\uninstaller.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\phenomedia\Moorhuhn Winter\Moorhuhn Winter spielen.lnk -> C:\Spiele\Moorhuhn Winter\MoorhuhnWinter.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\phenomedia\Moorhuhn Winter\Spielkiste.lnk -> C:\Program Files (x86)\Einfach_Spielen\spielkiste.exe (phenomedia publishing gmbh)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\phenomedia\Moorhuhn Wanted\Moorhuhn Wanted deinstallieren.lnk -> C:\Spiele\Moorhuhn Wanted\uninstaller.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\phenomedia\Moorhuhn Wanted\Moorhuhn Wanted spielen.lnk -> C:\Spiele\Moorhuhn Wanted\MHW-XXL.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\phenomedia\Moorhuhn Wanted\Spielkiste.lnk -> C:\Program Files (x86)\Einfach_Spielen\spielkiste.exe (phenomedia publishing gmbh)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Phantasmat - Eisiger Gipfel Sammleredition\Spiel Phantasmat - Eisiger Gipfel Sammleredition.lnk -> C:\Spiele\Phantasmat - Eisiger Gipfel Sammleredition\launchgame.bfg (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pflanzen gegen Zombies\Pflanzen gegen Zombies\Liesmich Ansehen.lnk -> C:\Spiele\Pflanzen gegen Zombies\Plants vs. Zombies\liesmich.html (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pflanzen gegen Zombies\Pflanzen gegen Zombies\Pflanzen gegen Zombies Deinstallieren.lnk -> C:\Spiele\Pflanzen gegen Zombies\Plants vs. Zombies\PopUninstall.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pflanzen gegen Zombies\Pflanzen gegen Zombies\Spiel Pflanzen gegen Zombies.lnk -> C:\Spiele\Pflanzen gegen Zombies\Plants vs. Zombies\PlantsVsZombies.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0\OpenOffice Base.lnk -> C:\Program Files (x86)\OpenOffice 4\program\sbase.exe (Apache Software Foundation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0\OpenOffice Calc.lnk -> C:\Program Files (x86)\OpenOffice 4\program\scalc.exe (Apache Software Foundation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0\OpenOffice Draw.lnk -> C:\Program Files (x86)\OpenOffice 4\program\sdraw.exe (Apache Software Foundation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0\OpenOffice Impress.lnk -> C:\Program Files (x86)\OpenOffice 4\program\simpress.exe (Apache Software Foundation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0\OpenOffice Math.lnk -> C:\Program Files (x86)\OpenOffice 4\program\smath.exe (Apache Software Foundation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0\OpenOffice Writer.lnk -> C:\Program Files (x86)\OpenOffice 4\program\swriter.exe (Apache Software Foundation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0\OpenOffice.lnk -> C:\Program Files (x86)\OpenOffice 4\program\soffice.exe (Apache Software Foundation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\GeForce Experience.lnk -> C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\LaunchGFExperience.exe (NVIDIA Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\3D Vision Photo Viewer.lnk -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstview.exe (NVIDIA Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nightfall Mysteries - Die Ashburg Verschwörung\Die Ashburg Verschwörung deinstallieren.lnk -> C:\Spiele\Nightfall Mysteries - Die Ashburg Verschwörung\unins000.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nightfall Mysteries - Die Ashburg Verschwörung\Die Ashburg Verschwörung.lnk -> C:\Spiele\Nightfall Mysteries - Die Ashburg Verschwörung\Die Ashburg-Verschwörung.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\Silverlight.Configuration.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Create Recovery Disc.lnk -> C:\Windows\System32\recdisc.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Remote Assistance.lnk -> C:\Windows\System32\msra.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logon Screen\Logon Screen.lnk -> C:\Program Files\Logon Screen\Logon Screen.exe (Daniel Rebelo)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IcoFX 1.6\IcoFX on the Web.lnk -> C:\Program Files (x86)\IcoFX 1.6\IcoFX.url ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IcoFX 1.6\IcoFX.lnk -> C:\Program Files (x86)\IcoFX 1.6\IcoFX.exe (Attila Kovrig)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IcoFX 1.6\Uninstall\Uninstall IcoFX.lnk -> C:\Program Files (x86)\IcoFX 1.6\unins000.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Deskjet 1050 J410 series\Druckereinrichtung & -software.lnk -> C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\USBSetupLauncher.exe (Hewlett-Packard Co.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Deskjet 1050 J410 series\Hilfe.lnk -> C:\Program Files (x86)\HP\HP Deskjet 1050 J410 series\bin\HelpViewer\hpqlpvwr.exe (Hewlett-Packard Co.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Deskjet 1050 J410 series\HP Scan.lnk -> C:\Program Files (x86)\HP\HP Deskjet 1050 J410 series\bin\HPScan.exe (Hewlett-Packard Co.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Deskjet 1050 J410 series\Shop für Zubehör.lnk -> C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\hpqDTSS.exe (Hewlett-Packard Co.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Deskjet 1050 J410 series\Website für Produktsupport.lnk -> C:\Program Files\HP\HP Deskjet 1050 J410 series\ProductSupportShortcut.url ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Spiel Phantasmat - Eisiger Gipfel Sammleredition.lnk -> C:\Spiele\Phantasmat - Eisiger Gipfel Sammleredition\launchgame.bfg (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake\Freemake Video Converter.lnk -> C:\Program Files (x86)\TORYA\Freemake\Freemake Video Converter\FreemakeVideoConverter.exe (Freemake)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Folderico\Folderico.lnk -> C:\Program Files (x86)\Folderico\Folderico.exe (Shedko software)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Folderico\Uninstall.lnk -> C:\Program Files (x86)\Folderico\uninst.exe (Shedko ( www.softq.org ))

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fishdom 2 Deluxe\Fishdom 2 Deluxe entfernen.lnk -> C:\Spiele\Fishdom 2 Deluxe\unins000.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fishdom 2 Deluxe\Fishdom 2 Deluxe.lnk -> C:\Spiele\Fishdom 2 Deluxe\Fishdom 2 Deluxe.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fishdom 2 Deluxe\Play More Playrix Games!.lnk -> C:\Spiele\Fishdom 2 Deluxe\homepage.url ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Deinstallieren.lnk -> C:\Program Files (x86)\Emsisoft Anti-Malware\unins000.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Emsisoft Anti-Malware.lnk -> C:\Program Files (x86)\Emsisoft Anti-Malware\a2start.exe (Emsisoft Ltd)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Emsisoft Homepage.lnk -> C:\Program Files (x86)\Emsisoft Anti-Malware\Emsisoft.url ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Hilfe.lnk -> C:\Program Files (x86)\Emsisoft Anti-Malware\de-de.chm ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\DVDVideoSoft Free Studio.lnk -> C:\Program Files (x86)\Common Files\DVDVideoSoft\FreeStudioManager.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Log Report.lnk -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\DVSSysReport.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Premium Membership.lnk -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\PremiumMembershipOffer.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Uninstall.lnk -> C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\Uninstall.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Audio Converter.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Audio Converter\FreeAudioConverter.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Audio Editor.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Audio Editor\FreeAudioEditor.exe (Digital Wave Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Coub Download.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Coub Download\FreeCoubDownload.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Dailymotion Download.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Dailymotion Download\FreeDailymotionDownload.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free DVD Video Burner.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free DVD Video Burner\FreeDVDVideoBurner.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free DVD Video Converter.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free DVD Video Converter\FreeDVDVideoConverter.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free GIF Maker.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free GIF Maker\FreeGIFMaker.exe (Digital Wave Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Image Convert and Resize.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Image Convert And Resize\FreeImageConvertAndResize.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Instagram Download.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Instagram Download\FreeInstagramDownload.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free MP4 Video Converter.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free MP4 Video Converter\FreeMP4VideoConverter.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free NicoVideo Download.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free NicoVideo Download\FreeNicoVideoDownload.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Screen Video Recorder.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Screen Video Recorder\FreeScreenVideoRecorder.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Torrent Download.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Video Editor.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Video Editor\FreeVideoEditor.exe (Digital Wave Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Video Flip and Rotate.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Video Flip And Rotate\FreeVideoFlipAndRotate.exe (Digital Wave Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Video to DVD Converter.lnk -> C:\Program Files (x86)\Torya\DVDVideoSoft\Free DVD Video Burner\FreeVideoToDVDConverter.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Video to JPG Converter.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Video to JPG Converter\FreeVideoToJPGConverter.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Video to MP3 Converter.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Video to MP3 Converter\FreeVideoToMP3Converter.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free YouTube Download.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free YouTube Download\FreeYTVDownloader.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free YouTube to DVD Converter.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free YouTube to DVD Converter\FreeYouTubeToDVDConverter.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free YouTube to MP3 Converter.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free YouTube Uploader.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free YouTube Uploader\FreeYouTubeUploader.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DigiPen\Perspective\Perspective.lnk -> C:\Spiele\DigiPen\Perspective\Perspective.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DigiPen\Perspective\Uninstall.lnk -> C:\Spiele\DigiPen\Perspective\uninst.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Die Sage von Odysseus\Die Sage von Odysseus deinstallieren.lnk -> C:\Spiele\Die Sage von Odysseus\unins000.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Die Sage von Odysseus\Die Sage von Odysseus starten.lnk -> C:\Spiele\Die Sage von Odysseus\game.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DeathMan\DeathMan.lnk -> C:\Spiele\DeathMan\game.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DeathMan\Uninstall DeathMan.lnk -> C:\Spiele\DeathMan\unins000.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Das Geheimnis des Berghotels\Das Geheimnis des Berghotels deinstallieren.lnk -> C:\Spiele\Das Geheimnis des Berghotels\unins000.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Das Geheimnis des Berghotels\Das Geheimnis des Berghotels starten.lnk -> C:\Spiele\Das Geheimnis des Berghotels\Game.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Das Geheimnis des Berghotels\Handbuch.lnk -> C:\Spiele\Das Geheimnis des Berghotels\Manual.pdf (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crazy Golf World Tour\Crazy Golf World Tour.lnk -> C:\Spiele\Crazy Golf World Tour\CrazyGolfWorldTour.exe (Tuna Technologies Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crazy Golf World Tour\Read Me.lnk -> C:\Spiele\Crazy Golf World Tour\ReadMe.txt ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cosmic Ball\Play Cosmic Ball.lnk -> C:\Spiele\Cosmic Ball\game.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cosmic Ball\Uninstall Cosmic Ball.lnk -> C:\Spiele\Cosmic Ball\unins000.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cosmic Ball\Visit MyRealGames.com.lnk -> C:\Spiele\Cosmic Ball\website.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Braid\Run Braid.lnk -> C:\Spiele\Braid\braid.exe (TODO: <Company name>)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Braid\Uninstall Braid.lnk -> C:\Spiele\Braid\unins000.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Billard2\Billard2 deinstallieren.lnk -> C:\Spiele\Billard2\unins000.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Billard2\Billard2.lnk -> C:\Spiele\Billard2\AmericanPool.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BabelSoft\Media Preview\Media Preview Configuration.lnk -> C:\Windows\Installer\{8680D34A-E765-4579-877F-DEA8FB174DA7}\Icon.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\displayswitch.lnk -> C:\Windows\System32\displayswitch.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sound Recorder.lnk -> C:\Windows\System32\SoundRecorder.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sticky Notes.lnk -> C:\Windows\System32\StikyNot.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sync Center.lnk -> C:\Windows\System32\mobsync.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\Windowspowershell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\ShapeCollector.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\TabTip.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Windows Journal.lnk -> C:\Program Files\Windows Journal\Journal.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Restore.lnk -> C:\Windows\System32\rstrui.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk -> C:\Windows\System32\migwiz\PostMig.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer.lnk -> C:\Windows\System32\migwiz\migwiz.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip File Manager.lnk -> C:\Program Files (x86)\7-Zip\7zFM.exe (Igor Pavlov)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip Help.lnk -> C:\Program Files (x86)\7-Zip\7-zip.chm ()

Shortcut: C:\Users\Besitzer\Links\Desktop.lnk -> C:\Users\Besitzer\Desktop ()

Shortcut: C:\Users\Besitzer\Links\Downloads.lnk -> C:\Users\Besitzer\Downloads ()

Shortcut: C:\Users\Besitzer\Links\Spiele.lnk -> C:\Spiele ()

Shortcut: C:\Users\Besitzer\Downloads\Software\Tor Browser\Start Tor Browser.lnk -> C:\Users\Besitzer\Downloads\Software\Tor Browser\Browser\firefox.exe (Mozilla Corporation)

Shortcut: C:\Users\Besitzer\Desktop\Aktuell\Tiger Eye - Verknüpfung.lnk -> C:\Spiele\1Sammlung\Tiger Eye\Tiger Eye.exe (PassionFruit Games)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Karten- und Brettspiele.lnk -> C:\Spiele\Karten- und Brettspiele\Start.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Setup QuickStart.lnk -> C:\Users\Besitzer\Eigener Kram\VirtualDJ\VirtualDJ 8 - Getting Started.pdf (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\User Guide.lnk -> C:\Users\Besitzer\Eigener Kram\VirtualDJ\VirtualDJ 8 - User Guide.pdf (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\VirtualDJ 8.lnk -> C:\Program Files (x86)\VirtualDJ\virtualdj8.exe (Atomix Productions)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker\README.lnk -> C:\Program Files (x86)\Unlocker\README.TXT ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker\Start Unlocker.lnk -> C:\Program Files (x86)\Unlocker\Unlocker.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker\Uninstall.lnk -> C:\Program Files (x86)\Unlocker\uninst.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker\Website.lnk -> C:\Program Files (x86)\Unlocker\Unlocker.url ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rondomedia\Love Over Death\Love Over Death Deinstallation.lnk -> C:\Spiele\Love Over Death\Uninstall.exe (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rondomedia\Love Over Death\Love Over Death.lnk -> C:\Spiele\Love Over Death\bloodCurse.exe (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Revo Uninstaller.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe (VS Revo Group)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Uninstall.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\uninst.exe (VS Revo Group Ltd.)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Website.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revo Uninstaller.url ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Phantasmat - Eisiger Gipfel Sammleredition\Phantasmat - Eisiger Gipfel Sammleredition deinstallieren.lnk -> C:\Spiele\Phantasmat - Eisiger Gipfel Sammleredition\Uninstall.exe (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Phantasmat - Eisiger Gipfel Sammleredition\Phantasmat - Eisiger Gipfel Sammleredition entschlüsseln.lnk -> C:\Spiele\Phantasmat - Eisiger Gipfel Sammleredition\UnlockGame.bfg (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mysteries of Olympus\Mysteries of Olympus.lnk -> C:\Spiele\Mysteries of Olympus\MysteriesOfOlympus.exe (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mysteries of Olympus\Uninstall Mysteries of Olympus.lnk -> C:\Spiele\Mysteries of Olympus\uninst.exe (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jump Jack\Bitte lesen!.lnk -> C:\Spiele\Jump Jack\Epilepsiewarnung.txt ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jump Jack\Jack starten.lnk -> C:\Spiele\Jump Jack\GameEngine.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jump Jack\Jump Jack deinstallieren.lnk -> C:\Spiele\Jump Jack\Uninstal.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jump Jack\read this!.lnk -> C:\Spiele\Jump Jack\EPILEPSY WARNING_UK.doc ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gehirntraining mit Dr. Kawashima\Dr Kawashima.lnk -> C:\Spiele\DrKawashima\DrKawashima.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gehirntraining mit Dr. Kawashima\Grafikeinstellungen.lnk -> C:\Spiele\DrKawashima\GraphicsSettings\GraphicsSettings.exe (BBG Entertainment GmbH)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gehirntraining mit Dr. Kawashima\Readme.lnk -> C:\Spiele\DrKawashima\readme_de.html ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gehirntraining mit Dr. Kawashima\Uninstall.lnk -> C:\Spiele\DrKawashima\Uninstall.exe (BBG Entertainment GmbH)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake\Uninstall\Uninstall Freemake Video Converter.lnk -> C:\Program Files (x86)\TORYA\Freemake\Freemake Video Converter\Uninstall\unins000.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\Check for updates.lnk -> C:\Users\Besitzer\AppData\Local\CodecDecoder\AutoUpdate.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\Uninstall.lnk -> C:\Users\Besitzer\AppData\Local\CodecDecoder\uninst.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\Website.lnk -> C:\Users\Besitzer\AppData\Local\CodecDecoder\CodecDecoder.url ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon\Amazon MP3-Downloader\Amazon MP3-Downloader.lnk -> C:\Users\Besitzer\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3Downloader.exe (Amazon.com)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon\Amazon MP3-Downloader\Uninstall Amazon MP3-Downloader.lnk -> C:\Users\Besitzer\AppData\Local\Program Files\Amazon\MP3 Downloader\Uninstall.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\IcoFX.lnk -> C:\Program Files (x86)\IcoFX 1.6\IcoFX.exe (Attila Kovrig)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PhotoScape.lnk -> C:\Program Files (x86)\PhotoScape\PhotoScape.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Autostart program viewer.lnk -> C:\Users\Besitzer\Downloads\Software\Autoruns\autoruns.exe (Sysinternals - www.sysinternals.com)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\BVS Solitaire Collection.lnk -> C:\Spiele\380 Solitaire Patiencen\CARDS.EXE (BVS Development Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CCleaner.lnk -> C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\DVDVideoSoft Free Studio.lnk -> C:\Program Files (x86)\Common Files\DVDVideoSoft\FreeStudioManager.exe (DVDVideoSoft Ltd.)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Freemake Video Converter.lnk -> C:\Program Files (x86)\TORYA\Freemake\Freemake Video Converter\FreemakeVideoConverter.exe (Freemake)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Earth.lnk -> C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe (Google)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Media Player Classic.lnk -> C:\Users\Besitzer\Downloads\Software\mplayerc.exe (Gabest)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Movie Maker.lnk -> C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\OpenOffice 4.1.0.lnk -> C:\Program Files (x86)\OpenOffice 4\program\soffice.exe (Apache Software Foundation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Pale Moon.lnk -> C:\Program Files (x86)\TORYA\BrowserPaleMoon\palemoon.exe (Moonchild Productions)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Plants vs. Zombies.lnk -> C:\Spiele\Pflanzen gegen Zombies\PlantsVsZombies.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\RossoRabbitInTrouble.lnk -> C:\Users\Besitzer\Downloads\Rosso Rabbit In Trouble - (Www.ApunKaGames.Net)\Game\RossoRabbitInTrouble.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Ski Challenge 16 starten.lnk -> C:\Spiele\SkiChallenge2016\Updater.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Start Tor Browser.lnk -> C:\Users\Besitzer\Downloads\Software\Tor Browser\Browser\firefox.exe (Mozilla Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Sysinternals Process Explorer.lnk -> C:\Users\Besitzer\Downloads\Software\processexplorer\procexp.exe (Sysinternals - www.sysinternals.com)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TCP-UDP endpoint viewer.lnk -> C:\Users\Besitzer\Downloads\Software\TCPView\Tcpview.exe (Sysinternals - www.sysinternals.com)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\VirtualDJ 8.lnk -> C:\Program Files (x86)\VirtualDJ\virtualdj8.exe (Atomix Productions)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Directory Statistics.lnk -> C:\Users\Besitzer\Downloads\Software\windirstat112\windirstat1_1_1-exe-ansi\windirstat.exe (Seifert)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Live Mail.lnk -> C:\Program Files (x86)\Windows Live\Mail\wlmail.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Bildschirmtastatur.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\HP Scan.lnk -> C:\Program Files (x86)\HP\HP Deskjet 1050 J410 series\bin\HPScan.exe (Hewlett-Packard Co.)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\IcoFX.lnk -> C:\Program Files (x86)\IcoFX 1.6\IcoFX.exe (Attila Kovrig)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Logon Screen.lnk -> C:\Program Files\Logon Screen\Logon Screen.exe (Daniel Rebelo)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Media Preview Configuration.lnk -> C:\Program Files\Media Preview\MediaPreviewConf.exe (BabelSoft)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\MP3Gain GUI.lnk -> C:\Program Files (x86)\MP3Gain\MP3GainGUI.exe (Snelg Enterprises)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Paint.lnk -> C:\Program Files (x86)\Paint.Net\PaintDotNet.exe (dotPDN LLC)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Revo Uninstaller.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe (VS Revo Group)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Windows DVD Maker.lnk -> C:\Program Files\DVD Maker\DVDMaker.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
 
 
 
 

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DefaultPrograms

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk -> C:\Windows\System32\wuapp.exe (Microsoft Corporation) -> startmenu

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Game Manager.lnk -> C:\Program Files (x86)\bfgclient\bfgclient.exe () -> -u

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) -> /showgadgets

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger 2\Schatzjäger 2 deinstallieren.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{1D0DD240-7752-48B5-A6EF-AC6509E16ABE}\Setup.exe" -l0x7  -uninstshortcut

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\3D Vision preview pack 1.lnk -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe (NVIDIA Corporation) -> /show

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\Disable 3D Vision.lnk -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe (NVIDIA Corporation) -> /disable

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\Enable 3D Vision.lnk -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe (NVIDIA Corporation) -> /enable

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Backup and Restore Center.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.BackupAndRestore

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Deskjet 1050 J410 series\Deinstallieren.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /qb /x {C3F12DD0-54B1-4B2B-A82B-FA43502BC550}

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Deskjet 1050 J410 series\HP Deskjet 1050 J410 series.lnk -> C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HP Deskjet 1050 J410 series.exe (Hewlett-Packard Co.) -> -Start UDCDevicePage

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow\Audio decoder configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> ffdshow.ax,configureAudio

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow\VFW configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> ff_vfw.dll,configureVFW

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow\Video decoder configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> ffdshow.ax,configure

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crazy Golf World Tour\Uninstall Crazy Golf World Tour.lnk -> C:\Windows\Crazy Golf World Tour\uninstall.exe () -> "/U:C:\Spiele\Crazy Golf World Tour\Uninstall\uninstall.xml"

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BabelSoft\Media Preview\Uninstall Media Preview.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /x {8680D34A-E765-4579-877F-DEA8FB174DA7}

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell Modules.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) -> -NoExit -ImportSystemModules

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation) -> /open

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Welcome Center.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> %SystemRoot%\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\VSRevoGroup\RevoUninstaller\ADCU\Tintenwarnungen überwachen - HP Deskjet 1050 J410 series.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> "C:\Program Files\HP\HP Deskjet 1050 J410 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN09Q2H2SQ05HW;CONNECTION=USB;MONITOR=1;

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Uninstall VirtualDJ 8.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /x {9ADBBA93-4625-4898-BB0D-BCE7EA9F8B4A}

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Run Hunter Mode.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe (VS Revo Group) -> -hunter

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\FFDShow Audio Decoder Configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> ffdshow.ax,configureAudio

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\FFDShow Decoder Configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> ffdshow.ax,configure

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\FFDShow Video Configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> ff_vfw.dll,configureVFW

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\Haali Splitter Configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> splitter.ax,Configure

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\VSFilter Subtitles Configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> vsfilter.dll,DirectVobSub

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\XviD Encoder Configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> xvidvfw.dll,Configure

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) ->  -extoff

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\HP Deskjet 1050 J410 series.lnk -> C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HP Deskjet 1050 J410 series.exe (Hewlett-Packard Co.) -> -Start UDCDevicePage

ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter
 
 

InternetURL: C:\Users\Administrator\Favorites\Links\Web Slice-Katalog.url -> hxxp://go.microsoft.com/fwlink/?LinkId=121315

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger 2\Moorhuhn im Internet.url -> hxxp://redirect.phenomedia.com/redirectMe.php?id=347

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger 2\phenomedia im Internet.url -> hxxp://redirect.phenomedia.com/redirectMe.php?id=346

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pflanzen gegen Zombies\Pflanzen gegen Zombies\Besuch PopCap.com.url -> hxxp://www.popcap.com/?cid=PVZGY_PC_RTL_DE

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nightfall Mysteries - Die Ashburg Verschwörung\rondomedia.url -> hxxp://www.rondomedia.de/

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logon Screen\Logon Screen im Internet.url -> hxxp://www.danielnetsoftware.com/

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crazy Golf World Tour\Oxygen Interactive Ltd.url -> hxxp://www.oxygenint.com

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BabelSoft\Media Preview\Media Preview on the Web.url -> hxxp://www.babelsoft.net/products.htm

InternetURL: C:\Users\Besitzer\Favorites\Zylom.url -> hxxp://www.zylom.com/

InternetURL: C:\Users\Besitzer\Favorites\Windows Live\Windows Live Gallery.url -> hxxp://go.microsoft.com/fwlink/?LinkId=70742

InternetURL: C:\Users\Besitzer\Favorites\Windows Live\Windows Live Ideas.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72700

InternetURL: C:\Users\Besitzer\Favorites\Windows Live\Windows Live Mail.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72681

InternetURL: C:\Users\Besitzer\Favorites\Windows Live\Windows Live Spaces.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72682

InternetURL: C:\Users\Besitzer\Favorites\MSN-Websites\MSN Auto.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72680

InternetURL: C:\Users\Besitzer\Favorites\MSN-Websites\MSN Fernsehen.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72659

InternetURL: C:\Users\Besitzer\Favorites\MSN-Websites\MSN Money.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72640

InternetURL: C:\Users\Besitzer\Favorites\MSN-Websites\MSN Nachrichten.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72636

InternetURL: C:\Users\Besitzer\Favorites\MSN-Websites\MSN Sport.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72635

InternetURL: C:\Users\Besitzer\Favorites\MSN-Websites\MSN.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72630

InternetURL: C:\Users\Besitzer\Favorites\Microsoft-Websites\IE-Site auf Microsoft.com.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72186

InternetURL: C:\Users\Besitzer\Favorites\Microsoft-Websites\Microsoft Deutschland GmbH.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72520

InternetURL: C:\Users\Besitzer\Favorites\Microsoft-Websites\Microsoft Store.url -> hxxp://go.microsoft.com/fwlink/?linkid=140813

InternetURL: C:\Users\Besitzer\Favorites\Microsoft-Websites\Microsoft Windows - Start.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72629

InternetURL: C:\Users\Besitzer\Favorites\Microsoft-Websites\Microsoft zu Hause.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72406

InternetURL: C:\Users\Besitzer\Favorites\Microsoft-Websites\Microsoft.com durchsuchen.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72893

InternetURL: C:\Users\Besitzer\Favorites\Microsoft-Websites\Site für IE Add-Ons.url -> hxxp://go.microsoft.com/fwlink/?LinkId=50893

InternetURL: C:\Users\Besitzer\Favorites\Microsoft Websites\IE Add-on site.url -> hxxp://go.microsoft.com/fwlink/?LinkId=50893

InternetURL: C:\Users\Besitzer\Favorites\Microsoft Websites\IE site on Microsoft.com.url -> hxxp://go.microsoft.com/fwlink/?LinkId=44661

InternetURL: C:\Users\Besitzer\Favorites\Microsoft Websites\Microsoft At Home.url -> hxxp://go.microsoft.com/fwlink/?LinkId=55424

InternetURL: C:\Users\Besitzer\Favorites\Microsoft Websites\Microsoft At Work.url -> hxxp://go.microsoft.com/fwlink/?LinkId=68920

InternetURL: C:\Users\Besitzer\Favorites\Microsoft Websites\Microsoft Store.url -> hxxp://go.microsoft.com/fwlink/?LinkId=140813

InternetURL: C:\Users\Besitzer\Favorites\Microsoft Websites\Welcome to IE9.url -> hxxp://go.microsoft.com/fwlink/?LinkId=191282

InternetURL: C:\Users\Besitzer\Favorites\Links\Vorgeschlagene Sites.url -> 0

InternetURL: C:\Users\Besitzer\Favorites\Links\Web Slice-Katalog.url -> hxxp://go.microsoft.com/fwlink/?LinkId=121315

InternetURL: C:\Users\Besitzer\AppData\Local\CodecDecoder\CodecDecoder.url -> hxxp://www.codec-decoder.com/
 

==================== Ende von Shortcut.txt =============================

Baba Yaga

19.01.2016 17:20

Anbei FRST-Editor.txt

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:18-01-2016

durchgeführt von Besitzer (Administrator) auf LAVAMAT (19-01-2016 15:02:24)

Gestartet von C:\Users\Besitzer\Desktop

Geladene Profile: Besitzer & Administrator (Verfügbare Profile: Besitzer & Administrator)

Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Emsisoft Ltd) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Emsisoft Ltd) C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-11-19] (Realtek Semiconductor)

HKLM\...\Run: [emsisoft anti-malware] => c:\program files (x86)\emsisoft anti-malware\a2guard.exe [9234848 2016-01-06] (Emsisoft Ltd)

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Policies\system: [LogonHoursAction] 2

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Policies\Explorer: [Neuer Wert #1] 0

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

ProxyServer: [S-1-5-21-2472162299-3273411272-195361004-1000] => 0.0.0.0:80

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{45271E45-F8EE-4CF0-8150-EB4AE68EA381}: [NameServer] 8.8.8.8,8.8.4.4

Tcpip\..\Interfaces\{45271E45-F8EE-4CF0-8150-EB4AE68EA381}: [DhcpNameServer] 192.168.1.1
 

Internet Explorer:

==================

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.google.de/

URLSearchHook: [S-1-5-21-2472162299-3273411272-195361004-500] ACHTUNG => Standard URLSearchHook fehlt

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-07-31] (Oracle Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-07-31] (Oracle Corporation)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
 

FireFox:

========

FF ProfilePath: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default

FF Homepage: google.de

FF NetworkProxy: "type", 0

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2016-01-04] ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [Keine Datei]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2016-01-04] ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1222172.dll [2015-11-19] (Adobe Systems, Inc.)

FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [Keine Datei]

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Windows\system32\npovshelper.dll [Keine Datei]

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [Keine Datei]

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [Keine Datei]

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-07-23] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-07-23] (NVIDIA Corporation)

FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll [Keine Datei]

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\TORYA\Program Files (x86)\VLC\npvlc.dll [Keine Datei]

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-2472162299-3273411272-195361004-1000: amazon.com/AmazonMP3DownloaderPlugin -> C:\Users\Besitzer\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll [2013-05-22] (Amazon.com, Inc.)

FF Extension: BetterPrivacy - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2016-01-06]

FF Extension: ImTranslator - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi [2016-01-06]

FF Extension: WEB.DE MailCheck - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\extensions\toolbar@web.de [2016-01-06]

FF Extension: NoScript - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-01-09]

FF Extension: CanvasBlocker - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\Extensions\CanvasBlocker@kkapsner.de.xpi [2016-01-10]

FF Extension: HTTPS-Everywhere - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\Extensions\https-everywhere@eff.org [2016-01-06]

FF Extension: ProxTube - Unblock YouTube - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\Extensions\ich@maltegoetz.de.xpi [2016-01-06]

FF Extension: IPFlood - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\Extensions\ipfuck@p4ul.info.xpi [2016-01-06]

FF Extension: Strict Pop-up Blocker - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\Extensions\jid1-P34HaABBBpOerQ@jetpack.xpi [2016-01-06]

FF Extension: Flash Control - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\Extensions\jid1-sNL73VCI4UB0Fw@jetpack.xpi [2016-01-16]

FF Extension: Flagfox - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2016-01-14]

FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 => nicht gefunden

FF HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Firefox\Extensions: [{9A207F60-3F1C-4ED0-972D-0A4CDFBFF803}] - C:\Users\Besitzer\AppData\Roaming\14001.011 => nicht gefunden
 

Chrome: 

=======

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [10900888 2016-01-06] (Emsisoft Ltd)

S4 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156400 2015-11-25] (NVIDIA Corporation)

S4 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872688 2015-11-25] (NVIDIA Corporation)

S4 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8133424 2015-11-25] (NVIDIA Corporation)

S4 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5915440 2015-11-25] (NVIDIA Corporation)

S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)

R1 epp; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\epp.sys [123992 2015-11-13] (Emsisoft Ltd)

S3 MEMSWEEP2; C:\Windows\system32\61DF.tmp [6144 2009-06-18] (Sophos Plc) [Datei ist nicht signiert]

R2 mi2c; C:\Windows\system32\drivers\mi2c.sys [20784 2015-03-15] (Nicomsoft Ltd.)

S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19760 2015-11-25] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-11-25] (NVIDIA Corporation)

S3 RTLE8023x64; C:\Windows\System32\DRIVERS\Rtenic64.sys [280344 2010-07-06] (Realtek Semiconductor Corporation                           )

U5 UnlockerDriver5; C:\Program Files (x86)\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-01-19 15:02 - 2016-01-19 15:02 - 00013162 _____ C:\Users\Besitzer\Desktop\FRST.txt

2016-01-19 15:00 - 2016-01-19 15:00 - 00000091 _____ C:\Windows\wininit.ini

2016-01-19 15:00 - 2016-01-19 15:00 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking

2016-01-19 14:57 - 2016-01-19 14:57 - 00014484 _____ C:\Users\Besitzer\Desktop\Scan Spybot Results.160119-1457.txt

2016-01-19 14:21 - 2016-01-19 14:22 - 47410800 _____ C:\Users\Besitzer\Downloads\Firefox Setup 43.0.4.exe

2016-01-19 14:18 - 2016-01-19 14:18 - 02370560 _____ (Farbar) C:\Users\Besitzer\Desktop\FRST64.exe

2016-01-19 14:08 - 2016-01-19 14:08 - 00000000 ____D C:\Program Files\Common Files\AV

2016-01-19 14:08 - 2016-01-19 14:08 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2

2016-01-19 14:06 - 2016-01-19 15:01 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy

2016-01-19 12:29 - 2016-01-19 12:29 - 00109552 _____ C:\Users\Besitzer\AppData\Local\GDIPFONTCACHEV1.DAT

2016-01-19 12:24 - 2016-01-19 12:24 - 00408952 _____ C:\Windows\system32\FNTCACHE.DAT

2016-01-15 05:30 - 2016-01-15 05:30 - 00030794 _____ C:\Users\Besitzer\Desktop\registry.txt

2016-01-15 03:49 - 2016-01-15 03:49 - 01754112 _____ C:\Users\Besitzer\Downloads\adwcleaner_5.029.exe

2016-01-14 17:49 - 2015-12-24 00:13 - 00387784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2016-01-14 17:49 - 2015-12-23 23:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2016-01-14 17:49 - 2015-12-12 19:31 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2016-01-14 17:49 - 2015-12-12 19:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2016-01-14 17:49 - 2015-12-12 19:15 - 02887168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2016-01-14 17:49 - 2015-12-12 19:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2016-01-14 17:49 - 2015-12-12 19:07 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2016-01-14 17:49 - 2015-12-12 19:02 - 20367360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2016-01-14 17:49 - 2015-12-12 19:02 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2016-01-14 17:49 - 2015-12-12 18:55 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2016-01-14 17:49 - 2015-12-12 18:44 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2016-01-14 17:49 - 2015-12-12 18:37 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2016-01-14 17:49 - 2015-12-12 18:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2016-01-14 17:49 - 2015-12-12 18:37 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2016-01-14 17:49 - 2015-12-12 18:36 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2016-01-14 17:49 - 2015-12-12 18:35 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2016-01-14 17:49 - 2015-12-12 18:33 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2016-01-14 17:49 - 2015-12-12 18:31 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2016-01-14 17:49 - 2015-12-12 18:30 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2016-01-14 17:49 - 2015-12-12 18:27 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2016-01-14 17:49 - 2015-12-12 18:27 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2016-01-14 17:49 - 2015-12-12 18:22 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2016-01-14 17:49 - 2015-12-12 18:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2016-01-14 17:49 - 2015-12-12 18:10 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2016-01-14 17:49 - 2015-12-12 18:10 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2016-01-14 17:49 - 2015-12-12 18:08 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2016-01-14 17:49 - 2015-12-12 18:00 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2016-01-14 17:49 - 2015-12-12 18:00 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2016-01-14 17:49 - 2015-12-12 17:54 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2016-01-14 17:49 - 2015-12-12 17:38 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2016-01-14 17:48 - 2015-12-12 19:54 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2016-01-14 17:48 - 2015-12-12 19:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2016-01-14 17:48 - 2015-12-12 19:15 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2016-01-14 17:48 - 2015-12-12 19:15 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2016-01-14 17:48 - 2015-12-12 19:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2016-01-14 17:48 - 2015-12-12 19:07 - 06051328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2016-01-14 17:48 - 2015-12-12 19:07 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2016-01-14 17:48 - 2015-12-12 19:03 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2016-01-14 17:48 - 2015-12-12 19:02 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2016-01-14 17:48 - 2015-12-12 19:02 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2016-01-14 17:48 - 2015-12-12 19:02 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2016-01-14 17:48 - 2015-12-12 18:51 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2016-01-14 17:48 - 2015-12-12 18:49 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2016-01-14 17:48 - 2015-12-12 18:40 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2016-01-14 17:48 - 2015-12-12 18:39 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2016-01-14 17:48 - 2015-12-12 18:37 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2016-01-14 17:48 - 2015-12-12 18:36 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2016-01-14 17:48 - 2015-12-12 18:28 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2016-01-14 17:48 - 2015-12-12 18:27 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2016-01-14 17:48 - 2015-12-12 18:25 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2016-01-14 17:48 - 2015-12-12 18:23 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2016-01-14 17:48 - 2015-12-12 18:21 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2016-01-14 17:48 - 2015-12-12 18:20 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2016-01-14 17:48 - 2015-12-12 18:19 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2016-01-14 17:48 - 2015-12-12 18:18 - 14457856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2016-01-14 17:48 - 2015-12-12 18:12 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2016-01-14 17:48 - 2015-12-12 18:09 - 04610560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2016-01-14 17:48 - 2015-12-12 18:06 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2016-01-14 17:48 - 2015-12-12 18:02 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2016-01-14 17:48 - 2015-12-12 18:00 - 12856320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2016-01-14 17:48 - 2015-12-12 18:00 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2016-01-14 17:48 - 2015-12-12 17:42 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2016-01-14 17:48 - 2015-12-12 17:41 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2016-01-14 17:48 - 2015-12-12 17:36 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2016-01-14 00:58 - 2016-01-14 00:58 - 00000493 _____ C:\Users\Besitzer\Desktop\Windows Update - Verknüpfung.lnk

2016-01-14 00:52 - 2016-01-14 00:52 - 00001421 _____ C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2016-01-14 00:37 - 2016-01-14 00:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2016-01-14 00:36 - 2016-01-14 00:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2016-01-14 00:36 - 2016-01-14 00:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2016-01-14 00:36 - 2016-01-14 00:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2016-01-14 00:36 - 2016-01-14 00:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2016-01-14 00:34 - 2016-01-14 00:34 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll

2016-01-14 00:34 - 2016-01-14 00:34 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll

2016-01-14 00:26 - 2016-01-14 00:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2016-01-14 00:24 - 2016-01-14 00:24 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2016-01-14 00:24 - 2016-01-14 00:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2016-01-13 18:29 - 2016-01-13 18:29 - 00000368 _____ C:\Users\Besitzer\Desktop\LAN-Verbindung - Verknüpfung.lnk

2016-01-13 01:03 - 2015-12-11 19:57 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2016-01-13 01:03 - 2015-12-08 22:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2016-01-13 01:03 - 2015-12-08 22:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

2016-01-13 01:03 - 2015-12-08 22:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL

2016-01-13 01:03 - 2015-12-08 22:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL

2016-01-13 01:03 - 2015-12-08 22:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL

2016-01-13 01:03 - 2015-12-08 22:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL

2016-01-13 01:03 - 2015-12-08 22:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll

2016-01-13 01:03 - 2015-12-08 22:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL

2016-01-13 01:03 - 2015-12-08 22:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL

2016-01-13 01:03 - 2015-12-08 22:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL

2016-01-13 01:03 - 2015-12-08 22:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL

2016-01-13 01:03 - 2015-12-08 22:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL

2016-01-13 01:03 - 2015-12-08 22:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL

2016-01-13 01:03 - 2015-12-08 22:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL

2016-01-13 01:03 - 2015-12-08 22:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL

2016-01-13 01:03 - 2015-12-08 22:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL

2016-01-13 01:03 - 2015-12-08 22:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL

2016-01-13 01:03 - 2015-12-08 22:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL

2016-01-13 01:03 - 2015-12-08 22:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax

2016-01-13 01:03 - 2015-12-08 22:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL

2016-01-13 01:03 - 2015-12-08 22:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL

2016-01-13 01:03 - 2015-12-08 22:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe

2016-01-13 01:03 - 2015-12-08 22:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe

2016-01-13 01:03 - 2015-12-08 22:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll

2016-01-13 01:03 - 2015-12-08 22:52 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2016-01-13 01:03 - 2015-12-08 22:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 01955328 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 01575424 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 01393152 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 01153024 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 01026048 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00292352 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe

2016-01-13 01:03 - 2015-12-08 20:07 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll

2016-01-13 01:03 - 2015-12-08 20:06 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax

2016-01-13 01:03 - 2015-12-08 20:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe

2016-01-13 01:03 - 2015-12-08 20:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll

2016-01-13 01:03 - 2015-12-08 19:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys

2016-01-13 01:03 - 2015-12-08 19:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2016-01-13 01:03 - 2015-12-08 19:11 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys

2016-01-13 01:03 - 2015-12-08 18:58 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2016-01-13 01:03 - 2015-11-16 21:17 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2016-01-13 01:03 - 2015-11-14 00:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll

2016-01-13 01:03 - 2015-11-14 00:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll

2016-01-13 01:03 - 2015-11-14 00:08 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe

2016-01-13 01:03 - 2015-11-13 23:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapistub.dll

2016-01-13 01:03 - 2015-11-13 23:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapi32.dll

2016-01-13 01:03 - 2015-11-13 23:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fixmapi.exe

2016-01-13 01:02 - 2015-12-30 20:08 - 05572544 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2016-01-13 01:02 - 2015-12-30 20:08 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2016-01-13 01:02 - 2015-12-30 20:08 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2016-01-13 01:02 - 2015-12-30 20:05 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2016-01-13 01:02 - 2015-12-30 20:02 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2016-01-13 01:02 - 2015-12-30 20:02 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2016-01-13 01:02 - 2015-12-30 20:02 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2016-01-13 01:02 - 2015-12-30 20:02 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2016-01-13 01:02 - 2015-12-30 20:02 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2016-01-13 01:02 - 2015-12-30 20:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2016-01-13 01:02 - 2015-12-30 20:01 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2016-01-13 01:02 - 2015-12-30 20:01 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2016-01-13 01:02 - 2015-12-30 20:01 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2016-01-13 01:02 - 2015-12-30 20:01 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2016-01-13 01:02 - 2015-12-30 20:01 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2016-01-13 01:02 - 2015-12-30 20:01 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2016-01-13 01:02 - 2015-12-30 20:01 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2016-01-13 01:02 - 2015-12-30 20:00 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2016-01-13 01:02 - 2015-12-30 19:59 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2016-01-13 01:02 - 2015-12-30 19:59 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2016-01-13 01:02 - 2015-12-30 19:59 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2016-01-13 01:02 - 2015-12-30 19:58 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2016-01-13 01:02 - 2015-12-30 19:58 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2016-01-13 01:02 - 2015-12-30 19:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2016-01-13 01:02 - 2015-12-30 19:57 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2016-01-13 01:02 - 2015-12-30 19:57 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2016-01-13 01:02 - 2015-12-30 19:55 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2016-01-13 01:02 - 2015-12-30 19:55 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2016-01-13 01:02 - 2015-12-30 19:55 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:47 - 03993536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2016-01-13 01:02 - 2015-12-30 19:47 - 03938240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2016-01-13 01:02 - 2015-12-30 19:44 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2016-01-13 01:02 - 2015-12-30 19:41 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2016-01-13 01:02 - 2015-12-30 19:41 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2016-01-13 01:02 - 2015-12-30 19:41 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2016-01-13 01:02 - 2015-12-30 19:41 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2016-01-13 01:02 - 2015-12-30 19:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2016-01-13 01:02 - 2015-12-30 19:41 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2016-01-13 01:02 - 2015-12-30 19:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2016-01-13 01:02 - 2015-12-30 19:41 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2016-01-13 01:02 - 2015-12-30 19:40 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2016-01-13 01:02 - 2015-12-30 19:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2016-01-13 01:02 - 2015-12-30 19:39 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2016-01-13 01:02 - 2015-12-30 19:39 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2016-01-13 01:02 - 2015-12-30 19:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2016-01-13 01:02 - 2015-12-30 19:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2016-01-13 01:02 - 2015-12-30 19:38 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2016-01-13 01:02 - 2015-12-30 19:38 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 18:57 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2016-01-13 01:02 - 2015-12-30 18:50 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2016-01-13 01:02 - 2015-12-30 18:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2016-01-13 01:02 - 2015-12-30 18:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2016-01-13 01:02 - 2015-12-30 18:43 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2016-01-13 01:02 - 2015-12-30 18:42 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2016-01-13 01:02 - 2015-12-30 18:42 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2016-01-13 01:02 - 2015-12-30 18:41 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2016-01-13 01:02 - 2015-12-30 18:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2016-01-13 01:02 - 2015-12-30 18:32 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2016-01-13 01:02 - 2015-12-30 18:32 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2016-01-13 01:02 - 2015-12-30 18:32 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2016-01-13 01:02 - 2015-12-30 18:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2016-01-13 01:02 - 2015-12-30 18:30 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll

2016-01-13 01:02 - 2015-12-30 18:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 18:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 18:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 18:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2016-01-11 20:01 - 2016-01-11 20:01 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\Moonchild Productions

2016-01-11 20:01 - 2016-01-11 20:01 - 00000000 ____D C:\Users\Besitzer\AppData\Local\Moonchild Productions

2016-01-07 10:19 - 2016-01-08 13:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2016-01-07 01:50 - 2015-07-23 01:46 - 00572232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2016-01-07 01:22 - 2016-01-07 01:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pflanzen gegen Zombies

2016-01-07 01:01 - 2016-01-07 01:01 - 00000000 ____D C:\Users\Besitzer\AppData\Local\NVIDIA

2016-01-07 01:01 - 2015-11-25 00:10 - 01828160 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

2016-01-07 01:01 - 2015-11-25 00:10 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll

2016-01-07 01:01 - 2015-11-25 00:10 - 01509824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2016-01-07 01:01 - 2015-11-25 00:10 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll

2016-01-07 01:01 - 2015-11-25 00:10 - 00112712 _____ C:\Windows\system32\NvRtmpStreamer64.dll

2016-01-07 01:00 - 2016-01-07 01:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2016-01-07 00:55 - 2015-11-25 00:10 - 01905272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435906.dll

2016-01-07 00:55 - 2015-11-25 00:10 - 01564792 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435906.dll

2016-01-07 00:55 - 2015-11-25 00:10 - 00072504 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll

2016-01-07 00:55 - 2015-11-25 00:10 - 00069416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

2016-01-07 00:55 - 2015-11-25 00:10 - 00050472 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys

2016-01-07 00:55 - 2015-07-23 05:06 - 15129192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2016-01-07 00:55 - 2015-07-23 05:06 - 03407144 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2016-01-07 00:55 - 2015-07-23 05:06 - 03008880 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2016-01-07 00:55 - 2015-07-23 05:06 - 01101856 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll

2016-01-07 00:46 - 2016-01-07 00:46 - 00000000 ____D C:\ProgramData\SlimWare Utilities, Inc

2016-01-06 22:43 - 2016-01-15 03:55 - 00000000 ___DC C:\AdwCleaner

2016-01-06 22:39 - 2016-01-14 00:06 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task

2016-01-06 22:38 - 2016-01-14 00:05 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2016-01-06 22:37 - 2016-01-06 22:37 - 00000000 ____D C:\Program Files (x86)\Adobe

2016-01-06 21:52 - 2016-01-08 13:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2015-12-23 19:41 - 2016-01-06 23:23 - 00000000 ____D C:\Users\Besitzer\Downloads\Scans

2015-12-23 01:20 - 2015-12-23 01:20 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\.marble

2015-12-21 23:50 - 2016-01-19 15:02 - 00000000 ___DC C:\FRST
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-01-19 15:01 - 2015-04-16 15:05 - 00000000 ____D C:\Program Files (x86)\TORYA

2016-01-19 15:00 - 2009-07-14 04:20 - 00000000 ____D C:\Windows

2016-01-19 14:03 - 2015-03-14 13:01 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware

2016-01-19 12:31 - 2009-07-14 05:45 - 00023712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2016-01-19 12:31 - 2009-07-14 05:45 - 00023712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2016-01-19 12:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf

2016-01-19 12:24 - 2011-04-01 10:01 - 00000000 ____D C:\ProgramData\NVIDIA

2016-01-19 12:24 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2016-01-19 05:37 - 2015-06-25 10:54 - 00007615 _____ C:\Users\Besitzer\AppData\Local\Resmon.ResmonCfg

2016-01-17 23:26 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

2016-01-15 15:57 - 2013-12-05 20:37 - 00000000 ___RD C:\Users\Besitzer\Desktop\Aktuell

2016-01-15 03:46 - 2013-05-03 18:55 - 00000000 ___RD C:\Users\Besitzer\Downloads\Software

2016-01-14 18:57 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2016-01-14 06:38 - 2010-10-01 17:28 - 00000000 ____D C:\Windows\Panther

2016-01-14 00:33 - 2012-05-02 14:36 - 00001450 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk

2016-01-13 06:25 - 2009-07-14 18:58 - 00699456 _____ C:\Windows\system32\perfh007.dat

2016-01-13 06:25 - 2009-07-14 18:58 - 00149596 _____ C:\Windows\system32\perfc007.dat

2016-01-13 06:25 - 2009-07-14 06:13 - 01620784 _____ C:\Windows\system32\PerfStringBackup.INI

2016-01-13 01:54 - 2012-08-13 18:21 - 00000000 ___RD C:\Users\Besitzer\Eigener Kram\Wissen

2016-01-13 01:53 - 2013-08-15 02:35 - 00000000 ____D C:\Windows\system32\MRT

2016-01-13 01:47 - 2015-08-12 09:46 - 143671360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2016-01-13 00:17 - 2015-04-16 23:43 - 00000000 ____D C:\Users\Administrator.LAVAMAT

2016-01-12 22:23 - 2011-11-29 18:17 - 00000000 ____D C:\Windows\pss

2016-01-11 15:49 - 2015-04-12 20:22 - 00002794 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC

2016-01-10 00:13 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF

2016-01-08 16:37 - 2012-04-26 03:20 - 00000000 ____D C:\Users\Besitzer\AppData\Local\Turtix

2016-01-07 19:21 - 2011-04-04 23:30 - 00000000 ____D C:\Users\Besitzer\AppData\LocalLow\Adobe

2016-01-07 01:51 - 2011-04-01 09:48 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2016-01-07 01:22 - 2014-09-04 20:07 - 00000000 ____D C:\ProgramData\PopCap Games

2016-01-07 01:22 - 2011-04-03 22:35 - 00000000 ___RD C:\Spiele

2016-01-07 01:22 - 2009-07-14 06:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2016-01-07 01:01 - 2011-11-10 19:49 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2016-01-07 01:01 - 2011-04-01 09:48 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2016-01-07 01:00 - 2014-07-16 20:22 - 00000000 ____D C:\Users\Besitzer\AppData\Local\NVIDIA Corporation

2016-01-07 00:56 - 2015-12-18 02:40 - 00000000 ____D C:\ProgramData\Package Cache

2016-01-06 22:39 - 2014-08-19 21:02 - 00000000 ____D C:\Users\Besitzer\AppData\Local\Adobe

2016-01-06 22:28 - 2011-04-01 22:44 - 00000000 ____D C:\ProgramData\Adobe

2016-01-06 21:38 - 2011-04-01 10:03 - 00000000 ___RD C:\Users\Besitzer

2016-01-06 21:37 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration

2016-01-04 16:42 - 2012-04-01 14:01 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2016-01-04 16:42 - 2011-11-20 22:39 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2016-01-01 02:05 - 2015-09-10 23:43 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\Media Player Classic

2015-12-29 23:31 - 2013-04-08 20:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow

2015-12-29 21:22 - 2014-09-04 04:30 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\Origin

2015-12-29 21:21 - 2014-09-04 04:30 - 00000000 ____D C:\Users\Besitzer\AppData\Local\Origin

2015-12-23 01:17 - 2014-03-24 20:51 - 00000000 ____D C:\Program Files (x86)\Google

2015-12-23 01:17 - 2011-12-05 17:53 - 00000000 ____D C:\Users\Besitzer\AppData\Local\Google
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2011-04-01 23:17 - 2011-11-20 15:42 - 0000146 _____ () C:\Users\Besitzer\AppData\Roaming\default.rss

2015-04-17 15:14 - 2015-04-17 15:15 - 9482240 _____ () C:\Users\Besitzer\AppData\Local\1B902E7A_stp.CIS

2015-04-17 15:14 - 2015-04-17 15:14 - 0000442 _____ () C:\Users\Besitzer\AppData\Local\1B902E7A_stp.CIS.part

2015-04-17 15:07 - 2015-04-17 15:07 - 0043321 _____ () C:\Users\Besitzer\AppData\Local\5079FE7D_stp.CIS

2015-04-17 15:07 - 2015-04-17 15:14 - 0000293 _____ () C:\Users\Besitzer\AppData\Local\5079FE7D_stp.CIS.part

2015-04-17 14:58 - 2015-04-17 14:58 - 0385602 _____ () C:\Users\Besitzer\AppData\Local\5D515C96_stp.CIS

2015-04-17 14:58 - 2015-04-17 15:13 - 0000220 _____ () C:\Users\Besitzer\AppData\Local\5D515C96_stp.CIS.part

2015-04-17 15:07 - 2015-04-17 15:09 - 15769600 _____ () C:\Users\Besitzer\AppData\Local\784ED66F_stp.CIS

2015-04-17 15:07 - 2015-04-17 15:07 - 0000442 _____ () C:\Users\Besitzer\AppData\Local\784ED66F_stp.CIS.part

2013-12-19 02:46 - 2013-12-19 02:46 - 0005632 _____ () C:\Users\Besitzer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2015-06-25 10:54 - 2016-01-19 05:37 - 0007615 _____ () C:\Users\Besitzer\AppData\Local\Resmon.ResmonCfg

2013-12-01 22:01 - 2013-12-01 22:01 - 0000057 _____ () C:\ProgramData\Ament.ini
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2016-01-17 23:19
 

==================== Ende von FRST.txt ============================

Deathkid535

22.01.2016 13:22

:hallo:

Mein Name ist Dennis und ich werde dir bei der Bereinigung helfen.

Bitte beachte, dass es ein paar Regeln gibt:

Bitte lies meine Posts komplett durch bevor du sie abarbeitest
Wenn ein Problem auftauchen sollte, unterbreche deine Arbeit, poste die entstandenen Logs und schildere dieses so genau wie möglich.
Bitte kein Crossposting
Installiere oder Deinstalliere keine Software ohne Aufforderung
Bitte verwende nur die Tools welche hier im Thread erwähnt werden
Antworte innerhalb von 24h um eine sinnvolle Bereinigung zu ermöglichen
Poste die Logs immer in CODE-Tags (#-Button), zur Not die Logs einfach aufteilen

Sollte ich nicht innerhalb von 48h antworten, schreibe mir eine PM!

Sry ist uns wohl durchgerutscht. Hast du noch Logs von JRT, AdwCleaner, MBAM etc mit Funden aus den letzten paar Tagen?

Baba Yaga

22.01.2016 17:21

Hallo Dennis und Hallelujah! Ich dachte schon, es hilft mir keiner, also hilf' Dir selbst, deshalb habe ich AdwCleaner, JRT, MBAM, Emsisoft Security Kit, SpyBot und Eset ausgeführt und außerdem Schritt für Schritt (mit Hilfe von Google) die Registry durchsucht mit Funden. Außerdem habe ich, da der PC und das Internet (speziell youtube) immer langsamer wurden, jeden Tag wie eine Wahnsinnige den Task-Manager, Process Explorer und TCP-View beobachtet...
Jetzt ist die Situation folgende: Auch Christian Peters vom Emsisoft-Team hat sich endlich (per Mail) gemeldet, mit der Bitte ihm die Logs-DB3-Datei zu schicken. Habe ich gemacht.
Wennn ich Dich jetzt auch noch bemühe, dann ist das wohl Crossposting. Sag' mir bitte, was jetzt zu tun ist. (Schicke Dir erst mal nichts.)

LG
Baba Yaga

Deathkid535

22.01.2016 20:42

Hi,

wenn dir der Emsisoft Support hilft dann passt das :). Falls es sonst noch was gibt kannst du dich hier aber immer gerne melden :). Und sorry noch mal dass wir den Thread nicht gesehen haben.

Baba Yaga

23.01.2016 00:00

Hallo Dennis,

lass' uns bitte weiter machen, empfiehlt auch CP von Emsisoft.
Soll ich Dir die vorhandenen Logs schicken?
Und bitte sag mir, was Du von folgenden "Funden" hälst:

Datei: ament.ini und
Ordner: boost_interprocess mit Unterordner: 20150622163256.374800

Außerdem sind die Browser-Probleme heftiger geworden, manchmal tut sich gar nichts mehr und auch die Maus reagiert nicht. Auch das Flackern ist jetzt auffälliger.

Danke schon mal vorhab für die Hilfe,
Gruß,
Baba Yaga

Deathkid535

23.01.2016 00:02

Ja dann schick mal die Logs bitte. Zu den Funden kann ich so nicht viel sagen, muss dazu das ganze Log sehen :)

Baba Yaga

23.01.2016 00:20

Die beiden Sachen habe ich selber gefunden beim Aufräumen sozusagen.
Hier die Logs:

Code:

Search results from Spybot - Search & Destroy
 

19.01.2016 14:57:59

Scan took 00:31:42.

40 items found.
 

Delta.Toolbar: [SBI $04AEAE14] User settings (Registry Value, nothing done)

  HKEY_USERS\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\bProtectNewTabPageShow
 

Delta.Toolbar: [SBI $0760E887] User settings (Registry Value, nothing done)

  HKEY_USERS\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\bProtectShowTabsWelcome
 

WildTangent: [SBI $3A3BDC07] Program directory (Directory, nothing done)

  C:\Windows\wt\
 

WildTangent: [SBI $76830867] Program directory (Directory, nothing done)

  C:\Windows\wt\wtupdates\
 

WildTangent: [SBI $6599E86A] Program directory (Directory, nothing done)

  C:\Windows\wt\wtupdates
 

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)

  HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
 

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)

  HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
 

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)

  HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
 

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)

  HKEY_USERS\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
 

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)

  HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
 

MS Media Player: [SBI $5C51E349] Client ID (Registry Change, nothing done)

  HKEY_USERS\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\MediaPlayer\Player\Settings\Client ID
 

MS Direct3D: [SBI $7FB7B83F] Most recent application (Registry Change, nothing done)

  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Direct3D\MostRecentApplication\Name
 

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)

  HKEY_USERS\.DEFAULT\Software\Microsoft\Direct3D\MostRecentApplication\Name
 

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)

  HKEY_USERS\S-1-5-20\Software\Microsoft\Direct3D\MostRecentApplication\Name
 

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)

  HKEY_USERS\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Direct3D\MostRecentApplication\Name
 

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)

  HKEY_USERS\S-1-5-18\Software\Microsoft\Direct3D\MostRecentApplication\Name
 

MS DirectDraw: [SBI $EB49D5AF] Most recent application (Registry Change, nothing done)

  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name
 

MS Regedit: [SBI $C3B62FC1] Recent open key (Registry Change, nothing done)

  HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit\LastKey
 

MS Regedit: [SBI $C3B62FC1] Recent open key (Registry Change, nothing done)

  HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit\LastKey
 

Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)

  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources
 

Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)

  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources
 

Windows.OpenWith: [SBI $9FC5618C] Open with list - .ANI extension (Registry Key, nothing done)

  HKEY_USERS\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ANI\OpenWithList
 

Windows.OpenWith: [SBI $F7204896] Open with list - .AVI extension (Registry Key, nothing done)

  HKEY_USERS\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AVI\OpenWithList
 

Windows.OpenWith: [SBI $DCEE25EC] Open with list - .BAK extension (Registry Key, nothing done)

  HKEY_USERS\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.BAK\OpenWithList
 

Windows.OpenWith: [SBI $691C1B44] Open with list - .BIN extension (Registry Key, nothing done)

  HKEY_USERS\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.BIN\OpenWithList
 

Windows.OpenWith: [SBI $A1C94E79] Open with list - .BMP extension (Registry Key, nothing done)

  HKEY_USERS\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.BMP\OpenWithList
 

Windows.OpenWith: [SBI $3A7F8A99] Open with list - .BZ2 extension (Registry Key, nothing done)

  HKEY_USERS\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.BZ2\OpenWithList
 

Windows.OpenWith: [SBI $63036C95] Open with list - .CAB extension (Registry Key, nothing done)

  HKEY_USERS\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CAB\OpenWithList
 

Windows.OpenWith: [SBI $7E93AD81] Open with list - .CSS extension (Registry Key, nothing done)

  HKEY_USERS\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CSS\OpenWithList
 

Windows.OpenWith: [SBI $ECC28BDF] Open with list - .CSV extension (Registry Key, nothing done)

  HKEY_USERS\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CSV\OpenWithList
 

Windows Explorer: [SBI $D20DA0AD] Recent file global history (Registry Key, nothing done)

  HKEY_USERS\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs
 

Windows Explorer: [SBI $85C2C910] Last Copy/MoveTo folder (Registry Value, nothing done)

  HKEY_USERS\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\CopyMoveTo\LastFolder
 

Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)

  HKEY_USERS\S-1-5-20\Software\Microsoft\Windows Media\WMSDK\General\ComputerName
 

Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)

  HKEY_USERS\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Windows Media\WMSDK\General\ComputerName
 

Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)

  HKEY_USERS\S-1-5-20\Software\Microsoft\Windows Media\WMSDK\General\UniqueID
 

Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)

  HKEY_USERS\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Windows Media\WMSDK\General\UniqueID
 

Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)

  HKEY_USERS\S-1-5-20\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber
 

Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)

  HKEY_USERS\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber
 

Cache: [SBI $49804B54] Browser: Cache (2) (Browser: Cache, nothing done)

  
 

Verlauf: [SBI $49804B54] Browser: History (8) (Browser: History, nothing done)

  
 
 

--- Spybot - Search & Destroy version: 2.4.40.131  DLL (build: 20140425) ---
 

2014-06-24 blindman.exe (2.4.40.151)

2014-06-24 explorer.exe (2.4.40.181)

2014-06-24 SDBootCD.exe (2.4.40.109)

2014-06-24 SDCleaner.exe (2.4.40.110)

2014-06-24 SDDelFile.exe (2.4.40.94)

2013-06-18 SDDisableProxy.exe

2014-06-24 SDFiles.exe (2.4.40.135)

2014-06-24 SDFileScanHelper.exe (2.4.40.1)

2014-06-24 SDFSSvc.exe (2.4.40.217)

2014-06-24 SDHelp.exe (2.4.40.1)

2014-04-25 SDHookHelper.exe (2.3.39.2)

2014-04-25 SDHookInst32.exe (2.3.39.2)

2014-04-25 SDHookInst64.exe (2.3.39.2)

2014-06-24 SDImmunize.exe (2.4.40.130)

2014-06-24 SDLogReport.exe (2.4.40.107)

2014-06-24 SDOnAccess.exe (2.4.40.11)

2014-06-24 SDPESetup.exe (2.4.40.3)

2014-06-24 SDPEStart.exe (2.4.40.86)

2014-06-24 SDPhoneScan.exe (2.4.40.28)

2014-06-24 SDPRE.exe (2.4.40.22)

2014-06-24 SDPrepPos.exe (2.4.40.15)

2014-06-24 SDQuarantine.exe (2.4.40.103)

2014-06-24 SDRootAlyzer.exe (2.4.40.116)

2014-06-24 SDSBIEdit.exe (2.4.40.39)

2014-06-24 SDScan.exe (2.4.40.181)

2014-06-24 SDScript.exe (2.4.40.54)

2014-06-24 SDSettings.exe (2.4.40.139)

2014-06-24 SDShell.exe (2.4.40.2)

2014-06-24 SDShred.exe (2.4.40.108)

2014-06-24 SDSysRepair.exe (2.4.40.102)

2014-06-24 SDTools.exe (2.4.40.157)

2014-06-24 SDTray.exe (2.4.40.129)

2014-06-27 SDUpdate.exe (2.4.40.94)

2014-06-27 SDUpdSvc.exe (2.4.40.77)

2014-06-24 SDWelcome.exe (2.4.40.130)

2014-04-25 SDWSCSvc.exe (2.3.39.2)

2015-03-25 spybotsd2-install-av-update.exe (2.4.40.0)

2014-05-20 spybotsd2-install-bdcore-update.exe (2.3.39.0)

2014-07-31 spybotsd2-translation-esx.exe

2013-06-19 spybotsd2-translation-frx.exe

2015-03-25 spybotsd2-translation-hrx.exe

2014-08-25 spybotsd2-translation-hux2.exe

2014-10-01 spybotsd2-translation-nlx2.exe

2014-11-05 spybotsd2-translation-ukx.exe

2015-07-28 spybotsd2-windows-upgrade-installer.exe (1.4.0.0)

2016-01-19 unins000.exe (51.1052.0.0)

1999-12-02 xcacls.exe

2012-08-23 borlndmm.dll (10.0.2288.42451)

2012-09-05 DelZip190.dll (1.9.0.107)

2012-09-10 libeay32.dll (1.0.0.4)

2012-09-10 libssl32.dll (1.0.0.4)

2014-04-25 NotificationSpreader.dll

2014-06-24 SDAdvancedCheckLibrary.dll (2.4.40.98)

2014-04-25 SDAV.dll

2014-06-24 SDECon32.dll (2.4.40.114)

2014-06-24 SDECon64.dll (2.3.39.113)

2014-06-24 SDEvents.dll (2.4.40.2)

2014-06-24 SDFileScanLibrary.dll (2.4.40.14)

2014-04-25 SDHook32.dll (2.3.39.2)

2014-04-25 SDHook64.dll (2.3.39.2)

2014-06-24 SDImmunizeLibrary.dll (2.4.40.2)

2014-06-24 SDLicense.dll (2.4.40.0)

2014-06-24 SDLists.dll (2.4.40.4)

2014-06-24 SDResources.dll (2.4.40.7)

2014-06-24 SDScanLibrary.dll (2.4.40.131)

2014-06-24 SDTasks.dll (2.4.40.15)

2014-06-24 SDWinLogon.dll (2.4.40.0)

2012-08-23 sqlite3.dll

2012-09-10 ssleay32.dll (1.0.0.4)

2014-06-24 Tools.dll (2.4.40.36)

2015-04-22 Includes\Adware-000.sbi (*)

2015-08-05 Includes\Adware-001.sbi (*)

2016-01-13 Includes\Adware-C.sbi (*)

2014-01-13 Includes\Adware.sbi (*)

2014-01-13 Includes\AdwareC.sbi (*)

2010-08-13 Includes\Cookies.sbi (*)

2014-11-14 Includes\Dialer-000.sbi (*)

2014-11-14 Includes\Dialer-001.sbi (*)

2015-07-29 Includes\Dialer-C.sbi (*)

2014-01-13 Includes\Dialer.sbi (*)

2014-01-13 Includes\DialerC.sbi (*)

2014-01-09 Includes\Fraud-000.sbi (*)

2014-01-09 Includes\Fraud-001.sbi (*)

2014-03-31 Includes\Fraud-002.sbi (*)

2014-01-09 Includes\Fraud-003.sbi (*)

2012-11-14 Includes\HeavyDuty.sbi (*)

2014-11-14 Includes\Hijackers-000.sbi (*)

2014-11-14 Includes\Hijackers-001.sbi (*)

2015-12-23 Includes\Hijackers-C.sbi (*)

2014-01-13 Includes\Hijackers.sbi (*)

2014-01-13 Includes\HijackersC.sbi (*)

2014-01-08 Includes\iPhone-000.sbi (*)

2014-01-08 Includes\iPhone.sbi (*)

2014-11-14 Includes\Keyloggers-000.sbi (*)

2014-09-24 Includes\Keyloggers-C.sbi (*)

2014-01-13 Includes\Keyloggers.sbi (*)

2014-01-13 Includes\KeyloggersC.sbi (*)

2015-06-25 Includes\Malware-000.sbi (*)

2014-11-14 Includes\Malware-001.sbi (*)

2014-11-14 Includes\Malware-002.sbi (*)

2015-11-19 Includes\Malware-003.sbi (*)

2014-11-14 Includes\Malware-004.sbi (*)

2014-11-14 Includes\Malware-005.sbi (*)

2014-02-26 Includes\Malware-006.sbi (*)

2014-01-09 Includes\Malware-007.sbi (*)

2016-01-13 Includes\Malware-C.sbi (*)

2014-01-13 Includes\Malware.sbi (*)

2013-12-23 Includes\MalwareC.sbi (*)

2014-11-14 Includes\PUPS-000.sbi (*)

2014-01-15 Includes\PUPS-001.sbi (*)

2014-01-15 Includes\PUPS-002.sbi (*)

2016-01-13 Includes\PUPS-C.sbi (*)

2012-11-14 Includes\PUPS.sbi (*)

2014-01-07 Includes\PUPSC.sbi (*)

2014-01-08 Includes\Security-000.sbi (*)

2015-12-02 Includes\Security-C.sbi (*)

2014-01-21 Includes\Security.sbi (*)

2014-01-21 Includes\SecurityC.sbi (*)

2015-11-11 Includes\Spyware-000.sbi (*)

2015-05-06 Includes\Spyware-001.sbi (*)

2015-08-12 Includes\Spyware-C.sbi (*)

2014-01-21 Includes\Spyware.sbi (*)

2014-01-21 Includes\SpywareC.sbi (*)

2011-06-07 Includes\Tracks.sbi (*)

2012-11-19 Includes\Tracks.uti (*)

2014-01-15 Includes\Trojans-000.sbi (*)

2014-01-15 Includes\Trojans-001.sbi (*)

2014-11-14 Includes\Trojans-002.sbi (*)

2014-01-15 Includes\Trojans-003.sbi (*)

2014-01-15 Includes\Trojans-004.sbi (*)

2014-03-19 Includes\Trojans-005.sbi (*)

2015-03-31 Includes\Trojans-006.sbi (*)

2014-01-15 Includes\Trojans-007.sbi (*)

2014-07-09 Includes\Trojans-008.sbi (*)

2014-07-09 Includes\Trojans-009.sbi (*)

2016-01-13 Includes\Trojans-C.sbi (*)

2014-01-15 Includes\Trojans-OG-000.sbi (*)

2014-01-15 Includes\Trojans-TD-000.sbi (*)

2014-01-15 Includes\Trojans-VM-000.sbi (*)

2014-01-15 Includes\Trojans-VM-001.sbi (*)

2014-01-15 Includes\Trojans-VM-002.sbi (*)

2014-01-15 Includes\Trojans-VM-003.sbi (*)

2014-01-15 Includes\Trojans-VM-004.sbi (*)

2014-01-15 Includes\Trojans-VM-005.sbi (*)

2014-01-15 Includes\Trojans-VM-006.sbi (*)

2014-01-15 Includes\Trojans-VM-007.sbi (*)

2014-01-15 Includes\Trojans-VM-008.sbi (*)

2014-01-15 Includes\Trojans-VM-009.sbi (*)

2014-01-15 Includes\Trojans-VM-010.sbi (*)

2014-01-15 Includes\Trojans-VM-011.sbi (*)

2014-01-15 Includes\Trojans-VM-012.sbi (*)

2014-01-15 Includes\Trojans-VM-013.sbi (*)

2014-01-15 Includes\Trojans-VM-014.sbi (*)

2014-01-15 Includes\Trojans-VM-015.sbi (*)

2014-01-15 Includes\Trojans-VM-016.sbi (*)

2014-01-15 Includes\Trojans-VM-017.sbi (*)

2014-01-15 Includes\Trojans-VM-018.sbi (*)

2014-01-15 Includes\Trojans-VM-019.sbi (*)

2014-01-15 Includes\Trojans-VM-020.sbi (*)

2014-01-15 Includes\Trojans-VM-021.sbi (*)

2014-01-15 Includes\Trojans-VM-022.sbi (*)

2014-01-15 Includes\Trojans-VM-023.sbi (*)

2014-01-15 Includes\Trojans-VM-024.sbi (*)

2014-01-15 Includes\Trojans-ZB-000.sbi (*)

2016-01-13 Includes\Trojans-ZL-000.sbi (*)

2014-01-09 Includes\Trojans.sbi (*)

2014-01-16 Includes\TrojansC-01.sbi (*)

2014-01-16 Includes\TrojansC-02.sbi (*)

2014-01-16 Includes\TrojansC-03.sbi (*)

2014-01-16 Includes\TrojansC-04.sbi (*)

2014-01-16 Includes\TrojansC-05.sbi (*)

2014-01-09 Includes\TrojansC.sbi (*)

Code:

# AdwCleaner v5.028 - Bericht erstellt am 06/01/2016 um 22:43:37

# Aktualisiert am 04/01/2016 von Xplode

# Datenbank : 2015-12-30.1 [Lokal]

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)

# Benutzername : Besitzer - LAVAMAT

# Gestartet von : C:\Users\Besitzer\Downloads\AdwCleaner_5.028.exe

# Option : Suchlauf

# Unterstützung : hxxp://toolslib.net/forum
 

***** [ Dienste ] *****
 
 

***** [ Ordner ] *****
 
 

***** [ Dateien ] *****
 
 

***** [ DLL ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Aufgabenplanung ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [BackgroundHost.exe]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_WEBOC_MOVESIZECHILD [BackgroundHost.exe]

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{58124A0B-DC32-4180-9BFF-E0E21AE34026}]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{977AE9CC-AF83-45E8-9E03-E2798216E2D5}]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}]

Schlüssel Gefunden : HKCU\Software\OCS

Schlüssel Gefunden : HKCU\Software\Yahoo\Companion

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\18C9E3869A16248439FE3FF9EB02207A

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D8011310B2622942868A458964FFDC5

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C63F7979DCC2154CB9591969A5CB89D

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6DD31E6C1A73B334383DF186676F4D20

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB3204F747B20694B8D49EF92D8DC94B

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C81E33A400B6F814E90C7A3354E2A3A5

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EDBF68C5F16790341B7C6FD7C7F8E4FC

Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FFA531D0F3A71504DA7AC6A11CE33739
 

***** [ Internetbrowser ] *****
 
 

########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [3246 Bytes] ##########

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:06-01-2015

durchgeführt von Besitzer (2016-01-06 22:41:58)

Gestartet von C:\Users\Besitzer\Downloads

Windows 7 Home Premium Service Pack 1 (X64) (2011-04-01 09:03:06)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-2472162299-3273411272-195361004-500 - Administrator - Disabled) => C:\Users\Administrator.LAVAMAT

Besitzer (S-1-5-21-2472162299-3273411272-195361004-1000 - Administrator - Enabled) => C:\Users\Besitzer

Gast (S-1-5-21-2472162299-3273411272-195361004-501 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Emsisoft Anti-Malware (Enabled - Up to date) {15510D9D-6530-DA29-224F-7BA1BDD1CB58}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Emsisoft Anti-Malware (Enabled - Up to date) {AE30EC79-430A-D5A7-18FF-40D3C65681E5}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

3D Bowling (HKLM-x32\...\3D Bowling) (Version:  - )

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.009.20069 - Adobe Systems Incorporated)

Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.188 - Adobe Systems Incorporated)

Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.2.172 - Adobe Systems, Inc.)

Alabama Smith: Flucht aus Pompeji (HKLM-x32\...\Alabama Smith: Flucht aus Pompeji) (Version: 0.0.0.0 - INTENIUM GmbH)

Amazon MP3-Downloader 1.0.18 (HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)

Beetle Ju 2 (HKLM-x32\...\Beetle Ju 2) (Version: 1.0.0.0 - INTENIUM GmbH)

Big Fish: Game Manager (HKLM-x32\...\BFGC) (Version: 3.3.0.2 - )

Billard2 (HKLM-x32\...\Billard2_is1) (Version:  - )

CCleaner (HKLM\...\CCleaner) (Version: 5.04 - Piriform)

Codec Decoder Pack (HKLM-x32\...\Codec Decoder Pack) (Version: 1.0 - Codec Decoder)

Cosmic Ball (HKLM-x32\...\Cosmic Ball_is1) (Version:  - My Real Games Ltd)

Crazy Barrels (HKLM-x32\...\Crazy Barrels) (Version:  - )

Crazy Golf World Tour (HKLM-x32\...\Crazy Golf World Tour1.0) (Version: 1.0 - Oxygen Interactive Ltd.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Der bartlose Zauberer (HKLM-x32\...\Der bartlose Zauberer) (Version: 2.0.0.0 - INTENIUM GmbH)

Der Exorzist (HKLM-x32\...\Der Exorzist) (Version: 1.0.0.0 - INTENIUM GmbH)

DesignPro 5 (x32 Version: 5.5.708 - Avery Dennison) Hidden

DEUTSCHLAND SPIELT GAME CENTER (HKLM-x32\...\DSGPlayer) (Version: 2.4.2.14 - INTENIUM GmbH)

Die Tuttles (HKLM-x32\...\Die Tuttles) (Version:  - )

Dr Kawashima (HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\DrKawashima) (Version: 1.0 - )

Druids: Operation Mistelzweig (HKLM-x32\...\Druids: Operation Mistelzweig) (Version: 1.0.0.0 - INTENIUM GmbH)

Emsisoft Anti-Malware (HKLM-x32\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 9.0 - Emsisoft Ltd.)

Folderico 4.0 RC12 (HKLM-x32\...\Folderico) (Version: 4.0 RC12 - Shedko ( www.softq.org ))

Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Frankenstein: Meister des Schreckens (HKLM-x32\...\Frankenstein: Meister des Schreckens) (Version: 0.0.0.0 - INTENIUM GmbH)

Free Studio version 6.5.1.415 (HKLM-x32\...\Free Studio_is1) (Version: 6.5.1.415 - DVDVideoSoft Ltd.)

Freemake Video Converter Version 4.1.6 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.6 - Ellora Assets Corporation)

Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)

Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden

Haus der 1000 Türen 2: Das Juwel des Zarathustra (HKLM-x32\...\Haus der 1000 Türen 2: Das Juwel des Zarathustra) (Version: 1.0.0.0 - INTENIUM GmbH)

Haus der 1000 Türen: Familiengeheimnisse (HKLM-x32\...\Haus der 1000 Türen: Familiengeheimnisse) (Version: 1.0.0.0 - INTENIUM GmbH)

HP Deskjet 1050 J410 series - Grundlegende Software für das Gerät (HKLM\...\{C3F12DD0-54B1-4B2B-A82B-FA43502BC550}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)

HP Deskjet 1050 J410 series Hilfe (HKLM-x32\...\{5C90D8CF-F12A-41C6-9007-3B651A1F0D78}) (Version: 140.0.66.66 - Hewlett Packard)

HP Update (HKLM-x32\...\{97486FBE-A3FC-4783-8D55-EA37E9D171CC}) (Version: 5.005.000.001 - Hewlett-Packard)

HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden

IcoFX 1.6.4 (HKLM-x32\...\IcoFX_is1) (Version:  - )

ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden

Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle)

Jump Jack (HKLM-x32\...\Jump Jack) (Version:  - )

Jumpin'Jack (HKLM-x32\...\Jumpin'Jack) (Version:  - )

Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Kingdom Chronicles: Königreich in Gefahr (HKLM-x32\...\Kingdom Chronicles: Königreich in Gefahr) (Version: 1.0.0.0 - INTENIUM GmbH)

Logon Screen (HKLM\...\{1730D13B-7517-4321-A88B-64627CF67CDC}_is1) (Version:  - Daniel Rebelo)

Media Preview (HKLM\...\{8680D34A-E765-4579-877F-DEA8FB174DA7}) (Version: 1.4.3.429 - BabelSoft)

Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

MiniGolfPro (HKLM-x32\...\MiniGolfPro) (Version:  - )

Moai: Erschaffe deinen Traum (HKLM-x32\...\Moai: Erschaffe deinen Traum) (Version: 1.0.0.0 - INTENIUM GmbH)

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Mozilla Firefox 43.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 43.0.3 (x86 de)) (Version: 43.0.3 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.3 - Mozilla)

Mp3tag v2.70 (HKLM-x32\...\Mp3tag) (Version: v2.70 - Florian Heidenreich)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

Next Generation Visualisations (HKLM-x32\...\{2E376AD9-5C49-4F7D-A0BA-6A44E8FA5A3B}) (Version: 1.0.0 -  Microsoft)

NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 353.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 353.62 - NVIDIA Corporation)

NVIDIA Grafiktreiber 353.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.62 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)

OpenAL (HKLM-x32\...\OpenAL) (Version:  - )

OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)

paint.net (HKLM\...\{3F5F509B-E226-417C-8CD1-CAAE756C328A}) (Version: 4.0.0 - dotPDN LLC)

Pflanzen gegen Zombies (HKLM-x32\...\Pflanzen gegen Zombies) (Version:  - PopCap Games)

PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )

Prince of Persia T2T (HKLM-x32\...\{DFFE2B1F-07E0-45A9-8801-CD8514CAA876}) (Version:  - )

QT Lite 4.1.0 (HKLM-x32\...\quicktime_lite_is1) (Version: 4.1.0 - )

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.)

Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Schatzjäger 2 (HKLM-x32\...\{1D0DD240-7752-48B5-A6EF-AC6509E16ABE}) (Version: 1.00.0000 - )

Sherlock Holmes und der Hund der Baskervilles (HKLM-x32\...\Sherlock Holmes und der Hund der Baskervilles) (Version: 1.0.0.0 - INTENIUM GmbH)

Ski Challenge 16 (HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\sc16-GAMETWIST_MAIN) (Version:  - )

Sky Taxi 4: Streng Geheim (HKLM-x32\...\Sky Taxi 4: Streng Geheim) (Version: 1.0.0.0 - INTENIUM GmbH)

Supercow (VOLLVERSION) (HKLM-x32\...\Supercow (VOLLVERSION)) (Version:  - )

SuperTux Version 0.3.4 (HKLM-x32\...\{5095BBEC-9A2F-4DA1-B5EF-511C728A2FF6}_is1) (Version: 0.3.4 - SuperTux Development Team)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Tiger Eye (HKLM-x32\...\Tiger Eye) (Version:  - )

Turtix (HKLM-x32\...\Turtix) (Version:  - )

Turtix 2 (HKLM-x32\...\Turtix 2) (Version: 0.0.0.0 - INTENIUM GmbH)

Unlocker 1.9.1-x64 (HKLM\...\Unlocker) (Version: 1.9.1 - Cedrick Collomb)

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

VirtualDJ 8 (HKLM-x32\...\{9ADBBA93-4625-4898-BB0D-BCE7EA9F8B4A}) (Version: 8.0.0 - Atomix Productions)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0B8BE318-7B69-461A-8C64-0EB3DD41DAC3} - System32\Tasks\{C1561D4A-B44B-49DD-A0F8-EF52562CBD95} => pcalua.exe -a "C:\Program Files\Eigene Programme\VLC\VLCPortable\VLCPortable.exe" -d "C:\Program Files\Eigene Programme\VLC\VLCPortable"

Task: {51644457-D2F2-4556-9214-051BC7021453} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-14] (Adobe Systems Incorporated)

Task: {57FE0623-8D4E-4FB1-91C8-9A88F98A7279} - System32\Tasks\{68A1FC85-0D22-4FFD-8AFD-E46FD6FA28CD} => pcalua.exe -a C:\Windows\SysWOW64\DivXControlPanelApplet.cpl -c DivX Control Panel

Task: {5A40E926-9E86-4B89-9CFD-B12311724371} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto

Task: {5D726D9D-298E-4D9A-99AC-10988B4FE942} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-03-13] (Piriform Ltd)

Task: {65ABCEE0-8155-427C-8661-D8EA03BCD36B} - System32\Tasks\{A5ED2DA0-1C3C-492C-AB78-B1E3EC3D00BC} => pcalua.exe -a J:\OpenOfficePortable\OpenOfficeWriterPortable.exe -d J:\OpenOfficePortable

Task: {6FC8A5D1-2675-4C4B-BB06-1BFCD7B1721C} - System32\Tasks\{906A96A5-4B4C-488D-BF30-A8AF8F8FF547} => pcalua.exe -a C:\Users\Besitzer\Downloads\avira_antivir_antirootkit_en(1).exe -d C:\Users\Besitzer\Downloads

Task: {81A2F243-F15D-4F24-81AF-29F76B55FE2D} - System32\Tasks\{7561AFB8-E02B-4BB2-B905-D83B7A1A31AB} => pcalua.exe -a "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA StereoUSB Driver\nvUSBInst.exe" -d "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA StereoUSB Driver"

Task: {8E2A7A38-D385-41AE-9304-70B125AC482D} - System32\Tasks\{205D5359-6194-4D3A-AA1F-6E0491BDCC95} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{714B9C6C-70FC-4750-98E2-61520B906C45}\setup.exe" -c -runfromtemp -l0x0009 -removeonly

Task: {B568EABF-E7AE-418E-BC17-66A2605C9A0B} - System32\Tasks\{0D19AD70-C41F-4F22-9003-E0EAB1EE5BE0} => pcalua.exe -a E:\setup\setup.exe -d E:\setup

Task: {C3C296A5-40E8-4763-B0DF-C9D7776A8EE5} - System32\Tasks\{7840164C-A73D-4726-941A-5B45F6B89279} => pcalua.exe -a E:\Start.exe -d E:\

Task: {C9326867-66E5-4B89-80A2-C8731A92B9A8} - System32\Tasks\{4A1360EB-55A7-47DC-B77C-4C620B730949} => pcalua.exe -a C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe -c /M{F82C6574-AD88-4B40-A432-970BC77F1BD2}

Task: {D31429BC-581F-430B-A934-886EAEF9B323} - System32\Tasks\{5145A4DA-87D0-45AC-AB29-C9EE4A8A24E8} => pcalua.exe -a "C:\Program Files (x86)\OXXOGames\GPlayer\MyInstall.exe" -d C:\Windows\system32 -c ScriptUInst "C:\Program Files (x86)\OXXOGames\GPlayer\Install\\Game_NSoftSupercowCD.log"

Task: {D4C17D60-38D1-4714-9D81-1BD33E46B25C} - System32\Tasks\{B00E5003-544E-43D9-9CA9-8A38122A743F} => pcalua.exe -a "C:\Eigene Programme\VLCPortable\VLCPortable.exe" -d C:\Users\Besitzer\Videos\Flash -c "C:\Users\Besitzer\Videos\Flash\Faithless - Insomnia.flv"

Task: {DD9F510C-95F4-499A-90C8-BAC5BC372FF4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask => start sppsvc

Task: {F2C7EC5A-0213-416A-926C-77CBE8D63546} - System32\Tasks\{D1BB4EFD-0219-483A-BBAE-B14982220F81} => pcalua.exe -a "C:\Users\Besitzer\Desktop\Neuer Ordner\s_install.exe" -d "C:\Users\Besitzer\Desktop\Neuer Ordner"

Task: {F51ABCD2-3A7B-42A6-8941-2E6850D51057} - System32\Tasks\{2D0A611E-70E9-471E-A485-252A68A189C8} => pcalua.exe -a E:\SETUP.exe -d E:\

Task: {FBA7811A-9E7E-4C85-8DEC-14811BAF73C5} - System32\Tasks\{DE59C836-6D79-4D21-9562-2CC82BEF1148} => C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe [2014-03-31] (Microsoft Corporation)

Task: {FF6210FB-C7D2-466B-A1C1-17C6937D0059} - System32\Tasks\{DFE22B96-877E-43BA-8F3F-6AF3E3146E08} => pcalua.exe -a C:\Users\Besitzer\Downloads\avira_antivir_antirootkit_en.exe -d C:\Users\Besitzer\Downloads
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2012-05-11 23:08 - 2015-07-23 02:31 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2010-07-15 05:44 - 2010-07-15 05:44 - 00020032 _____ () C:\Program Files (x86)\Unlocker\UnlockerCOM.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\ProgramData\TEMP:2CB9631F

AlternateDataStreams: C:\ProgramData\TEMP:DE220DE0
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 03:34 - 2015-03-07 20:36 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
 

127.0.0.1       localhost
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: Datenträger ist nicht mit dem Internet verbunden.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: )

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

MSCONFIG\Services: AdobeARMservice => 2

MSCONFIG\Services: Avira.ServiceHost => 2

MSCONFIG\Services: gupdate => 2

MSCONFIG\Services: gupdatem => 3

MSCONFIG\Services: IePluginServices => 2

MSCONFIG\Services: IMFservice => 2

MSCONFIG\Services: Nero BackItUp Scheduler 4.0 => 2

MSCONFIG\Services: Origin Client Service => 3

MSCONFIG\Services: StumbleUponUpdater => 2

MSCONFIG\Services: SXDS10 => 3

MSCONFIG\Services: WSWNA3100 => 2

MSCONFIG\startupfolder: C:^Users^Besitzer^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Tintenwarnungen überwachen - HP Deskjet 1050 J410 series.lnk => C:\Windows\pss\Tintenwarnungen überwachen - HP Deskjet 1050 J410 series.lnk.Startup

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: Avira SystrayStartTrigger => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe

MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"

MSCONFIG\startupreg: ProductUpdater => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe

MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{7995B5C5-743E-41C3-BF8B-5EFDEA48A645}] => (Allow) C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\USBSetup.exe

FirewallRules: [{79E355A7-1CFB-460A-9802-5E54DE6C310A}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{DAFB63D4-7CE8-4042-9019-E910E5680FEE}] => (Allow) LPort=2869

FirewallRules: [{D50C9D88-2E02-4883-87B5-7482344FE710}] => (Allow) LPort=1900

FirewallRules: [{04D2E93A-C507-4737-9FD5-DC313B918596}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{69F1F8CB-B55E-4C2B-8B56-748EFEA3D6BD}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{A5762040-DFFB-4E56-BE96-10F599A4AC75}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{9A743D4B-C25C-41F5-A53D-F6617B16655F}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{581FC581-7CA0-45C6-AA4A-9EED6FDAC6E9}] => (Allow) C:\Program Files (x86)\Torya\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe

FirewallRules: [{27751150-0CB5-4FFC-9949-DFB1B10A9C3A}] => (Allow) C:\Program Files (x86)\Torya\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe

FirewallRules: [{1E0F717F-733F-4652-9543-9410AF9469D1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{DD4CEFF7-5085-4372-8F3C-880608BBE7E8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

==================== Wiederherstellungspunkte =========================
 

18-12-2015 02:09:39 Revo Uninstaller's restore point - Avira Antivirus

18-12-2015 02:14:42 Revo Uninstaller's restore point - Avira Antivirus

18-12-2015 02:14:53 Revo Uninstaller's restore point - Avira Antivirus

18-12-2015 02:16:01 Revo Uninstaller's restore point - Avira Launcher

18-12-2015 02:39:29 Windows Update

18-12-2015 02:45:02 Windows Modules Installer

23-12-2015 01:04:50 JRT Pre-Junkware Removal

23-12-2015 01:08:04 JRT Pre-Junkware Removal

23-12-2015 01:16:28 Revo Uninstaller's restore point - Google Chrome

23-12-2015 01:23:03 Revo Uninstaller's restore point - Marble (remove only)

29-12-2015 21:19:49 Revo Uninstaller's restore point - Origin

29-12-2015 21:23:39 Revo Uninstaller's restore point - Pflanzen gegen Zombies™

29-12-2015 22:44:16 Revo Uninstaller's restore point - Pflanzen gegen Zombies

29-12-2015 22:48:36 Revo Uninstaller's restore point - Pflanzen gegen Zombies

29-12-2015 22:51:18 Revo Uninstaller's restore point - Pflanzen gegen Zombies

29-12-2015 22:52:31 Revo Uninstaller's restore point - Pflanzen gegen Zombies

05-01-2016 23:42:08 Revo Uninstaller's restore point - Mozilla Firefox 43.0.2 (x86 de)

05-01-2016 23:44:44 Revo Uninstaller's restore point - Mozilla Maintenance Service

06-01-2016 21:35:01 Wiederherstellungsvorgang

06-01-2016 21:44:52 Revo Uninstaller's restore point - Mozilla Maintenance Service

06-01-2016 22:27:20 Revo Uninstaller's restore point - Adobe Reader XI (11.0.06) - Deutsch
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 

Name: NVIDIA GeForce 7025 / NVIDIA nForce 630a

Description: NVIDIA GeForce 7025 / NVIDIA nForce 630a

Class Guid: {4d36e968-e325-11ce-bfc1-08002be10318}

Manufacturer: NVIDIA 

Service: nvlddmkm

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 

Name: Realtek PCIe FE Family Controller

Description: Realtek PCIe FE Family Controller

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Realtek

Service: RTL8167

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (01/06/2016 10:27:20 PM) (Source: VSS) (EventID: 8193) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-2472162299-3273411272-195361004-1004.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.

.
 
 

Vorgang:

   OnIdentify-Ereignis

   Generatordaten werden gesammelt
 

Kontext:

   Ausführungskontext: Shadow Copy Optimization Writer

   Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}

   Generatorname: Shadow Copy Optimization Writer

   Generatorinstanz-ID: {f858b8ae-f69d-4ad9-8db3-7f584bac884e}
 

Error: (01/06/2016 09:44:52 PM) (Source: VSS) (EventID: 8193) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-2472162299-3273411272-195361004-1004.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.

.
 
 

Vorgang:

   OnIdentify-Ereignis

   Generatordaten werden gesammelt
 

Kontext:

   Ausführungskontext: Shadow Copy Optimization Writer

   Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}

   Generatorname: Shadow Copy Optimization Writer

   Generatorinstanz-ID: {b01665f7-e678-4bb9-bac5-ee774412b57f}
 

Error: (01/06/2016 09:35:02 PM) (Source: VSS) (EventID: 8193) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-2472162299-3273411272-195361004-1004.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.

.
 
 

Vorgang:

   OnIdentify-Ereignis

   Generatordaten werden gesammelt
 

Kontext:

   Ausführungskontext: Shadow Copy Optimization Writer

   Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}

   Generatorname: Shadow Copy Optimization Writer

   Generatorinstanz-ID: {5e257a3e-5cb1-49af-98b6-959220c4dbdf}
 

Error: (01/06/2016 09:24:28 PM) (Source: Windows Search Service) (EventID: 7010) (User: )

Description: Der Index kann nicht initialisiert werden.
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (01/06/2016 09:24:28 PM) (Source: Windows Search Service) (EventID: 3058) (User: )

Description: Die Anwendung kann nicht initialisiert werden.
 

Kontext: Windows Anwendung
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (01/06/2016 09:24:28 PM) (Source: Windows Search Service) (EventID: 3028) (User: )

Description: Das Gatherer-Objekt kann nicht initialisiert werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (01/06/2016 09:24:28 PM) (Source: Windows Search Service) (EventID: 3029) (User: )

Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 

Details:

        Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)
 

Error: (01/06/2016 09:24:28 PM) (Source: Windows Search Service) (EventID: 3029) (User: )

Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (01/06/2016 09:24:28 PM) (Source: Windows Search Service) (EventID: 9002) (User: )

Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 

Details:

        Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)
 

Error: (01/06/2016 09:24:28 PM) (Source: Windows Search Service) (EventID: 7042) (User: )

Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 
 

Systemfehler:

=============

Error: (01/06/2016 10:38:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/06/2016 10:38:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/06/2016 10:38:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/06/2016 10:38:27 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/06/2016 10:38:27 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/06/2016 10:38:27 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/06/2016 10:38:26 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/06/2016 10:38:26 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/06/2016 10:38:26 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/06/2016 10:38:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 
 

CodeIntegrity:

===================================

  Date: 2015-12-01 17:26:19.980

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.946

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.889

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.854

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.801

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.766

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.621

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.587

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.501

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.468

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: AMD Athlon(tm) II X2 220 Processor

Prozentuale Nutzung des RAM: 56%

Installierter physikalischer RAM: 2815.24 MB

Verfügbarer physikalischer RAM: 1227.38 MB

Summe virtueller Speicher: 5628.69 MB

Verfügbarer virtueller Speicher: 3281.61 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:200 GB) (Free:102.22 GB) NTFS

Drive d: (Volume) (Fixed) (Total:265.66 GB) (Free:265.51 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 1D884D44)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=200 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=265.7 GB) - (Type=07 NTFS)
 

==================== Ende von Addition.txt ============================

Baba Yaga

23.01.2016 00:20

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:06-01-2015

durchgeführt von Besitzer (Administrator) auf LAVAMAT (06-01-2016 22:41:34)

Gestartet von C:\Users\Besitzer\Downloads

Geladene Profile: Besitzer (Verfügbare Profile: Besitzer & Administrator)

Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 8 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Alle) =========================
 

(Microsoft Corporation) C:\Windows\System32\smss.exe

(Microsoft Corporation) C:\Windows\System32\csrss.exe

(Microsoft Corporation) C:\Windows\System32\wininit.exe

(Microsoft Corporation) C:\Windows\System32\csrss.exe

(Microsoft Corporation) C:\Windows\System32\services.exe

(Microsoft Corporation) C:\Windows\System32\winlogon.exe

(Microsoft Corporation) C:\Windows\System32\lsass.exe

(Microsoft Corporation) C:\Windows\System32\lsm.exe

(Microsoft Corporation) C:\Windows\System32\svchost.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Microsoft Corporation) C:\Windows\System32\svchost.exe

(Microsoft Corporation) C:\Windows\System32\svchost.exe

(Microsoft Corporation) C:\Windows\System32\svchost.exe

(Microsoft Corporation) C:\Windows\System32\svchost.exe

(Microsoft Corporation) C:\Windows\System32\audiodg.exe

(Microsoft Corporation) C:\Windows\System32\svchost.exe

(Microsoft Corporation) C:\Windows\System32\svchost.exe

(Emsisoft Ltd) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\System32\svchost.exe

(Microsoft Corporation) C:\Windows\System32\svchost.exe

(Microsoft Corporation) C:\Windows\System32\svchost.exe

(Microsoft Corporation) C:\Windows\System32\taskhost.exe

(Microsoft Corporation) C:\Windows\System32\dwm.exe

(Microsoft Corporation) C:\Windows\System32\svchost.exe

(Microsoft Corporation) C:\Windows\explorer.exe

(Microsoft Corporation) C:\Windows\System32\svchost.exe

(Microsoft Corporation) C:\Windows\System32\WUDFHost.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Emsisoft Ltd) C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Microsoft Corporation) C:\Windows\System32\svchost.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Microsoft Corporation) C:\Windows\System32\msiexec.exe

(Microsoft Corporation) C:\Windows\System32\SearchIndexer.exe

(Microsoft Corporation) C:\Windows\System32\SearchProtocolHost.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

(Farbar) C:\Users\Besitzer\Downloads\FRST64.exe

(Microsoft Corporation) C:\Windows\System32\SearchFilterHost.exe

(Microsoft Corporation) C:\Windows\System32\wbem\WmiPrvSE.exe

(Microsoft Corporation) C:\Windows\System32\VSSVC.exe

(Microsoft Corporation) C:\Windows\System32\svchost.exe

(Microsoft Corporation) C:\Windows\System32\notepad.exe

(Microsoft Corporation) C:\Windows\System32\notepad.exe

(Microsoft Corporation) C:\Windows\System32\notepad.exe
 

==================== Registry (Alle) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-11-19] (Realtek Semiconductor)

HKLM\...\Run: [emsisoft anti-malware] => c:\program files (x86)\emsisoft anti-malware\a2guard.exe [9234848 2016-01-06] (Emsisoft Ltd)

HKLM\...\Winlogon: [Userinit] C:\Windows\System32\Userinit.exe, [30720 2010-11-20] (Microsoft Corporation)

HKLM-x32\...\Winlogon: [Userinit] C:\Windows\sysWOW64\userinit.exe [26624 2010-11-20] (Microsoft Corporation)

HKLM\...\Winlogon: [Shell] explorer.exe [2871808 2011-02-25] (Microsoft Corporation)

HKLM-x32\...\Winlogon: [Shell] explorer.exe [2616320 2011-02-25] (Microsoft Corporation)

HKLM\...\Policies\Explorer: [NoDrives] 0

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Run: [Sidebar] => C:\Program Files\Windows Sidebar\sidebar.exe [1475584 2010-11-20] (Microsoft Corporation)

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Policies\system: [LogonHoursAction] 2

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Policies\Explorer: [NoDrives] 0

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Policies\Explorer: [Neuer Wert #1] 0

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Policies\Explorer: [NoSimpleNetIDList] 1

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Policies\Explorer: [NoDriveTypeAutoRun] 145

Lsa: [Authentication Packages] msv1_0

Lsa: [Notification Packages] scecli

SecurityProviders: credssp.dll

SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} -  Keine Datei

SSODL-x32: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} -  Keine Datei

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei

ShellIconOverlayIdentifiers: [EnhancedStorageShell] -> {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D} => C:\Windows\system32\EhStorShell.dll [2009-07-14] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [SharingPrivate] -> {08244EE6-92F0-47f2-9FC9-929BAA2E7235} => C:\Windows\system32\ntshrui.dll [2012-01-04] (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [EnhancedStorageShell] -> {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D} => C:\Windows\SysWOW64\EhStorShell.dll [2009-07-14] (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [SharingPrivate] -> {08244EE6-92F0-47f2-9FC9-929BAA2E7235} => C:\Windows\SysWOW64\ntshrui.dll [2012-01-04] (Microsoft Corporation)

BootExecute: autocheck autochk * 

AlternateShell: cmd.exe
 

==================== Internet (Alle) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

ProxyEnable: [S-1-5-21-2472162299-3273411272-195361004-1000] => Proxy ist aktiviert.

ProxyServer: [S-1-5-21-2472162299-3273411272-195361004-1000] => 0.0.0.0:80

Winsock: Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224 2014-12-06] (Microsoft Corporation)

Winsock: Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224 2009-07-14] (Microsoft Corporation)

Winsock: Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024 2009-07-14] (Microsoft Corporation)

Winsock: Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024 2009-07-14] (Microsoft Corporation)

Winsock: Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [231424 2013-09-08] (Microsoft Corporation)

Winsock: Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [20992 2009-07-14] (Microsoft Corporation)

Winsock: Catalog5 07 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145648 2012-07-17] (Microsoft Corp.)

Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145648 2012-07-17] (Microsoft Corp.)

Winsock: Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [231424 2013-09-08] (Microsoft Corporation)

Winsock: Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [231424 2013-09-08] (Microsoft Corporation)

Winsock: Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [231424 2013-09-08] (Microsoft Corporation)

Winsock: Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [231424 2013-09-08] (Microsoft Corporation)

Winsock: Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [231424 2013-09-08] (Microsoft Corporation)

Winsock: Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [231424 2013-09-08] (Microsoft Corporation)

Winsock: Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [231424 2013-09-08] (Microsoft Corporation)

Winsock: Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [231424 2013-09-08] (Microsoft Corporation)

Winsock: Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [231424 2013-09-08] (Microsoft Corporation)

Winsock: Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [231424 2013-09-08] (Microsoft Corporation)

Winsock: Catalog5-x64 01 C:\Windows\system32\NLAapi.dll [70656 2012-10-03] (Microsoft Corporation)

Winsock: Catalog5-x64 02 C:\Windows\system32\napinsp.dll [68096 2009-07-14] (Microsoft Corporation)

Winsock: Catalog5-x64 03 C:\Windows\system32\pnrpnsp.dll [86016 2009-07-14] (Microsoft Corporation)

Winsock: Catalog5-x64 04 C:\Windows\system32\pnrpnsp.dll [86016 2009-07-14] (Microsoft Corporation)

Winsock: Catalog5-x64 05 C:\Windows\System32\mswsock.dll [327168 2013-09-08] (Microsoft Corporation)

Winsock: Catalog5-x64 06 C:\Windows\System32\winrnr.dll [28672 2009-07-14] (Microsoft Corporation)

Winsock: Catalog5-x64 07 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171760 2012-07-17] (Microsoft Corp.)

Winsock: Catalog5-x64 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171760 2012-07-17] (Microsoft Corp.)

Winsock: Catalog9-x64 01 C:\Windows\system32\mswsock.dll [327168 2013-09-08] (Microsoft Corporation)

Winsock: Catalog9-x64 02 C:\Windows\system32\mswsock.dll [327168 2013-09-08] (Microsoft Corporation)

Winsock: Catalog9-x64 03 C:\Windows\system32\mswsock.dll [327168 2013-09-08] (Microsoft Corporation)

Winsock: Catalog9-x64 04 C:\Windows\system32\mswsock.dll [327168 2013-09-08] (Microsoft Corporation)

Winsock: Catalog9-x64 05 C:\Windows\system32\mswsock.dll [327168 2013-09-08] (Microsoft Corporation)

Winsock: Catalog9-x64 06 C:\Windows\system32\mswsock.dll [327168 2013-09-08] (Microsoft Corporation)

Winsock: Catalog9-x64 07 C:\Windows\system32\mswsock.dll [327168 2013-09-08] (Microsoft Corporation)

Winsock: Catalog9-x64 08 C:\Windows\system32\mswsock.dll [327168 2013-09-08] (Microsoft Corporation)

Winsock: Catalog9-x64 09 C:\Windows\system32\mswsock.dll [327168 2013-09-08] (Microsoft Corporation)

Winsock: Catalog9-x64 10 C:\Windows\system32\mswsock.dll [327168 2013-09-08] (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{45271E45-F8EE-4CF0-8150-EB4AE68EA381}: [NameServer] 8.8.8.8,8.8.4.4

Tcpip\..\Interfaces\{45271E45-F8EE-4CF0-8150-EB4AE68EA381}: [DhcpNameServer] 192.168.1.1
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.google.de/

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com

URLSearchHook: HKU\S-1-5-21-2472162299-3273411272-195361004-1000 - Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)

URLSearchHook: HKU\S-1-5-21-2472162299-3273411272-195361004-1000 - Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-2472162299-3273411272-195361004-1000 -> DefaultScope {84B7D3DD-2F21-4909-8F42-76D8E63FC34C} URL = hxxp://www.google.com/search?q={searchTerms}&amp;sourceid=ie7&amp;rls=com.microsoft:{language}:{referrer:source}&amp;ie={inputEncoding?}&oe={outputEncoding?}

SearchScopes: HKU\S-1-5-21-2472162299-3273411272-195361004-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC

SearchScopes: HKU\S-1-5-21-2472162299-3273411272-195361004-1000 -> {84B7D3DD-2F21-4909-8F42-76D8E63FC34C} URL = hxxp://www.google.com/search?q={searchTerms}&amp;sourceid=ie7&amp;rls=com.microsoft:{language}:{referrer:source}&amp;ie={inputEncoding?}&oe={outputEncoding?}

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-07-31] (Oracle Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-07-31] (Oracle Corporation)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll [2015-11-06] (Microsoft Corporation)

Handler-x32: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll [2015-11-06] (Microsoft Corporation)

Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\system32\urlmon.dll [2015-11-06] (Microsoft Corporation)

Handler-x32: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll [2015-11-06] (Microsoft Corporation)

Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\msvidctl.dll [2010-11-20] (Microsoft Corporation)

Handler-x32: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\msvidctl.dll [2010-11-20] (Microsoft Corporation)

Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll [2015-11-06] (Microsoft Corporation)

Handler-x32: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2015-11-06] (Microsoft Corporation)

Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll [2015-11-06] (Microsoft Corporation)

Handler-x32: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2015-11-06] (Microsoft Corporation)

Handler-x32: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\syswow64\urlmon.dll [2015-11-06] (Microsoft Corporation)

Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll [2015-11-06] (Microsoft Corporation)

Handler-x32: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2015-11-06] (Microsoft Corporation)

Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll [2015-11-06] (Microsoft Corporation)

Handler-x32: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2015-11-06] (Microsoft Corporation)

Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll [2009-07-14] (Microsoft Corporation)

Handler-x32: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll [2009-07-14] (Microsoft Corporation)

Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll [2015-11-06] (Microsoft Corporation)

Handler-x32: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll [2015-11-06] (Microsoft Corporation)

Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll [2015-11-06] (Microsoft Corporation)

Handler-x32: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2015-11-06] (Microsoft Corporation)

Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll [2015-11-06] (Microsoft Corporation)

Handler-x32: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll [2015-11-06] (Microsoft Corporation)

Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\system32\inetcomm.dll [2011-05-03] (Microsoft Corporation)

Handler-x32: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll [2011-05-03] (Microsoft Corporation)

Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll [2015-11-06] (Microsoft Corporation)

Handler-x32: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2015-11-06] (Microsoft Corporation)

Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll [2009-07-14] (Microsoft Corporation)

Handler-x32: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll [2009-07-14] (Microsoft Corporation)

Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll [2015-11-06] (Microsoft Corporation)

Handler-x32: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll [2015-11-06] (Microsoft Corporation)

Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\msvidctl.dll [2010-11-20] (Microsoft Corporation)

Handler-x32: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\msvidctl.dll [2010-11-20] (Microsoft Corporation)

Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll [2015-11-06] (Microsoft Corporation)

Handler-x32: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll [2015-11-06] (Microsoft Corporation)

Handler-x32: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll [2014-03-31] (Microsoft Corporation)

Handler-x32: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll [2014-03-31] (Microsoft Corporation)

Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation)

Filter-x32: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll [2010-11-05] (Microsoft Corporation)

Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation)

Filter-x32: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll [2010-11-05] (Microsoft Corporation)

Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation)

Filter-x32: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll [2010-11-05] (Microsoft Corporation)

Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\System32\urlmon.dll [2015-11-06] (Microsoft Corporation)

Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2015-11-06] (Microsoft Corporation)

Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\System32\urlmon.dll [2015-11-06] (Microsoft Corporation)

Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2015-11-06] (Microsoft Corporation)

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
 

FireFox:

========

FF ProfilePath: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default

FF Homepage: google.de

FF NetworkProxy: "type", 0

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2016-01-04] ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [Keine Datei]

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2016-01-04] ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1222172.dll [2015-11-19] (Adobe Systems, Inc.)

FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [Keine Datei]

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Windows\system32\npovshelper.dll [Keine Datei]

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [Keine Datei]

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [Keine Datei]

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-07-23] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-07-23] (NVIDIA Corporation)

FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll [Keine Datei]

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\TORYA\Program Files (x86)\VLC\npvlc.dll [Keine Datei]

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-2472162299-3273411272-195361004-1000: amazon.com/AmazonMP3DownloaderPlugin -> C:\Users\Besitzer\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll [2013-05-22] (Amazon.com, Inc.)

FF Extension: NoScript - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-01-06]

FF Extension: BetterPrivacy - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2016-01-06]

FF Extension: HTTPS-Everywhere - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\extensions\https-everywhere@eff.org [2016-01-06]

FF Extension: IPFlood - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\extensions\ipfuck@p4ul.info.xpi [2016-01-06]

FF Extension: ImTranslator - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi [2016-01-06]

FF Extension: WEB.DE MailCheck - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\extensions\toolbar@web.de [2016-01-06]

FF Extension: ProxTube - Unblock YouTube - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\Extensions\ich@maltegoetz.de.xpi [2016-01-06]

FF Extension: Kein Name - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\Extensions\jid1-P34HaABBBpOerQ@jetpack.xpi [2016-01-06] [ist nicht signiert]

FF Extension: Flash Control - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\Extensions\jid1-sNL73VCI4UB0Fw@jetpack.xpi [2016-01-06]

FF Extension: Flagfox - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2016-01-06]

FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2016-01-06] [ist nicht signiert]

FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 => nicht gefunden

FF HKLM-x32\...\Mozilla Firefox 43.0.3\Extensions: [Components] - C:\Program Files (x86)\Mozilla Firefox\components => nicht gefunden

FF HKLM-x32\...\Mozilla Firefox 43.0.3\Extensions: [Plugins] - C:\Program Files (x86)\Mozilla Firefox\plugins => nicht gefunden

FF HKLM-x32\...\Mozilla Firefox 6.0.2\Extensions: [Components] - C:\Program Files (x86)\Mozilla Firefox\components => nicht gefunden

FF HKLM-x32\...\Mozilla Firefox 6.0.2\Extensions: [Plugins] - C:\Program Files (x86)\Mozilla Firefox\plugins => nicht gefunden

FF HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Firefox\Extensions: [{9A207F60-3F1C-4ED0-972D-0A4CDFBFF803}] - C:\Users\Besitzer\AppData\Roaming\14001.011 => nicht gefunden

FF HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Mozilla Firefox 32.0\Extensions: [Components] - C:\Program Files (x86)\Mozilla Firefox\components => nicht gefunden

FF HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Mozilla Firefox 32.0\Extensions: [Plugins] - C:\Program Files (x86)\Mozilla Firefox\plugins => nicht gefunden

FF HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Mozilla Firefox 32.0.1\Extensions: [Components] - C:\Program Files (x86)\Mozilla Firefox\components => nicht gefunden

FF HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Mozilla Firefox 32.0.1\Extensions: [Plugins] - C:\Program Files (x86)\Mozilla Firefox\plugins => nicht gefunden

FF HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Mozilla Firefox 32.0.2\Extensions: [Components] - C:\Program Files (x86)\Mozilla Firefox\components => nicht gefunden

FF HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Mozilla Firefox 32.0.2\Extensions: [Plugins] - C:\Program Files (x86)\Mozilla Firefox\plugins => nicht gefunden

FF HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Mozilla Firefox 33.0.3\Extensions: [Components] - C:\Program Files (x86)\Mozilla Firefox\components => nicht gefunden

FF HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Mozilla Firefox 33.0.3\Extensions: [Plugins] - C:\Program Files (x86)\Mozilla Firefox\plugins => nicht gefunden

FF HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Mozilla Firefox 36.0.3\Extensions: [Components] - C:\Program Files (x86)\Mozilla Firefox\components => nicht gefunden

FF HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Mozilla Firefox 36.0.3\Extensions: [Plugins] - C:\Program Files (x86)\Mozilla Firefox\plugins => nicht gefunden

FF HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Mozilla Firefox 37.0.1\Extensions: [Components] - C:\Program Files (x86)\Mozilla Firefox\components => nicht gefunden

FF HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Mozilla Firefox 37.0.1\Extensions: [Plugins] - C:\Program Files (x86)\Mozilla Firefox\plugins => nicht gefunden

FF HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Mozilla Firefox 38.0.1\Extensions: [Components] - C:\Program Files (x86)\Mozilla Firefox\components => nicht gefunden

FF HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Mozilla Firefox 38.0.1\Extensions: [Plugins] - C:\Program Files (x86)\Mozilla Firefox\plugins => nicht gefunden

StartMenuInternet: FIREFOX.EXE - "C:\Program Files (x86)\Mozilla Firefox\firefox.exe"

FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\channel-prefs.js [2015-12-24]
 

Chrome: 

=======

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
 

Opera: 

=======

StartMenuInternet: (HKLM) Opera - "C:\Program Files (x86)\Opera\Opera.exe"
 

==================== Dienste (Alle) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [10900888 2016-01-06] (Emsisoft Ltd)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [82128 2015-09-14] (Adobe Systems Incorporated)

R3 AeLookupSvc; C:\Windows\System32\aelupsvc.dll [72192 2015-03-04] (Microsoft Corporation)

S3 ALG; C:\Windows\System32\alg.exe [79360 2009-07-14] (Microsoft Corporation)

S3 AppIDSvc; C:\Windows\System32\appidsvc.dll [32768 2015-10-01] (Microsoft Corporation)

R3 Appinfo; C:\Windows\System32\appinfo.dll [70656 2015-06-15] (Microsoft Corporation)

S4 aspnet_state; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [50864 2014-04-11] (Microsoft Corporation)

R2 AudioEndpointBuilder; C:\Windows\System32\Audiosrv.dll [680960 2015-02-03] (Microsoft Corporation)

R2 AudioSrv; C:\Windows\System32\Audiosrv.dll [680960 2015-02-03] (Microsoft Corporation)

S3 AxInstSV; C:\Windows\System32\AxInstSV.dll [114688 2010-11-20] (Microsoft Corporation)

S3 BDESVC; C:\Windows\System32\bdesvc.dll [100864 2009-07-14] (Microsoft Corporation)

R2 BFE; C:\Windows\System32\bfe.dll [705024 2010-11-20] (Microsoft Corporation)

R2 BITS; C:\Windows\System32\qmgr.dll [849920 2010-11-20] (Microsoft Corporation)

S3 Browser; C:\Windows\System32\browser.dll [136704 2012-07-04] (Microsoft Corporation)

S4 bthserv; C:\Windows\system32\bthserv.dll [83968 2009-07-14] (Microsoft Corporation)

S4 CertPropSvc; C:\Windows\System32\certprop.dll [80384 2010-11-20] (Microsoft Corporation)

S4 clr_optimization_v2.0.50727_32; C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [67224 2014-03-20] (Microsoft Corporation)

S4 clr_optimization_v2.0.50727_64; C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [90776 2014-03-20] (Microsoft Corporation)

S2 clr_optimization_v4.0.30319_32; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [103608 2014-04-11] (Microsoft Corporation)

S2 clr_optimization_v4.0.30319_64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [124088 2014-04-11] (Microsoft Corporation)

R2 CryptSvc; C:\Windows\system32\cryptsvc.dll [188416 2015-04-27] (Microsoft Corporation)

R2 CryptSvc; C:\Windows\SysWOW64\cryptsvc.dll [143872 2015-04-27] (Microsoft Corporation)

R2 DcomLaunch; C:\Windows\system32\rpcss.dll [512000 2010-11-20] (Microsoft Corporation)

S3 defragsvc; C:\Windows\System32\defragsvc.dll [291328 2009-07-14] (Microsoft Corporation)

R2 Dhcp; C:\Windows\system32\dhcpcore.dll [317952 2010-11-20] (Microsoft Corporation)

R2 Dhcp; C:\Windows\SysWOW64\dhcpcore.dll [254464 2010-11-20] (Microsoft Corporation)

R3 Dnscache; C:\Windows\System32\dnsrslvr.dll [183296 2011-03-03] (Microsoft Corporation)

S3 dot3svc; C:\Windows\System32\dot3svc.dll [252416 2010-11-20] (Microsoft Corporation)

R2 DPS; C:\Windows\system32\dps.dll [162816 2010-11-20] (Microsoft Corporation)

R3 EapHost; C:\Windows\System32\eapsvc.dll [111104 2009-07-14] (Microsoft Corporation)

R2 EFS; C:\Windows\System32\lsass.exe [31232 2015-10-20] (Microsoft Corporation)

S2 ehRecvr; C:\Windows\ehome\ehRecvr.exe [696832 2010-11-20] (Microsoft Corporation)

S4 ehSched; C:\Windows\ehome\ehsched.exe [127488 2009-07-14] (Microsoft Corporation)

R2 eventlog; C:\Windows\System32\wevtsvc.dll [1646080 2010-11-20] (Microsoft Corporation)

R2 EventSystem; C:\Windows\system32\es.dll [402944 2009-07-14] (Microsoft Corporation)

R2 EventSystem; C:\Windows\SysWOW64\es.dll [271360 2009-07-14] (Microsoft Corporation)

R3 fdPHost; C:\Windows\system32\fdPHost.dll [16384 2009-07-14] (Microsoft Corporation)

R3 FDResPub; C:\Windows\system32\fdrespub.dll [34816 2009-07-14] (Microsoft Corporation)

R3 FontCache; C:\Windows\system32\FntCache.dll [1180160 2015-11-10] (Microsoft Corporation)

S3 FontCache3.0.0.0; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [42856 2010-11-05] (Microsoft Corporation)

R2 gpsvc; C:\Windows\System32\gpsvc.dll [777728 2010-11-20] (Microsoft Corporation)

R3 hidserv; C:\Windows\System32\hidserv.dll [38912 2009-07-14] (Microsoft Corporation)

R3 hidserv; C:\Windows\SysWOW64\hidserv.dll [49152 2009-07-14] (Microsoft Corporation)

S3 hkmsvc; C:\Windows\system32\kmsvc.dll [90624 2010-11-20] (Microsoft Corporation)

S3 HomeGroupListener; C:\Windows\system32\ListSvc.dll [232448 2010-11-20] (Microsoft Corporation)

R3 HomeGroupProvider; C:\Windows\system32\provsvc.dll [187904 2010-11-20] (Microsoft Corporation)

R3 HomeGroupProvider; C:\Windows\SysWOW64\provsvc.dll [165376 2010-11-20] (Microsoft Corporation)

S4 idsvc; C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe [859280 2014-06-30] (Microsoft Corporation)

R2 IKEEXT; C:\Windows\System32\ikeext.dll [859648 2013-10-12] (Microsoft Corporation)

S4 IPBusEnum; C:\Windows\system32\ipbusenum.dll [101888 2009-07-14] (Microsoft Corporation)

S4 iphlpsvc; C:\Windows\System32\iphlpsvc.dll [569344 2012-10-03] (Microsoft Corporation)

R3 KeyIso; C:\Windows\system32\lsass.exe [31232 2015-10-20] (Microsoft Corporation)

S4 KtmRm; C:\Windows\system32\msdtckrm.dll [368640 2009-07-14] (Microsoft Corporation)

S4 LanmanServer; C:\Windows\System32\srvsvc.dll [236032 2010-11-20] (Microsoft Corporation)

R2 LanmanWorkstation; C:\Windows\System32\wkssvc.dll [118784 2010-11-20] (Microsoft Corporation)

S3 lltdsvc; C:\Windows\System32\lltdsvc.dll [300032 2009-07-14] (Microsoft Corporation)

S3 lmhosts; C:\Windows\System32\lmhsvc.dll [23552 2009-07-14] (Microsoft Corporation)

S3 Mcx2Svc; C:\Windows\system32\Mcx2Svc.dll [84992 2010-11-20] (Microsoft Corporation)

R3 MMCSS; C:\Windows\system32\mmcss.dll [67584 2009-07-14] (Microsoft Corporation)

S3 MozillaMaintenance; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [146888 2015-12-24] (Mozilla Foundation)

R2 MpsSvc; C:\Windows\system32\mpssvc.dll [828416 2010-11-20] (Microsoft Corporation)

S3 MSDTC; C:\Windows\System32\msdtc.exe [141824 2009-07-14] (Microsoft Corporation)

S4 MSiSCSI; C:\Windows\system32\iscsiexe.dll [156672 2009-07-14] (Microsoft Corporation)

R3 msiserver; C:\Windows\System32\msiexec.exe [128000 2015-06-15] (Microsoft Corporation)

R3 msiserver; C:\Windows\SysWOW64\msiexec.exe [73216 2015-06-15] (Microsoft Corporation)

S4 napagent; C:\Windows\system32\qagentRT.dll [476160 2010-11-20] (Microsoft Corporation)

S3 Netlogon; C:\Windows\system32\lsass.exe [31232 2015-10-20] (Microsoft Corporation)

R3 Netman; C:\Windows\System32\netman.dll [360448 2009-07-14] (Microsoft Corporation)

S4 NetMsmqActivator; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [139944 2014-04-12] (Microsoft Corporation)

S4 NetPipeActivator; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [139944 2014-04-12] (Microsoft Corporation)

R3 netprofm; C:\Windows\System32\netprofm.dll [459776 2009-07-14] (Microsoft Corporation)

R3 netprofm; C:\Windows\SysWOW64\netprofm.dll [360448 2009-07-14] (Microsoft Corporation)

S4 NetTcpActivator; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [139944 2014-04-12] (Microsoft Corporation)

S3 NetTcpPortSharing; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [139944 2014-04-12] (Microsoft Corporation)

R2 NlaSvc; C:\Windows\System32\nlasvc.dll [303616 2014-12-06] (Microsoft Corporation)

R2 nsi; C:\Windows\system32\nsisvc.dll [25600 2009-07-14] (Microsoft Corporation)

R2 nvsvc; C:\Windows\system32\nvvsvc.exe [937616 2015-07-23] (NVIDIA Corporation)

S4 p2pimsvc; C:\Windows\system32\pnrpsvc.dll [327168 2009-07-14] (Microsoft Corporation)

S4 p2psvc; C:\Windows\system32\p2psvc.dll [438784 2009-07-14] (Microsoft Corporation)

R2 PcaSvc; C:\Windows\System32\pcasvc.dll [188416 2015-02-03] (Microsoft Corporation)

S3 PerfHost; C:\Windows\SysWow64\perfhost.exe [20992 2009-07-14] (Microsoft Corporation)

S3 pla; C:\Windows\system32\pla.dll [1389056 2010-11-20] (Microsoft Corporation)

S3 pla; C:\Windows\SysWOW64\pla.dll [1508864 2010-11-20] (Microsoft Corporation)

R2 PlugPlay; C:\Windows\system32\umpnpmgr.dll [404480 2011-05-24] (Microsoft Corporation)

S4 PNRPAutoReg; C:\Windows\system32\pnrpauto.dll [25088 2009-07-14] (Microsoft Corporation)

S4 PNRPsvc; C:\Windows\system32\pnrpsvc.dll [327168 2009-07-14] (Microsoft Corporation)

R3 PolicyAgent; C:\Windows\System32\ipsecsvc.dll [501248 2010-11-20] (Microsoft Corporation)

R2 Power; C:\Windows\system32\umpo.dll [163840 2009-07-14] (Microsoft Corporation)

R2 ProfSvc; C:\Windows\system32\profsvc.dll [210432 2014-12-19] (Microsoft Corporation)

S3 ProtectedStorage; C:\Windows\system32\lsass.exe [31232 2015-10-20] (Microsoft Corporation)

S3 QWAVE; C:\Windows\system32\qwave.dll [242688 2009-07-14] (Microsoft Corporation)

S3 QWAVE; C:\Windows\SysWOW64\qwave.dll [210944 2009-07-14] (Microsoft Corporation)

S3 RasAuto; C:\Windows\System32\rasauto.dll [99328 2009-07-14] (Microsoft Corporation)

S3 RasMan; C:\Windows\System32\rasmans.dll [344064 2010-11-20] (Microsoft Corporation)

S4 RemoteAccess; C:\Windows\System32\mprdim.dll [97792 2009-07-14] (Microsoft Corporation)

S4 RemoteAccess; C:\Windows\SysWOW64\mprdim.dll [75264 2009-07-14] (Microsoft Corporation)

S4 RemoteRegistry; C:\Windows\system32\regsvc.dll [159232 2009-07-14] (Microsoft Corporation)

R2 RpcEptMapper; C:\Windows\System32\RpcEpMap.dll [67072 2009-07-14] (Microsoft Corporation)

S3 RpcLocator; C:\Windows\system32\locator.exe [10240 2009-07-14] (Microsoft Corporation)

R2 RpcSs; C:\Windows\system32\rpcss.dll [512000 2010-11-20] (Microsoft Corporation)

R2 SamSs; C:\Windows\system32\lsass.exe [31232 2015-10-20] (Microsoft Corporation)

S4 SCardSvr; C:\Windows\System32\SCardSvr.dll [190976 2009-07-14] (Microsoft Corporation)

R2 Schedule; C:\Windows\system32\schedsvc.dll [1110016 2015-08-05] (Microsoft Corporation)

S4 SCPolicySvc; C:\Windows\System32\certprop.dll [80384 2010-11-20] (Microsoft Corporation)

R3 SDRSVC; C:\Windows\System32\SDRSVC.dll [170496 2010-11-20] (Microsoft Corporation)

S3 seclogon; C:\Windows\system32\seclogon.dll [30720 2010-11-20] (Microsoft Corporation)

R2 SENS; C:\Windows\system32\sens.dll [64512 2009-07-14] (Microsoft Corporation)

R2 SENS; C:\Windows\SysWOW64\sens.dll [49664 2009-07-14] (Microsoft Corporation)

S4 SensrSvc; C:\Windows\system32\sensrsvc.dll [29184 2009-07-14] (Microsoft Corporation)

S4 SessionEnv; C:\Windows\system32\sessenv.dll [121856 2010-11-20] (Microsoft Corporation)

S4 SessionEnv; C:\Windows\SysWOW64\sessenv.dll [113664 2010-11-20] (Microsoft Corporation)

S2 SharedAccess; C:\Windows\System32\ipnathlp.dll [359424 2009-07-14] (Microsoft Corporation)

R3 ShellHWDetection; C:\Windows\System32\shsvcs.dll [370688 2010-11-20] (Microsoft Corporation)

R3 ShellHWDetection; C:\Windows\SysWOW64\shsvcs.dll [328192 2010-11-20] (Microsoft Corporation)

S4 SNMPTRAP; C:\Windows\System32\snmptrap.exe [14336 2009-07-14] (Microsoft Corporation)

S4 Spooler; C:\Windows\System32\spoolsv.exe [559104 2012-02-11] (Microsoft Corporation)

S2 sppsvc; C:\Windows\system32\sppsvc.exe [3524608 2010-11-20] (Microsoft Corporation)

S3 sppuinotify; C:\Windows\system32\sppuinotify.dll [65536 2009-07-14] (Microsoft Corporation)

R3 SSDPSRV; C:\Windows\System32\ssdpsrv.dll [193024 2009-07-14] (Microsoft Corporation)

R3 SstpSvc; C:\Windows\system32\sstpsvc.dll [75264 2009-07-14] (Microsoft Corporation)

R2 Stereo Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [410952 2015-07-23] (NVIDIA Corporation)

R2 stisvc; C:\Windows\System32\wiaservc.dll [580096 2010-11-20] (Microsoft Corporation)

R3 swprv; C:\Windows\System32\swprv.dll [524288 2009-07-14] (Microsoft Corporation)

R2 SysMain; C:\Windows\system32\sysmain.dll [1743360 2015-07-15] (Microsoft Corporation)

S4 TabletInputService; C:\Windows\System32\TabSvc.dll [92672 2010-11-20] (Microsoft Corporation)

S4 TapiSrv; C:\Windows\System32\tapisrv.dll [316928 2010-11-20] (Microsoft Corporation)

S4 TapiSrv; C:\Windows\SysWOW64\tapisrv.dll [242176 2010-11-20] (Microsoft Corporation)

S3 TBS; C:\Windows\System32\tbssvc.dll [65536 2009-07-14] (Microsoft Corporation)

R2 TermService; C:\Windows\System32\termsrv.dll [683520 2014-10-14] (Microsoft Corporation)

R2 Themes; C:\Windows\system32\themeservice.dll [44544 2009-07-14] (Microsoft Corporation)

S3 THREADORDER; C:\Windows\system32\mmcss.dll [67584 2009-07-14] (Microsoft Corporation)

S3 TrkWks; C:\Windows\System32\trkwks.dll [119808 2009-07-14] (Microsoft Corporation)

S3 TrustedInstaller; C:\Windows\servicing\TrustedInstaller.exe [194048 2010-11-20] (Microsoft Corporation)

S4 UI0Detect; C:\Windows\system32\UI0Detect.exe [40960 2009-07-14] (Microsoft Corporation)

R3 upnphost; C:\Windows\System32\upnphost.dll [353792 2009-07-14] (Microsoft Corporation)

R3 upnphost; C:\Windows\SysWOW64\upnphost.dll [266752 2009-07-14] (Microsoft Corporation)

R2 UxSms; C:\Windows\System32\uxsms.dll [38912 2009-07-14] (Microsoft Corporation)

S3 VaultSvc; C:\Windows\system32\lsass.exe [31232 2015-10-20] (Microsoft Corporation)

S3 vds; C:\Windows\System32\vds.exe [533504 2010-11-20] (Microsoft Corporation)

R3 VSS; C:\Windows\system32\vssvc.exe [1600512 2010-11-20] (Microsoft Corporation)

S3 W32Time; C:\Windows\system32\w32time.dll [381952 2009-07-14] (Microsoft Corporation)

S3 wbengine; C:\Windows\system32\wbengine.exe [1504256 2010-11-20] (Microsoft Corporation)

S4 WbioSrvc; C:\Windows\System32\wbiosrvc.dll [202240 2009-07-14] (Microsoft Corporation)

S3 wcncsvc; C:\Windows\System32\wcncsvc.dll [367104 2010-11-20] (Microsoft Corporation)

S3 wcncsvc; C:\Windows\SysWOW64\wcncsvc.dll [276992 2010-11-20] (Microsoft Corporation)

S3 WcsPlugInService; C:\Windows\System32\WcsPlugInService.dll [40960 2009-07-14] (Microsoft Corporation)

S3 WcsPlugInService; C:\Windows\SysWOW64\WcsPlugInService.dll [32768 2009-07-14] (Microsoft Corporation)

R3 WdiServiceHost; C:\Windows\system32\wdi.dll [91136 2015-01-09] (Microsoft Corporation)

R3 WdiServiceHost; C:\Windows\SysWOW64\wdi.dll [76800 2015-01-09] (Microsoft Corporation)

R3 WdiSystemHost; C:\Windows\system32\wdi.dll [91136 2015-01-09] (Microsoft Corporation)

R3 WdiSystemHost; C:\Windows\SysWOW64\wdi.dll [76800 2015-01-09] (Microsoft Corporation)

S3 WebClient; C:\Windows\System32\webclnt.dll [260096 2015-07-01] (Microsoft Corporation)

S3 WebClient; C:\Windows\SysWOW64\webclnt.dll [206848 2015-07-01] (Microsoft Corporation)

S3 Wecsvc; C:\Windows\system32\wecsvc.dll [237568 2009-07-14] (Microsoft Corporation)

S4 wercplsupport; C:\Windows\System32\wercplsupport.dll [84480 2009-07-14] (Microsoft Corporation)

S4 WerSvc; C:\Windows\System32\WerSvc.dll [76800 2009-07-14] (Microsoft Corporation)

S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

R3 WinHttpAutoProxySvc; C:\Windows\system32\winhttp.dll [444416 2010-11-20] (Microsoft Corporation)

R3 WinHttpAutoProxySvc; C:\Windows\SysWOW64\winhttp.dll [351232 2010-11-20] (Microsoft Corporation)

R2 Winmgmt; C:\Windows\system32\wbem\WMIsvc.dll [242688 2009-07-14] (Microsoft Corporation)

S3 WinRM; C:\Windows\system32\WsmSvc.dll [2020352 2014-10-03] (Microsoft Corporation)

S3 WinRM; C:\Windows\SysWOW64\WsmSvc.dll [1177088 2014-10-03] (Microsoft Corporation)

R2 Wlansvc; C:\Windows\System32\wlansvc.dll [886784 2009-07-14] (Microsoft Corporation)

S3 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2292480 2012-07-17] (Microsoft Corp.)

S3 wmiApSrv; C:\Windows\system32\wbem\WmiApSrv.exe [203264 2009-07-14] (Microsoft Corporation)

S4 WMPNetworkSvc; C:\Program Files\Windows Media Player\wmpnetwk.exe [1525248 2010-11-20] (Microsoft Corporation)

S4 WPCSvc; C:\Windows\System32\wpcsvc.dll [12288 2009-07-14] (Microsoft Corporation)

S4 WPCSvc; C:\Windows\SysWOW64\wpcsvc.dll [10752 2009-07-14] (Microsoft Corporation)

R3 WPDBusEnum; C:\Windows\system32\wpdbusenum.dll [117248 2010-11-20] (Microsoft Corporation)

R2 wscsvc; C:\Windows\system32\wscsvc.dll [97280 2009-07-14] (Microsoft Corporation)

R2 WSearch; C:\Windows\system32\SearchIndexer.exe [591872 2011-05-04] (Microsoft Corporation)

R2 WSearch; C:\Windows\SysWOW64\SearchIndexer.exe [427520 2011-05-04] (Microsoft Corporation)

R2 wuauserv; C:\Windows\system32\wuaueng.dll [2609152 2015-11-20] (Microsoft Corporation)

R3 wudfsvc; C:\Windows\System32\WUDFSvc.dll [84992 2012-07-26] (Microsoft Corporation)

S4 WwanSvc; C:\Windows\System32\wwansvc.dll [228864 2014-01-28] (Microsoft Corporation)

S3 COMSysApp; %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
 

==================== Treiber (Alle) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 1394ohci; C:\Windows\system32\drivers\1394ohci.sys [229888 2010-11-20] (Microsoft Corporation)

R0 ACPI; C:\Windows\System32\drivers\ACPI.sys [334208 2010-11-20] (Microsoft Corporation)

S3 AcpiPmi; C:\Windows\system32\drivers\acpipmi.sys [12800 2010-11-20] (Microsoft Corporation)

S3 adp94xx; C:\Windows\system32\DRIVERS\adp94xx.sys [491088 2009-07-14] (Adaptec, Inc.)

S3 adpahci; C:\Windows\system32\DRIVERS\adpahci.sys [339536 2009-07-14] (Adaptec, Inc.)

S3 adpu320; C:\Windows\system32\DRIVERS\adpu320.sys [182864 2009-07-14] (Adaptec, Inc.)

R1 AFD; C:\Windows\system32\drivers\afd.sys [497664 2015-10-13] (Microsoft Corporation)

S3 agp440; C:\Windows\system32\drivers\agp440.sys [61008 2009-07-14] (Microsoft Corporation)

S3 aliide; C:\Windows\system32\drivers\aliide.sys [15440 2009-07-14] (Acer Laboratories Inc.)

S3 amdide; C:\Windows\system32\drivers\amdide.sys [15440 2009-07-14] (Microsoft Corporation)

S3 AmdK8; C:\Windows\system32\DRIVERS\amdk8.sys [64512 2009-07-14] (Microsoft Corporation)

R3 AmdPPM; C:\Windows\System32\DRIVERS\amdppm.sys [60928 2009-07-14] (Microsoft Corporation)

S3 amdsata; C:\Windows\system32\drivers\amdsata.sys [107904 2011-03-11] (Advanced Micro Devices)

S3 amdsbs; C:\Windows\system32\DRIVERS\amdsbs.sys [194128 2009-07-14] (AMD Technologies Inc.)

R0 amdxata; C:\Windows\System32\drivers\amdxata.sys [27008 2011-03-11] (Advanced Micro Devices)

S3 AppID; C:\Windows\system32\drivers\appid.sys [61440 2015-10-01] (Microsoft Corporation)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 arc; C:\Windows\system32\DRIVERS\arc.sys [87632 2009-07-14] (Adaptec, Inc.)

S3 arcsas; C:\Windows\system32\DRIVERS\arcsas.sys [97856 2009-07-14] (Adaptec, Inc.)

R3 AsyncMac; C:\Windows\System32\DRIVERS\asyncmac.sys [23040 2009-07-14] (Microsoft Corporation)

R0 atapi; C:\Windows\System32\drivers\atapi.sys [24128 2009-07-14] (Microsoft Corporation)

S3 b06bdrv; C:\Windows\system32\DRIVERS\bxvbda.sys [468480 2009-06-10] (Broadcom Corporation)

S3 b57nd60a; C:\Windows\System32\DRIVERS\b57nd60a.sys [270848 2009-06-10] (Broadcom Corporation)

U5 BattC; C:\Windows\System32\Drivers\BattC.sys [28240 2009-07-14] (Microsoft Corporation)

R1 Beep; C:\Windows\System32\Drivers\Beep.sys [6656 2009-07-14] (Microsoft Corporation)

R1 blbdrive; C:\Windows\System32\DRIVERS\blbdrive.sys [45056 2009-07-14] (Microsoft Corporation)

R3 bowser; C:\Windows\System32\DRIVERS\bowser.sys [90624 2011-02-23] (Microsoft Corporation)

S3 BrFiltLo; C:\Windows\system32\DRIVERS\BrFiltLo.sys [18432 2009-06-10] (Brother Industries, Ltd.)

S3 BrFiltUp; C:\Windows\system32\DRIVERS\BrFiltUp.sys [8704 2009-06-10] (Brother Industries, Ltd.)

S3 BridgeMP; C:\Windows\System32\DRIVERS\bridge.sys [95232 2009-07-14] (Microsoft Corporation)

S3 Brserid; C:\Windows\System32\Drivers\Brserid.sys [286720 2009-07-14] (Brother Industries Ltd.)

S3 BrSerWdm; C:\Windows\System32\Drivers\BrSerWdm.sys [47104 2009-06-10] (Brother Industries Ltd.)

S3 BrUsbMdm; C:\Windows\System32\Drivers\BrUsbMdm.sys [14976 2009-06-10] (Brother Industries Ltd.)

S3 BrUsbSer; C:\Windows\System32\Drivers\BrUsbSer.sys [14720 2009-06-10] (Brother Industries Ltd.)

S3 BTHMODEM; C:\Windows\system32\DRIVERS\bthmodem.sys [72192 2009-07-14] (Microsoft Corporation)

S4 cdfs; C:\Windows\System32\DRIVERS\cdfs.sys [92160 2009-07-14] (Microsoft Corporation)

R1 cdrom; C:\Windows\System32\DRIVERS\cdrom.sys [147456 2010-11-20] (Microsoft Corporation)

S3 circlass; C:\Windows\system32\DRIVERS\circlass.sys [45568 2009-07-14] (Microsoft Corporation)

R0 CLFS; C:\Windows\System32\CLFS.sys [367552 2015-03-04] (Microsoft Corporation)

S3 CmBatt; C:\Windows\system32\DRIVERS\CmBatt.sys [17664 2009-07-14] (Microsoft Corporation)

S3 cmdide; C:\Windows\system32\drivers\cmdide.sys [17488 2009-07-14] (CMD Technology, Inc.)

R0 CNG; C:\Windows\System32\Drivers\cng.sys [460776 2015-09-23] (Microsoft Corporation)

S3 Compbatt; C:\Windows\system32\DRIVERS\compbatt.sys [21584 2009-07-14] (Microsoft Corporation)

R3 CompositeBus; C:\Windows\system32\drivers\CompositeBus.sys [38912 2010-11-20] (Microsoft Corporation)

S4 crcdisk; C:\Windows\system32\DRIVERS\crcdisk.sys [24144 2009-07-14] (Microsoft Corporation)

R1 DfsC; C:\Windows\System32\Drivers\dfsc.sys [102400 2010-11-20] (Microsoft Corporation)

R1 discache; C:\Windows\System32\drivers\discache.sys [40448 2009-07-14] (Microsoft Corporation)

R0 Disk; C:\Windows\System32\DRIVERS\disk.sys [73280 2009-07-14] (Microsoft Corporation)

S3 drmkaud; C:\Windows\system32\drivers\drmkaud.sys [5632 2009-07-14] (Microsoft Corporation)

R3 DXGKrnl; C:\Windows\System32\drivers\dxgkrnl.sys [985536 2014-06-16] (Microsoft Corporation)

S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)

S3 elxstor; C:\Windows\system32\DRIVERS\elxstor.sys [530496 2009-07-14] (Emulex)

R1 epp; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\epp.sys [123992 2015-11-13] (Emsisoft Ltd)

S3 ErrDev; C:\Windows\system32\drivers\errdev.sys [9728 2009-07-14] (Microsoft Corporation)

S3 exfat; C:\Windows\System32\Drivers\exfat.sys [195072 2009-07-14] (Microsoft Corporation)

S3 fastfat; C:\Windows\System32\Drivers\fastfat.sys [204800 2009-07-14] (Microsoft Corporation)

S3 fdc; C:\Windows\system32\DRIVERS\fdc.sys [29696 2009-07-14] (Microsoft Corporation)

R0 FileInfo; C:\Windows\System32\drivers\fileinfo.sys [70224 2009-07-14] (Microsoft Corporation)

S3 Filetrace; C:\Windows\System32\drivers\filetrace.sys [34304 2009-07-14] (Microsoft Corporation)

S3 flpydisk; C:\Windows\system32\DRIVERS\flpydisk.sys [24576 2009-07-14] (Microsoft Corporation)

R0 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [289664 2010-11-20] (Microsoft Corporation)

S3 FsDepends; C:\Windows\System32\drivers\FsDepends.sys [55376 2009-07-14] (Microsoft Corporation)

U0 Fs_Rec; C:\Windows\System32\Drivers\Fs_Rec.sys [23408 2012-03-01] (Microsoft Corporation)

R0 fvevol; C:\Windows\System32\DRIVERS\fvevol.sys [223752 2013-01-24] (Microsoft Corporation)

S3 gagp30kx; C:\Windows\system32\DRIVERS\gagp30kx.sys [65088 2009-07-14] (Microsoft Corporation)

S3 hcw85cir; C:\Windows\system32\drivers\hcw85cir.sys [31232 2009-06-10] (Hauppauge Computer Works, Inc.)

S3 HdAudAddService; C:\Windows\System32\drivers\HdAudio.sys [350208 2010-11-20] (Microsoft Corporation)

R3 HDAudBus; C:\Windows\System32\DRIVERS\HDAudBus.sys [122368 2010-11-20] (Microsoft Corporation)

S3 HidBatt; C:\Windows\system32\DRIVERS\HidBatt.sys [26624 2009-07-14] (Microsoft Corporation)

S3 HidBth; C:\Windows\system32\DRIVERS\hidbth.sys [100864 2009-07-14] (Microsoft Corporation)

S3 HidIr; C:\Windows\system32\DRIVERS\hidir.sys [46592 2009-07-14] (Microsoft Corporation)

R3 HidUsb; C:\Windows\system32\drivers\hidusb.sys [30208 2010-11-20] (Microsoft Corporation)

S3 HpSAMD; C:\Windows\system32\drivers\HpSAMD.sys [78720 2010-11-20] (Hewlett-Packard Company)

R3 HTTP; C:\Windows\System32\drivers\HTTP.sys [754688 2015-02-25] (Microsoft Corporation)

R0 hwpolicy; C:\Windows\System32\drivers\hwpolicy.sys [14720 2010-11-20] (Microsoft Corporation)

S3 i8042prt; C:\Windows\system32\drivers\i8042prt.sys [105472 2009-07-14] (Microsoft Corporation)

S3 iaStorV; C:\Windows\system32\drivers\iaStorV.sys [410496 2011-03-11] (Intel Corporation)

S3 iirsp; C:\Windows\system32\DRIVERS\iirsp.sys [44112 2009-07-14] (Intel Corp./ICP vortex GmbH)

R3 IntcAzAudAddService; C:\Windows\System32\drivers\RTKVHD64.sys [3707864 2013-11-19] (Realtek Semiconductor Corp.)

S3 intelide; C:\Windows\system32\drivers\intelide.sys [16960 2009-07-14] (Microsoft Corporation)

S3 intelppm; C:\Windows\system32\DRIVERS\intelppm.sys [62464 2009-07-14] (Microsoft Corporation)

S3 IpFilterDriver; C:\Windows\System32\DRIVERS\ipfltdrv.sys [82944 2010-11-20] (Microsoft Corporation)

S3 IPMIDRV; C:\Windows\system32\drivers\IPMIDrv.sys [78848 2010-11-20] (Microsoft Corporation)

S3 IPNAT; C:\Windows\System32\drivers\ipnat.sys [116224 2009-07-14] (Microsoft Corporation)

S3 IRENUM; C:\Windows\System32\drivers\irenum.sys [17920 2009-07-14] (Microsoft Corporation)

S3 isapnp; C:\Windows\system32\drivers\isapnp.sys [20544 2009-07-14] (Microsoft Corporation)

S3 iScsiPrt; C:\Windows\system32\drivers\msiscsi.sys [274880 2014-02-04] (Microsoft Corporation)

R3 kbdclass; C:\Windows\System32\DRIVERS\kbdclass.sys [50768 2009-07-14] (Microsoft Corporation)

R3 kbdhid; C:\Windows\System32\DRIVERS\kbdhid.sys [33280 2010-11-20] (Microsoft Corporation)

R0 KSecDD; C:\Windows\System32\Drivers\ksecdd.sys [95680 2015-10-20] (Microsoft Corporation)

R0 KSecPkg; C:\Windows\System32\Drivers\ksecpkg.sys [154560 2015-10-20] (Microsoft Corporation)

R3 ksthunk; C:\Windows\system32\drivers\ksthunk.sys [20992 2009-07-14] (Microsoft Corporation)

R2 lltdio; C:\Windows\System32\DRIVERS\lltdio.sys [60928 2009-07-14] (Microsoft Corporation)

S3 LSI_FC; C:\Windows\system32\DRIVERS\lsi_fc.sys [114752 2009-07-14] (LSI Corporation)

S3 LSI_SAS; C:\Windows\system32\DRIVERS\lsi_sas.sys [106560 2009-07-14] (LSI Corporation)

S3 LSI_SAS2; C:\Windows\system32\DRIVERS\lsi_sas2.sys [65600 2009-07-14] (LSI Corporation)

S3 LSI_SCSI; C:\Windows\system32\DRIVERS\lsi_scsi.sys [115776 2009-07-14] (LSI Corporation)

R2 luafv; C:\Windows\system32\drivers\luafv.sys [113152 2009-07-14] (Microsoft Corporation)

S3 megasas; C:\Windows\system32\DRIVERS\megasas.sys [35392 2009-07-14] (LSI Corporation)

S3 MegaSR; C:\Windows\system32\DRIVERS\MegaSR.sys [284736 2009-07-14] (LSI Corporation, Inc.)

S3 MEMSWEEP2; C:\Windows\system32\61DF.tmp [6144 2009-06-18] (Sophos Plc) [Datei ist nicht signiert]

R2 mi2c; C:\Windows\system32\drivers\mi2c.sys [20784 2015-03-15] (Nicomsoft Ltd.)

S3 Modem; C:\Windows\System32\drivers\modem.sys [40448 2009-07-14] (Microsoft Corporation)

R3 monitor; C:\Windows\System32\DRIVERS\monitor.sys [30208 2009-07-14] (Microsoft Corporation)

R3 mouclass; C:\Windows\System32\DRIVERS\mouclass.sys [49216 2009-07-14] (Microsoft Corporation)

R3 mouhid; C:\Windows\System32\DRIVERS\mouhid.sys [31232 2009-07-14] (Microsoft Corporation)

R0 mountmgr; C:\Windows\System32\drivers\mountmgr.sys [94656 2015-07-15] (Microsoft Corporation)

S3 mpio; C:\Windows\system32\drivers\mpio.sys [155008 2010-11-20] (Microsoft Corporation)

R3 mpsdrv; C:\Windows\System32\drivers\mpsdrv.sys [77312 2009-07-14] (Microsoft Corporation)

S3 MRxDAV; C:\Windows\system32\drivers\mrxdav.sys [141312 2014-12-19] (Microsoft Corporation)

R3 mrxsmb; C:\Windows\System32\DRIVERS\mrxsmb.sys [159232 2015-10-20] (Microsoft Corporation)

R3 mrxsmb10; C:\Windows\System32\DRIVERS\mrxsmb10.sys [290816 2015-10-20] (Microsoft Corporation)

R3 mrxsmb20; C:\Windows\System32\DRIVERS\mrxsmb20.sys [129024 2015-10-20] (Microsoft Corporation)

S3 msahci; C:\Windows\system32\drivers\msahci.sys [31104 2010-11-20] (Microsoft Corporation)

S3 msdsm; C:\Windows\system32\drivers\msdsm.sys [140672 2010-11-20] (Microsoft Corporation)

R1 Msfs; C:\Windows\System32\Drivers\Msfs.sys [26112 2009-07-14] (Microsoft Corporation)

S3 mshidkmdf; C:\Windows\System32\drivers\mshidkmdf.sys [8192 2009-07-14] (Microsoft Corporation)

R0 msisadrv; C:\Windows\System32\drivers\msisadrv.sys [15424 2009-07-14] (Microsoft Corporation)

S3 MSKSSRV; C:\Windows\System32\drivers\MSKSSRV.sys [11136 2009-07-14] (Microsoft Corporation)

S3 MSPCLOCK; C:\Windows\System32\drivers\MSPCLOCK.sys [7168 2009-07-14] (Microsoft Corporation)

S3 MSPQM; C:\Windows\System32\drivers\MSPQM.sys [6784 2009-07-14] (Microsoft Corporation)

S3 MsRPC; C:\Windows\System32\Drivers\MsRPC.sys [366976 2010-11-20] (Microsoft Corporation)

R1 mssmbios; C:\Windows\system32\drivers\mssmbios.sys [32320 2009-07-14] (Microsoft Corporation)

S3 MSTEE; C:\Windows\System32\drivers\MSTEE.sys [8064 2009-07-14] (Microsoft Corporation)

S3 MTConfig; C:\Windows\system32\DRIVERS\MTConfig.sys [15360 2009-07-14] (Microsoft Corporation)

R0 Mup; C:\Windows\System32\Drivers\mup.sys [60496 2009-07-14] (Microsoft Corporation)

R3 NativeWifiP; C:\Windows\System32\DRIVERS\nwifi.sys [318976 2009-07-14] (Microsoft Corporation)

R0 NDIS; C:\Windows\System32\drivers\ndis.sys [950720 2015-10-13] (Microsoft Corporation)

S3 NdisCap; C:\Windows\System32\DRIVERS\ndiscap.sys [35328 2009-07-14] (Microsoft Corporation)

R3 NdisTapi; C:\Windows\System32\DRIVERS\ndistapi.sys [24064 2009-07-14] (Microsoft Corporation)

R2 Ndisuio; C:\Windows\System32\DRIVERS\ndisuio.sys [56832 2010-11-20] (Microsoft Corporation)

R3 NdisWan; C:\Windows\System32\DRIVERS\ndiswan.sys [164352 2010-11-20] (Microsoft Corporation)

R3 NDProxy; C:\Windows\System32\Drivers\NDProxy.sys [57856 2010-11-20] (Microsoft Corporation)

R1 NetBIOS; C:\Windows\System32\DRIVERS\netbios.sys [44544 2009-07-14] (Microsoft Corporation)

R1 NetBT; C:\Windows\System32\DRIVERS\netbt.sys [261632 2010-11-20] (Microsoft Corporation)

S3 nfrd960; C:\Windows\system32\DRIVERS\nfrd960.sys [51264 2009-07-14] (IBM Corporation)

R1 Npfs; C:\Windows\System32\Drivers\Npfs.sys [44032 2009-07-14] (Microsoft Corporation)

R1 nsiproxy; C:\Windows\System32\drivers\nsiproxy.sys [24576 2009-07-14] (Microsoft Corporation)

R3 Ntfs; C:\Windows\System32\Drivers\Ntfs.sys [1684928 2014-01-24] (Microsoft Corporation)

R1 Null; C:\Windows\System32\Drivers\Null.sys [6144 2009-07-14] (Microsoft Corporation)

R3 NVHDA; C:\Windows\System32\drivers\nvhda64v.sys [205456 2015-11-02] (NVIDIA Corporation)

R3 nvlddmkm; C:\Windows\System32\DRIVERS\nvlddmkm.sys [11055248 2015-07-23] (NVIDIA Corporation)

S3 nvraid; C:\Windows\system32\drivers\nvraid.sys [148352 2011-03-11] (NVIDIA Corporation)

S3 nvstor; C:\Windows\system32\drivers\nvstor.sys [166272 2011-03-11] (NVIDIA Corporation)

R0 nvstor64; C:\Windows\System32\DRIVERS\nvstor64.sys [244328 2010-04-08] (NVIDIA Corporation)

S3 nv_agp; C:\Windows\system32\drivers\nv_agp.sys [122960 2009-07-14] (Microsoft Corporation)

S3 ohci1394; C:\Windows\system32\drivers\ohci1394.sys [72832 2009-07-14] (Microsoft Corporation)

R3 Parport; C:\Windows\System32\DRIVERS\parport.sys [97280 2009-07-14] (Microsoft Corporation)

R0 partmgr; C:\Windows\System32\drivers\partmgr.sys [75120 2012-03-17] (Microsoft Corporation)

R0 pci; C:\Windows\System32\drivers\pci.sys [184704 2010-11-20] (Microsoft Corporation)

R0 pciide; C:\Windows\System32\drivers\pciide.sys [12352 2009-07-14] (Microsoft Corporation)

S3 pcmcia; C:\Windows\system32\DRIVERS\pcmcia.sys [220752 2009-07-14] (Microsoft Corporation)

R0 pcw; C:\Windows\System32\drivers\pcw.sys [50768 2009-07-14] (Microsoft Corporation)

R2 PEAUTH; C:\Windows\System32\drivers\peauth.sys [663552 2015-02-03] (Microsoft Corporation)

R3 PptpMiniport; C:\Windows\System32\DRIVERS\raspptp.sys [111104 2010-11-20] (Microsoft Corporation)

S3 Processor; C:\Windows\system32\DRIVERS\processr.sys [60416 2009-07-14] (Microsoft Corporation)

R1 Psched; C:\Windows\System32\DRIVERS\pacer.sys [131584 2010-11-20] (Microsoft Corporation)

S3 ql2300; C:\Windows\system32\DRIVERS\ql2300.sys [1524816 2009-07-14] (QLogic Corporation)

S3 ql40xx; C:\Windows\system32\DRIVERS\ql40xx.sys [128592 2009-07-14] (QLogic Corporation)

S3 QWAVEdrv; C:\Windows\system32\drivers\qwavedrv.sys [46592 2009-07-14] (Microsoft Corporation)

S3 RasAcd; C:\Windows\System32\DRIVERS\rasacd.sys [14848 2009-07-14] (Microsoft Corporation)

R3 RasAgileVpn; C:\Windows\System32\DRIVERS\AgileVpn.sys [60416 2009-07-14] (Microsoft Corporation)

R3 Rasl2tp; C:\Windows\System32\DRIVERS\rasl2tp.sys [129536 2010-11-20] (Microsoft Corporation)

R3 RasPppoe; C:\Windows\System32\DRIVERS\raspppoe.sys [92672 2009-07-14] (Microsoft Corporation)

R3 RasSstp; C:\Windows\System32\DRIVERS\rassstp.sys [83968 2009-07-14] (Microsoft Corporation)

R1 rdbss; C:\Windows\System32\DRIVERS\rdbss.sys [309248 2010-11-20] (Microsoft Corporation)

S3 rdpbus; C:\Windows\system32\DRIVERS\rdpbus.sys [24064 2009-07-14] (Microsoft Corporation)

R1 RDPCDD; C:\Windows\System32\DRIVERS\RDPCDD.sys [7680 2009-07-14] (Microsoft Corporation)

R1 RDPENCDD; C:\Windows\System32\drivers\rdpencdd.sys [7680 2009-07-14] (Microsoft Corporation)

R1 RDPREFMP; C:\Windows\System32\drivers\rdprefmp.sys [8192 2009-07-14] (Microsoft Corporation)

S3 RdpVideoMiniport; C:\Windows\System32\drivers\rdpvideominiport.sys [19456 2012-08-23] (Microsoft Corporation)

S3 RDPWD; C:\Windows\System32\Drivers\RDPWD.sys [212480 2014-07-17] (Microsoft Corporation)

R0 rdyboost; C:\Windows\System32\drivers\rdyboost.sys [213888 2010-11-20] (Microsoft Corporation)

R2 rspndr; C:\Windows\System32\DRIVERS\rspndr.sys [76800 2009-07-14] (Microsoft Corporation)

S3 RTL8167; C:\Windows\System32\DRIVERS\Rt64win7.sys [883928 2013-11-19] (Realtek                                            )

S3 RTLE8023x64; C:\Windows\System32\DRIVERS\Rtenic64.sys [280344 2010-07-06] (Realtek Semiconductor Corporation                           )

S3 sbp2port; C:\Windows\system32\drivers\sbp2port.sys [103808 2010-11-20] (Microsoft Corporation)

S3 scfilter; C:\Windows\System32\DRIVERS\scfilter.sys [29696 2010-11-20] (Microsoft Corporation)

S4 secdrv; C:\Windows\System32\Drivers\secdrv.sys [23040 2009-06-10] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)

R3 Serenum; C:\Windows\System32\DRIVERS\serenum.sys [23552 2009-07-14] (Microsoft Corporation)

R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Microsoft Corporation)

S3 sermouse; C:\Windows\system32\DRIVERS\sermouse.sys [26624 2009-07-14] (Microsoft Corporation)

S3 sffdisk; C:\Windows\system32\drivers\sffdisk.sys [14336 2009-07-14] (Microsoft Corporation)

S3 sffp_mmc; C:\Windows\system32\drivers\sffp_mmc.sys [13824 2009-07-14] (Microsoft Corporation)

S3 sffp_sd; C:\Windows\system32\drivers\sffp_sd.sys [14336 2010-11-20] (Microsoft Corporation)

S3 sfloppy; C:\Windows\system32\DRIVERS\sfloppy.sys [16896 2009-07-14] (Microsoft Corporation)

S3 SiSRaid2; C:\Windows\system32\DRIVERS\SiSRaid2.sys [43584 2009-07-14] (Silicon Integrated Systems Corp.)

S3 SiSRaid4; C:\Windows\system32\DRIVERS\sisraid4.sys [80464 2009-07-14] (Silicon Integrated Systems)

S3 Smb; C:\Windows\System32\DRIVERS\smb.sys [93184 2009-07-14] (Microsoft Corporation)

R0 spldr; C:\Windows\System32\Drivers\spldr.sys [19008 2009-07-14] (Microsoft Corporation)

R3 srv; C:\Windows\System32\DRIVERS\srv.sys [467456 2011-04-29] (Microsoft Corporation)

R3 srv2; C:\Windows\System32\DRIVERS\srv2.sys [410112 2011-04-29] (Microsoft Corporation)

R3 srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [168448 2011-04-29] (Microsoft Corporation)

S3 stexstor; C:\Windows\system32\DRIVERS\stexstor.sys [24656 2009-07-14] (Promise Technology)

R3 swenum; C:\Windows\system32\drivers\swenum.sys [12496 2009-07-14] (Microsoft Corporation)

R0 Tcpip; C:\Windows\System32\drivers\tcpip.sys [1903552 2014-04-05] (Microsoft Corporation)

S3 TCPIP6; C:\Windows\System32\DRIVERS\tcpip.sys [1903552 2014-04-05] (Microsoft Corporation)

R2 tcpipreg; C:\Windows\System32\drivers\tcpipreg.sys [45568 2012-10-03] (Microsoft Corporation)

S3 TDPIPE; C:\Windows\System32\drivers\tdpipe.sys [15872 2009-07-14] (Microsoft Corporation)

S3 TDTCP; C:\Windows\System32\drivers\tdtcp.sys [23552 2012-02-17] (Microsoft Corporation)

R1 tdx; C:\Windows\System32\DRIVERS\tdx.sys [118272 2015-10-13] (Microsoft Corporation)

R1 TermDD; C:\Windows\system32\drivers\termdd.sys [63360 2010-11-20] (Microsoft Corporation)

S3 tssecsrv; C:\Windows\System32\DRIVERS\tssecsrv.sys [39936 2014-07-17] (Microsoft Corporation)

S3 TsUsbFlt; C:\Windows\System32\drivers\tsusbflt.sys [56832 2013-10-02] (Microsoft Corporation)

R3 tunnel; C:\Windows\System32\DRIVERS\tunnel.sys [125440 2010-11-20] (Microsoft Corporation)

S3 uagp35; C:\Windows\system32\DRIVERS\uagp35.sys [64080 2009-07-14] (Microsoft Corporation)

S4 udfs; C:\Windows\System32\DRIVERS\udfs.sys [328192 2010-11-20] (Microsoft Corporation)

S3 uliagpkx; C:\Windows\system32\drivers\uliagpkx.sys [64592 2009-07-14] (Microsoft Corporation)

R3 umbus; C:\Windows\system32\drivers\umbus.sys [48640 2010-11-20] (Microsoft Corporation)

S3 UmPass; C:\Windows\system32\DRIVERS\umpass.sys [9728 2009-07-14] (Microsoft Corporation)

U5 UnlockerDriver5; C:\Program Files (x86)\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()

R3 usbccgp; C:\Windows\System32\DRIVERS\usbccgp.sys [99840 2013-11-27] (Microsoft Corporation)

S3 usbcir; C:\Windows\system32\drivers\usbcir.sys [100864 2013-07-12] (Microsoft Corporation)

R3 usbehci; C:\Windows\System32\DRIVERS\usbehci.sys [53248 2013-11-27] (Microsoft Corporation)

R3 usbhub; C:\Windows\System32\DRIVERS\usbhub.sys [343040 2013-11-27] (Microsoft Corporation)

R3 usbohci; C:\Windows\System32\DRIVERS\usbohci.sys [25600 2013-11-27] (Microsoft Corporation)

S3 usbprint; C:\Windows\System32\DRIVERS\usbprint.sys [25088 2009-07-14] (Microsoft Corporation)

S3 usbscan; C:\Windows\System32\DRIVERS\usbscan.sys [42496 2013-07-03] (Microsoft Corporation)

R3 USBSTOR; C:\Windows\System32\DRIVERS\USBSTOR.SYS [91648 2011-03-11] (Microsoft Corporation)

S3 usbuhci; C:\Windows\system32\drivers\usbuhci.sys [30720 2013-11-27] (Microsoft Corporation)

S3 usbvideo; C:\Windows\System32\Drivers\usbvideo.sys [185344 2013-07-12] (Microsoft Corporation)

R0 vdrvroot; C:\Windows\System32\drivers\vdrvroot.sys [36432 2009-07-14] (Microsoft Corporation)

S3 vga; C:\Windows\System32\DRIVERS\vgapnp.sys [29184 2009-07-14] (Microsoft Corporation)

R1 VgaSave; C:\Windows\System32\drivers\vga.sys [29184 2009-07-14] (Microsoft Corporation)

S3 vhdmp; C:\Windows\system32\drivers\vhdmp.sys [215936 2010-11-20] (Microsoft Corporation)

S3 viaide; C:\Windows\system32\drivers\viaide.sys [17488 2009-07-14] (VIA Technologies, Inc.)

R0 volmgr; C:\Windows\System32\drivers\volmgr.sys [71552 2010-11-20] (Microsoft Corporation)

R0 volmgrx; C:\Windows\System32\drivers\volmgrx.sys [363392 2010-11-20] (Microsoft Corporation)

R0 volsnap; C:\Windows\System32\drivers\volsnap.sys [295808 2010-11-20] (Microsoft Corporation)

S3 vsmraid; C:\Windows\system32\DRIVERS\vsmraid.sys [161872 2009-07-14] (VIA Technologies Inc.,Ltd)

S3 vwifibus; C:\Windows\System32\DRIVERS\vwifibus.sys [24576 2009-07-14] (Microsoft Corporation)

R1 vwififlt; C:\Windows\System32\DRIVERS\vwififlt.sys [59904 2009-07-14] (Microsoft Corporation)

S3 vwifimp; C:\Windows\System32\DRIVERS\vwifimp.sys [17920 2009-07-14] (Microsoft Corporation)

S3 WacomPen; C:\Windows\system32\DRIVERS\wacompen.sys [27776 2009-07-14] (Microsoft Corporation)

S3 WANARP; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-20] (Microsoft Corporation)

R1 Wanarpv6; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-20] (Microsoft Corporation)

S3 Wd; C:\Windows\system32\DRIVERS\wd.sys [21056 2009-07-14] (Microsoft Corporation)

R0 Wdf01000; C:\Windows\System32\drivers\Wdf01000.sys [785624 2013-06-25] (Microsoft Corporation)

R1 WfpLwf; C:\Windows\System32\DRIVERS\wfplwf.sys [12800 2009-07-14] (Microsoft Corporation)

S3 WIMMount; C:\Windows\System32\drivers\wimmount.sys [22096 2009-07-14] (Microsoft Corporation)

S3 WIMMount; C:\Windows\SysWOW64\drivers\wimmount.sys [19008 2009-07-14] (Microsoft Corporation)

U3 Winsock; kein ImagePath

S3 WinUsb; C:\Windows\system32\drivers\WinUsb.sys [41984 2010-11-20] (Microsoft Corporation)

S3 WmiAcpi; C:\Windows\system32\drivers\wmiacpi.sys [14336 2009-07-14] (Microsoft Corporation)

R1 ws2ifsl; C:\Windows\system32\drivers\ws2ifsl.sys [21504 2009-07-14] (Microsoft Corporation)

R3 WudfPf; C:\Windows\System32\drivers\WudfPf.sys [87040 2012-07-26] (Microsoft Corporation)

R3 WUDFRd; C:\Windows\System32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation)

S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-01-06 22:41 - 2016-01-06 22:41 - 00061836 _____ C:\Users\Besitzer\Downloads\Shortcut.txt

2016-01-06 22:40 - 2016-01-06 22:41 - 00036669 _____ C:\Users\Besitzer\Downloads\Addition.txt

2016-01-06 22:39 - 2016-01-06 22:41 - 00071165 _____ C:\Users\Besitzer\Downloads\FRST.txt

2016-01-06 22:39 - 2016-01-06 22:39 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task

2016-01-06 22:38 - 2016-01-06 22:38 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2016-01-06 22:37 - 2016-01-06 22:38 - 02370560 _____ (Farbar) C:\Users\Besitzer\Downloads\FRST64.exe

2016-01-06 22:37 - 2016-01-06 22:37 - 00000000 ____D C:\Program Files (x86)\Adobe

2016-01-06 22:34 - 2016-01-06 22:35 - 01749504 _____ C:\Users\Besitzer\Downloads\AdwCleaner_5.028.exe

2016-01-06 21:52 - 2016-01-06 21:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2016-01-05 23:50 - 2016-01-06 21:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2016-01-05 20:44 - 2016-01-05 20:44 - 00408952 _____ C:\Windows\system32\FNTCACHE.DAT

2016-01-01 20:35 - 2016-01-04 04:46 - 00000000 ____D C:\Users\Besitzer\Desktop\netstat

2015-12-29 23:00 - 2015-12-29 23:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PopCap Games

2015-12-23 19:41 - 2015-12-23 19:42 - 00000000 ____D C:\Users\Besitzer\Downloads\Scans

2015-12-23 01:20 - 2015-12-23 01:20 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\.marble

2015-12-21 23:50 - 2016-01-06 22:41 - 00000000 ___DC C:\FRST

2015-12-18 02:40 - 2015-12-18 02:40 - 00000000 ____D C:\ProgramData\Package Cache

2015-12-08 20:53 - 2015-11-20 19:54 - 03170304 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-12-08 20:53 - 2015-11-20 19:54 - 02609152 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-12-08 20:53 - 2015-11-20 19:54 - 00709632 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-12-08 20:53 - 2015-11-20 19:54 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-12-08 20:53 - 2015-11-20 19:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-12-08 20:53 - 2015-11-20 19:54 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-12-08 20:53 - 2015-11-20 19:54 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-12-08 20:53 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-12-08 20:53 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-12-08 20:53 - 2015-11-20 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-12-08 20:53 - 2015-11-20 19:54 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-12-08 20:53 - 2015-11-20 19:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-12-08 20:53 - 2015-11-20 19:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-12-08 20:53 - 2015-11-20 19:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-12-08 20:53 - 2015-11-20 19:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-12-08 20:53 - 2015-11-20 19:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-12-08 20:53 - 2015-11-11 19:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll

2015-12-08 20:53 - 2015-11-11 19:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll

2015-12-08 20:53 - 2015-11-11 19:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll

2015-12-08 20:53 - 2015-11-11 19:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll

2015-12-08 20:53 - 2015-11-10 19:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2015-12-08 20:53 - 2015-11-10 19:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2015-12-08 20:53 - 2015-11-10 19:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll

2015-12-08 20:53 - 2015-11-10 19:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2015-12-08 20:53 - 2015-11-10 19:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll

2015-12-08 20:53 - 2015-11-10 18:47 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-12-08 20:53 - 2015-11-06 20:06 - 12306432 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 09072128 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 02470400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 01539584 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 00910848 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 00588800 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 00495616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 00290304 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2015-12-08 20:53 - 2015-11-06 20:06 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\corpol.dll

2015-12-08 20:53 - 2015-11-06 20:05 - 01538048 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-12-08 20:53 - 2015-11-06 20:05 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-12-08 20:53 - 2015-11-06 20:05 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2015-12-08 20:53 - 2015-11-06 20:05 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2015-12-08 20:53 - 2015-11-06 19:48 - 00981504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-12-08 20:53 - 2015-11-06 19:47 - 11032064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-12-08 20:53 - 2015-11-06 19:47 - 06036480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-12-08 20:53 - 2015-11-06 19:47 - 02088448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-12-08 20:53 - 2015-11-06 19:47 - 01267712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-12-08 20:53 - 2015-11-06 19:47 - 00717312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-12-08 20:53 - 2015-11-06 19:47 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-12-08 20:53 - 2015-11-06 19:47 - 00624640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstime.dll

2015-12-08 20:53 - 2015-11-06 19:47 - 00431616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-12-08 20:53 - 2015-11-06 19:47 - 00389120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-12-08 20:53 - 2015-11-06 19:47 - 00345600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-12-08 20:53 - 2015-11-06 19:47 - 00229376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2015-12-08 20:53 - 2015-11-06 19:47 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-12-08 20:53 - 2015-11-06 19:47 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-12-08 20:53 - 2015-11-06 19:47 - 00186368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2015-12-08 20:53 - 2015-11-06 19:47 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-12-08 20:53 - 2015-11-06 19:47 - 00153088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2015-12-08 20:53 - 2015-11-06 19:47 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-12-08 20:53 - 2015-11-06 19:47 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2015-12-08 20:53 - 2015-11-06 19:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-12-08 20:53 - 2015-11-06 19:47 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2015-12-08 20:53 - 2015-11-06 19:47 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\corpol.dll

2015-12-08 20:53 - 2015-11-06 19:46 - 01466368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-12-08 20:53 - 2015-11-06 19:46 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-12-08 20:53 - 2015-11-06 19:46 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2015-12-08 20:53 - 2015-11-06 19:46 - 00015872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2015-12-08 20:53 - 2015-11-05 20:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll

2015-12-08 20:53 - 2015-11-05 20:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll

2015-12-08 20:53 - 2015-11-05 10:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys

2015-12-08 20:53 - 2015-11-03 20:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll

2015-12-08 20:53 - 2015-11-03 20:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll

2015-12-08 20:53 - 2015-11-03 19:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll

2015-12-08 20:53 - 2015-11-03 19:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll

2015-12-08 20:52 - 2015-11-06 19:47 - 00132096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2015-12-08 20:52 - 2015-11-06 19:30 - 00483328 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-12-08 20:52 - 2015-11-06 19:11 - 00386560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-12-08 20:52 - 2015-11-06 19:07 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-12-08 20:52 - 2015-11-06 18:54 - 01638912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-12-08 15:52 - 2015-12-08 15:53 - 00000000 ___RD C:\Users\Besitzer\Downloads\Leba
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-01-06 22:40 - 2009-07-14 04:20 - 00000000 ____D C:\Windows

2016-01-06 22:39 - 2014-08-19 21:02 - 00000000 ____D C:\Users\Besitzer\AppData\Local\Adobe

2016-01-06 22:28 - 2011-04-01 22:44 - 00000000 ____D C:\ProgramData\Adobe

2016-01-06 22:16 - 2009-07-14 05:45 - 00023712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2016-01-06 22:16 - 2009-07-14 05:45 - 00023712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2016-01-06 22:08 - 2015-03-14 13:01 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware

2016-01-06 22:08 - 2011-04-01 10:01 - 00000000 ____D C:\ProgramData\NVIDIA

2016-01-06 22:08 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2016-01-06 21:38 - 2011-04-01 10:03 - 00000000 ___RD C:\Users\Besitzer

2016-01-06 21:37 - 2015-04-16 23:43 - 00000000 ____D C:\Users\Administrator.LAVAMAT

2016-01-06 21:37 - 2014-09-04 20:07 - 00000000 ____D C:\ProgramData\PopCap Games

2016-01-06 21:37 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration

2016-01-06 21:37 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf

2016-01-05 23:18 - 2013-12-05 20:37 - 00000000 ___RD C:\Users\Besitzer\Desktop\Aktuell

2016-01-05 23:16 - 2009-07-14 18:58 - 00699456 _____ C:\Windows\system32\perfh007.dat

2016-01-05 23:16 - 2009-07-14 18:58 - 00149596 _____ C:\Windows\system32\perfc007.dat

2016-01-05 23:16 - 2009-07-14 06:13 - 01620784 _____ C:\Windows\system32\PerfStringBackup.INI

2016-01-05 21:01 - 2015-04-12 20:22 - 00002796 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC

2016-01-04 16:42 - 2012-04-01 14:01 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2016-01-04 16:42 - 2011-11-20 22:39 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2016-01-01 02:05 - 2015-09-10 23:43 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\Media Player Classic

2015-12-29 23:31 - 2013-04-08 20:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow

2015-12-29 23:00 - 2009-07-14 06:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2015-12-29 21:25 - 2014-09-04 04:41 - 00000000 ____D C:\Program Files (x86)\Origin Games

2015-12-29 21:22 - 2014-09-04 04:30 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\Origin

2015-12-29 21:21 - 2014-09-04 04:30 - 00000000 ____D C:\Users\Besitzer\AppData\Local\Origin

2015-12-29 21:17 - 2011-04-03 22:35 - 00000000 ___RD C:\Spiele

2015-12-26 21:06 - 2015-06-25 10:54 - 00007622 _____ C:\Users\Besitzer\AppData\Local\Resmon.ResmonCfg

2015-12-25 17:40 - 2013-05-03 18:55 - 00000000 ___RD C:\Users\Besitzer\Downloads\Software

2015-12-23 01:23 - 2015-04-16 15:05 - 00000000 ____D C:\Program Files (x86)\TORYA

2015-12-23 01:17 - 2014-03-24 20:51 - 00000000 ____D C:\Program Files (x86)\Google

2015-12-23 01:17 - 2011-12-05 17:53 - 00000000 ____D C:\Users\Besitzer\AppData\Local\Google

2015-12-19 21:39 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

2015-12-10 22:21 - 2012-04-26 22:58 - 00000000 ___RD C:\Users\Besitzer\Eigener Kram\Wohnen

2015-12-10 05:40 - 2012-04-23 17:49 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\PhotoScape

2015-12-09 05:26 - 2013-08-15 02:35 - 00000000 ____D C:\Windows\system32\MRT

2015-12-09 05:21 - 2015-08-12 09:46 - 140158008 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2011-04-01 23:17 - 2011-11-20 15:42 - 0000146 _____ () C:\Users\Besitzer\AppData\Roaming\default.rss

2015-04-17 15:14 - 2015-04-17 15:15 - 9482240 _____ () C:\Users\Besitzer\AppData\Local\1B902E7A_stp.CIS

2015-04-17 15:14 - 2015-04-17 15:14 - 0000442 _____ () C:\Users\Besitzer\AppData\Local\1B902E7A_stp.CIS.part

2015-04-17 15:07 - 2015-04-17 15:07 - 0043321 _____ () C:\Users\Besitzer\AppData\Local\5079FE7D_stp.CIS

2015-04-17 15:07 - 2015-04-17 15:14 - 0000293 _____ () C:\Users\Besitzer\AppData\Local\5079FE7D_stp.CIS.part

2015-04-17 14:58 - 2015-04-17 14:58 - 0385602 _____ () C:\Users\Besitzer\AppData\Local\5D515C96_stp.CIS

2015-04-17 14:58 - 2015-04-17 15:13 - 0000220 _____ () C:\Users\Besitzer\AppData\Local\5D515C96_stp.CIS.part

2015-04-17 15:07 - 2015-04-17 15:09 - 15769600 _____ () C:\Users\Besitzer\AppData\Local\784ED66F_stp.CIS

2015-04-17 15:07 - 2015-04-17 15:07 - 0000442 _____ () C:\Users\Besitzer\AppData\Local\784ED66F_stp.CIS.part

2013-12-19 02:46 - 2013-12-19 02:46 - 0005632 _____ () C:\Users\Besitzer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2015-06-25 10:54 - 2015-12-26 21:06 - 0007622 _____ () C:\Users\Besitzer\AppData\Local\Resmon.ResmonCfg

2013-12-01 22:01 - 2013-12-01 22:01 - 0000057 _____ () C:\ProgramData\Ament.ini
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2016-01-04 19:22
 

==================== Ende von FRST.txt ============================

Baba Yaga

23.01.2016 00:23

Code:

Untersuchungsergebnis der Verknüpfungen des Benutzers (x64) Version:06-01-2015

durchgeführt von Besitzer (2016-01-06 22:42:09)

Gestartet von C:\Users\Besitzer\Downloads

Start-Modus: Normal
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 
 
 
 
 

Shortcut: C:\Users\Administrator.LAVAMAT\Desktop\Billard2.lnk -> C:\Spiele\Billard2\AmericanPool.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk -> C:\Windows\Installer\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}\SC_Reader.ico (Flexera Software LLC)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk -> C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAME CENTER.lnk -> C:\Program Files (x86)\OXXOGames\GPlayer\GPlayer.exe (Intenium GmbH)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk -> C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe (Google)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk -> C:\Windows\ehome\ehshell.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2010.lnk -> C:\Windows\Installer\{95140000-0070-0000-0000-0000000FF1CE}\oobeicon.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk -> C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk -> C:\Program Files (x86)\Paint.Net\PaintDotNet.exe (dotPDN LLC)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk -> C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk -> C:\Windows\System32\WindowsAnytimeUpgradeUI.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk -> C:\Program Files\DVD Maker\DVDMaker.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk -> C:\Program Files (x86)\Windows Live\Mail\wlmail.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk -> C:\Windows\System32\xpsrchvw.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Walsingham‘s Manor - Verlies der Seelen\Walsingham‘s Manor - Verlies der Seelen deinstallieren.lnk -> C:\Spiele\Walsingham‘s Manor - Verlies der Seelen\unins000.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Walsingham‘s Manor - Verlies der Seelen\Walsingham‘s Manor - Verlies der Seelen starten.lnk -> C:\Spiele\Walsingham‘s Manor - Verlies der Seelen\ghost_painting.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Turtix 2\GAME CENTER.lnk -> C:\Program Files (x86)\OXXOGames\GPlayer\GPlayer.exe (Intenium GmbH)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SuperTux\SuperTux.lnk -> C:\Spiele\SuperTux 0.3.4\supertux2.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Beetle Ju 2.lnk -> C:\Spiele\BeetleJu2CD\BeetleJu2_og.exe (INTENIUM GmbH)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Der bartlose Zauberer.lnk -> C:\Spiele\DerBartloseZauberer\DerBartloseZauberer_og.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Der Exorzist.lnk -> C:\Spiele\DerExorzist\DerExorzist_og.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Die Tuttles.lnk -> C:\Spiele\DieTuttles\DieTuttles_og.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Druids Operation Mistelzweig.lnk -> C:\Spiele\DruidsOperationMistelzweig\DruidsOperationMistelzweig_og.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Frankenstein - Meister des Schreckens.lnk -> C:\Spiele\1Downloads\FrankensteinMeisterDesSchreckens\FrankensteinMeisterDesSchreckens_og.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Haus der 1000 Türen 2 Das Juwel des Zarathustra.lnk -> C:\Spiele\HausDer1000Tueren2\HausDer1000Tueren2_og.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Haus der 1000 Türen Familiengeheimnisse.lnk -> C:\Spiele\HausDer1000Tueren\HausDer1000Tueren_og.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Kingdom Chronicles Königreich in Gefahr.lnk -> C:\Spiele\KingdomChronicles\KingdomChronicles_og.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Moai Erschaffe deinen Traum.lnk -> C:\Spiele\MoaiErschaffeDeinenTraum\MoaiErschaffeDeinenTraum_og.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Sherlock Holmes und der Hund der Baskervilles.lnk -> C:\Spiele\SherlockHolmesHundBaskervilles\SherlockHolmesHundBaskervilles_og.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Sky Taxi 4 Streng Geheim.lnk -> C:\Spiele\SkyTaxi4StrengGeheim\SkyTaxi4StrengGeheim_og.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger 2\Anleitung.lnk -> C:\Spiele\Game\Anleitung.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger 2\Schatzjäger 2 spielen.lnk -> C:\Spiele\Game\Schatzjäger2.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger\Anleitung.lnk -> C:\Spiele\Morrhuhn Schatzjäger 1\Anleitung.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger\Moorhuhn im Internet.lnk -> C:\Spiele\Morrhuhn Schatzjäger 1\Moorhuhn im Internet.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger\phenomedia im Internet.lnk -> C:\Spiele\Morrhuhn Schatzjäger 1\phenomedia im Internet.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger\Schatzjäger deinstallieren.lnk -> C:\Spiele\Morrhuhn Schatzjäger 1\Uninstall.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger\Schatzjäger spielen.lnk -> C:\Spiele\Morrhuhn Schatzjäger 1\Schatzjäger.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in trouble ...again! - Demo\ReadMe.lnk -> C:\Spiele)\Santa Claus in trouble ...again! - Demo\ReadMe.txt (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in trouble ...again! - Demo\Santa Claus in trouble ...again! - Demo deinstallieren.lnk -> C:\Spiele)\Santa Claus in trouble ...again! - Demo\Uninstall\UNWISE.EXE (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in trouble ...again! - Demo\Santa Claus in trouble ...again! - Demo.lnk -> C:\Spiele)\Santa Claus in trouble ...again! - Demo\Run\SC2.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in trouble ...again! - Demo\www.cdv.de.lnk -> C:\Spiele)\Santa Claus in trouble ...again! - Demo\Misc\publisherweb.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in trouble ...again! - Demo\www.joymania.de.lnk -> C:\Spiele)\Santa Claus in trouble ...again! - Demo\Misc\developerweb.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in trouble ...again! - Demo\www.santaclaus2.de.lnk -> C:\Spiele)\Santa Claus in trouble ...again! - Demo\Misc\gameweb.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in Trouble\Liesmich.doc.lnk -> C:\Program Files (x86)\Spiele\Santa Claus in Trouble\Liesmich.doc (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in Trouble\Liesmich.pdf.lnk -> C:\Program Files (x86)\Spiele\Santa Claus in Trouble\Liesmich.pdf (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in Trouble\Santa Claus in Trouble rausschmeißen.lnk -> C:\Program Files (x86)\Spiele\Santa Claus in Trouble\Uninstall\UNWISE.EXE (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in Trouble\Santa Claus in Trouble.lnk -> C:\Program Files (x86)\Spiele\Santa Claus in Trouble\SantaClausInTrouble.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in Trouble\www.cdv.de.lnk -> C:\Program Files (x86)\Spiele\Santa Claus in Trouble\cdv.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in Trouble\www.joymania.de.lnk -> C:\Program Files (x86)\Spiele\Santa Claus in Trouble\joymania.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\Turtix\Turtix deinstallieren.lnk -> K:\Purplehills\Turtix\UNWISE.EXE (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\Turtix\Turtix.lnk -> K:\Purplehills\Turtix\Turtix.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\Tiger Eye\Tiger Eye deinstallieren.lnk -> C:\Spiele\1Sammlung\Tiger Eye\UNWISE.EXE ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\Tiger Eye\Tiger Eye.lnk -> C:\Spiele\1Sammlung\Tiger Eye\Tiger Eye.exe (PassionFruit Games)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\Jumpin'Jack\Jumpin'Jack deinstallieren.lnk -> K:\Purplehills\Jumpin'Jack\UNWISE.EXE (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\Jumpin'Jack\Jumpin'Jack.lnk -> K:\Purplehills\Jumpin'Jack\Jumpin'Jack.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\BestOfWin8\MiniGolfPro\MiniGolfPro deinstallieren.lnk -> C:\Spiele\MiniGolfPro\UNWISE.EXE ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\BestOfWin8\MiniGolfPro\MiniGolfPro.lnk -> C:\Spiele\MiniGolfPro\MiniGolfPro.exe (SunnyGamesLLC)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\BestOfWin8\Crazy Barrels\Crazy Barrels deinstallieren.lnk -> C:\Spiele\Crazy Barrels\UNWISE.EXE ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\BestOfWin8\Crazy Barrels\Crazy Barrels.lnk -> C:\Spiele\Crazy Barrels\crazy barrels.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\BestOfWin8\3D Bowling\3D Bowling deinstallieren.lnk -> C:\Spiele\3D Bowling\UNWISE.EXE ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\BestOfWin8\3D Bowling\3D Bowling.lnk -> C:\Spiele\3D Bowling\3D Bowling.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PopCap Games\Pflanzen gegen Zombies\Liesmich Ansehen.lnk -> C:\Spiele\Pflanzen gegen Zombies\Plants vs. Zombies\liesmich.html ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PopCap Games\Pflanzen gegen Zombies\Spiel Pflanzen gegen Zombies.lnk -> C:\Spiele\Pflanzen gegen Zombies\Plants vs. Zombies\PlantsVsZombies.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\phenomedia\Moorhuhn Winter\Moorhuhn Winter deinstallieren.lnk -> C:\Spiele\Moorhuhn Winter\uninstaller.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\phenomedia\Moorhuhn Winter\Moorhuhn Winter spielen.lnk -> C:\Spiele\Moorhuhn Winter\MoorhuhnWinter.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\phenomedia\Moorhuhn Winter\Spielkiste.lnk -> C:\Program Files (x86)\Einfach_Spielen\spielkiste.exe (phenomedia publishing gmbh)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\phenomedia\Moorhuhn Wanted\Moorhuhn Wanted deinstallieren.lnk -> C:\Spiele\Moorhuhn Wanted\uninstaller.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\phenomedia\Moorhuhn Wanted\Moorhuhn Wanted spielen.lnk -> C:\Spiele\Moorhuhn Wanted\MHW-XXL.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\phenomedia\Moorhuhn Wanted\Spielkiste.lnk -> C:\Program Files (x86)\Einfach_Spielen\spielkiste.exe (phenomedia publishing gmbh)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Phantasmat - Eisiger Gipfel Sammleredition\Spiel Phantasmat - Eisiger Gipfel Sammleredition.lnk -> C:\Spiele\Phantasmat - Eisiger Gipfel Sammleredition\launchgame.bfg (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0\OpenOffice Base.lnk -> C:\Program Files (x86)\OpenOffice 4\program\sbase.exe (Apache Software Foundation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0\OpenOffice Calc.lnk -> C:\Program Files (x86)\OpenOffice 4\program\scalc.exe (Apache Software Foundation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0\OpenOffice Draw.lnk -> C:\Program Files (x86)\OpenOffice 4\program\sdraw.exe (Apache Software Foundation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0\OpenOffice Impress.lnk -> C:\Program Files (x86)\OpenOffice 4\program\simpress.exe (Apache Software Foundation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0\OpenOffice Math.lnk -> C:\Program Files (x86)\OpenOffice 4\program\smath.exe (Apache Software Foundation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0\OpenOffice Writer.lnk -> C:\Program Files (x86)\OpenOffice 4\program\swriter.exe (Apache Software Foundation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0\OpenOffice.lnk -> C:\Program Files (x86)\OpenOffice 4\program\soffice.exe (Apache Software Foundation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\3D Vision Photo Viewer.lnk -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstview.exe (NVIDIA Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nightfall Mysteries - Die Ashburg Verschwörung\Die Ashburg Verschwörung deinstallieren.lnk -> C:\Spiele\Nightfall Mysteries - Die Ashburg Verschwörung\unins000.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nightfall Mysteries - Die Ashburg Verschwörung\Die Ashburg Verschwörung.lnk -> C:\Spiele\Nightfall Mysteries - Die Ashburg Verschwörung\Die Ashburg-Verschwörung.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Create Recovery Disc.lnk -> C:\Windows\System32\recdisc.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Remote Assistance.lnk -> C:\Windows\System32\msra.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logon Screen\Logon Screen.lnk -> C:\Program Files\Logon Screen\Logon Screen.exe (Daniel Rebelo)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IcoFX 1.6\IcoFX on the Web.lnk -> C:\Program Files (x86)\IcoFX 1.6\IcoFX.url ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IcoFX 1.6\IcoFX.lnk -> C:\Program Files (x86)\IcoFX 1.6\IcoFX.exe (Attila Kovrig)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IcoFX 1.6\Uninstall\Uninstall IcoFX.lnk -> C:\Program Files (x86)\IcoFX 1.6\unins000.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Deskjet 1050 J410 series\Druckereinrichtung & -software.lnk -> C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\USBSetupLauncher.exe (Hewlett-Packard Co.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Deskjet 1050 J410 series\Hilfe.lnk -> C:\Program Files (x86)\HP\HP Deskjet 1050 J410 series\bin\HelpViewer\hpqlpvwr.exe (Hewlett-Packard Co.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Deskjet 1050 J410 series\HP Scan.lnk -> C:\Program Files (x86)\HP\HP Deskjet 1050 J410 series\bin\HPScan.exe (Hewlett-Packard Co.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Deskjet 1050 J410 series\Shop für Zubehör.lnk -> C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\hpqDTSS.exe (Hewlett-Packard Co.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Deskjet 1050 J410 series\Website für Produktsupport.lnk -> C:\Program Files\HP\HP Deskjet 1050 J410 series\ProductSupportShortcut.url ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Spiel Phantasmat - Eisiger Gipfel Sammleredition.lnk -> C:\Spiele\Phantasmat - Eisiger Gipfel Sammleredition\launchgame.bfg (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake\Freemake Video Converter.lnk -> C:\Program Files (x86)\TORYA\Freemake\Freemake Video Converter\FreemakeVideoConverter.exe (Freemake)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Folderico\Folderico.lnk -> C:\Program Files (x86)\Folderico\Folderico.exe (Shedko software)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Folderico\Uninstall.lnk -> C:\Program Files (x86)\Folderico\uninst.exe (Shedko ( www.softq.org ))

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fishdom 2 Deluxe\Fishdom 2 Deluxe entfernen.lnk -> C:\Spiele\Fishdom 2 Deluxe\unins000.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fishdom 2 Deluxe\Fishdom 2 Deluxe.lnk -> C:\Spiele\Fishdom 2 Deluxe\Fishdom 2 Deluxe.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fishdom 2 Deluxe\Play More Playrix Games!.lnk -> C:\Spiele\Fishdom 2 Deluxe\homepage.url ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Deinstallieren.lnk -> C:\Program Files (x86)\Emsisoft Anti-Malware\unins000.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Emsisoft Anti-Malware.lnk -> C:\Program Files (x86)\Emsisoft Anti-Malware\a2start.exe (Emsisoft Ltd)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Emsisoft Homepage.lnk -> C:\Program Files (x86)\Emsisoft Anti-Malware\Emsisoft.url ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Hilfe.lnk -> C:\Program Files (x86)\Emsisoft Anti-Malware\de-de.chm ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\DVDVideoSoft Free Studio.lnk -> C:\Program Files (x86)\Common Files\DVDVideoSoft\FreeStudioManager.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Log Report.lnk -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\DVSSysReport.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Premium Membership.lnk -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\PremiumMembershipOffer.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Uninstall.lnk -> C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\Uninstall.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Audio Converter.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Audio Converter\FreeAudioConverter.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Audio Editor.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Audio Editor\FreeAudioEditor.exe (Digital Wave Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Coub Download.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Coub Download\FreeCoubDownload.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Dailymotion Download.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Dailymotion Download\FreeDailymotionDownload.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free DVD Video Burner.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free DVD Video Burner\FreeDVDVideoBurner.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free DVD Video Converter.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free DVD Video Converter\FreeDVDVideoConverter.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free GIF Maker.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free GIF Maker\FreeGIFMaker.exe (Digital Wave Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Image Convert and Resize.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Image Convert And Resize\FreeImageConvertAndResize.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Instagram Download.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Instagram Download\FreeInstagramDownload.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free MP4 Video Converter.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free MP4 Video Converter\FreeMP4VideoConverter.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free NicoVideo Download.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free NicoVideo Download\FreeNicoVideoDownload.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Screen Video Recorder.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Screen Video Recorder\FreeScreenVideoRecorder.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Torrent Download.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Video Editor.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Video Editor\FreeVideoEditor.exe (Digital Wave Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Video Flip and Rotate.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Video Flip And Rotate\FreeVideoFlipAndRotate.exe (Digital Wave Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Video to DVD Converter.lnk -> C:\Program Files (x86)\Torya\DVDVideoSoft\Free DVD Video Burner\FreeVideoToDVDConverter.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Video to JPG Converter.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Video to JPG Converter\FreeVideoToJPGConverter.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Video to MP3 Converter.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Video to MP3 Converter\FreeVideoToMP3Converter.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free YouTube Download.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free YouTube Download\FreeYTVDownloader.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free YouTube to DVD Converter.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free YouTube to DVD Converter\FreeYouTubeToDVDConverter.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free YouTube to MP3 Converter.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free YouTube Uploader.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free YouTube Uploader\FreeYouTubeUploader.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DigiPen\Perspective\Perspective.lnk -> C:\Spiele\DigiPen\Perspective\Perspective.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DigiPen\Perspective\Uninstall.lnk -> C:\Spiele\DigiPen\Perspective\uninst.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Die Sage von Odysseus\Die Sage von Odysseus deinstallieren.lnk -> C:\Spiele\Die Sage von Odysseus\unins000.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Die Sage von Odysseus\Die Sage von Odysseus starten.lnk -> C:\Spiele\Die Sage von Odysseus\game.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DeathMan\DeathMan.lnk -> C:\Spiele\DeathMan\game.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DeathMan\Uninstall DeathMan.lnk -> C:\Spiele\DeathMan\unins000.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Das Geheimnis des Berghotels\Das Geheimnis des Berghotels deinstallieren.lnk -> C:\Spiele\Das Geheimnis des Berghotels\unins000.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Das Geheimnis des Berghotels\Das Geheimnis des Berghotels starten.lnk -> C:\Spiele\Das Geheimnis des Berghotels\Game.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Das Geheimnis des Berghotels\Handbuch.lnk -> C:\Spiele\Das Geheimnis des Berghotels\Manual.pdf (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crazy Golf World Tour\Crazy Golf World Tour.lnk -> C:\Spiele\Crazy Golf World Tour\CrazyGolfWorldTour.exe (Tuna Technologies Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crazy Golf World Tour\Read Me.lnk -> C:\Spiele\Crazy Golf World Tour\ReadMe.txt ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cosmic Ball\Play Cosmic Ball.lnk -> C:\Spiele\Cosmic Ball\game.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cosmic Ball\Uninstall Cosmic Ball.lnk -> C:\Spiele\Cosmic Ball\unins000.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cosmic Ball\Visit MyRealGames.com.lnk -> C:\Spiele\Cosmic Ball\website.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Braid\Run Braid.lnk -> C:\Spiele\Braid\braid.exe (TODO: <Company name>)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Braid\Uninstall Braid.lnk -> C:\Spiele\Braid\unins000.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Billard2\Billard2 deinstallieren.lnk -> C:\Spiele\Billard2\unins000.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Billard2\Billard2.lnk -> C:\Spiele\Billard2\AmericanPool.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BabelSoft\Media Preview\Media Preview Configuration.lnk -> C:\Windows\Installer\{8680D34A-E765-4579-877F-DEA8FB174DA7}\Icon.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\displayswitch.lnk -> C:\Windows\System32\displayswitch.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sound Recorder.lnk -> C:\Windows\System32\SoundRecorder.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sticky Notes.lnk -> C:\Windows\System32\StikyNot.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sync Center.lnk -> C:\Windows\System32\mobsync.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\Windowspowershell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\ShapeCollector.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\TabTip.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Windows Journal.lnk -> C:\Program Files\Windows Journal\Journal.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Restore.lnk -> C:\Windows\System32\rstrui.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk -> C:\Windows\System32\migwiz\PostMig.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer.lnk -> C:\Windows\System32\migwiz\migwiz.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip File Manager.lnk -> C:\Program Files (x86)\7-Zip\7zFM.exe (Igor Pavlov)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip Help.lnk -> C:\Program Files (x86)\7-Zip\7-zip.chm ()

Shortcut: C:\ProgramData\Microsoft\Windows\GameExplorer\{AF469007-7D58-41F0-B05C-182B8EC74E05}\PlayTasks\0\Pflanzen gegen Zombies.lnk -> C:\Spiele\Pflanzen gegen Zombies\Plants vs. Zombies\PlantsVsZombies.exe ()

Shortcut: C:\Users\Besitzer\Links\Desktop.lnk -> C:\Users\Besitzer\Desktop ()

Shortcut: C:\Users\Besitzer\Links\Downloads.lnk -> C:\Users\Besitzer\Downloads ()

Shortcut: C:\Users\Besitzer\Links\Spiele.lnk -> C:\Spiele ()

Shortcut: C:\Users\Besitzer\Downloads\Software\Tor Browser\Start Tor Browser.lnk -> C:\Users\Besitzer\Downloads\Software\Tor Browser\Browser\firefox.exe (Mozilla Corporation)

Shortcut: C:\Users\Besitzer\Desktop\Aktuell\Tiger Eye - Verknüpfung.lnk -> C:\Spiele\1Sammlung\Tiger Eye\Tiger Eye.exe (PassionFruit Games)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Karten- und Brettspiele.lnk -> C:\Spiele\Karten- und Brettspiele\Start.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Setup QuickStart.lnk -> C:\Users\Besitzer\Eigener Kram\VirtualDJ\VirtualDJ 8 - Getting Started.pdf (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\User Guide.lnk -> C:\Users\Besitzer\Eigener Kram\VirtualDJ\VirtualDJ 8 - User Guide.pdf (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\VirtualDJ 8.lnk -> C:\Program Files (x86)\VirtualDJ\virtualdj8.exe (Atomix Productions)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker\README.lnk -> C:\Program Files (x86)\Unlocker\README.TXT ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker\Start Unlocker.lnk -> C:\Program Files (x86)\Unlocker\Unlocker.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker\Uninstall.lnk -> C:\Program Files (x86)\Unlocker\uninst.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker\Website.lnk -> C:\Program Files (x86)\Unlocker\Unlocker.url ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rondomedia\Love Over Death\Love Over Death Deinstallation.lnk -> C:\Spiele\Love Over Death\Uninstall.exe (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rondomedia\Love Over Death\Love Over Death.lnk -> C:\Spiele\Love Over Death\bloodCurse.exe (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Revo Uninstaller.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe (VS Revo Group)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Uninstall.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\uninst.exe (VS Revo Group Ltd.)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Website.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revo Uninstaller.url ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Phantasmat - Eisiger Gipfel Sammleredition\Phantasmat - Eisiger Gipfel Sammleredition deinstallieren.lnk -> C:\Spiele\Phantasmat - Eisiger Gipfel Sammleredition\Uninstall.exe (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Phantasmat - Eisiger Gipfel Sammleredition\Phantasmat - Eisiger Gipfel Sammleredition entschlüsseln.lnk -> C:\Spiele\Phantasmat - Eisiger Gipfel Sammleredition\UnlockGame.bfg (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mysteries of Olympus\Mysteries of Olympus.lnk -> C:\Spiele\Mysteries of Olympus\MysteriesOfOlympus.exe (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mysteries of Olympus\Uninstall Mysteries of Olympus.lnk -> C:\Spiele\Mysteries of Olympus\uninst.exe (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jump Jack\Bitte lesen!.lnk -> C:\Spiele\Jump Jack\Epilepsiewarnung.txt ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jump Jack\Jack starten.lnk -> C:\Spiele\Jump Jack\GameEngine.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jump Jack\Jump Jack deinstallieren.lnk -> C:\Spiele\Jump Jack\Uninstal.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jump Jack\read this!.lnk -> C:\Spiele\Jump Jack\EPILEPSY WARNING_UK.doc ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gehirntraining mit Dr. Kawashima\Dr Kawashima.lnk -> C:\Spiele\DrKawashima\DrKawashima.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gehirntraining mit Dr. Kawashima\Grafikeinstellungen.lnk -> C:\Spiele\DrKawashima\GraphicsSettings\GraphicsSettings.exe (BBG Entertainment GmbH)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gehirntraining mit Dr. Kawashima\Readme.lnk -> C:\Spiele\DrKawashima\readme_de.html ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gehirntraining mit Dr. Kawashima\Uninstall.lnk -> C:\Spiele\DrKawashima\Uninstall.exe (BBG Entertainment GmbH)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake\Uninstall\Uninstall Freemake Video Converter.lnk -> C:\Program Files (x86)\TORYA\Freemake\Freemake Video Converter\Uninstall\unins000.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\Check for updates.lnk -> C:\Users\Besitzer\AppData\Local\CodecDecoder\AutoUpdate.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\Uninstall.lnk -> C:\Users\Besitzer\AppData\Local\CodecDecoder\uninst.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\Website.lnk -> C:\Users\Besitzer\AppData\Local\CodecDecoder\CodecDecoder.url ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon\Amazon MP3-Downloader\Amazon MP3-Downloader.lnk -> C:\Users\Besitzer\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3Downloader.exe (Amazon.com)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon\Amazon MP3-Downloader\Uninstall Amazon MP3-Downloader.lnk -> C:\Users\Besitzer\AppData\Local\Program Files\Amazon\MP3 Downloader\Uninstall.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\IcoFX.lnk -> C:\Program Files (x86)\IcoFX 1.6\IcoFX.exe (Attila Kovrig)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PhotoScape.lnk -> C:\Program Files (x86)\PhotoScape\PhotoScape.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Autostart program viewer.lnk -> C:\Users\Besitzer\Downloads\Software\Autoruns\autoruns.exe (Sysinternals - www.sysinternals.com)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\BVS Solitaire Collection.lnk -> C:\Spiele\380 Solitaire Patiencen\CARDS.EXE (BVS Development Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CCleaner.lnk -> C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\DVDVideoSoft Free Studio.lnk -> C:\Program Files (x86)\Common Files\DVDVideoSoft\FreeStudioManager.exe (DVDVideoSoft Ltd.)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Freemake Video Converter.lnk -> C:\Program Files (x86)\TORYA\Freemake\Freemake Video Converter\FreemakeVideoConverter.exe (Freemake)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Earth.lnk -> C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe (Google)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Media Player Classic.lnk -> C:\Users\Besitzer\Downloads\Software\mplayerc.exe (Gabest)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Movie Maker.lnk -> C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\OpenOffice 4.1.0.lnk -> C:\Program Files (x86)\OpenOffice 4\program\soffice.exe (Apache Software Foundation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Pflanzen gegen Zombies.lnk -> C:\Spiele\Pflanzen gegen Zombies\Plants vs. Zombies\PlantsVsZombies.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\RossoRabbitInTrouble.lnk -> C:\Users\Besitzer\Downloads\Rosso Rabbit In Trouble - (Www.ApunKaGames.Net)\Game\RossoRabbitInTrouble.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Ski Challenge 16 starten.lnk -> C:\Spiele\SkiChallenge2016\Updater.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Start Tor Browser.lnk -> C:\Users\Besitzer\Downloads\Software\Tor Browser\Browser\firefox.exe (Mozilla Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TCP-UDP endpoint viewer.lnk -> C:\Users\Besitzer\Downloads\Software\TCPView\Tcpview.exe (Sysinternals - www.sysinternals.com)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\VirtualDJ 8.lnk -> C:\Program Files (x86)\VirtualDJ\virtualdj8.exe (Atomix Productions)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Directory Statistics.lnk -> C:\Users\Besitzer\Downloads\Software\windirstat112\windirstat1_1_1-exe-ansi\windirstat.exe (Seifert)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Live Mail.lnk -> C:\Program Files (x86)\Windows Live\Mail\wlmail.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Bildschirmtastatur.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\HP Scan.lnk -> C:\Program Files (x86)\HP\HP Deskjet 1050 J410 series\bin\HPScan.exe (Hewlett-Packard Co.)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\IcoFX.lnk -> C:\Program Files (x86)\IcoFX 1.6\IcoFX.exe (Attila Kovrig)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Logon Screen.lnk -> C:\Program Files\Logon Screen\Logon Screen.exe (Daniel Rebelo)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Media Preview Configuration.lnk -> C:\Program Files\Media Preview\MediaPreviewConf.exe (BabelSoft)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\MP3Gain GUI.lnk -> C:\Program Files (x86)\MP3Gain\MP3GainGUI.exe (Snelg Enterprises)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Paint.lnk -> C:\Program Files (x86)\Paint.Net\PaintDotNet.exe (dotPDN LLC)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Revo Uninstaller.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe (VS Revo Group)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Windows DVD Maker.lnk -> C:\Program Files\DVD Maker\DVDMaker.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
 
 
 
 

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DefaultPrograms

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk -> C:\Windows\System32\wuapp.exe (Microsoft Corporation) -> startmenu

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Game Manager.lnk -> C:\Program Files (x86)\bfgclient\bfgclient.exe () -> -u

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) -> /showgadgets

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger 2\Schatzjäger 2 deinstallieren.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{1D0DD240-7752-48B5-A6EF-AC6509E16ABE}\Setup.exe" -l0x7  -uninstshortcut

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PopCap Games\Pflanzen gegen Zombies\Pflanzen gegen Zombies Deinstallieren.lnk -> C:\Spiele\Pflanzen gegen Zombies\Plants vs. Zombies\PopUninstall.exe () -> "C:\Spiele\Pflanzen gegen Zombies\Plants vs. Zombies\Install.log"

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\3D Vision preview pack 1.lnk -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe (NVIDIA Corporation) -> /show

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\Disable 3D Vision.lnk -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe (NVIDIA Corporation) -> /disable

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\Enable 3D Vision.lnk -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe (NVIDIA Corporation) -> /enable

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Backup and Restore Center.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.BackupAndRestore

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Deskjet 1050 J410 series\Deinstallieren.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /qb /x {C3F12DD0-54B1-4B2B-A82B-FA43502BC550}

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Deskjet 1050 J410 series\HP Deskjet 1050 J410 series.lnk -> C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HP Deskjet 1050 J410 series.exe (Hewlett-Packard Co.) -> -Start UDCDevicePage

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow\Audio decoder configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> ffdshow.ax,configureAudio

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow\VFW configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> ff_vfw.dll,configureVFW

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow\Video decoder configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> ffdshow.ax,configure

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crazy Golf World Tour\Uninstall Crazy Golf World Tour.lnk -> C:\Windows\Crazy Golf World Tour\uninstall.exe () -> "/U:C:\Spiele\Crazy Golf World Tour\Uninstall\uninstall.xml"

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BabelSoft\Media Preview\Uninstall Media Preview.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /x {8680D34A-E765-4579-877F-DEA8FB174DA7}

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell Modules.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) -> -NoExit -ImportSystemModules

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation) -> /open

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Welcome Center.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> %SystemRoot%\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\VSRevoGroup\RevoUninstaller\ADCU\Tintenwarnungen überwachen - HP Deskjet 1050 J410 series.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> "C:\Program Files\HP\HP Deskjet 1050 J410 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN09Q2H2SQ05HW;CONNECTION=USB;MONITOR=1;

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Uninstall VirtualDJ 8.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /x {9ADBBA93-4625-4898-BB0D-BCE7EA9F8B4A}

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Run Hunter Mode.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe (VS Revo Group) -> -hunter

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\FFDShow Audio Decoder Configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> ffdshow.ax,configureAudio

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\FFDShow Decoder Configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> ffdshow.ax,configure

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\FFDShow Video Configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> ff_vfw.dll,configureVFW

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\Haali Splitter Configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> splitter.ax,Configure

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\VSFilter Subtitles Configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> vsfilter.dll,DirectVobSub

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\XviD Encoder Configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> xvidvfw.dll,Configure

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\HP Deskjet 1050 J410 series.lnk -> C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HP Deskjet 1050 J410 series.exe (Hewlett-Packard Co.) -> -Start UDCDevicePage

ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter
 
 

InternetURL: C:\Users\Administrator\Favorites\Links\Web Slice-Katalog.url -> hxxp://go.microsoft.com/fwlink/?LinkId=121315

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger 2\Moorhuhn im Internet.url -> hxxp://redirect.phenomedia.com/redirectMe.php?id=347

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger 2\phenomedia im Internet.url -> hxxp://redirect.phenomedia.com/redirectMe.php?id=346

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PopCap Games\Pflanzen gegen Zombies\Besuch PopCap.com.url -> hxxp://www.popcap.com/?cid=PVZGY_PC_RTL_DE

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nightfall Mysteries - Die Ashburg Verschwörung\rondomedia.url -> hxxp://www.rondomedia.de/

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logon Screen\Logon Screen im Internet.url -> hxxp://www.danielnetsoftware.com/

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crazy Golf World Tour\Oxygen Interactive Ltd.url -> hxxp://www.oxygenint.com

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BabelSoft\Media Preview\Media Preview on the Web.url -> hxxp://www.babelsoft.net/products.htm

InternetURL: C:\Users\Besitzer\Favorites\Zylom.url -> hxxp://www.zylom.com/

InternetURL: C:\Users\Besitzer\Favorites\Windows Live\Windows Live Gallery.url -> hxxp://go.microsoft.com/fwlink/?LinkId=70742

InternetURL: C:\Users\Besitzer\Favorites\Windows Live\Windows Live Ideas.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72700

InternetURL: C:\Users\Besitzer\Favorites\Windows Live\Windows Live Mail.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72681

InternetURL: C:\Users\Besitzer\Favorites\Windows Live\Windows Live Spaces.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72682

InternetURL: C:\Users\Besitzer\Favorites\MSN-Websites\MSN Auto.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72680

InternetURL: C:\Users\Besitzer\Favorites\MSN-Websites\MSN Fernsehen.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72659

InternetURL: C:\Users\Besitzer\Favorites\MSN-Websites\MSN Money.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72640

InternetURL: C:\Users\Besitzer\Favorites\MSN-Websites\MSN Nachrichten.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72636

InternetURL: C:\Users\Besitzer\Favorites\MSN-Websites\MSN Sport.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72635

InternetURL: C:\Users\Besitzer\Favorites\MSN-Websites\MSN.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72630

InternetURL: C:\Users\Besitzer\Favorites\Microsoft-Websites\IE-Site auf Microsoft.com.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72186

InternetURL: C:\Users\Besitzer\Favorites\Microsoft-Websites\Microsoft Deutschland GmbH.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72520

InternetURL: C:\Users\Besitzer\Favorites\Microsoft-Websites\Microsoft Store.url -> hxxp://go.microsoft.com/fwlink/?linkid=140813

InternetURL: C:\Users\Besitzer\Favorites\Microsoft-Websites\Microsoft Windows - Start.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72629

InternetURL: C:\Users\Besitzer\Favorites\Microsoft-Websites\Microsoft zu Hause.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72406

InternetURL: C:\Users\Besitzer\Favorites\Microsoft-Websites\Microsoft.com durchsuchen.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72893

InternetURL: C:\Users\Besitzer\Favorites\Microsoft-Websites\Site für IE Add-Ons.url -> hxxp://go.microsoft.com/fwlink/?LinkId=50893

InternetURL: C:\Users\Besitzer\Favorites\Microsoft Websites\IE Add-on site.url -> hxxp://go.microsoft.com/fwlink/?LinkId=50893

InternetURL: C:\Users\Besitzer\Favorites\Microsoft Websites\IE site on Microsoft.com.url -> hxxp://go.microsoft.com/fwlink/?LinkId=44661

InternetURL: C:\Users\Besitzer\Favorites\Microsoft Websites\Microsoft At Home.url -> hxxp://go.microsoft.com/fwlink/?LinkId=55424

InternetURL: C:\Users\Besitzer\Favorites\Microsoft Websites\Microsoft At Work.url -> hxxp://go.microsoft.com/fwlink/?LinkId=68920

InternetURL: C:\Users\Besitzer\Favorites\Microsoft Websites\Microsoft Store.url -> hxxp://go.microsoft.com/fwlink/?LinkId=140813

InternetURL: C:\Users\Besitzer\Favorites\Microsoft Websites\Welcome to IE9.url -> hxxp://go.microsoft.com/fwlink/?LinkId=191282

InternetURL: C:\Users\Besitzer\Favorites\Links\Vorgeschlagene Sites.url -> 0

InternetURL: C:\Users\Besitzer\AppData\Local\CodecDecoder\CodecDecoder.url -> hxxp://www.codec-decoder.com/
 

==================== Ende von Shortcut.txt =============================

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 8.0.1 (11.24.2015)

Operating System: Windows 7 Home Premium x64 

Ran by Besitzer (Limited) on 23.12.2015 at  1:08:04,46

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

File System: 1 
 

Successfully deleted: C:\Users\Besitzer\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcdjknjpbnhdoabbngpmfekaecnpajba (Folder) 
 
 
 

Registry: 0 
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 23.12.2015 at  1:11:49,13

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Baba Yaga

23.01.2016 00:25

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:18-01-2016

durchgeführt von Besitzer (Administrator) auf LAVAMAT (19-01-2016 15:02:24)

Gestartet von C:\Users\Besitzer\Desktop

Geladene Profile: Besitzer & Administrator (Verfügbare Profile: Besitzer & Administrator)

Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Emsisoft Ltd) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Emsisoft Ltd) C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-11-19] (Realtek Semiconductor)

HKLM\...\Run: [emsisoft anti-malware] => c:\program files (x86)\emsisoft anti-malware\a2guard.exe [9234848 2016-01-06] (Emsisoft Ltd)

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Policies\system: [LogonHoursAction] 2

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Policies\Explorer: [Neuer Wert #1] 0

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

ProxyServer: [S-1-5-21-2472162299-3273411272-195361004-1000] => 0.0.0.0:80

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{45271E45-F8EE-4CF0-8150-EB4AE68EA381}: [NameServer] 8.8.8.8,8.8.4.4

Tcpip\..\Interfaces\{45271E45-F8EE-4CF0-8150-EB4AE68EA381}: [DhcpNameServer] 192.168.1.1
 

Internet Explorer:

==================

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.google.de/

URLSearchHook: [S-1-5-21-2472162299-3273411272-195361004-500] ACHTUNG => Standard URLSearchHook fehlt

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-07-31] (Oracle Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-07-31] (Oracle Corporation)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
 

FireFox:

========

FF ProfilePath: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default

FF Homepage: google.de

FF NetworkProxy: "type", 0

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2016-01-04] ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [Keine Datei]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2016-01-04] ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1222172.dll [2015-11-19] (Adobe Systems, Inc.)

FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [Keine Datei]

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Windows\system32\npovshelper.dll [Keine Datei]

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [Keine Datei]

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [Keine Datei]

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-07-23] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-07-23] (NVIDIA Corporation)

FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll [Keine Datei]

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\TORYA\Program Files (x86)\VLC\npvlc.dll [Keine Datei]

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-2472162299-3273411272-195361004-1000: amazon.com/AmazonMP3DownloaderPlugin -> C:\Users\Besitzer\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll [2013-05-22] (Amazon.com, Inc.)

FF Extension: BetterPrivacy - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2016-01-06]

FF Extension: ImTranslator - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi [2016-01-06]

FF Extension: WEB.DE MailCheck - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\extensions\toolbar@web.de [2016-01-06]

FF Extension: NoScript - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-01-09]

FF Extension: CanvasBlocker - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\Extensions\CanvasBlocker@kkapsner.de.xpi [2016-01-10]

FF Extension: HTTPS-Everywhere - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\Extensions\https-everywhere@eff.org [2016-01-06]

FF Extension: ProxTube - Unblock YouTube - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\Extensions\ich@maltegoetz.de.xpi [2016-01-06]

FF Extension: IPFlood - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\Extensions\ipfuck@p4ul.info.xpi [2016-01-06]

FF Extension: Strict Pop-up Blocker - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\Extensions\jid1-P34HaABBBpOerQ@jetpack.xpi [2016-01-06]

FF Extension: Flash Control - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\Extensions\jid1-sNL73VCI4UB0Fw@jetpack.xpi [2016-01-16]

FF Extension: Flagfox - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\b25lmdgx.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2016-01-14]

FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 => nicht gefunden

FF HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Firefox\Extensions: [{9A207F60-3F1C-4ED0-972D-0A4CDFBFF803}] - C:\Users\Besitzer\AppData\Roaming\14001.011 => nicht gefunden
 

Chrome: 

=======

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [10900888 2016-01-06] (Emsisoft Ltd)

S4 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156400 2015-11-25] (NVIDIA Corporation)

S4 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872688 2015-11-25] (NVIDIA Corporation)

S4 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8133424 2015-11-25] (NVIDIA Corporation)

S4 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5915440 2015-11-25] (NVIDIA Corporation)

S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)

R1 epp; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\epp.sys [123992 2015-11-13] (Emsisoft Ltd)

S3 MEMSWEEP2; C:\Windows\system32\61DF.tmp [6144 2009-06-18] (Sophos Plc) [Datei ist nicht signiert]

R2 mi2c; C:\Windows\system32\drivers\mi2c.sys [20784 2015-03-15] (Nicomsoft Ltd.)

S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19760 2015-11-25] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-11-25] (NVIDIA Corporation)

S3 RTLE8023x64; C:\Windows\System32\DRIVERS\Rtenic64.sys [280344 2010-07-06] (Realtek Semiconductor Corporation                           )

U5 UnlockerDriver5; C:\Program Files (x86)\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-01-19 15:02 - 2016-01-19 15:02 - 00013162 _____ C:\Users\Besitzer\Desktop\FRST.txt

2016-01-19 15:00 - 2016-01-19 15:00 - 00000091 _____ C:\Windows\wininit.ini

2016-01-19 15:00 - 2016-01-19 15:00 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking

2016-01-19 14:57 - 2016-01-19 14:57 - 00014484 _____ C:\Users\Besitzer\Desktop\Scan Spybot Results.160119-1457.txt

2016-01-19 14:21 - 2016-01-19 14:22 - 47410800 _____ C:\Users\Besitzer\Downloads\Firefox Setup 43.0.4.exe

2016-01-19 14:18 - 2016-01-19 14:18 - 02370560 _____ (Farbar) C:\Users\Besitzer\Desktop\FRST64.exe

2016-01-19 14:08 - 2016-01-19 14:08 - 00000000 ____D C:\Program Files\Common Files\AV

2016-01-19 14:08 - 2016-01-19 14:08 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2

2016-01-19 14:06 - 2016-01-19 15:01 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy

2016-01-19 12:29 - 2016-01-19 12:29 - 00109552 _____ C:\Users\Besitzer\AppData\Local\GDIPFONTCACHEV1.DAT

2016-01-19 12:24 - 2016-01-19 12:24 - 00408952 _____ C:\Windows\system32\FNTCACHE.DAT

2016-01-15 05:30 - 2016-01-15 05:30 - 00030794 _____ C:\Users\Besitzer\Desktop\registry.txt

2016-01-15 03:49 - 2016-01-15 03:49 - 01754112 _____ C:\Users\Besitzer\Downloads\adwcleaner_5.029.exe

2016-01-14 17:49 - 2015-12-24 00:13 - 00387784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2016-01-14 17:49 - 2015-12-23 23:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2016-01-14 17:49 - 2015-12-12 19:31 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2016-01-14 17:49 - 2015-12-12 19:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2016-01-14 17:49 - 2015-12-12 19:15 - 02887168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2016-01-14 17:49 - 2015-12-12 19:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2016-01-14 17:49 - 2015-12-12 19:07 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2016-01-14 17:49 - 2015-12-12 19:02 - 20367360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2016-01-14 17:49 - 2015-12-12 19:02 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2016-01-14 17:49 - 2015-12-12 18:55 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2016-01-14 17:49 - 2015-12-12 18:44 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2016-01-14 17:49 - 2015-12-12 18:37 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2016-01-14 17:49 - 2015-12-12 18:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2016-01-14 17:49 - 2015-12-12 18:37 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2016-01-14 17:49 - 2015-12-12 18:36 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2016-01-14 17:49 - 2015-12-12 18:35 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2016-01-14 17:49 - 2015-12-12 18:33 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2016-01-14 17:49 - 2015-12-12 18:31 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2016-01-14 17:49 - 2015-12-12 18:30 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2016-01-14 17:49 - 2015-12-12 18:27 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2016-01-14 17:49 - 2015-12-12 18:27 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2016-01-14 17:49 - 2015-12-12 18:22 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2016-01-14 17:49 - 2015-12-12 18:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2016-01-14 17:49 - 2015-12-12 18:10 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2016-01-14 17:49 - 2015-12-12 18:10 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2016-01-14 17:49 - 2015-12-12 18:08 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2016-01-14 17:49 - 2015-12-12 18:00 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2016-01-14 17:49 - 2015-12-12 18:00 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2016-01-14 17:49 - 2015-12-12 17:54 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2016-01-14 17:49 - 2015-12-12 17:38 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2016-01-14 17:48 - 2015-12-12 19:54 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2016-01-14 17:48 - 2015-12-12 19:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2016-01-14 17:48 - 2015-12-12 19:15 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2016-01-14 17:48 - 2015-12-12 19:15 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2016-01-14 17:48 - 2015-12-12 19:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2016-01-14 17:48 - 2015-12-12 19:07 - 06051328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2016-01-14 17:48 - 2015-12-12 19:07 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2016-01-14 17:48 - 2015-12-12 19:03 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2016-01-14 17:48 - 2015-12-12 19:02 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2016-01-14 17:48 - 2015-12-12 19:02 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2016-01-14 17:48 - 2015-12-12 19:02 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2016-01-14 17:48 - 2015-12-12 18:51 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2016-01-14 17:48 - 2015-12-12 18:49 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2016-01-14 17:48 - 2015-12-12 18:40 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2016-01-14 17:48 - 2015-12-12 18:39 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2016-01-14 17:48 - 2015-12-12 18:37 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2016-01-14 17:48 - 2015-12-12 18:36 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2016-01-14 17:48 - 2015-12-12 18:28 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2016-01-14 17:48 - 2015-12-12 18:27 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2016-01-14 17:48 - 2015-12-12 18:25 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2016-01-14 17:48 - 2015-12-12 18:23 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2016-01-14 17:48 - 2015-12-12 18:21 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2016-01-14 17:48 - 2015-12-12 18:20 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2016-01-14 17:48 - 2015-12-12 18:19 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2016-01-14 17:48 - 2015-12-12 18:18 - 14457856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2016-01-14 17:48 - 2015-12-12 18:12 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2016-01-14 17:48 - 2015-12-12 18:09 - 04610560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2016-01-14 17:48 - 2015-12-12 18:06 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2016-01-14 17:48 - 2015-12-12 18:02 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2016-01-14 17:48 - 2015-12-12 18:00 - 12856320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2016-01-14 17:48 - 2015-12-12 18:00 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2016-01-14 17:48 - 2015-12-12 17:42 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2016-01-14 17:48 - 2015-12-12 17:41 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2016-01-14 17:48 - 2015-12-12 17:36 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2016-01-14 00:58 - 2016-01-14 00:58 - 00000493 _____ C:\Users\Besitzer\Desktop\Windows Update - Verknüpfung.lnk

2016-01-14 00:52 - 2016-01-14 00:52 - 00001421 _____ C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2016-01-14 00:37 - 2016-01-14 00:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2016-01-14 00:36 - 2016-01-14 00:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2016-01-14 00:36 - 2016-01-14 00:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2016-01-14 00:36 - 2016-01-14 00:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2016-01-14 00:36 - 2016-01-14 00:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2016-01-14 00:36 - 2016-01-14 00:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2016-01-14 00:36 - 2016-01-14 00:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2016-01-14 00:34 - 2016-01-14 00:34 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll

2016-01-14 00:34 - 2016-01-14 00:34 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll

2016-01-14 00:26 - 2016-01-14 00:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2016-01-14 00:24 - 2016-01-14 00:24 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2016-01-14 00:24 - 2016-01-14 00:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2016-01-13 18:29 - 2016-01-13 18:29 - 00000368 _____ C:\Users\Besitzer\Desktop\LAN-Verbindung - Verknüpfung.lnk

2016-01-13 01:03 - 2015-12-11 19:57 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2016-01-13 01:03 - 2015-12-08 22:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2016-01-13 01:03 - 2015-12-08 22:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

2016-01-13 01:03 - 2015-12-08 22:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL

2016-01-13 01:03 - 2015-12-08 22:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL

2016-01-13 01:03 - 2015-12-08 22:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL

2016-01-13 01:03 - 2015-12-08 22:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL

2016-01-13 01:03 - 2015-12-08 22:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll

2016-01-13 01:03 - 2015-12-08 22:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL

2016-01-13 01:03 - 2015-12-08 22:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL

2016-01-13 01:03 - 2015-12-08 22:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL

2016-01-13 01:03 - 2015-12-08 22:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL

2016-01-13 01:03 - 2015-12-08 22:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL

2016-01-13 01:03 - 2015-12-08 22:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL

2016-01-13 01:03 - 2015-12-08 22:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL

2016-01-13 01:03 - 2015-12-08 22:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL

2016-01-13 01:03 - 2015-12-08 22:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL

2016-01-13 01:03 - 2015-12-08 22:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL

2016-01-13 01:03 - 2015-12-08 22:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL

2016-01-13 01:03 - 2015-12-08 22:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax

2016-01-13 01:03 - 2015-12-08 22:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL

2016-01-13 01:03 - 2015-12-08 22:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL

2016-01-13 01:03 - 2015-12-08 22:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll

2016-01-13 01:03 - 2015-12-08 22:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe

2016-01-13 01:03 - 2015-12-08 22:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe

2016-01-13 01:03 - 2015-12-08 22:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll

2016-01-13 01:03 - 2015-12-08 22:52 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2016-01-13 01:03 - 2015-12-08 22:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 01955328 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 01575424 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 01393152 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 01153024 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 01026048 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00292352 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL

2016-01-13 01:03 - 2015-12-08 20:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll

2016-01-13 01:03 - 2015-12-08 20:07 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe

2016-01-13 01:03 - 2015-12-08 20:07 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll

2016-01-13 01:03 - 2015-12-08 20:06 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax

2016-01-13 01:03 - 2015-12-08 20:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe

2016-01-13 01:03 - 2015-12-08 20:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll

2016-01-13 01:03 - 2015-12-08 19:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys

2016-01-13 01:03 - 2015-12-08 19:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2016-01-13 01:03 - 2015-12-08 19:11 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys

2016-01-13 01:03 - 2015-12-08 18:58 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2016-01-13 01:03 - 2015-11-16 21:17 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2016-01-13 01:03 - 2015-11-14 00:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll

2016-01-13 01:03 - 2015-11-14 00:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll

2016-01-13 01:03 - 2015-11-14 00:08 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe

2016-01-13 01:03 - 2015-11-13 23:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapistub.dll

2016-01-13 01:03 - 2015-11-13 23:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapi32.dll

2016-01-13 01:03 - 2015-11-13 23:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fixmapi.exe

2016-01-13 01:02 - 2015-12-30 20:08 - 05572544 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2016-01-13 01:02 - 2015-12-30 20:08 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2016-01-13 01:02 - 2015-12-30 20:08 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2016-01-13 01:02 - 2015-12-30 20:05 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2016-01-13 01:02 - 2015-12-30 20:02 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2016-01-13 01:02 - 2015-12-30 20:02 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2016-01-13 01:02 - 2015-12-30 20:02 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2016-01-13 01:02 - 2015-12-30 20:02 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2016-01-13 01:02 - 2015-12-30 20:02 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2016-01-13 01:02 - 2015-12-30 20:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2016-01-13 01:02 - 2015-12-30 20:01 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2016-01-13 01:02 - 2015-12-30 20:01 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2016-01-13 01:02 - 2015-12-30 20:01 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2016-01-13 01:02 - 2015-12-30 20:01 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2016-01-13 01:02 - 2015-12-30 20:01 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2016-01-13 01:02 - 2015-12-30 20:01 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2016-01-13 01:02 - 2015-12-30 20:01 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2016-01-13 01:02 - 2015-12-30 20:00 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2016-01-13 01:02 - 2015-12-30 19:59 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2016-01-13 01:02 - 2015-12-30 19:59 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2016-01-13 01:02 - 2015-12-30 19:59 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2016-01-13 01:02 - 2015-12-30 19:58 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2016-01-13 01:02 - 2015-12-30 19:58 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2016-01-13 01:02 - 2015-12-30 19:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2016-01-13 01:02 - 2015-12-30 19:57 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2016-01-13 01:02 - 2015-12-30 19:57 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2016-01-13 01:02 - 2015-12-30 19:55 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2016-01-13 01:02 - 2015-12-30 19:55 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2016-01-13 01:02 - 2015-12-30 19:55 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:47 - 03993536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2016-01-13 01:02 - 2015-12-30 19:47 - 03938240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2016-01-13 01:02 - 2015-12-30 19:44 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2016-01-13 01:02 - 2015-12-30 19:41 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2016-01-13 01:02 - 2015-12-30 19:41 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2016-01-13 01:02 - 2015-12-30 19:41 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2016-01-13 01:02 - 2015-12-30 19:41 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2016-01-13 01:02 - 2015-12-30 19:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2016-01-13 01:02 - 2015-12-30 19:41 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2016-01-13 01:02 - 2015-12-30 19:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2016-01-13 01:02 - 2015-12-30 19:41 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2016-01-13 01:02 - 2015-12-30 19:40 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2016-01-13 01:02 - 2015-12-30 19:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2016-01-13 01:02 - 2015-12-30 19:39 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2016-01-13 01:02 - 2015-12-30 19:39 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2016-01-13 01:02 - 2015-12-30 19:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2016-01-13 01:02 - 2015-12-30 19:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2016-01-13 01:02 - 2015-12-30 19:38 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2016-01-13 01:02 - 2015-12-30 19:38 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 18:57 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2016-01-13 01:02 - 2015-12-30 18:50 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2016-01-13 01:02 - 2015-12-30 18:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2016-01-13 01:02 - 2015-12-30 18:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2016-01-13 01:02 - 2015-12-30 18:43 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2016-01-13 01:02 - 2015-12-30 18:42 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2016-01-13 01:02 - 2015-12-30 18:42 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2016-01-13 01:02 - 2015-12-30 18:41 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2016-01-13 01:02 - 2015-12-30 18:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2016-01-13 01:02 - 2015-12-30 18:32 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2016-01-13 01:02 - 2015-12-30 18:32 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2016-01-13 01:02 - 2015-12-30 18:32 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2016-01-13 01:02 - 2015-12-30 18:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2016-01-13 01:02 - 2015-12-30 18:30 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll

2016-01-13 01:02 - 2015-12-30 18:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 18:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 18:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2016-01-13 01:02 - 2015-12-30 18:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2016-01-11 20:01 - 2016-01-11 20:01 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\Moonchild Productions

2016-01-11 20:01 - 2016-01-11 20:01 - 00000000 ____D C:\Users\Besitzer\AppData\Local\Moonchild Productions

2016-01-07 10:19 - 2016-01-08 13:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2016-01-07 01:50 - 2015-07-23 01:46 - 00572232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2016-01-07 01:22 - 2016-01-07 01:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pflanzen gegen Zombies

2016-01-07 01:01 - 2016-01-07 01:01 - 00000000 ____D C:\Users\Besitzer\AppData\Local\NVIDIA

2016-01-07 01:01 - 2015-11-25 00:10 - 01828160 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

2016-01-07 01:01 - 2015-11-25 00:10 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll

2016-01-07 01:01 - 2015-11-25 00:10 - 01509824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2016-01-07 01:01 - 2015-11-25 00:10 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll

2016-01-07 01:01 - 2015-11-25 00:10 - 00112712 _____ C:\Windows\system32\NvRtmpStreamer64.dll

2016-01-07 01:00 - 2016-01-07 01:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2016-01-07 00:55 - 2015-11-25 00:10 - 01905272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435906.dll

2016-01-07 00:55 - 2015-11-25 00:10 - 01564792 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435906.dll

2016-01-07 00:55 - 2015-11-25 00:10 - 00072504 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll

2016-01-07 00:55 - 2015-11-25 00:10 - 00069416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

2016-01-07 00:55 - 2015-11-25 00:10 - 00050472 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys

2016-01-07 00:55 - 2015-07-23 05:06 - 15129192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2016-01-07 00:55 - 2015-07-23 05:06 - 03407144 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2016-01-07 00:55 - 2015-07-23 05:06 - 03008880 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2016-01-07 00:55 - 2015-07-23 05:06 - 01101856 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll

2016-01-07 00:46 - 2016-01-07 00:46 - 00000000 ____D C:\ProgramData\SlimWare Utilities, Inc

2016-01-06 22:43 - 2016-01-15 03:55 - 00000000 ___DC C:\AdwCleaner

2016-01-06 22:39 - 2016-01-14 00:06 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task

2016-01-06 22:38 - 2016-01-14 00:05 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2016-01-06 22:37 - 2016-01-06 22:37 - 00000000 ____D C:\Program Files (x86)\Adobe

2016-01-06 21:52 - 2016-01-08 13:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2015-12-23 19:41 - 2016-01-06 23:23 - 00000000 ____D C:\Users\Besitzer\Downloads\Scans

2015-12-23 01:20 - 2015-12-23 01:20 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\.marble

2015-12-21 23:50 - 2016-01-19 15:02 - 00000000 ___DC C:\FRST
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-01-19 15:01 - 2015-04-16 15:05 - 00000000 ____D C:\Program Files (x86)\TORYA

2016-01-19 15:00 - 2009-07-14 04:20 - 00000000 ____D C:\Windows

2016-01-19 14:03 - 2015-03-14 13:01 - 00000000 ____D C:\Program Files (x86)\Emsisoft Anti-Malware

2016-01-19 12:31 - 2009-07-14 05:45 - 00023712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2016-01-19 12:31 - 2009-07-14 05:45 - 00023712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2016-01-19 12:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf

2016-01-19 12:24 - 2011-04-01 10:01 - 00000000 ____D C:\ProgramData\NVIDIA

2016-01-19 12:24 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2016-01-19 05:37 - 2015-06-25 10:54 - 00007615 _____ C:\Users\Besitzer\AppData\Local\Resmon.ResmonCfg

2016-01-17 23:26 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

2016-01-15 15:57 - 2013-12-05 20:37 - 00000000 ___RD C:\Users\Besitzer\Desktop\Aktuell

2016-01-15 03:46 - 2013-05-03 18:55 - 00000000 ___RD C:\Users\Besitzer\Downloads\Software

2016-01-14 18:57 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2016-01-14 06:38 - 2010-10-01 17:28 - 00000000 ____D C:\Windows\Panther

2016-01-14 00:33 - 2012-05-02 14:36 - 00001450 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk

2016-01-13 06:25 - 2009-07-14 18:58 - 00699456 _____ C:\Windows\system32\perfh007.dat

2016-01-13 06:25 - 2009-07-14 18:58 - 00149596 _____ C:\Windows\system32\perfc007.dat

2016-01-13 06:25 - 2009-07-14 06:13 - 01620784 _____ C:\Windows\system32\PerfStringBackup.INI

2016-01-13 01:54 - 2012-08-13 18:21 - 00000000 ___RD C:\Users\Besitzer\Eigener Kram\Wissen

2016-01-13 01:53 - 2013-08-15 02:35 - 00000000 ____D C:\Windows\system32\MRT

2016-01-13 01:47 - 2015-08-12 09:46 - 143671360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2016-01-13 00:17 - 2015-04-16 23:43 - 00000000 ____D C:\Users\Administrator.LAVAMAT

2016-01-12 22:23 - 2011-11-29 18:17 - 00000000 ____D C:\Windows\pss

2016-01-11 15:49 - 2015-04-12 20:22 - 00002794 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC

2016-01-10 00:13 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF

2016-01-08 16:37 - 2012-04-26 03:20 - 00000000 ____D C:\Users\Besitzer\AppData\Local\Turtix

2016-01-07 19:21 - 2011-04-04 23:30 - 00000000 ____D C:\Users\Besitzer\AppData\LocalLow\Adobe

2016-01-07 01:51 - 2011-04-01 09:48 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2016-01-07 01:22 - 2014-09-04 20:07 - 00000000 ____D C:\ProgramData\PopCap Games

2016-01-07 01:22 - 2011-04-03 22:35 - 00000000 ___RD C:\Spiele

2016-01-07 01:22 - 2009-07-14 06:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2016-01-07 01:01 - 2011-11-10 19:49 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2016-01-07 01:01 - 2011-04-01 09:48 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2016-01-07 01:00 - 2014-07-16 20:22 - 00000000 ____D C:\Users\Besitzer\AppData\Local\NVIDIA Corporation

2016-01-07 00:56 - 2015-12-18 02:40 - 00000000 ____D C:\ProgramData\Package Cache

2016-01-06 22:39 - 2014-08-19 21:02 - 00000000 ____D C:\Users\Besitzer\AppData\Local\Adobe

2016-01-06 22:28 - 2011-04-01 22:44 - 00000000 ____D C:\ProgramData\Adobe

2016-01-06 21:38 - 2011-04-01 10:03 - 00000000 ___RD C:\Users\Besitzer

2016-01-06 21:37 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration

2016-01-04 16:42 - 2012-04-01 14:01 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2016-01-04 16:42 - 2011-11-20 22:39 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2016-01-01 02:05 - 2015-09-10 23:43 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\Media Player Classic

2015-12-29 23:31 - 2013-04-08 20:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow

2015-12-29 21:22 - 2014-09-04 04:30 - 00000000 ____D C:\Users\Besitzer\AppData\Roaming\Origin

2015-12-29 21:21 - 2014-09-04 04:30 - 00000000 ____D C:\Users\Besitzer\AppData\Local\Origin

2015-12-23 01:17 - 2014-03-24 20:51 - 00000000 ____D C:\Program Files (x86)\Google

2015-12-23 01:17 - 2011-12-05 17:53 - 00000000 ____D C:\Users\Besitzer\AppData\Local\Google
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2011-04-01 23:17 - 2011-11-20 15:42 - 0000146 _____ () C:\Users\Besitzer\AppData\Roaming\default.rss

2015-04-17 15:14 - 2015-04-17 15:15 - 9482240 _____ () C:\Users\Besitzer\AppData\Local\1B902E7A_stp.CIS

2015-04-17 15:14 - 2015-04-17 15:14 - 0000442 _____ () C:\Users\Besitzer\AppData\Local\1B902E7A_stp.CIS.part

2015-04-17 15:07 - 2015-04-17 15:07 - 0043321 _____ () C:\Users\Besitzer\AppData\Local\5079FE7D_stp.CIS

2015-04-17 15:07 - 2015-04-17 15:14 - 0000293 _____ () C:\Users\Besitzer\AppData\Local\5079FE7D_stp.CIS.part

2015-04-17 14:58 - 2015-04-17 14:58 - 0385602 _____ () C:\Users\Besitzer\AppData\Local\5D515C96_stp.CIS

2015-04-17 14:58 - 2015-04-17 15:13 - 0000220 _____ () C:\Users\Besitzer\AppData\Local\5D515C96_stp.CIS.part

2015-04-17 15:07 - 2015-04-17 15:09 - 15769600 _____ () C:\Users\Besitzer\AppData\Local\784ED66F_stp.CIS

2015-04-17 15:07 - 2015-04-17 15:07 - 0000442 _____ () C:\Users\Besitzer\AppData\Local\784ED66F_stp.CIS.part

2013-12-19 02:46 - 2013-12-19 02:46 - 0005632 _____ () C:\Users\Besitzer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2015-06-25 10:54 - 2016-01-19 05:37 - 0007615 _____ () C:\Users\Besitzer\AppData\Local\Resmon.ResmonCfg

2013-12-01 22:01 - 2013-12-01 22:01 - 0000057 _____ () C:\ProgramData\Ament.ini
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2016-01-17 23:19
 

==================== Ende von FRST.txt ============================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:18-01-2016

durchgeführt von Besitzer (2016-01-19 15:03:16)

Gestartet von C:\Users\Besitzer\Desktop

Windows 7 Home Premium Service Pack 1 (X64) (2011-04-01 09:03:06)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-2472162299-3273411272-195361004-500 - Administrator - Disabled) => C:\Users\Administrator.LAVAMAT

Besitzer (S-1-5-21-2472162299-3273411272-195361004-1000 - Administrator - Enabled) => C:\Users\Besitzer

Gast (S-1-5-21-2472162299-3273411272-195361004-501 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Emsisoft Anti-Malware (Enabled - Out of date) {15510D9D-6530-DA29-224F-7BA1BDD1CB58}

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

AS: Emsisoft Anti-Malware (Enabled - Out of date) {AE30EC79-430A-D5A7-18FF-40D3C65681E5}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

3D Bowling (HKLM-x32\...\3D Bowling) (Version:  - )

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.010.20056 - Adobe Systems Incorporated)

Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.188 - Adobe Systems Incorporated)

Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.2.172 - Adobe Systems, Inc.)

Alabama Smith: Flucht aus Pompeji (HKLM-x32\...\Alabama Smith: Flucht aus Pompeji) (Version: 0.0.0.0 - INTENIUM GmbH)

Amazon MP3-Downloader 1.0.18 (HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)

Beetle Ju 2 (HKLM-x32\...\Beetle Ju 2) (Version: 1.0.0.0 - INTENIUM GmbH)

Big Fish: Game Manager (HKLM-x32\...\BFGC) (Version: 3.3.0.2 - )

Billard2 (HKLM-x32\...\Billard2_is1) (Version:  - )

CCleaner (HKLM\...\CCleaner) (Version: 5.04 - Piriform)

Codec Decoder Pack (HKLM-x32\...\Codec Decoder Pack) (Version: 1.0 - Codec Decoder)

Cosmic Ball (HKLM-x32\...\Cosmic Ball_is1) (Version:  - My Real Games Ltd)

Crazy Barrels (HKLM-x32\...\Crazy Barrels) (Version:  - )

Crazy Golf World Tour (HKLM-x32\...\Crazy Golf World Tour1.0) (Version: 1.0 - Oxygen Interactive Ltd.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Der bartlose Zauberer (HKLM-x32\...\Der bartlose Zauberer) (Version: 2.0.0.0 - INTENIUM GmbH)

Der Exorzist (HKLM-x32\...\Der Exorzist) (Version: 1.0.0.0 - INTENIUM GmbH)

DesignPro 5 (x32 Version: 5.5.708 - Avery Dennison) Hidden

DEUTSCHLAND SPIELT GAME CENTER (HKLM-x32\...\DSGPlayer) (Version: 2.4.2.14 - INTENIUM GmbH)

Die Tuttles (HKLM-x32\...\Die Tuttles) (Version:  - )

Dr Kawashima (HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\DrKawashima) (Version: 1.0 - )

Druids: Operation Mistelzweig (HKLM-x32\...\Druids: Operation Mistelzweig) (Version: 1.0.0.0 - INTENIUM GmbH)

Emsisoft Anti-Malware (HKLM-x32\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 9.0 - Emsisoft Ltd.)

Folderico 4.0 RC12 (HKLM-x32\...\Folderico) (Version: 4.0 RC12 - Shedko ( www.softq.org ))

Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Frankenstein: Meister des Schreckens (HKLM-x32\...\Frankenstein: Meister des Schreckens) (Version: 0.0.0.0 - INTENIUM GmbH)

Free Studio version 6.5.1.415 (HKLM-x32\...\Free Studio_is1) (Version: 6.5.1.415 - DVDVideoSoft Ltd.)

Freemake Video Converter Version 4.1.6 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.6 - Ellora Assets Corporation)

Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)

Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden

Haus der 1000 Türen 2: Das Juwel des Zarathustra (HKLM-x32\...\Haus der 1000 Türen 2: Das Juwel des Zarathustra) (Version: 1.0.0.0 - INTENIUM GmbH)

Haus der 1000 Türen: Familiengeheimnisse (HKLM-x32\...\Haus der 1000 Türen: Familiengeheimnisse) (Version: 1.0.0.0 - INTENIUM GmbH)

HP Deskjet 1050 J410 series - Grundlegende Software für das Gerät (HKLM\...\{C3F12DD0-54B1-4B2B-A82B-FA43502BC550}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)

HP Deskjet 1050 J410 series Hilfe (HKLM-x32\...\{5C90D8CF-F12A-41C6-9007-3B651A1F0D78}) (Version: 140.0.66.66 - Hewlett Packard)

HP Update (HKLM-x32\...\{97486FBE-A3FC-4783-8D55-EA37E9D171CC}) (Version: 5.005.000.001 - Hewlett-Packard)

HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden

IcoFX 1.6.4 (HKLM-x32\...\IcoFX_is1) (Version:  - )

ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden

Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle)

Jump Jack (HKLM-x32\...\Jump Jack) (Version:  - )

Jumpin'Jack (HKLM-x32\...\Jumpin'Jack) (Version:  - )

Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Kingdom Chronicles: Königreich in Gefahr (HKLM-x32\...\Kingdom Chronicles: Königreich in Gefahr) (Version: 1.0.0.0 - INTENIUM GmbH)

Logon Screen (HKLM\...\{1730D13B-7517-4321-A88B-64627CF67CDC}_is1) (Version:  - Daniel Rebelo)

Media Preview (HKLM\...\{8680D34A-E765-4579-877F-DEA8FB174DA7}) (Version: 1.4.3.429 - BabelSoft)

Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)

MiniGolfPro (HKLM-x32\...\MiniGolfPro) (Version:  - )

Moai: Erschaffe deinen Traum (HKLM-x32\...\Moai: Erschaffe deinen Traum) (Version: 1.0.0.0 - INTENIUM GmbH)

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Mozilla Firefox 43.0.4 (x86 de) (HKLM-x32\...\Mozilla Firefox 43.0.4 (x86 de)) (Version: 43.0.4 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.4.5848 - Mozilla)

Mp3tag v2.70 (HKLM-x32\...\Mp3tag) (Version: v2.70 - Florian Heidenreich)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

Next Generation Visualisations (HKLM-x32\...\{2E376AD9-5C49-4F7D-A0BA-6A44E8FA5A3B}) (Version: 1.0.0 -  Microsoft)

NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 353.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 353.62 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.7.4.10 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.7.4.10 - NVIDIA Corporation)

NVIDIA Grafiktreiber 353.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.62 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)

OpenAL (HKLM-x32\...\OpenAL) (Version:  - )

OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)

paint.net (HKLM\...\{3F5F509B-E226-417C-8CD1-CAAE756C328A}) (Version: 4.0.0 - dotPDN LLC)

Pale Moon 25.8.1 (x64 en-US) (HKLM\...\Pale Moon 25.8.1 (x64 en-US)) (Version: 25.8.1 - Moonchild Productions)

PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )

Prince of Persia T2T (HKLM-x32\...\{DFFE2B1F-07E0-45A9-8801-CD8514CAA876}) (Version:  - )

QT Lite 4.1.0 (HKLM-x32\...\quicktime_lite_is1) (Version: 4.1.0 - )

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.)

Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Schatzjäger 2 (HKLM-x32\...\{1D0DD240-7752-48B5-A6EF-AC6509E16ABE}) (Version: 1.00.0000 - )

Sherlock Holmes und der Hund der Baskervilles (HKLM-x32\...\Sherlock Holmes und der Hund der Baskervilles) (Version: 1.0.0.0 - INTENIUM GmbH)

SHIELD Streaming (Version: 4.1.0240 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.7.4.10 - NVIDIA Corporation) Hidden

Ski Challenge 16 (HKU\S-1-5-21-2472162299-3273411272-195361004-1000\...\sc16-GAMETWIST_MAIN) (Version:  - )

Sky Taxi 4: Streng Geheim (HKLM-x32\...\Sky Taxi 4: Streng Geheim) (Version: 1.0.0.0 - INTENIUM GmbH)

Supercow (VOLLVERSION) (HKLM-x32\...\Supercow (VOLLVERSION)) (Version:  - )

SuperTux Version 0.3.4 (HKLM-x32\...\{5095BBEC-9A2F-4DA1-B5EF-511C728A2FF6}_is1) (Version: 0.3.4 - SuperTux Development Team)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Tiger Eye (HKLM-x32\...\Tiger Eye) (Version:  - )

Turtix (HKLM-x32\...\Turtix) (Version:  - )

Turtix 2 (HKLM-x32\...\Turtix 2) (Version: 0.0.0.0 - INTENIUM GmbH)

Unlocker 1.9.1-x64 (HKLM\...\Unlocker) (Version: 1.9.1 - Cedrick Collomb)

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

VirtualDJ 8 (HKLM-x32\...\{9ADBBA93-4625-4898-BB0D-BCE7EA9F8B4A}) (Version: 8.0.0 - Atomix Productions)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0B8BE318-7B69-461A-8C64-0EB3DD41DAC3} - System32\Tasks\{C1561D4A-B44B-49DD-A0F8-EF52562CBD95} => pcalua.exe -a "C:\Program Files\Eigene Programme\VLC\VLCPortable\VLCPortable.exe" -d "C:\Program Files\Eigene Programme\VLC\VLCPortable"

Task: {57FE0623-8D4E-4FB1-91C8-9A88F98A7279} - System32\Tasks\{68A1FC85-0D22-4FFD-8AFD-E46FD6FA28CD} => pcalua.exe -a C:\Windows\SysWOW64\DivXControlPanelApplet.cpl -c DivX Control Panel

Task: {5A40E926-9E86-4B89-9CFD-B12311724371} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto

Task: {5D726D9D-298E-4D9A-99AC-10988B4FE942} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-03-13] (Piriform Ltd)

Task: {65ABCEE0-8155-427C-8661-D8EA03BCD36B} - System32\Tasks\{A5ED2DA0-1C3C-492C-AB78-B1E3EC3D00BC} => pcalua.exe -a J:\OpenOfficePortable\OpenOfficeWriterPortable.exe -d J:\OpenOfficePortable

Task: {6FC8A5D1-2675-4C4B-BB06-1BFCD7B1721C} - System32\Tasks\{906A96A5-4B4C-488D-BF30-A8AF8F8FF547} => pcalua.exe -a C:\Users\Besitzer\Downloads\avira_antivir_antirootkit_en(1).exe -d C:\Users\Besitzer\Downloads

Task: {81A2F243-F15D-4F24-81AF-29F76B55FE2D} - System32\Tasks\{7561AFB8-E02B-4BB2-B905-D83B7A1A31AB} => pcalua.exe -a "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA StereoUSB Driver\nvUSBInst.exe" -d "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA StereoUSB Driver"

Task: {8E2A7A38-D385-41AE-9304-70B125AC482D} - System32\Tasks\{205D5359-6194-4D3A-AA1F-6E0491BDCC95} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{714B9C6C-70FC-4750-98E2-61520B906C45}\setup.exe" -c -runfromtemp -l0x0009 -removeonly

Task: {92251C15-658B-4399-8F50-03FDA2362D62} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)

Task: {B568EABF-E7AE-418E-BC17-66A2605C9A0B} - System32\Tasks\{0D19AD70-C41F-4F22-9003-E0EAB1EE5BE0} => pcalua.exe -a E:\setup\setup.exe -d E:\setup

Task: {C3C296A5-40E8-4763-B0DF-C9D7776A8EE5} - System32\Tasks\{7840164C-A73D-4726-941A-5B45F6B89279} => pcalua.exe -a E:\Start.exe -d E:\

Task: {C9326867-66E5-4B89-80A2-C8731A92B9A8} - System32\Tasks\{4A1360EB-55A7-47DC-B77C-4C620B730949} => pcalua.exe -a C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe -c /M{F82C6574-AD88-4B40-A432-970BC77F1BD2}

Task: {D31429BC-581F-430B-A934-886EAEF9B323} - System32\Tasks\{5145A4DA-87D0-45AC-AB29-C9EE4A8A24E8} => pcalua.exe -a "C:\Program Files (x86)\OXXOGames\GPlayer\MyInstall.exe" -d C:\Windows\system32 -c ScriptUInst "C:\Program Files (x86)\OXXOGames\GPlayer\Install\\Game_NSoftSupercowCD.log"

Task: {D4C17D60-38D1-4714-9D81-1BD33E46B25C} - System32\Tasks\{B00E5003-544E-43D9-9CA9-8A38122A743F} => pcalua.exe -a "C:\Eigene Programme\VLCPortable\VLCPortable.exe" -d C:\Users\Besitzer\Videos\Flash -c "C:\Users\Besitzer\Videos\Flash\Faithless - Insomnia.flv"

Task: {DD9F510C-95F4-499A-90C8-BAC5BC372FF4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask => start sppsvc

Task: {F2C7EC5A-0213-416A-926C-77CBE8D63546} - System32\Tasks\{D1BB4EFD-0219-483A-BBAE-B14982220F81} => pcalua.exe -a "C:\Users\Besitzer\Desktop\Neuer Ordner\s_install.exe" -d "C:\Users\Besitzer\Desktop\Neuer Ordner"

Task: {F51ABCD2-3A7B-42A6-8941-2E6850D51057} - System32\Tasks\{2D0A611E-70E9-471E-A485-252A68A189C8} => pcalua.exe -a E:\SETUP.exe -d E:\

Task: {FBA7811A-9E7E-4C85-8DEC-14811BAF73C5} - System32\Tasks\{DE59C836-6D79-4D21-9562-2CC82BEF1148} => C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe [2014-03-31] (Microsoft Corporation)

Task: {FF6210FB-C7D2-466B-A1C1-17C6937D0059} - System32\Tasks\{DFE22B96-877E-43BA-8F3F-6AF3E3146E08} => pcalua.exe -a C:\Users\Besitzer\Downloads\avira_antivir_antirootkit_en.exe -d C:\Users\Besitzer\Downloads
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2012-05-11 23:08 - 2015-07-23 02:31 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2010-07-15 05:44 - 2010-07-15 05:44 - 00020032 _____ () C:\Program Files (x86)\Unlocker\UnlockerCOM.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\ProgramData\TEMP:2CB9631F

AlternateDataStreams: C:\ProgramData\TEMP:DE220DE0
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 03:34 - 2015-03-07 20:36 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
 

127.0.0.1       localhost
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-2472162299-3273411272-195361004-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: Datenträger ist nicht mit dem Internet verbunden.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: )

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

MSCONFIG\Services: AdobeARMservice => 2

MSCONFIG\Services: Avira.ServiceHost => 2

MSCONFIG\Services: GfExperienceService => 2

MSCONFIG\Services: gupdate => 2

MSCONFIG\Services: gupdatem => 3

MSCONFIG\Services: IePluginServices => 2

MSCONFIG\Services: IMFservice => 2

MSCONFIG\Services: Nero BackItUp Scheduler 4.0 => 2

MSCONFIG\Services: NvNetworkService => 2

MSCONFIG\Services: NvStreamNetworkSvc => 3

MSCONFIG\Services: NvStreamSvc => 2

MSCONFIG\Services: Origin Client Service => 3

MSCONFIG\Services: StumbleUponUpdater => 2

MSCONFIG\Services: SXDS10 => 3

MSCONFIG\Services: WSWNA3100 => 2

MSCONFIG\startupfolder: C:^Users^Besitzer^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Tintenwarnungen überwachen - HP Deskjet 1050 J410 series.lnk => C:\Windows\pss\Tintenwarnungen überwachen - HP Deskjet 1050 J410 series.lnk.Startup

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: Avira SystrayStartTrigger => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe

MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"

MSCONFIG\startupreg: ProductUpdater => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe

MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{7995B5C5-743E-41C3-BF8B-5EFDEA48A645}] => (Allow) C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\USBSetup.exe

FirewallRules: [{79E355A7-1CFB-460A-9802-5E54DE6C310A}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{DAFB63D4-7CE8-4042-9019-E910E5680FEE}] => (Allow) LPort=2869

FirewallRules: [{D50C9D88-2E02-4883-87B5-7482344FE710}] => (Allow) LPort=1900

FirewallRules: [{04D2E93A-C507-4737-9FD5-DC313B918596}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{69F1F8CB-B55E-4C2B-8B56-748EFEA3D6BD}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{A5762040-DFFB-4E56-BE96-10F599A4AC75}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{9A743D4B-C25C-41F5-A53D-F6617B16655F}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{581FC581-7CA0-45C6-AA4A-9EED6FDAC6E9}] => (Allow) C:\Program Files (x86)\Torya\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe

FirewallRules: [{27751150-0CB5-4FFC-9949-DFB1B10A9C3A}] => (Allow) C:\Program Files (x86)\Torya\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe

FirewallRules: [{1E0F717F-733F-4652-9543-9410AF9469D1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{DD4CEFF7-5085-4372-8F3C-880608BBE7E8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{1614BDBC-75B7-4898-BD14-90D06CD60EDF}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{B8480563-DF97-4165-ADD1-2347DB6A1626}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{6528B5FC-0C4F-4AFF-B7B5-DEE7DA529E9C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{8F38F99B-CB7A-43BC-B0AF-4BF4D85F9139}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{6979EED2-941D-4AF9-B92D-D805DAD809D1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{99F88277-5A71-4C1A-9C75-FB67C5318ADA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{6822BE0D-F8B1-4956-AA01-A904E632EFE3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
 

==================== Wiederherstellungspunkte =========================
 

13-01-2016 01:43:11 Windows Update

14-01-2016 00:23:00 Windows Update

14-01-2016 18:54:01 Windows Update

19-01-2016 14:58:54 Revo Uninstaller's restore point - Spybot - Search & Destroy
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 

Name: NVIDIA GeForce 7025 / NVIDIA nForce 630a

Description: NVIDIA GeForce 7025 / NVIDIA nForce 630a

Class Guid: {4d36e968-e325-11ce-bfc1-08002be10318}

Manufacturer: NVIDIA 

Service: nvlddmkm

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 

Name: Realtek PCIe FE Family Controller

Description: Realtek PCIe FE Family Controller

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Realtek

Service: RTL8167

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (01/19/2016 02:58:55 PM) (Source: VSS) (EventID: 8193) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-2472162299-3273411272-195361004-1004.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.

.
 
 

Vorgang:

   OnIdentify-Ereignis

   Generatordaten werden gesammelt
 

Kontext:

   Ausführungskontext: Shadow Copy Optimization Writer

   Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}

   Generatorname: Shadow Copy Optimization Writer

   Generatorinstanz-ID: {09f0e609-b253-4f39-9564-27ed962a5a34}
 

Error: (01/19/2016 12:24:48 PM) (Source: Windows Search Service) (EventID: 7010) (User: )

Description: Der Index kann nicht initialisiert werden.
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (01/19/2016 12:24:48 PM) (Source: Windows Search Service) (EventID: 3058) (User: )

Description: Die Anwendung kann nicht initialisiert werden.
 

Kontext: Windows Anwendung
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (01/19/2016 12:24:48 PM) (Source: Windows Search Service) (EventID: 3028) (User: )

Description: Das Gatherer-Objekt kann nicht initialisiert werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (01/19/2016 12:24:48 PM) (Source: Windows Search Service) (EventID: 3029) (User: )

Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 

Details:

        Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)
 

Error: (01/19/2016 12:24:48 PM) (Source: Windows Search Service) (EventID: 3029) (User: )

Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (01/19/2016 12:24:48 PM) (Source: Windows Search Service) (EventID: 9002) (User: )

Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 

Details:

        Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)
 

Error: (01/19/2016 12:24:48 PM) (Source: Windows Search Service) (EventID: 7042) (User: )

Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (01/19/2016 12:24:48 PM) (Source: Windows Search Service) (EventID: 7040) (User: )

Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4700} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (01/19/2016 12:24:48 PM) (Source: Windows Search Service) (EventID: 9000) (User: )

Description: Der Jet-Eigenschaftenspeicher kann von Windows Search nicht geöffnet werden.
 

Details:

        0x%08x (0xc0041800 - Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800))
 
 

Systemfehler:

=============

Error: (01/19/2016 02:58:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/19/2016 02:58:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/19/2016 02:58:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/19/2016 02:58:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/19/2016 02:58:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/19/2016 02:58:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/19/2016 02:58:05 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/19/2016 02:58:05 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/19/2016 02:58:05 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (01/19/2016 02:58:02 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 
 

CodeIntegrity:

===================================

  Date: 2015-12-01 17:26:19.980

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.946

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.889

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.854

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.801

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.766

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.621

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.587

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.501

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-12-01 17:26:19.468

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\61DF.tmp" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: AMD Athlon(tm) II X2 220 Processor

Prozentuale Nutzung des RAM: 47%

Installierter physikalischer RAM: 2815.24 MB

Verfügbarer physikalischer RAM: 1473.86 MB

Summe virtueller Speicher: 5628.69 MB

Verfügbarer virtueller Speicher: 3561.11 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:200 GB) (Free:101.39 GB) NTFS

Drive d: (Volume) (Fixed) (Total:265.66 GB) (Free:265.51 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 1D884D44)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=200 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=265.7 GB) - (Type=07 NTFS)
 

==================== Ende von Addition.txt ============================

Baba Yaga

23.01.2016 00:40

Code:

Untersuchungsergebnis der Verknüpfungen des Benutzers (x64) Version:18-01-2016

durchgeführt von Besitzer (2016-01-19 15:03:36)

Gestartet von C:\Users\Besitzer\Desktop

Start-Modus: Normal
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 
 
 
 
 

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk -> C:\Windows\Installer\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}\SC_Reader.ico (Flexera Software LLC)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk -> C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAME CENTER.lnk -> C:\Program Files (x86)\OXXOGames\GPlayer\GPlayer.exe (Intenium GmbH)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk -> C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe (Google)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk -> C:\Windows\ehome\ehshell.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2010.lnk -> C:\Windows\Installer\{95140000-0070-0000-0000-0000000FF1CE}\oobeicon.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk -> C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk -> C:\Program Files (x86)\Paint.Net\PaintDotNet.exe (dotPDN LLC)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk -> C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk -> C:\Windows\System32\WindowsAnytimeUpgradeUI.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk -> C:\Program Files\DVD Maker\DVDMaker.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk -> C:\Program Files (x86)\Windows Live\Mail\wlmail.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk -> C:\Windows\System32\xpsrchvw.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Walsingham‘s Manor - Verlies der Seelen\Walsingham‘s Manor - Verlies der Seelen deinstallieren.lnk -> C:\Spiele\Walsingham‘s Manor - Verlies der Seelen\unins000.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Walsingham‘s Manor - Verlies der Seelen\Walsingham‘s Manor - Verlies der Seelen starten.lnk -> C:\Spiele\Walsingham‘s Manor - Verlies der Seelen\ghost_painting.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Turtix 2\GAME CENTER.lnk -> C:\Program Files (x86)\OXXOGames\GPlayer\GPlayer.exe (Intenium GmbH)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SuperTux\SuperTux.lnk -> C:\Spiele\SuperTux 0.3.4\supertux2.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Beetle Ju 2.lnk -> C:\Spiele\BeetleJu2CD\BeetleJu2_og.exe (INTENIUM GmbH)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Der bartlose Zauberer.lnk -> C:\Spiele\DerBartloseZauberer\DerBartloseZauberer_og.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Der Exorzist.lnk -> C:\Spiele\DerExorzist\DerExorzist_og.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Die Tuttles.lnk -> C:\Spiele\DieTuttles\DieTuttles_og.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Druids Operation Mistelzweig.lnk -> C:\Spiele\DruidsOperationMistelzweig\DruidsOperationMistelzweig_og.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Frankenstein - Meister des Schreckens.lnk -> C:\Spiele\1Downloads\FrankensteinMeisterDesSchreckens\FrankensteinMeisterDesSchreckens_og.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Haus der 1000 Türen 2 Das Juwel des Zarathustra.lnk -> C:\Spiele\HausDer1000Tueren2\HausDer1000Tueren2_og.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Haus der 1000 Türen Familiengeheimnisse.lnk -> C:\Spiele\HausDer1000Tueren\HausDer1000Tueren_og.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Kingdom Chronicles Königreich in Gefahr.lnk -> C:\Spiele\KingdomChronicles\KingdomChronicles_og.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Moai Erschaffe deinen Traum.lnk -> C:\Spiele\MoaiErschaffeDeinenTraum\MoaiErschaffeDeinenTraum_og.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Sherlock Holmes und der Hund der Baskervilles.lnk -> C:\Spiele\SherlockHolmesHundBaskervilles\SherlockHolmesHundBaskervilles_og.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spiele\Sky Taxi 4 Streng Geheim.lnk -> C:\Spiele\SkyTaxi4StrengGeheim\SkyTaxi4StrengGeheim_og.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger 2\Anleitung.lnk -> C:\Spiele\Game\Anleitung.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger 2\Schatzjäger 2 spielen.lnk -> C:\Spiele\Game\Schatzjäger2.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger\Anleitung.lnk -> C:\Spiele\Morrhuhn Schatzjäger 1\Anleitung.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger\Moorhuhn im Internet.lnk -> C:\Spiele\Morrhuhn Schatzjäger 1\Moorhuhn im Internet.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger\phenomedia im Internet.lnk -> C:\Spiele\Morrhuhn Schatzjäger 1\phenomedia im Internet.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger\Schatzjäger deinstallieren.lnk -> C:\Spiele\Morrhuhn Schatzjäger 1\Uninstall.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger\Schatzjäger spielen.lnk -> C:\Spiele\Morrhuhn Schatzjäger 1\Schatzjäger.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in trouble ...again! - Demo\ReadMe.lnk -> C:\Spiele)\Santa Claus in trouble ...again! - Demo\ReadMe.txt (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in trouble ...again! - Demo\Santa Claus in trouble ...again! - Demo deinstallieren.lnk -> C:\Spiele)\Santa Claus in trouble ...again! - Demo\Uninstall\UNWISE.EXE (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in trouble ...again! - Demo\Santa Claus in trouble ...again! - Demo.lnk -> C:\Spiele)\Santa Claus in trouble ...again! - Demo\Run\SC2.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in trouble ...again! - Demo\www.cdv.de.lnk -> C:\Spiele)\Santa Claus in trouble ...again! - Demo\Misc\publisherweb.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in trouble ...again! - Demo\www.joymania.de.lnk -> C:\Spiele)\Santa Claus in trouble ...again! - Demo\Misc\developerweb.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in trouble ...again! - Demo\www.santaclaus2.de.lnk -> C:\Spiele)\Santa Claus in trouble ...again! - Demo\Misc\gameweb.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in Trouble\Liesmich.doc.lnk -> C:\Program Files (x86)\Spiele\Santa Claus in Trouble\Liesmich.doc (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in Trouble\Liesmich.pdf.lnk -> C:\Program Files (x86)\Spiele\Santa Claus in Trouble\Liesmich.pdf (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in Trouble\Santa Claus in Trouble rausschmeißen.lnk -> C:\Program Files (x86)\Spiele\Santa Claus in Trouble\Uninstall\UNWISE.EXE (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in Trouble\Santa Claus in Trouble.lnk -> C:\Program Files (x86)\Spiele\Santa Claus in Trouble\SantaClausInTrouble.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in Trouble\www.cdv.de.lnk -> C:\Program Files (x86)\Spiele\Santa Claus in Trouble\cdv.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santa Claus in Trouble\www.joymania.de.lnk -> C:\Program Files (x86)\Spiele\Santa Claus in Trouble\joymania.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\Turtix\Turtix deinstallieren.lnk -> K:\Purplehills\Turtix\UNWISE.EXE (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\Turtix\Turtix.lnk -> K:\Purplehills\Turtix\Turtix.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\Tiger Eye\Tiger Eye deinstallieren.lnk -> C:\Spiele\1Sammlung\Tiger Eye\UNWISE.EXE ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\Tiger Eye\Tiger Eye.lnk -> C:\Spiele\1Sammlung\Tiger Eye\Tiger Eye.exe (PassionFruit Games)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\Jumpin'Jack\Jumpin'Jack deinstallieren.lnk -> K:\Purplehills\Jumpin'Jack\UNWISE.EXE (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\Jumpin'Jack\Jumpin'Jack.lnk -> K:\Purplehills\Jumpin'Jack\Jumpin'Jack.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\BestOfWin8\MiniGolfPro\MiniGolfPro deinstallieren.lnk -> C:\Spiele\MiniGolfPro\UNWISE.EXE ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\BestOfWin8\MiniGolfPro\MiniGolfPro.lnk -> C:\Spiele\MiniGolfPro\MiniGolfPro.exe (SunnyGamesLLC)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\BestOfWin8\Crazy Barrels\Crazy Barrels deinstallieren.lnk -> C:\Spiele\Crazy Barrels\UNWISE.EXE ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\BestOfWin8\Crazy Barrels\Crazy Barrels.lnk -> C:\Spiele\Crazy Barrels\crazy barrels.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\BestOfWin8\3D Bowling\3D Bowling deinstallieren.lnk -> C:\Spiele\3D Bowling\UNWISE.EXE ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Purplehills\BestOfWin8\3D Bowling\3D Bowling.lnk -> C:\Spiele\3D Bowling\3D Bowling.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\phenomedia\Moorhuhn Winter\Moorhuhn Winter deinstallieren.lnk -> C:\Spiele\Moorhuhn Winter\uninstaller.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\phenomedia\Moorhuhn Winter\Moorhuhn Winter spielen.lnk -> C:\Spiele\Moorhuhn Winter\MoorhuhnWinter.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\phenomedia\Moorhuhn Winter\Spielkiste.lnk -> C:\Program Files (x86)\Einfach_Spielen\spielkiste.exe (phenomedia publishing gmbh)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\phenomedia\Moorhuhn Wanted\Moorhuhn Wanted deinstallieren.lnk -> C:\Spiele\Moorhuhn Wanted\uninstaller.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\phenomedia\Moorhuhn Wanted\Moorhuhn Wanted spielen.lnk -> C:\Spiele\Moorhuhn Wanted\MHW-XXL.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\phenomedia\Moorhuhn Wanted\Spielkiste.lnk -> C:\Program Files (x86)\Einfach_Spielen\spielkiste.exe (phenomedia publishing gmbh)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Phantasmat - Eisiger Gipfel Sammleredition\Spiel Phantasmat - Eisiger Gipfel Sammleredition.lnk -> C:\Spiele\Phantasmat - Eisiger Gipfel Sammleredition\launchgame.bfg (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pflanzen gegen Zombies\Pflanzen gegen Zombies\Liesmich Ansehen.lnk -> C:\Spiele\Pflanzen gegen Zombies\Plants vs. Zombies\liesmich.html (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pflanzen gegen Zombies\Pflanzen gegen Zombies\Pflanzen gegen Zombies Deinstallieren.lnk -> C:\Spiele\Pflanzen gegen Zombies\Plants vs. Zombies\PopUninstall.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pflanzen gegen Zombies\Pflanzen gegen Zombies\Spiel Pflanzen gegen Zombies.lnk -> C:\Spiele\Pflanzen gegen Zombies\Plants vs. Zombies\PlantsVsZombies.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0\OpenOffice Base.lnk -> C:\Program Files (x86)\OpenOffice 4\program\sbase.exe (Apache Software Foundation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0\OpenOffice Calc.lnk -> C:\Program Files (x86)\OpenOffice 4\program\scalc.exe (Apache Software Foundation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0\OpenOffice Draw.lnk -> C:\Program Files (x86)\OpenOffice 4\program\sdraw.exe (Apache Software Foundation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0\OpenOffice Impress.lnk -> C:\Program Files (x86)\OpenOffice 4\program\simpress.exe (Apache Software Foundation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0\OpenOffice Math.lnk -> C:\Program Files (x86)\OpenOffice 4\program\smath.exe (Apache Software Foundation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0\OpenOffice Writer.lnk -> C:\Program Files (x86)\OpenOffice 4\program\swriter.exe (Apache Software Foundation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0\OpenOffice.lnk -> C:\Program Files (x86)\OpenOffice 4\program\soffice.exe (Apache Software Foundation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\GeForce Experience.lnk -> C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\LaunchGFExperience.exe (NVIDIA Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\3D Vision Photo Viewer.lnk -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstview.exe (NVIDIA Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nightfall Mysteries - Die Ashburg Verschwörung\Die Ashburg Verschwörung deinstallieren.lnk -> C:\Spiele\Nightfall Mysteries - Die Ashburg Verschwörung\unins000.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nightfall Mysteries - Die Ashburg Verschwörung\Die Ashburg Verschwörung.lnk -> C:\Spiele\Nightfall Mysteries - Die Ashburg Verschwörung\Die Ashburg-Verschwörung.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\Silverlight.Configuration.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Create Recovery Disc.lnk -> C:\Windows\System32\recdisc.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Remote Assistance.lnk -> C:\Windows\System32\msra.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logon Screen\Logon Screen.lnk -> C:\Program Files\Logon Screen\Logon Screen.exe (Daniel Rebelo)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IcoFX 1.6\IcoFX on the Web.lnk -> C:\Program Files (x86)\IcoFX 1.6\IcoFX.url ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IcoFX 1.6\IcoFX.lnk -> C:\Program Files (x86)\IcoFX 1.6\IcoFX.exe (Attila Kovrig)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IcoFX 1.6\Uninstall\Uninstall IcoFX.lnk -> C:\Program Files (x86)\IcoFX 1.6\unins000.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Deskjet 1050 J410 series\Druckereinrichtung & -software.lnk -> C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\USBSetupLauncher.exe (Hewlett-Packard Co.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Deskjet 1050 J410 series\Hilfe.lnk -> C:\Program Files (x86)\HP\HP Deskjet 1050 J410 series\bin\HelpViewer\hpqlpvwr.exe (Hewlett-Packard Co.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Deskjet 1050 J410 series\HP Scan.lnk -> C:\Program Files (x86)\HP\HP Deskjet 1050 J410 series\bin\HPScan.exe (Hewlett-Packard Co.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Deskjet 1050 J410 series\Shop für Zubehör.lnk -> C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\hpqDTSS.exe (Hewlett-Packard Co.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Deskjet 1050 J410 series\Website für Produktsupport.lnk -> C:\Program Files\HP\HP Deskjet 1050 J410 series\ProductSupportShortcut.url ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Spiel Phantasmat - Eisiger Gipfel Sammleredition.lnk -> C:\Spiele\Phantasmat - Eisiger Gipfel Sammleredition\launchgame.bfg (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake\Freemake Video Converter.lnk -> C:\Program Files (x86)\TORYA\Freemake\Freemake Video Converter\FreemakeVideoConverter.exe (Freemake)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Folderico\Folderico.lnk -> C:\Program Files (x86)\Folderico\Folderico.exe (Shedko software)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Folderico\Uninstall.lnk -> C:\Program Files (x86)\Folderico\uninst.exe (Shedko ( www.softq.org ))

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fishdom 2 Deluxe\Fishdom 2 Deluxe entfernen.lnk -> C:\Spiele\Fishdom 2 Deluxe\unins000.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fishdom 2 Deluxe\Fishdom 2 Deluxe.lnk -> C:\Spiele\Fishdom 2 Deluxe\Fishdom 2 Deluxe.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fishdom 2 Deluxe\Play More Playrix Games!.lnk -> C:\Spiele\Fishdom 2 Deluxe\homepage.url ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Deinstallieren.lnk -> C:\Program Files (x86)\Emsisoft Anti-Malware\unins000.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Emsisoft Anti-Malware.lnk -> C:\Program Files (x86)\Emsisoft Anti-Malware\a2start.exe (Emsisoft Ltd)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Emsisoft Homepage.lnk -> C:\Program Files (x86)\Emsisoft Anti-Malware\Emsisoft.url ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Hilfe.lnk -> C:\Program Files (x86)\Emsisoft Anti-Malware\de-de.chm ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\DVDVideoSoft Free Studio.lnk -> C:\Program Files (x86)\Common Files\DVDVideoSoft\FreeStudioManager.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Log Report.lnk -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\DVSSysReport.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Premium Membership.lnk -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\PremiumMembershipOffer.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Uninstall.lnk -> C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\Uninstall.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Audio Converter.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Audio Converter\FreeAudioConverter.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Audio Editor.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Audio Editor\FreeAudioEditor.exe (Digital Wave Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Coub Download.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Coub Download\FreeCoubDownload.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Dailymotion Download.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Dailymotion Download\FreeDailymotionDownload.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free DVD Video Burner.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free DVD Video Burner\FreeDVDVideoBurner.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free DVD Video Converter.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free DVD Video Converter\FreeDVDVideoConverter.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free GIF Maker.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free GIF Maker\FreeGIFMaker.exe (Digital Wave Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Image Convert and Resize.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Image Convert And Resize\FreeImageConvertAndResize.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Instagram Download.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Instagram Download\FreeInstagramDownload.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free MP4 Video Converter.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free MP4 Video Converter\FreeMP4VideoConverter.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free NicoVideo Download.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free NicoVideo Download\FreeNicoVideoDownload.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Screen Video Recorder.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Screen Video Recorder\FreeScreenVideoRecorder.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Torrent Download.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Video Editor.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Video Editor\FreeVideoEditor.exe (Digital Wave Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Video Flip and Rotate.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Video Flip And Rotate\FreeVideoFlipAndRotate.exe (Digital Wave Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Video to DVD Converter.lnk -> C:\Program Files (x86)\Torya\DVDVideoSoft\Free DVD Video Burner\FreeVideoToDVDConverter.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Video to JPG Converter.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Video to JPG Converter\FreeVideoToJPGConverter.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free Video to MP3 Converter.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free Video to MP3 Converter\FreeVideoToMP3Converter.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free YouTube Download.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free YouTube Download\FreeYTVDownloader.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free YouTube to DVD Converter.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free YouTube to DVD Converter\FreeYouTubeToDVDConverter.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free YouTube to MP3 Converter.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Programs\Free YouTube Uploader.lnk -> C:\Program Files (x86)\TORYA\DVDVideoSoft\Free YouTube Uploader\FreeYouTubeUploader.exe (DVDVideoSoft Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DigiPen\Perspective\Perspective.lnk -> C:\Spiele\DigiPen\Perspective\Perspective.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DigiPen\Perspective\Uninstall.lnk -> C:\Spiele\DigiPen\Perspective\uninst.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Die Sage von Odysseus\Die Sage von Odysseus deinstallieren.lnk -> C:\Spiele\Die Sage von Odysseus\unins000.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Die Sage von Odysseus\Die Sage von Odysseus starten.lnk -> C:\Spiele\Die Sage von Odysseus\game.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DeathMan\DeathMan.lnk -> C:\Spiele\DeathMan\game.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DeathMan\Uninstall DeathMan.lnk -> C:\Spiele\DeathMan\unins000.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Das Geheimnis des Berghotels\Das Geheimnis des Berghotels deinstallieren.lnk -> C:\Spiele\Das Geheimnis des Berghotels\unins000.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Das Geheimnis des Berghotels\Das Geheimnis des Berghotels starten.lnk -> C:\Spiele\Das Geheimnis des Berghotels\Game.exe (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Das Geheimnis des Berghotels\Handbuch.lnk -> C:\Spiele\Das Geheimnis des Berghotels\Manual.pdf (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crazy Golf World Tour\Crazy Golf World Tour.lnk -> C:\Spiele\Crazy Golf World Tour\CrazyGolfWorldTour.exe (Tuna Technologies Ltd.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crazy Golf World Tour\Read Me.lnk -> C:\Spiele\Crazy Golf World Tour\ReadMe.txt ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cosmic Ball\Play Cosmic Ball.lnk -> C:\Spiele\Cosmic Ball\game.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cosmic Ball\Uninstall Cosmic Ball.lnk -> C:\Spiele\Cosmic Ball\unins000.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cosmic Ball\Visit MyRealGames.com.lnk -> C:\Spiele\Cosmic Ball\website.url (Keine Datei)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Braid\Run Braid.lnk -> C:\Spiele\Braid\braid.exe (TODO: <Company name>)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Braid\Uninstall Braid.lnk -> C:\Spiele\Braid\unins000.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Billard2\Billard2 deinstallieren.lnk -> C:\Spiele\Billard2\unins000.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Billard2\Billard2.lnk -> C:\Spiele\Billard2\AmericanPool.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BabelSoft\Media Preview\Media Preview Configuration.lnk -> C:\Windows\Installer\{8680D34A-E765-4579-877F-DEA8FB174DA7}\Icon.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\displayswitch.lnk -> C:\Windows\System32\displayswitch.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sound Recorder.lnk -> C:\Windows\System32\SoundRecorder.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sticky Notes.lnk -> C:\Windows\System32\StikyNot.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sync Center.lnk -> C:\Windows\System32\mobsync.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\Windowspowershell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\ShapeCollector.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\TabTip.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Windows Journal.lnk -> C:\Program Files\Windows Journal\Journal.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\System Restore.lnk -> C:\Windows\System32\rstrui.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk -> C:\Windows\System32\migwiz\PostMig.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Windows Easy Transfer.lnk -> C:\Windows\System32\migwiz\migwiz.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip File Manager.lnk -> C:\Program Files (x86)\7-Zip\7zFM.exe (Igor Pavlov)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip Help.lnk -> C:\Program Files (x86)\7-Zip\7-zip.chm ()

Shortcut: C:\Users\Besitzer\Links\Desktop.lnk -> C:\Users\Besitzer\Desktop ()

Shortcut: C:\Users\Besitzer\Links\Downloads.lnk -> C:\Users\Besitzer\Downloads ()

Shortcut: C:\Users\Besitzer\Links\Spiele.lnk -> C:\Spiele ()

Shortcut: C:\Users\Besitzer\Downloads\Software\Tor Browser\Start Tor Browser.lnk -> C:\Users\Besitzer\Downloads\Software\Tor Browser\Browser\firefox.exe (Mozilla Corporation)

Shortcut: C:\Users\Besitzer\Desktop\Aktuell\Tiger Eye - Verknüpfung.lnk -> C:\Spiele\1Sammlung\Tiger Eye\Tiger Eye.exe (PassionFruit Games)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Karten- und Brettspiele.lnk -> C:\Spiele\Karten- und Brettspiele\Start.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Setup QuickStart.lnk -> C:\Users\Besitzer\Eigener Kram\VirtualDJ\VirtualDJ 8 - Getting Started.pdf (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\User Guide.lnk -> C:\Users\Besitzer\Eigener Kram\VirtualDJ\VirtualDJ 8 - User Guide.pdf (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\VirtualDJ 8.lnk -> C:\Program Files (x86)\VirtualDJ\virtualdj8.exe (Atomix Productions)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker\README.lnk -> C:\Program Files (x86)\Unlocker\README.TXT ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker\Start Unlocker.lnk -> C:\Program Files (x86)\Unlocker\Unlocker.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker\Uninstall.lnk -> C:\Program Files (x86)\Unlocker\uninst.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker\Website.lnk -> C:\Program Files (x86)\Unlocker\Unlocker.url ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rondomedia\Love Over Death\Love Over Death Deinstallation.lnk -> C:\Spiele\Love Over Death\Uninstall.exe (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rondomedia\Love Over Death\Love Over Death.lnk -> C:\Spiele\Love Over Death\bloodCurse.exe (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Revo Uninstaller.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe (VS Revo Group)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Uninstall.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\uninst.exe (VS Revo Group Ltd.)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Website.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revo Uninstaller.url ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Phantasmat - Eisiger Gipfel Sammleredition\Phantasmat - Eisiger Gipfel Sammleredition deinstallieren.lnk -> C:\Spiele\Phantasmat - Eisiger Gipfel Sammleredition\Uninstall.exe (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Phantasmat - Eisiger Gipfel Sammleredition\Phantasmat - Eisiger Gipfel Sammleredition entschlüsseln.lnk -> C:\Spiele\Phantasmat - Eisiger Gipfel Sammleredition\UnlockGame.bfg (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mysteries of Olympus\Mysteries of Olympus.lnk -> C:\Spiele\Mysteries of Olympus\MysteriesOfOlympus.exe (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mysteries of Olympus\Uninstall Mysteries of Olympus.lnk -> C:\Spiele\Mysteries of Olympus\uninst.exe (Keine Datei)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jump Jack\Bitte lesen!.lnk -> C:\Spiele\Jump Jack\Epilepsiewarnung.txt ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jump Jack\Jack starten.lnk -> C:\Spiele\Jump Jack\GameEngine.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jump Jack\Jump Jack deinstallieren.lnk -> C:\Spiele\Jump Jack\Uninstal.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jump Jack\read this!.lnk -> C:\Spiele\Jump Jack\EPILEPSY WARNING_UK.doc ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gehirntraining mit Dr. Kawashima\Dr Kawashima.lnk -> C:\Spiele\DrKawashima\DrKawashima.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gehirntraining mit Dr. Kawashima\Grafikeinstellungen.lnk -> C:\Spiele\DrKawashima\GraphicsSettings\GraphicsSettings.exe (BBG Entertainment GmbH)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gehirntraining mit Dr. Kawashima\Readme.lnk -> C:\Spiele\DrKawashima\readme_de.html ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gehirntraining mit Dr. Kawashima\Uninstall.lnk -> C:\Spiele\DrKawashima\Uninstall.exe (BBG Entertainment GmbH)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake\Uninstall\Uninstall Freemake Video Converter.lnk -> C:\Program Files (x86)\TORYA\Freemake\Freemake Video Converter\Uninstall\unins000.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\Check for updates.lnk -> C:\Users\Besitzer\AppData\Local\CodecDecoder\AutoUpdate.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\Uninstall.lnk -> C:\Users\Besitzer\AppData\Local\CodecDecoder\uninst.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\Website.lnk -> C:\Users\Besitzer\AppData\Local\CodecDecoder\CodecDecoder.url ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon\Amazon MP3-Downloader\Amazon MP3-Downloader.lnk -> C:\Users\Besitzer\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3Downloader.exe (Amazon.com)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon\Amazon MP3-Downloader\Uninstall Amazon MP3-Downloader.lnk -> C:\Users\Besitzer\AppData\Local\Program Files\Amazon\MP3 Downloader\Uninstall.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\IcoFX.lnk -> C:\Program Files (x86)\IcoFX 1.6\IcoFX.exe (Attila Kovrig)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PhotoScape.lnk -> C:\Program Files (x86)\PhotoScape\PhotoScape.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Autostart program viewer.lnk -> C:\Users\Besitzer\Downloads\Software\Autoruns\autoruns.exe (Sysinternals - www.sysinternals.com)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\BVS Solitaire Collection.lnk -> C:\Spiele\380 Solitaire Patiencen\CARDS.EXE (BVS Development Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CCleaner.lnk -> C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\DVDVideoSoft Free Studio.lnk -> C:\Program Files (x86)\Common Files\DVDVideoSoft\FreeStudioManager.exe (DVDVideoSoft Ltd.)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Freemake Video Converter.lnk -> C:\Program Files (x86)\TORYA\Freemake\Freemake Video Converter\FreemakeVideoConverter.exe (Freemake)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Earth.lnk -> C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe (Google)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Media Player Classic.lnk -> C:\Users\Besitzer\Downloads\Software\mplayerc.exe (Gabest)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Movie Maker.lnk -> C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\OpenOffice 4.1.0.lnk -> C:\Program Files (x86)\OpenOffice 4\program\soffice.exe (Apache Software Foundation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Pale Moon.lnk -> C:\Program Files (x86)\TORYA\BrowserPaleMoon\palemoon.exe (Moonchild Productions)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Plants vs. Zombies.lnk -> C:\Spiele\Pflanzen gegen Zombies\PlantsVsZombies.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\RossoRabbitInTrouble.lnk -> C:\Users\Besitzer\Downloads\Rosso Rabbit In Trouble - (Www.ApunKaGames.Net)\Game\RossoRabbitInTrouble.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Ski Challenge 16 starten.lnk -> C:\Spiele\SkiChallenge2016\Updater.exe ()

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Start Tor Browser.lnk -> C:\Users\Besitzer\Downloads\Software\Tor Browser\Browser\firefox.exe (Mozilla Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Sysinternals Process Explorer.lnk -> C:\Users\Besitzer\Downloads\Software\processexplorer\procexp.exe (Sysinternals - www.sysinternals.com)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TCP-UDP endpoint viewer.lnk -> C:\Users\Besitzer\Downloads\Software\TCPView\Tcpview.exe (Sysinternals - www.sysinternals.com)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\VirtualDJ 8.lnk -> C:\Program Files (x86)\VirtualDJ\virtualdj8.exe (Atomix Productions)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Directory Statistics.lnk -> C:\Users\Besitzer\Downloads\Software\windirstat112\windirstat1_1_1-exe-ansi\windirstat.exe (Seifert)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Live Mail.lnk -> C:\Program Files (x86)\Windows Live\Mail\wlmail.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Bildschirmtastatur.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\HP Scan.lnk -> C:\Program Files (x86)\HP\HP Deskjet 1050 J410 series\bin\HPScan.exe (Hewlett-Packard Co.)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\IcoFX.lnk -> C:\Program Files (x86)\IcoFX 1.6\IcoFX.exe (Attila Kovrig)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Logon Screen.lnk -> C:\Program Files\Logon Screen\Logon Screen.exe (Daniel Rebelo)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Media Preview Configuration.lnk -> C:\Program Files\Media Preview\MediaPreviewConf.exe (BabelSoft)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\MP3Gain GUI.lnk -> C:\Program Files (x86)\MP3Gain\MP3GainGUI.exe (Snelg Enterprises)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Paint.lnk -> C:\Program Files (x86)\Paint.Net\PaintDotNet.exe (dotPDN LLC)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Revo Uninstaller.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe (VS Revo Group)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Windows DVD Maker.lnk -> C:\Program Files\DVD Maker\DVDMaker.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)

Shortcut: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Private Character Editor.lnk -> C:\Windows\System32\eudcedit.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
 
 
 
 

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DefaultPrograms

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk -> C:\Windows\System32\wuapp.exe (Microsoft Corporation) -> startmenu

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Game Manager.lnk -> C:\Program Files (x86)\bfgclient\bfgclient.exe () -> -u

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) -> /showgadgets

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger 2\Schatzjäger 2 deinstallieren.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{1D0DD240-7752-48B5-A6EF-AC6509E16ABE}\Setup.exe" -l0x7  -uninstshortcut

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\3D Vision preview pack 1.lnk -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe (NVIDIA Corporation) -> /show

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\Disable 3D Vision.lnk -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe (NVIDIA Corporation) -> /disable

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\Enable 3D Vision.lnk -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe (NVIDIA Corporation) -> /enable

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance\Backup and Restore Center.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.BackupAndRestore

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Deskjet 1050 J410 series\Deinstallieren.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /qb /x {C3F12DD0-54B1-4B2B-A82B-FA43502BC550}

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Deskjet 1050 J410 series\HP Deskjet 1050 J410 series.lnk -> C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HP Deskjet 1050 J410 series.exe (Hewlett-Packard Co.) -> -Start UDCDevicePage

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow\Audio decoder configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> ffdshow.ax,configureAudio

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow\VFW configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> ff_vfw.dll,configureVFW

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow\Video decoder configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> ffdshow.ax,configure

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crazy Golf World Tour\Uninstall Crazy Golf World Tour.lnk -> C:\Windows\Crazy Golf World Tour\uninstall.exe () -> "/U:C:\Spiele\Crazy Golf World Tour\Uninstall\uninstall.xml"

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BabelSoft\Media Preview\Uninstall Media Preview.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /x {8680D34A-E765-4579-877F-DEA8FB174DA7}

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell Modules.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) -> -NoExit -ImportSystemModules

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation) -> /open

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Welcome Center.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> %SystemRoot%\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\VSRevoGroup\RevoUninstaller\ADCU\Tintenwarnungen überwachen - HP Deskjet 1050 J410 series.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> "C:\Program Files\HP\HP Deskjet 1050 J410 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN09Q2H2SQ05HW;CONNECTION=USB;MONITOR=1;

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Uninstall VirtualDJ 8.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /x {9ADBBA93-4625-4898-BB0D-BCE7EA9F8B4A}

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Run Hunter Mode.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe (VS Revo Group) -> -hunter

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\FFDShow Audio Decoder Configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> ffdshow.ax,configureAudio

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\FFDShow Decoder Configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> ffdshow.ax,configure

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\FFDShow Video Configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> ff_vfw.dll,configureVFW

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\Haali Splitter Configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> splitter.ax,Configure

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\VSFilter Subtitles Configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> vsfilter.dll,DirectVobSub

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codec Decoder Pack\XviD Encoder Configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> xvidvfw.dll,Configure

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) ->  -extoff

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1

ShortcutWithArgument: C:\Users\Besitzer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\HP Deskjet 1050 J410 series.lnk -> C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HP Deskjet 1050 J410 series.exe (Hewlett-Packard Co.) -> -Start UDCDevicePage

ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility\Ease of Access.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.EaseOfAccessCenter
 
 

InternetURL: C:\Users\Administrator\Favorites\Links\Web Slice-Katalog.url -> hxxp://go.microsoft.com/fwlink/?LinkId=121315

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger 2\Moorhuhn im Internet.url -> hxxp://redirect.phenomedia.com/redirectMe.php?id=347

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schatzjäger 2\phenomedia im Internet.url -> hxxp://redirect.phenomedia.com/redirectMe.php?id=346

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pflanzen gegen Zombies\Pflanzen gegen Zombies\Besuch PopCap.com.url -> hxxp://www.popcap.com/?cid=PVZGY_PC_RTL_DE

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nightfall Mysteries - Die Ashburg Verschwörung\rondomedia.url -> hxxp://www.rondomedia.de/

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logon Screen\Logon Screen im Internet.url -> hxxp://www.danielnetsoftware.com/

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crazy Golf World Tour\Oxygen Interactive Ltd.url -> hxxp://www.oxygenint.com

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BabelSoft\Media Preview\Media Preview on the Web.url -> hxxp://www.babelsoft.net/products.htm

InternetURL: C:\Users\Besitzer\Favorites\Zylom.url -> hxxp://www.zylom.com/

InternetURL: C:\Users\Besitzer\Favorites\Windows Live\Windows Live Gallery.url -> hxxp://go.microsoft.com/fwlink/?LinkId=70742

InternetURL: C:\Users\Besitzer\Favorites\Windows Live\Windows Live Ideas.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72700

InternetURL: C:\Users\Besitzer\Favorites\Windows Live\Windows Live Mail.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72681

InternetURL: C:\Users\Besitzer\Favorites\Windows Live\Windows Live Spaces.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72682

InternetURL: C:\Users\Besitzer\Favorites\MSN-Websites\MSN Auto.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72680

InternetURL: C:\Users\Besitzer\Favorites\MSN-Websites\MSN Fernsehen.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72659

InternetURL: C:\Users\Besitzer\Favorites\MSN-Websites\MSN Money.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72640

InternetURL: C:\Users\Besitzer\Favorites\MSN-Websites\MSN Nachrichten.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72636

InternetURL: C:\Users\Besitzer\Favorites\MSN-Websites\MSN Sport.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72635

InternetURL: C:\Users\Besitzer\Favorites\MSN-Websites\MSN.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72630

InternetURL: C:\Users\Besitzer\Favorites\Microsoft-Websites\IE-Site auf Microsoft.com.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72186

InternetURL: C:\Users\Besitzer\Favorites\Microsoft-Websites\Microsoft Deutschland GmbH.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72520

InternetURL: C:\Users\Besitzer\Favorites\Microsoft-Websites\Microsoft Store.url -> hxxp://go.microsoft.com/fwlink/?linkid=140813

InternetURL: C:\Users\Besitzer\Favorites\Microsoft-Websites\Microsoft Windows - Start.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72629

InternetURL: C:\Users\Besitzer\Favorites\Microsoft-Websites\Microsoft zu Hause.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72406

InternetURL: C:\Users\Besitzer\Favorites\Microsoft-Websites\Microsoft.com durchsuchen.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72893

InternetURL: C:\Users\Besitzer\Favorites\Microsoft-Websites\Site für IE Add-Ons.url -> hxxp://go.microsoft.com/fwlink/?LinkId=50893

InternetURL: C:\Users\Besitzer\Favorites\Microsoft Websites\IE Add-on site.url -> hxxp://go.microsoft.com/fwlink/?LinkId=50893

InternetURL: C:\Users\Besitzer\Favorites\Microsoft Websites\IE site on Microsoft.com.url -> hxxp://go.microsoft.com/fwlink/?LinkId=44661

InternetURL: C:\Users\Besitzer\Favorites\Microsoft Websites\Microsoft At Home.url -> hxxp://go.microsoft.com/fwlink/?LinkId=55424

InternetURL: C:\Users\Besitzer\Favorites\Microsoft Websites\Microsoft At Work.url -> hxxp://go.microsoft.com/fwlink/?LinkId=68920

InternetURL: C:\Users\Besitzer\Favorites\Microsoft Websites\Microsoft Store.url -> hxxp://go.microsoft.com/fwlink/?LinkId=140813

InternetURL: C:\Users\Besitzer\Favorites\Microsoft Websites\Welcome to IE9.url -> hxxp://go.microsoft.com/fwlink/?LinkId=191282

InternetURL: C:\Users\Besitzer\Favorites\Links\Vorgeschlagene Sites.url -> 0

InternetURL: C:\Users\Besitzer\Favorites\Links\Web Slice-Katalog.url -> hxxp://go.microsoft.com/fwlink/?LinkId=121315

InternetURL: C:\Users\Besitzer\AppData\Local\CodecDecoder\CodecDecoder.url -> hxxp://www.codec-decoder.com/
 

==================== Ende von Shortcut.txt =============================

So, hoffe ich bin nicht durcheinander gekommen.
MBAM hat nichts gefunden, wobei ich sagen muss, dass ich Chamäleon ausgeführt habe, und MBAM darüber nicht installiert werden konnte, stand so im Fenster. Ich habe es dann aus dem Internet geladen.
Stutzig machen mich auch immer wieder die Google-Chrome-Funde und die des Internet Explorers, beide Browser nutze ich nämlich überhaupt gar nicht, Chrome ist nicht mal installiert.
Im Firefox Satusbericht stand auch mal was von 35 Lesezeichen, obwohl ich noch nie Lesezeichen gesetzt habe und über das Fragezeichen bekam ich gesagt, dass Firefox aktuell ist, obwohl er schon veraltet war. Im Firefox-Forum konnte mir niemand sagen, woher die Lesezeichen kamen, ich habe nach viel Luft dann auch nicht mehr gefragt.
Den Firefox habe ich schon mehrfach deinstalliert, mit allem PiPaPo und neu installiert, sowie restauriert, im privaten Modus ausprobiert und mit deaktivierten Add-Ons. HTTPS Everywhere mußte ich gar ganz deaktivieren, weil eine Zeit lang Videos auf youtube ohne das besser liefen. Eine Sache muss ich Dir noch sagen, nämlich das ich die Grafikkarte nicht auf dem neuesten Stand habe, weil dann das Spiel "Pflanzen gegen Zombies" extrem ruckelt und das geht mal gar nicht, danach bin ich süchtig. Die von PopCap meinten dazu bloß "Sorry". Vielleicht kannst Du mir dabei auch helfen.
Großen Dank erstmal, hoffe, ich habe Dich nicht zugetextet.
Gruß,
Baba Yaga

Deathkid535

23.01.2016 13:36

Hi,

Welche Haken hast du bei FRST gesetzt/entfernt?
Hast du die Funde von AdwCleaner gelöscht?

Wir checken auch mal nach Rootkits.

Schritt # 1: TDSS-Killer

Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Schritt # 2: Bitte Posten

Das Log von TDSS Killer

Baba Yaga

24.01.2016 14:57

Ich weiß nicht mehr, welche Haken ich bei Frst gesetzt habe.
Übrigens konnte ich zwei Tage lang bei filepony.de gar nichts runterladen, bin dann auf heise.de gegangen, dort ging es. Heute habe ich TDSSKiller aber bei filepony.de runterladen können.

Code:

14:46:47.0862 0x0ffc  TDSS rootkit removing tool 3.1.0.9 Dec 11 2015 22:49:12

14:46:54.0140 0x0ffc  ============================================================

14:46:54.0140 0x0ffc  Current date / time: 2016/01/24 14:46:54.0140

14:46:54.0140 0x0ffc  SystemInfo:

14:46:54.0140 0x0ffc  

14:46:54.0141 0x0ffc  OS Version: 6.1.7601 ServicePack: 1.0

14:46:54.0141 0x0ffc  Product type: Workstation

14:46:54.0141 0x0ffc  ComputerName: LAVAMAT

14:46:54.0141 0x0ffc  UserName: Besitzer

14:46:54.0141 0x0ffc  Windows directory: C:\Windows

14:46:54.0141 0x0ffc  System windows directory: C:\Windows

14:46:54.0141 0x0ffc  Running under WOW64

14:46:54.0141 0x0ffc  Processor architecture: Intel x64

14:46:54.0141 0x0ffc  Number of processors: 2

14:46:54.0141 0x0ffc  Page size: 0x1000

14:46:54.0141 0x0ffc  Boot type: Normal boot

14:46:54.0141 0x0ffc  ============================================================

14:46:56.0426 0x0ffc  KLMD registered as C:\Windows\system32\drivers\22838274.sys

14:46:56.0743 0x0ffc  System UUID: {DB1B7699-20AE-0643-4EE0-2A43CE1EB38C}

14:46:57.0242 0x0ffc  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

14:46:57.0257 0x0ffc  ============================================================

14:46:57.0257 0x0ffc  \Device\Harddisk0\DR0:

14:46:57.0258 0x0ffc  MBR partitions:

14:46:57.0258 0x0ffc  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000

14:46:57.0258 0x0ffc  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x18FFF800

14:46:57.0258 0x0ffc  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x19032000, BlocksNum 0x21353800

14:46:57.0258 0x0ffc  ============================================================

14:46:57.0287 0x0ffc  C: <-> \Device\Harddisk0\DR0\Partition2

14:46:57.0318 0x0ffc  D: <-> \Device\Harddisk0\DR0\Partition3

14:46:57.0318 0x0ffc  ============================================================

14:46:57.0318 0x0ffc  Initialize success

14:46:57.0318 0x0ffc  ============================================================

Code:

14:47:24.0253 0x0afc  ============================================================

14:47:24.0253 0x0afc  Scan started

14:47:24.0253 0x0afc  Mode: Manual; 

14:47:24.0253 0x0afc  ============================================================

14:47:24.0253 0x0afc  KSN ping started

14:47:24.0282 0x0afc  KSN ping finished: false

14:47:29.0427 0x0afc  ================ Scan system memory ========================

14:47:29.0427 0x0afc  System memory - ok

14:47:29.0428 0x0afc  ================ Scan services =============================

14:47:29.0647 0x0afc  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys

14:47:29.0653 0x0afc  1394ohci - ok

14:47:30.0139 0x0afc  [ A0701F64EBBBCF8ACCA449D60B4BD0A6, 18BA84ECDAA46D5B64C598857BF4174D5A6B4C3C4BEA9F5AAB762C1004A0D32C ] a2AntiMalware   C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe

14:47:30.0344 0x0afc  a2AntiMalware - ok

14:47:30.0436 0x0afc  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys

14:47:30.0444 0x0afc  ACPI - ok

14:47:30.0473 0x0afc  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys

14:47:30.0475 0x0afc  AcpiPmi - ok

14:47:30.0589 0x0afc  [ F2CEEE9ABBCEF207ACB103215AC28BC2, F8F8B8AF6317926D7AC0CA2CA23628B2C69327A2792D58D3328443C5ED9514E9 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

14:47:30.0592 0x0afc  AdobeARMservice - ok

14:47:30.0734 0x0afc  [ 295A5BFCE8D225D014DB4E6E69336279, F786F06F0EE3253FA936FA5D73FD9AC704FAB19BE76C60C65AEAD399DC93F9C5 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

14:47:30.0741 0x0afc  AdobeFlashPlayerUpdateSvc - ok

14:47:30.0797 0x0afc  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys

14:47:30.0817 0x0afc  adp94xx - ok

14:47:30.0851 0x0afc  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys

14:47:30.0860 0x0afc  adpahci - ok

14:47:30.0899 0x0afc  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys

14:47:30.0904 0x0afc  adpu320 - ok

14:47:30.0929 0x0afc  [ 83BFCCAC53795E8A5055A93672D0C46C, B2B03473D950A5BA9DE59D81E7B14C1FAFF17B2A4D8A5808588F5CC21D63B291 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

14:47:30.0942 0x0afc  AeLookupSvc - ok

14:47:31.0022 0x0afc  [ 9A4A1EEE802BF2F878EE8EAB407B21B7, 177EB7DF4B35FE4C0E45E775A0FD5D48D39B410052E3EE18BDEEC809E152D9D8 ] AFD             C:\Windows\system32\drivers\afd.sys

14:47:31.0035 0x0afc  AFD - ok

14:47:31.0072 0x0afc  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys

14:47:31.0075 0x0afc  agp440 - ok

14:47:31.0102 0x0afc  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe

14:47:31.0105 0x0afc  ALG - ok

14:47:31.0119 0x0afc  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys

14:47:31.0121 0x0afc  aliide - ok

14:47:31.0140 0x0afc  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys

14:47:31.0141 0x0afc  amdide - ok

14:47:31.0149 0x0afc  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys

14:47:31.0152 0x0afc  AmdK8 - ok

14:47:31.0174 0x0afc  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys

14:47:31.0176 0x0afc  AmdPPM - ok

14:47:31.0189 0x0afc  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys

14:47:31.0193 0x0afc  amdsata - ok

14:47:31.0211 0x0afc  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys

14:47:31.0217 0x0afc  amdsbs - ok

14:47:31.0224 0x0afc  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys

14:47:31.0226 0x0afc  amdxata - ok

14:47:31.0266 0x0afc  [ 27DABFB4A6B0140C34DBEC713469592B, A355170D353AFBF0DE4EF53282F8404788FBBD0E2A1B7282B1B2925923E83141 ] AppID           C:\Windows\system32\drivers\appid.sys

14:47:31.0280 0x0afc  AppID - ok

14:47:31.0297 0x0afc  [ ABC373B9C6275D45F17DB559408FFD1B, 12B355393BEBE2D1D24D7A9DA5E69E03E334899407503BC1CADCF7BE39828223 ] AppIDSvc        C:\Windows\System32\appidsvc.dll

14:47:31.0299 0x0afc  AppIDSvc - ok

14:47:31.0352 0x0afc  [ 978DC0A1FBE9CC91B21B40AF66CB396A, 90BAFF81D98F5AFD743D8BD65F716666A7A7BD2DA612492E03C79B29E9A0F8C2 ] Appinfo         C:\Windows\System32\appinfo.dll

14:47:31.0354 0x0afc  Appinfo - ok

14:47:31.0412 0x0afc  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\DRIVERS\arc.sys

14:47:31.0415 0x0afc  arc - ok

14:47:31.0429 0x0afc  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys

14:47:31.0433 0x0afc  arcsas - ok

14:47:31.0523 0x0afc  [ F15AB80B867D3332D5DDFB0A05B9CE04, 5A16577106246AB5DCC04FE0A0B00B7C5702557B75F958721E4C00383AB99809 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

14:47:31.0609 0x0afc  aspnet_state - ok

14:47:31.0662 0x0afc  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

14:47:31.0664 0x0afc  AsyncMac - ok

14:47:31.0697 0x0afc  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys

14:47:31.0699 0x0afc  atapi - ok

14:47:31.0768 0x0afc  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

14:47:31.0791 0x0afc  AudioEndpointBuilder - ok

14:47:31.0817 0x0afc  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioSrv        C:\Windows\System32\Audiosrv.dll

14:47:31.0833 0x0afc  AudioSrv - ok

14:47:31.0883 0x0afc  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll

14:47:31.0886 0x0afc  AxInstSV - ok

14:47:31.0923 0x0afc  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys

14:47:31.0935 0x0afc  b06bdrv - ok

14:47:31.0959 0x0afc  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys

14:47:31.0966 0x0afc  b57nd60a - ok

14:47:31.0990 0x0afc  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll

14:47:31.0994 0x0afc  BDESVC - ok

14:47:32.0001 0x0afc  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys

14:47:32.0002 0x0afc  Beep - ok

14:47:32.0070 0x0afc  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll

14:47:32.0096 0x0afc  BFE - ok

14:47:32.0233 0x0afc  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll

14:47:32.0651 0x0afc  BITS - ok

14:47:32.0683 0x0afc  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys

14:47:32.0686 0x0afc  blbdrive - ok

14:47:32.0725 0x0afc  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

14:47:32.0728 0x0afc  bowser - ok

14:47:32.0763 0x0afc  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys

14:47:32.0765 0x0afc  BrFiltLo - ok

14:47:32.0777 0x0afc  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys

14:47:32.0778 0x0afc  BrFiltUp - ok

14:47:32.0823 0x0afc  [ 5C2F352A4E961D72518261257AAE204B, 9EE1001E1D46A414A7A86FE1DBBE232203E26F54D9EF43ED31ED8EACD4D09853 ] BridgeMP        C:\Windows\system32\DRIVERS\bridge.sys

14:47:32.0827 0x0afc  BridgeMP - ok

14:47:32.0849 0x0afc  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll

14:47:32.0853 0x0afc  Browser - ok

14:47:32.0876 0x0afc  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

14:47:32.0883 0x0afc  Brserid - ok

14:47:32.0897 0x0afc  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

14:47:32.0900 0x0afc  BrSerWdm - ok

14:47:32.0910 0x0afc  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

14:47:32.0911 0x0afc  BrUsbMdm - ok

14:47:32.0923 0x0afc  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

14:47:32.0925 0x0afc  BrUsbSer - ok

14:47:32.0942 0x0afc  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys

14:47:32.0945 0x0afc  BTHMODEM - ok

14:47:32.0974 0x0afc  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll

14:47:32.0978 0x0afc  bthserv - ok

14:47:33.0003 0x0afc  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

14:47:33.0006 0x0afc  cdfs - ok

14:47:33.0126 0x0afc  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

14:47:33.0158 0x0afc  cdrom - ok

14:47:33.0197 0x0afc  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll

14:47:33.0211 0x0afc  CertPropSvc - ok

14:47:33.0262 0x0afc  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys

14:47:33.0265 0x0afc  circlass - ok

14:47:33.0307 0x0afc  [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS            C:\Windows\system32\CLFS.sys

14:47:33.0316 0x0afc  CLFS - ok

14:47:33.0376 0x0afc  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

14:47:33.0384 0x0afc  clr_optimization_v2.0.50727_32 - ok

14:47:33.0431 0x0afc  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

14:47:33.0436 0x0afc  clr_optimization_v2.0.50727_64 - ok

14:47:33.0540 0x0afc  [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

14:47:33.0653 0x0afc  clr_optimization_v4.0.30319_32 - ok

14:47:33.0699 0x0afc  [ 9ACBE5EC13C2CC95833BFB7636CA8B1A, 6224DA9FB335D2A8374C60B8DEA539DD3A0E43230DB888B137B71A56EC57D6AF ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

14:47:33.0757 0x0afc  clr_optimization_v4.0.30319_64 - ok

14:47:33.0802 0x0afc  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys

14:47:33.0803 0x0afc  CmBatt - ok

14:47:33.0828 0x0afc  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys

14:47:33.0829 0x0afc  cmdide - ok

14:47:33.0910 0x0afc  [ EC0511BB85BAA42A9734011685A6732C, 10B52F0860CCB3AA0FC34DDA5C5538BFCF7B6D40738B7756297237FD2D9E01C1 ] CNG             C:\Windows\system32\Drivers\cng.sys

14:47:33.0922 0x0afc  CNG - ok

14:47:33.0944 0x0afc  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys

14:47:33.0946 0x0afc  Compbatt - ok

14:47:33.0989 0x0afc  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys

14:47:33.0991 0x0afc  CompositeBus - ok

14:47:33.0998 0x0afc  COMSysApp - ok

14:47:34.0011 0x0afc  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys

14:47:34.0013 0x0afc  crcdisk - ok

14:47:34.0072 0x0afc  [ 7BC3E861F7E8EB543A630090FAE779E0, 52A538F25C853AAC9706CD0D4EBF80B1963391AA175895CFD9D44C8ABBFCFB74 ] CryptSvc        C:\Windows\system32\cryptsvc.dll

14:47:34.0085 0x0afc  CryptSvc - ok

14:47:34.0132 0x0afc  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll

14:47:34.0146 0x0afc  DcomLaunch - ok

14:47:34.0171 0x0afc  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll

14:47:34.0179 0x0afc  defragsvc - ok

14:47:34.0215 0x0afc  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

14:47:34.0225 0x0afc  DfsC - ok

14:47:34.0251 0x0afc  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll

14:47:34.0259 0x0afc  Dhcp - ok

14:47:34.0276 0x0afc  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys

14:47:34.0278 0x0afc  discache - ok

14:47:34.0304 0x0afc  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\DRIVERS\disk.sys

14:47:34.0307 0x0afc  Disk - ok

14:47:34.0351 0x0afc  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll

14:47:34.0367 0x0afc  Dnscache - ok

14:47:34.0424 0x0afc  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll

14:47:34.0431 0x0afc  dot3svc - ok

14:47:34.0488 0x0afc  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll

14:47:34.0493 0x0afc  DPS - ok

14:47:34.0531 0x0afc  [ 26FE888505E5A945B0536AF9A2A27A6F, A6B16ED498BAFE300E1F0E0A241E3D62F7A1C5973EE775904ED14F33A2BC08A6 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

14:47:34.0533 0x0afc  drmkaud - ok

14:47:34.0595 0x0afc  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

14:47:34.0619 0x0afc  DXGKrnl - ok

14:47:34.0646 0x0afc  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll

14:47:34.0650 0x0afc  EapHost - ok

14:47:34.0759 0x0afc  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys

14:47:34.0860 0x0afc  ebdrv - ok

14:47:34.0907 0x0afc  [ CB0E57424A776C51EF42469064ADBF08, 2E4EFE070560F4CCE6AF6D142C559EEF3672631C846E612968D57BE7F71C1C4F ] EFS             C:\Windows\System32\lsass.exe

14:47:34.0908 0x0afc  EFS - ok

14:47:34.0975 0x0afc  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

14:47:34.0992 0x0afc  ehRecvr - ok

14:47:35.0015 0x0afc  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe

14:47:35.0019 0x0afc  ehSched - ok

14:47:35.0057 0x0afc  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys

14:47:35.0070 0x0afc  elxstor - ok

14:47:35.0162 0x0afc  [ AD2D0DD976F59A93B95B2268CC956E7C, B613254237B68A55BBDA38FA79923E39F4D687A2299E99F1990A8322A1F014D6 ] epp             C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\epp.sys

14:47:35.0165 0x0afc  epp - ok

14:47:35.0201 0x0afc  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys

14:47:35.0203 0x0afc  ErrDev - ok

14:47:35.0255 0x0afc  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll

14:47:35.0279 0x0afc  EventSystem - ok

14:47:35.0294 0x0afc  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys

14:47:35.0299 0x0afc  exfat - ok

14:47:35.0311 0x0afc  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

14:47:35.0316 0x0afc  fastfat - ok

14:47:35.0329 0x0afc  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

14:47:35.0332 0x0afc  fdc - ok

14:47:35.0351 0x0afc  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll

14:47:35.0352 0x0afc  fdPHost - ok

14:47:35.0363 0x0afc  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll

14:47:35.0364 0x0afc  FDResPub - ok

14:47:35.0377 0x0afc  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

14:47:35.0404 0x0afc  FileInfo - ok

14:47:35.0419 0x0afc  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

14:47:35.0420 0x0afc  Filetrace - ok

14:47:35.0428 0x0afc  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

14:47:35.0430 0x0afc  flpydisk - ok

14:47:35.0476 0x0afc  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

14:47:35.0484 0x0afc  FltMgr - ok

14:47:35.0552 0x0afc  [ BCB16AE33AA58E0042F3EF34CFB6396A, E8ADA10DE60A94E4BABE9FCA6D0AA83B11520C092D49057E17F6C6059D35A323 ] FontCache       C:\Windows\system32\FntCache.dll

14:47:35.0595 0x0afc  FontCache - ok

14:47:35.0662 0x0afc  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

14:47:35.0665 0x0afc  FontCache3.0.0.0 - ok

14:47:35.0680 0x0afc  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

14:47:35.0682 0x0afc  FsDepends - ok

14:47:35.0713 0x0afc  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

14:47:35.0715 0x0afc  Fs_Rec - ok

14:47:35.0754 0x0afc  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

14:47:35.0760 0x0afc  fvevol - ok

14:47:35.0778 0x0afc  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys

14:47:35.0781 0x0afc  gagp30kx - ok

14:47:35.0946 0x0afc  [ 5E42BDFF22707E577AD82BE4C43C3BCE, 4C0BBF6AAA7EB30A789D91A4F29726C2A6D941D457B59CF376EF96571F3E1BB4 ] GfExperienceService C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

14:47:36.0000 0x0afc  GfExperienceService - ok

14:47:36.0058 0x0afc  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll

14:47:36.0077 0x0afc  gpsvc - ok

14:47:36.0102 0x0afc  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

14:47:36.0105 0x0afc  hcw85cir - ok

14:47:36.0153 0x0afc  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

14:47:36.0163 0x0afc  HdAudAddService - ok

14:47:36.0180 0x0afc  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

14:47:36.0184 0x0afc  HDAudBus - ok

14:47:36.0198 0x0afc  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys

14:47:36.0200 0x0afc  HidBatt - ok

14:47:36.0213 0x0afc  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys

14:47:36.0216 0x0afc  HidBth - ok

14:47:36.0231 0x0afc  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys

14:47:36.0233 0x0afc  HidIr - ok

14:47:36.0257 0x0afc  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\System32\hidserv.dll

14:47:36.0260 0x0afc  hidserv - ok

14:47:36.0307 0x0afc  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\drivers\hidusb.sys

14:47:36.0309 0x0afc  HidUsb - ok

14:47:36.0344 0x0afc  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll

14:47:36.0347 0x0afc  hkmsvc - ok

14:47:36.0387 0x0afc  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll

14:47:36.0394 0x0afc  HomeGroupListener - ok

14:47:36.0427 0x0afc  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

14:47:36.0433 0x0afc  HomeGroupProvider - ok

14:47:36.0470 0x0afc  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

14:47:36.0473 0x0afc  HpSAMD - ok

14:47:36.0536 0x0afc  [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

14:47:36.0553 0x0afc  HTTP - ok

14:47:36.0584 0x0afc  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

14:47:36.0585 0x0afc  hwpolicy - ok

14:47:36.0635 0x0afc  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys

14:47:36.0638 0x0afc  i8042prt - ok

14:47:36.0679 0x0afc  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

14:47:36.0690 0x0afc  iaStorV - ok

14:47:36.0849 0x0afc  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

14:47:36.0891 0x0afc  idsvc - ok

14:47:36.0924 0x0afc  IEEtwCollectorService - ok

14:47:36.0941 0x0afc  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys

14:47:36.0943 0x0afc  iirsp - ok

14:47:37.0081 0x0afc  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll

14:47:37.0108 0x0afc  IKEEXT - ok

14:47:37.0245 0x0afc  [ FA2B7507CD49908B2260949E52F8B9FE, 0EA0B3B25A3B668CA18313E34138DADA5C9835E476A1BFC56588B946DF0A92E0 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys

14:47:37.0355 0x0afc  IntcAzAudAddService - ok

14:47:37.0388 0x0afc  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys

14:47:37.0390 0x0afc  intelide - ok

14:47:37.0412 0x0afc  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

14:47:37.0444 0x0afc  intelppm - ok

14:47:37.0467 0x0afc  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

14:47:37.0471 0x0afc  IPBusEnum - ok

14:47:37.0503 0x0afc  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

14:47:37.0506 0x0afc  IpFilterDriver - ok

14:47:37.0550 0x0afc  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

14:47:37.0569 0x0afc  iphlpsvc - ok

14:47:37.0602 0x0afc  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys

14:47:37.0605 0x0afc  IPMIDRV - ok

14:47:37.0625 0x0afc  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

14:47:37.0628 0x0afc  IPNAT - ok

14:47:37.0647 0x0afc  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys

14:47:37.0648 0x0afc  IRENUM - ok

14:47:37.0656 0x0afc  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

14:47:37.0658 0x0afc  isapnp - ok

14:47:37.0685 0x0afc  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys

14:47:37.0692 0x0afc  iScsiPrt - ok

14:47:37.0715 0x0afc  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

14:47:37.0718 0x0afc  kbdclass - ok

14:47:37.0733 0x0afc  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

14:47:37.0735 0x0afc  kbdhid - ok

14:47:37.0746 0x0afc  [ CB0E57424A776C51EF42469064ADBF08, 2E4EFE070560F4CCE6AF6D142C559EEF3672631C846E612968D57BE7F71C1C4F ] KeyIso          C:\Windows\system32\lsass.exe

14:47:37.0747 0x0afc  KeyIso - ok

14:47:37.0781 0x0afc  [ 0F776895884B8DC430A307D57FD867BB, F9E8C8A04D757CEAD86938BEEFFAD9750589037E16FB1A2B0A90E4484E1A6B65 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

14:47:37.0785 0x0afc  KSecDD - ok

14:47:37.0802 0x0afc  [ 28E75F316CCCD79337E4957C53017D4B, 3BABDA50B4CE72F7F9A0FD7A33DDB19463A01F188D46354E0B411FC0389C01BE ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

14:47:37.0807 0x0afc  KSecPkg - ok

14:47:37.0824 0x0afc  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

14:47:37.0826 0x0afc  ksthunk - ok

14:47:37.0856 0x0afc  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll

14:47:37.0867 0x0afc  KtmRm - ok

14:47:37.0917 0x0afc  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\System32\srvsvc.dll

14:47:37.0931 0x0afc  LanmanServer - ok

14:47:37.0965 0x0afc  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

14:47:37.0969 0x0afc  LanmanWorkstation - ok

14:47:37.0995 0x0afc  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

14:47:37.0997 0x0afc  lltdio - ok

14:47:38.0025 0x0afc  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll

14:47:38.0033 0x0afc  lltdsvc - ok

14:47:38.0043 0x0afc  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll

14:47:38.0044 0x0afc  lmhosts - ok

14:47:38.0074 0x0afc  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys

14:47:38.0078 0x0afc  LSI_FC - ok

14:47:38.0087 0x0afc  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys

14:47:38.0091 0x0afc  LSI_SAS - ok

14:47:38.0106 0x0afc  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys

14:47:38.0109 0x0afc  LSI_SAS2 - ok

14:47:38.0120 0x0afc  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys

14:47:38.0124 0x0afc  LSI_SCSI - ok

14:47:38.0146 0x0afc  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys

14:47:38.0149 0x0afc  luafv - ok

14:47:38.0190 0x0afc  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

14:47:38.0204 0x0afc  Mcx2Svc - ok

14:47:38.0220 0x0afc  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys

14:47:38.0222 0x0afc  megasas - ok

14:47:38.0244 0x0afc  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys

14:47:38.0252 0x0afc  MegaSR - ok

14:47:38.0296 0x0afc  [ 1595FECFFBE9EA2417E06D5FD0BFA4C4, 96006C7F19FDC1700EEBA870F96433D3260DEA06AD7215EAD8F1D74C953E1B50 ] MEMSWEEP2       C:\Windows\system32\61DF.tmp

14:47:38.0297 0x0afc  MEMSWEEP2 - ok

14:47:38.0333 0x0afc  [ 8EA880DC2E0F8D93A943C25EF17E18FC, 9110CF46DE29C4F02A78FE9D4EEF0DE59BD392C6EC87B427833FF78AF15C2200 ] mi2c            C:\Windows\system32\drivers\mi2c.sys

14:47:38.0334 0x0afc  mi2c - ok

14:47:38.0357 0x0afc  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll

14:47:38.0359 0x0afc  MMCSS - ok

14:47:38.0370 0x0afc  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys

14:47:38.0372 0x0afc  Modem - ok

14:47:38.0388 0x0afc  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

14:47:38.0390 0x0afc  monitor - ok

14:47:38.0426 0x0afc  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

14:47:38.0428 0x0afc  mouclass - ok

14:47:38.0451 0x0afc  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

14:47:38.0452 0x0afc  mouhid - ok

14:47:38.0491 0x0afc  [ 67050452C0118BAF2883928E6FCCFE47, 335FC0AEB7B47DCC7CE0CF3F424EB60ACB1327D2FF6515F04D9AC03A10FF1E31 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

14:47:38.0495 0x0afc  mountmgr - ok

14:47:38.0537 0x0afc  [ 98DA127D0AB8B6CB5773546AF60D9217, BB07F34552342CA40E843F80AA32C928C29EF81789605E53C795EFD564F2DA7F ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

14:47:38.0542 0x0afc  MozillaMaintenance - ok

14:47:38.0584 0x0afc  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys

14:47:38.0589 0x0afc  mpio - ok

14:47:38.0605 0x0afc  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

14:47:38.0608 0x0afc  mpsdrv - ok

14:47:38.0667 0x0afc  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll

14:47:38.0690 0x0afc  MpsSvc - ok

14:47:38.0744 0x0afc  [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

14:47:38.0750 0x0afc  MRxDAV - ok

14:47:38.0785 0x0afc  [ 32B85C4923D895B2FB35821A799BA38D, 7A7E5D08F745DB9B498B4BE946325FF7DAA7FA27589D9423FCA4558D20780026 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

14:47:38.0789 0x0afc  mrxsmb - ok

14:47:38.0804 0x0afc  [ A572BEF41F3C55D7DAF24D2340C91FEC, 1E51EEFEABCDCB664CD39437C2275B160860FB433EAA8DC905D5BC742FD03529 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

14:47:38.0811 0x0afc  mrxsmb10 - ok

14:47:38.0827 0x0afc  [ C49F1C4CA74FC52AFB2E892D8E50EA39, 9E7A2453627A82AFF4CE3F285AFF105C3F92F423C07E5C43E76BEC523841B8F7 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

14:47:38.0831 0x0afc  mrxsmb20 - ok

14:47:38.0851 0x0afc  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys

14:47:38.0854 0x0afc  msahci - ok

14:47:38.0868 0x0afc  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

14:47:38.0872 0x0afc  msdsm - ok

14:47:38.0893 0x0afc  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe

14:47:38.0897 0x0afc  MSDTC - ok

14:47:38.0956 0x0afc  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

14:47:38.0958 0x0afc  Msfs - ok

14:47:39.0017 0x0afc  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

14:47:39.0022 0x0afc  mshidkmdf - ok

14:47:39.0073 0x0afc  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

14:47:39.0109 0x0afc  msisadrv - ok

14:47:39.0159 0x0afc  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

14:47:39.0164 0x0afc  MSiSCSI - ok

14:47:39.0168 0x0afc  msiserver - ok

14:47:39.0195 0x0afc  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

14:47:39.0197 0x0afc  MSKSSRV - ok

14:47:39.0207 0x0afc  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

14:47:39.0208 0x0afc  MSPCLOCK - ok

14:47:39.0226 0x0afc  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

14:47:39.0228 0x0afc  MSPQM - ok

14:47:39.0271 0x0afc  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

14:47:39.0295 0x0afc  MsRPC - ok

14:47:39.0334 0x0afc  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys

14:47:39.0335 0x0afc  mssmbios - ok

14:47:39.0339 0x0afc  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

14:47:39.0340 0x0afc  MSTEE - ok

14:47:39.0350 0x0afc  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys

14:47:39.0352 0x0afc  MTConfig - ok

14:47:39.0371 0x0afc  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys

14:47:39.0374 0x0afc  Mup - ok

14:47:39.0400 0x0afc  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll

14:47:39.0413 0x0afc  napagent - ok

14:47:39.0448 0x0afc  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

14:47:39.0456 0x0afc  NativeWifiP - ok

14:47:39.0546 0x0afc  [ F7309F42555F8AAB7144A51A1F2585B0, 065277A8AFAEE3888C997A76D2F751070F92DF4C3354D16B194860B4BDAFF937 ] NDIS            C:\Windows\system32\drivers\ndis.sys

14:47:39.0580 0x0afc  NDIS - ok

14:47:39.0592 0x0afc  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

14:47:39.0594 0x0afc  NdisCap - ok

14:47:39.0607 0x0afc  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

14:47:39.0609 0x0afc  NdisTapi - ok

14:47:39.0644 0x0afc  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

14:47:39.0647 0x0afc  Ndisuio - ok

14:47:39.0693 0x0afc  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

14:47:39.0762 0x0afc  NdisWan - ok

14:47:39.0788 0x0afc  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

14:47:39.0791 0x0afc  NDProxy - ok

14:47:39.0804 0x0afc  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

14:47:39.0806 0x0afc  NetBIOS - ok

14:47:39.0846 0x0afc  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

14:47:39.0852 0x0afc  NetBT - ok

14:47:39.0860 0x0afc  [ CB0E57424A776C51EF42469064ADBF08, 2E4EFE070560F4CCE6AF6D142C559EEF3672631C846E612968D57BE7F71C1C4F ] Netlogon        C:\Windows\system32\lsass.exe

14:47:39.0861 0x0afc  Netlogon - ok

14:47:39.0898 0x0afc  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll

14:47:39.0908 0x0afc  Netman - ok

14:47:39.0953 0x0afc  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

14:47:39.0991 0x0afc  NetMsmqActivator - ok

14:47:39.0998 0x0afc  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

14:47:40.0001 0x0afc  NetPipeActivator - ok

14:47:40.0042 0x0afc  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll

14:47:40.0060 0x0afc  netprofm - ok

14:47:40.0078 0x0afc  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

14:47:40.0081 0x0afc  NetTcpActivator - ok

14:47:40.0087 0x0afc  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

14:47:40.0091 0x0afc  NetTcpPortSharing - ok

14:47:40.0124 0x0afc  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys

14:47:40.0126 0x0afc  nfrd960 - ok

14:47:40.0165 0x0afc  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll

14:47:40.0177 0x0afc  NlaSvc - ok

14:47:40.0193 0x0afc  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys

14:47:40.0195 0x0afc  Npfs - ok

14:47:40.0222 0x0afc  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll

14:47:40.0240 0x0afc  nsi - ok

14:47:40.0260 0x0afc  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

14:47:40.0261 0x0afc  nsiproxy - ok

14:47:40.0508 0x0afc  [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

14:47:40.0577 0x0afc  Ntfs - ok

14:47:40.0605 0x0afc  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys

14:47:40.0607 0x0afc  Null - ok

14:47:40.0646 0x0afc  [ D812362E8AF615B521AD4DF19A93BD5A, B1F04122DFE9FCC3FC56BE327D86912D624C89F2EFB9684BE66FC22115D0E19F ] NVHDA           C:\Windows\system32\drivers\nvhda64v.sys

14:47:40.0652 0x0afc  NVHDA - ok

14:47:41.0060 0x0afc  [ 45F83C99EDF3253D047F692A42C1A51A, 08EC3CE5F00C9B70F52577FAD0561A8ECCD6C04F96468DBA67B4D4C82C77FA6D ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys

14:47:41.0375 0x0afc  nvlddmkm - ok

14:47:41.0502 0x0afc  [ 2CCD9A74A0F9C7605EAFA3F3AC8DC476, DEE95B0C0CA4525850E06AD3C1233A6C6E88D97EE874F83801686B87FD23F0BC ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

14:47:41.0561 0x0afc  NvNetworkService - ok

14:47:41.0604 0x0afc  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys

14:47:41.0609 0x0afc  nvraid - ok

14:47:41.0637 0x0afc  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys

14:47:41.0643 0x0afc  nvstor - ok

14:47:41.0677 0x0afc  [ 71B6ECD3C56FBF12FB1968DA3953B703, 47E39FBC336C9BFC159AA0FF9D8DEE950724ABB782102858E397A7EF87112584 ] nvstor64        C:\Windows\system32\DRIVERS\nvstor64.sys

14:47:41.0682 0x0afc  nvstor64 - ok

14:47:41.0773 0x0afc  [ 2F61DB46C84CCBB5D9F75065A85D2173, 79049D42F0D82BD3C5A9C8231CF2F412B50C9E6483DB14F41CD48301D85C166C ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys

14:47:41.0856 0x0afc  NvStreamKms - ok

14:47:42.0181 0x0afc  [ 6F5AC1C495DA6D19AF99A59DC44BC13F, 61E8C0C0B9EEEF6ADE86AD4BC8D43256A6B20AEEB43BBC3C44B3B6140544259F ] NvStreamNetworkSvc C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

14:47:42.0429 0x0afc  NvStreamNetworkSvc - ok

14:47:42.0625 0x0afc  [ 73FA6B2DF3348AF05E1F98310854BD4F, F0B7CF54495C81EE4C8B44580E399F3B22E190CB553AC7BA8E2DC13A28477566 ] NvStreamSvc     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe

14:47:42.0797 0x0afc  NvStreamSvc - ok

14:47:42.0864 0x0afc  [ 92C7B8287C185022F12253026FA33401, 96E466D17347DB3E789DD6DBF3604E51D4B86D3E49592B0EF6622BD278369F6C ] nvsvc           C:\Windows\system32\nvvsvc.exe

14:47:42.0887 0x0afc  nvsvc - ok

14:47:42.0934 0x0afc  [ 35DFC12FD7E44B7CB8CCD7E5A2B3975A, 36E0E39646636F6E027691E5C3903C51479B3F707BDEA40F460FD27E357DA14E ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys

14:47:42.0936 0x0afc  nvvad_WaveExtensible - ok

14:47:42.0967 0x0afc  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

14:47:42.0971 0x0afc  nv_agp - ok

14:47:43.0004 0x0afc  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

14:47:43.0016 0x0afc  ohci1394 - ok

14:47:43.0048 0x0afc  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

14:47:43.0058 0x0afc  p2pimsvc - ok

14:47:43.0097 0x0afc  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll

14:47:43.0112 0x0afc  p2psvc - ok

14:47:43.0150 0x0afc  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\DRIVERS\parport.sys

14:47:43.0153 0x0afc  Parport - ok

14:47:43.0187 0x0afc  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys

14:47:43.0197 0x0afc  partmgr - ok

14:47:43.0242 0x0afc  [ DB2D62AA2DF6B1F3D690A9EC9701AA2C, BEAC55E1AA0494565F1547DF5E6FE20FCEA66461764C016FCB68D8BFF0F0C375 ] PcaSvc          C:\Windows\System32\pcasvc.dll

14:47:43.0248 0x0afc  PcaSvc - ok

14:47:43.0288 0x0afc  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys

14:47:43.0293 0x0afc  pci - ok

14:47:43.0318 0x0afc  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys

14:47:43.0319 0x0afc  pciide - ok

14:47:43.0343 0x0afc  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys

14:47:43.0349 0x0afc  pcmcia - ok

14:47:43.0368 0x0afc  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys

14:47:43.0371 0x0afc  pcw - ok

14:47:43.0397 0x0afc  [ ED6E75158D28D33A2E2A020AC5B2B59D, 0F364D9A88304C45F31318605C417A70A9D0E4CF087D73E949B42C12CC76CD6C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

14:47:43.0412 0x0afc  PEAUTH - ok

14:47:43.0458 0x0afc  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe

14:47:43.0460 0x0afc  PerfHost - ok

14:47:43.0538 0x0afc  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll

14:47:43.0579 0x0afc  pla - ok

14:47:43.0627 0x0afc  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

14:47:43.0638 0x0afc  PlugPlay - ok

14:47:43.0651 0x0afc  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

14:47:43.0653 0x0afc  PNRPAutoReg - ok

14:47:43.0672 0x0afc  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

14:47:43.0680 0x0afc  PNRPsvc - ok

14:47:43.0706 0x0afc  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

14:47:43.0718 0x0afc  PolicyAgent - ok

14:47:43.0746 0x0afc  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll

14:47:43.0752 0x0afc  Power - ok

14:47:43.0794 0x0afc  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

14:47:43.0798 0x0afc  PptpMiniport - ok

14:47:43.0819 0x0afc  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\DRIVERS\processr.sys

14:47:43.0822 0x0afc  Processor - ok

14:47:43.0862 0x0afc  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc         C:\Windows\system32\profsvc.dll

14:47:43.0869 0x0afc  ProfSvc - ok

14:47:43.0881 0x0afc  [ CB0E57424A776C51EF42469064ADBF08, 2E4EFE070560F4CCE6AF6D142C559EEF3672631C846E612968D57BE7F71C1C4F ] ProtectedStorage C:\Windows\system32\lsass.exe

14:47:43.0882 0x0afc  ProtectedStorage - ok

14:47:43.0931 0x0afc  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

14:47:43.0935 0x0afc  Psched - ok

14:47:43.0991 0x0afc  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys

14:47:44.0075 0x0afc  ql2300 - ok

14:47:44.0110 0x0afc  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys

14:47:44.0122 0x0afc  ql40xx - ok

14:47:44.0180 0x0afc  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll

14:47:44.0187 0x0afc  QWAVE - ok

14:47:44.0197 0x0afc  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

14:47:44.0199 0x0afc  QWAVEdrv - ok

14:47:44.0211 0x0afc  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

14:47:44.0212 0x0afc  RasAcd - ok

14:47:44.0232 0x0afc  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

14:47:44.0234 0x0afc  RasAgileVpn - ok

14:47:44.0253 0x0afc  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll

14:47:44.0258 0x0afc  RasAuto - ok

14:47:44.0307 0x0afc  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

14:47:44.0311 0x0afc  Rasl2tp - ok

14:47:44.0353 0x0afc  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll

14:47:44.0363 0x0afc  RasMan - ok

14:47:44.0379 0x0afc  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

14:47:44.0382 0x0afc  RasPppoe - ok

14:47:44.0397 0x0afc  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

14:47:44.0400 0x0afc  RasSstp - ok

14:47:44.0421 0x0afc  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

14:47:44.0429 0x0afc  rdbss - ok

14:47:44.0441 0x0afc  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys

14:47:44.0443 0x0afc  rdpbus - ok

14:47:44.0454 0x0afc  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

14:47:44.0455 0x0afc  RDPCDD - ok

14:47:44.0474 0x0afc  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

14:47:44.0476 0x0afc  RDPENCDD - ok

14:47:44.0486 0x0afc  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

14:47:44.0488 0x0afc  RDPREFMP - ok

14:47:44.0563 0x0afc  [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys

14:47:44.0565 0x0afc  RdpVideoMiniport - ok

14:47:44.0600 0x0afc  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

14:47:44.0605 0x0afc  RDPWD - ok

14:47:44.0626 0x0afc  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

14:47:44.0632 0x0afc  rdyboost - ok

14:47:44.0652 0x0afc  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll

14:47:44.0656 0x0afc  RemoteAccess - ok

14:47:44.0675 0x0afc  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

14:47:44.0680 0x0afc  RemoteRegistry - ok

14:47:44.0700 0x0afc  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

14:47:44.0704 0x0afc  RpcEptMapper - ok

14:47:44.0715 0x0afc  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe

14:47:44.0717 0x0afc  RpcLocator - ok

14:47:44.0763 0x0afc  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\system32\rpcss.dll

14:47:44.0775 0x0afc  RpcSs - ok

14:47:44.0806 0x0afc  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

14:47:44.0808 0x0afc  rspndr - ok

14:47:44.0877 0x0afc  [ EF91E0806C01806C3CF62AF006901127, 1F49D57B6598EF0923DF70FD31B755B29D5ED4D38840D7619D3399B759FD579F ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys

14:47:44.0894 0x0afc  RTL8167 - ok

14:47:44.0932 0x0afc  [ 55D5947298501C38095733F16EEB36C5, BF78998666C890B9D218D94F23D67EABAFBA560FF4DA5F5D68A4CDE7917DBCD1 ] RTLE8023x64     C:\Windows\system32\DRIVERS\Rtenic64.sys

14:47:44.0939 0x0afc  RTLE8023x64 - ok

14:47:44.0955 0x0afc  [ CB0E57424A776C51EF42469064ADBF08, 2E4EFE070560F4CCE6AF6D142C559EEF3672631C846E612968D57BE7F71C1C4F ] SamSs           C:\Windows\system32\lsass.exe

14:47:44.0956 0x0afc  SamSs - ok

14:47:44.0991 0x0afc  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

14:47:44.0995 0x0afc  sbp2port - ok

14:47:45.0022 0x0afc  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll

14:47:45.0028 0x0afc  SCardSvr - ok

14:47:45.0076 0x0afc  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

14:47:45.0078 0x0afc  scfilter - ok

14:47:45.0127 0x0afc  [ 40686B59C127F0C93B4234E4A1E3472A, B2DD61CB796C6AA8AFD285D43472B94646CA6D331D282818E0FDC9DE28DDE9CF ] Schedule        C:\Windows\system32\schedsvc.dll

14:47:45.0162 0x0afc  Schedule - ok

14:47:45.0210 0x0afc  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll

14:47:45.0212 0x0afc  SCPolicySvc - ok

14:47:45.0258 0x0afc  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

14:47:45.0263 0x0afc  SDRSVC - ok

14:47:45.0303 0x0afc  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys

14:47:45.0305 0x0afc  secdrv - ok

14:47:45.0320 0x0afc  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll

14:47:45.0324 0x0afc  seclogon - ok

14:47:45.0346 0x0afc  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\system32\sens.dll

14:47:45.0349 0x0afc  SENS - ok

14:47:45.0360 0x0afc  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll

14:47:45.0362 0x0afc  SensrSvc - ok

14:47:45.0386 0x0afc  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys

14:47:45.0387 0x0afc  Serenum - ok

14:47:45.0402 0x0afc  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\DRIVERS\serial.sys

14:47:45.0405 0x0afc  Serial - ok

14:47:45.0452 0x0afc  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys

14:47:45.0454 0x0afc  sermouse - ok

14:47:45.0489 0x0afc  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll

14:47:45.0494 0x0afc  SessionEnv - ok

14:47:45.0505 0x0afc  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

14:47:45.0507 0x0afc  sffdisk - ok

14:47:45.0516 0x0afc  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

14:47:45.0518 0x0afc  sffp_mmc - ok

14:47:45.0529 0x0afc  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

14:47:45.0531 0x0afc  sffp_sd - ok

14:47:45.0540 0x0afc  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys

14:47:45.0542 0x0afc  sfloppy - ok

14:47:45.0576 0x0afc  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll

14:47:45.0585 0x0afc  SharedAccess - ok

14:47:45.0659 0x0afc  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

14:47:45.0669 0x0afc  ShellHWDetection - ok

14:47:45.0679 0x0afc  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys

14:47:45.0681 0x0afc  SiSRaid2 - ok

14:47:45.0698 0x0afc  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys

14:47:45.0702 0x0afc  SiSRaid4 - ok

14:47:45.0726 0x0afc  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

14:47:45.0730 0x0afc  Smb - ok

14:47:45.0771 0x0afc  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

14:47:45.0773 0x0afc  SNMPTRAP - ok

14:47:45.0782 0x0afc  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys

14:47:45.0783 0x0afc  spldr - ok

14:47:45.0812 0x0afc  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler         C:\Windows\System32\spoolsv.exe

14:47:45.0827 0x0afc  Spooler - ok

14:47:45.0957 0x0afc  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe

14:47:46.0059 0x0afc  sppsvc - ok

14:47:46.0099 0x0afc  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll

14:47:46.0102 0x0afc  sppuinotify - ok

14:47:46.0134 0x0afc  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys

14:47:46.0146 0x0afc  srv - ok

14:47:46.0213 0x0afc  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

14:47:46.0223 0x0afc  srv2 - ok

14:47:46.0250 0x0afc  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

14:47:46.0255 0x0afc  srvnet - ok

14:47:46.0277 0x0afc  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

14:47:46.0282 0x0afc  SSDPSRV - ok

14:47:46.0292 0x0afc  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll

14:47:46.0296 0x0afc  SstpSvc - ok

14:47:46.0393 0x0afc  [ 601F0449030798FDFB2932F902C24C98, 95D5BEFF5E909513C6823FC115259FF7C5AD695C5992874B612248D9616F5DA5 ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

14:47:46.0401 0x0afc  Stereo Service - ok

14:47:46.0426 0x0afc  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys

14:47:46.0430 0x0afc  stexstor - ok

14:47:46.0577 0x0afc  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll

14:47:46.0594 0x0afc  stisvc - ok

14:47:46.0628 0x0afc  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\drivers\swenum.sys

14:47:46.0642 0x0afc  swenum - ok

14:47:46.0692 0x0afc  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll

14:47:46.0715 0x0afc  swprv - ok

14:47:46.0810 0x0afc  [ 2E730941CC5BF6200A4F56D1E9C24AAD, 758836D55DC84F3EBE9917DC6FAB8E6170A5B238FEDBCFDB6D7C5C6EA98E08B2 ] SysMain         C:\Windows\system32\sysmain.dll

14:47:46.0861 0x0afc  SysMain - ok

14:47:46.0905 0x0afc  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll

14:47:46.0910 0x0afc  TabletInputService - ok

14:47:46.0932 0x0afc  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll

14:47:46.0942 0x0afc  TapiSrv - ok

14:47:46.0957 0x0afc  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll

14:47:46.0961 0x0afc  TBS - ok

14:47:47.0056 0x0afc  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

14:47:47.0125 0x0afc  Tcpip - ok

14:47:47.0198 0x0afc  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

14:47:47.0234 0x0afc  TCPIP6 - ok

14:47:47.0273 0x0afc  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

14:47:47.0275 0x0afc  tcpipreg - ok

14:47:47.0296 0x0afc  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

14:47:47.0298 0x0afc  TDPIPE - ok

14:47:47.0332 0x0afc  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

14:47:47.0335 0x0afc  TDTCP - ok

14:47:47.0363 0x0afc  [ AA77EB517D2F07A947294F260E3ACA83, B7A5DF3066830C0C2302B059778A67419792058A0D300C471DE40AB245EA7E58 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

14:47:47.0367 0x0afc  tdx - ok

14:47:47.0403 0x0afc  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\drivers\termdd.sys

14:47:47.0406 0x0afc  TermDD - ok

14:47:47.0455 0x0afc  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService     C:\Windows\System32\termsrv.dll

14:47:47.0472 0x0afc  TermService - ok

14:47:47.0491 0x0afc  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll

14:47:47.0496 0x0afc  Themes - ok

14:47:47.0514 0x0afc  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll

14:47:47.0517 0x0afc  THREADORDER - ok

14:47:47.0532 0x0afc  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll

14:47:47.0537 0x0afc  TrkWks - ok

14:47:47.0591 0x0afc  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

14:47:47.0597 0x0afc  TrustedInstaller - ok

14:47:47.0635 0x0afc  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

14:47:47.0647 0x0afc  tssecsrv - ok

14:47:47.0680 0x0afc  [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys

14:47:47.0683 0x0afc  TsUsbFlt - ok

14:47:47.0732 0x0afc  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

14:47:47.0741 0x0afc  tunnel - ok

14:47:47.0765 0x0afc  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys

14:47:47.0767 0x0afc  uagp35 - ok

14:47:47.0813 0x0afc  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

14:47:47.0823 0x0afc  udfs - ok

14:47:47.0848 0x0afc  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe

14:47:47.0851 0x0afc  UI0Detect - ok

14:47:47.0862 0x0afc  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

14:47:47.0865 0x0afc  uliagpkx - ok

14:47:47.0902 0x0afc  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\drivers\umbus.sys

14:47:47.0904 0x0afc  umbus - ok

14:47:47.0917 0x0afc  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys

14:47:47.0919 0x0afc  UmPass - ok

14:47:47.0984 0x0afc  [ 9DC07E73A4ABB9ACF692113B36A5009F, CA7176FC219515D58DCFA66EC61880ECE5617275C9B83701BB74D8B60E733D34 ] UnlockerDriver5 C:\Program Files (x86)\Unlocker\UnlockerDriver5.sys

14:47:47.0985 0x0afc  UnlockerDriver5 - ok

14:47:48.0011 0x0afc  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll

14:47:48.0021 0x0afc  upnphost - ok

14:47:48.0042 0x0afc  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

14:47:48.0045 0x0afc  usbccgp - ok

14:47:48.0093 0x0afc  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys

14:47:48.0104 0x0afc  usbcir - ok

14:47:48.0128 0x0afc  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

14:47:48.0130 0x0afc  usbehci - ok

14:47:48.0163 0x0afc  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

14:47:48.0172 0x0afc  usbhub - ok

14:47:48.0201 0x0afc  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys

14:47:48.0219 0x0afc  usbohci - ok

14:47:48.0246 0x0afc  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

14:47:48.0248 0x0afc  usbprint - ok

14:47:48.0274 0x0afc  [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys

14:47:48.0277 0x0afc  usbscan - ok

14:47:48.0302 0x0afc  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

14:47:48.0305 0x0afc  USBSTOR - ok

14:47:48.0324 0x0afc  [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys

14:47:48.0326 0x0afc  usbuhci - ok

14:47:48.0405 0x0afc  [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys

14:47:48.0411 0x0afc  usbvideo - ok

14:47:48.0436 0x0afc  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll

14:47:48.0439 0x0afc  UxSms - ok

14:47:48.0451 0x0afc  [ CB0E57424A776C51EF42469064ADBF08, 2E4EFE070560F4CCE6AF6D142C559EEF3672631C846E612968D57BE7F71C1C4F ] VaultSvc        C:\Windows\system32\lsass.exe

14:47:48.0453 0x0afc  VaultSvc - ok

14:47:48.0537 0x0afc  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

14:47:48.0539 0x0afc  vdrvroot - ok

14:47:48.0587 0x0afc  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe

14:47:48.0601 0x0afc  vds - ok

14:47:48.0627 0x0afc  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

14:47:48.0629 0x0afc  vga - ok

14:47:48.0638 0x0afc  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys

14:47:48.0641 0x0afc  VgaSave - ok

14:47:48.0656 0x0afc  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys

14:47:48.0662 0x0afc  vhdmp - ok

14:47:48.0681 0x0afc  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys

14:47:48.0683 0x0afc  viaide - ok

14:47:48.0699 0x0afc  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

14:47:48.0702 0x0afc  volmgr - ok

14:47:48.0747 0x0afc  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

14:47:48.0757 0x0afc  volmgrx - ok

14:47:48.0775 0x0afc  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys

14:47:48.0783 0x0afc  volsnap - ok

14:47:48.0801 0x0afc  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys

14:47:48.0805 0x0afc  vsmraid - ok

14:47:48.0884 0x0afc  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe

14:47:48.0935 0x0afc  VSS - ok

14:47:48.0952 0x0afc  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys

14:47:48.0954 0x0afc  vwifibus - ok

14:47:48.0978 0x0afc  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys

14:47:48.0980 0x0afc  vwififlt - ok

14:47:49.0000 0x0afc  [ 6A638FC4BFDDC4D9B186C28C91BD1A01, 5521F1DC515586777EC4837E0AEAA3E613CC178AF1074031C4D0D0C695A93168 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys

14:47:49.0002 0x0afc  vwifimp - ok

14:47:49.0036 0x0afc  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll

14:47:49.0045 0x0afc  W32Time - ok

14:47:49.0067 0x0afc  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys

14:47:49.0069 0x0afc  WacomPen - ok

14:47:49.0111 0x0afc  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

14:47:49.0114 0x0afc  WANARP - ok

14:47:49.0120 0x0afc  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

14:47:49.0122 0x0afc  Wanarpv6 - ok

14:47:49.0263 0x0afc  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe

14:47:49.0646 0x0afc  wbengine - ok

14:47:49.0683 0x0afc  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

14:47:49.0689 0x0afc  WbioSrvc - ok

14:47:49.0733 0x0afc  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll

14:47:49.0743 0x0afc  wcncsvc - ok

14:47:49.0760 0x0afc  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

14:47:49.0763 0x0afc  WcsPlugInService - ok

14:47:49.0783 0x0afc  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\DRIVERS\wd.sys

14:47:49.0785 0x0afc  Wd - ok

14:47:49.0840 0x0afc  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

14:47:49.0859 0x0afc  Wdf01000 - ok

14:47:49.0876 0x0afc  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost  C:\Windows\system32\wdi.dll

14:47:49.0880 0x0afc  WdiServiceHost - ok

14:47:49.0885 0x0afc  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost   C:\Windows\system32\wdi.dll

14:47:49.0889 0x0afc  WdiSystemHost - ok

14:47:49.0911 0x0afc  [ 4E89FC53493704BF835F0300DC201C34, FB3080725E144D93512DED81047D21C0582BC3412250EFF37E039108D7351F53 ] WebClient       C:\Windows\System32\webclnt.dll

14:47:49.0919 0x0afc  WebClient - ok

14:47:49.0941 0x0afc  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll

14:47:49.0948 0x0afc  Wecsvc - ok

14:47:49.0981 0x0afc  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

14:47:49.0984 0x0afc  wercplsupport - ok

14:47:50.0010 0x0afc  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll

14:47:50.0013 0x0afc  WerSvc - ok

14:47:50.0032 0x0afc  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

14:47:50.0034 0x0afc  WfpLwf - ok

14:47:50.0058 0x0afc  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

14:47:50.0060 0x0afc  WIMMount - ok

14:47:50.0077 0x0afc  WinDefend - ok

14:47:50.0087 0x0afc  WinHttpAutoProxySvc - ok

14:47:50.0137 0x0afc  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

14:47:50.0144 0x0afc  Winmgmt - ok

14:47:50.0224 0x0afc  [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM           C:\Windows\system32\WsmSvc.dll

14:47:50.0283 0x0afc  WinRM - ok

14:47:50.0324 0x0afc  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\drivers\WinUsb.sys

14:47:50.0326 0x0afc  WinUsb - ok

14:47:50.0373 0x0afc  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll

14:47:50.0395 0x0afc  Wlansvc - ok

14:47:50.0588 0x0afc  [ 357CABBF155AFD1D3926E62539D2A3A7, C43CFF84E7D930B4999DC061AB0766B57AAD7540B3E6EE54605B10ECE90825F5 ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

14:47:50.0672 0x0afc  wlidsvc - ok

14:47:50.0709 0x0afc  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys

14:47:50.0729 0x0afc  WmiAcpi - ok

14:47:50.0761 0x0afc  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

14:47:50.0766 0x0afc  wmiApSrv - ok

14:47:50.0794 0x0afc  WMPNetworkSvc - ok

14:47:50.0819 0x0afc  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll

14:47:50.0832 0x0afc  WPCSvc - ok

14:47:50.0865 0x0afc  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

14:47:50.0870 0x0afc  WPDBusEnum - ok

14:47:50.0892 0x0afc  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

14:47:50.0894 0x0afc  ws2ifsl - ok

14:47:50.0921 0x0afc  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\system32\wscsvc.dll

14:47:50.0925 0x0afc  wscsvc - ok

14:47:50.0929 0x0afc  WSearch - ok

14:47:51.0035 0x0afc  [ 6075791ED85E47A2A2916B1F34582944, 25B5FAD161711875B38BDD014A26FA527C8EE4854D485989D19A72D5EBBA4054 ] wuauserv        C:\Windows\system32\wuaueng.dll

14:47:51.0113 0x0afc  wuauserv - ok

14:47:51.0154 0x0afc  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

14:47:51.0157 0x0afc  WudfPf - ok

14:47:51.0180 0x0afc  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

14:47:51.0185 0x0afc  WUDFRd - ok

14:47:51.0201 0x0afc  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

14:47:51.0205 0x0afc  wudfsvc - ok

14:47:51.0231 0x0afc  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc         C:\Windows\System32\wwansvc.dll

14:47:51.0254 0x0afc  WwanSvc - ok

14:47:51.0276 0x0afc  ================ Scan global ===============================

14:47:51.0304 0x0afc  [ 168EA9CD9BD6056BB6F60B57D5304BBE, 5A2F98754F042A7D80E7483842967EB362F01D57CE9720B24C7EDAA047F24C6F ] C:\Windows\system32\basesrv.dll

14:47:51.0346 0x0afc  [ CE14A4BBF890A7D4C898CF886D145EC9, AD4BE7CBB0C624EC00E8496AF33AC5AB8C5689C75C66C4C99F2FB7149E912D18 ] C:\Windows\system32\winsrv.dll

14:47:51.0360 0x0afc  [ CE14A4BBF890A7D4C898CF886D145EC9, AD4BE7CBB0C624EC00E8496AF33AC5AB8C5689C75C66C4C99F2FB7149E912D18 ] C:\Windows\system32\winsrv.dll

14:47:51.0392 0x0afc  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll

14:47:51.0423 0x0afc  [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe

14:47:51.0431 0x0afc  [ Global ] - ok

14:47:51.0431 0x0afc  ================ Scan MBR ==================================

14:47:51.0437 0x0afc  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

14:47:51.0617 0x0afc  \Device\Harddisk0\DR0 - ok

14:47:51.0618 0x0afc  ================ Scan VBR ==================================

14:47:51.0636 0x0afc  [ 99CB628D35DE652F46DDCC410001055A ] \Device\Harddisk0\DR0\Partition1

14:47:51.0638 0x0afc  \Device\Harddisk0\DR0\Partition1 - ok

14:47:51.0641 0x0afc  [ 7F40264E8F6566DEB7DA6C69B22E0B66 ] \Device\Harddisk0\DR0\Partition2

14:47:51.0642 0x0afc  \Device\Harddisk0\DR0\Partition2 - ok

14:47:51.0645 0x0afc  [ CB5C712B251FD4A5E8937C1FF594FE8B ] \Device\Harddisk0\DR0\Partition3

14:47:51.0648 0x0afc  \Device\Harddisk0\DR0\Partition3 - ok

14:47:51.0648 0x0afc  ================ Scan generic autorun ======================

14:47:52.0227 0x0afc  [ 16438B000BF56F2CD7FDB5E6C3B38C7E, 32D6E69E6367D3ADB2189DA89103CB9910CE791EFB0879515DDD380A96D85BAE ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

14:47:52.0467 0x0afc  RtHDVCpl - ok

14:47:52.0875 0x0afc  [ 515522D22189A1BFECA44EAC09CE3FA4, 2F0BB4B68530DCAE3918771FBD8EA7D78600150FD453195066CEECB89F9135A5 ] c:\program files (x86)\emsisoft anti-malware\a2guard.exe

14:47:53.0037 0x0afc  emsisoft anti-malware - ok

14:47:53.0156 0x0afc  [ E3BF29CED96790CDAAFA981FFDDF53A3, 76CB27EF7B27E5636EDA9D95229519B2A2870729A0BB694F1FD11CD602BAC4DC ] C:\Program Files\Windows Sidebar\sidebar.exe

14:47:53.0182 0x0afc  Sidebar - ok

14:47:53.0203 0x0afc  AV detected via SS2: Emsisoft Anti-Malware, C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2start.exe ( 11.0.0.6054 ), 0x41000 ( enabled : updated )

14:47:53.0228 0x0afc  Win FW state via NFP2: enabled ( trusted )

14:47:53.0229 0x0afc  ============================================================

14:47:53.0229 0x0afc  Scan finished

14:47:53.0229 0x0afc  ============================================================

14:47:53.0239 0x0bf0  Detected object count: 0

14:47:53.0239 0x0bf0  Actual detected object count: 0

Baba Yaga

24.01.2016 14:57

Code:

14:48:10.0285 0x0ea4  ============================================================

14:48:10.0285 0x0ea4  Scan started

14:48:10.0285 0x0ea4  Mode: Manual; SigCheck; TDLFS; 

14:48:10.0285 0x0ea4  ============================================================

14:48:10.0285 0x0ea4  KSN ping started

14:48:10.0300 0x0ea4  KSN ping finished: false

14:48:10.0829 0x0ea4  ================ Scan system memory ========================

14:48:10.0829 0x0ea4  System memory - ok

14:48:10.0829 0x0ea4  ================ Scan services =============================

14:48:10.0954 0x0ea4  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys

14:48:11.0058 0x0ea4  1394ohci - ok

14:48:11.0476 0x0ea4  [ A0701F64EBBBCF8ACCA449D60B4BD0A6, 18BA84ECDAA46D5B64C598857BF4174D5A6B4C3C4BEA9F5AAB762C1004A0D32C ] a2AntiMalware   C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe

14:48:11.0805 0x0ea4  a2AntiMalware - ok

14:48:11.0885 0x0ea4  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys

14:48:11.0902 0x0ea4  ACPI - ok

14:48:11.0923 0x0ea4  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys

14:48:11.0957 0x0ea4  AcpiPmi - ok

14:48:12.0038 0x0ea4  [ F2CEEE9ABBCEF207ACB103215AC28BC2, F8F8B8AF6317926D7AC0CA2CA23628B2C69327A2792D58D3328443C5ED9514E9 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

14:48:12.0050 0x0ea4  AdobeARMservice - ok

14:48:12.0146 0x0ea4  [ 295A5BFCE8D225D014DB4E6E69336279, F786F06F0EE3253FA936FA5D73FD9AC704FAB19BE76C60C65AEAD399DC93F9C5 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

14:48:12.0160 0x0ea4  AdobeFlashPlayerUpdateSvc - ok

14:48:12.0238 0x0ea4  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys

14:48:12.0258 0x0ea4  adp94xx - ok

14:48:12.0276 0x0ea4  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys

14:48:12.0293 0x0ea4  adpahci - ok

14:48:12.0307 0x0ea4  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys

14:48:12.0320 0x0ea4  adpu320 - ok

14:48:12.0353 0x0ea4  [ 83BFCCAC53795E8A5055A93672D0C46C, B2B03473D950A5BA9DE59D81E7B14C1FAFF17B2A4D8A5808588F5CC21D63B291 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

14:48:12.0393 0x0ea4  AeLookupSvc - ok

14:48:12.0443 0x0ea4  [ 9A4A1EEE802BF2F878EE8EAB407B21B7, 177EB7DF4B35FE4C0E45E775A0FD5D48D39B410052E3EE18BDEEC809E152D9D8 ] AFD             C:\Windows\system32\drivers\afd.sys

14:48:12.0496 0x0ea4  AFD - ok

14:48:12.0530 0x0ea4  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys

14:48:12.0540 0x0ea4  agp440 - ok

14:48:12.0568 0x0ea4  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe

14:48:12.0602 0x0ea4  ALG - ok

14:48:12.0627 0x0ea4  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys

14:48:12.0636 0x0ea4  aliide - ok

14:48:12.0672 0x0ea4  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys

14:48:12.0681 0x0ea4  amdide - ok

14:48:12.0707 0x0ea4  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys

14:48:12.0741 0x0ea4  AmdK8 - ok

14:48:12.0765 0x0ea4  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys

14:48:12.0805 0x0ea4  AmdPPM - ok

14:48:12.0839 0x0ea4  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys

14:48:12.0850 0x0ea4  amdsata - ok

14:48:12.0869 0x0ea4  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys

14:48:12.0882 0x0ea4  amdsbs - ok

14:48:12.0898 0x0ea4  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys

14:48:12.0907 0x0ea4  amdxata - ok

14:48:12.0948 0x0ea4  [ 27DABFB4A6B0140C34DBEC713469592B, A355170D353AFBF0DE4EF53282F8404788FBBD0E2A1B7282B1B2925923E83141 ] AppID           C:\Windows\system32\drivers\appid.sys

14:48:12.0988 0x0ea4  AppID - ok

14:48:13.0005 0x0ea4  [ ABC373B9C6275D45F17DB559408FFD1B, 12B355393BEBE2D1D24D7A9DA5E69E03E334899407503BC1CADCF7BE39828223 ] AppIDSvc        C:\Windows\System32\appidsvc.dll

14:48:13.0028 0x0ea4  AppIDSvc - ok

14:48:13.0060 0x0ea4  [ 978DC0A1FBE9CC91B21B40AF66CB396A, 90BAFF81D98F5AFD743D8BD65F716666A7A7BD2DA612492E03C79B29E9A0F8C2 ] Appinfo         C:\Windows\System32\appinfo.dll

14:48:13.0078 0x0ea4  Appinfo - ok

14:48:13.0103 0x0ea4  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\DRIVERS\arc.sys

14:48:13.0114 0x0ea4  arc - ok

14:48:13.0129 0x0ea4  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys

14:48:13.0140 0x0ea4  arcsas - ok

14:48:13.0222 0x0ea4  [ F15AB80B867D3332D5DDFB0A05B9CE04, 5A16577106246AB5DCC04FE0A0B00B7C5702557B75F958721E4C00383AB99809 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

14:48:13.0235 0x0ea4  aspnet_state - ok

14:48:13.0245 0x0ea4  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

14:48:13.0336 0x0ea4  AsyncMac - ok

14:48:13.0363 0x0ea4  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys

14:48:13.0372 0x0ea4  atapi - ok

14:48:13.0428 0x0ea4  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

14:48:13.0489 0x0ea4  AudioEndpointBuilder - ok

14:48:13.0510 0x0ea4  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioSrv        C:\Windows\System32\Audiosrv.dll

14:48:13.0537 0x0ea4  AudioSrv - ok

14:48:13.0574 0x0ea4  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll

14:48:13.0643 0x0ea4  AxInstSV - ok

14:48:13.0673 0x0ea4  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys

14:48:13.0704 0x0ea4  b06bdrv - ok

14:48:13.0725 0x0ea4  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys

14:48:13.0753 0x0ea4  b57nd60a - ok

14:48:13.0781 0x0ea4  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll

14:48:13.0805 0x0ea4  BDESVC - ok

14:48:13.0817 0x0ea4  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys

14:48:13.0860 0x0ea4  Beep - ok

14:48:14.0003 0x0ea4  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll

14:48:14.0073 0x0ea4  BFE - ok

14:48:14.0148 0x0ea4  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll

14:48:14.0211 0x0ea4  BITS - ok

14:48:14.0233 0x0ea4  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys

14:48:14.0256 0x0ea4  blbdrive - ok

14:48:14.0283 0x0ea4  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

14:48:14.0322 0x0ea4  bowser - ok

14:48:14.0346 0x0ea4  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys

14:48:14.0382 0x0ea4  BrFiltLo - ok

14:48:14.0410 0x0ea4  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys

14:48:14.0440 0x0ea4  BrFiltUp - ok

14:48:14.0464 0x0ea4  [ 5C2F352A4E961D72518261257AAE204B, 9EE1001E1D46A414A7A86FE1DBBE232203E26F54D9EF43ED31ED8EACD4D09853 ] BridgeMP        C:\Windows\system32\DRIVERS\bridge.sys

14:48:14.0495 0x0ea4  BridgeMP - ok

14:48:14.0515 0x0ea4  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll

14:48:14.0564 0x0ea4  Browser - ok

14:48:14.0583 0x0ea4  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

14:48:14.0612 0x0ea4  Brserid - ok

14:48:14.0630 0x0ea4  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

14:48:14.0661 0x0ea4  BrSerWdm - ok

14:48:14.0693 0x0ea4  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

14:48:14.0705 0x0ea4  BrUsbMdm - ok

14:48:14.0722 0x0ea4  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

14:48:14.0749 0x0ea4  BrUsbSer - ok

14:48:14.0783 0x0ea4  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys

14:48:14.0808 0x0ea4  BTHMODEM - ok

14:48:14.0840 0x0ea4  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll

14:48:14.0870 0x0ea4  bthserv - ok

14:48:14.0893 0x0ea4  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

14:48:14.0940 0x0ea4  cdfs - ok

14:48:14.0985 0x0ea4  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

14:48:14.0998 0x0ea4  cdrom - ok

14:48:15.0038 0x0ea4  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll

14:48:15.0067 0x0ea4  CertPropSvc - ok

14:48:15.0087 0x0ea4  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys

14:48:15.0117 0x0ea4  circlass - ok

14:48:15.0155 0x0ea4  [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS            C:\Windows\system32\CLFS.sys

14:48:15.0173 0x0ea4  CLFS - ok

14:48:15.0233 0x0ea4  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

14:48:15.0244 0x0ea4  clr_optimization_v2.0.50727_32 - ok

14:48:15.0289 0x0ea4  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

14:48:15.0300 0x0ea4  clr_optimization_v2.0.50727_64 - ok

14:48:15.0356 0x0ea4  [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

14:48:15.0369 0x0ea4  clr_optimization_v4.0.30319_32 - ok

14:48:15.0382 0x0ea4  [ 9ACBE5EC13C2CC95833BFB7636CA8B1A, 6224DA9FB335D2A8374C60B8DEA539DD3A0E43230DB888B137B71A56EC57D6AF ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

14:48:15.0396 0x0ea4  clr_optimization_v4.0.30319_64 - ok

14:48:15.0418 0x0ea4  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys

14:48:15.0444 0x0ea4  CmBatt - ok

14:48:15.0469 0x0ea4  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys

14:48:15.0478 0x0ea4  cmdide - ok

14:48:15.0527 0x0ea4  [ EC0511BB85BAA42A9734011685A6732C, 10B52F0860CCB3AA0FC34DDA5C5538BFCF7B6D40738B7756297237FD2D9E01C1 ] CNG             C:\Windows\system32\Drivers\cng.sys

14:48:15.0557 0x0ea4  CNG - ok

14:48:15.0568 0x0ea4  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys

14:48:15.0578 0x0ea4  Compbatt - ok

14:48:15.0614 0x0ea4  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys

14:48:15.0638 0x0ea4  CompositeBus - ok

14:48:15.0643 0x0ea4  COMSysApp - ok

14:48:15.0661 0x0ea4  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys

14:48:15.0671 0x0ea4  crcdisk - ok

14:48:15.0713 0x0ea4  [ 7BC3E861F7E8EB543A630090FAE779E0, 52A538F25C853AAC9706CD0D4EBF80B1963391AA175895CFD9D44C8ABBFCFB74 ] CryptSvc        C:\Windows\system32\cryptsvc.dll

14:48:15.0736 0x0ea4  CryptSvc - ok

14:48:15.0782 0x0ea4  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll

14:48:15.0832 0x0ea4  DcomLaunch - ok

14:48:15.0862 0x0ea4  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll

14:48:15.0921 0x0ea4  defragsvc - ok

14:48:15.0964 0x0ea4  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

14:48:16.0011 0x0ea4  DfsC - ok

14:48:16.0092 0x0ea4  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll

14:48:16.0134 0x0ea4  Dhcp - ok

14:48:16.0150 0x0ea4  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys

14:48:16.0197 0x0ea4  discache - ok

14:48:16.0220 0x0ea4  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\DRIVERS\disk.sys

14:48:16.0230 0x0ea4  Disk - ok

14:48:16.0266 0x0ea4  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll

14:48:16.0314 0x0ea4  Dnscache - ok

14:48:16.0348 0x0ea4  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll

14:48:16.0391 0x0ea4  dot3svc - ok

14:48:16.0420 0x0ea4  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll

14:48:16.0465 0x0ea4  DPS - ok

14:48:16.0489 0x0ea4  [ 26FE888505E5A945B0536AF9A2A27A6F, A6B16ED498BAFE300E1F0E0A241E3D62F7A1C5973EE775904ED14F33A2BC08A6 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

14:48:16.0524 0x0ea4  drmkaud - ok

14:48:16.0610 0x0ea4  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

14:48:16.0642 0x0ea4  DXGKrnl - ok

14:48:16.0670 0x0ea4  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll

14:48:16.0701 0x0ea4  EapHost - ok

14:48:16.0815 0x0ea4  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys

14:48:16.0928 0x0ea4  ebdrv - ok

14:48:16.0964 0x0ea4  [ CB0E57424A776C51EF42469064ADBF08, 2E4EFE070560F4CCE6AF6D142C559EEF3672631C846E612968D57BE7F71C1C4F ] EFS             C:\Windows\System32\lsass.exe

14:48:16.0975 0x0ea4  EFS - ok

14:48:17.0127 0x0ea4  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

14:48:17.0183 0x0ea4  ehRecvr - ok

14:48:17.0206 0x0ea4  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe

14:48:17.0231 0x0ea4  ehSched - ok

14:48:17.0273 0x0ea4  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys

14:48:17.0293 0x0ea4  elxstor - ok

14:48:17.0369 0x0ea4  [ AD2D0DD976F59A93B95B2268CC956E7C, B613254237B68A55BBDA38FA79923E39F4D687A2299E99F1990A8322A1F014D6 ] epp             C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\epp.sys

14:48:17.0386 0x0ea4  epp - ok

14:48:17.0425 0x0ea4  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys

14:48:17.0453 0x0ea4  ErrDev - ok

14:48:17.0495 0x0ea4  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll

14:48:17.0543 0x0ea4  EventSystem - ok

14:48:17.0567 0x0ea4  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys

14:48:17.0614 0x0ea4  exfat - ok

14:48:17.0635 0x0ea4  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

14:48:17.0668 0x0ea4  fastfat - ok

14:48:17.0678 0x0ea4  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

14:48:17.0689 0x0ea4  fdc - ok

14:48:17.0717 0x0ea4  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll

14:48:17.0746 0x0ea4  fdPHost - ok

14:48:17.0753 0x0ea4  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll

14:48:17.0794 0x0ea4  FDResPub - ok

14:48:17.0817 0x0ea4  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

14:48:17.0828 0x0ea4  FileInfo - ok

14:48:17.0851 0x0ea4  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

14:48:17.0899 0x0ea4  Filetrace - ok

14:48:17.0918 0x0ea4  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

14:48:17.0943 0x0ea4  flpydisk - ok

14:48:18.0029 0x0ea4  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

14:48:18.0045 0x0ea4  FltMgr - ok

14:48:18.0201 0x0ea4  [ BCB16AE33AA58E0042F3EF34CFB6396A, E8ADA10DE60A94E4BABE9FCA6D0AA83B11520C092D49057E17F6C6059D35A323 ] FontCache       C:\Windows\system32\FntCache.dll

14:48:18.0262 0x0ea4  FontCache - ok

14:48:18.0319 0x0ea4  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

14:48:18.0329 0x0ea4  FontCache3.0.0.0 - ok

14:48:18.0353 0x0ea4  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

14:48:18.0363 0x0ea4  FsDepends - ok

14:48:18.0394 0x0ea4  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

14:48:18.0404 0x0ea4  Fs_Rec - ok

14:48:18.0444 0x0ea4  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

14:48:18.0460 0x0ea4  fvevol - ok

14:48:18.0485 0x0ea4  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys

14:48:18.0495 0x0ea4  gagp30kx - ok

14:48:18.0757 0x0ea4  [ 5E42BDFF22707E577AD82BE4C43C3BCE, 4C0BBF6AAA7EB30A789D91A4F29726C2A6D941D457B59CF376EF96571F3E1BB4 ] GfExperienceService C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

14:48:18.0795 0x0ea4  GfExperienceService - ok

14:48:18.0913 0x0ea4  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll

14:48:18.0989 0x0ea4  gpsvc - ok

14:48:19.0017 0x0ea4  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

14:48:19.0061 0x0ea4  hcw85cir - ok

14:48:19.0101 0x0ea4  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

14:48:19.0157 0x0ea4  HdAudAddService - ok

14:48:19.0179 0x0ea4  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

14:48:19.0208 0x0ea4  HDAudBus - ok

14:48:19.0230 0x0ea4  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys

14:48:19.0257 0x0ea4  HidBatt - ok

14:48:19.0277 0x0ea4  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys

14:48:19.0292 0x0ea4  HidBth - ok

14:48:19.0304 0x0ea4  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys

14:48:19.0317 0x0ea4  HidIr - ok

14:48:19.0355 0x0ea4  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\System32\hidserv.dll

14:48:19.0414 0x0ea4  hidserv - ok

14:48:19.0439 0x0ea4  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\drivers\hidusb.sys

14:48:19.0462 0x0ea4  HidUsb - ok

14:48:19.0500 0x0ea4  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll

14:48:19.0546 0x0ea4  hkmsvc - ok

14:48:19.0587 0x0ea4  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll

14:48:19.0630 0x0ea4  HomeGroupListener - ok

14:48:19.0667 0x0ea4  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

14:48:19.0700 0x0ea4  HomeGroupProvider - ok

14:48:19.0725 0x0ea4  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

14:48:19.0736 0x0ea4  HpSAMD - ok

14:48:19.0791 0x0ea4  [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

14:48:19.0852 0x0ea4  HTTP - ok

14:48:19.0882 0x0ea4  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

14:48:19.0891 0x0ea4  hwpolicy - ok

14:48:19.0932 0x0ea4  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys

14:48:19.0945 0x0ea4  i8042prt - ok

14:48:19.0969 0x0ea4  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

14:48:19.0988 0x0ea4  iaStorV - ok

14:48:20.0132 0x0ea4  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

14:48:20.0161 0x0ea4  idsvc - ok

14:48:20.0167 0x0ea4  IEEtwCollectorService - ok

14:48:20.0189 0x0ea4  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys

14:48:20.0199 0x0ea4  iirsp - ok

14:48:20.0330 0x0ea4  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll

14:48:20.0405 0x0ea4  IKEEXT - ok

14:48:20.0626 0x0ea4  [ FA2B7507CD49908B2260949E52F8B9FE, 0EA0B3B25A3B668CA18313E34138DADA5C9835E476A1BFC56588B946DF0A92E0 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys

14:48:20.0722 0x0ea4  IntcAzAudAddService - ok

14:48:20.0744 0x0ea4  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys

14:48:20.0753 0x0ea4  intelide - ok

14:48:20.0768 0x0ea4  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

14:48:20.0803 0x0ea4  intelppm - ok

14:48:20.0848 0x0ea4  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

14:48:20.0879 0x0ea4  IPBusEnum - ok

14:48:20.0926 0x0ea4  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

14:48:20.0959 0x0ea4  IpFilterDriver - ok

14:48:21.0018 0x0ea4  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

14:48:21.0086 0x0ea4  iphlpsvc - ok

14:48:21.0116 0x0ea4  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys

14:48:21.0142 0x0ea4  IPMIDRV - ok

14:48:21.0181 0x0ea4  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

14:48:21.0211 0x0ea4  IPNAT - ok

14:48:21.0219 0x0ea4  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys

14:48:21.0256 0x0ea4  IRENUM - ok

14:48:21.0279 0x0ea4  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

14:48:21.0288 0x0ea4  isapnp - ok

14:48:21.0315 0x0ea4  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys

14:48:21.0331 0x0ea4  iScsiPrt - ok

14:48:21.0346 0x0ea4  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

14:48:21.0356 0x0ea4  kbdclass - ok

14:48:21.0414 0x0ea4  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

14:48:21.0449 0x0ea4  kbdhid - ok

14:48:21.0468 0x0ea4  [ CB0E57424A776C51EF42469064ADBF08, 2E4EFE070560F4CCE6AF6D142C559EEF3672631C846E612968D57BE7F71C1C4F ] KeyIso          C:\Windows\system32\lsass.exe

14:48:21.0479 0x0ea4  KeyIso - ok

14:48:21.0521 0x0ea4  [ 0F776895884B8DC430A307D57FD867BB, F9E8C8A04D757CEAD86938BEEFFAD9750589037E16FB1A2B0A90E4484E1A6B65 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

14:48:21.0532 0x0ea4  KSecDD - ok

14:48:21.0616 0x0ea4  [ 28E75F316CCCD79337E4957C53017D4B, 3BABDA50B4CE72F7F9A0FD7A33DDB19463A01F188D46354E0B411FC0389C01BE ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

14:48:21.0629 0x0ea4  KSecPkg - ok

14:48:21.0680 0x0ea4  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

14:48:21.0723 0x0ea4  ksthunk - ok

14:48:21.0762 0x0ea4  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll

14:48:21.0814 0x0ea4  KtmRm - ok

14:48:21.0855 0x0ea4  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\System32\srvsvc.dll

14:48:21.0900 0x0ea4  LanmanServer - ok

14:48:21.0945 0x0ea4  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

14:48:21.0976 0x0ea4  LanmanWorkstation - ok

14:48:21.0992 0x0ea4  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

14:48:22.0042 0x0ea4  lltdio - ok

14:48:22.0098 0x0ea4  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll

14:48:22.0146 0x0ea4  lltdsvc - ok

14:48:22.0165 0x0ea4  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll

14:48:22.0218 0x0ea4  lmhosts - ok

14:48:22.0263 0x0ea4  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys

14:48:22.0274 0x0ea4  LSI_FC - ok

14:48:22.0292 0x0ea4  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys

14:48:22.0304 0x0ea4  LSI_SAS - ok

14:48:22.0319 0x0ea4  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys

14:48:22.0331 0x0ea4  LSI_SAS2 - ok

14:48:22.0351 0x0ea4  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys

14:48:22.0362 0x0ea4  LSI_SCSI - ok

14:48:22.0393 0x0ea4  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys

14:48:22.0423 0x0ea4  luafv - ok

14:48:22.0470 0x0ea4  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

14:48:22.0483 0x0ea4  Mcx2Svc - ok

14:48:22.0508 0x0ea4  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys

14:48:22.0521 0x0ea4  megasas - ok

14:48:22.0604 0x0ea4  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys

14:48:22.0621 0x0ea4  MegaSR - ok

14:48:22.0643 0x0ea4  [ 1595FECFFBE9EA2417E06D5FD0BFA4C4, 96006C7F19FDC1700EEBA870F96433D3260DEA06AD7215EAD8F1D74C953E1B50 ] MEMSWEEP2       C:\Windows\system32\61DF.tmp

14:48:22.0675 0x0ea4  MEMSWEEP2 - detected UnsignedFile.Multi.Generic ( 1 )

14:48:22.0747 0x0ea4  MEMSWEEP2 ( UnsignedFile.Multi.Generic ) - warning

14:48:22.0771 0x0ea4  [ 8EA880DC2E0F8D93A943C25EF17E18FC, 9110CF46DE29C4F02A78FE9D4EEF0DE59BD392C6EC87B427833FF78AF15C2200 ] mi2c            C:\Windows\system32\drivers\mi2c.sys

14:48:22.0783 0x0ea4  mi2c - ok

14:48:22.0804 0x0ea4  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll

14:48:22.0834 0x0ea4  MMCSS - ok

14:48:22.0850 0x0ea4  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys

14:48:22.0898 0x0ea4  Modem - ok

14:48:22.0918 0x0ea4  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

14:48:22.0931 0x0ea4  monitor - ok

14:48:22.0956 0x0ea4  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

14:48:22.0966 0x0ea4  mouclass - ok

14:48:22.0997 0x0ea4  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

14:48:23.0024 0x0ea4  mouhid - ok

14:48:23.0046 0x0ea4  [ 67050452C0118BAF2883928E6FCCFE47, 335FC0AEB7B47DCC7CE0CF3F424EB60ACB1327D2FF6515F04D9AC03A10FF1E31 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

14:48:23.0058 0x0ea4  mountmgr - ok

14:48:23.0171 0x0ea4  [ 98DA127D0AB8B6CB5773546AF60D9217, BB07F34552342CA40E843F80AA32C928C29EF81789605E53C795EFD564F2DA7F ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

14:48:23.0183 0x0ea4  MozillaMaintenance - ok

14:48:23.0222 0x0ea4  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys

14:48:23.0234 0x0ea4  mpio - ok

14:48:23.0268 0x0ea4  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

14:48:23.0298 0x0ea4  mpsdrv - ok

14:48:23.0372 0x0ea4  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll

14:48:23.0434 0x0ea4  MpsSvc - ok

14:48:23.0483 0x0ea4  [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

14:48:23.0522 0x0ea4  MRxDAV - ok

14:48:23.0568 0x0ea4  [ 32B85C4923D895B2FB35821A799BA38D, 7A7E5D08F745DB9B498B4BE946325FF7DAA7FA27589D9423FCA4558D20780026 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

14:48:23.0582 0x0ea4  mrxsmb - ok

14:48:23.0649 0x0ea4  [ A572BEF41F3C55D7DAF24D2340C91FEC, 1E51EEFEABCDCB664CD39437C2275B160860FB433EAA8DC905D5BC742FD03529 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

14:48:23.0678 0x0ea4  mrxsmb10 - ok

14:48:23.0706 0x0ea4  [ C49F1C4CA74FC52AFB2E892D8E50EA39, 9E7A2453627A82AFF4CE3F285AFF105C3F92F423C07E5C43E76BEC523841B8F7 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

14:48:23.0720 0x0ea4  mrxsmb20 - ok

14:48:23.0739 0x0ea4  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys

14:48:23.0749 0x0ea4  msahci - ok

14:48:23.0764 0x0ea4  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

14:48:23.0776 0x0ea4  msdsm - ok

14:48:23.0808 0x0ea4  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe

14:48:23.0848 0x0ea4  MSDTC - ok

14:48:23.0894 0x0ea4  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

14:48:23.0938 0x0ea4  Msfs - ok

14:48:23.0955 0x0ea4  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

14:48:23.0999 0x0ea4  mshidkmdf - ok

14:48:24.0028 0x0ea4  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

14:48:24.0037 0x0ea4  msisadrv - ok

14:48:24.0088 0x0ea4  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

14:48:24.0121 0x0ea4  MSiSCSI - ok

14:48:24.0125 0x0ea4  msiserver - ok

14:48:24.0149 0x0ea4  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

14:48:24.0178 0x0ea4  MSKSSRV - ok

14:48:24.0195 0x0ea4  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

14:48:24.0244 0x0ea4  MSPCLOCK - ok

14:48:24.0264 0x0ea4  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

14:48:24.0311 0x0ea4  MSPQM - ok

14:48:24.0359 0x0ea4  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

14:48:24.0376 0x0ea4  MsRPC - ok

14:48:24.0413 0x0ea4  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys

14:48:24.0422 0x0ea4  mssmbios - ok

14:48:24.0448 0x0ea4  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

14:48:24.0476 0x0ea4  MSTEE - ok

14:48:24.0530 0x0ea4  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys

14:48:24.0559 0x0ea4  MTConfig - ok

14:48:24.0576 0x0ea4  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys

14:48:24.0586 0x0ea4  Mup - ok

14:48:24.0704 0x0ea4  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll

14:48:24.0755 0x0ea4  napagent - ok

14:48:24.0814 0x0ea4  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

14:48:24.0835 0x0ea4  NativeWifiP - ok

14:48:24.0958 0x0ea4  [ F7309F42555F8AAB7144A51A1F2585B0, 065277A8AFAEE3888C997A76D2F751070F92DF4C3354D16B194860B4BDAFF937 ] NDIS            C:\Windows\system32\drivers\ndis.sys

14:48:24.0989 0x0ea4  NDIS - ok

14:48:25.0021 0x0ea4  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

14:48:25.0062 0x0ea4  NdisCap - ok

14:48:25.0078 0x0ea4  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

14:48:25.0120 0x0ea4  NdisTapi - ok

14:48:25.0148 0x0ea4  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

14:48:25.0176 0x0ea4  Ndisuio - ok

14:48:25.0217 0x0ea4  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

14:48:25.0262 0x0ea4  NdisWan - ok

14:48:25.0300 0x0ea4  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

14:48:25.0328 0x0ea4  NDProxy - ok

14:48:25.0341 0x0ea4  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

14:48:25.0371 0x0ea4  NetBIOS - ok

14:48:25.0417 0x0ea4  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

14:48:25.0471 0x0ea4  NetBT - ok

14:48:25.0489 0x0ea4  [ CB0E57424A776C51EF42469064ADBF08, 2E4EFE070560F4CCE6AF6D142C559EEF3672631C846E612968D57BE7F71C1C4F ] Netlogon        C:\Windows\system32\lsass.exe

14:48:25.0500 0x0ea4  Netlogon - ok

14:48:25.0552 0x0ea4  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll

14:48:25.0606 0x0ea4  Netman - ok

14:48:25.0649 0x0ea4  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

14:48:25.0663 0x0ea4  NetMsmqActivator - ok

14:48:25.0670 0x0ea4  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

14:48:25.0684 0x0ea4  NetPipeActivator - ok

14:48:25.0814 0x0ea4  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll

14:48:25.0855 0x0ea4  netprofm - ok

14:48:25.0871 0x0ea4  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

14:48:25.0886 0x0ea4  NetTcpActivator - ok

14:48:25.0903 0x0ea4  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

14:48:25.0917 0x0ea4  NetTcpPortSharing - ok

14:48:25.0952 0x0ea4  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys

14:48:25.0962 0x0ea4  nfrd960 - ok

14:48:26.0020 0x0ea4  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll

14:48:26.0061 0x0ea4  NlaSvc - ok

14:48:26.0072 0x0ea4  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys

14:48:26.0102 0x0ea4  Npfs - ok

14:48:26.0134 0x0ea4  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll

14:48:26.0164 0x0ea4  nsi - ok

14:48:26.0188 0x0ea4  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

14:48:26.0217 0x0ea4  nsiproxy - ok

14:48:26.0457 0x0ea4  [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

14:48:26.0532 0x0ea4  Ntfs - ok

14:48:26.0550 0x0ea4  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys

14:48:26.0599 0x0ea4  Null - ok

14:48:26.0649 0x0ea4  [ D812362E8AF615B521AD4DF19A93BD5A, B1F04122DFE9FCC3FC56BE327D86912D624C89F2EFB9684BE66FC22115D0E19F ] NVHDA           C:\Windows\system32\drivers\nvhda64v.sys

14:48:26.0666 0x0ea4  NVHDA - ok

14:48:27.0076 0x0ea4  [ 45F83C99EDF3253D047F692A42C1A51A, 08EC3CE5F00C9B70F52577FAD0561A8ECCD6C04F96468DBA67B4D4C82C77FA6D ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys

14:48:27.0341 0x0ea4  nvlddmkm - ok

14:48:27.0456 0x0ea4  [ 2CCD9A74A0F9C7605EAFA3F3AC8DC476, DEE95B0C0CA4525850E06AD3C1233A6C6E88D97EE874F83801686B87FD23F0BC ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

14:48:27.0520 0x0ea4  NvNetworkService - ok

14:48:27.0557 0x0ea4  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys

14:48:27.0570 0x0ea4  nvraid - ok

14:48:27.0624 0x0ea4  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys

14:48:27.0637 0x0ea4  nvstor - ok

14:48:27.0697 0x0ea4  [ 71B6ECD3C56FBF12FB1968DA3953B703, 47E39FBC336C9BFC159AA0FF9D8DEE950724ABB782102858E397A7EF87112584 ] nvstor64        C:\Windows\system32\DRIVERS\nvstor64.sys

14:48:27.0713 0x0ea4  nvstor64 - ok

14:48:27.0768 0x0ea4  [ 2F61DB46C84CCBB5D9F75065A85D2173, 79049D42F0D82BD3C5A9C8231CF2F412B50C9E6483DB14F41CD48301D85C166C ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys

14:48:27.0778 0x0ea4  NvStreamKms - ok

14:48:28.0060 0x0ea4  [ 6F5AC1C495DA6D19AF99A59DC44BC13F, 61E8C0C0B9EEEF6ADE86AD4BC8D43256A6B20AEEB43BBC3C44B3B6140544259F ] NvStreamNetworkSvc C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

14:48:28.0319 0x0ea4  NvStreamNetworkSvc - ok

14:48:28.0531 0x0ea4  [ 73FA6B2DF3348AF05E1F98310854BD4F, F0B7CF54495C81EE4C8B44580E399F3B22E190CB553AC7BA8E2DC13A28477566 ] NvStreamSvc     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe

14:48:28.0749 0x0ea4  NvStreamSvc - ok

14:48:28.0894 0x0ea4  [ 92C7B8287C185022F12253026FA33401, 96E466D17347DB3E789DD6DBF3604E51D4B86D3E49592B0EF6622BD278369F6C ] nvsvc           C:\Windows\system32\nvvsvc.exe

14:48:28.0956 0x0ea4  nvsvc - ok

14:48:28.0987 0x0ea4  [ 35DFC12FD7E44B7CB8CCD7E5A2B3975A, 36E0E39646636F6E027691E5C3903C51479B3F707BDEA40F460FD27E357DA14E ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys

14:48:29.0003 0x0ea4  nvvad_WaveExtensible - ok

14:48:29.0045 0x0ea4  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

14:48:29.0058 0x0ea4  nv_agp - ok

14:48:29.0074 0x0ea4  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

14:48:29.0098 0x0ea4  ohci1394 - ok

14:48:29.0135 0x0ea4  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

14:48:29.0183 0x0ea4  p2pimsvc - ok

14:48:29.0208 0x0ea4  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll

14:48:29.0245 0x0ea4  p2psvc - ok

14:48:29.0287 0x0ea4  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\DRIVERS\parport.sys

14:48:29.0310 0x0ea4  Parport - ok

14:48:29.0340 0x0ea4  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys

14:48:29.0351 0x0ea4  partmgr - ok

14:48:29.0394 0x0ea4  [ DB2D62AA2DF6B1F3D690A9EC9701AA2C, BEAC55E1AA0494565F1547DF5E6FE20FCEA66461764C016FCB68D8BFF0F0C375 ] PcaSvc          C:\Windows\System32\pcasvc.dll

14:48:29.0436 0x0ea4  PcaSvc - ok

14:48:29.0471 0x0ea4  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys

14:48:29.0486 0x0ea4  pci - ok

14:48:29.0504 0x0ea4  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys

14:48:29.0514 0x0ea4  pciide - ok

14:48:29.0546 0x0ea4  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys

14:48:29.0562 0x0ea4  pcmcia - ok

14:48:29.0579 0x0ea4  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys

14:48:29.0591 0x0ea4  pcw - ok

14:48:29.0625 0x0ea4  [ ED6E75158D28D33A2E2A020AC5B2B59D, 0F364D9A88304C45F31318605C417A70A9D0E4CF087D73E949B42C12CC76CD6C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

14:48:29.0672 0x0ea4  PEAUTH - ok

14:48:29.0744 0x0ea4  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe

14:48:29.0757 0x0ea4  PerfHost - ok

14:48:29.0839 0x0ea4  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll

14:48:29.0915 0x0ea4  pla - ok

14:48:29.0971 0x0ea4  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

14:48:30.0019 0x0ea4  PlugPlay - ok

14:48:30.0029 0x0ea4  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

14:48:30.0041 0x0ea4  PNRPAutoReg - ok

14:48:30.0059 0x0ea4  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

14:48:30.0077 0x0ea4  PNRPsvc - ok

14:48:30.0134 0x0ea4  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

14:48:30.0186 0x0ea4  PolicyAgent - ok

14:48:30.0249 0x0ea4  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll

14:48:30.0301 0x0ea4  Power - ok

14:48:30.0339 0x0ea4  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

14:48:30.0399 0x0ea4  PptpMiniport - ok

14:48:30.0422 0x0ea4  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\DRIVERS\processr.sys

14:48:30.0435 0x0ea4  Processor - ok

14:48:30.0473 0x0ea4  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc         C:\Windows\system32\profsvc.dll

14:48:30.0498 0x0ea4  ProfSvc - ok

14:48:30.0509 0x0ea4  [ CB0E57424A776C51EF42469064ADBF08, 2E4EFE070560F4CCE6AF6D142C559EEF3672631C846E612968D57BE7F71C1C4F ] ProtectedStorage C:\Windows\system32\lsass.exe

14:48:30.0522 0x0ea4  ProtectedStorage - ok

14:48:30.0559 0x0ea4  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

14:48:30.0589 0x0ea4  Psched - ok

14:48:30.0660 0x0ea4  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys

14:48:30.0735 0x0ea4  ql2300 - ok

14:48:30.0752 0x0ea4  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys

14:48:30.0765 0x0ea4  ql40xx - ok

14:48:30.0791 0x0ea4  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll

14:48:30.0826 0x0ea4  QWAVE - ok

14:48:30.0849 0x0ea4  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

14:48:30.0865 0x0ea4  QWAVEdrv - ok

14:48:30.0880 0x0ea4  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

14:48:30.0926 0x0ea4  RasAcd - ok

14:48:30.0951 0x0ea4  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

14:48:30.0983 0x0ea4  RasAgileVpn - ok

14:48:30.0998 0x0ea4  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll

14:48:31.0031 0x0ea4  RasAuto - ok

14:48:31.0067 0x0ea4  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

14:48:31.0112 0x0ea4  Rasl2tp - ok

14:48:31.0172 0x0ea4  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll

14:48:31.0218 0x0ea4  RasMan - ok

14:48:31.0265 0x0ea4  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

14:48:31.0308 0x0ea4  RasPppoe - ok

14:48:31.0333 0x0ea4  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

14:48:31.0364 0x0ea4  RasSstp - ok

14:48:31.0407 0x0ea4  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

14:48:31.0456 0x0ea4  rdbss - ok

14:48:31.0477 0x0ea4  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys

14:48:31.0510 0x0ea4  rdpbus - ok

14:48:31.0531 0x0ea4  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

14:48:31.0560 0x0ea4  RDPCDD - ok

14:48:31.0568 0x0ea4  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

14:48:31.0598 0x0ea4  RDPENCDD - ok

14:48:31.0613 0x0ea4  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

14:48:31.0644 0x0ea4  RDPREFMP - ok

14:48:31.0698 0x0ea4  [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys

14:48:31.0733 0x0ea4  RdpVideoMiniport - ok

14:48:31.0769 0x0ea4  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

14:48:31.0785 0x0ea4  RDPWD - ok

14:48:31.0820 0x0ea4  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

14:48:31.0835 0x0ea4  rdyboost - ok

14:48:31.0854 0x0ea4  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll

14:48:31.0886 0x0ea4  RemoteAccess - ok

14:48:31.0927 0x0ea4  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

14:48:31.0977 0x0ea4  RemoteRegistry - ok

14:48:31.0994 0x0ea4  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

14:48:32.0040 0x0ea4  RpcEptMapper - ok

14:48:32.0067 0x0ea4  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe

14:48:32.0104 0x0ea4  RpcLocator - ok

14:48:32.0140 0x0ea4  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\system32\rpcss.dll

14:48:32.0181 0x0ea4  RpcSs - ok

14:48:32.0224 0x0ea4  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

14:48:32.0278 0x0ea4  rspndr - ok

14:48:32.0396 0x0ea4  [ EF91E0806C01806C3CF62AF006901127, 1F49D57B6598EF0923DF70FD31B755B29D5ED4D38840D7619D3399B759FD579F ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys

14:48:32.0443 0x0ea4  RTL8167 - ok

14:48:32.0467 0x0ea4  [ 55D5947298501C38095733F16EEB36C5, BF78998666C890B9D218D94F23D67EABAFBA560FF4DA5F5D68A4CDE7917DBCD1 ] RTLE8023x64     C:\Windows\system32\DRIVERS\Rtenic64.sys

14:48:32.0486 0x0ea4  RTLE8023x64 - ok

14:48:32.0498 0x0ea4  [ CB0E57424A776C51EF42469064ADBF08, 2E4EFE070560F4CCE6AF6D142C559EEF3672631C846E612968D57BE7F71C1C4F ] SamSs           C:\Windows\system32\lsass.exe

14:48:32.0509 0x0ea4  SamSs - ok

14:48:32.0543 0x0ea4  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

14:48:32.0555 0x0ea4  sbp2port - ok

14:48:32.0582 0x0ea4  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll

14:48:32.0629 0x0ea4  SCardSvr - ok

14:48:32.0661 0x0ea4  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

14:48:32.0704 0x0ea4  scfilter - ok

14:48:32.0761 0x0ea4  [ 40686B59C127F0C93B4234E4A1E3472A, B2DD61CB796C6AA8AFD285D43472B94646CA6D331D282818E0FDC9DE28DDE9CF ] Schedule        C:\Windows\system32\schedsvc.dll

14:48:32.0816 0x0ea4  Schedule - ok

14:48:32.0853 0x0ea4  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll

14:48:32.0883 0x0ea4  SCPolicySvc - ok

14:48:32.0918 0x0ea4  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

14:48:32.0959 0x0ea4  SDRSVC - ok

14:48:32.0979 0x0ea4  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys

14:48:32.0992 0x0ea4  secdrv - ok

14:48:33.0005 0x0ea4  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll

14:48:33.0045 0x0ea4  seclogon - ok

14:48:33.0073 0x0ea4  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\system32\sens.dll

14:48:33.0118 0x0ea4  SENS - ok

14:48:33.0136 0x0ea4  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll

14:48:33.0180 0x0ea4  SensrSvc - ok

14:48:33.0196 0x0ea4  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys

14:48:33.0222 0x0ea4  Serenum - ok

14:48:33.0245 0x0ea4  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\DRIVERS\serial.sys

14:48:33.0274 0x0ea4  Serial - ok

14:48:33.0295 0x0ea4  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys

14:48:33.0321 0x0ea4  sermouse - ok

14:48:33.0358 0x0ea4  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll

14:48:33.0411 0x0ea4  SessionEnv - ok

14:48:33.0448 0x0ea4  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

14:48:33.0476 0x0ea4  sffdisk - ok

14:48:33.0492 0x0ea4  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

14:48:33.0515 0x0ea4  sffp_mmc - ok

14:48:33.0539 0x0ea4  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

14:48:33.0563 0x0ea4  sffp_sd - ok

14:48:33.0583 0x0ea4  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys

14:48:33.0610 0x0ea4  sfloppy - ok

14:48:33.0644 0x0ea4  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll

14:48:33.0694 0x0ea4  SharedAccess - ok

14:48:33.0735 0x0ea4  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

14:48:33.0773 0x0ea4  ShellHWDetection - ok

14:48:33.0789 0x0ea4  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys

14:48:33.0799 0x0ea4  SiSRaid2 - ok

14:48:33.0816 0x0ea4  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys

14:48:33.0828 0x0ea4  SiSRaid4 - ok

14:48:33.0844 0x0ea4  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

14:48:33.0876 0x0ea4  Smb - ok

14:48:33.0905 0x0ea4  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

14:48:33.0931 0x0ea4  SNMPTRAP - ok

14:48:33.0950 0x0ea4  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys

14:48:33.0960 0x0ea4  spldr - ok

14:48:33.0997 0x0ea4  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler         C:\Windows\System32\spoolsv.exe

14:48:34.0049 0x0ea4  Spooler - ok

14:48:34.0209 0x0ea4  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe

14:48:34.0367 0x0ea4  sppsvc - ok

14:48:34.0400 0x0ea4  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll

14:48:34.0432 0x0ea4  sppuinotify - ok

14:48:34.0469 0x0ea4  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys

14:48:34.0520 0x0ea4  srv - ok

14:48:34.0547 0x0ea4  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

14:48:34.0579 0x0ea4  srv2 - ok

14:48:34.0601 0x0ea4  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

14:48:34.0627 0x0ea4  srvnet - ok

14:48:34.0653 0x0ea4  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

14:48:34.0705 0x0ea4  SSDPSRV - ok

14:48:34.0725 0x0ea4  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll

14:48:34.0771 0x0ea4  SstpSvc - ok

14:48:34.0835 0x0ea4  [ 601F0449030798FDFB2932F902C24C98, 95D5BEFF5E909513C6823FC115259FF7C5AD695C5992874B612248D9616F5DA5 ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

14:48:34.0855 0x0ea4  Stereo Service - ok

14:48:34.0877 0x0ea4  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys

14:48:34.0887 0x0ea4  stexstor - ok

14:48:34.0936 0x0ea4  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll

14:48:34.0982 0x0ea4  stisvc - ok

14:48:35.0012 0x0ea4  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\drivers\swenum.sys

14:48:35.0022 0x0ea4  swenum - ok

14:48:35.0059 0x0ea4  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll

14:48:35.0118 0x0ea4  swprv - ok

14:48:35.0194 0x0ea4  [ 2E730941CC5BF6200A4F56D1E9C24AAD, 758836D55DC84F3EBE9917DC6FAB8E6170A5B238FEDBCFDB6D7C5C6EA98E08B2 ] SysMain         C:\Windows\system32\sysmain.dll

14:48:35.0313 0x0ea4  SysMain - ok

14:48:35.0348 0x0ea4  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll

14:48:35.0381 0x0ea4  TabletInputService - ok

14:48:35.0433 0x0ea4  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll

14:48:35.0486 0x0ea4  TapiSrv - ok

14:48:35.0533 0x0ea4  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll

14:48:35.0586 0x0ea4  TBS - ok

14:48:35.0674 0x0ea4  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

14:48:35.0747 0x0ea4  Tcpip - ok

14:48:35.0801 0x0ea4  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

14:48:35.0853 0x0ea4  TCPIP6 - ok

14:48:35.0890 0x0ea4  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

14:48:35.0902 0x0ea4  tcpipreg - ok

14:48:35.0922 0x0ea4  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

14:48:35.0966 0x0ea4  TDPIPE - ok

14:48:36.0000 0x0ea4  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

14:48:36.0010 0x0ea4  TDTCP - ok

14:48:36.0039 0x0ea4  [ AA77EB517D2F07A947294F260E3ACA83, B7A5DF3066830C0C2302B059778A67419792058A0D300C471DE40AB245EA7E58 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

14:48:36.0052 0x0ea4  tdx - ok

14:48:36.0087 0x0ea4  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\drivers\termdd.sys

14:48:36.0098 0x0ea4  TermDD - ok

14:48:36.0147 0x0ea4  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService     C:\Windows\System32\termsrv.dll

14:48:36.0188 0x0ea4  TermService - ok

14:48:36.0208 0x0ea4  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll

14:48:36.0224 0x0ea4  Themes - ok

14:48:36.0240 0x0ea4  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll

14:48:36.0270 0x0ea4  THREADORDER - ok

14:48:36.0283 0x0ea4  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll

14:48:36.0349 0x0ea4  TrkWks - ok

14:48:36.0433 0x0ea4  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

14:48:36.0474 0x0ea4  TrustedInstaller - ok

14:48:36.0520 0x0ea4  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

14:48:36.0543 0x0ea4  tssecsrv - ok

14:48:36.0572 0x0ea4  [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys

14:48:36.0607 0x0ea4  TsUsbFlt - ok

14:48:36.0641 0x0ea4  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

14:48:36.0671 0x0ea4  tunnel - ok

14:48:36.0699 0x0ea4  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys

14:48:36.0709 0x0ea4  uagp35 - ok

14:48:36.0755 0x0ea4  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

14:48:36.0805 0x0ea4  udfs - ok

14:48:36.0832 0x0ea4  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe

14:48:36.0858 0x0ea4  UI0Detect - ok

14:48:36.0879 0x0ea4  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

14:48:36.0890 0x0ea4  uliagpkx - ok

14:48:36.0927 0x0ea4  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\drivers\umbus.sys

14:48:36.0938 0x0ea4  umbus - ok

14:48:36.0959 0x0ea4  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys

14:48:36.0970 0x0ea4  UmPass - ok

14:48:36.0992 0x0ea4  [ 9DC07E73A4ABB9ACF692113B36A5009F, CA7176FC219515D58DCFA66EC61880ECE5617275C9B83701BB74D8B60E733D34 ] UnlockerDriver5 C:\Program Files (x86)\Unlocker\UnlockerDriver5.sys

14:48:37.0002 0x0ea4  UnlockerDriver5 - ok

14:48:37.0028 0x0ea4  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll

14:48:37.0078 0x0ea4  upnphost - ok

14:48:37.0100 0x0ea4  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

14:48:37.0134 0x0ea4  usbccgp - ok

14:48:37.0168 0x0ea4  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys

14:48:37.0204 0x0ea4  usbcir - ok

14:48:37.0228 0x0ea4  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

14:48:37.0255 0x0ea4  usbehci - ok

14:48:37.0289 0x0ea4  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

14:48:37.0306 0x0ea4  usbhub - ok

14:48:37.0323 0x0ea4  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys

14:48:37.0344 0x0ea4  usbohci - ok

14:48:37.0371 0x0ea4  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

14:48:37.0400 0x0ea4  usbprint - ok

14:48:37.0433 0x0ea4  [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys

14:48:37.0452 0x0ea4  usbscan - ok

14:48:37.0477 0x0ea4  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

14:48:37.0494 0x0ea4  USBSTOR - ok

14:48:37.0508 0x0ea4  [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys

14:48:37.0520 0x0ea4  usbuhci - ok

14:48:37.0553 0x0ea4  [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys

14:48:37.0587 0x0ea4  usbvideo - ok

14:48:37.0611 0x0ea4  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll

14:48:37.0665 0x0ea4  UxSms - ok

14:48:37.0676 0x0ea4  [ CB0E57424A776C51EF42469064ADBF08, 2E4EFE070560F4CCE6AF6D142C559EEF3672631C846E612968D57BE7F71C1C4F ] VaultSvc        C:\Windows\system32\lsass.exe

14:48:37.0687 0x0ea4  VaultSvc - ok

14:48:37.0729 0x0ea4  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

14:48:37.0738 0x0ea4  vdrvroot - ok

14:48:37.0779 0x0ea4  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe

14:48:37.0819 0x0ea4  vds - ok

14:48:37.0852 0x0ea4  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

14:48:37.0865 0x0ea4  vga - ok

14:48:37.0880 0x0ea4  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys

14:48:37.0920 0x0ea4  VgaSave - ok

14:48:37.0948 0x0ea4  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys

14:48:37.0962 0x0ea4  vhdmp - ok

14:48:37.0981 0x0ea4  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys

14:48:37.0990 0x0ea4  viaide - ok

14:48:38.0007 0x0ea4  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

14:48:38.0018 0x0ea4  volmgr - ok

14:48:38.0063 0x0ea4  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

14:48:38.0081 0x0ea4  volmgrx - ok

14:48:38.0100 0x0ea4  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys

14:48:38.0116 0x0ea4  volsnap - ok

14:48:38.0142 0x0ea4  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys

14:48:38.0155 0x0ea4  vsmraid - ok

14:48:38.0233 0x0ea4  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe

14:48:38.0298 0x0ea4  VSS - ok

14:48:38.0319 0x0ea4  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys

14:48:38.0348 0x0ea4  vwifibus - ok

14:48:38.0370 0x0ea4  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys

14:48:38.0399 0x0ea4  vwififlt - ok

14:48:38.0417 0x0ea4  [ 6A638FC4BFDDC4D9B186C28C91BD1A01, 5521F1DC515586777EC4837E0AEAA3E613CC178AF1074031C4D0D0C695A93168 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys

14:48:38.0431 0x0ea4  vwifimp - ok

14:48:38.0463 0x0ea4  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll

14:48:38.0501 0x0ea4  W32Time - ok

14:48:38.0525 0x0ea4  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys

14:48:38.0541 0x0ea4  WacomPen - ok

14:48:38.0578 0x0ea4  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

14:48:38.0607 0x0ea4  WANARP - ok

14:48:38.0612 0x0ea4  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

14:48:38.0641 0x0ea4  Wanarpv6 - ok

14:48:38.0736 0x0ea4  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe

14:48:38.0807 0x0ea4  wbengine - ok

14:48:38.0857 0x0ea4  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

14:48:38.0886 0x0ea4  WbioSrvc - ok

14:48:38.0917 0x0ea4  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll

14:48:38.0949 0x0ea4  wcncsvc - ok

14:48:38.0969 0x0ea4  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

14:48:38.0981 0x0ea4  WcsPlugInService - ok

14:48:39.0017 0x0ea4  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\DRIVERS\wd.sys

14:48:39.0026 0x0ea4  Wd - ok

14:48:39.0107 0x0ea4  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

14:48:39.0136 0x0ea4  Wdf01000 - ok

14:48:39.0160 0x0ea4  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost  C:\Windows\system32\wdi.dll

14:48:39.0177 0x0ea4  WdiServiceHost - ok

14:48:39.0182 0x0ea4  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost   C:\Windows\system32\wdi.dll

14:48:39.0195 0x0ea4  WdiSystemHost - ok

14:48:39.0228 0x0ea4  [ 4E89FC53493704BF835F0300DC201C34, FB3080725E144D93512DED81047D21C0582BC3412250EFF37E039108D7351F53 ] WebClient       C:\Windows\System32\webclnt.dll

14:48:39.0253 0x0ea4  WebClient - ok

14:48:39.0282 0x0ea4  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll

14:48:39.0318 0x0ea4  Wecsvc - ok

14:48:39.0347 0x0ea4  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

14:48:39.0379 0x0ea4  wercplsupport - ok

14:48:39.0393 0x0ea4  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll

14:48:39.0424 0x0ea4  WerSvc - ok

14:48:39.0440 0x0ea4  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

14:48:39.0469 0x0ea4  WfpLwf - ok

14:48:39.0491 0x0ea4  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

14:48:39.0501 0x0ea4  WIMMount - ok

14:48:39.0518 0x0ea4  WinDefend - ok

14:48:39.0526 0x0ea4  WinHttpAutoProxySvc - ok

14:48:39.0570 0x0ea4  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

14:48:39.0617 0x0ea4  Winmgmt - ok

14:48:39.0698 0x0ea4  [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM           C:\Windows\system32\WsmSvc.dll

14:48:39.0782 0x0ea4  WinRM - ok

14:48:39.0815 0x0ea4  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\drivers\WinUsb.sys

14:48:39.0828 0x0ea4  WinUsb - ok

14:48:39.0928 0x0ea4  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll

14:48:39.0963 0x0ea4  Wlansvc - ok

14:48:40.0179 0x0ea4  [ 357CABBF155AFD1D3926E62539D2A3A7, C43CFF84E7D930B4999DC061AB0766B57AAD7540B3E6EE54605B10ECE90825F5 ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

14:48:40.0251 0x0ea4  wlidsvc - ok

14:48:40.0292 0x0ea4  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys

14:48:40.0325 0x0ea4  WmiAcpi - ok

14:48:40.0361 0x0ea4  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

14:48:40.0393 0x0ea4  wmiApSrv - ok

14:48:40.0419 0x0ea4  WMPNetworkSvc - ok

14:48:40.0452 0x0ea4  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll

14:48:40.0482 0x0ea4  WPCSvc - ok

14:48:40.0532 0x0ea4  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

14:48:40.0610 0x0ea4  WPDBusEnum - ok

14:48:40.0650 0x0ea4  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

14:48:40.0680 0x0ea4  ws2ifsl - ok

14:48:40.0696 0x0ea4  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\system32\wscsvc.dll

14:48:40.0713 0x0ea4  wscsvc - ok

14:48:40.0717 0x0ea4  WSearch - ok

14:48:40.0844 0x0ea4  [ 6075791ED85E47A2A2916B1F34582944, 25B5FAD161711875B38BDD014A26FA527C8EE4854D485989D19A72D5EBBA4054 ] wuauserv        C:\Windows\system32\wuaueng.dll

14:48:40.0943 0x0ea4  wuauserv - ok

14:48:40.0987 0x0ea4  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

14:48:41.0016 0x0ea4  WudfPf - ok

14:48:41.0038 0x0ea4  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

14:48:41.0063 0x0ea4  WUDFRd - ok

14:48:41.0083 0x0ea4  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

14:48:41.0096 0x0ea4  wudfsvc - ok

14:48:41.0164 0x0ea4  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc         C:\Windows\System32\wwansvc.dll

14:48:41.0209 0x0ea4  WwanSvc - ok

14:48:41.0221 0x0ea4  ================ Scan global ===============================

14:48:41.0253 0x0ea4  [ 168EA9CD9BD6056BB6F60B57D5304BBE, 5A2F98754F042A7D80E7483842967EB362F01D57CE9720B24C7EDAA047F24C6F ] C:\Windows\system32\basesrv.dll

14:48:41.0295 0x0ea4  [ CE14A4BBF890A7D4C898CF886D145EC9, AD4BE7CBB0C624EC00E8496AF33AC5AB8C5689C75C66C4C99F2FB7149E912D18 ] C:\Windows\system32\winsrv.dll

14:48:41.0308 0x0ea4  [ CE14A4BBF890A7D4C898CF886D145EC9, AD4BE7CBB0C624EC00E8496AF33AC5AB8C5689C75C66C4C99F2FB7149E912D18 ] C:\Windows\system32\winsrv.dll

14:48:41.0333 0x0ea4  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll

14:48:41.0364 0x0ea4  [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe

14:48:41.0372 0x0ea4  [ Global ] - ok

14:48:41.0372 0x0ea4  ================ Scan MBR ==================================

14:48:41.0378 0x0ea4  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

14:48:41.0601 0x0ea4  \Device\Harddisk0\DR0 - ok

14:48:41.0601 0x0ea4  ================ Scan VBR ==================================

14:48:41.0618 0x0ea4  [ 99CB628D35DE652F46DDCC410001055A ] \Device\Harddisk0\DR0\Partition1

14:48:41.0620 0x0ea4  \Device\Harddisk0\DR0\Partition1 - ok

14:48:41.0624 0x0ea4  [ 7F40264E8F6566DEB7DA6C69B22E0B66 ] \Device\Harddisk0\DR0\Partition2

14:48:41.0626 0x0ea4  \Device\Harddisk0\DR0\Partition2 - ok

14:48:41.0629 0x0ea4  [ CB5C712B251FD4A5E8937C1FF594FE8B ] \Device\Harddisk0\DR0\Partition3

14:48:41.0631 0x0ea4  \Device\Harddisk0\DR0\Partition3 - ok

14:48:41.0631 0x0ea4  ================ Scan generic autorun ======================

14:48:42.0058 0x0ea4  [ 16438B000BF56F2CD7FDB5E6C3B38C7E, 32D6E69E6367D3ADB2189DA89103CB9910CE791EFB0879515DDD380A96D85BAE ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

14:48:42.0376 0x0ea4  RtHDVCpl - ok

14:48:42.0707 0x0ea4  [ 515522D22189A1BFECA44EAC09CE3FA4, 2F0BB4B68530DCAE3918771FBD8EA7D78600150FD453195066CEECB89F9135A5 ] c:\program files (x86)\emsisoft anti-malware\a2guard.exe

14:48:42.0950 0x0ea4  emsisoft anti-malware - ok

14:48:43.0166 0x0ea4  [ E3BF29CED96790CDAAFA981FFDDF53A3, 76CB27EF7B27E5636EDA9D95229519B2A2870729A0BB694F1FD11CD602BAC4DC ] C:\Program Files\Windows Sidebar\sidebar.exe

14:48:43.0210 0x0ea4  Sidebar - ok

14:48:43.0221 0x0ea4  AV detected via SS2: Emsisoft Anti-Malware, C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2start.exe ( 11.0.0.6054 ), 0x41000 ( enabled : updated )

14:48:43.0225 0x0ea4  Win FW state via NFP2: enabled ( trusted )

14:48:43.0225 0x0ea4  ============================================================

14:48:43.0225 0x0ea4  Scan finished

14:48:43.0225 0x0ea4  ============================================================

14:48:43.0235 0x0364  Detected object count: 1

14:48:43.0235 0x0364  Actual detected object count: 1

14:49:22.0629 0x0364  MEMSWEEP2 ( UnsignedFile.Multi.Generic ) - skipped by user

14:49:22.0629 0x0364  MEMSWEEP2 ( UnsignedFile.Multi.Generic ) - User select action: Skip

Alle Zeitangaben in WEZ +1. Es ist jetzt 16:51 Uhr.

Seite 1 von 2

100 Beiträge dieses Themas auf einer Seite anzeigen

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131