Trojaner-Board
Seite 1 von 2 1 2
100 Beitrge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Google Chrome lsst sich nicht mehr ffnen (https://www.trojaner-board.de/183889-google-chrome-laesst-mehr-oeffnen.html)

chaaali 10.01.2017 19:14
Google Chrome lsst sich nicht mehr ffnen
 
Hallo liebes Forum,

ich habe folgendes Problem, seit ein paar Tagen lsst sich mein Google Chrome nicht mehr ffnen. Das Problem ist das ich im Browser sehr viele Favoriten abgespeichert habe, die ziemlich wichtig sind. Ansonsten wrde ich es natrlich mit einer Neuinstallation vom Browser versuchen.

Im Anhang poste ich mal die LOGs vom FRST und Antimalware.


mfg

Additon:

Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 08-01-2017
durchgeführt von Charlie (10-01-2017 18:56:52)
Gestartet von M:\downloads
Windows 10 Home Version 1607 (X64) (2017-01-06 13:43:33)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1747016203-3155398904-578371931-500 - Administrator - Disabled)
Charlie (S-1-5-21-1747016203-3155398904-578371931-1000 - Administrator - Enabled) => C:\Users\Charlie
DefaultAccount (S-1-5-21-1747016203-3155398904-578371931-503 - Limited - Disabled)
Gast (S-1-5-21-1747016203-3155398904-578371931-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1747016203-3155398904-578371931-1002 - Limited - Enabled)
Test1 (S-1-5-21-1747016203-3155398904-578371931-1003 - Limited - Enabled) => C:\Users\Test1

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.18) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.18 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
Alps Pointing-device for VAIO (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version:  - ALPS ELECTRIC CO., LTD.)
Apple Application Support (32-Bit) (HKLM-x32\...\{D079CAAD-0C31-47A2-9AF5-A82F9CD9B221}) (Version: 5.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{64E6007B-1DA9-42CD-BBE4-D5FA67A7C71D}) (Version: 5.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{61438020-DDD4-42FA-99A2-50225441980A}) (Version: 2.0.1.142 - ArcSoft)
ArcSoft WebCam Companion 4 (HKLM-x32\...\{C793AD32-2BB8-4CC4-ABD3-A1469C21593C}) (Version: 4.0.21.444 - ArcSoft)
ASUS Xonar U3 Audio (HKLM\...\C-Media CM112 Like Sound Driver) (Version:  - )
Atheros WiFi Driver Installation (HKLM-x32\...\{7D916FA5-DAE9-4A25-B089-655C70EAF607}) (Version: 3.0 - Atheros)
AutoCAD 2012 - Deutsch (HKLM\...\AutoCAD 2012 - Deutsch) (Version: 18.2.51.0 - Autodesk)
AutoCAD 2012 - Deutsch (Version: 18.2.51.0 - Autodesk) Hidden
AutoCAD 2012 Language Pack - Deutsch (Version: 18.2.51.0 - Autodesk) Hidden
Autodesk CAD Manager Tools (HKLM\...\{5783F2D7-0111-0409-0110-0060B0CE6BBA}) (Version: 16.0.0.65 - Autodesk)
Autodesk Content Service (HKLM-x32\...\{086F9A69-CD39-4893-A9FB-D3A0634CE3F7}) (Version: 2.0.90 - Autodesk)
Autodesk Inventor Fusion 2012 (HKLM\...\Autodesk Inventor Fusion 2012) (Version: 1.0.0.79 - Autodesk, Inc.)
Autodesk Inventor Fusion 2012 (Version: 1.0.0.79 - Autodesk, Inc.) Hidden
Autodesk Inventor Fusion 2012 Language Pack (Version: 1.0.0.79 - Autodesk, Inc.) Hidden
Autodesk Inventor Fusion plug-in for AutoCAD 2012 (HKLM\...\Autodesk Inventor Fusion Plugin for AutoCAD 2012) (Version: 0.0.1.138 - Autodesk)
Autodesk Inventor Fusion Plugin for AutoCAD 2012 (Version: 0.0.1.138 - Autodesk) Hidden
Autodesk Inventor Fusion Plugin Language Pack for AutoCAD 2012 (Version: 0.0.1.138 - Autodesk) Hidden
Autodesk Material Library 2012 (HKLM-x32\...\{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}) (Version: 2.5.0.8 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2012 (HKLM-x32\...\{65420DC9-306E-4371-905F-F4DC3B418E52}) (Version: 2.5.0.8 - Autodesk)
Autodesk Network License Manager (HKLM\...\{4BE91685-1632-47FC-B563-A8A542C6664C}) (Version: 11.12.0 - Autodesk)
Bing Bar (HKLM-x32\...\{B4089055-D468-45A4-A6BA-5A138DD715FC}) (Version: 7.0.850.0 - Microsoft Corporation)
Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.3.0.95 - Atheros Communications)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Canon MG5100 series Benutzerregistrierung (HKLM-x32\...\Canon MG5100 series Benutzerregistrierung) (Version:  - )
Canon MG5100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5100_series) (Version:  - )
Canon MP490 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP490_series) (Version:  - )
Cisco AnyConnect Secure Mobility Client  (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 4.1.06020 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (x32 Version: 4.1.06020 - Cisco Systems, Inc.) Hidden
CodeMeter Runtime Kit v5.20d (HKLM\...\{8C023241-C568-4418-80DC-489A386309D6}) (Version: 5.20.1471.504 - WIBU-SYSTEMS AG)
CollageIt 1.9.4 (HKLM-x32\...\{D9757258-30B2-496E-86F2-84920C5858E1}_is1) (Version: 1.9.4 - PearlMountain Technology Co., Ltd)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.0.53 - Conexant)
CyberGhost 5 (HKLM\...\CyberGhost VPN 5_is1) (Version:  - CyberGhost S.R.L.)
CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version:  - CyberGhost S.R.L.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Defraggler (HKLM\...\Defraggler) (Version: 2.08 - Piriform)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.31 - DivX, LLC)
Dropbox (HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\Dropbox) (Version: 16.4.30 - Dropbox, Inc.)
eDocPrinter PDF Pro 6.83(x64) MSI (HKLM\...\{25D2FD16-E31B-43EE-B468-701FDFB14408}) (Version: 6.83.6171 - ITeksoft Corporation)
eDocPrintPro (HKLM\...\{D0FE768A-B5CA-450B-91C9-5D699A6CD0C9}) (Version: 3.24.5 - MAY Computer)
eDocPrintPro v3.17.0 (HKLM\...\{EE92BF61-A3C6-451B-9EA5-34A8C0895B67}) (Version: 3.17.0 - MAY-Computer)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 17.2.19144 - Landesfinanzdirektion Thüringen)
Epson Easy Photo Print 2 (HKLM-x32\...\{87C2248A-C7DD-49ED-9BCD-B312A9D0819E}) (Version: 2.1.0.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{48F22622-1CC2-4A83-9C1E-644DD96F832D}) (Version: 2.30.00 - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - )
Epson Stylus SX510W_TX550W Handbuch (HKLM-x32\...\Epson Stylus SX510W_TX550W Benutzerhandbuch) (Version:  - )
EPSON SX510W Series Printer Uninstall (HKLM\...\EPSON SX510W Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Setup (HKLM-x32\...\{FFFAE01B-466F-4C07-9821-A94FD753BDDA}) (Version: 3.1a - SEIKO EPSON CORPORATION)
ESS Energie Indikator (HKLM-x32\...\{9A6518F6-D319-49C9-9AB6-7FF77F082503}) (Version: 2011.0 - Nemetschek Allplan GmbH)
Facebook Video Calling 2.0.0.447 (HKLM-x32\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited)
FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production)
FH-Aachen OpenVPN 2.2.0 (HKLM-x32\...\FH-Aachen OpenVPN) (Version: 2.2.0 - )
FILSHtray (HKLM-x32\...\{5928359F-BF46-4646-BF19-B64E55171EB5}) (Version: 0.12 - FILSH Media GmbH)
Firebird 2.5.1.26351 (Win32) (HKLM-x32\...\FBDBServer_2_5_is1) (Version: 2.5.1.26351 - Firebird Project)
fischer Application Modules (HKLM-x32\...\{0358614B-C5D0-46B0-86C6-2B658BE68E20}) (Version: 2.0.0 - fischerwerke GmbH & Co. KG)
Foto-Mosaik-Edda Standard V6.8.12318.1 (HKLM-x32\...\{A2D6ECD0-7E52-42B7-9236-DB2951436616}_is1) (Version:  - Steffen Schirmer)
FreeOCR 3.0 (HKLM\...\{108A39BF-4ED1-4293-B11A-06BD521FB8F7}) (Version: 3.0 - Free OCR)
FreePDF (Remove only) (HKLM-x32\...\FreePDF_XP) (Version:  - )
Frilo (HKLM-x32\...\Frilo) (Version:  - )
Frilo Installation (HKLM-x32\...\{9B7A87BB-BB10-4991-A89C-E38660A76B05}) (Version: 1.0.0 - Frilo)
Frilo.System.Next (HKLM-x32\...\{3FB8343E-1722-4866-BD71-A935FE07B550}) (Version: 3.11.27 - Friedrich + Lochner GmbH)
FriloBase (HKLM-x32\...\{4DBEF603-5CE5-4629-8B79-FAA95CC46915}) (Version: 1.0.0 - Friedrich + Lochner GmbH)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
General Runtime Files for Allplan 2011-1-5 (x32 Version: 1.3.0.0 - Nemetschek Allplan GmbH) Hidden
General Runtime Files for Allplan 2012-1 Release (x32 Version: 1.6.0.0 - Nemetschek Allplan GmbH) Hidden
General Runtime Files for Allplan 2015-0-1 (x32 Version: 1.8.1.0 - Nemetschek Allplan Systems GmbH) Hidden
General Runtime Files for Allplan 2015-0-1 x64 (Version: 1.5.0.0 - Nemetschek Allplan Systems GmbH) Hidden
General Runtime Files for Nemetschek Softlock 2006 (x32 Version: 1.3.0.0 - Nemetschek) Hidden
General Runtime Files for Nemetschek Softlock 2006 64 (Version: 1.2.0.0 - Nemetschek) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.04) (Version: 9.04 - Artifex Software Inc.)
gs_x64 (HKLM\...\{2E415339-7210-4A3B-84EA-E50FE7565F0D}) (Version: 9.00 - MAY-Computer)
gs_x64 (HKLM\...\{86395DC4-1E85-4F88-840B-A686F0C51B03}) (Version: 9.18.1 - MAY Computer)
HDB (HKLM-x32\...\HDB) (Version: 11.42 - Halfen GmbH)
HDB (x32 Version: 11.41 - Halfen GmbH) Hidden
HDB (x32 Version: 11.42 - Halfen GmbH) Hidden
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.8.208 - SurfRight B.V.)
HP Deskjet 2050 J510 series - Grundlegende Software für das Gerät (HKLM\...\{DF37555F-0259-43DA-B60C-47106FA14AA3}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
HP Deskjet 2050 J510 series Hilfe (HKLM-x32\...\{7A3DF2E2-CF13-44FB-A93E-F71D5381DB3F}) (Version: 140.0.61.61 - Hewlett Packard)
HP Officejet 6500 E710n-z - Grundlegende Software für das Gerät (HKLM\...\{56F91CE8-0168-4619-8FEC-13F5087E40F8}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
iCloud (HKLM\...\{4BB313CE-D3D1-424C-8823-15CF85B00B05}) (Version: 6.1.0.30 - Apple Inc.)
iFunbox (v3.0.3105.1322) (HKLM-x32\...\iFunbox_is1) (Version: v3.0.3105.1322 - iFunbox DevTeam)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.6.0 - LIGHTNING UK!)
InfoCAD 14.1 (HKLM-x32\...\InfoCAD) (Version:  - InfoGraph GmbH, Kackertstrasse 10, 52072 Aachen, Germany)
InfoCAD Studienversion 13.0a (HKLM-x32\...\InfoCAD Studienversion) (Version:  - InfoGraph GmbH, Kackertstrasse 10, 52072 Aachen, Germany)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Visual Fortran Redistributables on IA-32 (HKLM-x32\...\{9CBDC468-CCE7-428A-8F68-CFD1B436457D}) (Version: 15.0.108 - Intel Corporation)
-isb cad- 2013 Academy (x32 Version: 26.00.0000 - GLASER -isb cad- Programmsysteme GmbH) Hidden
-isb cad- 2014 (x32 Version: 27.00.0000 - GLASER -isb cad- Programmsysteme GmbH) Hidden
-isb cad- 2014 Academy (x32 Version: 27.00.0000 - GLASER -isb cad- Programmsysteme GmbH) Hidden
-isb cad- 2014 Academy Bibliothek (HKLM-x32\...\{A8856EF7-8991-444B-9816-A6CF6ADCA057}) (Version: 1.00.0000 - GLASER -isb cad- Programmsysteme GmbH)
-isb cad- 2015 (HKLM-x32\...\{972BECC5-D668-4926-9095-9BF7D69B9A71}) (Version: 28.00.0000 - GLASER -isb cad- Programmsysteme GmbH)
-isb cad- 2015 (x32 Version: 28.00.0000 - GLASER -isb cad- Programmsysteme GmbH) Hidden
iTunes (HKLM\...\{E109B4A3-9883-4E6E-9A19-4D7E1A88AFE8}) (Version: 12.4.2.4 - Apple Inc.)
Java SE Development Kit 7 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170250}) (Version: 1.7.0.250 - Oracle)
Java(TM) SE Development Kit 7 Update 1 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170010}) (Version: 1.7.0.10 - Oracle)
Java(TM) SE Development Kit 7 Update 3 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170030}) (Version: 1.7.0.30 - Oracle)
JavaFX 2.0.3 (64-bit) (HKLM\...\{1111706F-666A-4037-7777-203648764D10}) (Version: 2.0.3 - Oracle Corporation)
JavaFX 2.0.3 SDK (64-bit) (HKLM\...\{2222706F-666A-4037-7777-203648764D10}) (Version: 2.0.3 - Oracle Corporation)
JavaFX 2.1.0 (HKLM-x32\...\{1111706F-666A-4037-7777-210328764D10}) (Version: 2.1.0 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Maple 16 (HKLM\...\Maple 16) (Version:  - Maplesoft)
Maple 16 (HKLM-x32\...\Maple 16) (Version: 16.0.0.0 - Maplesoft)
mb Lizenz-Server (HKLM\...\{EA97433E-FB42-4FDA-9435-ECD1B4C7CB92}) (Version: 20.12.1015 - mb AEC Software GmbH)
mb WorkSuite 2014 (HKLM-x32\...\{EC7D1F2E-5BD1-4488-9C31-D4F686508BD4}) (Version: 20.14.0820 - mb AEC Software GmbH)
Media Gallery (Version: 1.5.0.17050 - Your Company Name) Hidden
MediaMonkey 3.2 (HKLM-x32\...\MediaMonkey_is1) (Version: 3.2 - Ventis Media Inc.)
Mepla Iso (HKLM-x32\...\{DE9C586C-20D0-4E46-9816-177B90D73D7F}) (Version: 1.2.2 - Mepla Software)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\OneDriveSetup.exe) (Version: 17.3.6720.1207 - Microsoft Corporation)
Microsoft Report Viewer 2012 Runtime (HKLM-x32\...\{A047101C-A3AE-4FAD-802F-01C965079F66}) (Version: 11.1.3010.3 - Microsoft Corporation)
Microsoft Report Viewer Redistributable 2008 (KB971119) (HKLM-x32\...\Microsoft Report Viewer Redistributable 2008 (KB971119)) (Version:  - Microsoft Corporation)
Microsoft Report Viewer Redistributable 2008 SP1 (HKLM-x32\...\Microsoft Report Viewer Redistributable 2008 SP1) (Version:  - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 DEU  (HKLM\...\{98225B15-ECF5-4645-B5AC-F8C5E869A5D5}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{99AC7F47-A4E0-4706-9C65-8948775C2652}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft Visual Basic Power Packs 3.0 (HKLM-x32\...\{7B4D193B-D76D-308B-8B12-5D9BB1CBCE6C}) (Version: 9.0.30214 - Microsoft)
Microsoft Visual Basic PowerPacks 10.0 (HKLM-x32\...\{2D9F8079-7D50-3EFD-B3BD-ED642E4EE756}) (Version: 10.0.20911 - Microsoft)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.2.173.0 - Microsoft Corporation)
MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Nemetschek Allplan 2011 (HKLM-x32\...\{DF71C8D1-9258-4504-89AF-BA80748CC0D2}) (Version: 2011.0 - Nemetschek Allplan GmbH)
Nemetschek Allplan 2012 (HKLM-x32\...\{E293B9FB-2753-4B39-89ED-4812FAF358D1}) (Version: 2012.0 - Nemetschek Allplan GmbH)
Nemetschek Allplan 2015 (HKLM-x32\...\{2D6C562A-839E-4D16-903C-A5987EB61948}) (Version: 2015.0 - Nemetschek Allplan Systems GmbH)
Nemetschek SoftLock 2006 (HKLM-x32\...\{7262D0C8-41CC-4F75-8383-A6C7C61D7FC6}) (Version: 1.26.55 - Nemetschek Allplan Systems GmbH)
Nur Entfernen der CopyTrans Suite möglich (HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\CopyTrans Suite) (Version: 2.37 - WindSolutions)
NVIDIA 3D Vision Treiber 269.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 269.73 - NVIDIA Corporation)
NVIDIA Grafiktreiber 269.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 269.73 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.2.24.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.2.24.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.12.0507 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0507 - NVIDIA Corporation)
Opera Stable 42.0.2393.94 (HKLM-x32\...\Opera 42.0.2393.94) (Version: 42.0.2393.94 - Opera Software)
PDF Architect (HKLM-x32\...\{80A07844-CA64-4DE4-AB61-D37DDBE8074F}) (Version: 1.0.52.8917 - pdfforge)
PDF Blender (HKLM-x32\...\PDF Blender) (Version:  - )
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.6.2 - pdfforge)
PDF-XChange 2012 Pro (HKLM\...\{F92F0AAB-2EF6-412C-8BF4-0B11EB535280}_is1) (Version: 5.0.266.0 - Tracker Software Products Ltd)
PDF-XChange Viewer (HKLM\...\{9ED333F8-3E6C-4A38-BAFA-728454121CDA}) (Version: 2.5.199.0 - Tracker Software Products Ltd.)
PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.5.02.12220 - Sony Corporation)
PMB VAIO Edition Guide (x32 Version: 1.5.00.02250 - Sony Corporation) Hidden
PMB VAIO Edition Plug-in (Version: 1.5.10.05300 - Sony Corporation) Hidden
PMB VAIO Edition Plug-in (x32 Version: 1.5.00.02250 - Sony Corporation) Hidden
PMB VAIO Edition Plug-in (x32 Version: 1.5.10.06150 - Sony Corporation) Hidden
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
PPÖúÊÖ PC°æ 1.1.0.2 (HKLM-x32\...\PPÖúÊÖ PC°æ) (Version: 1.1.0.2 - ¹ãÖÝÌúÈËÍøÂç¿Æ¼¼ÓÐÏÞ¹«Ë¾)
Qualcomm Atheros Direct Connect (x32 Version: 3.0 - Qualcomm Atheros) Hidden
Quick Web Access (HKLM-x32\...\splashtop) (Version: 1.4.6.9 - Sony Corporation)
Quick Web Access (x32 Version: 1.4.6.9 - Sony Corporation) Hidden
QuickTime 7 (HKLM-x32\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.92 - Realtek Semiconductor Corp.)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version:  - )
Remote Keyboard (x32 Version: 1.1.1.07060 - Sony Corporation) Hidden
Remote Play with PlayStation 3 (x32 Version: 1.1.0.15070 - Sony Corporation) Hidden
RuckZuck Student (HKLM-x32\...\{C0697894-E24F-435D-B98B-A2DEC959472A}) (Version: 6.0.11 - MURSOFT)
s+v Planungssoftware (HKLM-x32\...\{7527DFCD-6632-4A4F-9EC9-B081A84B5743}) (Version: 2.0.7 - s+v gmbh)
Schöck BOLE (HKLM-x32\...\{13705285-F119-48e8-A70C-456A2E25CA31}_is1) (Version:  - Schöck Bauteile GmbH)
Secunia PSI (2.0.0.4002) (HKLM-x32\...\Secunia PSI) (Version:  - )
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft) Hidden
Sony Corporation (Version: 1.0.0 - Default Company Name) Hidden
Spotify (HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\Spotify) (Version: 1.0.42.151.g19de0aa6 - Spotify AB)
SSLx64 (Version: 1.0.0 - Sony Corporation ) Hidden
SSLx86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer)
UltraVnc (HKLM\...\Ultravnc2_is1) (Version: 1.0.9.6.1 - uvnc bvba)
USB PnP Sound Device (HKLM\...\C-Media CM108 Like Sound Driver) (Version:  - )
VAIO - Media Gallery (HKLM-x32\...\{EB91AE13-BCA6-41F4-9804-62C4724549F2}) (Version: 1.5.1.17050 - Sony Corporation)
VAIO - PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{339F9B4D-00CB-4C1C-BED8-EC86A9AB602A}) (Version: 1.5.00.02250 - Sony Corporation)
VAIO - PMB VAIO Edition Plug-in (HKLM-x32\...\InstallShield_{22008CF9-2B54-4022-AFD8-3B7D42C89E6B}) (Version: 1.6.10.11160 - Sony Corporation)
VAIO - Remote Play mit PlayStation®3 (HKLM-x32\...\{07441A52-E208-478A-92B7-5C337CA8C131}) (Version: 1.1.0.15070 - Sony Corporation)
VAIO - Remote-Tastatur  (HKLM-x32\...\{7396FB15-9AB4-4B78-BDD8-24A9C15D2C65}) (Version: 1.1.0.07060 - Sony Corporation)
VAIO Care (HKLM\...\{6EEC3E9C-3479-42EB-B93C-E7DF7927DD82}) (Version: 8.4.4.09181 - Sony Corporation)
VAIO Care Recovery (HKLM\...\{6ED1750E-F44F-4635-8F0D-B76B9262B7FB}) (Version: 1.1.1.13230 - Sony Corporation)
VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.5.0.03040 - Sony Corporation)
VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.6.0.13140 - Sony Corporation)
VAIO Data Restore Tool (x32 Version: 1.6.0.13140 - Sony Corporation) Hidden
VAIO Easy Connect (HKLM-x32\...\InstallShield_{7C80D30A-AC02-4E3F-B95D-29F0E4FF937B}) (Version: 1.1.2.01120 - Sony Corporation)
VAIO Easy Connect (x32 Version: 1.1.2.01120 - Sony Corporation) Hidden
VAIO Event Service (HKLM-x32\...\{73D8886A-D416-4687-B609-0D3836BA410C}) (Version: 5.5.0.03040 - Sony Corporation)
VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 2.4.0.06210 - Sony Corporation)
VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 2.4.0.03240 - Sony Corporation)
VAIO Hardware Diagnostics (x32 Version: 4.2.0.14280 - Sony Corporation) Hidden
VAIO Hero Screensaver - Summer 2011 Screensaver (HKLM-x32\...\VAIO Hero Screensaver - Summer 2011 Screensaver) (Version:  - )
VAIO Improvement (HKLM-x32\...\{3A26D9BD-0F73-432D-B522-2BA18138F7EF}) (Version: 1.0.0.14150 - Sony Corporation)
VAIO Improvement Validation (HKLM\...\{75C95C84-264F-4CC7-8A7E-346444E6C7C1}) (Version: 1.0.4.01190 - Sony Corporation)
VAIO Sample Contents (HKLM-x32\...\{547C9EB4-4CA6-402F-9D1B-8BD30DC71E44}) (Version: 1.4.2.09010 - Sony Corporation)
VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.8.1.08270 - Sony Corporation)
VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 7.2.0.16270 - Sony Corporation)
VAIO-Handbuch (HKLM-x32\...\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}) (Version: 2.0.0.02250 - Sony Corporation)
VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.4.0.14230 - Sony Corporation)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VCCx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VESx64 (Version: 1.0.0 - Sony Corporation) Hidden
VESx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
Virtual DJ - Atomix Productions (HKLM-x32\...\Virtual DJ - Atomix Productions) (Version:  - )
VIx64 (Version: 1.0.0 - Sony Corporation) Hidden
VIx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VSNx64 (Version: 1.0.0 - Sony Corporation) Hidden
VSNx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden
VUx64 (Version: 1.2.0 - Sony Corporation) Hidden
VUx86 (x32 Version: 1.2.0 - Sony Corporation) Hidden
VWSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
webcam 7 (HKLM-x32\...\webcam 7) (Version: 0.9.9.22 - Moonware Studios)
WibuKey Setup (WibuKey Remove) (HKLM\...\{00060000-0000-1004-8002-0000C06B5161}) (Version: Version 6.11 of 2013-Feb-27 (Build 1057) (Setup) - WIBU-SYSTEMS AG)
WinDirStat 1.1.2 (HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\WinDirStat) (Version:  - )
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Windows Mobile-Gerätecenter (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation)
WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 29.2.2013 - BillP Studios)
WinRAR 5.20 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основи Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотоколекція Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> M:\Programme\AutodeskPro\AutoCAD 2012 - Deutsch\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{B77E471C-FBF3-4CB5-880F-D7528AD4B349}\localserver32 -> M:\Programme\AutodeskPro\AutoCAD 2012 - Deutsch\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{C92FB640-AD4D-498A-9979-A51A2540C977}\localserver32 -> M:\Programme\AutodeskPro\AutoCAD 2012 - Deutsch\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> M:\Programme\AutodeskPro\AutoCAD 2012 - Deutsch\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> M:\Programme\AutodeskPro\AutoCAD 2012 - Deutsch\acadficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0129CC15-3D20-4335-AB5F-B6938FA3FECC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {0656EA79-40D9-4369-B45F-3A9E637AA164} - System32\Tasks\USER_ESRV_SVC => Wscript.exe //B //NoLogo "C:\Program Files\Sony\VAIO Care\ESRV\task.vbs"
Task: {06E1648D-50FF-456A-B021-BD6CA4C90322} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - \Microsoft\Windows\Tcpip\IpAddressConflict1 -> Keine Datei <==== ACHTUNG
Task: {0939B0DA-597A-4790-90F3-0E033B47AF01} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000Core => C:\Users\Charlie\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-25] (Dropbox, Inc.)
Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - \Microsoft\Windows\Tcpip\IpAddressConflict2 -> Keine Datei <==== ACHTUNG
Task: {0C9A0B32-1DCA-4EDA-95D4-DD083424BA9F} - \Microsoft\Windows\MobilePC\HotStart -> Keine Datei <==== ACHTUNG
Task: {1CA46AD9-19CB-4D14-AFB2-C14B74AAB7EE} - System32\Tasks\Allplan AutoUpdate 2011-1 => C:\Program Files (x86)\Nemetschek\Allplan\prg\NemDownloadHandler.exe [2012-01-30] (Nemetschek Allplan GmbH)
Task: {1D5CD141-FAC8-40D5-9B6F-AF4B5CAB15E8} - \Microsoft\Windows\Media Center\DispatchRecoveryTasks -> Keine Datei <==== ACHTUNG
Task: {1D800A8B-9CC7-4CF8-9280-632DC1459281} - \Sony Corporation\VAIO Care\VAIO Care -> Keine Datei <==== ACHTUNG
Task: {1E6D1945-FD59-4C89-A940-C5E01B8033DC} - \Microsoft\Windows\Media Center\PvrRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {1F1D4C60-0893-4CD2-B7CF-67F12DCF7DD9} - \Microsoft\Windows\Media Center\OCURDiscovery -> Keine Datei <==== ACHTUNG
Task: {1F59C079-8C39-4182-9B3B-B11376ACF972} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft)
Task: {22406AFB-2861-4621-BA56-4DC7327D80AE} - \Microsoft\Windows\Media Center\RecordingRestart -> Keine Datei <==== ACHTUNG
Task: {24DE4302-3D09-4AD7-A88C-45DC4D69BCD0} - \Microsoft\Windows\SideShow\SessionAgent -> Keine Datei <==== ACHTUNG
Task: {26864531-A651-4529-B7F8-D8E25F3D6F08} - \Microsoft\Windows\Media Center\SqlLiteRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {2847C385-A02C-4E58-B240-F46ECC8E4FBB} - \Sony Corporation\VAIO Care\CheckSystemInfo -> Keine Datei <==== ACHTUNG
Task: {2A572893-64E5-4BE5-A05C-338ED8107C5A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {2A7B2D86-7531-4619-8554-3D72E62E6901} - \Microsoft\Windows\Media Center\PeriodicScanRetry -> Keine Datei <==== ACHTUNG
Task: {2BEB40A9-C3FC-4F88-93CC-13F8D427342F} - System32\Tasks\WebContent AutoUpdate 2011 => C:\Program Files (x86)\Nemetschek\Allplan\prg\NemDownloadHandler.exe [2012-01-30] (Nemetschek Allplan GmbH)
Task: {2CE8503E-460E-4460-9DA5-348848B13727} - \Sony Corporation\VAIO Care\DeployCRMflag -> Keine Datei <==== ACHTUNG
Task: {2FC2C5DC-154A-4322-9422-F246FACE002C} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {30509C69-56BC-4B03-92AA-8550D9C47CD0} - \Sony Corporation\VAIO Care\UploadPOT -> Keine Datei <==== ACHTUNG
Task: {3460C1BB-8657-4496-B7FB-9D10C1883A5B} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {35D27A05-7E70-476C-8CA3-90D34CF4E96A} - \Microsoft\Windows\SideShow\AutoWake -> Keine Datei <==== ACHTUNG
Task: {38368FAA-96C9-4534-A6B8-149485012569} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000UA => C:\Users\Charlie\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-25] (Dropbox, Inc.)
Task: {3F2710BA-436C-4911-AC73-45C6D85FDB43} - System32\Tasks\Opera scheduled Autoupdate 1442130645 => C:\Program Files (x86)\Opera\launcher.exe [2016-12-19] (Opera Software)
Task: {3F4AA639-EF40-4EEA-ACA5-785A44C29D49} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {427F100F-D1B3-4C4D-A766-70699BBE1D4F} - System32\Tasks\AutoUpdate Allplan 2015 => C:\Program Files\Nemetschek\Allplan_2\prg\NemDownloadHandler.exe [2014-07-10] (Nemetschek Allplan Systems GmbH)
Task: {4444D920-1607-4935-BA91-55D3A7F9C4D6} - \Sony Corporation\VAIO Care\GetPOTInfo -> Keine Datei <==== ACHTUNG
Task: {4550860D-16F5-41C8-8CEA-2667E4687362} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2016-11-17] (Apple Inc.)
Task: {4A678A75-0424-4600-B2E6-E6B2A0F3F395} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2016-03-31] (Sony Corporation)
Task: {4F899A91-20A9-48C2-A319-5F91AFDE51CE} - \Microsoft\Windows\Setup\gwx\rundetector -> Keine Datei <==== ACHTUNG
Task: {53799CF4-AFE7-4A2F-AF6C-18B858D00BBE} - \Microsoft\Windows\Media Center\mcupdate -> Keine Datei <==== ACHTUNG
Task: {58A674C8-D34D-4D01-9D02-CB15ECE36060} - \Microsoft\Windows\Media Center\PvrScheduleTask -> Keine Datei <==== ACHTUNG
Task: {5A497CC6-D250-47A3-BA55-D6F02952D348} - System32\Tasks\WebContent AutoUpdate 2012 => C:\Program Files (x86)\Nemetschek\Allplan_1\prg\NemDownloadHandler.exe [2012-07-14] (Nemetschek Allplan GmbH)
Task: {5B4D0D5C-A6E7-4DF5-80C6-7E2AC667A342} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {648A9FFF-E650-4B4B-9C78-C0A81C34DDFF} - \Microsoft\Windows Live\SOXE\Extractor Definitions Update Task -> Keine Datei <==== ACHTUNG
Task: {67DAAB4F-6BEC-4267-987C-60D02988F8F2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-07-13] (Adobe Systems Incorporated)
Task: {6A8A3779-9082-4F4F-B618-80AF81D413A7} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: {6CE1F75B-BD56-4EFF-B649-C91957B0BBB8} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {6ECC967C-B059-42A2-A996-BF7F0FA3DEFE} - \Microsoft\Windows\Media Center\StartRecording -> Keine Datei <==== ACHTUNG
Task: {728131A6-9695-44B3-890D-516F1A5A2A63} - \Microsoft\Windows\Media Center\MediaCenterRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {74ED0844-1807-465F-8C50-B53E5C7C99BB} - \Sony Corporation\VAIO Gate\StartExecuteProxy -> Keine Datei <==== ACHTUNG
Task: {764683F8-0EDF-4D94-ACF3-C41C273EFF6E} - \Microsoft\Windows\Media Center\PBDADiscoveryW2 -> Keine Datei <==== ACHTUNG
Task: {76C64A82-DE66-43F2-A269-0D3A867F4FDE} - \Microsoft\Windows\Media Center\ehDRMInit -> Keine Datei <==== ACHTUNG
Task: {7A506969-EF77-4B81-A8F6-C711DCDD07A6} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {80D19B0F-A7FA-4189-B708-AD11F1F6009A} - \Microsoft\Windows\SideShow\SystemDataProviders -> Keine Datei <==== ACHTUNG
Task: {8192CD17-9B9A-4FE9-9BBE-8169FF3EC97E} - \Microsoft\Windows\Media Center\PBDADiscoveryW1 -> Keine Datei <==== ACHTUNG
Task: {8E4DA570-FA23-4642-B642-06E80FED1AFB} - \Microsoft\Windows\Media Center\PBDADiscovery -> Keine Datei <==== ACHTUNG
Task: {8ED1AD80-8747-4F31-834D-4A9A03405A8F} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {8FC439DD-E29B-4E99-97A6-9B2094BF7F7C} - \Sony Corporation\VAIO Improvement Validation\VAIO Improvement Validation -> Keine Datei <==== ACHTUNG
Task: {93B0DAC5-9839-47C0-8CD8-12989C442124} - \Microsoft\Windows\Media Center\UpdateRecordPath -> Keine Datei <==== ACHTUNG
Task: {977C5995-8005-4E6C-8681-8E52DC6ED9F6} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {97B18BE3-CEC5-4F24-B95A-76FCF2BDA543} - \Sony Corporation\VAIO Care\ActiveStatusCollect -> Keine Datei <==== ACHTUNG
Task: {9D15F457-6214-47ED-B671-9E8518EF366C} - System32\Tasks\AutoUpdate Allplan 2012 => C:\Program Files (x86)\Nemetschek\Allplan_1\prg\NemDownloadHandler.exe [2012-07-14] (Nemetschek Allplan GmbH)
Task: {A2402F39-EE10-4BA4-80C7-71A45D30DEFC} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {A83029A0-F118-4F70-8814-77C9A39DA8F1} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {A8F4A950-7C02-46C8-9B76-20AEFF15A51B} - \Sony Corporation\VAIO Improvement\VAIOImprovementUploader -> Keine Datei <==== ACHTUNG
Task: {ABC82619-3247-4E22-9E68-34EAC9D1554A} - \Microsoft\Windows\Media Center\OCURActivate -> Keine Datei <==== ACHTUNG
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - \Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor -> Keine Datei <==== ACHTUNG
Task: {B4290FA9-F87C-4081-BC2B-C68AB5E0D8C7} - \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {B4BCDECD-9911-43FB-A4C0-5A8202C3061D} - \Sony Corporation\VAIO Care\VCMetrics -> Keine Datei <==== ACHTUNG
Task: {B5E262B5-CE89-4A31-855A-CA897981873B} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {B6A5128A-CEA6-47C0-83B5-64C9DE7F9871} - \Microsoft\Windows\Media Center\RegisterSearch -> Keine Datei <==== ACHTUNG
Task: {B9759462-045D-4D13-A974-74012A8EAA30} - \Sony Corporation\VAIO Smart Network\VSN Logon Start -> Keine Datei <==== ACHTUNG
Task: {BCCF5659-7ACD-4107-A02F-BC1DA7A3A615} - \Microsoft\Windows\SideShow\GadgetManager -> Keine Datei <==== ACHTUNG
Task: {BD588BF4-14ED-4F1E-881E-05E35BF02FD5} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000Core => C:\Users\Charlie\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: {C01A0D1B-2DBB-458B-B9DC-052931858B87} - \Microsoft\Windows\Media Center\ActivateWindowsSearch -> Keine Datei <==== ACHTUNG
Task: {C0231ECF-28D5-40C8-8F83-A1E1724E4333} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {C1E388E8-45B9-4EB6-9789-5498FB9E114F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {C2843E4D-7C33-4F54-85B8-4E2D9D364517} - \Sony Corporation\VAIO Care\VCSelfHeal -> Keine Datei <==== ACHTUNG
Task: {C9F66D9C-3A54-49C4-9123-C860EE721B16} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {CE3D54E4-7EE2-4B48-AF60-B870C9A093D6} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {CF3383D3-5DF5-442D-8804-BC99AEF8D465} - \Microsoft\Windows\Media Center\ConfigureInternetTimeService -> Keine Datei <==== ACHTUNG
Task: {D2BA3FD6-698D-44D5-9A1B-EA1D5CCAF4EC} - \Sony Corporation\VAIO Gate\VAIO Gate -> Keine Datei <==== ACHTUNG
Task: {D50F7A0E-ECC6-4FDD-86D0-131145DF7786} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {E29BE826-BB98-41E0-A906-A70775DB0C74} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
Task: {E3488022-25BE-410D-9FAB-357CA6C701C5} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {E506ED86-C82F-4706-BFC0-4931CAD96C53} - \Sony Corporation\VAIO Care\VCCheckIolo -> Keine Datei <==== ACHTUNG
Task: {E6DBE41D-8EB9-48B9-80EB-AED1F3D15194} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2016-04-25] (Sony Corporation)
Task: {E76A7648-1A64-4B90-B79F-A875A5194E76} - \Microsoft\Windows\Media Center\InstallPlayReady -> Keine Datei <==== ACHTUNG
Task: {E773AD14-0135-4213-B884-0601FFC53DF2} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {E9F47158-7B2C-420A-9082-302FB16D1C9D} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {EB7EC233-7FEA-4429-AB18-6D2DA7062A9A} - \Microsoft\Windows\Media Center\ReindexSearchRoot -> Keine Datei <==== ACHTUNG
Task: {EE8BBA37-97BF-46AE-9345-D8F20F28C5C0} - \Sony Corporation\VAIO Care\UpdateSolution -> Keine Datei <==== ACHTUNG
Task: {EF6433F2-6E5F-458E-9077-CB9582345FDC} - \Sony Corporation\VAIO Care\VCRLog -> Keine Datei <==== ACHTUNG
Task: {F3F8CC5C-89B2-4209-B060-AC928D30C6E5} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {F74BF3CC-C03D-41B9-B61F-55FAE5ED7621} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000UA => C:\Users\Charlie\AppData\Local\Facebook\Update\FacebookUpdate.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\Allplan AutoUpdate 2011-1.job => C:\Program Files (x86)\Nemetschek\Allplan\prg\NemDownloadHandler.exe 7/f C:\Daten\Nemetschek\Allplan\Std\AllplanUpdate.inf
Task: C:\WINDOWS\Tasks\AutoUpdate Allplan 2012.job => C:\Program Files (x86)\Nemetschek\Allplan_1\prg\NemDownloadHandler.exe 9/f C:\Daten\Nemetschek\Allplan_1\Std\AllplanUpdate.inf
Task: C:\WINDOWS\Tasks\AutoUpdate Allplan 2015.job => C:\Program Files\Nemetschek\Allplan_2\prg\NemDownloadHandler.exe ;/f C:\Daten\Nemetschek\Allplan_1_1\Std\AllplanUpdate.inf
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000Core.job => C:\Users\Charlie\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000UA.job => C:\Users\Charlie\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000Core.job => C:\Users\Charlie\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000UA.job => C:\Users\Charlie\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\WebContent AutoUpdate 2011.job => C:\Program Files (x86)\Nemetschek\Allplan\prg\NemDownloadHandler.exe €/f C:\Daten\Nemetschek\Allplan\Std\AllplanUpdate.inf /one hxxp:/autoupdate.allplan.com/Updates/Allplan/MyPlan/WebContent.upd
Task: C:\WINDOWS\Tasks\WebContent AutoUpdate 2012.job => C:\Program Files (x86)\Nemetschek\Allplan_1\prg\NemDownloadHandler.exe ‡/f C:\Daten\Nemetschek\Allplan_1\Std\AllplanUpdate.inf /one hxxp:/autoupdate.allplan.com/Updates/Allplan/MyPlan/2012/WebContent.upd

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\Charlie\Desktop\Biegedrillknicknachweis.lnk -> C:\Program Files (x86)\InfoGraph\Biegedrillknicknachweis.bat ()
Shortcut: C:\Users\Charlie\Desktop\InfoCAD.lnk -> C:\Program Files (x86)\InfoGraph\InfoCAD.bat ()
Shortcut: C:\Users\Charlie\Desktop\Rissbreitennachweis.lnk -> C:\Program Files (x86)\InfoGraph\Rissbreitennachweis.bat ()
Shortcut: C:\Users\Charlie\Desktop\Systemviewer (64-Bit).lnk -> C:\Program Files (x86)\InfoGraph\Systemviewer (64-Bit).bat ()

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2012-03-02 14:31 - 2010-06-17 21:56 - 00087040 _____ () C:\WINDOWS\System32\redmonnt.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00413336 _____ () C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
2015-08-26 12:06 - 2015-08-26 12:06 - 00709272 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_modeler.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00130712 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_process_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00025752 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_system_power_state_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00059544 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_quality_and_reliability_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00194712 _____ () C:\Program Files\Sony\VAIO Care\ESRV\acpi_battery_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00159896 _____ () C:\Program Files\Sony\VAIO Care\ESRV\sema_thermal_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00158360 _____ () C:\Program Files\Sony\VAIO Care\ESRV\wifi_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00050840 _____ () C:\Program Files\Sony\VAIO Care\ESRV\devices_use_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00032920 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_disktrace_input.dll
2017-01-06 13:57 - 2016-08-01 13:54 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2017-01-06 15:43 - 2017-01-06 15:43 - 01678560 _____ () C:\Users\Charlie\AppData\Local\Microsoft\OneDrive\17.3.6720.1207_1\amd64\ClientTelemetry.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2017-01-06 13:39 - 2017-01-06 13:39 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2012-02-29 17:15 - 2008-07-11 08:04 - 00200704 _____ () C:\Windows\SysWOW64\HsMgr.exe
2017-01-06 16:10 - 2017-01-06 16:11 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-01-06 16:10 - 2017-01-06 16:11 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-01-06 16:10 - 2017-01-06 16:11 - 42130432 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-01-06 16:10 - 2017-01-06 16:11 - 02216448 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\roottools.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-01-07 11:06 - 2016-08-18 14:22 - 00174448 _____ () C:\Program Files\CyberGhost 6\Data\OpenVPN\liblzo2-2.dll
2017-01-07 11:06 - 2016-08-18 14:22 - 00112040 _____ () C:\Program Files\CyberGhost 6\Data\OpenVPN\libpkcs11-helper-1.dll
2016-11-17 01:29 - 2016-11-17 01:29 - 01041720 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2016-11-17 01:28 - 2016-11-17 01:28 - 00189752 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll
2016-11-17 01:29 - 2016-11-17 01:29 - 00080184 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)

HKU\S-1-5-21-1747016203-3155398904-578371931-1000\Software\Classes\.scr: scrfile =>  <===== ACHTUNG

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2015-06-28 17:55 - 00000855 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1      localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1747016203-3155398904-578371931-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Sony\VAIO 09 img2 Wallpaper 1366x768.jpg
DNS Servers: 194.187.251.67 - 185.93.180.131
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\Services: ACDaemon => 3
MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: AllplanUpdateLauncher 2015 => 2
MSCONFIG\Services: Apple Mobile Device Service => 2
MSCONFIG\Services: Atheros Bt&Wlan Coex Agent => 2
MSCONFIG\Services: Autodesk Content Service => 2
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: CGVPNCliService => 2
MSCONFIG\Services: CodeMeter.exe => 2
MSCONFIG\Services: DCDhcpService => 3
MSCONFIG\Services: EPSON_EB_RPCV4_01 => 2
MSCONFIG\Services: EPSON_PM_RPCV4_01 => 2
MSCONFIG\Services: FirebirdGuardianDefaultInstance => 2
MSCONFIG\Services: FirebirdServerDefaultInstance => 3
MSCONFIG\Services: fischerUpdateSvc => 2
MSCONFIG\Services: FLEXnet Licensing Service 64 => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: hasplms => 2
MSCONFIG\Services: IconMan_R => 2
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: LMS => 2
MSCONFIG\Services: mb Lizenz-Server => 2
MSCONFIG\Services: McComponentHostServiceSony => 3
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: nvservice => 2
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: OpenVPNService => 3
MSCONFIG\Services: PDF Architect Helper Service => 2
MSCONFIG\Services: PDF Architect Service => 2
MSCONFIG\Services: PMBDeviceInfoProvider => 2
MSCONFIG\Services: Secunia PSI Agent => 2
MSCONFIG\Services: Secunia Update Agent => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: SOHCImp => 3
MSCONFIG\Services: SOHDs => 3
MSCONFIG\Services: SpfService => 3
MSCONFIG\Services: Stereo Service => 2
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\Services: uCamMonitor => 2
MSCONFIG\Services: UNS => 2
MSCONFIG\Services: USER_ESRV_SVC => 3
MSCONFIG\Services: VAIO Event Service => 2
MSCONFIG\Services: VCFw => 3
MSCONFIG\Services: VcmIAlzMgr => 3
MSCONFIG\Services: VcmINSMgr => 3
MSCONFIG\Services: VcmXmlIfHelper => 3
MSCONFIG\Services: VCService => 3
MSCONFIG\Services: vpnagent => 2
MSCONFIG\Services: VSNService => 2
MSCONFIG\Services: VUAgent => 3
MSCONFIG\Services: w7Svc => 3
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^CodeMeter Control Center.lnk => C:\Windows\pss\CodeMeter Control Center.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^FILSHtray.lnk => C:\Windows\pss\FILSHtray.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Charlie^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Charlie^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Facebook Messenger.lnk => C:\Windows\pss\Facebook Messenger.lnk.Startup
MSCONFIG\startupreg: ACEStream => C:\Users\Charlie\AppData\Roaming\ACEStream\engine\ace_engine.exe
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: BCSSync => "M:\Programme\Microsoft Office 2010\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: CCleaner Monitoring => "M:\Programme\CCLeanerPro\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: Cm112GX64 => C:\Windows\system\HsMgr64.exe Envoke
MSCONFIG\startupreg: CyberGhost => "C:\Program Files\CyberGhost 5\CyberGhost.EXE" /autostart /min
MSCONFIG\startupreg: DAEMON Tools Lite => "M:\DaemonTools\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: DivXMediaServer => M:\Programme\WebDivix\DivX\DivX Media Server\DivXMediaServer.exe
MSCONFIG\startupreg: DivXUpdate => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
MSCONFIG\startupreg: Dropbox Update => "C:\Users\Charlie\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
MSCONFIG\startupreg: EEventManager => C:\PROGRA~2\EPSONS~1\EVENTM~1\EEVENT~1.EXE
MSCONFIG\startupreg: Facebook Update => "C:\Users\Charlie\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
MSCONFIG\startupreg: fischer Live Update => "C:\Program Files (x86)\fischer\Update\fischerUpdate.exe" -autostart
MSCONFIG\startupreg: FreePDF Assistant => "C:\Program Files (x86)\FreePDF_XP\fpassist.exe"
MSCONFIG\startupreg: Google Update => "C:\Users\Charlie\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Malwarebytes' Anti-Malware => "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
MSCONFIG\startupreg: msnmsgr => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: PlusService => "M:\Programme\MsPlus\PlusService.exe"
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Viber => "C:\Users\Charlie\AppData\Local\Viber\Viber.exe" StartMinimized
MSCONFIG\startupreg: Windows Mobile Device Center => %windir%\WindowsMobile\wmdc.exe
HKLM\...\StartupApproved\StartupFolder: => "Secunia PSI Tray.lnk"
HKLM\...\StartupApproved\Run: => "eDocPrintProMonitor"
HKLM\...\StartupApproved\Run: => "ApplyEsf-eDocPrintPro"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "Cisco AnyConnect Secure Mobility Agent for Windows"
HKLM\...\StartupApproved\Run32: => "PMBVolumeWatcher"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\StartupApproved\Run: => "Akamai NetSession Interface"
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\StartupApproved\Run: => "iFunBox"
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\StartupApproved\Run: => "WinPatrol"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [{A61230CF-F691-43CA-9549-7C24DF9CCD32}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{0CAC7BE2-B4B8-4B6F-BD0E-FA063FE3D8FE}] => C:\Program Files\iTunes\iTunes.exe
FirewallRules: [UDP Query User{533B197F-44B9-497C-BB2E-938E55A263A1}C:\program files (x86)\webcam 7\wlite.exe] => C:\program files (x86)\webcam 7\wlite.exe
FirewallRules: [TCP Query User{F75DF0D9-9FD3-4E97-B0AC-A81712F79E14}C:\program files (x86)\webcam 7\wlite.exe] => C:\program files (x86)\webcam 7\wlite.exe
FirewallRules: [UDP Query User{716796B9-D991-47EA-8979-B95F98D58395}C:\users\charlie\appdata\roaming\spotify\spotify.exe] => C:\users\charlie\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{01FE9E83-6CAC-4B34-8B64-02ACD38E24BD}C:\users\charlie\appdata\roaming\spotify\spotify.exe] => C:\users\charlie\appdata\roaming\spotify\spotify.exe
FirewallRules: [{7ED80F86-1928-421F-A81A-21794675CECD}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{826F4EFC-DCAA-4FAE-8713-1DB9E94119C3}] => LPort=2869
FirewallRules: [{F7E197F5-E02A-4CF5-AB14-40041A8C0B92}] => LPort=1900
FirewallRules: [{52EC1BA9-738C-4D7B-8080-032E9E9F4DB5}] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{2EFB16F9-50FE-44F8-8404-41E94CF29D33}] => C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{8D6F7CF1-C6B8-4F0A-BF1F-5DC805E7EF19}] => M:\Programme\WinRar\WinRAR.exe
FirewallRules: [{35DB4509-0EE8-4E5E-BABB-E259021BBA4D}] => M:\Programme\WinRar\WinRAR.exe
FirewallRules: [{FE1C3CC7-CC10-4E69-A246-27DE1D063785}] => M:\Programme\WinRar\WinRAR.exe
FirewallRules: [{7BF79882-E2DC-4CC4-9993-F1FA310F5E55}] => M:\Programme\WinRar\WinRAR.exe
FirewallRules: [{7FF23305-2BBE-4D89-A0FA-76A6C98210A6}] => M:\Programme\Microsoft Office 2010\Office14\GROOVE.EXE
FirewallRules: [{E691A3D6-E9AE-45B6-A338-EFAABDDFD632}] => M:\Programme\Microsoft Office 2010\Office14\GROOVE.EXE
FirewallRules: [{4D1928F4-4B99-4E2F-963E-6592C968C66D}] => M:\Programme\Microsoft Office 2010\Office14\ONENOTE.EXE
FirewallRules: [{47587808-1238-48DE-9906-2A0DE86FEEB9}] => M:\Programme\Microsoft Office 2010\Office14\ONENOTE.EXE
FirewallRules: [{839A323F-2402-463D-A771-475D1CAA6321}] => M:\Programme\Microsoft Office 2010\Office14\outlook.exe
FirewallRules: [{C08D6CA9-C734-491E-89CD-7D29E1CCD3A8}] => %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{8C0063E5-2924-46A7-B568-4A771AC4FFC9}] => %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{1E3710A8-B922-4924-ABDA-00AF3EBC506F}] => LPort=26675
FirewallRules: [TCP Query User{75C07E39-D2EA-4FEC-A1B0-5E3E04F1800E}C:\program files (x86)\Epson Software\Event Manager\eeventmanager.exe] => C:\program files (x86)\Epson Software\Event Manager\eeventmanager.exe
FirewallRules: [UDP Query User{7687CC5E-BB3E-4824-90E7-25FD15480EC8}C:\program files (x86)\Epson Software\Event Manager\eeventmanager.exe] => C:\program files (x86)\Epson Software\Event Manager\eeventmanager.exe
FirewallRules: [TCP Query User{EF8EFD46-67C9-4B5B-8B52-E391959DC0C5}C:\program files (x86)\Epson Software\Event Manager\eeventmanager.exe] => C:\program files (x86)\Epson Software\Event Manager\eeventmanager.exe
FirewallRules: [UDP Query User{DE58F80A-08E1-4594-A66A-92548ED8D97F}C:\program files (x86)\Epson Software\Event Manager\eeventmanager.exe] => C:\program files (x86)\Epson Software\Event Manager\eeventmanager.exe
FirewallRules: [TCP Query User{A455F47E-AD06-4B85-BF97-D106DFE20908}C:\Program Files (x86)\SopCast\SopCast.exe] => C:\Program Files (x86)\SopCast\SopCast.exe
FirewallRules: [UDP Query User{03FFF2E9-19D6-44D2-94E0-75C2534311DB}C:\Program Files (x86)\SopCast\SopCast.exe] => C:\Program Files (x86)\SopCast\SopCast.exe
FirewallRules: [TCP Query User{D1457A28-A6E7-40A7-90A7-C7167203EB63}C:\Program Files (x86)\SopCast\adv\SopAdver.exe] => C:\Program Files (x86)\SopCast\adv\SopAdver.exe
FirewallRules: [UDP Query User{CBC57C86-1BCD-4D32-89E9-A563AB33911B}C:\Program Files (x86)\SopCast\adv\SopAdver.exe] => C:\Program Files (x86)\SopCast\adv\SopAdver.exe
FirewallRules: [{3931C90A-956B-4501-B478-7FC38D86BDC7}] => C:\Program Files\UltraVNC\vncviewer.exe
FirewallRules: [{F35AE3BA-E253-4DE1-B4A4-A22A96FAAF05}] => C:\Program Files\UltraVNC\vncviewer.exe
FirewallRules: [TCP Query User{385CA6B4-A1A8-4A1A-9177-65CF7BD477CB}C:\program files\ultravnc\winvnc.exe] => C:\program files\ultravnc\winvnc.exe
FirewallRules: [UDP Query User{C8A24CFE-E238-43AB-B4FA-2D9A4729EB89}C:\program files\ultravnc\winvnc.exe] => C:\program files\ultravnc\winvnc.exe
FirewallRules: [{A6A4A5D1-3681-4A04-B663-0377D6B3DA9B}] => C:\Program Files (x86)\webcam 7\wLite.exe
FirewallRules: [{F939325F-8A03-4870-9EA8-F020FE3835DF}] => C:\Program Files (x86)\webcam 7\wLite.exe
FirewallRules: [{3F93B4CA-9040-473E-954E-5CA78BBE226B}] => C:\Program Files (x86)\webcam 7\wService.exe
FirewallRules: [{806FD49A-4CA2-4E2A-84D4-8061B4D0F726}] => C:\Program Files (x86)\webcam 7\wService.exe
FirewallRules: [TCP Query User{56C75D7E-E9F4-4652-B589-1549EED7147A}C:\Program Files (x86)\free music zilla\FMZilla.exe] => C:\Program Files (x86)\free music zilla\FMZilla.exe
FirewallRules: [UDP Query User{93538E47-AB07-47FF-8287-531232CC31B6}C:\Program Files (x86)\free music zilla\FMZilla.exe] => C:\Program Files (x86)\free music zilla\FMZilla.exe
FirewallRules: [{50F7A675-6F5B-4B74-A9CD-33A4B0440D8A}] => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{0F477AAB-7F11-4327-99D0-F7438529D57C}] => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{4C307F3C-F3AF-424D-82D4-15BA16E17874}C:\users\charlie\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\charlie\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{0C0D9A54-BDC5-4D1B-A375-54B1E8F9021F}C:\users\charlie\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\charlie\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{6A0A3BCC-68DA-47A6-9E50-9A2840FAC28D}C:\program files (x86)\sopcast\sopcast.exe] => C:\program files (x86)\sopcast\sopcast.exe
FirewallRules: [UDP Query User{646505B5-0529-4570-8F18-04B844DC7430}C:\program files (x86)\sopcast\sopcast.exe] => C:\program files (x86)\sopcast\sopcast.exe
FirewallRules: [TCP Query User{085BB3B0-E7B8-4745-8DB4-E71BF7FDCDCE}C:\program files (x86)\sopcast\adv\sopadver.exe] => C:\program files (x86)\sopcast\adv\sopadver.exe
FirewallRules: [UDP Query User{E876D50D-0D4E-46AB-B9D1-37DC30625AC8}C:\program files (x86)\sopcast\adv\sopadver.exe] => C:\program files (x86)\sopcast\adv\sopadver.exe
FirewallRules: [{3B5E27D8-A9E7-4048-BE0C-4D2CBAB557F2}] => C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe
FirewallRules: [{092BD38F-6625-4FE7-87F4-71F15D995BB2}] => C:\Program Files\Sony\VAIO Smart Network\WFDA\WiFiDirectApplication.exe
FirewallRules: [{4976EB54-79B5-4375-98C6-D654427D152E}] => C:\Program Files\Sony\VAIO Smart Network\WFDA\WiFiDirectApplication.exe
FirewallRules: [{0791959C-431C-42D6-A158-DF77B179CBB6}] => C:\Program Files\Sony\VAIO Smart Network\WFDA\WiFiDirectApplication.exe
FirewallRules: [{1C6170FF-3169-42C8-B88C-4EF00F048EDD}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{BDBFA357-6D4F-468A-B177-F28482FA2CE5}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{65F6EC45-B8C0-40F0-B6F0-E08AF7C8533D}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{238D7E3B-479D-41BA-BAE0-C11FE489A223}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{DDCA6CC2-FA00-43E9-AFB3-E56C40E5A769}] => C:\Program Files\HP\HP Officejet 6500 E710n-z\bin\FaxApplications.exe
FirewallRules: [{0B56A22E-7AFB-414D-88AE-E555369880B0}] => C:\Program Files\HP\HP Officejet 6500 E710n-z\bin\DigitalWizards.exe
FirewallRules: [{C7E8EC2A-B883-479A-99EF-563A8525837B}] => C:\Program Files\HP\HP Officejet 6500 E710n-z\bin\SendAFax.exe
FirewallRules: [{751D0E76-675E-4DFA-8455-580121920F47}] => C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\DeviceSetup.exe
FirewallRules: [{6A0A16B7-A1EB-4371-A97E-7D084FADF5EC}] => C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\HPNetworkCommunicator.exe
FirewallRules: [{942E7D96-00BC-45BC-B2F8-467720FDE0BB}] => C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [TCP Query User{D8EEFF1B-7A71-4A3B-A2D3-7BABECC6EEAB}C:\program files (x86)\ppöúêö\ihelper.exe] => C:\program files (x86)\ppöúêö\ihelper.exe
FirewallRules: [UDP Query User{37348A56-11F6-46A2-821D-497903FCB02F}C:\program files (x86)\ppöúêö\ihelper.exe] => C:\program files (x86)\ppöúêö\ihelper.exe
FirewallRules: [{6B2F7EEB-5D39-4F02-ACBE-B6E4622862EF}] => C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
FirewallRules: [{546D60E4-95CE-486F-9BFD-BDC8A11BABFB}] => C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
FirewallRules: [{229DDEB0-D7C0-4A1F-B91E-2D502680997F}] => C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
FirewallRules: [{71D8009D-64A4-4004-96CA-06C304381EEB}] => C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
FirewallRules: [{B06174DE-4DAF-43D5-A116-72786F0BAED3}] => C:\Program Files\Sony\VAIO Smart Network\WFDA\WiFiDirectApplication.exe
FirewallRules: [{DFEF7BAD-15DD-46BD-A6CB-BD424CC99CDC}] => C:\Program Files\Sony\VAIO Smart Network\WFDA\WiFiDirectApplication.exe
FirewallRules: [TCP Query User{8B90234C-70B4-474E-8F61-CFFFD50F8767}C:\program files (x86)\ppöúêö\ihelper.exe] => C:\program files (x86)\ppöúêö\ihelper.exe
FirewallRules: [UDP Query User{6CFC6B93-6AE2-40C1-852A-A0BD6343B606}C:\program files (x86)\ppöúêö\ihelper.exe] => C:\program files (x86)\ppöúêö\ihelper.exe
FirewallRules: [TCP Query User{A8585E56-9EEF-44AB-B161-9FE7407CB438}C:\program files\maple 16\jre\bin\maple.exe] => C:\program files\maple 16\jre\bin\maple.exe
FirewallRules: [UDP Query User{B3012426-1B69-4BD3-976B-09B91899EAC3}C:\program files\maple 16\jre\bin\maple.exe] => C:\program files\maple 16\jre\bin\maple.exe
FirewallRules: [{EE5E61AA-709D-47DA-AF42-FFD4D1DBE1F0}] => C:\program files\maple 16\jre\bin\maple.exe
FirewallRules: [{60FDC136-1605-40DF-BAC2-D8A482E880A6}] => C:\program files\maple 16\jre\bin\maple.exe
FirewallRules: [{52CCEE7D-0C86-42AB-8904-4329446620F0}] => C:\Users\Charlie\AppData\Roaming\ACEStream\engine\ace_engine.exe
FirewallRules: [{CC174155-1233-4C78-B060-237F44F94A50}] => C:\Users\Charlie\AppData\Roaming\ACEStream\engine\ace_engine.exe
FirewallRules: [TCP Query User{AA2F7DF4-04F2-4E64-81F4-24D50644C88F}C:\users\charlie\appdata\roaming\acestream\engine\ace_engine.exe] => C:\users\charlie\appdata\roaming\acestream\engine\ace_engine.exe
FirewallRules: [UDP Query User{D61E6136-DC41-4E08-A026-D37A590549A0}C:\users\charlie\appdata\roaming\acestream\engine\ace_engine.exe] => C:\users\charlie\appdata\roaming\acestream\engine\ace_engine.exe
FirewallRules: [{20D15C17-6929-4D2D-A72B-753C639F6373}] => LPort=1000
FirewallRules: [TCP Query User{62AC8DA6-FE7D-441E-AE96-76CBC387F2E5}C:\program files (x86)\java\jre7\bin\java.exe] => C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [UDP Query User{4B955CC1-50B6-4F3B-BBFB-D39A0FF629E4}C:\program files (x86)\java\jre7\bin\java.exe] => C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [{1A2C2089-5C58-492D-9AE9-9F54C6BC9ED6}] => C:\Windows\system32\hasplms.exe
FirewallRules: [{8FC8207F-BA88-432E-BB35-DA57F9EBFB4B}] => C:\Program Files\mb Lizenz-Server\64-Bit\MBLizenzServer.exe
FirewallRules: [{AB0C7CAC-2353-4C04-8848-4C96EDDA7743}] => C:\Program Files\mb Lizenz-Server\64-Bit\MBLizenzServer.exe
FirewallRules: [{C5846F69-8727-4C78-8102-0FDE8F469E21}] => C:\Program Files\mb Lizenz-Server\64-Bit\MBLizenzServer.exe
FirewallRules: [{3E9DDDD6-9AF4-466C-BDC1-5ABA04DC197E}] => C:\Program Files\mb Lizenz-Server\64-Bit\MBLizenzServer.exe
FirewallRules: [{4DF8E275-FFCE-4E67-BE42-BF5C040FA29C}] => C:\Program Files\mb Lizenz-Server\64-Bit\MBLizenzServer.exe
FirewallRules: [{E2B358C4-91F3-4A86-9B78-3A29497C9E9D}] => C:\Program Files\mb Lizenz-Server\64-Bit\MBLizenzServer.exe
FirewallRules: [{7994AD14-EBB7-43B8-B8EB-BCD29061D56C}] => C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [{5C91B86B-B01E-4187-BEC3-D53473787ABB}] => C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [{C5BF5B8A-FED5-4ACB-AFF9-9C547876B69E}] => C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [{ECA4E1FB-042E-4490-BAE3-596A34D46FC1}] => C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{A892679A-B204-43DD-B862-47426C742951}] => C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [TCP Query User{A301B297-2586-40B5-B51C-43B3DBD4B174}C:\users\charlie\appdata\local\akamai\netsession_win.exe] => C:\users\charlie\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{A85CF4CD-13DC-4C32-B524-148A9EBA29B9}C:\users\charlie\appdata\local\akamai\netsession_win.exe] => C:\users\charlie\appdata\local\akamai\netsession_win.exe
FirewallRules: [{4251F5B8-BED1-4A2B-910F-6C6B590212F9}] => C:\users\charlie\appdata\local\akamai\netsession_win.exe
FirewallRules: [{4B1FD269-2D08-41FA-834D-1438D000DB6A}] => C:\users\charlie\appdata\local\akamai\netsession_win.exe
FirewallRules: [{CCCDCB6D-D7ED-4CFA-B731-0794A7C56515}] => C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe
FirewallRules: [{44D9C694-A9FC-457E-BD6D-B0E5201FFC9A}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{1B08C61B-73A9-4BFE-BE1D-57193874F1D8}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{9AD4460F-DCC0-4512-BC20-098D1C97F8AA}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{E8FB776C-086B-41B7-B507-A0791DD73210}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{5F5DA9BA-0B00-4176-8944-0309308E7C2D}] => C:\Program Files\Sony\VAIO Care\VCAgent.exe
FirewallRules: [{ACA3BCBF-9D1D-4867-B850-B63764BCBA8B}] => C:\Program Files\Sony\VAIO Care\VCAdmin.exe
FirewallRules: [{3BBB14B6-C847-48CB-9E56-92EAC5395CF9}] => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
FirewallRules: [{BBD6CDF1-37CB-4875-8B6B-56B1FDC3E2E5}] => C:\Program Files\Sony\VAIO Care\VAIOShell.exe
FirewallRules: [{3FE69202-CDA0-4876-9960-6D68EEA83A37}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{1A2CE3D8-9192-4CC2-9926-B4BE1FA49981}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{5B3134BE-2330-4040-A9CA-EA13189456FC}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{E89B6260-0148-4A1C-8FC0-D5E66F152F74}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{4E9099B4-7976-4C14-BAD5-83723CF2F5DA}C:\users\charlie\appdata\roaming\spotify\spotify.exe] => C:\users\charlie\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{1B234E7A-F5C5-4A10-B7EA-2D30D5D729E3}C:\users\charlie\appdata\roaming\spotify\spotify.exe] => C:\users\charlie\appdata\roaming\spotify\spotify.exe
FirewallRules: [{6F07B673-8F75-43BF-9697-232C07EF2926}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
DomainProfile\AuthorizedApplications: [C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe] => Enabled:CodeMeter Runtime Server
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe] => Enabled:CodeMeter Runtime Server

==================== Wiederherstellungspunkte =========================

06-01-2017 17:40:09 Windows Update
09-01-2017 19:43:05 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/09/2017 07:43:42 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (01/09/2017 07:32:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Charlie-VAIO)
Description: Bei der Aktivierung der App „Microsoft.Windows.Photos_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (01/09/2017 07:32:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: Charlie-VAIO)
Description: Das Paket „Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe+App“ wurde beendet, da das Anhalten zu lange dauerte.

Error: (01/09/2017 07:24:54 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.

Details:
        (HRESULT : 0x80040210) (0x80040210)

Error: (01/08/2017 10:52:37 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x33cc
Startzeit der fehlerhaften Anwendung: 0x01d26994f0a5eafe
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: e0c11c8c-c6dd-49eb-850c-8928e5fb4253
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (01/08/2017 10:52:36 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x33cc
Startzeit der fehlerhaften Anwendung: 0x01d26994f0a5eafe
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 03c46a85-886e-461d-acc0-1d259a7af0a8
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (01/08/2017 06:45:42 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x2cc4
Startzeit der fehlerhaften Anwendung: 0x01d269726fc18ef5
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: df4203e2-880b-4f05-ae8a-c96076aa79ef
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (01/08/2017 06:45:39 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x2cc4
Startzeit der fehlerhaften Anwendung: 0x01d269726fc18ef5
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: d9853af1-a811-4e8f-97b3-2687b981c7ba
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (01/08/2017 06:35:03 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iCloudPhotos.exe, Version: 105.0.0.118, Zeitstempel: 0x582d17b3
Name des fehlerhaften Moduls: iCloudPhotos_main.dll, Version: 105.0.0.118, Zeitstempel: 0x582dfc52
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000f48bc
ID des fehlerhaften Prozesses: 0x2c04
Startzeit der fehlerhaften Anwendung: 0x01d26970e6f306a0
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos_main.dll
Berichtskennung: 7294db37-b24c-4751-86d0-2b7e397f411e
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (01/07/2017 10:39:46 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Charlie-VAIO)
Description: Bei der Aktivierung der App „Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


Systemfehler:
=============
Error: (01/09/2017 07:45:12 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Sicherheitsupdate für Microsoft Silverlight (KB3193713)

Error: (01/09/2017 07:26:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/09/2017 07:26:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/09/2017 07:26:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/08/2017 09:26:08 PM) (Source: DCOM) (EventID: 10010) (User: Charlie-VAIO)
Description: Der Server "{0002DF02-0000-0000-C000-000000000046}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (01/08/2017 06:33:32 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/08/2017 06:33:32 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/08/2017 06:33:32 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/07/2017 10:39:46 PM) (Source: DCOM) (EventID: 10010) (User: Charlie-VAIO)
Description: Der Server "App.AppXryc2qd338f5728r9gzzazav8206ba77s.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (01/07/2017 05:54:50 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Sicherheitsupdate für Microsoft Silverlight (KB3193713)


CodeIntegrity:
===================================
  Date: 2017-01-10 18:55:01.696
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-10 18:55:01.695
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-10 18:50:37.310
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-10 18:50:37.308
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-07 20:24:43.556
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-07 20:24:43.539
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-07 20:24:43.522
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-07 20:24:43.506
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-07 20:24:43.489
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-07 20:24:43.461
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
Prozentuale Nutzung des RAM: 66%
Installierter physikalischer RAM: 4077.86 MB
Verfgbarer physikalischer RAM: 1365.23 MB
Summe virtueller Speicher: 6470.29 MB
Verfgbarer virtueller Speicher: 3078.78 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:291.83 GB) (Free:143.29 GB) NTFS
Drive m: (Volume) (Fixed) (Total:290.73 GB) (Free:260.65 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: 99DAAE85)
Partition 1: (Not Active) - (Size=13.5 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=291.8 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=290.7 GB) - (Type=OF Extended)

==================== Ende von Addition.txt ============================
Anti-Malware:

Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlaufdatum: 09.01.2017
Suchlaufzeit: 19:44
Protokolldatei: antimalware_20160109.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2017.01.09.09
Rootkit-Datenbank: v2016.11.20.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bsartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: Charlie

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 457328
Abgelaufene Zeit: 35 Min., 39 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Warnen
PUM: Aktiviert

Prozesse: 0
(keine bsartigen Elemente erkannt)

Module: 0
(keine bsartigen Elemente erkannt)

Registrierungsschlssel: 31
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\APPID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}, In Quarantne, [7b62fd7c258337ff0bd4b5bde0208080],
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}, In Quarantne, [7b62fd7c258337ff0bd4b5bde0208080],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}, In Quarantne, [7b62fd7c258337ff0bd4b5bde0208080],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\CLSID\{10ECCE17-29B5-4880-A8F5-EAD298611484}, In Quarantne, [ad304138a800ee48d7afc09c09f7cd33],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\TYPELIB\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}, In Quarantne, [ad304138a800ee48d7afc09c09f7cd33],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\INTERFACE\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}, In Quarantne, [ad304138a800ee48d7afc09c09f7cd33],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\INTERFACE\{BD51A48E-EB5F-4454-8774-EF962DF64546}, In Quarantne, [ad304138a800ee48d7afc09c09f7cd33],
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}, In Quarantne, [ad304138a800ee48d7afc09c09f7cd33],
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{BD51A48E-EB5F-4454-8774-EF962DF64546}, In Quarantne, [ad304138a800ee48d7afc09c09f7cd33],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}, In Quarantne, [ad304138a800ee48d7afc09c09f7cd33],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{BD51A48E-EB5F-4454-8774-EF962DF64546}, In Quarantne, [ad304138a800ee48d7afc09c09f7cd33],
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}, In Quarantne, [ad304138a800ee48d7afc09c09f7cd33],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}, In Quarantne, [ad304138a800ee48d7afc09c09f7cd33],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\REI_AxControl.ReiEngine.1, In Quarantne, [ad304138a800ee48d7afc09c09f7cd33],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\REI_AxControl.ReiEngine, In Quarantne, [ad304138a800ee48d7afc09c09f7cd33],
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\REI_AxControl.ReiEngine, In Quarantne, [ad304138a800ee48d7afc09c09f7cd33],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\WOW6432NODE\REI_AxControl.ReiEngine, In Quarantne, [ad304138a800ee48d7afc09c09f7cd33],
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\REI_AxControl.ReiEngine.1, In Quarantne, [ad304138a800ee48d7afc09c09f7cd33],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\WOW6432NODE\REI_AxControl.ReiEngine.1, In Quarantne, [ad304138a800ee48d7afc09c09f7cd33],
PUP.Optional.Reimage, HKU\S-1-5-21-1747016203-3155398904-578371931-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{10ECCE17-29B5-4880-A8F5-EAD298611484}, In Quarantne, [ad304138a800ee48d7afc09c09f7cd33],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB}, In Quarantne, [429b2554b4f41c1a3f491d391fe11be5],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\APPID\REI_AxControl.DLL, In Quarantne, [15c841387f290c2a041867eeb24eff01],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\TYPELIB\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}\1.0, In Quarantne, [35a890e93c6c63d3569452227e82bb45],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\REI_AxControl.DLL, In Quarantne, [c61746332781d363e03c9cb951af46ba],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}\1.0, In Quarantne, [77668aefe8c0ab8b02e8d1a31ae625db],
PUP.Optional.Reimage, HKLM\SOFTWARE\REIMAGE\Reimage Repair, In Quarantne, [8459d3a6535584b29f4e592642be37c9],
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\REI_AxControl.DLL, In Quarantne, [19c44e2b6a3ee84ef72593c2e8188d73],
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}\1.0, In Quarantne, [1ebf2851dfc96ec8688281f36f91629e],
PUP.Optional.Reimage, HKU\S-1-5-21-1747016203-3155398904-578371931-1000\SOFTWARE\Reimage, In Quarantne, [c01d740556524fe74d5ad5d0e51bad53],
PUP.Optional.Reimage, HKU\S-1-5-21-1747016203-3155398904-578371931-1000\SOFTWARE\LOCAL APPWIZARD-GENERATED APPLICATIONS\Reimage - Windows Problem Relief., In Quarantne, [6e6f3445d3d5092d3ee03c30aa562bd5],
PUP.Optional.Reimage, HKU\S-1-5-21-1747016203-3155398904-578371931-1000\SOFTWARE\REIMAGE\PC REPAIR, In Quarantne, [13cad2a79e0afe3825d5ea7118e844bc],

Registrierungswerte: 4
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\TYPELIB\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}\1.0, REI_AxControl 1.0 Type Library, In Quarantne, [35a890e93c6c63d3569452227e82bb45]
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}\1.0, REI_AxControl 1.0 Type Library, In Quarantne, [77668aefe8c0ab8b02e8d1a31ae625db]
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}\1.0, REI_AxControl 1.0 Type Library, In Quarantne, [1ebf2851dfc96ec8688281f36f91629e]
PUP.Optional.Reimage, HKU\S-1-5-21-1747016203-3155398904-578371931-1000\SOFTWARE\REIMAGE\PC REPAIR|QuitMessage,  , In Quarantne, [13cad2a79e0afe3825d5ea7118e844bc]

Registrierungsdaten: 0
(keine bsartigen Elemente erkannt)

Ordner: 0
(keine bsartigen Elemente erkannt)

Dateien: 1
PUP.Optional.SpeedItUp, C:\Windows\Reimage.ini, In Quarantne, [1fbe92e7ebbd54e233c3ce89d92705fb],

Physische Sektoren: 0
(keine bsartigen Elemente erkannt)


(end)
FRST im Anhang Text zu lang

cosinus 11.01.2017 12:03
Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhngen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs fr einen Beitrag zu gro sein sollten, bitte ich dich die Logs direkt und notfalls ber mehrere Beitrge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrcke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drcke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

chaaali 11.01.2017 18:20
Addition1

Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 08-01-2017
durchgeführt von Charlie (10-01-2017 18:56:52)
Gestartet von M:\downloads
Windows 10 Home Version 1607 (X64) (2017-01-06 13:43:33)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1747016203-3155398904-578371931-500 - Administrator - Disabled)
Charlie (S-1-5-21-1747016203-3155398904-578371931-1000 - Administrator - Enabled) => C:\Users\Charlie
DefaultAccount (S-1-5-21-1747016203-3155398904-578371931-503 - Limited - Disabled)
Gast (S-1-5-21-1747016203-3155398904-578371931-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1747016203-3155398904-578371931-1002 - Limited - Enabled)
Test1 (S-1-5-21-1747016203-3155398904-578371931-1003 - Limited - Enabled) => C:\Users\Test1

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.18) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.18 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
Alps Pointing-device for VAIO (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version:  - ALPS ELECTRIC CO., LTD.)
Apple Application Support (32-Bit) (HKLM-x32\...\{D079CAAD-0C31-47A2-9AF5-A82F9CD9B221}) (Version: 5.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{64E6007B-1DA9-42CD-BBE4-D5FA67A7C71D}) (Version: 5.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{61438020-DDD4-42FA-99A2-50225441980A}) (Version: 2.0.1.142 - ArcSoft)
ArcSoft WebCam Companion 4 (HKLM-x32\...\{C793AD32-2BB8-4CC4-ABD3-A1469C21593C}) (Version: 4.0.21.444 - ArcSoft)
ASUS Xonar U3 Audio (HKLM\...\C-Media CM112 Like Sound Driver) (Version:  - )
Atheros WiFi Driver Installation (HKLM-x32\...\{7D916FA5-DAE9-4A25-B089-655C70EAF607}) (Version: 3.0 - Atheros)
AutoCAD 2012 - Deutsch (HKLM\...\AutoCAD 2012 - Deutsch) (Version: 18.2.51.0 - Autodesk)
AutoCAD 2012 - Deutsch (Version: 18.2.51.0 - Autodesk) Hidden
AutoCAD 2012 Language Pack - Deutsch (Version: 18.2.51.0 - Autodesk) Hidden
Autodesk CAD Manager Tools (HKLM\...\{5783F2D7-0111-0409-0110-0060B0CE6BBA}) (Version: 16.0.0.65 - Autodesk)
Autodesk Content Service (HKLM-x32\...\{086F9A69-CD39-4893-A9FB-D3A0634CE3F7}) (Version: 2.0.90 - Autodesk)
Autodesk Inventor Fusion 2012 (HKLM\...\Autodesk Inventor Fusion 2012) (Version: 1.0.0.79 - Autodesk, Inc.)
Autodesk Inventor Fusion 2012 (Version: 1.0.0.79 - Autodesk, Inc.) Hidden
Autodesk Inventor Fusion 2012 Language Pack (Version: 1.0.0.79 - Autodesk, Inc.) Hidden
Autodesk Inventor Fusion plug-in for AutoCAD 2012 (HKLM\...\Autodesk Inventor Fusion Plugin for AutoCAD 2012) (Version: 0.0.1.138 - Autodesk)
Autodesk Inventor Fusion Plugin for AutoCAD 2012 (Version: 0.0.1.138 - Autodesk) Hidden
Autodesk Inventor Fusion Plugin Language Pack for AutoCAD 2012 (Version: 0.0.1.138 - Autodesk) Hidden
Autodesk Material Library 2012 (HKLM-x32\...\{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}) (Version: 2.5.0.8 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2012 (HKLM-x32\...\{65420DC9-306E-4371-905F-F4DC3B418E52}) (Version: 2.5.0.8 - Autodesk)
Autodesk Network License Manager (HKLM\...\{4BE91685-1632-47FC-B563-A8A542C6664C}) (Version: 11.12.0 - Autodesk)
Bing Bar (HKLM-x32\...\{B4089055-D468-45A4-A6BA-5A138DD715FC}) (Version: 7.0.850.0 - Microsoft Corporation)
Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.3.0.95 - Atheros Communications)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Canon MG5100 series Benutzerregistrierung (HKLM-x32\...\Canon MG5100 series Benutzerregistrierung) (Version:  - )
Canon MG5100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5100_series) (Version:  - )
Canon MP490 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP490_series) (Version:  - )
Cisco AnyConnect Secure Mobility Client  (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 4.1.06020 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (x32 Version: 4.1.06020 - Cisco Systems, Inc.) Hidden
CodeMeter Runtime Kit v5.20d (HKLM\...\{8C023241-C568-4418-80DC-489A386309D6}) (Version: 5.20.1471.504 - WIBU-SYSTEMS AG)
CollageIt 1.9.4 (HKLM-x32\...\{D9757258-30B2-496E-86F2-84920C5858E1}_is1) (Version: 1.9.4 - PearlMountain Technology Co., Ltd)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.0.53 - Conexant)
CyberGhost 5 (HKLM\...\CyberGhost VPN 5_is1) (Version:  - CyberGhost S.R.L.)
CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version:  - CyberGhost S.R.L.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Defraggler (HKLM\...\Defraggler) (Version: 2.08 - Piriform)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.31 - DivX, LLC)
Dropbox (HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\Dropbox) (Version: 16.4.30 - Dropbox, Inc.)
eDocPrinter PDF Pro 6.83(x64) MSI (HKLM\...\{25D2FD16-E31B-43EE-B468-701FDFB14408}) (Version: 6.83.6171 - ITeksoft Corporation)
eDocPrintPro (HKLM\...\{D0FE768A-B5CA-450B-91C9-5D699A6CD0C9}) (Version: 3.24.5 - MAY Computer)
eDocPrintPro v3.17.0 (HKLM\...\{EE92BF61-A3C6-451B-9EA5-34A8C0895B67}) (Version: 3.17.0 - MAY-Computer)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 17.2.19144 - Landesfinanzdirektion Thüringen)
Epson Easy Photo Print 2 (HKLM-x32\...\{87C2248A-C7DD-49ED-9BCD-B312A9D0819E}) (Version: 2.1.0.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{48F22622-1CC2-4A83-9C1E-644DD96F832D}) (Version: 2.30.00 - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - )
Epson Stylus SX510W_TX550W Handbuch (HKLM-x32\...\Epson Stylus SX510W_TX550W Benutzerhandbuch) (Version:  - )
EPSON SX510W Series Printer Uninstall (HKLM\...\EPSON SX510W Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Setup (HKLM-x32\...\{FFFAE01B-466F-4C07-9821-A94FD753BDDA}) (Version: 3.1a - SEIKO EPSON CORPORATION)
ESS Energie Indikator (HKLM-x32\...\{9A6518F6-D319-49C9-9AB6-7FF77F082503}) (Version: 2011.0 - Nemetschek Allplan GmbH)
Facebook Video Calling 2.0.0.447 (HKLM-x32\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited)
FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production)
FH-Aachen OpenVPN 2.2.0 (HKLM-x32\...\FH-Aachen OpenVPN) (Version: 2.2.0 - )
FILSHtray (HKLM-x32\...\{5928359F-BF46-4646-BF19-B64E55171EB5}) (Version: 0.12 - FILSH Media GmbH)
Firebird 2.5.1.26351 (Win32) (HKLM-x32\...\FBDBServer_2_5_is1) (Version: 2.5.1.26351 - Firebird Project)
fischer Application Modules (HKLM-x32\...\{0358614B-C5D0-46B0-86C6-2B658BE68E20}) (Version: 2.0.0 - fischerwerke GmbH & Co. KG)
Foto-Mosaik-Edda Standard V6.8.12318.1 (HKLM-x32\...\{A2D6ECD0-7E52-42B7-9236-DB2951436616}_is1) (Version:  - Steffen Schirmer)
FreeOCR 3.0 (HKLM\...\{108A39BF-4ED1-4293-B11A-06BD521FB8F7}) (Version: 3.0 - Free OCR)
FreePDF (Remove only) (HKLM-x32\...\FreePDF_XP) (Version:  - )
Frilo (HKLM-x32\...\Frilo) (Version:  - )
Frilo Installation (HKLM-x32\...\{9B7A87BB-BB10-4991-A89C-E38660A76B05}) (Version: 1.0.0 - Frilo)
Frilo.System.Next (HKLM-x32\...\{3FB8343E-1722-4866-BD71-A935FE07B550}) (Version: 3.11.27 - Friedrich + Lochner GmbH)
FriloBase (HKLM-x32\...\{4DBEF603-5CE5-4629-8B79-FAA95CC46915}) (Version: 1.0.0 - Friedrich + Lochner GmbH)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
General Runtime Files for Allplan 2011-1-5 (x32 Version: 1.3.0.0 - Nemetschek Allplan GmbH) Hidden
General Runtime Files for Allplan 2012-1 Release (x32 Version: 1.6.0.0 - Nemetschek Allplan GmbH) Hidden
General Runtime Files for Allplan 2015-0-1 (x32 Version: 1.8.1.0 - Nemetschek Allplan Systems GmbH) Hidden
General Runtime Files for Allplan 2015-0-1 x64 (Version: 1.5.0.0 - Nemetschek Allplan Systems GmbH) Hidden
General Runtime Files for Nemetschek Softlock 2006 (x32 Version: 1.3.0.0 - Nemetschek) Hidden
General Runtime Files for Nemetschek Softlock 2006 64 (Version: 1.2.0.0 - Nemetschek) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.04) (Version: 9.04 - Artifex Software Inc.)
gs_x64 (HKLM\...\{2E415339-7210-4A3B-84EA-E50FE7565F0D}) (Version: 9.00 - MAY-Computer)
gs_x64 (HKLM\...\{86395DC4-1E85-4F88-840B-A686F0C51B03}) (Version: 9.18.1 - MAY Computer)
HDB (HKLM-x32\...\HDB) (Version: 11.42 - Halfen GmbH)
HDB (x32 Version: 11.41 - Halfen GmbH) Hidden
HDB (x32 Version: 11.42 - Halfen GmbH) Hidden
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.8.208 - SurfRight B.V.)
HP Deskjet 2050 J510 series - Grundlegende Software für das Gerät (HKLM\...\{DF37555F-0259-43DA-B60C-47106FA14AA3}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
HP Deskjet 2050 J510 series Hilfe (HKLM-x32\...\{7A3DF2E2-CF13-44FB-A93E-F71D5381DB3F}) (Version: 140.0.61.61 - Hewlett Packard)
HP Officejet 6500 E710n-z - Grundlegende Software für das Gerät (HKLM\...\{56F91CE8-0168-4619-8FEC-13F5087E40F8}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
iCloud (HKLM\...\{4BB313CE-D3D1-424C-8823-15CF85B00B05}) (Version: 6.1.0.30 - Apple Inc.)
iFunbox (v3.0.3105.1322) (HKLM-x32\...\iFunbox_is1) (Version: v3.0.3105.1322 - iFunbox DevTeam)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.6.0 - LIGHTNING UK!)
InfoCAD 14.1 (HKLM-x32\...\InfoCAD) (Version:  - InfoGraph GmbH, Kackertstrasse 10, 52072 Aachen, Germany)
InfoCAD Studienversion 13.0a (HKLM-x32\...\InfoCAD Studienversion) (Version:  - InfoGraph GmbH, Kackertstrasse 10, 52072 Aachen, Germany)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Visual Fortran Redistributables on IA-32 (HKLM-x32\...\{9CBDC468-CCE7-428A-8F68-CFD1B436457D}) (Version: 15.0.108 - Intel Corporation)
-isb cad- 2013 Academy (x32 Version: 26.00.0000 - GLASER -isb cad- Programmsysteme GmbH) Hidden
-isb cad- 2014 (x32 Version: 27.00.0000 - GLASER -isb cad- Programmsysteme GmbH) Hidden
-isb cad- 2014 Academy (x32 Version: 27.00.0000 - GLASER -isb cad- Programmsysteme GmbH) Hidden
-isb cad- 2014 Academy Bibliothek (HKLM-x32\...\{A8856EF7-8991-444B-9816-A6CF6ADCA057}) (Version: 1.00.0000 - GLASER -isb cad- Programmsysteme GmbH)
-isb cad- 2015 (HKLM-x32\...\{972BECC5-D668-4926-9095-9BF7D69B9A71}) (Version: 28.00.0000 - GLASER -isb cad- Programmsysteme GmbH)
-isb cad- 2015 (x32 Version: 28.00.0000 - GLASER -isb cad- Programmsysteme GmbH) Hidden
iTunes (HKLM\...\{E109B4A3-9883-4E6E-9A19-4D7E1A88AFE8}) (Version: 12.4.2.4 - Apple Inc.)
Java SE Development Kit 7 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170250}) (Version: 1.7.0.250 - Oracle)
Java(TM) SE Development Kit 7 Update 1 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170010}) (Version: 1.7.0.10 - Oracle)
Java(TM) SE Development Kit 7 Update 3 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170030}) (Version: 1.7.0.30 - Oracle)
JavaFX 2.0.3 (64-bit) (HKLM\...\{1111706F-666A-4037-7777-203648764D10}) (Version: 2.0.3 - Oracle Corporation)
JavaFX 2.0.3 SDK (64-bit) (HKLM\...\{2222706F-666A-4037-7777-203648764D10}) (Version: 2.0.3 - Oracle Corporation)
JavaFX 2.1.0 (HKLM-x32\...\{1111706F-666A-4037-7777-210328764D10}) (Version: 2.1.0 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Maple 16 (HKLM\...\Maple 16) (Version:  - Maplesoft)
Maple 16 (HKLM-x32\...\Maple 16) (Version: 16.0.0.0 - Maplesoft)
mb Lizenz-Server (HKLM\...\{EA97433E-FB42-4FDA-9435-ECD1B4C7CB92}) (Version: 20.12.1015 - mb AEC Software GmbH)
mb WorkSuite 2014 (HKLM-x32\...\{EC7D1F2E-5BD1-4488-9C31-D4F686508BD4}) (Version: 20.14.0820 - mb AEC Software GmbH)
Media Gallery (Version: 1.5.0.17050 - Your Company Name) Hidden
MediaMonkey 3.2 (HKLM-x32\...\MediaMonkey_is1) (Version: 3.2 - Ventis Media Inc.)
Mepla Iso (HKLM-x32\...\{DE9C586C-20D0-4E46-9816-177B90D73D7F}) (Version: 1.2.2 - Mepla Software)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\OneDriveSetup.exe) (Version: 17.3.6720.1207 - Microsoft Corporation)
Microsoft Report Viewer 2012 Runtime (HKLM-x32\...\{A047101C-A3AE-4FAD-802F-01C965079F66}) (Version: 11.1.3010.3 - Microsoft Corporation)
Microsoft Report Viewer Redistributable 2008 (KB971119) (HKLM-x32\...\Microsoft Report Viewer Redistributable 2008 (KB971119)) (Version:  - Microsoft Corporation)
Microsoft Report Viewer Redistributable 2008 SP1 (HKLM-x32\...\Microsoft Report Viewer Redistributable 2008 SP1) (Version:  - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 DEU  (HKLM\...\{98225B15-ECF5-4645-B5AC-F8C5E869A5D5}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{99AC7F47-A4E0-4706-9C65-8948775C2652}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft Visual Basic Power Packs 3.0 (HKLM-x32\...\{7B4D193B-D76D-308B-8B12-5D9BB1CBCE6C}) (Version: 9.0.30214 - Microsoft)
Microsoft Visual Basic PowerPacks 10.0 (HKLM-x32\...\{2D9F8079-7D50-3EFD-B3BD-ED642E4EE756}) (Version: 10.0.20911 - Microsoft)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.2.173.0 - Microsoft Corporation)
MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Nemetschek Allplan 2011 (HKLM-x32\...\{DF71C8D1-9258-4504-89AF-BA80748CC0D2}) (Version: 2011.0 - Nemetschek Allplan GmbH)
Nemetschek Allplan 2012 (HKLM-x32\...\{E293B9FB-2753-4B39-89ED-4812FAF358D1}) (Version: 2012.0 - Nemetschek Allplan GmbH)
Nemetschek Allplan 2015 (HKLM-x32\...\{2D6C562A-839E-4D16-903C-A5987EB61948}) (Version: 2015.0 - Nemetschek Allplan Systems GmbH)
Nemetschek SoftLock 2006 (HKLM-x32\...\{7262D0C8-41CC-4F75-8383-A6C7C61D7FC6}) (Version: 1.26.55 - Nemetschek Allplan Systems GmbH)
Nur Entfernen der CopyTrans Suite möglich (HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\CopyTrans Suite) (Version: 2.37 - WindSolutions)
NVIDIA 3D Vision Treiber 269.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 269.73 - NVIDIA Corporation)
NVIDIA Grafiktreiber 269.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 269.73 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.2.24.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.2.24.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.12.0507 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0507 - NVIDIA Corporation)
Opera Stable 42.0.2393.94 (HKLM-x32\...\Opera 42.0.2393.94) (Version: 42.0.2393.94 - Opera Software)
PDF Architect (HKLM-x32\...\{80A07844-CA64-4DE4-AB61-D37DDBE8074F}) (Version: 1.0.52.8917 - pdfforge)
PDF Blender (HKLM-x32\...\PDF Blender) (Version:  - )
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.6.2 - pdfforge)
PDF-XChange 2012 Pro (HKLM\...\{F92F0AAB-2EF6-412C-8BF4-0B11EB535280}_is1) (Version: 5.0.266.0 - Tracker Software Products Ltd)
PDF-XChange Viewer (HKLM\...\{9ED333F8-3E6C-4A38-BAFA-728454121CDA}) (Version: 2.5.199.0 - Tracker Software Products Ltd.)
PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.5.02.12220 - Sony Corporation)
PMB VAIO Edition Guide (x32 Version: 1.5.00.02250 - Sony Corporation) Hidden
PMB VAIO Edition Plug-in (Version: 1.5.10.05300 - Sony Corporation) Hidden
PMB VAIO Edition Plug-in (x32 Version: 1.5.00.02250 - Sony Corporation) Hidden
PMB VAIO Edition Plug-in (x32 Version: 1.5.10.06150 - Sony Corporation) Hidden
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
PPÖúÊÖ PC°æ 1.1.0.2 (HKLM-x32\...\PPÖúÊÖ PC°æ) (Version: 1.1.0.2 - ¹ãÖÝÌúÈËÍøÂç¿Æ¼¼ÓÐÏÞ¹«Ë¾)
Qualcomm Atheros Direct Connect (x32 Version: 3.0 - Qualcomm Atheros) Hidden
Quick Web Access (HKLM-x32\...\splashtop) (Version: 1.4.6.9 - Sony Corporation)
Quick Web Access (x32 Version: 1.4.6.9 - Sony Corporation) Hidden
QuickTime 7 (HKLM-x32\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.92 - Realtek Semiconductor Corp.)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version:  - )
Remote Keyboard (x32 Version: 1.1.1.07060 - Sony Corporation) Hidden
Remote Play with PlayStation 3 (x32 Version: 1.1.0.15070 - Sony Corporation) Hidden
RuckZuck Student (HKLM-x32\...\{C0697894-E24F-435D-B98B-A2DEC959472A}) (Version: 6.0.11 - MURSOFT)
s+v Planungssoftware (HKLM-x32\...\{7527DFCD-6632-4A4F-9EC9-B081A84B5743}) (Version: 2.0.7 - s+v gmbh)
Schöck BOLE (HKLM-x32\...\{13705285-F119-48e8-A70C-456A2E25CA31}_is1) (Version:  - Schöck Bauteile GmbH)
Secunia PSI (2.0.0.4002) (HKLM-x32\...\Secunia PSI) (Version:  - )
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft) Hidden
Sony Corporation (Version: 1.0.0 - Default Company Name) Hidden
Spotify (HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\Spotify) (Version: 1.0.42.151.g19de0aa6 - Spotify AB)
SSLx64 (Version: 1.0.0 - Sony Corporation ) Hidden
SSLx86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer)
UltraVnc (HKLM\...\Ultravnc2_is1) (Version: 1.0.9.6.1 - uvnc bvba)
USB PnP Sound Device (HKLM\...\C-Media CM108 Like Sound Driver) (Version:  - )
VAIO - Media Gallery (HKLM-x32\...\{EB91AE13-BCA6-41F4-9804-62C4724549F2}) (Version: 1.5.1.17050 - Sony Corporation)
VAIO - PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{339F9B4D-00CB-4C1C-BED8-EC86A9AB602A}) (Version: 1.5.00.02250 - Sony Corporation)
VAIO - PMB VAIO Edition Plug-in (HKLM-x32\...\InstallShield_{22008CF9-2B54-4022-AFD8-3B7D42C89E6B}) (Version: 1.6.10.11160 - Sony Corporation)
VAIO - Remote Play mit PlayStation®3 (HKLM-x32\...\{07441A52-E208-478A-92B7-5C337CA8C131}) (Version: 1.1.0.15070 - Sony Corporation)
VAIO - Remote-Tastatur  (HKLM-x32\...\{7396FB15-9AB4-4B78-BDD8-24A9C15D2C65}) (Version: 1.1.0.07060 - Sony Corporation)
VAIO Care (HKLM\...\{6EEC3E9C-3479-42EB-B93C-E7DF7927DD82}) (Version: 8.4.4.09181 - Sony Corporation)
VAIO Care Recovery (HKLM\...\{6ED1750E-F44F-4635-8F0D-B76B9262B7FB}) (Version: 1.1.1.13230 - Sony Corporation)
VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.5.0.03040 - Sony Corporation)
VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.6.0.13140 - Sony Corporation)
VAIO Data Restore Tool (x32 Version: 1.6.0.13140 - Sony Corporation) Hidden
VAIO Easy Connect (HKLM-x32\...\InstallShield_{7C80D30A-AC02-4E3F-B95D-29F0E4FF937B}) (Version: 1.1.2.01120 - Sony Corporation)
VAIO Easy Connect (x32 Version: 1.1.2.01120 - Sony Corporation) Hidden
VAIO Event Service (HKLM-x32\...\{73D8886A-D416-4687-B609-0D3836BA410C}) (Version: 5.5.0.03040 - Sony Corporation)
VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 2.4.0.06210 - Sony Corporation)
VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 2.4.0.03240 - Sony Corporation)
VAIO Hardware Diagnostics (x32 Version: 4.2.0.14280 - Sony Corporation) Hidden
VAIO Hero Screensaver - Summer 2011 Screensaver (HKLM-x32\...\VAIO Hero Screensaver - Summer 2011 Screensaver) (Version:  - )
VAIO Improvement (HKLM-x32\...\{3A26D9BD-0F73-432D-B522-2BA18138F7EF}) (Version: 1.0.0.14150 - Sony Corporation)
VAIO Improvement Validation (HKLM\...\{75C95C84-264F-4CC7-8A7E-346444E6C7C1}) (Version: 1.0.4.01190 - Sony Corporation)
VAIO Sample Contents (HKLM-x32\...\{547C9EB4-4CA6-402F-9D1B-8BD30DC71E44}) (Version: 1.4.2.09010 - Sony Corporation)
VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.8.1.08270 - Sony Corporation)
VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 7.2.0.16270 - Sony Corporation)
VAIO-Handbuch (HKLM-x32\...\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}) (Version: 2.0.0.02250 - Sony Corporation)
VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.4.0.14230 - Sony Corporation)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VCCx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VESx64 (Version: 1.0.0 - Sony Corporation) Hidden
VESx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
Virtual DJ - Atomix Productions (HKLM-x32\...\Virtual DJ - Atomix Productions) (Version:  - )
VIx64 (Version: 1.0.0 - Sony Corporation) Hidden
VIx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VSNx64 (Version: 1.0.0 - Sony Corporation) Hidden
VSNx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden
VUx64 (Version: 1.2.0 - Sony Corporation) Hidden
VUx86 (x32 Version: 1.2.0 - Sony Corporation) Hidden
VWSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
webcam 7 (HKLM-x32\...\webcam 7) (Version: 0.9.9.22 - Moonware Studios)
WibuKey Setup (WibuKey Remove) (HKLM\...\{00060000-0000-1004-8002-0000C06B5161}) (Version: Version 6.11 of 2013-Feb-27 (Build 1057) (Setup) - WIBU-SYSTEMS AG)
WinDirStat 1.1.2 (HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\WinDirStat) (Version:  - )
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Windows Mobile-Gerätecenter (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation)
WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 29.2.2013 - BillP Studios)
WinRAR 5.20 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основи Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотоколекція Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> M:\Programme\AutodeskPro\AutoCAD 2012 - Deutsch\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{B77E471C-FBF3-4CB5-880F-D7528AD4B349}\localserver32 -> M:\Programme\AutodeskPro\AutoCAD 2012 - Deutsch\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{C92FB640-AD4D-498A-9979-A51A2540C977}\localserver32 -> M:\Programme\AutodeskPro\AutoCAD 2012 - Deutsch\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> M:\Programme\AutodeskPro\AutoCAD 2012 - Deutsch\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> M:\Programme\AutodeskPro\AutoCAD 2012 - Deutsch\acadficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1747016203-3155398904-578371931-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0129CC15-3D20-4335-AB5F-B6938FA3FECC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {0656EA79-40D9-4369-B45F-3A9E637AA164} - System32\Tasks\USER_ESRV_SVC => Wscript.exe //B //NoLogo "C:\Program Files\Sony\VAIO Care\ESRV\task.vbs"
Task: {06E1648D-50FF-456A-B021-BD6CA4C90322} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - \Microsoft\Windows\Tcpip\IpAddressConflict1 -> Keine Datei <==== ACHTUNG
Task: {0939B0DA-597A-4790-90F3-0E033B47AF01} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000Core => C:\Users\Charlie\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-25] (Dropbox, Inc.)
Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - \Microsoft\Windows\Tcpip\IpAddressConflict2 -> Keine Datei <==== ACHTUNG
Task: {0C9A0B32-1DCA-4EDA-95D4-DD083424BA9F} - \Microsoft\Windows\MobilePC\HotStart -> Keine Datei <==== ACHTUNG
Task: {1CA46AD9-19CB-4D14-AFB2-C14B74AAB7EE} - System32\Tasks\Allplan AutoUpdate 2011-1 => C:\Program Files (x86)\Nemetschek\Allplan\prg\NemDownloadHandler.exe [2012-01-30] (Nemetschek Allplan GmbH)
Task: {1D5CD141-FAC8-40D5-9B6F-AF4B5CAB15E8} - \Microsoft\Windows\Media Center\DispatchRecoveryTasks -> Keine Datei <==== ACHTUNG
Task: {1D800A8B-9CC7-4CF8-9280-632DC1459281} - \Sony Corporation\VAIO Care\VAIO Care -> Keine Datei <==== ACHTUNG
Task: {1E6D1945-FD59-4C89-A940-C5E01B8033DC} - \Microsoft\Windows\Media Center\PvrRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {1F1D4C60-0893-4CD2-B7CF-67F12DCF7DD9} - \Microsoft\Windows\Media Center\OCURDiscovery -> Keine Datei <==== ACHTUNG
Task: {1F59C079-8C39-4182-9B3B-B11376ACF972} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft)
Task: {22406AFB-2861-4621-BA56-4DC7327D80AE} - \Microsoft\Windows\Media Center\RecordingRestart -> Keine Datei <==== ACHTUNG
Task: {24DE4302-3D09-4AD7-A88C-45DC4D69BCD0} - \Microsoft\Windows\SideShow\SessionAgent -> Keine Datei <==== ACHTUNG
Task: {26864531-A651-4529-B7F8-D8E25F3D6F08} - \Microsoft\Windows\Media Center\SqlLiteRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {2847C385-A02C-4E58-B240-F46ECC8E4FBB} - \Sony Corporation\VAIO Care\CheckSystemInfo -> Keine Datei <==== ACHTUNG
Task: {2A572893-64E5-4BE5-A05C-338ED8107C5A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {2A7B2D86-7531-4619-8554-3D72E62E6901} - \Microsoft\Windows\Media Center\PeriodicScanRetry -> Keine Datei <==== ACHTUNG
Task: {2BEB40A9-C3FC-4F88-93CC-13F8D427342F} - System32\Tasks\WebContent AutoUpdate 2011 => C:\Program Files (x86)\Nemetschek\Allplan\prg\NemDownloadHandler.exe [2012-01-30] (Nemetschek Allplan GmbH)
Task: {2CE8503E-460E-4460-9DA5-348848B13727} - \Sony Corporation\VAIO Care\DeployCRMflag -> Keine Datei <==== ACHTUNG
Task: {2FC2C5DC-154A-4322-9422-F246FACE002C} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {30509C69-56BC-4B03-92AA-8550D9C47CD0} - \Sony Corporation\VAIO Care\UploadPOT -> Keine Datei <==== ACHTUNG
Task: {3460C1BB-8657-4496-B7FB-9D10C1883A5B} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {35D27A05-7E70-476C-8CA3-90D34CF4E96A} - \Microsoft\Windows\SideShow\AutoWake -> Keine Datei <==== ACHTUNG
Task: {38368FAA-96C9-4534-A6B8-149485012569} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000UA => C:\Users\Charlie\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-25] (Dropbox, Inc.)
Task: {3F2710BA-436C-4911-AC73-45C6D85FDB43} - System32\Tasks\Opera scheduled Autoupdate 1442130645 => C:\Program Files (x86)\Opera\launcher.exe [2016-12-19] (Opera Software)
Task: {3F4AA639-EF40-4EEA-ACA5-785A44C29D49} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {427F100F-D1B3-4C4D-A766-70699BBE1D4F} - System32\Tasks\AutoUpdate Allplan 2015 => C:\Program Files\Nemetschek\Allplan_2\prg\NemDownloadHandler.exe [2014-07-10] (Nemetschek Allplan Systems GmbH)
Task: {4444D920-1607-4935-BA91-55D3A7F9C4D6} - \Sony Corporation\VAIO Care\GetPOTInfo -> Keine Datei <==== ACHTUNG
Task: {4550860D-16F5-41C8-8CEA-2667E4687362} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2016-11-17] (Apple Inc.)
Task: {4A678A75-0424-4600-B2E6-E6B2A0F3F395} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2016-03-31] (Sony Corporation)
Task: {4F899A91-20A9-48C2-A319-5F91AFDE51CE} - \Microsoft\Windows\Setup\gwx\rundetector -> Keine Datei <==== ACHTUNG
Task: {53799CF4-AFE7-4A2F-AF6C-18B858D00BBE} - \Microsoft\Windows\Media Center\mcupdate -> Keine Datei <==== ACHTUNG
Task: {58A674C8-D34D-4D01-9D02-CB15ECE36060} - \Microsoft\Windows\Media Center\PvrScheduleTask -> Keine Datei <==== ACHTUNG
Task: {5A497CC6-D250-47A3-BA55-D6F02952D348} - System32\Tasks\WebContent AutoUpdate 2012 => C:\Program Files (x86)\Nemetschek\Allplan_1\prg\NemDownloadHandler.exe [2012-07-14] (Nemetschek Allplan GmbH)
Task: {5B4D0D5C-A6E7-4DF5-80C6-7E2AC667A342} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {648A9FFF-E650-4B4B-9C78-C0A81C34DDFF} - \Microsoft\Windows Live\SOXE\Extractor Definitions Update Task -> Keine Datei <==== ACHTUNG
Task: {67DAAB4F-6BEC-4267-987C-60D02988F8F2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-07-13] (Adobe Systems Incorporated)
Task: {6A8A3779-9082-4F4F-B618-80AF81D413A7} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: {6CE1F75B-BD56-4EFF-B649-C91957B0BBB8} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {6ECC967C-B059-42A2-A996-BF7F0FA3DEFE} - \Microsoft\Windows\Media Center\StartRecording -> Keine Datei <==== ACHTUNG
Task: {728131A6-9695-44B3-890D-516F1A5A2A63} - \Microsoft\Windows\Media Center\MediaCenterRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {74ED0844-1807-465F-8C50-B53E5C7C99BB} - \Sony Corporation\VAIO Gate\StartExecuteProxy -> Keine Datei <==== ACHTUNG
Task: {764683F8-0EDF-4D94-ACF3-C41C273EFF6E} - \Microsoft\Windows\Media Center\PBDADiscoveryW2 -> Keine Datei <==== ACHTUNG
Task: {76C64A82-DE66-43F2-A269-0D3A867F4FDE} - \Microsoft\Windows\Media Center\ehDRMInit -> Keine Datei <==== ACHTUNG
Task: {7A506969-EF77-4B81-A8F6-C711DCDD07A6} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {80D19B0F-A7FA-4189-B708-AD11F1F6009A} - \Microsoft\Windows\SideShow\SystemDataProviders -> Keine Datei <==== ACHTUNG
Task: {8192CD17-9B9A-4FE9-9BBE-8169FF3EC97E} - \Microsoft\Windows\Media Center\PBDADiscoveryW1 -> Keine Datei <==== ACHTUNG
Task: {8E4DA570-FA23-4642-B642-06E80FED1AFB} - \Microsoft\Windows\Media Center\PBDADiscovery -> Keine Datei <==== ACHTUNG
Task: {8ED1AD80-8747-4F31-834D-4A9A03405A8F} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {8FC439DD-E29B-4E99-97A6-9B2094BF7F7C} - \Sony Corporation\VAIO Improvement Validation\VAIO Improvement Validation -> Keine Datei <==== ACHTUNG
Task: {93B0DAC5-9839-47C0-8CD8-12989C442124} - \Microsoft\Windows\Media Center\UpdateRecordPath -> Keine Datei <==== ACHTUNG
Task: {977C5995-8005-4E6C-8681-8E52DC6ED9F6} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {97B18BE3-CEC5-4F24-B95A-76FCF2BDA543} - \Sony Corporation\VAIO Care\ActiveStatusCollect -> Keine Datei <==== ACHTUNG
Task: {9D15F457-6214-47ED-B671-9E8518EF366C} - System32\Tasks\AutoUpdate Allplan 2012 => C:\Program Files (x86)\Nemetschek\Allplan_1\prg\NemDownloadHandler.exe [2012-07-14] (Nemetschek Allplan GmbH)
Task: {A2402F39-EE10-4BA4-80C7-71A45D30DEFC} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {A83029A0-F118-4F70-8814-77C9A39DA8F1} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {A8F4A950-7C02-46C8-9B76-20AEFF15A51B} - \Sony Corporation\VAIO Improvement\VAIOImprovementUploader -> Keine Datei <==== ACHTUNG
Task: {ABC82619-3247-4E22-9E68-34EAC9D1554A} - \Microsoft\Windows\Media Center\OCURActivate -> Keine Datei <==== ACHTUNG
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - \Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor -> Keine Datei <==== ACHTUNG
Task: {B4290FA9-F87C-4081-BC2B-C68AB5E0D8C7} - \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {B4BCDECD-9911-43FB-A4C0-5A8202C3061D} - \Sony Corporation\VAIO Care\VCMetrics -> Keine Datei <==== ACHTUNG
Task: {B5E262B5-CE89-4A31-855A-CA897981873B} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {B6A5128A-CEA6-47C0-83B5-64C9DE7F9871} - \Microsoft\Windows\Media Center\RegisterSearch -> Keine Datei <==== ACHTUNG
Task: {B9759462-045D-4D13-A974-74012A8EAA30} - \Sony Corporation\VAIO Smart Network\VSN Logon Start -> Keine Datei <==== ACHTUNG
Task: {BCCF5659-7ACD-4107-A02F-BC1DA7A3A615} - \Microsoft\Windows\SideShow\GadgetManager -> Keine Datei <==== ACHTUNG
Task: {BD588BF4-14ED-4F1E-881E-05E35BF02FD5} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000Core => C:\Users\Charlie\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: {C01A0D1B-2DBB-458B-B9DC-052931858B87} - \Microsoft\Windows\Media Center\ActivateWindowsSearch -> Keine Datei <==== ACHTUNG
Task: {C0231ECF-28D5-40C8-8F83-A1E1724E4333} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {C1E388E8-45B9-4EB6-9789-5498FB9E114F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {C2843E4D-7C33-4F54-85B8-4E2D9D364517} - \Sony Corporation\VAIO Care\VCSelfHeal -> Keine Datei <==== ACHTUNG
Task: {C9F66D9C-3A54-49C4-9123-C860EE721B16} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {CE3D54E4-7EE2-4B48-AF60-B870C9A093D6} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {CF3383D3-5DF5-442D-8804-BC99AEF8D465} - \Microsoft\Windows\Media Center\ConfigureInternetTimeService -> Keine Datei <==== ACHTUNG
Task: {D2BA3FD6-698D-44D5-9A1B-EA1D5CCAF4EC} - \Sony Corporation\VAIO Gate\VAIO Gate -> Keine Datei <==== ACHTUNG
Task: {D50F7A0E-ECC6-4FDD-86D0-131145DF7786} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {E29BE826-BB98-41E0-A906-A70775DB0C74} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
Task: {E3488022-25BE-410D-9FAB-357CA6C701C5} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {E506ED86-C82F-4706-BFC0-4931CAD96C53} - \Sony Corporation\VAIO Care\VCCheckIolo -> Keine Datei <==== ACHTUNG
Task: {E6DBE41D-8EB9-48B9-80EB-AED1F3D15194} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2016-04-25] (Sony Corporation)
Task: {E76A7648-1A64-4B90-B79F-A875A5194E76} - \Microsoft\Windows\Media Center\InstallPlayReady -> Keine Datei <==== ACHTUNG
Task: {E773AD14-0135-4213-B884-0601FFC53DF2} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {E9F47158-7B2C-420A-9082-302FB16D1C9D} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {EB7EC233-7FEA-4429-AB18-6D2DA7062A9A} - \Microsoft\Windows\Media Center\ReindexSearchRoot -> Keine Datei <==== ACHTUNG
Task: {EE8BBA37-97BF-46AE-9345-D8F20F28C5C0} - \Sony Corporation\VAIO Care\UpdateSolution -> Keine Datei <==== ACHTUNG
Task: {EF6433F2-6E5F-458E-9077-CB9582345FDC} - \Sony Corporation\VAIO Care\VCRLog -> Keine Datei <==== ACHTUNG
Task: {F3F8CC5C-89B2-4209-B060-AC928D30C6E5} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {F74BF3CC-C03D-41B9-B61F-55FAE5ED7621} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000UA => C:\Users\Charlie\AppData\Local\Facebook\Update\FacebookUpdate.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\Allplan AutoUpdate 2011-1.job => C:\Program Files (x86)\Nemetschek\Allplan\prg\NemDownloadHandler.exe 7/f C:\Daten\Nemetschek\Allplan\Std\AllplanUpdate.inf
Task: C:\WINDOWS\Tasks\AutoUpdate Allplan 2012.job => C:\Program Files (x86)\Nemetschek\Allplan_1\prg\NemDownloadHandler.exe 9/f C:\Daten\Nemetschek\Allplan_1\Std\AllplanUpdate.inf
Task: C:\WINDOWS\Tasks\AutoUpdate Allplan 2015.job => C:\Program Files\Nemetschek\Allplan_2\prg\NemDownloadHandler.exe ;/f C:\Daten\Nemetschek\Allplan_1_1\Std\AllplanUpdate.inf
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000Core.job => C:\Users\Charlie\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000UA.job => C:\Users\Charlie\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000Core.job => C:\Users\Charlie\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000UA.job => C:\Users\Charlie\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\WebContent AutoUpdate 2011.job => C:\Program Files (x86)\Nemetschek\Allplan\prg\NemDownloadHandler.exe €/f C:\Daten\Nemetschek\Allplan\Std\AllplanUpdate.inf /one hxxp:/autoupdate.allplan.com/Updates/Allplan/MyPlan/WebContent.upd
Task: C:\WINDOWS\Tasks\WebContent AutoUpdate 2012.job => C:\Program Files (x86)\Nemetschek\Allplan_1\prg\NemDownloadHandler.exe ‡/f C:\Daten\Nemetschek\Allplan_1\Std\AllplanUpdate.inf /one hxxp:/autoupdate.allplan.com/Updates/Allplan/MyPlan/2012/WebContent.upd
addition2

Code:
==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\Charlie\Desktop\Biegedrillknicknachweis.lnk -> C:\Program Files (x86)\InfoGraph\Biegedrillknicknachweis.bat ()
Shortcut: C:\Users\Charlie\Desktop\InfoCAD.lnk -> C:\Program Files (x86)\InfoGraph\InfoCAD.bat ()
Shortcut: C:\Users\Charlie\Desktop\Rissbreitennachweis.lnk -> C:\Program Files (x86)\InfoGraph\Rissbreitennachweis.bat ()
Shortcut: C:\Users\Charlie\Desktop\Systemviewer (64-Bit).lnk -> C:\Program Files (x86)\InfoGraph\Systemviewer (64-Bit).bat ()

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2012-03-02 14:31 - 2010-06-17 21:56 - 00087040 _____ () C:\WINDOWS\System32\redmonnt.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00413336 _____ () C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
2015-08-26 12:06 - 2015-08-26 12:06 - 00709272 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_modeler.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00130712 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_process_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00025752 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_system_power_state_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00059544 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_quality_and_reliability_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00194712 _____ () C:\Program Files\Sony\VAIO Care\ESRV\acpi_battery_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00159896 _____ () C:\Program Files\Sony\VAIO Care\ESRV\sema_thermal_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00158360 _____ () C:\Program Files\Sony\VAIO Care\ESRV\wifi_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00050840 _____ () C:\Program Files\Sony\VAIO Care\ESRV\devices_use_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00032920 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_disktrace_input.dll
2017-01-06 13:57 - 2016-08-01 13:54 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2017-01-06 15:43 - 2017-01-06 15:43 - 01678560 _____ () C:\Users\Charlie\AppData\Local\Microsoft\OneDrive\17.3.6720.1207_1\amd64\ClientTelemetry.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2017-01-06 13:39 - 2017-01-06 13:39 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2012-02-29 17:15 - 2008-07-11 08:04 - 00200704 _____ () C:\Windows\SysWOW64\HsMgr.exe
2017-01-06 16:10 - 2017-01-06 16:11 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-01-06 16:10 - 2017-01-06 16:11 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-01-06 16:10 - 2017-01-06 16:11 - 42130432 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-01-06 16:10 - 2017-01-06 16:11 - 02216448 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\roottools.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-01-07 11:06 - 2016-08-18 14:22 - 00174448 _____ () C:\Program Files\CyberGhost 6\Data\OpenVPN\liblzo2-2.dll
2017-01-07 11:06 - 2016-08-18 14:22 - 00112040 _____ () C:\Program Files\CyberGhost 6\Data\OpenVPN\libpkcs11-helper-1.dll
2016-11-17 01:29 - 2016-11-17 01:29 - 01041720 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2016-11-17 01:28 - 2016-11-17 01:28 - 00189752 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll
2016-11-17 01:29 - 2016-11-17 01:29 - 00080184 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)

HKU\S-1-5-21-1747016203-3155398904-578371931-1000\Software\Classes\.scr: scrfile =>  <===== ACHTUNG

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2015-06-28 17:55 - 00000855 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1      localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1747016203-3155398904-578371931-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Sony\VAIO 09 img2 Wallpaper 1366x768.jpg
DNS Servers: 194.187.251.67 - 185.93.180.131
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\Services: ACDaemon => 3
MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: AllplanUpdateLauncher 2015 => 2
MSCONFIG\Services: Apple Mobile Device Service => 2
MSCONFIG\Services: Atheros Bt&Wlan Coex Agent => 2
MSCONFIG\Services: Autodesk Content Service => 2
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: CGVPNCliService => 2
MSCONFIG\Services: CodeMeter.exe => 2
MSCONFIG\Services: DCDhcpService => 3
MSCONFIG\Services: EPSON_EB_RPCV4_01 => 2
MSCONFIG\Services: EPSON_PM_RPCV4_01 => 2
MSCONFIG\Services: FirebirdGuardianDefaultInstance => 2
MSCONFIG\Services: FirebirdServerDefaultInstance => 3
MSCONFIG\Services: fischerUpdateSvc => 2
MSCONFIG\Services: FLEXnet Licensing Service 64 => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: hasplms => 2
MSCONFIG\Services: IconMan_R => 2
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: LMS => 2
MSCONFIG\Services: mb Lizenz-Server => 2
MSCONFIG\Services: McComponentHostServiceSony => 3
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: nvservice => 2
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: OpenVPNService => 3
MSCONFIG\Services: PDF Architect Helper Service => 2
MSCONFIG\Services: PDF Architect Service => 2
MSCONFIG\Services: PMBDeviceInfoProvider => 2
MSCONFIG\Services: Secunia PSI Agent => 2
MSCONFIG\Services: Secunia Update Agent => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: SOHCImp => 3
MSCONFIG\Services: SOHDs => 3
MSCONFIG\Services: SpfService => 3
MSCONFIG\Services: Stereo Service => 2
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\Services: uCamMonitor => 2
MSCONFIG\Services: UNS => 2
MSCONFIG\Services: USER_ESRV_SVC => 3
MSCONFIG\Services: VAIO Event Service => 2
MSCONFIG\Services: VCFw => 3
MSCONFIG\Services: VcmIAlzMgr => 3
MSCONFIG\Services: VcmINSMgr => 3
MSCONFIG\Services: VcmXmlIfHelper => 3
MSCONFIG\Services: VCService => 3
MSCONFIG\Services: vpnagent => 2
MSCONFIG\Services: VSNService => 2
MSCONFIG\Services: VUAgent => 3
MSCONFIG\Services: w7Svc => 3
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^CodeMeter Control Center.lnk => C:\Windows\pss\CodeMeter Control Center.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^FILSHtray.lnk => C:\Windows\pss\FILSHtray.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Charlie^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Charlie^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Facebook Messenger.lnk => C:\Windows\pss\Facebook Messenger.lnk.Startup
MSCONFIG\startupreg: ACEStream => C:\Users\Charlie\AppData\Roaming\ACEStream\engine\ace_engine.exe
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: BCSSync => "M:\Programme\Microsoft Office 2010\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: CCleaner Monitoring => "M:\Programme\CCLeanerPro\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: Cm112GX64 => C:\Windows\system\HsMgr64.exe Envoke
MSCONFIG\startupreg: CyberGhost => "C:\Program Files\CyberGhost 5\CyberGhost.EXE" /autostart /min
MSCONFIG\startupreg: DAEMON Tools Lite => "M:\DaemonTools\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: DivXMediaServer => M:\Programme\WebDivix\DivX\DivX Media Server\DivXMediaServer.exe
MSCONFIG\startupreg: DivXUpdate => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
MSCONFIG\startupreg: Dropbox Update => "C:\Users\Charlie\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
MSCONFIG\startupreg: EEventManager => C:\PROGRA~2\EPSONS~1\EVENTM~1\EEVENT~1.EXE
MSCONFIG\startupreg: Facebook Update => "C:\Users\Charlie\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
MSCONFIG\startupreg: fischer Live Update => "C:\Program Files (x86)\fischer\Update\fischerUpdate.exe" -autostart
MSCONFIG\startupreg: FreePDF Assistant => "C:\Program Files (x86)\FreePDF_XP\fpassist.exe"
MSCONFIG\startupreg: Google Update => "C:\Users\Charlie\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Malwarebytes' Anti-Malware => "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
MSCONFIG\startupreg: msnmsgr => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: PlusService => "M:\Programme\MsPlus\PlusService.exe"
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Viber => "C:\Users\Charlie\AppData\Local\Viber\Viber.exe" StartMinimized
MSCONFIG\startupreg: Windows Mobile Device Center => %windir%\WindowsMobile\wmdc.exe
HKLM\...\StartupApproved\StartupFolder: => "Secunia PSI Tray.lnk"
HKLM\...\StartupApproved\Run: => "eDocPrintProMonitor"
HKLM\...\StartupApproved\Run: => "ApplyEsf-eDocPrintPro"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "Cisco AnyConnect Secure Mobility Agent for Windows"
HKLM\...\StartupApproved\Run32: => "PMBVolumeWatcher"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\StartupApproved\Run: => "Akamai NetSession Interface"
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\StartupApproved\Run: => "iFunBox"
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\StartupApproved\Run: => "WinPatrol"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [{A61230CF-F691-43CA-9549-7C24DF9CCD32}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{0CAC7BE2-B4B8-4B6F-BD0E-FA063FE3D8FE}] => C:\Program Files\iTunes\iTunes.exe
FirewallRules: [UDP Query User{533B197F-44B9-497C-BB2E-938E55A263A1}C:\program files (x86)\webcam 7\wlite.exe] => C:\program files (x86)\webcam 7\wlite.exe
FirewallRules: [TCP Query User{F75DF0D9-9FD3-4E97-B0AC-A81712F79E14}C:\program files (x86)\webcam 7\wlite.exe] => C:\program files (x86)\webcam 7\wlite.exe
FirewallRules: [UDP Query User{716796B9-D991-47EA-8979-B95F98D58395}C:\users\charlie\appdata\roaming\spotify\spotify.exe] => C:\users\charlie\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{01FE9E83-6CAC-4B34-8B64-02ACD38E24BD}C:\users\charlie\appdata\roaming\spotify\spotify.exe] => C:\users\charlie\appdata\roaming\spotify\spotify.exe
FirewallRules: [{7ED80F86-1928-421F-A81A-21794675CECD}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{826F4EFC-DCAA-4FAE-8713-1DB9E94119C3}] => LPort=2869
FirewallRules: [{F7E197F5-E02A-4CF5-AB14-40041A8C0B92}] => LPort=1900
FirewallRules: [{52EC1BA9-738C-4D7B-8080-032E9E9F4DB5}] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{2EFB16F9-50FE-44F8-8404-41E94CF29D33}] => C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{8D6F7CF1-C6B8-4F0A-BF1F-5DC805E7EF19}] => M:\Programme\WinRar\WinRAR.exe
FirewallRules: [{35DB4509-0EE8-4E5E-BABB-E259021BBA4D}] => M:\Programme\WinRar\WinRAR.exe
FirewallRules: [{FE1C3CC7-CC10-4E69-A246-27DE1D063785}] => M:\Programme\WinRar\WinRAR.exe
FirewallRules: [{7BF79882-E2DC-4CC4-9993-F1FA310F5E55}] => M:\Programme\WinRar\WinRAR.exe
FirewallRules: [{7FF23305-2BBE-4D89-A0FA-76A6C98210A6}] => M:\Programme\Microsoft Office 2010\Office14\GROOVE.EXE
FirewallRules: [{E691A3D6-E9AE-45B6-A338-EFAABDDFD632}] => M:\Programme\Microsoft Office 2010\Office14\GROOVE.EXE
FirewallRules: [{4D1928F4-4B99-4E2F-963E-6592C968C66D}] => M:\Programme\Microsoft Office 2010\Office14\ONENOTE.EXE
FirewallRules: [{47587808-1238-48DE-9906-2A0DE86FEEB9}] => M:\Programme\Microsoft Office 2010\Office14\ONENOTE.EXE
FirewallRules: [{839A323F-2402-463D-A771-475D1CAA6321}] => M:\Programme\Microsoft Office 2010\Office14\outlook.exe
FirewallRules: [{C08D6CA9-C734-491E-89CD-7D29E1CCD3A8}] => %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{8C0063E5-2924-46A7-B568-4A771AC4FFC9}] => %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{1E3710A8-B922-4924-ABDA-00AF3EBC506F}] => LPort=26675
FirewallRules: [TCP Query User{75C07E39-D2EA-4FEC-A1B0-5E3E04F1800E}C:\program files (x86)\Epson Software\Event Manager\eeventmanager.exe] => C:\program files (x86)\Epson Software\Event Manager\eeventmanager.exe
FirewallRules: [UDP Query User{7687CC5E-BB3E-4824-90E7-25FD15480EC8}C:\program files (x86)\Epson Software\Event Manager\eeventmanager.exe] => C:\program files (x86)\Epson Software\Event Manager\eeventmanager.exe
FirewallRules: [TCP Query User{EF8EFD46-67C9-4B5B-8B52-E391959DC0C5}C:\program files (x86)\Epson Software\Event Manager\eeventmanager.exe] => C:\program files (x86)\Epson Software\Event Manager\eeventmanager.exe
FirewallRules: [UDP Query User{DE58F80A-08E1-4594-A66A-92548ED8D97F}C:\program files (x86)\Epson Software\Event Manager\eeventmanager.exe] => C:\program files (x86)\Epson Software\Event Manager\eeventmanager.exe
FirewallRules: [TCP Query User{A455F47E-AD06-4B85-BF97-D106DFE20908}C:\Program Files (x86)\SopCast\SopCast.exe] => C:\Program Files (x86)\SopCast\SopCast.exe
FirewallRules: [UDP Query User{03FFF2E9-19D6-44D2-94E0-75C2534311DB}C:\Program Files (x86)\SopCast\SopCast.exe] => C:\Program Files (x86)\SopCast\SopCast.exe
FirewallRules: [TCP Query User{D1457A28-A6E7-40A7-90A7-C7167203EB63}C:\Program Files (x86)\SopCast\adv\SopAdver.exe] => C:\Program Files (x86)\SopCast\adv\SopAdver.exe
FirewallRules: [UDP Query User{CBC57C86-1BCD-4D32-89E9-A563AB33911B}C:\Program Files (x86)\SopCast\adv\SopAdver.exe] => C:\Program Files (x86)\SopCast\adv\SopAdver.exe
FirewallRules: [{3931C90A-956B-4501-B478-7FC38D86BDC7}] => C:\Program Files\UltraVNC\vncviewer.exe
FirewallRules: [{F35AE3BA-E253-4DE1-B4A4-A22A96FAAF05}] => C:\Program Files\UltraVNC\vncviewer.exe
FirewallRules: [TCP Query User{385CA6B4-A1A8-4A1A-9177-65CF7BD477CB}C:\program files\ultravnc\winvnc.exe] => C:\program files\ultravnc\winvnc.exe
FirewallRules: [UDP Query User{C8A24CFE-E238-43AB-B4FA-2D9A4729EB89}C:\program files\ultravnc\winvnc.exe] => C:\program files\ultravnc\winvnc.exe
FirewallRules: [{A6A4A5D1-3681-4A04-B663-0377D6B3DA9B}] => C:\Program Files (x86)\webcam 7\wLite.exe
FirewallRules: [{F939325F-8A03-4870-9EA8-F020FE3835DF}] => C:\Program Files (x86)\webcam 7\wLite.exe
FirewallRules: [{3F93B4CA-9040-473E-954E-5CA78BBE226B}] => C:\Program Files (x86)\webcam 7\wService.exe
FirewallRules: [{806FD49A-4CA2-4E2A-84D4-8061B4D0F726}] => C:\Program Files (x86)\webcam 7\wService.exe
FirewallRules: [TCP Query User{56C75D7E-E9F4-4652-B589-1549EED7147A}C:\Program Files (x86)\free music zilla\FMZilla.exe] => C:\Program Files (x86)\free music zilla\FMZilla.exe
FirewallRules: [UDP Query User{93538E47-AB07-47FF-8287-531232CC31B6}C:\Program Files (x86)\free music zilla\FMZilla.exe] => C:\Program Files (x86)\free music zilla\FMZilla.exe
FirewallRules: [{50F7A675-6F5B-4B74-A9CD-33A4B0440D8A}] => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{0F477AAB-7F11-4327-99D0-F7438529D57C}] => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{4C307F3C-F3AF-424D-82D4-15BA16E17874}C:\users\charlie\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\charlie\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{0C0D9A54-BDC5-4D1B-A375-54B1E8F9021F}C:\users\charlie\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\charlie\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{6A0A3BCC-68DA-47A6-9E50-9A2840FAC28D}C:\program files (x86)\sopcast\sopcast.exe] => C:\program files (x86)\sopcast\sopcast.exe
FirewallRules: [UDP Query User{646505B5-0529-4570-8F18-04B844DC7430}C:\program files (x86)\sopcast\sopcast.exe] => C:\program files (x86)\sopcast\sopcast.exe
FirewallRules: [TCP Query User{085BB3B0-E7B8-4745-8DB4-E71BF7FDCDCE}C:\program files (x86)\sopcast\adv\sopadver.exe] => C:\program files (x86)\sopcast\adv\sopadver.exe
FirewallRules: [UDP Query User{E876D50D-0D4E-46AB-B9D1-37DC30625AC8}C:\program files (x86)\sopcast\adv\sopadver.exe] => C:\program files (x86)\sopcast\adv\sopadver.exe
FirewallRules: [{3B5E27D8-A9E7-4048-BE0C-4D2CBAB557F2}] => C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe
FirewallRules: [{092BD38F-6625-4FE7-87F4-71F15D995BB2}] => C:\Program Files\Sony\VAIO Smart Network\WFDA\WiFiDirectApplication.exe
FirewallRules: [{4976EB54-79B5-4375-98C6-D654427D152E}] => C:\Program Files\Sony\VAIO Smart Network\WFDA\WiFiDirectApplication.exe
FirewallRules: [{0791959C-431C-42D6-A158-DF77B179CBB6}] => C:\Program Files\Sony\VAIO Smart Network\WFDA\WiFiDirectApplication.exe
FirewallRules: [{1C6170FF-3169-42C8-B88C-4EF00F048EDD}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{BDBFA357-6D4F-468A-B177-F28482FA2CE5}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{65F6EC45-B8C0-40F0-B6F0-E08AF7C8533D}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{238D7E3B-479D-41BA-BAE0-C11FE489A223}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{DDCA6CC2-FA00-43E9-AFB3-E56C40E5A769}] => C:\Program Files\HP\HP Officejet 6500 E710n-z\bin\FaxApplications.exe
FirewallRules: [{0B56A22E-7AFB-414D-88AE-E555369880B0}] => C:\Program Files\HP\HP Officejet 6500 E710n-z\bin\DigitalWizards.exe
FirewallRules: [{C7E8EC2A-B883-479A-99EF-563A8525837B}] => C:\Program Files\HP\HP Officejet 6500 E710n-z\bin\SendAFax.exe
FirewallRules: [{751D0E76-675E-4DFA-8455-580121920F47}] => C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\DeviceSetup.exe
FirewallRules: [{6A0A16B7-A1EB-4371-A97E-7D084FADF5EC}] => C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\HPNetworkCommunicator.exe
FirewallRules: [{942E7D96-00BC-45BC-B2F8-467720FDE0BB}] => C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [TCP Query User{D8EEFF1B-7A71-4A3B-A2D3-7BABECC6EEAB}C:\program files (x86)\ppöúêö\ihelper.exe] => C:\program files (x86)\ppöúêö\ihelper.exe
FirewallRules: [UDP Query User{37348A56-11F6-46A2-821D-497903FCB02F}C:\program files (x86)\ppöúêö\ihelper.exe] => C:\program files (x86)\ppöúêö\ihelper.exe
FirewallRules: [{6B2F7EEB-5D39-4F02-ACBE-B6E4622862EF}] => C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
FirewallRules: [{546D60E4-95CE-486F-9BFD-BDC8A11BABFB}] => C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
FirewallRules: [{229DDEB0-D7C0-4A1F-B91E-2D502680997F}] => C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
FirewallRules: [{71D8009D-64A4-4004-96CA-06C304381EEB}] => C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
FirewallRules: [{B06174DE-4DAF-43D5-A116-72786F0BAED3}] => C:\Program Files\Sony\VAIO Smart Network\WFDA\WiFiDirectApplication.exe
FirewallRules: [{DFEF7BAD-15DD-46BD-A6CB-BD424CC99CDC}] => C:\Program Files\Sony\VAIO Smart Network\WFDA\WiFiDirectApplication.exe
FirewallRules: [TCP Query User{8B90234C-70B4-474E-8F61-CFFFD50F8767}C:\program files (x86)\ppöúêö\ihelper.exe] => C:\program files (x86)\ppöúêö\ihelper.exe
FirewallRules: [UDP Query User{6CFC6B93-6AE2-40C1-852A-A0BD6343B606}C:\program files (x86)\ppöúêö\ihelper.exe] => C:\program files (x86)\ppöúêö\ihelper.exe
FirewallRules: [TCP Query User{A8585E56-9EEF-44AB-B161-9FE7407CB438}C:\program files\maple 16\jre\bin\maple.exe] => C:\program files\maple 16\jre\bin\maple.exe
FirewallRules: [UDP Query User{B3012426-1B69-4BD3-976B-09B91899EAC3}C:\program files\maple 16\jre\bin\maple.exe] => C:\program files\maple 16\jre\bin\maple.exe
FirewallRules: [{EE5E61AA-709D-47DA-AF42-FFD4D1DBE1F0}] => C:\program files\maple 16\jre\bin\maple.exe
FirewallRules: [{60FDC136-1605-40DF-BAC2-D8A482E880A6}] => C:\program files\maple 16\jre\bin\maple.exe
FirewallRules: [{52CCEE7D-0C86-42AB-8904-4329446620F0}] => C:\Users\Charlie\AppData\Roaming\ACEStream\engine\ace_engine.exe
FirewallRules: [{CC174155-1233-4C78-B060-237F44F94A50}] => C:\Users\Charlie\AppData\Roaming\ACEStream\engine\ace_engine.exe
FirewallRules: [TCP Query User{AA2F7DF4-04F2-4E64-81F4-24D50644C88F}C:\users\charlie\appdata\roaming\acestream\engine\ace_engine.exe] => C:\users\charlie\appdata\roaming\acestream\engine\ace_engine.exe
FirewallRules: [UDP Query User{D61E6136-DC41-4E08-A026-D37A590549A0}C:\users\charlie\appdata\roaming\acestream\engine\ace_engine.exe] => C:\users\charlie\appdata\roaming\acestream\engine\ace_engine.exe
FirewallRules: [{20D15C17-6929-4D2D-A72B-753C639F6373}] => LPort=1000
FirewallRules: [TCP Query User{62AC8DA6-FE7D-441E-AE96-76CBC387F2E5}C:\program files (x86)\java\jre7\bin\java.exe] => C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [UDP Query User{4B955CC1-50B6-4F3B-BBFB-D39A0FF629E4}C:\program files (x86)\java\jre7\bin\java.exe] => C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [{1A2C2089-5C58-492D-9AE9-9F54C6BC9ED6}] => C:\Windows\system32\hasplms.exe
FirewallRules: [{8FC8207F-BA88-432E-BB35-DA57F9EBFB4B}] => C:\Program Files\mb Lizenz-Server\64-Bit\MBLizenzServer.exe
FirewallRules: [{AB0C7CAC-2353-4C04-8848-4C96EDDA7743}] => C:\Program Files\mb Lizenz-Server\64-Bit\MBLizenzServer.exe
FirewallRules: [{C5846F69-8727-4C78-8102-0FDE8F469E21}] => C:\Program Files\mb Lizenz-Server\64-Bit\MBLizenzServer.exe
FirewallRules: [{3E9DDDD6-9AF4-466C-BDC1-5ABA04DC197E}] => C:\Program Files\mb Lizenz-Server\64-Bit\MBLizenzServer.exe
FirewallRules: [{4DF8E275-FFCE-4E67-BE42-BF5C040FA29C}] => C:\Program Files\mb Lizenz-Server\64-Bit\MBLizenzServer.exe
FirewallRules: [{E2B358C4-91F3-4A86-9B78-3A29497C9E9D}] => C:\Program Files\mb Lizenz-Server\64-Bit\MBLizenzServer.exe
FirewallRules: [{7994AD14-EBB7-43B8-B8EB-BCD29061D56C}] => C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [{5C91B86B-B01E-4187-BEC3-D53473787ABB}] => C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [{C5BF5B8A-FED5-4ACB-AFF9-9C547876B69E}] => C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [{ECA4E1FB-042E-4490-BAE3-596A34D46FC1}] => C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{A892679A-B204-43DD-B862-47426C742951}] => C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [TCP Query User{A301B297-2586-40B5-B51C-43B3DBD4B174}C:\users\charlie\appdata\local\akamai\netsession_win.exe] => C:\users\charlie\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{A85CF4CD-13DC-4C32-B524-148A9EBA29B9}C:\users\charlie\appdata\local\akamai\netsession_win.exe] => C:\users\charlie\appdata\local\akamai\netsession_win.exe
FirewallRules: [{4251F5B8-BED1-4A2B-910F-6C6B590212F9}] => C:\users\charlie\appdata\local\akamai\netsession_win.exe
FirewallRules: [{4B1FD269-2D08-41FA-834D-1438D000DB6A}] => C:\users\charlie\appdata\local\akamai\netsession_win.exe
FirewallRules: [{CCCDCB6D-D7ED-4CFA-B731-0794A7C56515}] => C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe
FirewallRules: [{44D9C694-A9FC-457E-BD6D-B0E5201FFC9A}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{1B08C61B-73A9-4BFE-BE1D-57193874F1D8}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{9AD4460F-DCC0-4512-BC20-098D1C97F8AA}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{E8FB776C-086B-41B7-B507-A0791DD73210}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{5F5DA9BA-0B00-4176-8944-0309308E7C2D}] => C:\Program Files\Sony\VAIO Care\VCAgent.exe
FirewallRules: [{ACA3BCBF-9D1D-4867-B850-B63764BCBA8B}] => C:\Program Files\Sony\VAIO Care\VCAdmin.exe
FirewallRules: [{3BBB14B6-C847-48CB-9E56-92EAC5395CF9}] => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
FirewallRules: [{BBD6CDF1-37CB-4875-8B6B-56B1FDC3E2E5}] => C:\Program Files\Sony\VAIO Care\VAIOShell.exe
FirewallRules: [{3FE69202-CDA0-4876-9960-6D68EEA83A37}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{1A2CE3D8-9192-4CC2-9926-B4BE1FA49981}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{5B3134BE-2330-4040-A9CA-EA13189456FC}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{E89B6260-0148-4A1C-8FC0-D5E66F152F74}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{4E9099B4-7976-4C14-BAD5-83723CF2F5DA}C:\users\charlie\appdata\roaming\spotify\spotify.exe] => C:\users\charlie\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{1B234E7A-F5C5-4A10-B7EA-2D30D5D729E3}C:\users\charlie\appdata\roaming\spotify\spotify.exe] => C:\users\charlie\appdata\roaming\spotify\spotify.exe
FirewallRules: [{6F07B673-8F75-43BF-9697-232C07EF2926}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
DomainProfile\AuthorizedApplications: [C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe] => Enabled:CodeMeter Runtime Server
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe] => Enabled:CodeMeter Runtime Server

==================== Wiederherstellungspunkte =========================

06-01-2017 17:40:09 Windows Update
09-01-2017 19:43:05 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/09/2017 07:43:42 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (01/09/2017 07:32:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Charlie-VAIO)
Description: Bei der Aktivierung der App „Microsoft.Windows.Photos_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (01/09/2017 07:32:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: Charlie-VAIO)
Description: Das Paket „Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe+App“ wurde beendet, da das Anhalten zu lange dauerte.

Error: (01/09/2017 07:24:54 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.

Details:
        (HRESULT : 0x80040210) (0x80040210)

Error: (01/08/2017 10:52:37 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x33cc
Startzeit der fehlerhaften Anwendung: 0x01d26994f0a5eafe
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: e0c11c8c-c6dd-49eb-850c-8928e5fb4253
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (01/08/2017 10:52:36 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x33cc
Startzeit der fehlerhaften Anwendung: 0x01d26994f0a5eafe
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 03c46a85-886e-461d-acc0-1d259a7af0a8
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (01/08/2017 06:45:42 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x2cc4
Startzeit der fehlerhaften Anwendung: 0x01d269726fc18ef5
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: df4203e2-880b-4f05-ae8a-c96076aa79ef
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (01/08/2017 06:45:39 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x2cc4
Startzeit der fehlerhaften Anwendung: 0x01d269726fc18ef5
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: d9853af1-a811-4e8f-97b3-2687b981c7ba
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (01/08/2017 06:35:03 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iCloudPhotos.exe, Version: 105.0.0.118, Zeitstempel: 0x582d17b3
Name des fehlerhaften Moduls: iCloudPhotos_main.dll, Version: 105.0.0.118, Zeitstempel: 0x582dfc52
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000f48bc
ID des fehlerhaften Prozesses: 0x2c04
Startzeit der fehlerhaften Anwendung: 0x01d26970e6f306a0
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos_main.dll
Berichtskennung: 7294db37-b24c-4751-86d0-2b7e397f411e
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (01/07/2017 10:39:46 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Charlie-VAIO)
Description: Bei der Aktivierung der App „Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


Systemfehler:
=============
Error: (01/09/2017 07:45:12 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Sicherheitsupdate für Microsoft Silverlight (KB3193713)

Error: (01/09/2017 07:26:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/09/2017 07:26:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/09/2017 07:26:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/08/2017 09:26:08 PM) (Source: DCOM) (EventID: 10010) (User: Charlie-VAIO)
Description: Der Server "{0002DF02-0000-0000-C000-000000000046}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (01/08/2017 06:33:32 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/08/2017 06:33:32 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/08/2017 06:33:32 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/07/2017 10:39:46 PM) (Source: DCOM) (EventID: 10010) (User: Charlie-VAIO)
Description: Der Server "App.AppXryc2qd338f5728r9gzzazav8206ba77s.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (01/07/2017 05:54:50 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Sicherheitsupdate für Microsoft Silverlight (KB3193713)


CodeIntegrity:
===================================
  Date: 2017-01-10 18:55:01.696
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-10 18:55:01.695
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-10 18:50:37.310
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-10 18:50:37.308
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-07 20:24:43.556
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-07 20:24:43.539
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-07 20:24:43.522
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-07 20:24:43.506
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-07 20:24:43.489
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-07 20:24:43.461
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
Prozentuale Nutzung des RAM: 66%
Installierter physikalischer RAM: 4077.86 MB
Verfgbarer physikalischer RAM: 1365.23 MB
Summe virtueller Speicher: 6470.29 MB
Verfgbarer virtueller Speicher: 3078.78 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:291.83 GB) (Free:143.29 GB) NTFS
Drive m: (Volume) (Fixed) (Total:290.73 GB) (Free:260.65 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: 99DAAE85)
Partition 1: (Not Active) - (Size=13.5 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=291.8 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=290.7 GB) - (Type=OF Extended)

==================== Ende von Addition.txt ============================

cosinus 11.01.2017 22:20
Warum postest du die jetzt nochmal? Die addition hast du schon richtig in CODE-Tags anfangs gepostet, nur die FRST.txt nicht

chaaali 12.01.2017 19:41
sorry meine schuld

FRST1:

Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 08-01-2017
durchgefhrt von Charlie (Administrator) auf CHARLIE-VAIO (10-01-2017 18:54:42)
Gestartet von M:\downloads
Geladene Profile: Charlie (Verfgbare Profile: Charlie & Test1)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Edge)
Start-Modus: Normal
Anleitung fr Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 6\CyberGhost.Service.exe
(The OpenVPN Project) C:\Program Files\CyberGhost 6\Data\OpenVPN\openvpn.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
() C:\Windows\SysWOW64\HsMgr.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Dropbox, Inc.) C:\Users\Charlie\AppData\Local\Dropbox\Update\DropboxUpdate.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Apple, Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\secd.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11610.1001.23.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurckgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [226672 2010-11-04] (Alps Electric Co., Ltd.)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [518784 2011-03-29] (Conexant Systems, Inc.)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [657056 2011-03-31] (Atheros Commnucations)
HKLM\...\Run: [Cm112Sound] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cm112.dll,CMICtrlWnd
HKLM\...\Run: [Cm112GX] => C:\Windows\syswow64\HsMgr.exe [200704 2008-07-11] ()
HKLM\...\Run: [Cm108Sound] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cm108.dll,CMICtrlWnd
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176952 2016-07-05] (Apple Inc.)
HKLM\...\Run: [ApplyEsf-eDocPrintPro] => C:\Program Files\Common Files\MAYComputer\eDocPrintPro\ApplyEsf.exe [2565632 2016-03-02] (May Software)
HKLM\...\Run: [eDocPrintProMonitor] => C:\Program Files\Common Files\MAYComputer\eDocPrintPro\eDocPrintProMonitor.exe [3966912 2016-03-31] (May Software)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2017-01-06] (Microsoft Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2757312 2011-02-15] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [648032 2010-11-26] (Sony Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-08-06] (Apple Inc.)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [975248 2015-09-23] (Cisco Systems, Inc.)
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\Run: [WinPatrol] => C:\Program Files (x86)\BillP Studios\WinPatrol\winpatrol.exe [455744 2013-12-10] (BillP Studios)
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Charlie\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\Run: [Dropbox Update] => C:\Users\Charlie\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-25] (Dropbox, Inc.)
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\Run: [iFunBox] => C:\Program Files (x86)\i-Funbox DevTeam\iFunBox_x64.exe [2781696 2015-07-07] (i-Funbox.com)
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\Run: [Spotify Web Helper] => C:\Users\Charlie\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1431664 2016-11-25] (Spotify Ltd)
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\Run: [Spotify] => C:\Users\Charlie\AppData\Roaming\Spotify\Spotify.exe [6987376 2016-11-25] (Spotify Ltd)
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2016-11-17] (Apple Inc.)
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2016-11-17] (Apple Inc.)
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\Run: [iCloudPhotos] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe [356664 2016-11-17] (Apple Inc.)
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2016-11-17] (Apple Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => M:\Programme\Microsoft Office 2010\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 2 (GFS Stub)] -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => M:\Programme\Microsoft Office 2010\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => M:\Programme\Microsoft Office 2010\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 3 (GFS Folder)] -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => M:\Programme\Microsoft Office 2010\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => M:\Programme\Microsoft Office 2010\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [Symbol-Overlay-Steuerprogramm fr AutoCAD Digitale Signaturen] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2011-02-04] (Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Charlie\AppData\Roaming\Dropbox\bin\DropboxExt.3.0.dll [2016-12-21] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2011-11-16]
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurckgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\..\Interfaces\{1f760305-0502-4d90-b09f-623fb2cde1a7}: [NameServer] 194.187.251.67,185.93.180.131
Tcpip\..\Interfaces\{1f760305-0502-4d90-b09f-623fb2cde1a7}: [DhcpNameServer] 194.187.251.67 185.93.180.131 38.132.106.139
Tcpip\..\Interfaces\{2dd8fe5b-42de-412e-8982-d3dd009e99af}: [NameServer] 194.187.251.67,185.93.180.131
Tcpip\..\Interfaces\{8db9f266-cd47-4664-8c0c-6e0ecbac8e45}: [NameServer] 194.187.251.67,185.93.180.131
Tcpip\..\Interfaces\{8db9f266-cd47-4664-8c0c-6e0ecbac8e45}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{a3e2f7b5-3a59-4074-8824-47bd28011e54}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschrnkung <======= ACHTUNG
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschrnkung <======= ACHTUNG
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1747016203-3155398904-578371931-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM-x32 -> {AC625160-4ACC-44B1-BF32-DCC0A3D2BE53} URL = hxxp://www.bing.com/search?q={searchTerms}&form=SNYEDF&pc=MASE&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-1747016203-3155398904-578371931-1000 -> {408B6B9F-154A-48A3-8E6A-92804D1F51B0} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices
SearchScopes: HKU\S-1-5-21-1747016203-3155398904-578371931-1000 -> {7C2F6073-2FC5-43D2-9D96-8840CFA6F129} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-21/4?satitle={searchTerms}
SearchScopes: HKU\S-1-5-21-1747016203-3155398904-578371931-1000 -> {AC457CC2-2E7A-4F6A-825D-25123C566EF2} URL = hxxp://de.shopping.com/?linkin_id=8056363
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> M:\Programme\Microsoft Office 2010\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> M:\Programme\Microsoft Office 2010\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: PDFXChange 2012 -> {42DFA04F-0F16-418e-B80C-AB97A5AFAD3A} -> C:\Program Files\Tracker Software\PDF-XChange 5\PXCIEaddin5.dll [2012-11-12] (Tracker Software Products (Canada) Ltd.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
Toolbar: HKLM-x32 - PDFXChange 2012 - {42DFA04F-0F16-418e-B80C-AB97A5AFAD3A} - C:\Program Files\Tracker Software\PDF-XChange 5\PXCIEaddin5.dll [2012-11-12] (Tracker Software Products (Canada) Ltd.)

FireFox:
========
FF ProfilePath: C:\Users\Charlie\AppData\Roaming\Mozilla\Firefox\Profiles\1t6wmnt7.default [2016-11-01]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: (PDF Architect Converter For Firefox) - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-01-17] [ist nicht signiert]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-13] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2012-11-12] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\system32\npDeployJava1.dll [2013-06-22] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> M:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-13] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-12-18] ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> M:\Programme\WebDivix\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> M:\Programme\WebDivix\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2012-11-12] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files (x86)\Sony\MSS\3.8.130\npMcAfeeMss.dll [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2012-05-12] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2012-05-12] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1747016203-3155398904-578371931-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2012-11-12] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-1747016203-3155398904-578371931-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Charlie\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [Keine Datei]
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll [2012-11-12] (Tracker Software Products (Canada) Ltd.)

Chrome:
=======
CHR DefaultProfile: Default
CHR Session Restore: Default -> ist aktiviert.
CHR Profile: C:\Users\Charlie\AppData\Local\Google\Chrome\User Data\Default [2017-01-07]
CHR Extension: (ProxFlow) - C:\Users\Charlie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2016-12-26]
CHR Extension: (AdBlock) - C:\Users\Charlie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-01-05]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Charlie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-18]
CHR Extension: (Chrome Media Router) - C:\Users\Charlie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-28]

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S4 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S4 AllplanUpdateLauncher 2015; C:\Program Files\Nemetschek\AllplanUpdateLauncher 2015\AllplanUpdateLauncher.exe [16680 2014-07-10] (Nemetschek Allplan Systems GmbH)
S4 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)
S4 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-03-31] (Atheros) [Datei ist nicht signiert]
S4 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [18656 2011-02-02] ()
R2 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [71728 2016-08-18] (CyberGhost S.R.L)
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [65128 2016-08-08] (CyberGhost S.R.L)
S4 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [104096 2011-07-19] (Atheros Communication Inc.) [Datei ist nicht signiert]
R2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [413336 2015-08-26] ()
S4 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe [98304 2011-10-03] (Firebird Project) [Datei ist nicht signiert]
S4 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe [3764224 2011-10-03] (Firebird Project) [Datei ist nicht signiert]
S4 fischerUpdateSvc; C:\Program Files (x86)\fischer\Update\fischerUpdateService.exe [2892800 2014-04-09] (fischerwerke Gmbh & Co. KG) [Datei ist nicht signiert]
S4 hasplms; C:\Windows\system32\hasplms.exe [4609928 2013-08-01] (SafeNet Inc.)
S4 mb Lizenz-Server; C:\Program Files\mb Lizenz-Server\64-Bit\MBLizenzServer.exe [825136 2013-10-15] (mb AEC Software GmbH)
S4 McComponentHostServiceSony; C:\Program Files (x86)\Sony\MSS\3.8.130\McCHSvc.exe [235216 2013-10-16] (McAfee, Inc.)
S3 Microsoft SharePoint Workspace Audit Service; M:\Programme\Microsoft Office 2010\Office14\GROOVE.EXE [50942144 2013-12-19] (Microsoft Corporation)
S4 nvservice; C:\Windows\system32\nvservice.exe [192800 2013-02-04] (NVIDIA Corporation)
S4 OpenVPNService; C:\Program Files (x86)\FH-Aachen OpenVPN\bin\openvpnserv.exe [38926 2011-05-20] () [Datei ist nicht signiert]
S4 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1324104 2013-01-09] (pdfforge GbR)
S4 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [795208 2013-01-09] (pdfforge GbR)
S4 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [994360 2011-07-29] (Secunia)
S4 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [399416 2011-07-29] (Secunia)
S4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)
S4 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.)
S4 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [413336 2015-08-26] ()
S4 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-20] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1656600 2016-03-31] (Sony Corporation)
S4 w7Svc; C:\Program Files (x86)\webcam 7\wService.exe [4999680 2011-07-27] (Moonware Studios) [Datei ist nicht signiert]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 ArcSoftKsUFilter; C:\WINDOWS\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [331328 2013-08-01] (SafeNet Inc.)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvszqwu.inf_amd64_087821b04d1a8fce\nvlddmkm.sys [13754936 2016-09-12] (NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek                                            )
R3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [29352 2015-10-18] ()
S3 semav6thermal64ro; C:\Windows\system32\drivers\semav6thermal64ro.sys [13792 2015-08-01] ()
R3 vpnva; C:\WINDOWS\System32\drivers\vpnva64-6.sys [52592 2014-03-12] (Cisco Systems, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R2 WIBUKEY; C:\WINDOWS\System32\DRIVERS\WibuKey64.sys [105008 2013-10-13] (WIBU-SYSTEMS AG)
R3 WirelessKeyboardFilter; C:\WINDOWS\System32\drivers\WirelessKeyboardFilter.sys [49896 2016-07-22] (Microsoft Corporation)
U3 aspnet_state; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-10 18:41 - 2017-01-10 18:41 - 00006541 _____ C:\Users\Charlie\Desktop\antimalware_20160109.txt
2017-01-09 19:42 - 2017-01-09 19:42 - 00001171 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2017-01-07 11:08 - 2017-01-07 11:08 - 00002071 _____ C:\Users\Charlie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberGhost 6.lnk
2017-01-07 11:06 - 2017-01-07 11:07 - 00000000 ____D C:\Program Files\CyberGhost 6
2017-01-07 11:06 - 2017-01-07 11:06 - 00001769 _____ C:\Users\Charlie\Desktop\CyberGhost 6.lnk
2017-01-07 11:06 - 2017-01-07 11:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 6
2017-01-06 15:38 - 2017-01-06 15:38 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2017-01-06 15:34 - 2017-01-08 06:42 - 00000000 ____D C:\Users\Charlie\AppData\Local\ConnectedDevicesPlatform
2017-01-06 15:34 - 2017-01-06 15:34 - 00000020 ___SH C:\Users\Charlie\ntuser.ini
2017-01-06 14:43 - 2017-01-06 14:43 - 00000000 _SHDL C:\Users\Default\Vorlagen
2017-01-06 14:43 - 2017-01-06 14:43 - 00000000 _SHDL C:\Users\Default\Startmen
2017-01-06 14:43 - 2017-01-06 14:43 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2017-01-06 14:43 - 2017-01-06 14:43 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2017-01-06 14:43 - 2017-01-06 14:43 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2017-01-06 14:43 - 2017-01-06 14:43 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2017-01-06 14:43 - 2017-01-06 14:43 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2017-01-06 14:43 - 2017-01-06 14:43 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2017-01-06 14:43 - 2017-01-06 14:43 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2017-01-06 14:43 - 2017-01-06 14:43 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-01-06 14:43 - 2017-01-06 14:43 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2017-01-06 14:43 - 2017-01-06 14:43 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2017-01-06 14:43 - 2017-01-06 14:43 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2017-01-06 14:43 - 2017-01-06 14:43 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2017-01-06 14:43 - 2017-01-06 14:43 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2017-01-06 14:43 - 2017-01-06 14:43 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2017-01-06 14:43 - 2017-01-06 14:43 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-01-06 14:43 - 2017-01-06 14:43 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2017-01-06 14:43 - 2017-01-06 14:43 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2017-01-06 14:42 - 2017-01-06 14:42 - 00000000 ____D C:\ProgramData\USOShared
2017-01-06 14:40 - 2017-01-06 14:41 - 00011433 _____ C:\WINDOWS\diagwrn.xml
2017-01-06 14:40 - 2017-01-06 14:41 - 00011433 _____ C:\WINDOWS\diagerr.xml
2017-01-06 14:39 - 2017-01-06 14:39 - 00003908 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000UA
2017-01-06 14:39 - 2017-01-06 14:39 - 00003850 _____ C:\WINDOWS\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000UA
2017-01-06 14:39 - 2017-01-06 14:39 - 00003640 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000Core
2017-01-06 14:39 - 2017-01-06 14:39 - 00003608 _____ C:\WINDOWS\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000Core
2017-01-06 14:39 - 2017-01-06 14:39 - 00003556 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-01-06 14:39 - 2017-01-06 14:39 - 00003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-01-06 14:39 - 2017-01-06 14:39 - 00003334 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1442130645
2017-01-06 14:39 - 2017-01-06 14:39 - 00003332 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-01-06 14:39 - 2017-01-06 14:39 - 00003310 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{2ABB2932-AA29-4351-B409-8136CB98F6A6}
2017-01-06 14:39 - 2017-01-06 14:39 - 00003212 _____ C:\WINDOWS\System32\Tasks\WebContent AutoUpdate 2012
2017-01-06 14:39 - 2017-01-06 14:39 - 00003194 _____ C:\WINDOWS\System32\Tasks\WebContent AutoUpdate 2011
2017-01-06 14:39 - 2017-01-06 14:39 - 00003160 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2017-01-06 14:39 - 2017-01-06 14:39 - 00003142 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-01-06 14:39 - 2017-01-06 14:39 - 00002828 _____ C:\WINDOWS\System32\Tasks\AutoUpdate Allplan 2012
2017-01-06 14:39 - 2017-01-06 14:39 - 00002820 _____ C:\WINDOWS\System32\Tasks\AutoUpdate Allplan 2015
2017-01-06 14:39 - 2017-01-06 14:39 - 00002820 _____ C:\WINDOWS\System32\Tasks\Allplan AutoUpdate 2011-1
2017-01-06 14:39 - 2017-01-06 14:39 - 00002770 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-01-06 14:39 - 2017-01-06 14:39 - 00002642 _____ C:\WINDOWS\System32\Tasks\Apple Diagnostics
2017-01-06 14:39 - 2017-01-06 14:39 - 00002364 _____ C:\WINDOWS\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
2017-01-06 14:39 - 2017-01-06 14:39 - 00002338 _____ C:\WINDOWS\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe
2017-01-06 14:39 - 2017-01-06 14:39 - 00002336 _____ C:\WINDOWS\System32\Tasks\Microsoft_Hardware_Launch_itype_exe
2017-01-06 14:39 - 2017-01-06 14:39 - 00002322 _____ C:\WINDOWS\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2017-01-06 14:39 - 2017-01-06 14:39 - 00002320 _____ C:\WINDOWS\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2017-01-06 14:39 - 2017-01-06 14:39 - 00002292 _____ C:\WINDOWS\System32\Tasks\USER_ESRV_SVC
2017-01-06 14:39 - 2017-01-06 14:39 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-01-06 14:39 - 2017-01-06 14:39 - 00000000 ____D C:\WINDOWS\System32\Tasks\Sony Corporation
2017-01-06 14:39 - 2017-01-06 14:39 - 00000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform
2017-01-06 14:39 - 2017-01-06 14:39 - 00000000 ____D C:\WINDOWS\System32\Tasks\Apple
2017-01-06 14:18 - 2017-01-06 14:18 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-01-06 14:18 - 2017-01-06 14:18 - 00000000 ____D C:\Users\Default\AppData\Roaming\Sun
2017-01-06 14:18 - 2017-01-06 14:18 - 00000000 ____D C:\Users\Default\AppData\Roaming\Media Center Programs
2017-01-06 14:18 - 2017-01-06 14:18 - 00000000 ____D C:\Users\Default\AppData\Roaming\Apple Computer
2017-01-06 14:18 - 2017-01-06 14:18 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2017-01-06 14:18 - 2017-01-06 14:18 - 00000000 ____D C:\Users\Default\AppData\Local\Apple Computer
2017-01-06 14:18 - 2017-01-06 14:18 - 00000000 ____D C:\Users\Default\AppData\Local\Apple
2017-01-06 14:18 - 2017-01-06 14:18 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Sun
2017-01-06 14:18 - 2017-01-06 14:18 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Media Center Programs
2017-01-06 14:18 - 2017-01-06 14:18 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Apple Computer
2017-01-06 14:18 - 2017-01-06 14:18 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2017-01-06 14:18 - 2017-01-06 14:18 - 00000000 ____D C:\Users\Default User\AppData\Local\Apple Computer
2017-01-06 14:18 - 2017-01-06 14:18 - 00000000 ____D C:\Users\Default User\AppData\Local\Apple
2017-01-06 14:07 - 2017-01-06 14:07 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2017-01-06 14:06 - 2017-01-06 14:24 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-01-06 14:02 - 2017-01-08 21:26 - 00000000 ____D C:\Users\Charlie
2017-01-06 14:02 - 2017-01-06 14:29 - 00000000 ____D C:\Users\Test1
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Test1\Vorlagen
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Test1\Startmen
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Test1\Netzwerkumgebung
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Test1\Lokale Einstellungen
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Test1\Eigene Dateien
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Test1\Druckumgebung
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Test1\Documents\Eigene Videos
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Test1\Documents\Eigene Musik
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Test1\Documents\Eigene Bilder
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Test1\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Test1\AppData\Local\Verlauf
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Test1\AppData\Local\Anwendungsdaten
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Test1\Anwendungsdaten
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Charlie\Vorlagen
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Charlie\Startmen
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Charlie\Netzwerkumgebung
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Charlie\Lokale Einstellungen
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Charlie\Eigene Dateien
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Charlie\Druckumgebung
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Charlie\Documents\Eigene Videos
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Charlie\Documents\Eigene Musik
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Charlie\Documents\Eigene Bilder
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Charlie\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Charlie\AppData\Local\Verlauf
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Charlie\AppData\Local\Anwendungsdaten
2017-01-06 14:02 - 2017-01-06 14:02 - 00000000 _SHDL C:\Users\Charlie\Anwendungsdaten
2017-01-06 13:57 - 2017-01-06 14:08 - 00000000 ____D C:\ProgramData\NVIDIA
2017-01-06 13:57 - 2017-01-06 13:57 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2017-01-06 13:57 - 2017-01-06 13:57 - 00000000 ____D C:\Program Files\Common Files\Atheros
2017-01-06 13:57 - 2016-08-01 13:54 - 06386744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2017-01-06 13:57 - 2016-08-01 13:54 - 02466360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2017-01-06 13:57 - 2016-08-01 13:54 - 01762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2017-01-06 13:57 - 2016-08-01 13:54 - 01365048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2017-01-06 13:57 - 2016-08-01 13:54 - 00547896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2017-01-06 13:57 - 2016-08-01 13:54 - 00393784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2017-01-06 13:57 - 2016-08-01 13:54 - 00081856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2017-01-06 13:57 - 2016-08-01 13:54 - 00071224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2017-01-06 13:57 - 2016-07-28 14:02 - 07242545 _____ C:\WINDOWS\system32\nvcoproc.bin
2017-01-06 13:56 - 2017-01-06 13:57 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-01-06 13:56 - 2017-01-06 13:56 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf
2017-01-06 13:56 - 2017-01-06 13:56 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-01-06 13:56 - 2017-01-06 13:56 - 00000000 ____D C:\Program Files\Apoint
2017-01-06 13:54 - 2016-07-16 12:41 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-01-06 13:53 - 2017-01-10 18:37 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-01-06 13:53 - 2017-01-06 13:53 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2017-01-06 13:52 - 2017-01-06 14:26 - 00194296 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-01-06 13:51 - 2017-01-06 14:43 - 00000000 ___DC C:\WINDOWS\Panther
2017-01-06 13:47 - 2017-01-06 13:48 - 00000000 ____D C:\Windows.old
2017-01-06 13:41 - 2017-01-06 13:41 - 23677952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 22563328 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 19417088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 13441024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 13084160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 12349952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 12177920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL
2017-01-06 13:41 - 2017-01-06 13:41 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL
2017-01-06 13:41 - 2017-01-06 13:41 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 06574592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 04746752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 04596224 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2017-01-06 13:41 - 2017-01-06 13:41 - 04148736 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 04130432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 03777536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 03520512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2017-01-06 13:41 - 2017-01-06 13:41 - 03306496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2017-01-06 13:41 - 2017-01-06 13:41 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2017-01-06 13:41 - 2017-01-06 13:41 - 02747392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 02537824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-01-06 13:41 - 2017-01-06 13:41 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 02446696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 02424320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 02370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 02356736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 02257104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 02256384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 02255712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-01-06 13:41 - 2017-01-06 13:41 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 02186896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 02095616 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-01-06 13:41 - 2017-01-06 13:41 - 02049480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 02026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-01-06 13:41 - 2017-01-06 13:41 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01969912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01891328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01886344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01847048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01790464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01555456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2017-01-06 13:41 - 2017-01-06 13:41 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01473048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01453992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01362504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpmde.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01360456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01343928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01293312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2017-01-06 13:41 - 2017-01-06 13:41 - 01291264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01220608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01181536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-01-06 13:41 - 2017-01-06 13:41 - 01176664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01123912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01071728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 01000288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2017-01-06 13:41 - 2017-01-06 13:41 - 00980824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00963584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00862064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00857600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00856872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00848736 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00811416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00759296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00755656 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00730624 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00725664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00719360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2017-01-06 13:41 - 2017-01-06 13:41 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-01-06 13:41 - 2017-01-06 13:41 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00691080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00687936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkCollectionAgent.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00649568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2017-01-06 13:41 - 2017-01-06 13:41 - 00640976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00602464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2017-01-06 13:41 - 2017-01-06 13:41 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00584032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2017-01-06 13:41 - 2017-01-06 13:41 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00540160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00527808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00512416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00508416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2017-01-06 13:41 - 2017-01-06 13:41 - 00498952 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetworkCollectionAgent.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00455040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00450392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2017-01-06 13:41 - 2017-01-06 13:41 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00446896 _____ C:\WINDOWS\system32\ApnDatabase.xml
2017-01-06 13:41 - 2017-01-06 13:41 - 00444416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00433832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00433504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2017-01-06 13:41 - 2017-01-06 13:41 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00424640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00424616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00409952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2017-01-06 13:41 - 2017-01-06 13:41 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2017-01-06 13:41 - 2017-01-06 13:41 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00396168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00387872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00379744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2017-01-06 13:41 - 2017-01-06 13:41 - 00374448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00313560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlancfg.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00292872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpeffects.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-01-06 13:41 - 2017-01-06 13:41 - 00280472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeunlock.exe
2017-01-06 13:41 - 2017-01-06 13:41 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfksproxy.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00254656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpeffects.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlancfg.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00248480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2017-01-06 13:41 - 2017-01-06 13:41 - 00244816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAC3ENC.DLL
2017-01-06 13:41 - 2017-01-06 13:41 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe
2017-01-06 13:41 - 2017-01-06 13:41 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-01-06 13:41 - 2017-01-06 13:41 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-01-06 13:41 - 2017-01-06 13:41 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00218008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
2017-01-06 13:41 - 2017-01-06 13:41 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\manage-bde.exe
2017-01-06 13:41 - 2017-01-06 13:41 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL
2017-01-06 13:41 - 2017-01-06 13:41 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00187520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe
2017-01-06 13:41 - 2017-01-06 13:41 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvenotify.exe
2017-01-06 13:41 - 2017-01-06 13:41 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00163752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00157536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe
2017-01-06 13:41 - 2017-01-06 13:41 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00152416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00148832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2017-01-06 13:41 - 2017-01-06 13:41 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00133472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2017-01-06 13:41 - 2017-01-06 13:41 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2017-01-06 13:41 - 2017-01-06 13:41 - 00126568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfaudiocnv.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00121368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2017-01-06 13:41 - 2017-01-06 13:41 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00108384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2017-01-06 13:41 - 2017-01-06 13:41 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpshell.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bowser.sys
2017-01-06 13:41 - 2017-01-06 13:41 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe
2017-01-06 13:41 - 2017-01-06 13:41 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00091936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfaudiocnv.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00090400 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncPolicy.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TempSignedLicenseExchangeTask.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManagerApi.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00057400 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2017-01-06 13:41 - 2017-01-06 13:41 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappprxy.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeui.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\encapi.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx
2017-01-06 13:41 - 2017-01-06 13:41 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
2017-01-06 13:41 - 2017-01-06 13:41 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll
2017-01-06 13:41 - 2017-01-06 13:41 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 08168000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 06109184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 05622088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 05384192 _____ (Microsoft) C:\WINDOWS\system32\dbgeng.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 03496960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 03299840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 03133440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 02750936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 02688512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 02669056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 02512384 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 02458112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 02317312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 02109952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01980416 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01913344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01880576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01817088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01691136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01639424 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01637728 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01609920 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01600624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01556480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01554944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01477632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01388544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01361408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 01354320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2017-01-06 13:40 - 2017-01-06 13:40 - 01348608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01336320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01323008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01322848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01320448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01312768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 01293152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2017-01-06 13:40 - 2017-01-06 13:40 - 01196544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2017-01-06 13:40 - 2017-01-06 13:40 - 01173496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01130496 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01117024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01113600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2017-01-06 13:40 - 2017-01-06 13:40 - 01082368 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01078784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01066328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01051112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-01-06 13:40 - 2017-01-06 13:40 - 01040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01037312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01013760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00982528 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00966144 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbe.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00965472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_sr.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00940032 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00939872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00908640 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontext.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00894096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00882680 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00861024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00833024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2017-01-06 13:40 - 2017-01-06 13:40 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00790760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00782176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2017-01-06 13:40 - 2017-01-06 13:40 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00719872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_sr.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskbarcpl.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00682816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll

chaaali 12.01.2017 19:44
frst2

Code:
2017-01-06 13:40 - 2017-01-06 13:40 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00665768 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00655872 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00650240 _____ (Microsoft) C:\WINDOWS\system32\DbgModel.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00632832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00629248 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00628552 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00596832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00595488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00595296 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00584032 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00580608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddraw.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\energy.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00573952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrGidsHandler.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenterCPL.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenterCPL.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2017-01-06 13:40 - 2017-01-06 13:40 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00531456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00529928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00523712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMRServer.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00509440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00500064 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00454592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00434528 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00423776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCenter.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00408600 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00402352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00382272 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00378720 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00377184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-01-06 13:40 - 2017-01-06 13:40 - 00372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00369664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinfo32.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00354264 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentutl.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00338944 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinfo32.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00322912 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00322912 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00321792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
2017-01-06 13:40 - 2017-01-06 13:40 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NmaDirect.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\systemcpl.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00266544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.SyncEngine.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
2017-01-06 13:40 - 2017-01-06 13:40 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafpos.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00238056 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00232800 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_G18030.DLL
2017-01-06 13:40 - 2017-01-06 13:40 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2017-01-06 13:40 - 2017-01-06 13:40 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToReceiver.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingFolder.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00198856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRHelper.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00167848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovslegacy.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoplay.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00162850 _____ C:\WINDOWS\system32\C_932.NLS
2017-01-06 13:40 - 2017-01-06 13:40 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00160096 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XamlTileRender.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RelPost.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSM.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoplay.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovslegacy.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2017-01-06 13:40 - 2017-01-06 13:40 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EDPCleanup.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DscCoreConfProv.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\MediaFoundation.DefaultPerceptionProvider.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWSDAHost.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\chartv.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2017-01-06 13:40 - 2017-01-06 13:40 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSM.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00122208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chartv.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReportingCSP.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastLaunch.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsmsext.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwrshplugin.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthExt.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsmsext.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00079200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2017-01-06 13:40 - 2017-01-06 13:40 - 00078688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pwrshplugin.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Sens.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AddressParser.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\POSyncServices.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00063328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2017-01-06 13:40 - 2017-01-06 13:40 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundMediaPolicy.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\POSyncServices.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataPlatformHelperUtil.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AddressParser.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactActivation.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactActivation.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00045056 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00044472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataLanguageUtil.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\modem.sys
2017-01-06 13:40 - 2017-01-06 13:40 - 00041824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\EAMProgressHandler.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsext.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTypeHelperUtil.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataLanguageUtil.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00036168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsext.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExtrasXmlParser.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00023392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cmimcext.sys
2017-01-06 13:40 - 2017-01-06 13:40 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExtrasXmlParser.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_IS2022.DLL
2017-01-06 13:40 - 2017-01-06 13:40 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\c_GSM7.DLL
2017-01-06 13:40 - 2017-01-06 13:40 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2017-01-06 13:40 - 2017-01-06 13:40 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccessRes.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccessRes.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneutilRes.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneutilRes.dll
2017-01-06 13:40 - 2017-01-06 13:40 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneServiceRes.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 17188352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 13868544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 07812096 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 07654400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 07216640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 06668040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 05722832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 05685760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 05380608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 05114368 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 04557824 _____ (Microsoft) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 04136448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 03542016 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 03441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 03405824 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 03370496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 03287552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 03202048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 03198464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 03116544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAJApi.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 03106304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2017-01-06 13:39 - 2017-01-06 13:39 - 03054080 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 02953216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02914304 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02913144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02860032 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02828376 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02748928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02708992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02677544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02646016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02476544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02423296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAJApi.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02390016 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2017-01-06 13:39 - 2017-01-06 13:39 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02323728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02277248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02189664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 02166752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02153984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 02005504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01980768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01851696 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01840640 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01738560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01576448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01556712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01512960 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 01507840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01503544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01490944 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01456640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01425000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01369088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01357824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01266176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01263856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01243136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Phone.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01157000 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01112928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-01-06 13:39 - 2017-01-06 13:39 - 01080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01069720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01022304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-01-06 13:39 - 2017-01-06 13:39 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00975744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00967168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2017-01-06 13:39 - 2017-01-06 13:39 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2017-01-06 13:39 - 2017-01-06 13:39 - 00901120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00869848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00820736 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00819200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NaturalLanguage6.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2017-01-06 13:39 - 2017-01-06 13:39 - 00807424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00788624 _____ C:\WINDOWS\SysWOW64\locale.nls
2017-01-06 13:39 - 2017-01-06 13:39 - 00788624 _____ C:\WINDOWS\system32\locale.nls
2017-01-06 13:39 - 2017-01-06 13:39 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00773720 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2017-01-06 13:39 - 2017-01-06 13:39 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00755200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00749920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00714592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00681304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00658784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00646136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00637400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00636928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00634944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00611328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00601712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00598528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-01-06 13:39 - 2017-01-06 13:39 - 00576408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00557408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00548352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddraw.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00545936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2017-01-06 13:39 - 2017-01-06 13:39 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00527880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00526848 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprapi.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-01-06 13:39 - 2017-01-06 13:39 - 00509280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00496872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00461312 _____ (Microsoft) C:\WINDOWS\SysWOW64\DbgModel.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-01-06 13:39 - 2017-01-06 13:39 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00445952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprapi.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00441856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00432128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00418304 _____ C:\WINDOWS\system32\Windows.Perception.Stub.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00405856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00390144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00389000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00386048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\NmaDirect.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00361104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00352096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2017-01-06 13:39 - 2017-01-06 13:39 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00341936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esentutl.exe
2017-01-06 13:39 - 2017-01-06 13:39 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2017-01-06 13:39 - 2017-01-06 13:39 - 00295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CryptoWinRT.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00283488 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2017-01-06 13:39 - 2017-01-06 13:39 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchange.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00279904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAnimation.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00272720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00265728 _____ C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00257536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DataExchange.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAnimation.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_G18030.DLL
2017-01-06 13:39 - 2017-01-06 13:39 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00219488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00206096 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2017-01-06 13:39 - 2017-01-06 13:39 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfksproxy.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00187232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00186424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00178528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00170960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00169056 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthA2DP.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00168424 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00146784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinRtTracing.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetails.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00130912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2017-01-06 13:39 - 2017-01-06 13:39 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.HostName.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00119648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\EhStorTcgDrv.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00116576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00114192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00113504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00106896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmifw.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2017-01-06 13:39 - 2017-01-06 13:39 - 00083120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00081760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmifw.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00079536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.exe
2017-01-06 13:39 - 2017-01-06 13:39 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00074080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00073568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetailsUpdate.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappprxy.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmi.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe
2017-01-06 13:39 - 2017-01-06 13:39 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00064352 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\MegaSas2i.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetailsUpdate.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.UserDeviceAssociation.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundMediaPolicy.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ffbroker.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00048992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\iorate.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2017-01-06 13:39 - 2017-01-06 13:39 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceassociation.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\spaceman.exe
2017-01-06 13:39 - 2017-01-06 13:39 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2017-01-06 13:39 - 2017-01-06 13:39 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\delegatorprovider.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi_passthru.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\encapi.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\delegatorprovider.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi_passthru.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stdole2.tlb
2017-01-06 13:39 - 2017-01-06 13:39 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\stdole2.tlb
2017-01-06 13:39 - 2017-01-06 13:39 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_IS2022.DLL
2017-01-06 13:39 - 2017-01-06 13:39 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\c_GSM7.DLL
2017-01-06 13:39 - 2017-01-06 13:39 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-01-06 13:39 - 2017-01-06 13:39 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2017-01-06 13:23 - 2016-07-15 19:29 - 05739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2017-01-06 13:23 - 2016-07-15 19:29 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2017-01-06 13:23 - 2016-07-15 19:14 - 06354944 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2017-01-06 13:23 - 2016-07-15 18:45 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2017-01-06 13:23 - 2016-07-15 18:29 - 05489664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll

chaaali 12.01.2017 19:44
frst3

Code:
2017-01-06 13:22 - 2017-01-06 13:22 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2017-01-06 13:19 - 2017-01-06 14:24 - 00000000 ____D C:\Program Files (x86)\MSBuild
2017-01-06 13:19 - 2017-01-06 13:19 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2017-01-06 13:19 - 2017-01-06 13:19 - 00000000 ____D C:\Program Files\Reference Assemblies
2017-01-06 13:19 - 2017-01-06 13:19 - 00000000 ____D C:\Program Files\MSBuild
2017-01-06 13:19 - 2017-01-06 13:19 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-01-06 13:18 - 2017-01-06 13:18 - 03753984 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll
2017-01-06 13:18 - 2017-01-06 13:18 - 00199008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2017-01-06 13:18 - 2016-05-25 14:31 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-01-06 13:18 - 2016-05-25 14:31 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-01-06 13:18 - 2016-05-25 14:31 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-01-06 13:18 - 2016-05-25 11:03 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2017-01-06 13:18 - 2016-05-25 11:03 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-01-06 13:18 - 2016-05-25 11:03 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2017-01-06 13:04 - 2017-01-06 13:04 - 00000000 ____H C:\$WINRE_BACKUP_PARTITION.MARKER
2016-12-28 15:30 - 2017-01-09 19:27 - 00000000 ___RD C:\Users\Charlie\iCloudDrive
2016-12-28 15:30 - 2016-12-28 15:32 - 00000000 ____D C:\Users\Charlie\AppData\Local\ADEDA5DF-97EA-4062-8ADD-F864BA5B8E35.aplzod
2016-12-28 15:30 - 2016-12-28 15:31 - 00000000 ____D C:\Users\Charlie\Documents\Outlook-Dateien
2016-12-28 15:30 - 2016-12-28 15:30 - 00000000 ____D C:\Users\Charlie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iCloud
2016-12-28 15:30 - 2016-12-28 15:30 - 00000000 ____D C:\Users\Charlie\AppData\Local\Apple Inc
2016-12-28 15:19 - 2017-01-06 14:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2016-12-27 03:38 - 2017-01-06 14:09 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2016-12-27 03:38 - 2017-01-06 14:08 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2016-12-26 18:43 - 2016-12-26 18:43 - 00000034 _____ C:\WINDOWS\AvastEmUpdate.ini
2016-12-26 18:06 - 2017-01-06 14:24 - 00000000 ____D C:\Users\Charlie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

==================== Ein Monat: Genderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-10 18:54 - 2014-12-21 09:02 - 00000000 ____D C:\FRST
2017-01-10 18:45 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-01-10 18:44 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-01-10 18:40 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-01-09 20:43 - 2014-04-14 10:04 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-01-09 19:42 - 2014-04-14 10:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2017-01-09 19:42 - 2014-04-14 10:03 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2017-01-09 19:25 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-01-07 16:49 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-01-07 11:15 - 2013-10-31 22:56 - 00000000 ____D C:\Users\Charlie\AppData\Local\CyberGhost
2017-01-07 11:06 - 2013-10-31 22:55 - 00000000 ____D C:\Program Files\CyberGhost 5
2017-01-07 09:04 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\appcompat
2017-01-06 15:53 - 2016-05-15 02:25 - 00000000 ____D C:\Users\Charlie\AppData\Local\Packages
2017-01-06 15:44 - 2016-05-17 09:29 - 00002431 _____ C:\Users\Charlie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-01-06 15:44 - 2016-05-17 09:29 - 00000000 ___RD C:\Users\Charlie\OneDrive
2017-01-06 15:42 - 2014-01-14 20:06 - 00002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-01-06 15:35 - 2016-02-13 18:30 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-01-06 14:45 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache
2017-01-06 14:43 - 2016-07-16 23:51 - 00539960 _____ C:\WINDOWS\system32\perfh007.dat
2017-01-06 14:43 - 2016-07-16 23:51 - 00108676 _____ C:\WINDOWS\system32\perfc007.dat
2017-01-06 14:43 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows NT
2017-01-06 14:43 - 2016-05-14 21:36 - 01592692 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-01-06 14:42 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\USOPrivate
2017-01-06 14:42 - 2016-07-16 07:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-01-06 14:40 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-01-06 14:40 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Registration
2017-01-06 14:40 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-01-06 14:39 - 2012-10-22 11:07 - 00000660 _____ C:\WINDOWS\Tasks\WebContent AutoUpdate 2012.job
2017-01-06 14:39 - 2011-10-12 17:25 - 00000642 _____ C:\WINDOWS\Tasks\WebContent AutoUpdate 2011.job
2017-01-06 14:34 - 2016-05-14 21:36 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-01-06 14:33 - 2016-07-16 12:47 - 00000000 __RSD C:\WINDOWS\Media
2017-01-06 14:33 - 2016-07-16 12:47 - 00000000 __RHD C:\Users\Public\Libraries
2017-01-06 14:24 - 2016-10-01 15:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eDocPrintPro
2017-01-06 14:24 - 2016-07-29 16:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2017-01-06 14:24 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\System
2017-01-06 14:24 - 2016-07-16 07:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-01-06 14:24 - 2016-05-17 10:56 - 00000000 ____D C:\WINDOWS\SysWOW64\16051701_stream
2017-01-06 14:24 - 2016-05-17 09:47 - 00000000 ____D C:\WINDOWS\SysWOW64\16051700_stream
2017-01-06 14:24 - 2016-05-17 08:59 - 00000000 ____D C:\WINDOWS\SysWOW64\16051603_stream
2017-01-06 14:24 - 2016-03-30 19:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2017-01-06 14:24 - 2016-02-13 18:12 - 00000000 ____D C:\WINDOWS\ShellNew
2017-01-06 14:24 - 2016-01-09 10:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinDirStat
2017-01-06 14:24 - 2015-10-18 16:57 - 00000000 __RHD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Care
2017-01-06 14:24 - 2015-09-05 11:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2017-01-06 14:24 - 2015-07-19 10:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\i-Funbox DevTeam
2017-01-06 14:24 - 2015-03-12 20:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\-isb cad-
2017-01-06 14:24 - 2014-12-25 19:00 - 00000000 ____D C:\WINDOWS\SysWOW64\vbox
2017-01-06 14:24 - 2014-12-25 19:00 - 00000000 ____D C:\WINDOWS\system32\vbox
2017-01-06 14:24 - 2014-12-05 18:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeMeter
2017-01-06 14:24 - 2014-11-22 15:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schck Software
2017-01-06 14:24 - 2014-10-21 07:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InfoGraph
2017-01-06 14:24 - 2014-10-18 11:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CollageIt
2017-01-06 14:24 - 2014-10-11 18:22 - 00000000 ____D C:\Users\Charlie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\mb Lizenz-Server
2017-01-06 14:24 - 2014-10-11 18:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mb WorkSuite 2014
2017-01-06 14:24 - 2014-10-07 12:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eDocPrinter PDF Pro
2017-01-06 14:24 - 2014-08-12 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2017-01-06 14:24 - 2014-05-18 13:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange 5 Pro
2017-01-06 14:24 - 2014-02-07 21:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft-Maus- und Tastatur-Center
2017-01-06 14:24 - 2014-01-26 14:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\s+v Planungssoftware
2017-01-06 14:24 - 2014-01-18 00:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPatrol
2017-01-06 14:24 - 2014-01-08 19:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2017-01-06 14:24 - 2013-11-20 13:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maple 16
2017-01-06 14:24 - 2013-10-31 22:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 5
2017-01-06 14:24 - 2013-10-03 13:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InfoGraph Studienversion
2017-01-06 14:24 - 2013-08-31 11:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-01-06 14:24 - 2013-03-27 07:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PP
2017-01-06 14:24 - 2013-03-17 03:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-01-06 14:24 - 2013-01-17 14:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect
2017-01-06 14:24 - 2013-01-17 14:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2017-01-06 14:24 - 2012-11-28 09:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP490 series
2017-01-06 14:24 - 2012-11-21 20:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foto-Mosaik-Edda
2017-01-06 14:24 - 2012-11-07 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firebird 2.5 (Win32)
2017-01-06 14:24 - 2012-11-07 13:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Frilo2011
2017-01-06 14:24 - 2012-10-20 20:09 - 00000000 ____D C:\Users\Charlie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CopyTrans Suite
2017-01-06 14:24 - 2012-08-31 11:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FH-Aachen OpenVPN
2017-01-06 14:24 - 2012-08-08 09:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5100 series Benutzerregistrierung
2017-01-06 14:24 - 2012-08-08 09:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5100 series
2017-01-06 14:24 - 2012-06-22 09:26 - 00000000 ____D C:\WINDOWS\de
2017-01-06 14:24 - 2012-06-22 09:23 - 00000000 ____D C:\WINDOWS\nl
2017-01-06 14:24 - 2012-06-22 09:23 - 00000000 ____D C:\WINDOWS\fr
2017-01-06 14:24 - 2012-06-22 09:23 - 00000000 ____D C:\WINDOWS\fi
2017-01-06 14:24 - 2012-06-22 09:23 - 00000000 ____D C:\WINDOWS\en
2017-01-06 14:24 - 2012-06-22 09:23 - 00000000 ____D C:\WINDOWS\da
2017-01-06 14:24 - 2012-06-22 09:23 - 00000000 ____D C:\WINDOWS\cs
2017-01-06 14:24 - 2012-06-22 09:23 - 00000000 ____D C:\WINDOWS\bg
2017-01-06 14:24 - 2012-06-22 09:22 - 00000000 ____D C:\WINDOWS\ru
2017-01-06 14:24 - 2012-06-22 09:22 - 00000000 ____D C:\WINDOWS\ro
2017-01-06 14:24 - 2012-06-22 09:22 - 00000000 ____D C:\WINDOWS\pl
2017-01-06 14:24 - 2012-06-22 09:22 - 00000000 ____D C:\WINDOWS\no
2017-01-06 14:24 - 2012-06-22 09:22 - 00000000 ____D C:\WINDOWS\it
2017-01-06 14:24 - 2012-06-22 09:22 - 00000000 ____D C:\WINDOWS\hu
2017-01-06 14:24 - 2012-06-22 09:22 - 00000000 ____D C:\WINDOWS\el
2017-01-06 14:24 - 2012-06-22 09:21 - 00000000 ____D C:\WINDOWS\uk
2017-01-06 14:24 - 2012-06-22 09:21 - 00000000 ____D C:\WINDOWS\tr
2017-01-06 14:24 - 2012-06-22 09:21 - 00000000 ____D C:\WINDOWS\sv
2017-01-06 14:24 - 2012-06-22 09:21 - 00000000 ____D C:\WINDOWS\sk
2017-01-06 14:24 - 2012-05-10 19:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FILSHtray
2017-01-06 14:24 - 2012-03-03 15:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Blender
2017-01-06 14:24 - 2012-03-03 15:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreePDF
2017-01-06 14:24 - 2012-03-03 15:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ghostscript
2017-01-06 14:24 - 2012-02-29 17:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS Xonar U3 Audio
2017-01-06 14:24 - 2011-12-30 21:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Virtual DJ
2017-01-06 14:24 - 2011-11-23 17:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
2017-01-06 14:24 - 2011-11-16 22:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange
2017-01-06 14:24 - 2011-10-28 08:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iExplorer
2017-01-06 14:24 - 2011-09-22 11:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\webcam 7
2017-01-06 14:24 - 2011-09-21 13:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraVNC
2017-01-06 14:24 - 2011-07-31 14:04 - 00000000 ____D C:\WINDOWS\SysWOW64\TVUAx
2017-01-06 14:24 - 2011-07-15 08:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2017-01-06 14:24 - 2011-07-15 08:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2017-01-06 14:24 - 2011-07-01 22:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2017-01-06 14:24 - 2011-07-01 20:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2017-01-06 14:24 - 2011-07-01 20:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2017-01-06 14:24 - 2011-07-01 20:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Frilo
2017-01-06 14:24 - 2011-07-01 19:57 - 00000000 ____D C:\Users\Charlie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-01-06 14:24 - 2011-07-01 19:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-01-06 14:24 - 2011-07-01 18:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MediaMonkey
2017-01-06 14:24 - 2011-07-01 17:53 - 00000000 ____D C:\WINDOWS\SysWOW64\VAIO Startup Setting Tool
2017-01-06 14:24 - 2011-05-10 05:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2017-01-06 14:24 - 2011-05-10 05:09 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayStation Extras
2017-01-06 14:24 - 2011-05-10 05:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PMB
2017-01-06 14:24 - 2011-05-10 04:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft Webcam Suite
2017-01-06 14:24 - 2011-05-10 04:49 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2017-01-06 14:18 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-01-06 14:18 - 2015-10-30 07:28 - 00000000 ____D C:\Users\Default.migrated
2017-01-06 14:09 - 2016-07-16 23:50 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2017-01-06 14:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-01-06 14:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-01-06 14:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2017-01-06 14:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-01-06 14:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\spool
2017-01-06 14:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-01-06 14:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-01-06 14:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-01-06 14:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\IME
2017-01-06 14:09 - 2013-08-22 20:30 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-01-06 14:08 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
2017-01-06 14:08 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\schemas
2017-01-06 14:08 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Resources
2017-01-06 14:08 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-01-06 14:08 - 2014-10-26 08:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Halfen
2017-01-06 14:08 - 2013-12-05 12:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mepla Software
2017-01-06 14:08 - 2012-12-13 20:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2017-01-06 14:08 - 2012-11-29 09:33 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Main
2017-01-06 14:08 - 2012-08-08 09:12 - 00000000 ___HD C:\WINDOWS\system32\CanonIJ Uninstaller Information
2017-01-06 14:08 - 2012-03-02 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeOCR
2017-01-06 14:08 - 2011-11-09 17:10 - 00000000 ____D C:\WINDOWS\system32\%LOCALAPPDATA%
2017-01-06 14:08 - 2011-10-12 17:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nemetschek
2017-01-06 14:08 - 2011-05-10 04:30 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2017-01-06 14:08 - 2011-03-15 03:36 - 00000000 ___RD C:\Users\Public\Recorded TV
2017-01-06 14:07 - 2016-07-16 12:47 - 00000000 __SHD C:\Program Files\Windows Sidebar
2017-01-06 14:07 - 2016-07-16 12:47 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2017-01-06 14:07 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\System
2017-01-06 14:07 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-01-06 14:07 - 2015-11-21 17:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco
2017-01-06 14:07 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Microsoft Games
2017-01-06 14:05 - 2014-12-01 06:55 - 00000000 ____D C:\Users\Charlie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\fischerwerke GmbH & Co. KG
2017-01-06 14:05 - 2013-11-20 14:13 - 00000000 ____D C:\Users\Charlie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mursoft
2017-01-06 14:05 - 2013-10-31 08:19 - 00000000 ____D C:\Users\Charlie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Basic 2005 Power Packs
2017-01-06 14:03 - 2016-05-15 02:30 - 00000000 ____D C:\Users\Test1\AppData\Local\Packages
2017-01-06 14:01 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2017-01-06 13:58 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\PrintDialog
2017-01-06 13:58 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\MiracastView
2017-01-06 13:58 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-01-06 13:57 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Help
2017-01-06 13:57 - 2011-05-10 04:42 - 00000000 ____D C:\temp
2017-01-06 13:51 - 2016-07-16 12:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-01-06 13:45 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-01-06 13:45 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\F12
2017-01-06 13:45 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\dsc
2017-01-06 13:45 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2017-01-06 13:45 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
2017-01-06 13:45 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\setup
2017-01-06 13:45 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\migwiz
2017-01-06 13:45 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2017-01-06 13:45 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2017-01-06 13:45 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\et-EE
2017-01-06 13:45 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\es-MX
2017-01-06 13:45 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\en-GB
2017-01-06 13:45 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-01-06 13:45 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-01-06 13:45 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Dism
2017-01-06 13:44 - 2016-07-16 12:47 - 00015425 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2017-01-06 13:44 - 2016-07-16 12:47 - 00000000 ___RD C:\Program Files\Windows Defender
2017-01-06 13:44 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-01-06 13:44 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Provisioning
2017-01-06 13:44 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\bcastdvr
2017-01-06 13:44 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-01-06 13:44 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-01-06 13:44 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-01-06 13:44 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\servicing
2017-01-06 13:23 - 2016-07-16 23:52 - 00000000 ____D C:\WINDOWS\OCR
2017-01-06 13:19 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-01-06 13:19 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\MUI
2017-01-06 13:00 - 2015-06-15 14:54 - 00001232 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000UA.job
2017-01-06 12:54 - 2014-02-06 22:57 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2017-01-06 12:53 - 2016-07-17 00:55 - 00000000 ___HD C:\$WINDOWS.~BT
2017-01-05 20:53 - 2011-07-06 23:44 - 00001146 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000UA.job
2017-01-05 20:00 - 2015-06-15 14:54 - 00001180 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1747016203-3155398904-578371931-1000Core.job
2016-12-28 15:30 - 2011-07-01 21:13 - 00000000 ____D C:\Users\Charlie\AppData\Roaming\Apple Computer
2016-12-28 15:21 - 2011-07-15 08:01 - 00000000 ____D C:\Config.Msi
2016-12-28 15:19 - 2011-07-01 21:11 - 00000000 ____D C:\Program Files\Common Files\Apple
2016-12-27 09:05 - 2014-10-02 14:44 - 00000496 _____ C:\WINDOWS\Tasks\AutoUpdate Allplan 2015.job
2016-12-27 08:10 - 2011-10-12 17:25 - 00000496 _____ C:\WINDOWS\Tasks\Allplan AutoUpdate 2011-1.job
2016-12-27 08:00 - 2012-10-22 11:07 - 00000504 _____ C:\WINDOWS\Tasks\AutoUpdate Allplan 2012.job
2016-12-27 03:44 - 2011-07-21 14:29 - 00000000 ____D C:\ProgramData\AVAST Software
2016-12-27 03:44 - 2011-07-21 14:29 - 00000000 ____D C:\Program Files\AVAST Software
2016-12-26 22:55 - 2011-07-21 14:26 - 00262144 _____ C:\Users\Public\NTUSER.DAT
2016-12-26 20:55 - 2011-07-01 19:06 - 135632432 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-12-26 18:48 - 2015-09-13 08:51 - 00001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-12-26 18:48 - 2015-09-13 08:50 - 00000000 ____D C:\Program Files (x86)\Opera
2016-12-26 18:29 - 2014-03-03 20:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-12-26 18:29 - 2011-05-10 05:11 - 00000000 ____D C:\ProgramData\Skype
2016-12-26 18:20 - 2016-06-13 14:49 - 00022411 _____ C:\WINDOWS\SysWOW64\debug.log
2016-12-26 18:07 - 2011-11-26 12:18 - 00000000 ____D C:\Users\Charlie\AppData\Roaming\Dropbox
2016-12-26 17:47 - 2011-05-10 04:36 - 00000031 _____ C:\WINDOWS\SysWOW64\log.txt
2016-12-26 17:45 - 2011-07-01 21:13 - 00000000 ____D C:\Users\Charlie\AppData\Local\Apple Computer
2016-12-26 17:22 - 2016-03-07 20:12 - 00000000 ____D C:\Users\Charlie\AppData\Local\Spotify
2016-12-26 17:22 - 2016-03-07 20:11 - 00000000 ____D C:\Users\Charlie\AppData\Roaming\Spotify
2016-12-12 00:56 - 2016-07-16 12:49 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-12-12 00:56 - 2016-07-16 12:49 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-10-26 10:32 - 2014-10-26 10:32 - 0003736 _____ () C:\Users\Charlie\AppData\Roaming\HDB.hdflog
2011-12-02 01:18 - 2011-12-02 01:18 - 0023231 _____ () C:\Users\Charlie\AppData\Roaming\UserTile.png
2012-10-20 21:14 - 2012-10-20 21:14 - 0000600 _____ () C:\Users\Charlie\AppData\Roaming\winscp.rnd
2012-11-07 13:35 - 2016-01-16 11:51 - 0001503 _____ () C:\Users\Charlie\AppData\Local\anzeige.htm
2014-10-03 15:51 - 2015-02-22 10:27 - 0000253 _____ () C:\Users\Charlie\AppData\Local\flogx106.cfg
2012-11-07 13:46 - 2015-07-10 18:42 - 0001447 _____ () C:\Users\Charlie\AppData\Local\FriloWebInfo.html
2016-03-28 10:52 - 2016-03-28 10:52 - 0000000 _____ () C:\Users\Charlie\AppData\Local\{854A7945-C20B-4BB0-B541-6F71BAB73FC5}
2012-12-13 20:48 - 2012-12-13 20:48 - 0000057 _____ () C:\ProgramData\Ament.ini
2011-07-01 21:42 - 2011-07-01 21:42 - 0000048 ____H () C:\ProgramData\ezsidmv.dat
2014-02-06 13:09 - 2014-10-06 15:28 - 0150310 _____ () C:\ProgramData\FriloUnzipProtocol.txt
2014-12-01 06:56 - 2014-12-01 07:00 - 0000376 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix fr Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-01-06 13:52

==================== Ende von FRST.txt ============================

cosinus 13.01.2017 09:22
1. Schritt: Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gem Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Whrend dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers




2. Schritt: Kaspersky TDSS-Killer

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drcke Start Scan
  • Sollten infizierte Objekte gefunden werden, whle keinesfalls Cure. Whle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.




Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhngen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs fr einen Beitrag zu gro sein sollten, bitte ich dich die Logs direkt und notfalls ber mehrere Beitrge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrcke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drcke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

chaaali 15.01.2017 20:15
mb anti rootkit1:

Code:
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2017.01.15.03
  rootkit: v2016.11.20.01

Windows 10 x64 NTFS
Internet Explorer 11.576.14393.0
Charlie :: CHARLIE-VAIO [administrator]

15.01.2017 15:44:24
mbar-log-2017-01-15 (15-44-24).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 461348
Time elapsed: 55 minute(s), 33 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\Users\Charlie\AppData\Local\Temp\DMR\dmr_72.exe (Adware.DownloadSponsor) -> Delete on reboot. [52dd5a221791a39396c8f4b5dd233fc1]

Physical Sectors Detected: 0
(No malicious items detected)

(end)

2:

Code:
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2017.01.15.06
  rootkit: v2016.11.20.01

Windows 10 x64 NTFS
Internet Explorer 11.576.14393.0
Charlie :: CHARLIE-VAIO [administrator]

15.01.2017 18:46:29
mbar-log-2017-01-15 (18-46-29).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 461848
Time elapsed: 58 minute(s), 30 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
tds:
Code:
20:04:14.0982 0x2730  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01
20:04:18.0884 0x2730  ============================================================
20:04:18.0884 0x2730  Current date / time: 2017/01/15 20:04:18.0884
20:04:18.0884 0x2730  SystemInfo:
20:04:18.0884 0x2730 
20:04:18.0884 0x2730  OS Version: 10.0.14393 ServicePack: 0.0
20:04:18.0884 0x2730  Product type: Workstation
20:04:18.0884 0x2730  ComputerName: CHARLIE-VAIO
20:04:18.0885 0x2730  UserName: Charlie
20:04:18.0885 0x2730  Windows directory: C:\WINDOWS
20:04:18.0885 0x2730  System windows directory: C:\WINDOWS
20:04:18.0885 0x2730  Running under WOW64
20:04:18.0885 0x2730  Processor architecture: Intel x64
20:04:18.0885 0x2730  Number of processors: 4
20:04:18.0885 0x2730  Page size: 0x1000
20:04:18.0885 0x2730  Boot type: Normal boot
20:04:18.0885 0x2730  CodeIntegrityOptions = 0x00000001
20:04:18.0885 0x2730  ============================================================
20:04:19.0591 0x2730  KLMD registered as C:\WINDOWS\system32\drivers\83221937.sys
20:04:19.0591 0x2730  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.693, osProperties = 0x19
20:04:20.0633 0x2730  System UUID: {F5FD29B3-1B0F-88AE-98B6-A0D331F73CA5}
20:04:21.0407 0x2730  Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 ( 596.17 Gb ), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
20:04:21.0452 0x2730  ============================================================
20:04:21.0452 0x2730  \Device\Harddisk0\DR0:
20:04:21.0452 0x2730  MBR partitions:
20:04:21.0452 0x2730  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1B07800, BlocksNum 0x32000
20:04:21.0452 0x2730  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1B39800, BlocksNum 0x247A8AB0
20:04:21.0473 0x2730  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x262E3000, BlocksNum 0x24574800
20:04:21.0473 0x2730  ============================================================
20:04:21.0562 0x2730  C: <-> \Device\Harddisk0\DR0\Partition2
20:04:21.0724 0x2730  M: <-> \Device\Harddisk0\DR0\Partition3
20:04:21.0724 0x2730  ============================================================
20:04:21.0724 0x2730  Initialize success
20:04:21.0724 0x2730  ============================================================
20:04:34.0882 0x1194  ============================================================
20:04:34.0882 0x1194  Scan started
20:04:34.0882 0x1194  Mode: Manual; SigCheck; TDLFS;
20:04:34.0882 0x1194  ============================================================
20:04:34.0882 0x1194  KSN ping started
20:04:36.0070 0x1194  KSN ping finished: true
20:04:43.0314 0x1194  ================ Scan system memory ========================
20:04:43.0314 0x1194  System memory - ok
20:04:43.0315 0x1194  ================ Scan services =============================
20:04:43.0565 0x1194  [ A7901875F89D011C38CF52C98ACF5B29, 782141AB1DD7ACDE6EA08B5BAFDE8BADD05B81D38C18E097D6D9C46102056EB1 ] 1394ohci        C:\WINDOWS\System32\drivers\1394ohci.sys
20:04:43.0899 0x1194  1394ohci - ok
20:04:43.0963 0x1194  [ EE1CCC54F75C24727A218F98FC5349DA, 0B0D26640BFA0F551B7087027E572D0BF2C5EAF50A4187C5A7D839180B7FF589 ] 3ware          C:\WINDOWS\system32\drivers\3ware.sys
20:04:43.0983 0x1194  3ware - ok
20:04:44.0236 0x1194  [ ADC420616C501B45D26C0FD3EF1E54E4, 29FC41D40A35AC5476E2A673CE5B12684E0CFA12A1AEBEEBE5883FBA5CA68B67 ] ACDaemon        C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
20:04:44.0254 0x1194  ACDaemon - ok
20:04:44.0311 0x1194  [ 73C73E1AA0D4D727A04AAAB120B7F56A, 5D311F11022994410DF5C67914D38B1F0D813EFD181EA234750286A272D67A1A ] ACPI            C:\WINDOWS\system32\drivers\ACPI.sys
20:04:44.0338 0x1194  ACPI - ok
20:04:44.0338 0x1194  [ 0935496EF9624B46B935CB35ECE1F205, A22A2A29195505A65E8626D60B00C86C23E0CABC1EB8345EA5ED523516CC21C0 ] AcpiDev        C:\WINDOWS\System32\drivers\AcpiDev.sys
20:04:44.0385 0x1194  AcpiDev - ok
20:04:44.0385 0x1194  [ D6794C31F4077B71433988787BAA926E, F16365C2F195AAE94D4740E6C3DF4C0CECEC6393CAD65425DCCD28CDBA6EC51A ] acpiex          C:\WINDOWS\system32\Drivers\acpiex.sys
20:04:44.0401 0x1194  acpiex - ok
20:04:44.0432 0x1194  [ FE5F656D6B35089DA39112E74EC6A85A, 5D81EE63998232A5B36DE47FE15B9D04D5BD02234CA133A2462AECA8C60A22ED ] acpipagr        C:\WINDOWS\System32\drivers\acpipagr.sys
20:04:44.0479 0x1194  acpipagr - ok
20:04:44.0515 0x1194  [ 2F242941E4DFF69B883D77A16F039557, 45C388365317C720654A659A9326B2BC0E9D84929C704654985597D5D620101C ] AcpiPmi        C:\WINDOWS\System32\drivers\acpipmi.sys
20:04:44.0591 0x1194  AcpiPmi - ok
20:04:44.0596 0x1194  [ C247E35A21682DA8D0DC3AF9F025FCC5, 455415EE3166B3043AD8A4DD50B688DB74242267FB555642441251EFA823E971 ] acpitime        C:\WINDOWS\System32\drivers\acpitime.sys
20:04:44.0634 0x1194  acpitime - ok
20:04:44.0670 0x1194  [ AAA8E68E685DB1B68747E3DF68F96368, 1A5BE239B2D0C6F727303A98CFFC91070B6A05ECD6B9CD05AB326AC1910ECEBF ] acsock          C:\WINDOWS\system32\DRIVERS\acsock64.sys
20:04:44.0683 0x1194  acsock - ok
20:04:44.0753 0x1194  [ B932E0EE190778D840F1442DFC0F9612, 8780963F14D57279FDD585BE945ED40F24590D32676C7A9EF94002D38B8BA643 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
20:04:44.0768 0x1194  AdobeARMservice - ok
20:04:44.0878 0x1194  [ 32B31B696CB8E8F380831DFEB80A67E4, 8C8F6E16F2FB3E8F10569261B7712BBC931A2924B6C27D561E7F828041C4F3E6 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
20:04:44.0895 0x1194  AdobeFlashPlayerUpdateSvc - ok
20:04:44.0961 0x1194  [ 49B9DB97AFC85DCCBDACDAB2E90085B7, 2A6C2A09F74EA15044F442CCFB54A0F24F105ADB915E5C78F02F59652DC29152 ] ADP80XX        C:\WINDOWS\system32\drivers\ADP80XX.SYS
20:04:45.0037 0x1194  ADP80XX - ok
20:04:45.0089 0x1194  [ 323AA1953ED9C01E23F740FA891FE064, 4CED6E3D61749316CDE28965C913E7ED462539DAAD637A29484F62AF47AD650D ] AFD            C:\WINDOWS\system32\drivers\afd.sys
20:04:45.0133 0x1194  AFD - ok
20:04:45.0198 0x1194  [ 23522E5D581F7722B1B5B86737CAE39C, FB81ABD304376A1E87B65F5E1B34477B628CEDB2091C5D754DE97464B6050C5B ] ahcache        C:\WINDOWS\system32\DRIVERS\ahcache.sys
20:04:45.0290 0x1194  ahcache - ok
20:04:45.0330 0x1194  [ D0905D4A945D01D4B28DB9E1BD5985F7, CF389CBCD3B99D1BAE34A42F723F1005C32213A394F691978076D3DF1727715C ] AJRouter        C:\WINDOWS\System32\AJRouter.dll
20:04:45.0370 0x1194  AJRouter - ok
20:04:45.0435 0x1194  [ 59069329A89025B01708F3DAF9929C58, 57C8D300823E54EE7D77B7A30452519B459D32FF7BCA340ED33FF181BE093F04 ] aksdf          C:\Windows\system32\drivers\aksdf.sys
20:04:45.0445 0x1194  aksdf - ok
20:04:45.0517 0x1194  [ 0EF3D7B35431030FFC85F7EF45A64E0C, 720E1F0841571E316BB224E8BC125C56BCDC6195DB9BE1F71EDDB7DCBC638FA9 ] aksfridge      C:\Windows\system32\drivers\aksfridge.sys
20:04:45.0533 0x1194  aksfridge - ok
20:04:45.0578 0x1194  [ 8FD51B3B35707A66080D7C8CB05E792D, FE52F3DC280D208FDDC75F6E3294B8D601E0D86F9BD3DB1ACC8FC296AC74C23B ] ALG            C:\WINDOWS\System32\alg.exe
20:04:45.0662 0x1194  ALG - ok
20:04:45.0750 0x1194  [ 7E3EDAF3A543C9C2994A5D199E7C708C, 4FA9DF1900E193E4C743A83F45165FCC02615F5E78F7692C323BC435E526335B ] AllplanUpdateLauncher 2015 C:\Program Files\Nemetschek\AllplanUpdateLauncher 2015\AllplanUpdateLauncher.exe
20:04:45.0750 0x1194  AllplanUpdateLauncher 2015 - ok
20:04:45.0781 0x1194  [ DF21E05E41E5AC3F13F304D91457649A, 7F48F2AD1DBE89A261113C76D7C23AD7D87D5599BCC31F8A558A8A10B81BF521 ] AmdK8          C:\WINDOWS\System32\drivers\amdk8.sys
20:04:45.0844 0x1194  AmdK8 - ok
20:04:45.0859 0x1194  [ 45D0AA4BB90B821DF92E8F19ABED0C5E, EA87A6E98DB3C5A88A844C04C6934E870B7004E783AA5211722115382A211B90 ] AmdPPM          C:\WINDOWS\System32\drivers\amdppm.sys
20:04:45.0890 0x1194  AmdPPM - ok
20:04:45.0906 0x1194  [ 74FFBC43B4B899C9A8CA06A892F2CE73, 8D599363C7F3D373F1859BAA4D06DD0F40BE78B56BE52B74DE6EA6EF99452004 ] amdsata        C:\WINDOWS\system32\drivers\amdsata.sys
20:04:45.0922 0x1194  amdsata - ok
20:04:45.0953 0x1194  [ AAB0F1D8D7E54761ABAB13AF161F1680, CF847990EFFA2828F5B1DB1A68F08A6C2C918E9612EDFFCF95C36BCABBBEA272 ] amdsbs          C:\WINDOWS\system32\drivers\amdsbs.sys
20:04:45.0984 0x1194  amdsbs - ok
20:04:45.0984 0x1194  [ F91BAAC4237C40352A807000F3B716F9, F7EFA08E5067C3D419C9D21EDB880BA08883A80DDF35F8B42EC3AB293FE5E03E ] amdxata        C:\WINDOWS\system32\drivers\amdxata.sys
20:04:46.0000 0x1194  amdxata - ok
20:04:46.0062 0x1194  [ 12BFA9EC4B03CC16BB7D19BAA308AEF2, 83EE94308BBDE5FBFC9D863CB0C14AAD487DA0AF34FFA446CF9B4BE0A68254C7 ] ApfiltrService  C:\WINDOWS\system32\DRIVERS\Apfiltr.sys
20:04:46.0078 0x1194  ApfiltrService - ok
20:04:46.0125 0x1194  [ BC121C099C6C659126AD2102AFDFF8CF, 42B5EE293BDD7ADCE48173A01B30D8452564B9DA225EAF25E9292FE77C0FCF3E ] AppID          C:\WINDOWS\system32\drivers\appid.sys
20:04:46.0155 0x1194  AppID - ok
20:04:46.0183 0x1194  [ 74A24CF946279111D7F203B36569EC02, FD67D36804744B4FE3E20BA891852575E6C2DA6515643B2F4B4210118B0FCCDA ] AppIDSvc        C:\WINDOWS\System32\appidsvc.dll
20:04:46.0277 0x1194  AppIDSvc - ok
20:04:46.0308 0x1194  [ 73FAA5517CCD1332F00192A303CF2026, 75636222BFF381A3EECA010752DF7DC1603A395B91FF7FBF92127B5CA8EFFEE5 ] Appinfo        C:\WINDOWS\System32\appinfo.dll
20:04:46.0538 0x1194  Appinfo - ok
20:04:46.0692 0x1194  [ 3B3774C868868257533EC7E715BB6D53, 4AF1DADCEDBD80BE6EDEC696DF59E65B51D31E33F4C84413CA03C7BD959FF4E5 ] Apple Mobile Device Service C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
20:04:46.0709 0x1194  Apple Mobile Device Service - ok
20:04:46.0748 0x1194  [ 68190E2BADF23BD782344970E5B5DE9E, 95D30EC12C7FDF5822CED8BC2F17669A6687A2FB262B4F0D15C8DCFF4E9AB33D ] applockerfltr  C:\WINDOWS\system32\drivers\applockerfltr.sys
20:04:46.0823 0x1194  applockerfltr - ok
20:04:46.0898 0x1194  [ A0746EF6C5AB7A17A67BC167167499C1, 1D2154D3AFC5219293EDD508C7726E7756FB72BF04F73861C575D1FE5C553411 ] AppReadiness    C:\WINDOWS\system32\AppReadiness.dll
20:04:47.0257 0x1194  AppReadiness - ok
20:04:47.0654 0x1194  [ D70B1453ADA82A92E76EAE72D936A0F6, 439DBC5818025887343D4B5B509C7D2C97ED0FFA4641A5178EA5719C50E5013F ] AppXSvc        C:\WINDOWS\system32\appxdeploymentserver.dll
20:04:48.0103 0x1194  AppXSvc - ok
20:04:48.0172 0x1194  [ E6AB1F0B4C3D4E0D2A88332D76FECD03, 0D3003EB979DA4546DCDD055011E24F13E34F683F02C9801CAC564D1809F11D2 ] arcsas          C:\WINDOWS\system32\drivers\arcsas.sys
20:04:48.0195 0x1194  arcsas - ok
20:04:48.0231 0x1194  [ C130BC4A51B1382B2BE8E44579EC4C0A, CC1FD33ED7CAD87A504D8678F8482CAECACD18C727BB97FFB86F39255563EEF2 ] ArcSoftKsUFilter C:\WINDOWS\system32\DRIVERS\ArcSoftKsUFilter.sys
20:04:48.0240 0x1194  ArcSoftKsUFilter - ok
20:04:48.0257 0x1194  [ 61C5A480C43E7E8E49C42869F49D0D3E, E610F0E4315ABA1D90AD4A1D7A68ABA2ACBB7FCA89E9D1798470365D52592D55 ] AsyncMac        C:\WINDOWS\System32\drivers\asyncmac.sys
20:04:48.0432 0x1194  AsyncMac - ok
20:04:48.0490 0x1194  [ A10F989A812B57B9695F6C305907C9C6, E2B292610079AA1A10696138DE8130905A8A834B75A8DED7EBF8B6732B77A0F4 ] atapi          C:\WINDOWS\system32\drivers\atapi.sys
20:04:48.0506 0x1194  atapi - ok
20:04:48.0605 0x1194  [ 650F111D5CDA64C10AE4B9D1BA9D4FFF, 99AD83993D724538687F084318404DBF314C2249AB593AF9DD3783B0AB6B3B25 ] Atheros Bt&Wlan Coex Agent C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
20:04:48.0710 0x1194  Atheros Bt&Wlan Coex Agent - detected UnsignedFile.Multi.Generic ( 1 )
20:04:49.0876 0x1194  Detect skipped due to KSN trusted
20:04:49.0876 0x1194  Atheros Bt&Wlan Coex Agent - ok
20:04:50.0116 0x1194  [ D03E551165C72F2A4BBDDC566EAA819E, 8047E2D20724B464B481F06C3AC1FA5734E97F7EC0D86EFEECD76480C84B3959 ] athr            C:\WINDOWS\System32\drivers\athwnx.sys
20:04:50.0449 0x1194  athr - ok
20:04:50.0634 0x1194  [ 2DC3D53FFA0D10EB8C911AE2DB7BF4CF, 8E0A4B5D610D487A216E70396A99ACC1BEA12C46A6681B1A39CD0FD01EDD406A ] AudioEndpointBuilder C:\WINDOWS\System32\AudioEndpointBuilder.dll
20:04:50.0822 0x1194  AudioEndpointBuilder - ok
20:04:51.0190 0x1194  [ 7B993290E7691C446C16A56A431669BA, 004551934E27E9FC1A939C9BD1DEB850A216CBED9B18CB3317920F5656D9F6BF ] Audiosrv        C:\WINDOWS\System32\Audiosrv.dll
20:04:51.0303 0x1194  Audiosrv - ok
20:04:51.0419 0x1194  [ 1992C2A1867D95AA3A0802539358D162, 795E62858A103A6213B314832032A0E7B45B62919CA67115549069C8C7D52B3F ] Autodesk Content Service C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
20:04:51.0431 0x1194  Autodesk Content Service - ok
20:04:51.0504 0x1194  [ 6D90FDA2DC364B8EA1420F2F81585CC3, 10E6F23A213CFE49BE04BB7D366ADD4028D61D7114FEC67C30B5467DF6B36D4F ] AxInstSV        C:\WINDOWS\System32\AxInstSV.dll
20:04:51.0549 0x1194  AxInstSV - ok
20:04:51.0681 0x1194  [ 61BAC67048CA5C1D08C48FCC8012B613, 71B2A466FC38DA1029B471FBD2541D8FE359751A7B212AE0F420DB3645916450 ] b06bdrv        C:\WINDOWS\system32\drivers\bxvbda.sys
20:04:51.0721 0x1194  b06bdrv - ok
20:04:51.0812 0x1194  [ 68F72B05EBC6D1779C0D60A147C7CA0B, AA1C857BEE34865C6B901157FC22570D4CF45D950708BAD7AA333F120F2B474C ] BasicDisplay    C:\WINDOWS\System32\drivers\BasicDisplay.sys
20:04:51.0906 0x1194  BasicDisplay - ok
20:04:51.0914 0x1194  [ 23156E7EDAF613D839E2839746B168D3, CAEF8F9C7D3A338BD747AC9D5BFBE730D77B911E87BCF532EBB75E1F80916AFA ] BasicRender    C:\WINDOWS\System32\drivers\BasicRender.sys
20:04:51.0963 0x1194  BasicRender - ok
20:04:52.0027 0x1194  [ 3F5523DCEFE42B385659C5CB46A6B810, CA24A3DF002B19E7BDEDE9B5EB60623F299D0E78B2E4F58DCFC028D76DEFE52D ] bcmfn          C:\WINDOWS\System32\drivers\bcmfn.sys
20:04:52.0073 0x1194  bcmfn - ok
20:04:52.0098 0x1194  [ 0B750A6A6D847E73CA48ADD7A0F5A393, 6A43020F23846EFB1AFA3C070465B0059E9DF60DEB16899E09559462DF30939F ] bcmfn2          C:\WINDOWS\System32\drivers\bcmfn2.sys
20:04:52.0143 0x1194  bcmfn2 - ok
20:04:52.0212 0x1194  [ 2B4D3AEAAD02954F8C191BC2D67949AD, 8237C9AD556CFAF7442FF60F78608104BC17CE3134C89D986D49C38CC60B1518 ] BDESVC          C:\WINDOWS\System32\bdesvc.dll
20:04:52.0358 0x1194  BDESVC - ok
20:04:52.0418 0x1194  [ 0A508274355745EEF01C6BE3198D02C4, E2DB08AEE2368FA95FDB357BB31EA4EBF31679C3E72E109DB3D7CD1B5F7B828E ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
20:04:52.0507 0x1194  Beep - ok
20:04:52.0649 0x1194  [ 5125CBB61AC81168366BEB290399CB8E, B2A3095D45E2114DE2BD0E5A3AE20B3CE95EE517A35B9E1EAD05E231F38DBDCF ] BFE            C:\WINDOWS\System32\bfe.dll
20:04:52.0783 0x1194  BFE - ok
20:04:53.0037 0x1194  [ D876C567AB767258036F05E4766189FD, DE8BA67325CB64495BD454B8F9DDCAE82636253844FC68B360C7E1CF5D51DD0E ] BITS            C:\WINDOWS\System32\qmgr.dll
20:04:53.0597 0x1194  BITS - ok
20:04:53.0651 0x1194  [ B5C2F92EE1106DFE7BB1CCE4D35B6037, E399C390687589194D8AAD385055F0CFA7D52AD9E837D8FF95008B8EB2B34E50 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
20:04:53.0675 0x1194  Bonjour Service - ok
20:04:53.0712 0x1194  [ 9CD2A4821DE379305CACB2E99AD8953A, 89D700DFC3C59ACBBADB48954A28C0EBF8D6A11A9E63837689DD891868E43188 ] bowser          C:\WINDOWS\system32\DRIVERS\bowser.sys
20:04:53.0771 0x1194  bowser - ok
20:04:53.0912 0x1194  [ 2447BD15B41298622CC662249CD0F496, 013A326D2E3BF68D654BBABE2F1E5DF0FF0A153A4B95D570EE28F9BC0F5A78C3 ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll
20:04:54.0093 0x1194  BrokerInfrastructure - ok
20:04:54.0172 0x1194  [ B3F32C630DD3F2F6A6091B89CFF13641, 7A9C53EF9AB9FF1DC392FD711B194A101DB36CA5BC799E817BEB446741089B76 ] Browser        C:\WINDOWS\System32\browser.dll
20:04:54.0245 0x1194  Browser - ok
20:04:54.0317 0x1194  [ D838DD1BCB328EFCFAD7A52DE9E3CAFD, A364C50240069D7606119E4FD3BC839F307947F680295C3A68AE1CE42B9A6108 ] BTATH_BUS      C:\WINDOWS\System32\drivers\btath_bus.sys
20:04:54.0385 0x1194  BTATH_BUS - ok
20:04:54.0462 0x1194  [ C8BF11D79B29BB23A461B65B58BA8593, 35AFAD5ED40304976287E6C982085DF7A91FF48F0320DAC32370FA039AA03C69 ] BtFilter        C:\WINDOWS\system32\DRIVERS\btfilter.sys
20:04:54.0490 0x1194  BtFilter - ok
20:04:54.0542 0x1194  [ A70E09FD082BFA67BE085D41C8B6A85F, 1711163E7BE0DE83701A0293BF5D4D37AAD124D88F6FFA3FCC6CF0F3A7D3B78D ] BthA2DP        C:\WINDOWS\system32\drivers\BthA2DP.sys
20:04:54.0656 0x1194  BthA2DP - ok
20:04:54.0715 0x1194  [ 722036C26D2C4E50EC2A2EC5FD678846, 999468038AE01F0FF6881F4B2A2CB67BC636641188E95F10729E08ADBC3CB3DE ] BthAvrcpTg      C:\WINDOWS\System32\drivers\BthAvrcpTg.sys
20:04:54.0754 0x1194  BthAvrcpTg - ok
20:04:54.0769 0x1194  [ 77630A51FAF6A07922FEE835F4DED8F6, E096A9DC12885FD19575346A9693A66D0DDFF96C3155AD2040F2BF4249D1D609 ] BthEnum        C:\WINDOWS\system32\DRIVERS\BthEnum.sys
20:04:54.0854 0x1194  BthEnum - ok
20:04:54.0891 0x1194  [ 20C63A9CC92CEA8D284C6EA36FED68DC, DA7669CCCA6838269297DD45EDB48149898B3E14648B5DB3B93AF82A3279B411 ] BthHFAud        C:\WINDOWS\system32\DRIVERS\BthHfAud.sys
20:04:54.0934 0x1194  BthHFAud - ok
20:04:55.0077 0x1194  [ C2E31BE025D46D189E38DD1EDF07837A, 656528DCAAAF485EC57EE5C3021E96736634DE3B9C39CBCD2728E055ABD4C0A5 ] BthHFEnum      C:\WINDOWS\System32\drivers\bthhfenum.sys
20:04:55.0169 0x1194  BthHFEnum - ok
20:04:55.0226 0x1194  [ F7CD605FC0B0B22F3F6F247595E3A655, 1CD9140DE5415DDBEACD8667E63E5C95FD64D693B56302A0474E693E578BEAB0 ] bthhfhid        C:\WINDOWS\System32\drivers\BthHFHid.sys
20:04:55.0267 0x1194  bthhfhid - ok
20:04:55.0314 0x1194  [ B157D72BDA6A6DD6E9DC6BF338CD0CF8, B2AC26AE214151E5AD93DED78256BC0295DBF0133C854E7DEE4CD776D9C9A349 ] BthHFSrv        C:\WINDOWS\System32\BthHFSrv.dll
20:04:55.0354 0x1194  BthHFSrv - ok
20:04:55.0411 0x1194  [ 535DC41A33630AE4C262406F9E981C03, 599332589AA28D04189E19B87A4AE6FEEB60B40A7BC6E3B11240DA363A981C29 ] BTHMODEM        C:\WINDOWS\System32\drivers\bthmodem.sys
20:04:55.0445 0x1194  BTHMODEM - ok
20:04:55.0511 0x1194  [ 224BA1CB1F3C702F0D001D2AFC9793B1, F139F6F78C716E1167E16530AE31E4A26C2A69467BCB08A9A52A101B31DF7771 ] BthPan          C:\WINDOWS\System32\drivers\bthpan.sys
20:04:55.0573 0x1194  BthPan - ok
20:04:55.0670 0x1194  [ 851ED52AE3E62CD5374BD4BBFF7A9DAB, 381281CB7D8FC4026092330B06E24BC84EEF79EE3C97E21900D950D7D9AB2FC3 ] BTHPORT        C:\WINDOWS\System32\drivers\BTHport.sys
20:04:55.0776 0x1194  BTHPORT - ok
20:04:55.0825 0x1194  [ 96932F631F5CB9F5D1C8F99A71568EF3, 5E4C8955A2EE9DC76B4EBC383653EB753D76D6B017E1A5DD553AC16094D7F12A ] bthserv        C:\WINDOWS\system32\bthserv.dll
20:04:55.0881 0x1194  bthserv - ok
20:04:55.0902 0x1194  [ DC5955E589C55E2313D69B64E1A183F3, 06D703246D0813DE53D62885C8B7381135783673FF4BDDD5CC38FEB54901BB76 ] BTHUSB          C:\WINDOWS\System32\drivers\BTHUSB.sys
20:04:55.0943 0x1194  BTHUSB - ok
20:04:56.0019 0x1194  [ 23F9EF739F685E07482116425E7879AA, 0EBDF96A49A319C0BCF6F51FB6C8C392C017E1738B950C19C91FF43E14D73143 ] buttonconverter C:\WINDOWS\System32\drivers\buttonconverter.sys
20:04:56.0090 0x1194  buttonconverter - ok
20:04:56.0109 0x1194  [ 60EB6A4CE3E21887D302350631C16F26, 4270EFA22285C1A9336CF1220761E416950D2DA9C6A40D1D8452686CD5040DAB ] CapImg          C:\WINDOWS\System32\drivers\capimg.sys
20:04:56.0240 0x1194  CapImg - ok
20:04:56.0261 0x1194  [ F8FB51B9EF6372610E9B31A1D86B62FC, 7461584A8B39AC549AD7BAFFA509D4CD81EEE542808BC8EFC285863A0AE6432D ] cdfs            C:\WINDOWS\system32\DRIVERS\cdfs.sys
20:04:56.0316 0x1194  cdfs - ok
20:04:56.0426 0x1194  [ 2E6612376D257F74781F2EF1F869D8C3, 908B0DECB9F098F7F11B029A03C06C67FB52E5E8BEA42033A2B579D3B3686AB8 ] CDPSvc          C:\WINDOWS\System32\CDPSvc.dll
20:04:56.0515 0x1194  CDPSvc - ok
20:04:56.0553 0x1194  [ A93C9B9EBE2FDE5A536000D72CC17F7F, 9793CFAE8BE8C6B5B39A1D276577965FBB2CE131325A410B7C68BD23492ADAAF ] CDPUserSvc      C:\WINDOWS\System32\CDPUserSvc.dll
20:04:56.0608 0x1194  CDPUserSvc - ok
20:04:56.0677 0x1194  [ 613D0137C269187FA298A157E3D14A18, 84BC268525F14BB27202CE242BF94D9E83BC91B50A0335908574F31B29A2F04D ] cdrom          C:\WINDOWS\System32\drivers\cdrom.sys
20:04:56.0698 0x1194  cdrom - ok
20:04:56.0742 0x1194  [ C1B5EE58E759C53F9939581709DC70BB, 85095ABC9459A766832373BC3839E573E9A73C967F8427D6B7CAB972551C3191 ] CertPropSvc    C:\WINDOWS\System32\certprop.dll
20:04:56.0828 0x1194  CertPropSvc - ok
20:04:56.0935 0x1194  [ 2C1AB8D6F92D455C5CDBEF2F88585F49, BC90087A786FD496B9064C1020D87D207D715C148F588E7802C3C81CE21D879D ] CG6Service      C:\Program Files\CyberGhost 6\CyberGhost.Service.exe
20:04:56.0947 0x1194  CG6Service - ok
20:04:57.0118 0x1194  [ 60FFF76441A4431D38BD6D786CD1BABB, 1FE15C9861901A1EC1EF55F96D2B99528BFC7055A8EE8A7B3684C3C8DB5E309C ] CGVPNCliService C:\Program Files\CyberGhost 5\Service.exe
20:04:57.0129 0x1194  CGVPNCliService - ok
20:04:57.0183 0x1194  [ 0AED948DA8D5F08B3D6F12E4E2089736, 95E538E81DDBC83492C5F3820C82C78F050B4D74ACF12D7970EC84F93581AE29 ] cht4iscsi      C:\WINDOWS\system32\drivers\cht4sx64.sys
20:04:57.0208 0x1194  cht4iscsi - ok
20:04:57.0416 0x1194  [ 0002A0FDE087C1657AB31CE73077539C, 4DD6210B67E9633AB3240371590869DC833A4C986C74FC12A5D4FFFFD361848A ] cht4vbd        C:\WINDOWS\System32\drivers\cht4vx64.sys
20:04:57.0484 0x1194  cht4vbd - ok
20:04:57.0550 0x1194  [ 6B4F90A287D75CCD78694F6790C911B2, 73D7C31E9F475FA3FD568FCA9A953F968729AA114F63C06F38BF5198DAD67BD8 ] circlass        C:\WINDOWS\System32\drivers\circlass.sys
20:04:57.0588 0x1194  circlass - ok
20:04:57.0712 0x1194  [ B72D26074E72A757D788FB1BEF8B2F2E, 36847C5315AFB9A5EC66AD3EF2A09C24C0FAF669FDF0831F78600F4609352CB4 ] CLFS            C:\WINDOWS\system32\drivers\CLFS.sys
20:04:57.0733 0x1194  CLFS - ok
20:04:57.0830 0x1194  [ E133CFCBFABB3CB517BE9F42FEA5887C, DA699CDD5F3CC427354540C907BD24CCA7BAC3112C53918EB611CB4EEC7611DA ] ClipSVC        C:\WINDOWS\System32\ClipSVC.dll
20:04:57.0864 0x1194  ClipSVC - ok
20:04:57.0912 0x1194  [ EEC3A4A98AE1A337E3CD1483AD6F2E15, 764DA329984A95E092F5C15116DA34FA7FC27216C0862365D4BF10ADC97EC5C5 ] clreg          C:\WINDOWS\System32\drivers\registry.sys
20:04:57.0976 0x1194  clreg - ok
20:04:58.0046 0x1194  [ 429623E266EF067A44E8CF148E9DFB9B, A48AA85ACC52C7AD73DB2D6148B3F9FB5EAC33C8F8C5BB6D7D0A9D84B7C08E11 ] CmBatt          C:\WINDOWS\System32\drivers\CmBatt.sys
20:04:58.0093 0x1194  CmBatt - ok
20:04:58.0186 0x1194  [ 90C07EB909C42316982E753BDAA7860D, 438581FD3468FAF01D35529672201A920E8821EC80E30E59A43645DA57738F21 ] CNG            C:\WINDOWS\system32\Drivers\cng.sys
20:04:58.0235 0x1194  CNG - ok
20:04:58.0252 0x1194  [ 3DB10C59405931E2C72EFB82C1AF97D1, 100B5450A70988DB1C1F8A5FDBB3553AF1A0D47B42A5AC71460DB92E26010CE6 ] cnghwassist    C:\WINDOWS\system32\DRIVERS\cnghwassist.sys
20:04:58.0270 0x1194  cnghwassist - ok
20:04:58.0668 0x1194  [ 344D99D4E270CDC638231D2B25A977EB, 8F4EEDA12A2FD71F4F10AFC0615AB9C4A3B03D156F831738D253852B9D6800B7 ] CodeMeter.exe  C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
20:04:58.0756 0x1194  CodeMeter.exe - ok
20:04:59.0550 0x1194  [ 34C935AF2A414572B412B3556586D783, 912981B88B0796576ECCD5EBE0C4728EC02D5D6A96B039447DCBA59B2583F25E ] CompositeBus    C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys
20:04:59.0580 0x1194  CompositeBus - ok
20:04:59.0584 0x1194  COMSysApp - ok
20:04:59.0636 0x1194  [ 44EEEB2382F566999287E13F2067693C, 53A4A0C85EAD38030FF2078C67465E3710ECD03A08FF34E1E67B2E3E1CC70043 ] condrv          C:\WINDOWS\system32\drivers\condrv.sys
20:04:59.0647 0x1194  condrv - ok
20:04:59.0814 0x1194  [ 5DE2049D5F57C1D142F36FA9CE443693, E6C2807C0B1EF90C11EB39634693B76EACE6CC675777776112835212A334F328 ] CoreMessagingRegistrar C:\WINDOWS\system32\coremessaging.dll
20:04:59.0850 0x1194  CoreMessagingRegistrar - ok
20:04:59.0950 0x1194  [ 5F06CAC4B09250CDDDD0180A08162924, A2EB0A57225E65FC264CFC9FAD858D8B54A015CDAE3DC904B1C4E9AAB40B1F06 ] CryptSvc        C:\WINDOWS\system32\cryptsvc.dll
20:05:00.0007 0x1194  CryptSvc - ok
20:05:00.0087 0x1194  [ 039B5A8CBD5C75D1C46DF15F7C74D136, A5C8A41F2D406D37E147939F2058373ED091BFCC00CA7E829F887638CD3A2F64 ] dam            C:\WINDOWS\system32\drivers\dam.sys
20:05:00.0100 0x1194  dam - ok
20:05:00.0140 0x1194  [ A4700D1F78539C0ED32FA50E64F9C692, 5CB03B5F36307BA152245BAD29CB2AC703BBE8197ABC0338A7092ADEA1C3221A ] dc3d            C:\WINDOWS\System32\drivers\dc3d.sys
20:05:00.0154 0x1194  dc3d - ok
20:05:00.0298 0x1194  [ 75E3C4BB1ED032310EDCF5691A452B4B, E7FDF778CBD347017A84EB3919C530ED1EACB22277F3EA3B6FF3EA45D9FE8A6D ] DCDhcpService  C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe
20:05:00.0887 0x1194  DCDhcpService - detected UnsignedFile.Multi.Generic ( 1 )
20:05:02.0053 0x1194  Detect skipped due to KSN trusted
20:05:02.0053 0x1194  DCDhcpService - ok
20:05:02.0215 0x1194  [ 7BD259FC59CF9C2AE1B979564B374CC6, 299832FCE304A85080C80ABFE820A6093AC15A7C1E7C89D8C946708E955A2909 ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
20:05:02.0279 0x1194  DcomLaunch - ok
20:05:02.0319 0x1194  [ AE9F09F87755C18904656CB4F59F351D, B352A43B3B68B497D87B49C302AF3F37F36D56D49878AE3785C3D43597E5DC57 ] DcpSvc          C:\WINDOWS\system32\dcpsvc.dll
20:05:02.0352 0x1194  DcpSvc - ok
20:05:02.0497 0x1194  [ ABBD3EE724117242E28D31F19FBCFF03, 68EA91A969DD80A5DE28B0A8EAEB308837183713559C2C2FAEF991858C971393 ] defragsvc      C:\WINDOWS\System32\defragsvc.dll
20:05:02.0548 0x1194  defragsvc - ok
20:05:02.0669 0x1194  [ DD74F18227ACC837D9856E24282D446D, 6A760E44CD897952538CDFA8895FE11263D51AAA79CFF24C01F3862E919DA478 ] DeviceAssociationService C:\WINDOWS\system32\das.dll
20:05:02.0797 0x1194  DeviceAssociationService - ok
20:05:02.0831 0x1194  [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] DeviceInstall  C:\WINDOWS\system32\umpnpmgr.dll
20:05:02.0876 0x1194  DeviceInstall - ok
20:05:02.0945 0x1194  [ CDF1B1B5C5951111791C236B2696C7F8, BF6C4BA545C8827B40DB69890DB4D2B2F9C583C5E3CFBDFD370B05891141458D ] DevQueryBroker  C:\WINDOWS\system32\DevQueryBroker.dll
20:05:03.0026 0x1194  DevQueryBroker - ok
20:05:03.0059 0x1194  [ 0D1D392ED2597F295956D058D33BD7C3, 2F7FE5A06D880F9E2A46C9803DD249DC40C2898C04E946D14E7EECCCC9F2B24F ] Dfsc            C:\WINDOWS\system32\Drivers\dfsc.sys
20:05:03.0207 0x1194  Dfsc - ok
20:05:03.0290 0x1194  [ F0D4400BA0F08610D9A551B15BF10B76, 83EB8FB272FC2DD2CC0659C2FB90AD0DAE88A88AB3951E03BCD933A25B601E10 ] Dhcp            C:\WINDOWS\system32\dhcpcore.dll
20:05:03.0506 0x1194  Dhcp - ok
20:05:03.0656 0x1194  [ CA7FEDDFCF61EF15A09C54DA2C07C49F, 346EF7709BA9E6BD48592B86FA46F9D956C847EF91F4980EEAD98269D0F0EF67 ] diagnosticshub.standardcollector.service C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
20:05:03.0722 0x1194  diagnosticshub.standardcollector.service - ok
20:05:03.0898 0x1194  [ CAD14E0AD1F03397E9B1C8733D76BEF4, 0035EF35F6520B1DF0E599C8A06D4163C52576BCE0976BF729B44DECDC506627 ] DiagTrack      C:\WINDOWS\system32\diagtrack.dll
20:05:04.0138 0x1194  DiagTrack - ok
20:05:04.0171 0x1194  [ 35B9D46560339A5A7F0CAC6ED702C817, F70480B01533B7029F90E2DE297E9E829660300DDE7A7D009B0AC2684E7691A7 ] disk            C:\WINDOWS\system32\drivers\disk.sys
20:05:04.0185 0x1194  disk - ok
20:05:04.0254 0x1194  [ 09CF47A74BFB480B8262FCEE222004B6, F5CD0ACA04BCB95984595CC2E17BC9E92865091A0A3BCAD4B06438A1570E7696 ] DmEnrollmentSvc C:\WINDOWS\system32\Windows.Internal.Management.dll
20:05:04.0357 0x1194  DmEnrollmentSvc - ok
20:05:04.0361 0x1194  [ 815F45161A4571C2C44491564F3D5968, 32E7AE8414A178CE429C0CDFCF718E3C11C705FB3155EA5CA0EAD48AAE507B01 ] dmvsc          C:\WINDOWS\System32\drivers\dmvsc.sys
20:05:04.0400 0x1194  dmvsc - ok
20:05:04.0438 0x1194  [ 6E5EE6E420FECD64DE463C5F01CBFE71, F173C56895E80AA03D70CD78B3AB659C2EEAACFF43BE3B6EF3939D6F4AD4F62D ] dmwappushservice C:\WINDOWS\system32\dmwappushsvc.dll
20:05:04.0526 0x1194  dmwappushservice - ok
20:05:04.0615 0x1194  [ 7F8A3ABF7750326E18CE953CCE262670, 5DBD159E8A455A42764FC73CF7DCAC849B5896848C5589B00BD36697804C0A3B ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
20:05:04.0694 0x1194  Dnscache - ok
20:05:04.0747 0x1194  [ 8F46B4C3F9BA19C26A26D0A11137B20B, BA0A66DBA98D77FD85A7CD2D4593F2B2A1A3B4D32BBECBCFFBEB5A54DCB0D8ED ] dot3svc        C:\WINDOWS\System32\dot3svc.dll
20:05:04.0848 0x1194  dot3svc - ok
20:05:04.0977 0x1194  [ CA09EAEE92C6FDDC6B05057F11A0372D, 14DB5C186B69644AA93C445BF31CC9670204F95A47B77B6EACB19B4A316378AD ] DPS            C:\WINDOWS\system32\dps.dll
20:05:05.0065 0x1194  DPS - ok
20:05:05.0095 0x1194  [ AE6BD4C879A8C849E53947C92DF3B3A0, 8C29774CB2D30D901C54AAC0C8ACE709351EE40E5C8FB9951B2A18B4A03F28B7 ] drmkaud        C:\WINDOWS\system32\DRIVERS\drmkaud.sys
20:05:05.0107 0x1194  drmkaud - ok
20:05:05.0165 0x1194  [ 7433474BE77F065D2FA628671FE31A3E, 063ADDC68F48036749E6EC7B2F66284DB29F90F62E9468D16B4EF5A0FDC45E35 ] DsmSvc          C:\WINDOWS\System32\DeviceSetupManager.dll
20:05:05.0256 0x1194  DsmSvc - ok
20:05:05.0297 0x1194  [ 5FCA45C24501DA7390065D3706A9FC3F, 093FD840F1502ECC6F05B9723CA523B3F15CF39A5D2B9106E1267739B3F2C52C ] DsSvc          C:\WINDOWS\System32\DsSvc.dll
20:05:05.0335 0x1194  DsSvc - ok
20:05:05.0625 0x1194  [ 19F2B54EE8861D90579BD0E3AE5182F9, FDD4F091C61C8C20550C8F68375ABD7ED718A733F680F0F0367D4796C302BA14 ] DXGKrnl        C:\WINDOWS\System32\drivers\dxgkrnl.sys
20:05:05.0717 0x1194  DXGKrnl - ok
20:05:05.0782 0x1194  [ 9FCE4EF7D5E274F862D9A2526B5F4779, 81D42D5475C2801C8E0C233A0BA827569D8A70590017C91C665C8B232D9BFAA9 ] EapHost        C:\WINDOWS\System32\eapsvc.dll
20:05:05.0823 0x1194  EapHost - ok
20:05:06.0479 0x1194  [ 7EC6FC0266D74BD47ABB130A328B70EC, 3856790AF967AB03B1A89F97328DC4D5A6854ACDA6169681A9AFB03D7CF791F9 ] ebdrv          C:\WINDOWS\system32\drivers\evbda.sys
20:05:06.0678 0x1194  ebdrv - ok
20:05:06.0708 0x1194  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] EFS            C:\WINDOWS\System32\lsass.exe
20:05:06.0724 0x1194  EFS - ok
20:05:06.0778 0x1194  [ 8D74B8B5D6F7C5BC4C525BAF2B083FF1, DA5656F745B3911F96871887FDFDC40F4D9C820622A0AA27EFE4BA93662833CA ] EhStorClass    C:\WINDOWS\system32\drivers\EhStorClass.sys
20:05:06.0791 0x1194  EhStorClass - ok
20:05:06.0841 0x1194  [ 2A9817B5A9260D8F60D52E36BEF10443, AC1A0203221AFAF584C71317FA07AA1B6E61BE619E918B3B1E4AD57CCED1CF03 ] EhStorTcgDrv    C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys
20:05:06.0858 0x1194  EhStorTcgDrv - ok
20:05:06.0925 0x1194  [ 80A7999DE02CE678B865832E1CE78CD6, 2576EBB6E4D630A906DE724F125099E52A962B5B68B9F9BCA849A7B29D8C8689 ] embeddedmode    C:\WINDOWS\System32\embeddedmodesvc.dll
20:05:07.0086 0x1194  embeddedmode - ok
20:05:07.0139 0x1194  [ 3CE2B6AECB9AF8BC159299EEC46A35CA, E933B28BB6E4D01FCCDF8FBBB134C244B28DA3ECBDFA13333F0D4C24B2551780 ] EntAppSvc      C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
20:05:07.0179 0x1194  EntAppSvc - ok
20:05:07.0267 0x1194  [ B5581646636759D0DAFA8B008881C079, 0CADE029ABDCDE3A89C0786F1698C93D9A7CC981EFB3761CF243E19E178FF611 ] EPSON_EB_RPCV4_01 C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
20:05:07.0337 0x1194  EPSON_EB_RPCV4_01 - ok
20:05:07.0377 0x1194  [ 1E345F2A2D95DA3190596E691CDE9342, 9D1D48F3B749ADA598D155E11E63CD52A4EEABF9BE92A1D997D25D07CF350084 ] EPSON_PM_RPCV4_01 C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
20:05:07.0432 0x1194  EPSON_PM_RPCV4_01 - ok
20:05:07.0452 0x1194  [ 77B60DEC7DCB4233E4A69D3F52E5DB24, 3A5C905E37A93899051497C90E5BA8E1D003B56C6906CADFD2F1CDF52052D248 ] ErrDev          C:\WINDOWS\System32\drivers\errdev.sys
20:05:07.0527 0x1194  ErrDev - ok
20:05:07.0644 0x1194  [ F89083AB8B9F51C0031C1CBD0A9A7E35, 9EE973A25134960E62D1A6A1E34AD9B3F7690E71C1AD31A23FA2081A73438754 ] EventSystem    C:\WINDOWS\system32\es.dll
20:05:07.0738 0x1194  EventSystem - ok
20:05:07.0861 0x1194  [ FCD2C63754C2E739A8EEAD9BC63F9DDC, C57A72ABA4C0BD71F914B9C8FF965DCFF585A205498F19A4584A4BAF7674839D ] exfat          C:\WINDOWS\system32\drivers\exfat.sys
20:05:07.0897 0x1194  exfat - ok
20:05:07.0949 0x1194  [ FA918EC296EB410FF02867D008D02421, 23D164A24CB0D212778FA9592A046B6BA1F3628003E04181744A1F891B5B3E5A ] fastfat        C:\WINDOWS\system32\drivers\fastfat.sys
20:05:08.0074 0x1194  fastfat - ok
20:05:08.0284 0x1194  [ 77CE56471AF984800F318F3734D768C7, 72D540072374A56C2C497F0532A50705D3F0637F2C0C96B1D715F2EDFCA3AA2D ] Fax            C:\WINDOWS\system32\fxssvc.exe
20:05:08.0428 0x1194  Fax - ok
20:05:08.0475 0x1194  [ 99598ECA5E41996E005D5B9D9FF1EFA2, 91345CD50EF02431B69093505C1C5F5DC6A1AA6BF192EE9392ED4D5626B60462 ] fdc            C:\WINDOWS\System32\drivers\fdc.sys
20:05:08.0517 0x1194  fdc - ok
20:05:08.0577 0x1194  [ EF0DD43A4CBAB367BCA1AFBDC9971E4F, 73E161C45D63FDDE71EE2438137913724DC513860539D1E7F6BD861F5D1B33F3 ] fdPHost        C:\WINDOWS\system32\fdPHost.dll
20:05:08.0876 0x1194  fdPHost - ok
20:05:08.0952 0x1194  [ 34DAC585994CD3B4E910DE11C584EF3D, A6C6A4CB5413EA61F1A54E2D3AD71A311CEA2C26218544D2D2D4A5CFEC52DE8C ] FDResPub        C:\WINDOWS\system32\fdrespub.dll
20:05:08.0973 0x1194  FDResPub - ok
20:05:09.0052 0x1194  [ B68DA1FE3CA2311AFD38DD6905CA7F71, 4B395DFB1B47D2507CA4D9DC996A70D0A3BDB1A245CD6DA6C42B2A299AFCCF37 ] fhsvc          C:\WINDOWS\system32\fhsvc.dll
20:05:09.0271 0x1194  fhsvc - ok
20:05:09.0354 0x1194  [ F44F666B0EACC3181544FFCF8CA0FFC7, 83F771CF9DAE1C504B30731EEC55355EA1253174252DA2192ADF1D228B3735C3 ] FileCrypt      C:\WINDOWS\system32\drivers\filecrypt.sys
20:05:09.0709 0x1194  FileCrypt - ok
20:05:09.0828 0x1194  [ 78A210DDFDF2C9EC884631D2DAA573F0, 5D39C6EF4AC690A9749EEDBE2478FFF15A22877A2861EDA103C7BF1607B0C1BD ] FileInfo        C:\WINDOWS\system32\drivers\fileinfo.sys
20:05:09.0901 0x1194  FileInfo - ok
20:05:09.0986 0x1194  [ 1A97DB5E701A186989F3795223C3BE39, F7982220D4DF7E104955E63CACE352394E2577DEF49506EA126127F820EB62DF ] Filetrace      C:\WINDOWS\system32\drivers\filetrace.sys
20:05:10.0473 0x1194  Filetrace - ok
20:05:10.0712 0x1194  [ A50878D4C50DA72EDCA919162624AA28, CBC2157D8E24440BBC999F75DAF1847324656F2242FB75A507B99AFEB4E34FAC ] FirebirdGuardianDefaultInstance C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe
20:05:10.0872 0x1194  FirebirdGuardianDefaultInstance - detected UnsignedFile.Multi.Generic ( 1 )
20:05:12.0032 0x1194  Detect skipped due to KSN trusted
20:05:12.0032 0x1194  FirebirdGuardianDefaultInstance - ok
20:05:12.0863 0x1194  [ 7D22E48510A807062210E20E17AAB97D, 4CEAE98B12B1F970ACC639A401F04C33FF94E07A2B709888D79F01E9DD27A2EC ] FirebirdServerDefaultInstance C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe
20:05:13.0904 0x1194  FirebirdServerDefaultInstance - detected UnsignedFile.Multi.Generic ( 1 )
20:05:15.0064 0x1194  Detect skipped due to KSN trusted
20:05:15.0065 0x1194  FirebirdServerDefaultInstance - ok
20:05:15.0412 0x1194  [ 257B9A07C9D50B3DD81F9B1BBAECE8F0, 6D99E8CDAE0084D9703699D5172FF72E7F19D8815124C563506DA91B9329C0FA ] fischerUpdateSvc C:\Program Files (x86)\fischer\Update\fischerUpdateService.exe
20:05:15.0898 0x1194  fischerUpdateSvc - detected UnsignedFile.Multi.Generic ( 1 )
20:05:17.0136 0x1194  fischerUpdateSvc ( UnsignedFile.Multi.Generic ) - warning
20:05:18.0725 0x1194  [ 5CEE6CD43AE5844C49300EA0B1E557EE, FBDBF3CA4EF632613E6046EEB506C5050454F8857348E28EB43E60C332EE0262 ] FLEXnet Licensing Service 64 C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
20:05:18.0803 0x1194  FLEXnet Licensing Service 64 - ok
20:05:18.0838 0x1194  [ 46626665F0E5906E45619B4EFD6186B8, 37FDD3B8AD49FD29E54DA5567EA77F28A53498AE56348F7A2628E5E5549D638B ] flpydisk        C:\WINDOWS\System32\drivers\flpydisk.sys
20:05:18.0889 0x1194  flpydisk - ok
20:05:19.0015 0x1194  [ FDA72ACA14D516D18C33AFCD0FD9260F, 6509612DEC82EA74614B5C9A7B432305A1A468C97B88BED9E141DF2929B621B1 ] FltMgr          C:\WINDOWS\system32\drivers\fltmgr.sys
20:05:19.0048 0x1194  FltMgr - ok
20:05:19.0352 0x1194  [ 49BF5C8182C3D2D6CD9F7EEDF1CFDB66, 0977EBE86B57FC370D27CA69D58122397D5D5369AF0C8DBCC492AE7AD55CBA2B ] FontCache      C:\WINDOWS\system32\FntCache.dll
20:05:19.0546 0x1194  FontCache - ok
20:05:19.0739 0x1194  [ 59241194DBDF30A2B4029E402F377900, 47A92E9CD8494C403B377799D395670A393766647E24CD83B15338CE2AA50266 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
20:05:19.0749 0x1194  FontCache3.0.0.0 - ok
20:05:19.0813 0x1194  [ 8B52024D3A5C3A12F1C4D75D30A976C5, 982F1C783966C9A6D255AA7DBAB6D225EBE0050A36176B8DE85E8ADBFE17FDF1 ] FrameServer    C:\WINDOWS\system32\FrameServer.dll
20:05:19.0964 0x1194  FrameServer - ok
20:05:20.0000 0x1194  [ D152CCBFC8251670BF0AAFE00D6BC782, 9DE82D8FC4E1DAF8FF23EE08C0B7CB5051A9224E64544D262CFA4996A41B04E1 ] FsDepends      C:\WINDOWS\system32\drivers\FsDepends.sys
20:05:20.0014 0x1194  FsDepends - ok
20:05:20.0042 0x1194  [ 6D6BB5C7363CD35FA715E826F3D029EE, C214F791EB39E8B25CE57ED9D6C1D56EE1AF6021BCB380980BD42A6338A6C9F7 ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
20:05:20.0057 0x1194  Fs_Rec - ok
20:05:20.0145 0x1194  [ 8EEC4925C03E375C4EC496E45C44139A, 06C5C7BCC28D3E435675F0759A09CAB726E971DF4BFC1DC3DCF503EABCDCCCC6 ] fvevol          C:\WINDOWS\system32\DRIVERS\fvevol.sys
20:05:20.0183 0x1194  fvevol - ok
20:05:20.0229 0x1194  [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM    C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
20:05:20.0238 0x1194  GEARAspiWDM - ok
20:05:20.0304 0x1194  [ EF78034773CE506323655A868C949144, DF195BEEE6704FBCC6D2D9E1BF6723E52ED502A1459F495B7D18481E6A79B5BC ] gencounter      C:\WINDOWS\System32\drivers\vmgencounter.sys
20:05:20.0375 0x1194  gencounter - ok
20:05:20.0401 0x1194  [ B55FEBC6A00DAA1FE074F020B6907516, 67071FBAC2ABA47AB71358A5F08E92E034A55343878F00137E90B3B1F7362976 ] genericusbfn    C:\WINDOWS\System32\drivers\genericusbfn.sys
20:05:20.0493 0x1194  genericusbfn - ok
20:05:20.0523 0x1194  [ DDD8A8CDDC7F13EF57D1DAAE71865936, 9D472A8689F72F24D40D5B94849690F53C67849FDF6162A94EF4FB330A3DA566 ] GPIOClx0101    C:\WINDOWS\system32\Drivers\msgpioclx.sys
20:05:20.0540 0x1194  GPIOClx0101 - ok
20:05:20.0643 0x1194  [ 713A176494CEC107E663CAD6C2B27F77, 76871D8CFBA8FCD8CFF96208AE84C658EBEC60270D978898B90EE9451AA1BCE1 ] gpsvc          C:\WINDOWS\System32\gpsvc.dll
20:05:20.0795 0x1194  gpsvc - ok
20:05:20.0824 0x1194  [ 7ACD8F69B5D6EC97E6D2C006E19BED88, FC69214C9308EA64B88EF4C3C95800586DDBB44C8540846B79A161BAD8203B6E ] GpuEnergyDrv    C:\WINDOWS\system32\drivers\gpuenergydrv.sys
20:05:20.0902 0x1194  GpuEnergyDrv - ok
20:05:21.0019 0x1194  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdate        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
20:05:21.0030 0x1194  gupdate - ok
20:05:21.0048 0x1194  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
20:05:21.0058 0x1194  gupdatem - ok
20:05:21.0153 0x1194  [ 445BA8C1553D4F3BDE84E80213BC17B5, 2D39961E9A55902907FC13405235D840F67412BB07F9E3F5D677F4893AA00B8D ] hardlock        C:\Windows\system32\drivers\hardlock.sys
20:05:21.0172 0x1194  hardlock - ok
20:05:21.0178 0x1194  hasplms - ok
20:05:21.0279 0x1194  [ 217230B984AB2954E2FA5E36578D7B08, BB7B79EA7501A28EB2A0303FDF66FB9D59D567994C25A1523CD6D2081C403AF6 ] HdAudAddService C:\WINDOWS\system32\DRIVERS\HdAudio.sys
20:05:21.0339 0x1194  HdAudAddService - ok
20:05:21.0357 0x1194  [ 10E3515FE5DBA6656FA62C29342EC4A1, 2051F10F74ED712B1766EB61E87FADE25AB3D0970BABFD320600D1B0D6377F26 ] HDAudBus        C:\WINDOWS\System32\drivers\HDAudBus.sys
20:05:21.0391 0x1194  HDAudBus - ok
20:05:21.0395 0x1194  [ B90D284B97CD4CA9DE7430AAAD887A56, 2F14F985C39B7801ED64590979CF2114924E9547F5B11D2B37A74DBFFDD9E7C5 ] HidBatt        C:\WINDOWS\System32\drivers\HidBatt.sys
20:05:21.0408 0x1194  HidBatt - ok
20:05:21.0440 0x1194  [ B2FE11643CC6ACDEE6C247DD36018FDB, 5796613C7DBF8B2A9E860E006FF1A245B6BE7D10E3F6685AD142B48E5C237B8C ] HidBth          C:\WINDOWS\System32\drivers\hidbth.sys
20:05:21.0489 0x1194  HidBth - ok
20:05:21.0512 0x1194  [ D24355488A2D4D2323518EC1AC7A6D9E, ED2176A2093726087EDDA25B86E9CDD4BA35F4E748E3A6DE0B15C4C97646B5C7 ] hidi2c          C:\WINDOWS\System32\drivers\hidi2c.sys
20:05:21.0552 0x1194  hidi2c - ok
20:05:21.0558 0x1194  [ 0AF9ABBA4F3F55C6C803890D64BC3C29, D3DE6FA308F8E7CD4F16387F46AE4B2F7EC9BBA07BF87652B660A0D645710571 ] hidinterrupt    C:\WINDOWS\System32\drivers\hidinterrupt.sys
20:05:21.0571 0x1194  hidinterrupt - ok
20:05:21.0575 0x1194  [ CDBCF8E9AB06D88A1E1191D32F320C5D, F76963AB7CF2BAB3A220013879AECD3976BFD851CFB66B5A69A9EA2541048861 ] HidIr          C:\WINDOWS\System32\drivers\hidir.sys
20:05:21.0610 0x1194  HidIr - ok
20:05:21.0656 0x1194  [ C900FE0DD6A1E2220084B8F1C427790C, 802194EBEDA1A50EDA300078B0888AAC1F17A42E67147B7B3B9C50AD8D4E5C89 ] hidserv        C:\WINDOWS\system32\hidserv.dll
20:05:21.0718 0x1194  hidserv - ok
20:05:21.0749 0x1194  [ D8536CB438CC4CCDAE047B768EED22B2, 4F666BFA3554F9ACA6B9D436BFA64474D5F30FB3E78F4E66068CCDF283D9867F ] HidUsb          C:\WINDOWS\System32\drivers\hidusb.sys
20:05:21.0885 0x1194  HidUsb - ok
20:05:21.0956 0x1194  [ 0AC1BD5A28FAA371EF34859FE703E515, 1DD1C33AF8D6EBE7C36FCD051F066E4039D2B47ABAECF7C68BC3933D567930B2 ] HomeGroupListener C:\WINDOWS\system32\ListSvc.dll
20:05:22.0059 0x1194  HomeGroupListener - ok
20:05:22.0144 0x1194  [ 86161A89F16851728802590EC7C92608, 3A3B05BB4E115410D27063B30C0EF3F18295F542050F329F1E466C81A9E23A46 ] HomeGroupProvider C:\WINDOWS\system32\provsvc.dll
20:05:22.0243 0x1194  HomeGroupProvider - ok
20:05:22.0281 0x1194  [ F5CA18197B4646E04DB9EB2D6642CC4D, 5BA3342DDF1BCB67E4156169FE9A33E7BC2641C729E9F1A80C0E80953C6AB114 ] HpSAMD          C:\WINDOWS\system32\drivers\HpSAMD.sys
20:05:22.0295 0x1194  HpSAMD - ok
20:05:22.0388 0x1194  [ A10C7C1E69FC90620C7BF2E51302A01F, D725AEAE38255CED73F4922A10F226215528706580B06D01C228488F93AC0397 ] HTTP            C:\WINDOWS\system32\drivers\HTTP.sys
20:05:22.0433 0x1194  HTTP - ok
20:05:22.0491 0x1194  [ 0C84C250F80EAEC2C9768464CC1A9626, 212E1003B78F9B98FEB084FD1FDB59B26A9DE4C9120F24D4361FBBF0F3C035E7 ] HvHost          C:\WINDOWS\System32\hvhostsvc.dll
20:05:22.0564 0x1194  HvHost - ok
20:05:22.0611 0x1194  [ 74FC79C52395B10FFD0B55CF22CF88FC, 94D977DA2092EE8C2A598AC48758A84BB22CB6378BD114C2D3B4172A07A9CACC ] hvservice      C:\WINDOWS\system32\drivers\hvservice.sys
20:05:22.0625 0x1194  hvservice - ok
20:05:22.0660 0x1194  [ 771EDDA9830A3079F996F34D681FB6E5, F452AD656872A1C8B2D6DCE232CE01EBD456C46F4934A7601E78470F2A2CBF38 ] hwpolicy        C:\WINDOWS\system32\drivers\hwpolicy.sys
20:05:22.0678 0x1194  hwpolicy - ok
20:05:22.0724 0x1194  [ 3B9F315E7FA72CC25228EB097DD9C694, B26F1E494428EF197A0C97645C05BB3CA093827A005D35C987F1D6778BC4E52C ] hyperkbd        C:\WINDOWS\System32\drivers\hyperkbd.sys
20:05:22.0767 0x1194  hyperkbd - ok
20:05:22.0839 0x1194  [ B54B30992620C97230013A74461C8517, CAF09BDCDD6DE2A39CB8AE2C65E6F8FE12D8E93D84BBEF6C6A98F872BF54A4E3 ] i8042prt        C:\WINDOWS\System32\drivers\i8042prt.sys
20:05:22.0930 0x1194  i8042prt - ok
20:05:22.0943 0x1194  [ C6B8743B213F06AA60943D8366FE968F, 758954F70B810063914B243115B2C753B2BCE40190F95C30ACBA0BF04EBD5B33 ] iagpio          C:\WINDOWS\System32\drivers\iagpio.sys
20:05:23.0032 0x1194  iagpio - ok
20:05:23.0051 0x1194  [ 9A2A2F3C69B9A30B6E78536F6D258BAD, 5E28E132A7300E6F5E0C6439D6BA00F1AEF66D729FF671FDA91274A25A921463 ] iai2c          C:\WINDOWS\System32\drivers\iai2c.sys
20:05:23.0093 0x1194  iai2c - ok
20:05:23.0110 0x1194  [ 5A0E850F8CD17791A3E6A3CF81D0CA28, 10A965A49D53360DD250E0758B6BB142872298A21C732EB026ACB93492C5C6CF ] iaLPSS2i_GPIO2  C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys
20:05:23.0133 0x1194  iaLPSS2i_GPIO2 - ok
20:05:23.0189 0x1194  [ 7508F1096803385D6376BFD0BD473AC4, 1F32EC23CDC94DCB9710E6663B5C3BD83568545DDC2C741CFC13550A4E4DD2BE ] iaLPSS2i_I2C    C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys
20:05:23.0203 0x1194  iaLPSS2i_I2C - ok
20:05:23.0230 0x1194  [ 16A10CCEDCF5AC4CAAE43DC9FC40392F, F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0 ] iaLPSSi_GPIO    C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys
20:05:23.0242 0x1194  iaLPSSi_GPIO - ok
20:05:23.0266 0x1194  [ EB82A11613326691508D9ED9A4FE29E7, 8445E41BAB21964C7F014742795E462BDDC6C37A261990B3D6BF4E637A719547 ] iaLPSSi_I2C    C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys
20:05:23.0286 0x1194  iaLPSSi_I2C - ok
20:05:23.0421 0x1194  [ 97E553D03219D3D51705C7235D9EAEBD, 5D4578C8804AF32D1DC0868E34D6538138DC15F9568CA7E21051B1C82C0D8D55 ] iaStorAV        C:\WINDOWS\system32\drivers\iaStorAV.sys
20:05:23.0462 0x1194  iaStorAV - ok
20:05:23.0575 0x1194  [ 8350FE3BCDE3428BC040877BB7E9EAEB, 77F9456351CA640C6B7862907C0580627E761EC807B551976A95657EB4D6CC20 ] iaStorV        C:\WINDOWS\system32\drivers\iaStorV.sys
20:05:23.0605 0x1194  iaStorV - ok
20:05:23.0707 0x1194  [ 3BA03F7C7700DDF4C383DDE9252F5817, 3E90F69D0010E7764349D9AE865D577E431FEBC67DA554B400BC808DD286E203 ] ibbus          C:\WINDOWS\System32\drivers\ibbus.sys
20:05:23.0740 0x1194  ibbus - ok
20:05:24.0119 0x1194  [ 3CC7B3BB1A9EA201A040883EDFAA67A0, F543A779BA8CBFD5E0B939844B9CB47A2C05A400C693635F520438C18FFDFAF1 ] IconMan_R      C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
20:05:24.0254 0x1194  IconMan_R - ok
20:05:24.0312 0x1194  [ 937AC47F7356554DA05D9722C356EB55, 9EABC9F19B4E1193B669D2674967F5C6F03FAD348EDF0615E3F78554FF9A83CC ] icssvc          C:\WINDOWS\System32\tetheringservice.dll
20:05:24.0534 0x1194  icssvc - ok
20:05:24.0740 0x1194  [ F2934208C0E50C0B971A7981AB90BED2, B936BFBBD71E731CC2CDB8B47D262F2EF09726FF921C2DA0841910CA2401423D ] IKEEXT          C:\WINDOWS\System32\ikeext.dll
20:05:24.0875 0x1194  IKEEXT - ok
20:05:24.0908 0x1194  [ 2A01C96DF5802D3434634E55C91232D8, A3ABEF36E2FD2CF5C371ADBF92566A09669A1D990ABE4677370F57F2EEAF8121 ] IndirectKmd    C:\WINDOWS\System32\drivers\IndirectKmd.sys
20:05:24.0975 0x1194  IndirectKmd - ok
20:05:25.0062 0x1194  [ 9F7E87F6595D065A8A200A291043045E, 6944F72F73EADC6C9B7691F2C1C6DF1898F22C88EFA78EC0BA8CB5FFD9CE057B ] intelide        C:\WINDOWS\system32\drivers\intelide.sys
20:05:25.0077 0x1194  intelide - ok
20:05:25.0131 0x1194  [ A6BD2E20AE1BC5CB2776C87C28E4F4CA, BD8BE67CED9A4982D785CE9ECBEFE868C3A2E37DF7F9592B9F9049B807A1554B ] intelpep        C:\WINDOWS\system32\drivers\intelpep.sys
20:05:25.0164 0x1194  intelpep - ok
20:05:25.0173 0x1194  [ 2A48DA39542636DB0FA3BA915385D1B3, 6CA0916F5F4B1E81AE6A6233276320599BFA7C129267177703E3BB6468FB4683 ] intelppm        C:\WINDOWS\System32\drivers\intelppm.sys
20:05:25.0204 0x1194  intelppm - ok
20:05:25.0240 0x1194  [ DB32758F3A7F6CCE81A5430080A2EA65, 36A26BAA884E96804F8EA0B12BB3E81BBE6D4EE704809904091445F36CAB5A29 ] iorate          C:\WINDOWS\system32\drivers\iorate.sys
20:05:25.0256 0x1194  iorate - ok
20:05:25.0289 0x1194  [ FE85D0A86CA7A5A99CF8CD04DE7F80AE, 544C01FC01EE728EB5667158207E5F4418FE77A88BA318192A834722DB766F4E ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
20:05:25.0377 0x1194  IpFilterDriver - ok
20:05:25.0655 0x1194  [ EF1BB0EF8A12C32DD88C409706B8145E, 7AEDE717C258C29592CC8AEC40F61617E5382646E5141E1C0941882ACE5C5758 ] iphlpsvc        C:\WINDOWS\System32\iphlpsvc.dll
20:05:25.0881 0x1194  iphlpsvc - ok
20:05:25.0933 0x1194  [ 450DBDD716C7911F83E05F78EE18BFA2, 43C0DA172F632131898F315A53DEDD1AE99FB0620AB32B3A5B99FEC498C9AAE5 ] IPMIDRV        C:\WINDOWS\System32\drivers\IPMIDrv.sys
20:05:25.0948 0x1194  IPMIDRV - ok
20:05:25.0998 0x1194  [ F1DAECC3B3D6399875D4F10529D6A77C, 6533D2F858816BE6570C998510919FCA2904EC6EF806F61C1FD325E88133111B ] IPNAT          C:\WINDOWS\system32\drivers\ipnat.sys
20:05:26.0047 0x1194  IPNAT - ok
20:05:26.0114 0x1194  [ 9C9D71CC6705176731EA5672F1648BB7, F44C7CAFAE09F09AFE1D17C7284D98AFBC7B322B5FB79F7D4C20EF862BF2E81F ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
20:05:26.0147 0x1194  iPod Service - ok
20:05:26.0205 0x1194  [ 7475A2903BB704B446AA6309E34D3362, C94643A1626A9716015EBA7041A1224098501EB7DAA704CBFCAD3DC6F3CFC6AF ] irda            C:\WINDOWS\system32\drivers\irda.sys
20:05:26.0247 0x1194  irda - ok
20:05:26.0278 0x1194  [ 9725E7F0C64CE9916A5CDABE8D6E13C3, 04AF9E48FEF208A2850DF28352E8FDCBF4018982C72C0F67EE12C048C4070116 ] IRENUM          C:\WINDOWS\system32\drivers\irenum.sys
20:05:26.0323 0x1194  IRENUM - ok
20:05:26.0369 0x1194  [ 8C604213A2E73088BFFE6CD2E6F1AE53, B4C4FEE4D398A29F72EC27D5668071D7E68CD943FFFC38624DD5DF5BEBDF46D3 ] irmon          C:\WINDOWS\System32\irmon.dll
20:05:26.0400 0x1194  irmon - ok
20:05:26.0454 0x1194  [ 58040898883A96160D41739C80328BBF, 7F85C91C905811416E266A263DDEFCDCB0B45376AAE51B551AB636C16577DB9F ] isapnp          C:\WINDOWS\system32\drivers\isapnp.sys
20:05:26.0476 0x1194  isapnp - ok
20:05:26.0592 0x1194  [ C9FD02D62E09337B67B0C61EC8CA38CC, DC77E935ECC8474BE9018F0937CB11C137073582B20A0EE107CE247FD9E1F9C1 ] iScsiPrt        C:\WINDOWS\System32\drivers\msiscsi.sys
20:05:26.0616 0x1194  iScsiPrt - ok
20:05:26.0644 0x1194  [ 210808437570BDDEE71A43535E3A2D30, EF5DE6EE4FF58F44CDE4D4E7F298ABBC9086EC05CC3AE4903060DA878115AC1E ] kbdclass        C:\WINDOWS\System32\drivers\kbdclass.sys
20:05:26.0657 0x1194  kbdclass - ok
20:05:26.0710 0x1194  [ 0B779E9FC426CA2268D28181FA6C222F, 83292023A688C3044D096F22242EB954B7F7511BE8341D45FF0AFBD9CB9BCB4E ] kbdhid          C:\WINDOWS\System32\drivers\kbdhid.sys
20:05:26.0766 0x1194  kbdhid - ok
20:05:26.0772 0x1194  [ 813BA3EB2CE038F2A5382DDD75CAD60B, 99FA444027CAC247B54317730D54AB0C4C000AE076B97E47470FDA9834594312 ] kdnic          C:\WINDOWS\System32\drivers\kdnic.sys
20:05:26.0805 0x1194  kdnic - ok
20:05:26.0819 0x1194  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] KeyIso          C:\WINDOWS\system32\lsass.exe
20:05:26.0832 0x1194  KeyIso - ok
20:05:26.0898 0x1194  [ 705C0F8BCCEF6E7CB704CCB454192D7E, FC608C708E2C3BF7A66E57B95E19E71E5F5C87EF359D8BC1A817500B45DF9338 ] KSecDD          C:\WINDOWS\system32\Drivers\ksecdd.sys
20:05:26.0914 0x1194  KSecDD - ok
20:05:26.0988 0x1194  [ 55AD13E2BAFC5AB53A10F8C271F5D242, 058BEF14DCB95574BCAB985F04737BA89483937E8D8A74F7B4CEAFB7400C2397 ] KSecPkg        C:\WINDOWS\system32\Drivers\ksecpkg.sys
20:05:27.0006 0x1194  KSecPkg - ok
20:05:27.0071 0x1194  [ 4ED115CD1A1099705F56B5E0FFF97CC6, 9CC49DF2CD6AAAE405BA661D13EFC1E05111D1DE3D1E50C39C425AF1F075610B ] ksthunk        C:\WINDOWS\system32\drivers\ksthunk.sys
20:05:27.0110 0x1194  ksthunk - ok
20:05:27.0236 0x1194  [ 8125BDF7ADC261F75EF0CAD92456E350, 184797AA1D58C4FF743BA60D48590B88B781EE7779205E45E0679DEC79F3E185 ] KtmRm          C:\WINDOWS\system32\msdtckrm.dll
20:05:27.0334 0x1194  KtmRm - ok
20:05:27.0437 0x1194  [ 8CCAB08815B50AD78B823DB3F96C8604, 265E6D582EB7207B5CC577D61CB7BC3646F613047F168CD69BB776C37780EBF5 ] LanmanServer    C:\WINDOWS\system32\srvsvc.dll
20:05:27.0494 0x1194  LanmanServer - ok
20:05:27.0538 0x1194  [ 33DBBCF71F68EA97D9FD34E4C9AB5AC6, 104F04A1560E75EB224A3825707CE51E8798ABD764F5CC3B854FFFC93A39AF60 ] LanmanWorkstation C:\WINDOWS\System32\wkssvc.dll
20:05:27.0639 0x1194  LanmanWorkstation - ok
20:05:27.0701 0x1194  [ F8EBAA1FE6D3BF84752931DE1BFA0E2A, 2F3C512712BA709BBBBD779D9E792DBE324876C402CDCEF0345B8B7ABE1D232A ] lfsvc          C:\WINDOWS\System32\lfsvc.dll
20:05:27.0740 0x1194  lfsvc - ok
20:05:27.0781 0x1194  [ 5A23E4BE0CCF49663C4CF7EB74C20278, 9DF91014B13B7CED1C3D409F90858FD03EFC5C4347C98901B4DF0AFF2B77845D ] LicenseManager  C:\WINDOWS\system32\LicenseManagerSvc.dll
20:05:27.0882 0x1194  LicenseManager - ok
20:05:27.0905 0x1194  [ 5933A6673F00D8255C52957E40C2D601, 0AA1281F8B3F97E360592D1B35EE7D3D614F1AB46007F9884CFFB1C5E647575E ] lltdio          C:\WINDOWS\system32\drivers\lltdio.sys
20:05:27.0943 0x1194  lltdio - ok
20:05:28.0046 0x1194  [ 88A3C935725FA6EA1A228DCC26CF9C6F, 9B1F70644EEFA1EE7CE151A8A970430087339B7A6345F2E0252370929D4AFAC6 ] lltdsvc        C:\WINDOWS\System32\lltdsvc.dll
20:05:28.0099 0x1194  lltdsvc - ok
20:05:28.0144 0x1194  [ 3F858E28AEE6545FA1B64134DFD5C2CE, FFD7B4FB0A7B61BC6B76A172134673842F2CF00E96FA3ED4A8273DC525B6BB92 ] lmhosts        C:\WINDOWS\System32\lmhsvc.dll
20:05:28.0176 0x1194  lmhosts - ok
20:05:28.0281 0x1194  [ 98B16E756243BEA9410E32025B19C06F, C4F8663FF4C2F1123CC92D88004090AD06ED12FCD07706AE168333A33B269A53 ] LMS            C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
20:05:28.0299 0x1194  LMS - ok
20:05:28.0351 0x1194  [ 8E1B0946948CCC0BC1FA3CB70374A795, 0B894C129A35E223FF9594725AC90916CBD597FAD2211A18FC2AE03EA8679597 ] LSI_SAS        C:\WINDOWS\system32\drivers\lsi_sas.sys
20:05:28.0365 0x1194  LSI_SAS - ok
20:05:28.0386 0x1194  [ 4F68163FC04C973500DC4DA0946917B0, DF060C29109EB3978CEDFE781999B0C4C1E8C0FDB133428058D8400C53315EEC ] LSI_SAS2i      C:\WINDOWS\system32\drivers\lsi_sas2i.sys
20:05:28.0401 0x1194  LSI_SAS2i - ok
20:05:28.0408 0x1194  [ E5AC5F2815938651CDCC27F425474673, 3AF0598982153C36A766506FA088F7B84333CC96FEBB050402547AFC613AF9F7 ] LSI_SAS3i      C:\WINDOWS\system32\drivers\lsi_sas3i.sys
20:05:28.0423 0x1194  LSI_SAS3i - ok
20:05:28.0443 0x1194  [ CCF6EC9FB9B8F18E05B4253E81013E48, EBE8D77FEE8B99BD8C29702404774D554673C96DF3FDF3DCEA9C99E22C2709FC ] LSI_SSS        C:\WINDOWS\system32\drivers\lsi_sss.sys
20:05:28.0456 0x1194  LSI_SSS - ok
20:05:28.0611 0x1194  [ D5EFC0BAEC21EDE6FE03D377D403B421, 41BE71AF7C896FD4C51EF7E3871AAB769164DFB8050DA43E48C7A100711414B4 ] LSM            C:\WINDOWS\System32\lsm.dll
20:05:28.0778 0x1194  LSM - ok
20:05:28.0831 0x1194  [ C9579D32219E5B936AC3A48D470117EC, E61A77191B6BA25D29B1221FEBBE826BBC11F825C0E35A72B4CEFFF8B7FE59A8 ] luafv          C:\WINDOWS\system32\drivers\luafv.sys
20:05:28.0862 0x1194  luafv - ok
20:05:28.0916 0x1194  [ CAAF0CD70FEE7C5110B1E62804E41B17, 48482A6C8D2296C4DC613304637C8DBB7DD1DB39326F27650EBCA6FD2793BCFD ] MapsBroker      C:\WINDOWS\System32\moshost.dll
20:05:28.0995 0x1194  MapsBroker - ok
20:05:29.0287 0x1194  [ C8B2A4463DD0D77A16668DDAE5EED895, F6F02E4BAF30C8DA230976855AD1E751A2D77CC9D4857F9647676BAE6630820C ] mb Lizenz-Server C:\Program Files\mb Lizenz-Server\64-Bit\MBLizenzServer.exe
20:05:29.0357 0x1194  mb Lizenz-Server - ok
20:05:29.0525 0x1194  [ 77AB66599EAFF797744D17C502FECDB9, E3A356AC3D6958B08C126D2C4231F2F7A655348606AE53FB95C6DA17908B32D1 ] McComponentHostServiceSony C:\Program Files (x86)\Sony\MSS\3.8.130\McCHSvc.exe
20:05:29.0543 0x1194  McComponentHostServiceSony - ok
20:05:29.0589 0x1194  [ C3CDCCF07486BD2616A7B82946E07AC0, 1EF95DAB2DA856BC7D7573B2EB2D9006DF337F827F0B56A161D0C97F45DB755E ] megasas        C:\WINDOWS\system32\drivers\megasas.sys
20:05:29.0607 0x1194  megasas - ok
20:05:29.0642 0x1194  [ 2CF0CB2A0ED68C5455371E84C16F9627, 1C9166B52140145F1968E83E52BFF041250811B23C770FE181A18A4BA060CA81 ] megasas2i      C:\WINDOWS\system32\drivers\MegaSas2i.sys
20:05:29.0670 0x1194  megasas2i - ok
20:05:29.0746 0x1194  [ FADB2FE017E69EECE0E1BA78661C2E8C, BE99B49031D8B4B670B6F6B6E829E54406779CF6F1D8AFE8AB79A73E6764AB2F ] megasr          C:\WINDOWS\system32\drivers\megasr.sys
20:05:29.0778 0x1194  megasr - ok
20:05:29.0829 0x1194  [ A6518DCC42F7A6E999BB3BEA8FD87567, 8A9AE992F93F37E0723761EA271A7E1AA8172702C471041A17324474FC96B9BC ] MEIx64          C:\WINDOWS\System32\drivers\HECIx64.sys
20:05:29.0841 0x1194  MEIx64 - ok
20:05:29.0885 0x1194  [ 55A417C3E41F2A98666CF929EC19108E, A38C262B2863C87E4151525BF26D6AC16E7982D370E2C6998EB15C88C4BC8254 ] MessagingService C:\WINDOWS\System32\MessagingService.dll
20:05:29.0925 0x1194  MessagingService - ok
20:05:30.0261 0x1194  Microsoft SharePoint Workspace Audit Service - ok
20:05:30.0434 0x1194  [ FD60818B66B2E8A5415EA840E99A9D8F, 5D2F22909354534B821D958FBEF6A40EB4F642F53C7B509D00949096EF716F36 ] mlx4_bus        C:\WINDOWS\System32\drivers\mlx4_bus.sys
20:05:30.0482 0x1194  mlx4_bus - ok
20:05:30.0542 0x1194  [ 68F6977F1CFBAAC770D940A8C0326FA1, 90EE1E7DAC680EAA5AD50E9B0B9FD8FCE8DD6A02D5EF941B5AA5084CBD40BB80 ] MMCSS          C:\WINDOWS\system32\drivers\mmcss.sys
20:05:30.0594 0x1194  MMCSS - ok
20:05:30.0627 0x1194  [ 0D50B3F3AB32D416786B58D4553859CE, 9DA4D7A30982E8B31C45BDB721AEF5240EAD9DA6839CF34FDDBCF123BF104F2C ] Modem          C:\WINDOWS\system32\drivers\modem.sys
20:05:31.0318 0x1194  Modem - ok
20:05:31.0365 0x1194  [ 9CCCB7FC3EDADEBA461D78615A6011A6, C120B58F25E8CCFD971EB78645C0682F367AD56DC15F2D8C1980CE75B04719DF ] monitor        C:\WINDOWS\System32\drivers\monitor.sys
20:05:31.0430 0x1194  monitor - ok
20:05:31.0470 0x1194  [ 27A07B2FB2E3057DA8DAEA4F25D843C7, 09D2B39E6B9AAEC879E5871DD6BCFF2AEF0B894F3B44649665A685F8B3CA6F27 ] mouclass        C:\WINDOWS\System32\drivers\mouclass.sys
20:05:31.0486 0x1194  mouclass - ok
20:05:31.0491 0x1194  [ 7BD6E7F7C9001AB21B8362CFFEE80B25, C470C3363EEF3A60409A5934988BFB9B72AE7C2BB63CC2C2D006D7EB1C797F6A ] mouhid          C:\WINDOWS\System32\drivers\mouhid.sys
20:05:31.0547 0x1194  mouhid - ok
20:05:31.0574 0x1194  [ F5BDAEE4B7D369D4C74668DCFBA3FF10, 100F39288E56AFE0D39D1CC235BDC9F3727C873CD3114E092DA7A08810BD3EB2 ] mountmgr        C:\WINDOWS\system32\drivers\mountmgr.sys
20:05:31.0594 0x1194  mountmgr - ok
20:05:31.0638 0x1194  [ 30844BD376F9D01E62C820BEF446F1F8, 910D672EDB544A20AEB4450B4D89830F46EDD28CE0021156176315C5D068A1B4 ] mpsdrv          C:\WINDOWS\system32\drivers\mpsdrv.sys
20:05:31.0689 0x1194  mpsdrv - ok
20:05:31.0805 0x1194  [ 779CFDB17EA07A6D26FEBBAC95B65772, 74D9542E8DCCD07396A45A45D2F500AA6F9DCC1DB785A6153EB3067E42F576A4 ] MpsSvc          C:\WINDOWS\system32\mpssvc.dll
20:05:31.0874 0x1194  MpsSvc - ok
20:05:31.0957 0x1194  [ 25D32BE04FE0A23FDF57FD5382757672, 64E39E3E21D9173FB1116B989D80C244C49DA827698A05AF5CC5CD1C6AE155DE ] MRxDAV          C:\WINDOWS\system32\drivers\mrxdav.sys
20:05:32.0120 0x1194  MRxDAV - ok
20:05:32.0156 0x1194  [ E671EDAB0726E05ECEF4058B4CD73C4D, 9F4C50E635CE2204E3291C8D3D7F658A969E80722B8B6F0304228D9B434C20EA ] mrxsmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
20:05:32.0180 0x1194  mrxsmb - ok
20:05:32.0238 0x1194  [ D4D12BC29DE0F09280868FDCA65B3474, A6FE89ABD52087FEE52FDF31DDF4CB627ED400E94FDA86BEBF1D4763F1E42518 ] mrxsmb10        C:\WINDOWS\system32\DRIVERS\mrxsmb10.sys
20:05:32.0310 0x1194  mrxsmb10 - ok
20:05:32.0387 0x1194  [ 93A77008A8932FC84A173C4E97E52874, B7510CF7998C538D68BD2ECDC512A0BFC7CB7362F598EE4110F728427AFF0F5A ] mrxsmb20        C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys
20:05:32.0405 0x1194  mrxsmb20 - ok
20:05:32.0457 0x1194  [ 74C9D21523DAE0C18F413C196DF0058A, 3DB4B8CA368D9DD82FAE2C2BC828A21142C8D29780A7C8667188C447519FF702 ] MsBridge        C:\WINDOWS\system32\drivers\bridge.sys
20:05:32.0505 0x1194  MsBridge - ok
20:05:32.0578 0x1194  [ 308F08347923DEEDE7BC03EC7D485841, 72DB45CA11FE635DF9F8273C38CBEFB8DF5362ADA0CBF6D2B1E570365DC700C0 ] MSDTC          C:\WINDOWS\System32\msdtc.exe
20:05:32.0657 0x1194  MSDTC - ok
20:05:32.0720 0x1194  [ F01B849D9D4A8CEAF32D4FDBD0B83C92, D2473AC4C6E6C03DEF13EA73EC78FB878BDC95C047651BF79A16C9DEA82AD046 ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
20:05:32.0766 0x1194  Msfs - ok
20:05:32.0810 0x1194  [ 22ECD8F5D1DFADF2011BBB1700CB871D, 8F9EFF51137394EFA5471B8A29C541710063B65806B075B4925A84D5B6BC3BBB ] msgpiowin32    C:\WINDOWS\System32\drivers\msgpiowin32.sys
20:05:32.0824 0x1194  msgpiowin32 - ok
20:05:32.0843 0x1194  [ FD870F6968A145E4D2BA8A8842686B03, 34B8F601F3B5E42B4D0A41E2AF7DB4EB4E5B627DA8DA9A2A2D46B153AF23AEB1 ] mshidkmdf      C:\WINDOWS\System32\drivers\mshidkmdf.sys
20:05:32.0922 0x1194  mshidkmdf - ok
20:05:32.0926 0x1194  [ 30364757963A028CE5DF0FBAAC270173, C72588A6A52FF8E418A15D2C407A4DB7EA768585423720145F8253D5CA519DC2 ] mshidumdf      C:\WINDOWS\System32\drivers\mshidumdf.sys
20:05:32.0971 0x1194  mshidumdf - ok
20:05:32.0988 0x1194  [ 6BB0FEDDAE7135FA37FFAFF4D9E0E876, B41A3C0FFDFC493D6325ED493445AFCED04EC9DFF2B38125616FC5419AD1ACC4 ] msisadrv        C:\WINDOWS\system32\drivers\msisadrv.sys
20:05:32.0998 0x1194  msisadrv - ok
20:05:33.0069 0x1194  [ 07E3E54734B14F43A4A95A849C0A0DE2, 314AA02EA84D267B32DBAEBEA6C1AC1A266DED1E8D35A17B41D1D2AC75E8049E ] MSiSCSI        C:\WINDOWS\system32\iscsiexe.dll
20:05:33.0160 0x1194  MSiSCSI - ok
20:05:33.0164 0x1194  msiserver - ok
20:05:33.0191 0x1194  [ 13D614E6B51ECF36746C48CE829FA7F6, CAD63C0A4F7110093F84C58252C5803F14E3FC46584B79DA17EC86D49FEAEA64 ] MSKSSRV        C:\WINDOWS\system32\DRIVERS\MSKSSRV.sys
20:05:33.0228 0x1194  MSKSSRV - ok
20:05:33.0260 0x1194  [ 642CDE46351D5D2D90311E77072AB46D, B2D3033E607BA2F6E6B9CFB1CBF154CD0CE910EA473C56343EC81B9B94044CCA ] MsLldp          C:\WINDOWS\system32\drivers\mslldp.sys
20:05:33.0329 0x1194  MsLldp - ok
20:05:33.0362 0x1194  [ F2302A5CE63CA7673200FAFCEEEDB6AF, B8C44FC2DC0332183DE325CDBF511101F3307225295EDD428CE575A8DE15C223 ] MSPCLOCK        C:\WINDOWS\system32\DRIVERS\MSPCLOCK.sys
20:05:33.0407 0x1194  MSPCLOCK - ok
20:05:33.0439 0x1194  [ 6114512EA26E835BA522C63635429DB5, 0F91CE41B4555316A79AEF3047C152D538CC9C7C329987C9FD0E3D961AFC87C8 ] MSPQM          C:\WINDOWS\system32\DRIVERS\MSPQM.sys
20:05:33.0487 0x1194  MSPQM - ok
20:05:33.0546 0x1194  [ AA538E16E644D00E3BA5349BBA9598EC, 64A68B06883FE7ED34E04AB119BA819753F1222923EDD4E802C35D402B89D075 ] MsRPC          C:\WINDOWS\system32\drivers\MsRPC.sys
20:05:33.0800 0x1194  MsRPC - ok
20:05:33.0821 0x1194  [ 0543BEFD41EC4D25C7F7CF36409CEC7D, 631622CFEC49952C0470531B23FFFFF483DC0EFFEF7A97B1179A600392C05DDD ] mssmbios        C:\WINDOWS\System32\drivers\mssmbios.sys
20:05:33.0845 0x1194  mssmbios - ok
20:05:33.0849 0x1194  [ C1569E4DB8EFE3617847BF041A3C842F, 99ADE5E7F50E04CAEC737F7F90741CCA8EE628996BA5EB6C6BC62184884429B6 ] MSTEE          C:\WINDOWS\system32\DRIVERS\MSTEE.sys
20:05:33.0893 0x1194  MSTEE - ok
20:05:33.0931 0x1194  [ 130B16970154BA9876B09E5C4BAC63BE, BE3AF8FC5A26AB9C9DBA9C015C2E1FD3C4CD9CB423A2BBDABA91428BF8620553 ] MTConfig        C:\WINDOWS\System32\drivers\MTConfig.sys
20:05:33.0968 0x1194  MTConfig - ok
20:05:33.0975 0x1194  [ 15D987C8F6CCD4AC94E070C5986762CB, 452FB0C48B86C7F8F53794CC2DDBF2B900B03A0383B2DE8F6A830F8CB0AFBAD8 ] Mup            C:\WINDOWS\system32\Drivers\mup.sys
20:05:33.0989 0x1194  Mup - ok
20:05:33.0996 0x1194  [ 3D2C5B4995CA0751D32DEA0DE9FDFE44, A26958785FD9E05E2CA97078C9BB277CD44222BF5F7D9E8DC2F3F6AAAFFC6483 ] mvumis          C:\WINDOWS\system32\drivers\mvumis.sys
20:05:34.0009 0x1194  mvumis - ok
20:05:34.0093 0x1194  [ DB31EBB04C871F422C36A0962DA7D38B, B1BC2344744F537FB2C7D07B415F860195B7795E185253F05C0817A3764FEC10 ] NativeWifiP    C:\WINDOWS\system32\DRIVERS\nwifi.sys
20:05:34.0291 0x1194  NativeWifiP - ok
20:05:34.0357 0x1194  [ C3D9870E680D9D843B18F4626C3858FE, 43596CAC9FB488F810FBA954C52BC4D13F7D32028C40ACFE33DFD7EE36A65C17 ] NcaSvc          C:\WINDOWS\System32\ncasvc.dll
20:05:34.0424 0x1194  NcaSvc - ok
20:05:34.0468 0x1194  [ 04CE2C0F0759EACD886BA4B658B60D5D, E34D0976FC5936C8629800D826DB127072D1DFC3D350EFACA3AA1B8119551762 ] NcbService      C:\WINDOWS\System32\ncbservice.dll
20:05:34.0552 0x1194  NcbService - ok
20:05:34.0568 0x1194  [ E6094065008FE423377294050E7CEA2D, 86E200227256407530E2C28243DEFBC3CB6E9497644404D9AD79DA242286DF7B ] NcdAutoSetup    C:\WINDOWS\System32\NcdAutoSetup.dll
20:05:34.0698 0x1194  NcdAutoSetup - ok
20:05:34.0746 0x1194  [ 629CB21AC49C8867E0F29DF1C16DB7B4, 20663E68C69D0A1A2FE99A0C2A9DEFABF49786A1DC8F7F4E1699458AF57D7E79 ] ndfltr          C:\WINDOWS\System32\drivers\ndfltr.sys
20:05:34.0763 0x1194  ndfltr - ok
20:05:34.0923 0x1194  [ D5564FC81350458ED570528C4E3B1CCF, DD3C5012492EF9BCE3BE635BBB3AA40B3C5F5FDBD795A76B327D9C994102AC2B ] NDIS            C:\WINDOWS\system32\drivers\ndis.sys
20:05:34.0971 0x1194  NDIS - ok
20:05:35.0024 0x1194  [ 6DD605338FAAF6BA17662AA874E0D162, 636607829F5D7C3B7A4683C0A2DD594360D72F2AA3F8710153BE32575AE34A15 ] NdisCap        C:\WINDOWS\system32\drivers\ndiscap.sys
20:05:35.0103 0x1194  NdisCap - ok
20:05:35.0126 0x1194  [ E34196F285F8B8879E1FF36C31F7179E, 77A4F24F995D4C0689C43F9956E08DCEC62517E4F8B1B9EAA1852B5293DB5B9A ] NdisImPlatform  C:\WINDOWS\system32\drivers\NdisImPlatform.sys
20:05:35.0195 0x1194  NdisImPlatform - ok
20:05:35.0244 0x1194  [ 1FAD2398673F30CEC616B89C46B7DCBA, 70302049E6AE2BC6B3A7A9DE54D3F940AD6A9771CC2EBCCEC65994E67A25ECB5 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
20:05:35.0291 0x1194  NdisTapi - ok
20:05:35.0297 0x1194  [ AEB8ECBE66CC46854066CB1F5623E179, 2F650A85A9DAE38887610C0B876621035616CEDB65D4BBBD7F1405616D218AAF ] Ndisuio        C:\WINDOWS\system32\drivers\ndisuio.sys
20:05:35.0350 0x1194  Ndisuio - ok
20:05:35.0354 0x1194  [ 7340104C2BF2F126714F7CDE85E63610, 45B64EC6F3A4C43F7D74806789067658C6EF0D44D36B841F4D26E1EBC95AF66C ] NdisVirtualBus  C:\WINDOWS\System32\drivers\NdisVirtualBus.sys
20:05:35.0402 0x1194  NdisVirtualBus - ok
20:05:35.0428 0x1194  [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] NdisWan        C:\WINDOWS\System32\drivers\ndiswan.sys
20:05:35.0479 0x1194  NdisWan - ok
20:05:35.0564 0x1194  [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] ndiswanlegacy  C:\WINDOWS\system32\DRIVERS\ndiswan.sys
20:05:35.0588 0x1194  ndiswanlegacy - ok
20:05:35.0595 0x1194  [ 78A12E3DF035B5D054986949B19BE43C, AD9B34F89B9F27D473BD5FCE6694A40FCCB808B61ABEDD6F70F1AF6C7E73ABF8 ] ndproxy        C:\WINDOWS\system32\DRIVERS\NDProxy.sys
20:05:35.0637 0x1194  ndproxy - ok
20:05:35.0671 0x1194  [ 04C8859355C1DC9C0FA198D1894D71C2, E7C67E73009341B5D402470C686781B3C7BBE2531CE26665E08E711B990B1A77 ] Ndu            C:\WINDOWS\system32\drivers\Ndu.sys
20:05:35.0707 0x1194  Ndu - ok
20:05:35.0739 0x1194  [ 6C76780A01FC2B885BD6E957B5C36B02, DB7834F03A765F65C773E772D8051AFADB22CA4B5074180AA397857A0C47A068 ] NetAdapterCx    C:\WINDOWS\system32\drivers\NetAdapterCx.sys
20:05:35.0896 0x1194  NetAdapterCx - ok
20:05:35.0901 0x1194  [ 5D1513BD6430307C9DB86C6E351372ED, D2AB709CF7CFA5B857B084AFC821914A975B7DDDCE154229981F19448973BD6D ] NetBIOS        C:\WINDOWS\system32\drivers\netbios.sys
20:05:35.0914 0x1194  NetBIOS - ok
20:05:35.0956 0x1194  [ 6FEBB0A847FFD5F057B9AC8889F1B9A7, 558BCC64C59079E6569F61CCE1219A124B3313FC4E6CB5CBCC94124D202FF19D ] NetBT          C:\WINDOWS\system32\DRIVERS\netbt.sys
20:05:36.0044 0x1194  NetBT - ok
20:05:36.0063 0x1194  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] Netlogon        C:\WINDOWS\system32\lsass.exe
20:05:36.0077 0x1194  Netlogon - ok
20:05:36.0158 0x1194  [ D3BF2DA9216A4CF22A97820A50A67EFF, D00CBE0A7ECFB449D9B48967A01EE56141404EBE229893D5A1710781AD5F2551 ] Netman          C:\WINDOWS\System32\netman.dll
20:05:36.0199 0x1194  Netman - ok
20:05:36.0354 0x1194  [ F2645D51DD8AABC8BC72358409410437, 8CB97628923D6CEA6EFAD7E666BE92C154060BD108C28D46287A520A14B18ADA ] netprofm        C:\WINDOWS\System32\netprofmsvc.dll
20:05:36.0461 0x1194  netprofm - ok
20:05:36.0532 0x1194  [ D65F295A049473E6A39EA9A0EA76CA32, 274FC0BA044EB2D14093AB0E561F7FACEE06A3F433C81343C8B926FA2F9BD251 ] NetSetupSvc    C:\WINDOWS\System32\NetSetupSvc.dll
20:05:36.0862 0x1194  NetSetupSvc - ok
20:05:37.0027 0x1194  [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
20:05:37.0116 0x1194  NetTcpPortSharing - ok
20:05:37.0218 0x1194  [ B996DE26A2E16053C9485F5905B05320, 30EB2CEB466A4F05A44F7CBFCDFD8CC3C27B5FCF1269C1B9410C48AB362D2A75 ] NgcCtnrSvc      C:\WINDOWS\System32\NgcCtnrSvc.dll
20:05:37.0330 0x1194  NgcCtnrSvc - ok
20:05:37.0508 0x1194  [ 54C31C2B815E2E26BB8158022F837C9C, CED660D1A58F635C6452F82FCB2EF8ACEEB7785E31617B2ADFD9EE69A2BDF2B8 ] NgcSvc          C:\WINDOWS\system32\ngcsvc.dll
20:05:37.0743 0x1194  NgcSvc - ok
20:05:37.0819 0x1194  [ 9B9F520C72EE33EAEC857124BB800243, DFA9386B272F4D86F3E4BE861A2FC4617261E1AA40576DDA610FC24AB4961A63 ] NlaSvc          C:\WINDOWS\System32\nlasvc.dll
20:05:37.0956 0x1194  NlaSvc - ok
20:05:38.0004 0x1194  [ 001CBD7A2CD45C4EB39C01C3C677EF73, F4AAF4D60DB1232921C7811A62287B55C7C098B7A1FF9A40D88AF58A5ABECBA2 ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
20:05:38.0081 0x1194  Npfs - ok
20:05:38.0135 0x1194  [ 90F5DC9802AAA00CD0B6E2AD9E7FFADC, 71C0777829299DECA6ACD42F38802DBE3C29A42CFBD8A396F39DFA44D1F55B6C ] npsvctrig      C:\WINDOWS\System32\drivers\npsvctrig.sys
20:05:38.0191 0x1194  npsvctrig - ok
20:05:38.0268 0x1194  [ 1993C85962692EF7024501E7FE92D466, F5BCAA8308495EBF8BB061C2015E07C202A779668D171364D7E312975BC18B10 ] nsi            C:\WINDOWS\system32\nsisvc.dll
20:05:38.0361 0x1194  nsi - ok
20:05:38.0367 0x1194  [ 0C6218321A09A7B51BA7FFAFBA4CCB21, 330B3FA793A78410B28DFC8250BBF24442E3BB80434A7938BB96F02337614E0D ] nsiproxy        C:\WINDOWS\system32\drivers\nsiproxy.sys
20:05:38.0412 0x1194  nsiproxy - ok
20:05:38.0650 0x1194  [ DB69C6DA8B3DDFDC547D455CA23A8250, AE495CEB18924C8B21F7F150FF17CD00880F2E222D7B5155661798E0535D63C4 ] NTFS            C:\WINDOWS\system32\drivers\NTFS.sys
20:05:38.0743 0x1194  NTFS - ok
20:05:38.0784 0x1194  [ 6E6DD6F9DD2A034CF85E94047DBDB992, 63D0A0756F551B7668D1CBAB24B29FD462C706E8A81690BC248D6C92061FE215 ] Null            C:\WINDOWS\system32\drivers\Null.sys
20:05:38.0831 0x1194  Null - ok
20:05:38.0909 0x1194  [ 708EDBC756B28B77D1F9C8844148125A, BA730BC3A70122CC3AD6CC4B398B747591F34E00ACEC06545C37A3F10FB56F5F ] NVHDA          C:\WINDOWS\system32\drivers\nvhda64v.sys
20:05:38.0927 0x1194  NVHDA - ok
20:05:41.0519 0x1194  [ 60328FA27CB565D708CACAC8206037FB, 6D3A4B1B593428CA9F6EB2607C3F5A60DFEB92F4F437956FD916DF6B3B8E27FD ] nvlddmkm        C:\WINDOWS\System32\DriverStore\FileRepository\nvszqwu.inf_amd64_087821b04d1a8fce\nvlddmkm.sys
20:05:42.0181 0x1194  nvlddmkm - ok
20:05:42.0363 0x1194  [ D261DF41F0840F734856A2B4F5E072C7, 2E703556D0C919375D0B7770513456844B13362190643D5524663EC8546E0FF5 ] nvraid          C:\WINDOWS\system32\drivers\nvraid.sys
20:05:42.0381 0x1194  nvraid - ok
20:05:42.0496 0x1194  [ 445CD678770FEE791665E2650594BFC2, 85BA48EB978DBF0A7C0E608DF8FB5D6A57786FC517DE35F0556516A661DA00D8 ] nvservice      C:\Windows\system32\nvservice.exe
20:05:42.0512 0x1194  nvservice - ok
20:05:42.0523 0x1194  [ 23B702B555EB0436B9DAA0BC63DA65CE, D454F80D9657CFEC852F022C12D7B2C1A2D7D247ECC591EDB07B9369DFD8C99E ] nvstor          C:\WINDOWS\system32\drivers\nvstor.sys
20:05:42.0540 0x1194  nvstor - ok
20:05:42.0808 0x1194  [ 85397430F424516BF8300FAAEF929366, 2EDF41407C7483AC8E4703BC0A13F764563E4B00D6923FD4678E6E361AC14D6B ] nvsvc          C:\WINDOWS\system32\nvvsvc.exe
20:05:42.0860 0x1194  nvsvc - ok
20:05:42.0973 0x1194  [ 17997DC2441F7E29CDFC6458E0392764, 636CCE2DA1EF8195B33F8D6D5C8CC151D58EBF08DC9AD8ACCCE7ABD41A69639F ] OneSyncSvc      C:\WINDOWS\System32\APHostService.dll
20:05:43.0117 0x1194  OneSyncSvc - ok
20:05:43.0289 0x1194  [ A2FF28F46E52911D4B7A32EBA5AE64BB, C20EC6AE88407C2FEBB669068E3F83D974FBE9D242476F72A8FC83440C628EC9 ] OpenVPNService  C:\Program Files (x86)\FH-Aachen OpenVPN\bin\openvpnserv.exe
20:05:43.0351 0x1194  OpenVPNService - detected UnsignedFile.Multi.Generic ( 1 )
20:05:44.0513 0x1194  OpenVPNService ( UnsignedFile.Multi.Generic ) - warning
20:05:45.0808 0x1194  [ 4965B005492CBA7719E82B71E3245495, 52AD72C05FACC1E0E416A1FA25F34FDD3CB274FAB973BEAAE911A2FACA42B650 ] ose64          C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
20:05:45.0823 0x1194  ose64 - ok
20:05:46.0551 0x1194  [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc        C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
20:05:46.0767 0x1194  osppsvc - ok
20:05:47.0186 0x1194  [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] p2pimsvc        C:\WINDOWS\system32\pnrpsvc.dll
20:05:47.0355 0x1194  p2pimsvc - ok
20:05:47.0435 0x1194  [ 2BBCED66D7AFC968BDBB0E4D8524DF0A, 762D916390F9DE69B3EA1D31244224F910645F8E5CEF4C505B76B215BFDFCD9A ] p2psvc          C:\WINDOWS\system32\p2psvc.dll
20:05:47.0508 0x1194  p2psvc - ok
20:05:47.0598 0x1194  [ 6B81BF7853D161DB8AC62CD8B9C2DE6B, B2DC06D135FD2501217DDA7349556EB873309E02188D4C3901807BA24FAB30C7 ] Parport        C:\WINDOWS\System32\drivers\parport.sys
20:05:47.0673 0x1194  Parport - ok
20:05:47.0693 0x1194  [ CDBD029BAEC8D09F6FBD404632D9AF28, 71F4401150CD4C9C6BBF2DA854CF07EA2F8C9BBE900833858F49134DDAF14414 ] partmgr        C:\WINDOWS\system32\drivers\partmgr.sys
20:05:47.0708 0x1194  partmgr - ok
20:05:47.0851 0x1194  [ CDD8EDF4C35BE6D6137112F5CC7A70DA, 80EECA6BC2E668E5652A5CA9B119CCCE2A2E421F0EED1FD0EAC20C42E77C02ED ] PcaSvc          C:\WINDOWS\System32\pcasvc.dll
20:05:47.0879 0x1194  PcaSvc - ok
20:05:47.0948 0x1194  [ 29AF16726F4DD84376ECA85AB6AFF2C6, BEF9EA10637065365ED343C4EBA51191B9BEADD8F1F3362D3EFE75F40BE9A027 ] pci            C:\WINDOWS\system32\drivers\pci.sys
20:05:47.0970 0x1194  pci - ok
20:05:48.0007 0x1194  [ 214DCC87E3898F738075D1341252A552, E721FBBC3510DDB848A8CAEA3B6031EE988F42252DBC3BF7BDB6ABD9A0D9FABD ] pciide          C:\WINDOWS\system32\drivers\pciide.sys
20:05:48.0020 0x1194  pciide - ok
20:05:48.0112 0x1194  [ AED76A3333B3A31536E430020E0226FC, EC255B79B0908E3C142D92E35B79D90A3F2594BA012CA2B1B04A6A8745153430 ] pcmcia          C:\WINDOWS\system32\drivers\pcmcia.sys
20:05:48.0129 0x1194  pcmcia - ok
20:05:48.0134 0x1194  [ E63FB38B6E75B39467492FBAD2CD512A, DB406C92BA2460C833A49B98EB5BD58348E868F643A0123B0C9B5315FFC6A124 ] pcw            C:\WINDOWS\system32\drivers\pcw.sys
20:05:48.0147 0x1194  pcw - ok
20:05:48.0201 0x1194  [ 9EA203A07EFA6D74F07F32EF0DAB5CA6, D851F1CC748B4CD0E263931668FFF2FE20D5778267F4FF2237D565CFC171B5AF ] pdc            C:\WINDOWS\system32\drivers\pdc.sys
20:05:48.0217 0x1194  pdc - ok
20:05:48.0439 0x1194  [ A1688A4FB2EC49D040C027EF6DC7A87B, E5F5768D189B590F4D8D20C13FC0F7FF5AC7C4729848F38A93D653AB0B740696 ] PDF Architect Helper Service C:\Program Files (x86)\PDF Architect\HelperService.exe
20:05:48.0492 0x1194  PDF Architect Helper Service - ok
20:05:48.0552 0x1194  [ E23FF9B2F8EEAB2BDDA681C21C48E843, 2D0072C2EFFD5278D0211438FA9A29CF394F01857273A53B09A629977C024B30 ] PDF Architect Service C:\Program Files (x86)\PDF Architect\ConversionService.exe
20:05:48.0585 0x1194  PDF Architect Service - ok
20:05:48.0701 0x1194  [ 1509A77F840AA9E72CF8247D0CF2FBDE, 2D47AD4D8F5C2D871E603FB6D72D25EFD0E63FA3A542DAADAB9D82ED074C0E0B ] PEAUTH          C:\WINDOWS\system32\drivers\peauth.sys
20:05:48.0822 0x1194  PEAUTH - ok
20:05:48.0879 0x1194  [ 540116170E2135FCD5DDE77702166B67, CBEC51C2D47532F1781B3255040F303263420B204C2F8BB2B5D1EC342F57B285 ] percsas2i      C:\WINDOWS\system32\drivers\percsas2i.sys
20:05:48.0895 0x1194  percsas2i - ok
20:05:48.0901 0x1194  [ 8356F87553BF49C703CF382033815898, 245EB941566D848F134629690BF271B1CBEAB6440771D3D8D7AED3756835354E ] percsas3i      C:\WINDOWS\system32\drivers\percsas3i.sys
20:05:48.0917 0x1194  percsas3i - ok
20:05:49.0380 0x1194  [ CB5343FF52A702A9ACFAAE6BE972FE09, EAA5362D91D05D382DF4EBBAA3FD575456F23CAD531CC6F1270F8254892DBF02 ] PerfHost        C:\WINDOWS\SysWow64\perfhost.exe
20:05:49.0455 0x1194  PerfHost - ok
20:05:49.0593 0x1194  [ D0D57322ABC7473E54472D8374169CC5, BD14A13D6908C8669E56EF9401FD8A3D7C618E8B6556B36E634864E733BCA4B2 ] PhoneSvc        C:\WINDOWS\System32\PhoneService.dll
20:05:49.0707 0x1194  PhoneSvc - ok
20:05:49.0792 0x1194  [ B4AB2C0177715FFAED88A1223212043A, 1920792ADC78DD51EF98B6A9634D686EAED0848FB7EF74A0DCD3AEBA5AF41EC6 ] PimIndexMaintenanceSvc C:\WINDOWS\System32\PimIndexMaintenance.dll
20:05:50.0079 0x1194  PimIndexMaintenanceSvc - ok
20:05:50.0232 0x1194  [ F931F21E4287FE3ECCF09B54A232BBA2, CEB7AB3236E5F30214027092B7B695ED35F7A1E007DF4046797D1E4DFEF49EC8 ] pla            C:\WINDOWS\system32\pla.dll
20:05:50.0448 0x1194  pla - ok
20:05:50.0508 0x1194  [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] PlugPlay        C:\WINDOWS\system32\umpnpmgr.dll
20:05:50.0538 0x1194  PlugPlay - ok
20:05:50.0807 0x1194  [ 63694C307273062A2167AE4CE80730EF, 788E762D02A8BE9802143361A5768364A994B20E769A9733FA5827F526432893 ] PMBDeviceInfoProvider C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
20:05:50.0852 0x1194  PMBDeviceInfoProvider - ok
20:05:50.0922 0x1194  [ 56D7A89423325121C4A9BD5C326414F3, 649048C23D1973C3504E26B35362AC99DFE9BF31FFE73F45B43306A212AEA34C ] PNRPAutoReg    C:\WINDOWS\system32\pnrpauto.dll
20:05:50.0955 0x1194  PNRPAutoReg - ok
20:05:51.0033 0x1194  [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] PNRPsvc        C:\WINDOWS\system32\pnrpsvc.dll
20:05:51.0066 0x1194  PNRPsvc - ok
20:05:51.0115 0x1194  [ 520D48ECB54A33821C95EE496A4235AF, 3C7984E480F134E303E6AD03A3837515F3E03A4727F1AD184BD1D8C71D68FFEF ] Point64        C:\WINDOWS\System32\drivers\point64.sys
20:05:51.0127 0x1194  Point64 - ok
20:05:51.0207 0x1194  [ F70CAC34B455D05EAA04B2F8FB58E1CB, 295BFFB3DA03C5CE5462C11D3240024B68AC06E8DEA9062A739BE2CCEE19EB5D ] PolicyAgent    C:\WINDOWS\System32\ipsecsvc.dll
20:05:51.0263 0x1194  PolicyAgent - ok
20:05:51.0300 0x1194  [ 60C8376B48BA96F07AEA536527433D44, EB988C119C3E71169B91ED2A744C71933DD35447DC4A8249E80EC24E9E7077D4 ] Power          C:\WINDOWS\system32\umpo.dll
20:05:51.0338 0x1194  Power - ok
20:05:51.0388 0x1194  [ 5645B9D9788CCA2C88B9534996ED2D6D, 4988942DF163DB5B9B1A08CE6B628D2C47C2E2EAA30AEAE4EFE21C8CF4C8DC5D ] PptpMiniport    C:\WINDOWS\System32\drivers\raspptp.sys
20:05:51.0437 0x1194  PptpMiniport - ok
20:05:52.0285 0x1194  [ 7196D3C2E2E3129814C8DAB91F9A7D1E, 6763E4BF8E846B597E78778E520F5BADC95608BAA4EA0AC84971384B5D976DD7 ] PrintNotify    C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
20:05:52.0816 0x1194  PrintNotify - ok
20:05:52.0863 0x1194  [ 372913E12677A8CBBBABDD8311894F9D, A5233D95A0D22D2A9DB214E7CB79A99D389B67189FF6A87D0AD4610A333A637F ] Processor      C:\WINDOWS\System32\drivers\processr.sys
20:05:52.0905 0x1194  Processor - ok
20:05:53.0033 0x1194  [ 1F115AF75EFBAC28479B4F94A3F8D4A3, BE8D8C50D985F6AF9DDC0F13BDBE2D55D600E1F5E344982536538B14EC484AA6 ] ProfSvc        C:\WINDOWS\system32\profsvc.dll
20:05:53.0158 0x1194  ProfSvc - ok
20:05:53.0234 0x1194  [ FC98407B85A31161851FDE245517574F, 2CCD706CF243934FCDA32B24CE0C385EA2E67F206E0306FA584496F583A20CD1 ] Psched          C:\WINDOWS\system32\drivers\pacer.sys
20:05:53.0253 0x1194  Psched - ok
20:05:53.0295 0x1194  [ FB46E9A827A8799EBD7BFA9128C91F37, 7C40E9C1720522D76AF45A588DFF47BDF0E2A99AF3A396854A00F1273EA13193 ] PSI            C:\WINDOWS\system32\DRIVERS\psi_mf.sys
20:05:53.0301 0x1194  PSI - ok
20:05:53.0395 0x1194  [ 7A68710BAC9B6809314B86C0CB1CBC4A, C02D97993D1F6FE6EFBA5B1366B3A4FE8CE1136A95F3A2DA07BA59554C163501 ] QWAVE          C:\WINDOWS\system32\qwave.dll
20:05:53.0459 0x1194  QWAVE - ok
20:05:53.0505 0x1194  [ 819602BBBFDB0BD46DEA3715BF0DD452, D4007FF1E5296316B53436CA3598D6B1CF4F60AB77D5B02F3E595081EDD5D879 ] QWAVEdrv        C:\WINDOWS\system32\drivers\qwavedrv.sys
20:05:53.0542 0x1194  QWAVEdrv - ok
20:05:53.0584 0x1194  [ CDF47037A0939F56D11F699629C276AD, A63F2A3FE80FB8084E3870E907505694B79EE1D9E56E292C01D481FEFD2534B0 ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
20:05:53.0615 0x1194  RasAcd - ok
20:05:53.0687 0x1194  [ 28C2EA278070EE12701D0EDF8CB0EC36, F10288C1C6835840026DB30285345EF892DE989F43C948E7F4760B8895FF675F ] RasAgileVpn    C:\WINDOWS\System32\drivers\AgileVpn.sys
20:05:53.0794 0x1194  RasAgileVpn - ok
20:05:53.0843 0x1194  [ 7B82197BF35CC3BE59AEF8B706AB8A16, AB0216164A548A48CD21F5F035E57E867584A96890B9887EC08F8DABDD89F990 ] RasAuto        C:\WINDOWS\System32\rasauto.dll
20:05:53.0881 0x1194  RasAuto - ok
20:05:53.0909 0x1194  [ 17E565710172ED71B8531D8822E1C5D1, 0CA39ABD9E544DDAD9D9D7D1FC50444274C31E18F9BF73069051D9F62833698F ] Rasl2tp        C:\WINDOWS\System32\drivers\rasl2tp.sys
20:05:53.0944 0x1194  Rasl2tp - ok
20:05:54.0142 0x1194  [ F79BFB5588B777C71734C1D1EC129D07, 9B9D70EC8978AAC19B2B94694EE1B9957C13DFDDFCBE8AA82C5F0D0EA04CDBDF ] RasMan          C:\WINDOWS\System32\rasmans.dll
20:05:54.0227 0x1194  RasMan - ok
20:05:54.0275 0x1194  [ 9387DF155233D45D4E010F4F2FB52A57, CABC25DA4E512809AED0085767BDD94BF3C1DA792BFF8A009B5465D9110E7060 ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
20:05:54.0321 0x1194  RasPppoe - ok
20:05:54.0355 0x1194  [ F0F4EEDEEBEE7A4244FAFB96A16B5712, F64717E601BD5EB674003009507B8CDD6F69F00E8670D6895EC64786166A0E8D ] RasSstp        C:\WINDOWS\System32\drivers\rassstp.sys
20:05:54.0399 0x1194  RasSstp - ok
20:05:54.0541 0x1194  [ AF6963414B820B7C45578ED3300438A7, C00F60FD72608E6983D32642768AECE891DD816FADFA7B872BA88091C16B95D7 ] rdbss          C:\WINDOWS\system32\DRIVERS\rdbss.sys
20:05:54.0570 0x1194  rdbss - ok
20:05:54.0635 0x1194  [ 79A415E6FA915EFC00297DAB16EC2635, 47BB49F6D756214193D38A4AB182B541AAC180381C3111FF7F9B0AD4C44D8733 ] rdpbus          C:\WINDOWS\System32\drivers\rdpbus.sys
20:05:54.0686 0x1194  rdpbus - ok
20:05:54.0721 0x1194  [ 7135785C21CA79D270D11037C43D3F19, 654A3C65CF891ED8C82A740D10CF607FC7D709185E664DE03288CEB5B25F03A6 ] RDPDR          C:\WINDOWS\system32\drivers\rdpdr.sys
20:05:54.0759 0x1194  RDPDR - ok
20:05:54.0806 0x1194  [ 97A61A3CB2B5CB4FC32B3224EF333448, E4F2E8BCEE3639BE57BBC8A8E67FDE42C3A5158F1204684B0ECD216F4AA044A3 ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys
20:05:54.0822 0x1194  RdpVideoMiniport - ok
20:05:54.0872 0x1194  [ 69BB204AE07EE84ECFAB1BF13C4BD04B, 1CA832CBF4AE4821EEA2A19F9519C2D1D00406B8CCE2A86FE3B33A5F293DB218 ] rdyboost        C:\WINDOWS\system32\drivers\rdyboost.sys
20:05:54.0894 0x1194  rdyboost - ok
20:05:55.0052 0x1194  [ 940D6F5A2B0A61EE4170DF84F6C95C20, F8EE846DC8015EDFE7CB5BEEDC977EAA9C586BAC2216DE69D8ECCBDBC7408649 ] ReFSv1          C:\WINDOWS\system32\drivers\ReFSv1.sys
20:05:55.0094 0x1194  ReFSv1 - ok
20:05:55.0229 0x1194  [ 13F6B64235C60167052364BF7D99E4CA, BC12EE00775F7456FB922FBD684BF3F0CFABA5BEBB6E162C23B41DED5C20A978 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
20:05:55.0368 0x1194  RemoteAccess - ok
20:05:55.0416 0x1194  [ 3183B161B1F05333F6C325577FEF3596, D6A89B2A021377B6F371E5B9EFC36FF018822B28F0ED41F8CD2F00C5C8605707 ] RemoteRegistry  C:\WINDOWS\system32\regsvc.dll
20:05:55.0465 0x1194  RemoteRegistry - ok
20:05:55.0574 0x1194  [ 0660F4A14F9D2A2F59B26B1D74F1A6D0, A9443B6B7ED1ECA22AC960A2C6A2BE18C0BA58CD7BCF60E7AA617CD3662D122D ] RetailDemo      C:\WINDOWS\system32\RDXService.dll
20:05:55.0734 0x1194  RetailDemo - ok
20:05:55.0812 0x1194  [ E82F3B1918C6A5FE6EB761CDF1E772AF, 0C993FCB7BFD6E01B70A1821E0DEAFA2CB241AF8C2E6D4CC120F59C1B5F6FF5F ] RFCOMM          C:\WINDOWS\System32\drivers\rfcomm.sys
20:05:55.0849 0x1194  RFCOMM - ok
20:05:55.0894 0x1194  [ 5DAA644F17780FC4E3F4820A46D38FEC, 32C27FFA0A4608B164F4E709CD0D998AB73CA9713BE3E47F9DBC7B3D1B6C7453 ] RmSvc          C:\WINDOWS\System32\RMapi.dll
20:05:55.0936 0x1194  RmSvc - ok
20:05:55.0968 0x1194  [ 672724C8B21B7DC56646045DE4D5B860, 79986E80A92C949C543959F1E35647A9788DAB2892AC20B6DEA5C0BBC0CEDE9E ] RpcEptMapper    C:\WINDOWS\System32\RpcEpMap.dll
20:05:56.0006 0x1194  RpcEptMapper - ok
20:05:56.0052 0x1194  [ 109C1D609951E886D3643B15C1EDD1C2, 347D8E7C50EC7F96217C7421D9BC8A42C9DF50B94169CB58DCF857A63C33C2EA ] RpcLocator      C:\WINDOWS\system32\locator.exe
20:05:56.0066 0x1194  RpcLocator - ok
20:05:56.0305 0x1194  [ 7BD259FC59CF9C2AE1B979564B374CC6, 299832FCE304A85080C80ABFE820A6093AC15A7C1E7C89D8C946708E955A2909 ] RpcSs          C:\WINDOWS\system32\rpcss.dll
20:05:56.0367 0x1194  RpcSs - ok
20:05:56.0522 0x1194  [ E9258ECE49F7C6509197E15DD45206EA, 81A1C14315D4B9448D35B45550190D2D49C8090F4E8BA58866FA3675D728A6FD ] RSPCIESTOR      C:\WINDOWS\system32\DRIVERS\RtsPStor.sys
20:05:56.0544 0x1194  RSPCIESTOR - ok
20:05:56.0626 0x1194  [ 5FF28F097C9699097B473F8FC7C1AA7D, 695560F1DBD85073F3D6CB1FF16F16504CA044EA62E940E463A16BBA8B86E2FA ] rspndr          C:\WINDOWS\system32\drivers\rspndr.sys
20:05:56.0663 0x1194  rspndr - ok
20:05:56.0799 0x1194  [ F9265C902BB9146C6BFF97BDF35C04DE, DC70B404A701CE5F60421F664F745CA84722ED86FAFC87F2A8A71BFD25CD6151 ] rt640x64        C:\WINDOWS\System32\drivers\rt640x64.sys
20:05:56.0854 0x1194  rt640x64 - ok
20:05:56.0914 0x1194  [ B5DAEE69BACA64D2BB004568E22D8756, C0072CF6B438ED756435A182D55AC55F3AD356ACBD483DE06A94893D3CA8CCC5 ] s3cap          C:\WINDOWS\System32\drivers\vms3cap.sys
20:05:56.0963 0x1194  s3cap - ok
20:05:57.0007 0x1194  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ]

chaaali 15.01.2017 20:15
tdss2

Code:
SamSs          C:\WINDOWS\system32\lsass.exe
20:05:57.0026 0x1194  SamSs - ok
20:05:57.0054 0x1194  [ 5E73FB63E2DBC75FE0C17DEB0010CE0E, 9DAC47486262397D03BC01F7438CAB62CF33BD7B5283F5B9548C770A3D6D0ADC ] sbp2port        C:\WINDOWS\system32\drivers\sbp2port.sys
20:05:57.0069 0x1194  sbp2port - ok
20:05:57.0133 0x1194  [ 3CD0130FFDEAEACF0905B482F3934EA3, 1EC355B63135FD2563093EBB206741C0C4CCE0551A662F6DC86C875146A88B06 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.dll
20:05:57.0177 0x1194  SCardSvr - ok
20:05:57.0215 0x1194  [ 5E8ECCE130A72107B6DFDBE26185A7FB, 811E2CE485BC14161FF629069BCCF53B2B8C6F8B1E1A6B3A3C86DBE4F85A5577 ] ScDeviceEnum    C:\WINDOWS\System32\ScDeviceEnum.dll
20:05:57.0424 0x1194  ScDeviceEnum - ok
20:05:57.0468 0x1194  [ 3D9A82B03C92D1FEC42CB171D6F57778, DC027F02F5EB5F1D10DB6F405FB0C15D4D5C922445F5F3C916624113278AF072 ] scfilter        C:\WINDOWS\system32\DRIVERS\scfilter.sys
20:05:57.0511 0x1194  scfilter - ok
20:05:57.0712 0x1194  [ D4DB6B318A0A0C74A90260725A228C0B, 57BA2EF9D880488C785C806ABF9EE753A48E589129442D72F815CD6EFFA07B22 ] Schedule        C:\WINDOWS\system32\schedsvc.dll
20:05:57.0780 0x1194  Schedule - ok
20:05:57.0820 0x1194  [ 9055ADDFBA4C8B914C914CE693B55C0A, DB213AC36E14D856B81D2AFE46815402537A2ABEEA15032A9FF436F953129441 ] scmbus          C:\WINDOWS\system32\drivers\scmbus.sys
20:05:57.0834 0x1194  scmbus - ok
20:05:57.0856 0x1194  [ B6F2363584E62960846F7C3F00124A4F, 252189FF9D623CF69BF415FF7C7FE74B0BBF756B632420578BFAFF6595616CF7 ] scmdisk0101    C:\WINDOWS\System32\drivers\scmdisk0101.sys
20:05:57.0893 0x1194  scmdisk0101 - ok
20:05:57.0918 0x1194  [ C1B5EE58E759C53F9939581709DC70BB, 85095ABC9459A766832373BC3839E573E9A73C967F8427D6B7CAB972551C3191 ] SCPolicySvc    C:\WINDOWS\System32\certprop.dll
20:05:57.0948 0x1194  SCPolicySvc - ok
20:05:58.0010 0x1194  [ 7C3D10BEC8B0DBA00A78C78EB10B3AE2, A671C9CB97977613576D70607E106C7A29B9EA9E875C7C5AF293EE5903D7AD0A ] sdbus          C:\WINDOWS\System32\drivers\sdbus.sys
20:05:58.0033 0x1194  sdbus - ok
20:05:58.0109 0x1194  [ F3714DBAA42C15F78FFCDFE4273214EB, 2D018970B92C5F0744FAE10A2FC298F3DCEA5C2EDEB760F4F0651337B9878ABF ] SDRSVC          C:\WINDOWS\System32\SDRSVC.dll
20:05:58.0234 0x1194  SDRSVC - ok
20:05:58.0267 0x1194  [ 120DFCB71D6C502613A9E2D50E16850C, 2C294010AD1C9C380CD5221A37720544178B7358C8C8553AF44055E4CEE5DAF5 ] sdstor          C:\WINDOWS\System32\drivers\sdstor.sys
20:05:58.0285 0x1194  sdstor - ok
20:05:58.0303 0x1194  [ EFD644DD091E1D94555FC3BBC95EA66D, FBDDA6680BEC378CCF12A32D9186020E884DA15A1E789D1531B1E687FC7B54B1 ] seclogon        C:\WINDOWS\system32\seclogon.dll
20:05:58.0411 0x1194  seclogon - ok
20:05:58.0570 0x1194  [ FC4842CECAF2A938BE13A6C534034088, 61593E6390D94B554660BA321D919368865BB2970A3E43EB9AD4A45277434F20 ] Secunia PSI Agent C:\Program Files (x86)\Secunia\PSI\PSIA.exe
20:05:58.0604 0x1194  Secunia PSI Agent - ok
20:05:58.0699 0x1194  [ 401C960E9C95D35CFFB17CA57C4406FB, 5D742629A8FAEC2DCD68F5B75E883F8F02F157584D86AA25D82DD16447394823 ] Secunia Update Agent C:\Program Files (x86)\Secunia\PSI\sua.exe
20:05:58.0720 0x1194  Secunia Update Agent - ok
20:05:58.0790 0x1194  [ D13D7CEEDE2C4E79A82FA88FC7CD4608, 9027C644F038CC198AC6A0767E027F6E403903E52AE7F6A2C0707B9E48D77408 ] semav6msr64    C:\Windows\system32\drivers\semav6msr64.sys
20:05:58.0802 0x1194  semav6msr64 - ok
20:05:58.0840 0x1194  [ 1ED7A8574A28357097A5CB4063C96B00, 4E248CA66B7DE930AEC501A85F507AB813FC3CEBCBA347DFF3B05CE6CB8E496B ] semav6thermal64ro C:\Windows\system32\drivers\semav6thermal64ro.sys
20:05:58.0912 0x1194  semav6thermal64ro - ok
20:05:58.0956 0x1194  [ F48535714BED7DD784853889B4594B26, 9B4AB7E7293E79A8F6CC46C84F23E62AD3BD6E958FCE078CDBB125A69FAC7E50 ] SENS            C:\WINDOWS\System32\sens.dll
20:05:59.0070 0x1194  SENS - ok
20:05:59.0281 0x1194  [ 2B4E090D06C60853C5C00CF255F9E02A, 4D4DBA7B04519622612BD4A4F28318CA2F5646C84CAFF8C5ACC9BF4C6031894E ] SensorDataService C:\WINDOWS\System32\SensorDataService.exe
20:05:59.0393 0x1194  SensorDataService - ok
20:05:59.0498 0x1194  [ C09A42163878A082C3F0D0A3DFE95714, 8033DC38D0EDED3758DA6BF8C1955BE5FFE48863C079C589660B37D0E461300F ] SensorService  C:\WINDOWS\system32\SensorService.dll
20:05:59.0658 0x1194  SensorService - ok
20:05:59.0701 0x1194  [ E6F00415DADCEEC860E7AB42BFD19A65, 274CAF22F93D43B6DB6953730E3DF8DA94776B24EEE74B80AB4CD780BC1366A9 ] SensrSvc        C:\WINDOWS\system32\sensrsvc.dll
20:05:59.0756 0x1194  SensrSvc - ok
20:05:59.0779 0x1194  [ 401D706DDC0A7AF18C3DD228ADF74551, 27C0B38D7C2E3F6FF06201124E63483931F6071954B2B99EC0143C464238C0B7 ] SerCx          C:\WINDOWS\system32\drivers\SerCx.sys
20:05:59.0792 0x1194  SerCx - ok
20:05:59.0835 0x1194  [ 7084D11083F0CDCA8B5C76F9846ABF5D, F639920882B0E784D8CFAF0D4C0F0C411937B6831E5DD99B0ABFBFE06BA4742F ] SerCx2          C:\WINDOWS\system32\drivers\SerCx2.sys
20:05:59.0851 0x1194  SerCx2 - ok
20:05:59.0874 0x1194  [ 3FF478A8ED32A83C36581425F6282B6C, 787646A17098EA7CF36064D0A950C1D470D4A280C8C5AC40023D566E53860EAE ] Serenum        C:\WINDOWS\System32\drivers\serenum.sys
20:05:59.0929 0x1194  Serenum - ok
20:05:59.0950 0x1194  [ 92509187AA171A80521528B36F753E1D, FE0DA272B8A155ECC161E99586C4AE7EE17B1C84BC330DA1566C83B8E03FA825 ] Serial          C:\WINDOWS\System32\drivers\serial.sys
20:05:59.0994 0x1194  Serial - ok
20:06:00.0013 0x1194  [ 433D38FF6D08B993847EA2A10EB8CB52, 29BA75DB6D1AC761BBDFB5AC8874FC7D763E1CD10D290E369063B34CE951270F ] sermouse        C:\WINDOWS\System32\drivers\sermouse.sys
20:06:00.0058 0x1194  sermouse - ok
20:06:00.0184 0x1194  [ 82CF273F0E8F243789683DEB40757569, 5433D93A41C4BF04494E6158931C6AC3154888F7CD3A417253EC02FF7EA6D00E ] SessionEnv      C:\WINDOWS\system32\sessenv.dll
20:06:00.0293 0x1194  SessionEnv - ok
20:06:00.0334 0x1194  [ 286D3889E6AB5589646FF8A63CB928AE, 98D9D34521328F4F0B0B7C2CAB97BA0EC998B9F3F996B5ED08E17292F1CD9452 ] SFEP            C:\WINDOWS\System32\drivers\SFEP.sys
20:06:00.0401 0x1194  SFEP - ok
20:06:00.0427 0x1194  [ 697D3EE0740AEAB62B66ABCA1C83D13B, FCF54A0071ED04AD3FC8551C67FE5FD49089DC0510F753052CAC5972A65C9E3D ] sfloppy        C:\WINDOWS\System32\drivers\sfloppy.sys
20:06:00.0444 0x1194  sfloppy - ok
20:06:00.0538 0x1194  [ 832E933AA8DB9FD4733B96D8B6484D3F, 3A8E3D7ECA192EEE154CB568073B7211FDA06078EFC3BC7E961563A1BFDD0CAA ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
20:06:00.0696 0x1194  SharedAccess - ok
20:06:00.0799 0x1194  [ 482E6BE8A07832E824080D352075ACA1, 4123A76C8E805AF4FE229C53E9C174095C0937913BA81A63FE9B45C44AA5B15F ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
20:06:00.0870 0x1194  ShellHWDetection - ok
20:06:00.0930 0x1194  [ CF3BDF9EAD8D3EF671E9339B44B185BA, C17EC6D5B00F49D9C8B5B6C262A85F34ED71C58450659F006B3632AA84F68E23 ] shpamsvc        C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll
20:06:01.0036 0x1194  shpamsvc - ok
20:06:01.0105 0x1194  [ A34CE1830E45DA98932295FDE4B7908A, FC553ECF4D64B4B10B7FDE5352707785517A18D487A80665BAFC7261E3F35CDC ] SiSRaid2        C:\WINDOWS\system32\drivers\SiSRaid2.sys
20:06:01.0125 0x1194  SiSRaid2 - ok
20:06:01.0152 0x1194  [ A7B5C670770E908DA5FEF5BF1136E933, 8D3BB6FF65E631C34BE8EA766481B2FDB2E1E916A4FD67F86705A8975A136E6C ] SiSRaid4        C:\WINDOWS\system32\drivers\sisraid4.sys
20:06:01.0166 0x1194  SiSRaid4 - ok
20:06:01.0212 0x1194  [ D233EAE2A9D48485321816486ED635EF, 03AB49BE9CF15EB7EDC50C400E673B4DF0E5BFDA9A7811E157F2AF2F3CF38D49 ] smphost        C:\WINDOWS\System32\smphost.dll
20:06:01.0306 0x1194  smphost - ok
20:06:01.0428 0x1194  [ 0B217141AC1283655402CDB356577735, 6EFA4CA46CFC8B7156CE7E5CA89B7F7073E16D66C2FC13F4DB95FEB78CCF698F ] SmsRouter      C:\WINDOWS\system32\SmsRouterSvc.dll
20:06:01.0553 0x1194  SmsRouter - ok
20:06:01.0656 0x1194  [ 6F4CE07D420FB657B5936F71101ABD41, CEC52984C56E578E0FFE12BE1B8148335F788B7D1751F2D0E79B944A41113C20 ] SNMPTRAP        C:\WINDOWS\System32\snmptrap.exe
20:06:01.0696 0x1194  SNMPTRAP - ok
20:06:01.0851 0x1194  [ DDF2EC98AF6FC70608A4F9CE4DB52758, A3F18822C9D0EE508CCAA5323937D631950320D9642C46FD93DB764A06A78F0D ] SOHCImp        C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
20:06:01.0863 0x1194  SOHCImp - ok
20:06:01.0895 0x1194  [ 5FA03F5EA6EFEF6D17B4A1A48C40A23C, E99AD063DA8E89ECD2993D1B1AAB346A3EB4E48D687E7378C03037DD00600BB8 ] SOHDs          C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
20:06:01.0904 0x1194  SOHDs - ok
20:06:01.0974 0x1194  [ C994DF90427103CCB80F893FFD2B1CE8, 7E4B08095C77E68D337A3425EEA38F8FEC4D103CA7661E34FD96BF518DFB4BCB ] spaceport      C:\WINDOWS\system32\drivers\spaceport.sys
20:06:02.0036 0x1194  spaceport - ok
20:06:02.0086 0x1194  [ E03264C4C25B568F92ED1656AD541E64, D42942BFFBC7213D204FAF84F4FE015FC23A6ACB29B5E752834EDBC17A3AC20D ] SpbCx          C:\WINDOWS\system32\drivers\SpbCx.sys
20:06:02.0134 0x1194  SpbCx - ok
20:06:02.0334 0x1194  [ 65E5659E9C2A0762D05657C0E22A7CA2, A6EE72878CFA901A94485C7BEC7675702ED207DB54F5A8ED70835B6A8A8F5754 ] SpfService      C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe
20:06:02.0350 0x1194  SpfService - ok
20:06:02.0441 0x1194  [ 79DCE27E8C4CF6701BFE49EC2446BBF6, F51CBB7A45C3C878F41653FD5FBDC93CC302712B7725DAAB4D3475A1F4771E3D ] Spooler        C:\WINDOWS\System32\spoolsv.exe
20:06:02.0581 0x1194  Spooler - ok
20:06:03.0222 0x1194  [ 23529A00195CE71252FEBF647E56E27D, 8ADF7A1C96DAE005E9A974D90BE8954F88D49B6848252B88513C49E0A3BD9774 ] sppsvc          C:\WINDOWS\system32\sppsvc.exe
20:06:03.0531 0x1194  sppsvc - ok
20:06:03.0653 0x1194  [ E83830BB74AE8CBECEA0ECD94DE436F9, 4A34569A34260324EBD629039E1BF45A3527FC75B22D9A3DB6360A6EB365483A ] srv            C:\WINDOWS\system32\DRIVERS\srv.sys
20:06:03.0767 0x1194  srv - ok
20:06:04.0008 0x1194  [ 55CA5329D1ADEB8F8034045930147AE4, D4F31BC82700D166564C7F9CDCEA3ABAB4A37B55137C34572768DF46FDA9320A ] srv2            C:\WINDOWS\system32\DRIVERS\srv2.sys
20:06:04.0318 0x1194  srv2 - ok
20:06:04.0401 0x1194  [ F13EE0DB1FB1D6946AC3228D7EFCFC8F, 109A809F0338FAB0F4045FA5EE33C6F0A994A9F586B2FBD8920A6AABA0E0EF66 ] srvnet          C:\WINDOWS\system32\DRIVERS\srvnet.sys
20:06:04.0464 0x1194  srvnet - ok
20:06:04.0555 0x1194  [ 44758105AB3EA34E815D4B6CA1153311, 7F223A20D2538C123BAC6F75BE0E126876A116F09502FD980C05B8916E26E1B7 ] SSDPSRV        C:\WINDOWS\System32\ssdpsrv.dll
20:06:04.0661 0x1194  SSDPSRV - ok
20:06:04.0729 0x1194  [ B97C7EC07218A8002323718202BF5E77, 39D3254383E3F49FD3E2DFF8212F4B5744D8D5E0A6BB320516C5EE525AD211EB ] SstpSvc        C:\WINDOWS\system32\sstpsvc.dll
20:06:04.0769 0x1194  SstpSvc - ok
20:06:05.0313 0x1194  [ 4E330AD1EED4A5D582EE415FD55953A2, 2C02E1F45F74D250110BA5117AA942495CB2EBAC7F2CCECC284B4FB8F47B13E1 ] StateRepository C:\WINDOWS\system32\windows.staterepository.dll
20:06:05.0690 0x1194  StateRepository - ok
20:06:05.0850 0x1194  [ 336B906017B254C2AA445DC707019513, 69D267E621ADCC4DE9AE3446054FD04D06E6CF0AA9CAA3019FF19BEE7D264CAE ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
20:06:05.0906 0x1194  Stereo Service - ok
20:06:05.0963 0x1194  [ 29D26E1347AE1BBD4201014E19880B2C, 9E2153AD96CE4F189EEE43BB02515532C619FB1CA02D8F6DEF517AC3347AAA14 ] stexstor        C:\WINDOWS\system32\drivers\stexstor.sys
20:06:05.0983 0x1194  stexstor - ok
20:06:06.0119 0x1194  [ 91CB95B35481155BFE29C217CD237F27, CA66957DF1441D991453BEF02D768D44E5D9A484BC23C8874E8A7AC20904CB06 ] stisvc          C:\WINDOWS\System32\wiaservc.dll
20:06:06.0257 0x1194  stisvc - ok
20:06:06.0318 0x1194  [ 53EB8CE34B55A1EE63424C8DB7388BFC, 5AB59117BA8A2844EB8693CCC19B217AE039B28C87519F96E1C845FE9BF456C2 ] storahci        C:\WINDOWS\system32\drivers\storahci.sys
20:06:06.0339 0x1194  storahci - ok
20:06:06.0413 0x1194  [ C5E0ACE4771F5575D9D5B457ABF3AD03, 365880BC5AC313F25C313EFB7758301F98D9B2BF4C5FC9499F98C2B7F8407D96 ] storflt        C:\WINDOWS\system32\drivers\vmstorfl.sys
20:06:06.0427 0x1194  storflt - ok
20:06:06.0476 0x1194  [ B66D8C75C9BC59D637177AB3B1C569A6, 76252A631F03EEBF5FDC7693F6B0A5E73838CDBE3157114CC96B8BBE88B476BF ] stornvme        C:\WINDOWS\system32\drivers\stornvme.sys
20:06:06.0493 0x1194  stornvme - ok
20:06:06.0543 0x1194  [ BEBF85EB4D90E6996047DA027D0ED26E, DF109CF0F07CDD1B9B702C2A076D4DD5366DAAD971CC9359AF0358E79981706F ] storqosflt      C:\WINDOWS\system32\drivers\storqosflt.sys
20:06:06.0725 0x1194  storqosflt - ok
20:06:06.0850 0x1194  [ B91FBE7CB4633FEB32AFBD0B48576396, 9EFDD92E8096CE5555F8DC3C870864E5515469603C2373B99B3607234633CA66 ] StorSvc        C:\WINDOWS\system32\storsvc.dll
20:06:07.0071 0x1194  StorSvc - ok
20:06:07.0097 0x1194  [ 8E73037A6F8938475692FFCC26EBF385, F78C5CD1A3CD17AA831EEC82426B14006B4DDBC9085A4814E04E8C37FD6B05F7 ] storufs        C:\WINDOWS\system32\drivers\storufs.sys
20:06:07.0117 0x1194  storufs - ok
20:06:07.0137 0x1194  [ 9D9DED47DA10E845EFF2DD57C94C809B, 520D0CE7A867051B80C8141E351FE5A5BCE3C99776093F234DB77D3407B1F104 ] storvsc        C:\WINDOWS\system32\drivers\storvsc.sys
20:06:07.0156 0x1194  storvsc - ok
20:06:07.0204 0x1194  [ 224C92E442B1B8C20C274332F1ACF00D, CDE5DCFB7A21089464A6E2ABB29BBE08B184C3433C218756AA5902A8F67C0B2C ] svsvc          C:\WINDOWS\system32\svsvc.dll
20:06:07.0264 0x1194  svsvc - ok
20:06:07.0301 0x1194  [ 505E0C40B5D0ADDCBB414640F59BD2E0, DF4B5E65FE6FF2224F298A2A2FAC9B648C082DFF8463148633647580A9FAD34D ] swenum          C:\WINDOWS\System32\drivers\swenum.sys
20:06:07.0314 0x1194  swenum - ok
20:06:07.0410 0x1194  [ 2EE27411B5904C63D723BEA391819F58, C88C11D460E90398E16011B8A2CED5EE5626084F24790EA6115532F8F70060C6 ] swprv          C:\WINDOWS\System32\swprv.dll
20:06:07.0625 0x1194  swprv - ok
20:06:07.0711 0x1194  [ 32F46FB0F290D16DAA452B289C985795, 73F88AAAA6026DB4C27F1D054145216DCC3F1960946FB2A7A90518DD1D5737CB ] Synth3dVsc      C:\WINDOWS\System32\drivers\Synth3dVsc.sys
20:06:07.0827 0x1194  Synth3dVsc - ok
20:06:07.0950 0x1194  [ FED48B19D6F55D7A3AB498D85729D1BA, FA5E0E02BC2E2DE108C55991E3B063CC947072228B53539F42F922661510DE7C ] SysMain        C:\WINDOWS\system32\sysmain.dll
20:06:08.0056 0x1194  SysMain - ok
20:06:08.0280 0x1194  [ D9FEA79BF6AF136F8E656AE045C2FEC8, E6F08A93348E035185F0F1C6B6277E636F4F25D1136E3ACCA63488DAEEC7114B ] SystemEventsBroker C:\WINDOWS\System32\SystemEventsBrokerServer.dll
20:06:08.0428 0x1194  SystemEventsBroker - ok
20:06:08.0491 0x1194  [ 86E7FD5C8DBEC1EB51C4368561402B75, 86EE61414CD5854E39E33F67BF5DA4377B569B3ED4D18882C470BC6784891DA1 ] TabletInputService C:\WINDOWS\System32\TabSvc.dll
20:06:08.0709 0x1194  TabletInputService - ok
20:06:08.0770 0x1194  [ 3C32FF010F869BC184DF71290477384E, 55CFCEC7F026C6E2E96A2FBE846AB513BB12BB0348735274FE1B71AF019C837B ] tap0901        C:\WINDOWS\System32\drivers\tap0901.sys
20:06:08.0821 0x1194  tap0901 - ok
20:06:08.0856 0x1194  [ 3929C8FC134AC672C4F3F85160956257, CD3195CA58BA6F55EA0DDA2BE6AB58280AD1CA488D7AAA1539DD05FB99374F36 ] TapiSrv        C:\WINDOWS\System32\tapisrv.dll
20:06:08.0952 0x1194  TapiSrv - ok
20:06:09.0260 0x1194  [ 4F25E481124059CC593B4C68BC485640, 2814D2BA4E83D3B0F7569E6C6EE0C763D9801BC505D8ED84675D19C8573834DB ] Tcpip          C:\WINDOWS\system32\drivers\tcpip.sys
20:06:09.0393 0x1194  Tcpip - ok
20:06:09.0493 0x1194  [ 4F25E481124059CC593B4C68BC485640, 2814D2BA4E83D3B0F7569E6C6EE0C763D9801BC505D8ED84675D19C8573834DB ] Tcpip6          C:\WINDOWS\system32\drivers\tcpip.sys
20:06:09.0611 0x1194  Tcpip6 - ok
20:06:09.0698 0x1194  [ 8DBB1BE20C36E6D19BCC89EEA00B953C, 8B97A7E53E1D77363AFF6A5AAEAD89EBAE28DCB8D82753C804FD7CD5646500AF ] tcpipreg        C:\WINDOWS\system32\drivers\tcpipreg.sys
20:06:09.0770 0x1194  tcpipreg - ok
20:06:09.0813 0x1194  [ 9D2DD64A0B51C56285512DC9454340F6, ABB90CE6A55269F71AFB08E04969CF9A4EFD93F7A7189AF920EEE3E005214DDD ] tdx            C:\WINDOWS\system32\DRIVERS\tdx.sys
20:06:09.0833 0x1194  tdx - ok
20:06:11.0090 0x1194  [ 2AA61246A5B813C1B12BCCFAA6F23DD8, 74EE3DB839A0F4BC781294803281DB2248D013B8808FF05F2EE9597C14C6FEED ] TeamViewer      C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
20:06:11.0345 0x1194  TeamViewer - ok
20:06:11.0410 0x1194  [ 06130AFFECEB94525FC2352936576B70, 10EBE2C8FDC087D29E2FFB328F0F7905A5374AB8CC9FAE8699E7676DBC8CBF91 ] terminpt        C:\WINDOWS\System32\drivers\terminpt.sys
20:06:11.0425 0x1194  terminpt - ok
20:06:11.0580 0x1194  [ FB68E5F02316C42BE7282DA492351C6F, AC31D841FEA58B776127E138DB20F8D48E26FD8C00CE2FA9695EA14EBF159A0A ] TermService    C:\WINDOWS\System32\termsrv.dll
20:06:11.0738 0x1194  TermService - ok
20:06:11.0756 0x1194  [ 2AF438EC0D361A7BBB70E604A686602C, 4BE6A0461EB2CB94288614434A1CEC81C2ED46241721FD5BBD8ABE0680F7C804 ] Themes          C:\WINDOWS\system32\themeservice.dll
20:06:11.0782 0x1194  Themes - ok
20:06:11.0839 0x1194  [ 1482B8ED5CACA87992A882B853B83CEE, 613247F0E362A109090E8563D977DECC50C64D45D6962905FA84A2D59329045C ] TieringEngineService C:\WINDOWS\system32\TieringEngineService.exe
20:06:11.0903 0x1194  TieringEngineService - ok
20:06:12.0019 0x1194  [ 3B3C607C3C62DFBEF61938DA2CAB94DF, E5EEA7F45A7BBFDF6F0003CD77E39958C451DD1B4B401876B5619A3C20F5C370 ] tiledatamodelsvc C:\WINDOWS\system32\tileobjserver.dll
20:06:12.0139 0x1194  tiledatamodelsvc - ok
20:06:12.0160 0x1194  [ C1F8CBE2D4843E0CCC3EFEA2EC60D4AB, 9D07527D982066922318C77AECE99280DE55034C375ACE145E827A6BEB5C3B70 ] TimeBrokerSvc  C:\WINDOWS\System32\TimeBrokerServer.dll
20:06:12.0212 0x1194  TimeBrokerSvc - ok
20:06:12.0252 0x1194  [ 46171262D0E806779DEEDFCAB2F830CC, 7F4A4658B8BA217D99E5B5C0E01600C20DC96ECBCA32A5BA7FBE17D2A7B8BFD8 ] TPM            C:\WINDOWS\System32\drivers\tpm.sys
20:06:12.0270 0x1194  TPM - ok
20:06:12.0309 0x1194  [ 3B91F35089240F6187AD681A5EC28BDE, 3D035CB73BC8E7831DCD0FB7D9DAD91CE51D3D0F9D9C8B866A0009BD508B6702 ] TrkWks          C:\WINDOWS\System32\trkwks.dll
20:06:12.0349 0x1194  TrkWks - ok
20:06:12.0422 0x1194  [ 09440FA30C020B4443391FAFCF4876E3, 208C7725F70C75D8C96CCAF5B22F83B8B1C66D8C9FFF48465B1C9F4A77425569 ] TrustedInstaller C:\WINDOWS\servicing\TrustedInstaller.exe
20:06:12.0968 0x1194  TrustedInstaller - ok
20:06:13.0034 0x1194  [ A6F4025664C9D4BC2A9EDAB4092706D7, 89808A1679C0E716F86F06EE7701DCC289200894F0FA1F120DA2AC3A45FDB312 ] tsusbflt        C:\WINDOWS\system32\drivers\TsUsbFlt.sys
20:06:13.0128 0x1194  tsusbflt - ok
20:06:13.0133 0x1194  [ 37A96AD493E110C0BF1EE0AC0F9E7DBD, F2A6894A4AEE18DF2B92222CDB0801A13AEEB7212071F0431430788339B30E23 ] TsUsbGD        C:\WINDOWS\System32\drivers\TsUsbGD.sys
20:06:13.0173 0x1194  TsUsbGD - ok
20:06:13.0191 0x1194  [ 79E264287F17D56D768440B0270466DE, ABF9DC95C5E939B30BFD9BF9EDFDB3BD78A9DFCB055B945965303B6A60E6D7A7 ] tunnel          C:\WINDOWS\System32\drivers\tunnel.sys
20:06:13.0237 0x1194  tunnel - ok
20:06:13.0275 0x1194  [ F723552F65D44FE693DB1A383825B3A8, EF8C343C4EB5EEA4EC830378EF576CCD6CD4EEDEDD486C0F29697044E8C71F45 ] tzautoupdate    C:\WINDOWS\system32\tzautoupdate.dll
20:06:13.0447 0x1194  tzautoupdate - ok
20:06:13.0502 0x1194  [ AA65954F512BA097DD190790876DD991, C1BB2B8F54F064D01190327B5E7949EBBDA21D6FC6F94D9FCD20F685C2F855FA ] UASPStor        C:\WINDOWS\System32\drivers\uaspstor.sys
20:06:13.0518 0x1194  UASPStor - ok
20:06:13.0613 0x1194  [ 1FE69F3C1CA1CF4B7EC7E2E9090FFFDC, 30BD61BA46955BD6A48EC78538FAAB46026DD048347F8280352335EB0ECE16AD ] uCamMonitor    C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
20:06:13.0625 0x1194  uCamMonitor - ok
20:06:13.0648 0x1194  [ AB6268022C3A5B529075A39C33904DA6, 2717F1704640201F2681711543EA39A74C3E89C7DB232EC5DD89FD8AA6F07846 ] UcmCx0101      C:\WINDOWS\system32\Drivers\UcmCx.sys
20:06:13.0698 0x1194  UcmCx0101 - ok
20:06:13.0729 0x1194  [ 7ED2EDA43D21C7A5F589A7960E265C52, 7DB8A595236FBB8A264D7AB155201357212855050ABB5B1036EF32F1223FDCC2 ] UcmTcpciCx0101  C:\WINDOWS\system32\Drivers\UcmTcpciCx.sys
20:06:13.0766 0x1194  UcmTcpciCx0101 - ok
20:06:13.0784 0x1194  [ 169351463039B45F5CDED9768879F712, 990C8C4AEF9ED7FF6BCEAE67F7BDAA037777B142B8D96A74F8715C941A5C63C6 ] UcmUcsi        C:\WINDOWS\System32\drivers\UcmUcsi.sys
20:06:13.0825 0x1194  UcmUcsi - ok
20:06:13.0873 0x1194  [ 08A9E3AD29B215484FBB68CDC175DF3A, 3EFFF99C3BC4A1454E3D2B5177AE587ED3041AB4CE2A95BA7E28A2124E38E1E5 ] Ucx01000        C:\WINDOWS\system32\drivers\ucx01000.sys
20:06:13.0891 0x1194  Ucx01000 - ok
20:06:13.0938 0x1194  [ DA70AEE267491AA56BC63AA0C0C96CA2, 0A0AADB27607F9292BB3CE000CFDDB19BD4CA09EAAD926C4925CB43B17817AD9 ] UdeCx          C:\WINDOWS\system32\drivers\udecx.sys
20:06:13.0989 0x1194  UdeCx - ok
20:06:14.0047 0x1194  [ FBC5ECF6D5A868D0B116C2DBB02B8168, 945AA76C60ABAD6075B5C8F9172C018F75BCF393A1CB8B329F5E68E664627775 ] udfs            C:\WINDOWS\system32\DRIVERS\udfs.sys
20:06:14.0093 0x1194  udfs - ok
20:06:14.0137 0x1194  [ B918E40FAA9CD118CCA4AD388B748C98, 4B539B7B656F02C5E5BAEE52A677757B05CC11C5500D619850A564C28FAB8115 ] UEFI            C:\WINDOWS\System32\drivers\UEFI.sys
20:06:14.0150 0x1194  UEFI - ok
20:06:14.0205 0x1194  [ 0FD75222C1AD2687AB365BEBEA400DD4, AD10DBCA59EB7D34FD8F963CE267F36774A9BC613F8D637903B12AC88C328E8A ] Ufx01000        C:\WINDOWS\system32\drivers\ufx01000.sys
20:06:14.0227 0x1194  Ufx01000 - ok
20:06:14.0277 0x1194  [ C1A78C53E01C641AE41BFA65797819F5, 0B9FE1BD724B3315199A1B1DA2F03255E4FE744DA3CE6CD0F77699A8E42E9359 ] UfxChipidea    C:\WINDOWS\System32\drivers\UfxChipidea.sys
20:06:14.0294 0x1194  UfxChipidea - ok
20:06:14.0335 0x1194  [ 767307212110EBEFB93EC9A5BE9E85B9, 368797400FE54802CE74F34B773CE2AF09EB8DEA6C035B55419A52F0B5A6FAD0 ] ufxsynopsys    C:\WINDOWS\System32\drivers\ufxsynopsys.sys
20:06:14.0354 0x1194  ufxsynopsys - ok
20:06:14.0435 0x1194  [ 8578F83EC5175920F2D8586FFF9DCE47, 049A16AC87F93E761150C8286633FFCA62EE85F5645DDE77D36BD0EB6481FF83 ] UI0Detect      C:\WINDOWS\system32\UI0Detect.exe
20:06:14.0474 0x1194  UI0Detect - ok
20:06:14.0479 0x1194  [ DC460AAA18CA2342FBBFB2DF9B044472, 14D45E059C596AE97506D26705F248CA1C2269160B31A60341060E8A93146CBD ] umbus          C:\WINDOWS\System32\drivers\umbus.sys
20:06:14.0517 0x1194  umbus - ok
20:06:14.0522 0x1194  [ C3CF0377917ECE6D65D7623E1E61568F, 4909695E04CBC86BFCFFBC15F332C367521054B7B4D3C141C7CA6B2E40E090B9 ] UmPass          C:\WINDOWS\System32\drivers\umpass.sys
20:06:14.0567 0x1194  UmPass - ok
20:06:14.0637 0x1194  [ 640CF093C1CF16D5FD317616CA348F31, BEC34D1AACA83BF5A84CE01F6A668E3CA5A33C56A446DC42EFFF7C43D22E1AE6 ] UmRdpService    C:\WINDOWS\System32\umrdp.dll
20:06:14.0693 0x1194  UmRdpService - ok
20:06:14.0925 0x1194  [ B8272BB8D4982C496FDC704809C38E02, F93855D932FB1DBBCC86E82C0FE0DC9ECF93BBD629D2CA9D0BE7E075E114B7FF ] UnistoreSvc    C:\WINDOWS\System32\unistore.dll
20:06:15.0420 0x1194  UnistoreSvc - ok
20:06:15.0888 0x1194  [ 7A78ED1088890114DFDE2C4AB038D6B6, B52357594A90A8BCF5F96FA630F52BB1274A2FE814AF0270D21C892871D076FC ] UNS            C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
20:06:15.0974 0x1194  UNS - ok
20:06:16.0120 0x1194  [ 6CDA3536F6BAB7896A57EAB7DC07F379, 8FBE6457ECD1ABB518D9800EBA8A017774FFAA8EABD2EDC0825181A12FE9AEF6 ] upnphost        C:\WINDOWS\System32\upnphost.dll
20:06:16.0229 0x1194  upnphost - ok
20:06:16.0298 0x1194  [ 6B46FC140C9AF68E6E7697D66D59CB4D, F018B4784D65F1A8140A6EA69C35D6A7ECE01738694052FD54AFD2B81A8F2FF8 ] UrsChipidea    C:\WINDOWS\System32\drivers\urschipidea.sys
20:06:16.0310 0x1194  UrsChipidea - ok
20:06:16.0318 0x1194  [ B4402E7F0923F660270442CE76877ABE, 1C2DD26EAB71F75EA576E8DAABAF71FD7DC3DF807CF025617C774CEF33C0B718 ] UrsCx01000      C:\WINDOWS\system32\drivers\urscx01000.sys
20:06:16.0332 0x1194  UrsCx01000 - ok
20:06:16.0387 0x1194  [ 9DD431F1B94789CFB527E5D19261F124, 8F5A249A97C5B14B282E3147DD21951D2AD34B651E762814C12F4C26D74EC70C ] UrsSynopsys    C:\WINDOWS\System32\drivers\urssynopsys.sys
20:06:16.0400 0x1194  UrsSynopsys - ok
20:06:16.0454 0x1194  [ F957092C63CD71D85903CA0D8370F473, 4DEC2FC20329F248135DA24CB6694FD972DCCE8B1BBEA8D872FDE41939E96AAF ] USBAAPL64      C:\WINDOWS\System32\Drivers\usbaapl64.sys
20:06:16.0575 0x1194  USBAAPL64 - ok
20:06:16.0611 0x1194  [ C87E32B90F085970D9637FBAD45EF6FE, C180EACD2EE479277DA5DBF39E43B428BD7945141B2451CB3946B0C1E495E76F ] usbccgp        C:\WINDOWS\System32\drivers\usbccgp.sys
20:06:16.0629 0x1194  usbccgp - ok
20:06:16.0659 0x1194  [ 0B663856474AC41924D9E9112203858F, 9E09F2A6279B48CAC09F8C7AA1F1BE02864D540C2ED1460CBA9FABCF0A546A1E ] usbcir          C:\WINDOWS\System32\drivers\usbcir.sys
20:06:16.0678 0x1194  usbcir - ok
20:06:16.0729 0x1194  [ F83D2250256203AC5DA5E8601C1AFDD7, AC0D90E2DB3051798B9D287CF3D0E92FED4000822E65A82775A29CF896B76F04 ] usbehci        C:\WINDOWS\System32\drivers\usbehci.sys
20:06:16.0742 0x1194  usbehci - ok
20:06:16.0759 0x1194  [ 7FFD26742321919590ED77FCA556D65F, F7FAB63C36F8519F5A7B9091C507F3CB580C390322FAF9155CCE7F66C965B968 ] usbhub          C:\WINDOWS\System32\drivers\usbhub.sys
20:06:16.0786 0x1194  usbhub - ok
20:06:16.0905 0x1194  [ 7A749B2863B5561BE34B39E8E249AD8F, E5B67DFAF5407007FD0CC408D6B4BA19DF59584819FC715E9F9E0FBF3EA00AAB ] USBHUB3        C:\WINDOWS\System32\drivers\UsbHub3.sys
20:06:16.0939 0x1194  USBHUB3 - ok
20:06:16.0979 0x1194  [ D2109F1F4FEBF1DAC415CDC5DE876479, C8A871EBD0E5EF004BA622A73DAC36C03608CD317FDCD0A6A98608DF4CC10D55 ] usbohci        C:\WINDOWS\System32\drivers\usbohci.sys
20:06:17.0020 0x1194  usbohci - ok
20:06:17.0024 0x1194  [ 29C9572F2D061CFC3C0BD48A3163E343, 2527DCC9E6D421F5DC40051C787A5270EB077746785465C9AA2A2AEEF47307D5 ] usbprint        C:\WINDOWS\System32\drivers\usbprint.sys
20:06:17.0044 0x1194  usbprint - ok
20:06:17.0052 0x1194  [ 429477D6DEF3321FF7D3EF23CAAADA00, BB7D2AFE99736AAFFA8B0B2DABF7D6A6D5CB9563B1DE6A7E86CE7DC9D27F31C0 ] usbser          C:\WINDOWS\System32\drivers\usbser.sys
20:06:17.0085 0x1194  usbser - ok
20:06:17.0093 0x1194  [ 0CC16F7B91C57AE9A4E44425A295FDAA, 7CEE11955E5742DA390601F565412C14A7481B8747C495CCD246696C56B426DC ] USBSTOR        C:\WINDOWS\System32\drivers\USBSTOR.SYS
20:06:17.0110 0x1194  USBSTOR - ok
20:06:17.0135 0x1194  [ C917D09064CDBD18F75ADC9B2C48F847, A7F6223346CCD7E84186CD0C0715014F8E3A4398298925A43290224678620D23 ] usbuhci        C:\WINDOWS\System32\drivers\usbuhci.sys
20:06:17.0168 0x1194  usbuhci - ok
20:06:17.0235 0x1194  [ B4F448F2424492F99F83D3676A453553, 42F1396616EA93BF91EA847B185C321B189F1A5138CA19D22397E8DB6D576973 ] usbvideo        C:\WINDOWS\System32\Drivers\usbvideo.sys
20:06:17.0391 0x1194  usbvideo - ok
20:06:17.0470 0x1194  [ 95BCCEFBC40D06484CF16144FE79B8A5, 8ABA73C5FFEDD319FB96B807AD08716698E557522478DF1A2C5D662675636AE0 ] USBXHCI        C:\WINDOWS\System32\drivers\USBXHCI.SYS
20:06:17.0498 0x1194  USBXHCI - ok
20:06:17.0723 0x1194  [ 4CC81AB9D380A6264FF4C0C1512CF965, 76C33053D1C9155B0F3F8392FF982AD4EABEE2BBBEE89EA41DBFE8E436973EB0 ] UserDataSvc    C:\WINDOWS\System32\userdataservice.dll
20:06:17.0830 0x1194  UserDataSvc - ok
20:06:18.0034 0x1194  [ AA24C61D88E36BA1144072227922173D, 2EBBC827E740F72EA2E75745E585378189BC0DEE91CACD7FA31BDBC5EFCF8733 ] UserManager    C:\WINDOWS\System32\usermgr.dll
20:06:18.0177 0x1194  UserManager - ok
20:06:18.0402 0x1194  [ 22BF25D9A5B403675358B2D8D9984894, 5F37BD18DBA68D3958B6225CFB06ADD28A5AF5448ECBFF93D8637A4E662607D9 ] USER_ESRV_SVC  C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
20:06:18.0422 0x1194  USER_ESRV_SVC - ok
20:06:18.0522 0x1194  [ EBF9E40845362DBE2AD0DB3077269488, A6363006350D097F95B03A2F44E1D3FBD3BC40048BE57C715CD7CBC22D1EE70B ] UsoSvc          C:\WINDOWS\system32\usocore.dll
20:06:18.0733 0x1194  UsoSvc - ok
20:06:18.0839 0x1194  [ DCB1F83AD167D16D263CE57C94E9EEDF, 2389268A1F83F0D354111553FB5F48E77A8FE4C0A1C22376A313A961252ED259 ] VAIO Event Service C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
20:06:18.0852 0x1194  VAIO Event Service - ok
20:06:18.0907 0x1194  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] VaultSvc        C:\WINDOWS\system32\lsass.exe
20:06:18.0929 0x1194  VaultSvc - ok
20:06:19.0064 0x1194  [ D00058C1FFF3F3DE990444A5734E9639, 450192C5F458888D71328994E29A6CB0E04F387BF63D49E7EABA1E1AECD680F9 ] VCFw            C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
20:06:19.0132 0x1194  VCFw - ok
20:06:19.0286 0x1194  [ F19275655B42086C884ABCDAE2C659AE, D5D36DFF2D316C390E0336B51EE9C4B23705A52A3BBCCB13CC0B95FCF5761344 ] VcmIAlzMgr      C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
20:06:19.0312 0x1194  VcmIAlzMgr - ok
20:06:19.0433 0x1194  [ 2F06D134554BA84FE253DBC481DCFE6D, A88780610A1B4FAFF1818CF3D86AC83B27DDDCD9CDB9F1A38C5BBFEE5632CF5E ] VcmINSMgr      C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
20:06:19.0451 0x1194  VcmINSMgr - ok
20:06:19.0508 0x1194  [ 32A3735F6874B7783C6209ED5CA36D9D, B6DA3D749A000D99B6F0BF475C47AC0867595B634CC6502C8758B241759F531C ] VcmXmlIfHelper  C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe
20:06:19.0518 0x1194  VcmXmlIfHelper - ok
20:06:19.0549 0x1194  [ B430617858DBA164F64E7974D80EBEB9, DE69180925B971901C1AEDD864020B4F1ECEA3094EDAFC408F5865690F2E7D1E ] VCService      C:\Program Files\Sony\VAIO Care\VCService.exe
20:06:19.0559 0x1194  VCService - ok
20:06:19.0586 0x1194  [ 0CBDE344FB48E42D78E29469F202ADBC, A1C3FBA5409DD3BBEAF1D3CE2583D6C8A621C0E4F534155EC540AFD67BC9E8CA ] vdrvroot        C:\WINDOWS\system32\drivers\vdrvroot.sys
20:06:19.0598 0x1194  vdrvroot - ok
20:06:19.0727 0x1194  [ 0783EDE1FA94649ED7F3CEF6A734041A, 1A13A613EF6B67459031C7994FFC6F32F73E02E0F123A171618E4F011C635684 ] vds            C:\WINDOWS\System32\vds.exe
20:06:19.0794 0x1194  vds - ok
20:06:19.0855 0x1194  [ 723195568C8755CAD57F7933C5F2C5C2, 5C403799F67223605F825BC16D217C1EF5E1A0DDF00AC6380FE8976339B67D9B ] VerifierExt    C:\WINDOWS\system32\drivers\VerifierExt.sys
20:06:19.0874 0x1194  VerifierExt - ok
20:06:20.0017 0x1194  [ 3BB8D153A9A514EC9FFCB586251A1925, 5E4B46511F9791699826DC63B35528544347166BDE9981FB93F1F7F2A09599C7 ] vhdmp          C:\WINDOWS\System32\drivers\vhdmp.sys
20:06:20.0056 0x1194  vhdmp - ok
20:06:20.0076 0x1194  [ 7929228F0E8B0C2FA0495A17A4FC27F6, 1F1667B10A96B1D85ED165F62A5C0EF28C37F828B8280EA08BFCC1BAC03F2C90 ] vhf            C:\WINDOWS\System32\drivers\vhf.sys
20:06:20.0127 0x1194  vhf - ok
20:06:20.0180 0x1194  [ AEE432ED868831B1F068E373598F6D93, BAE91F47B0CB94B826CA010B490AD924D7B715911DF3FCE62F9165F3B571105C ] vmbus          C:\WINDOWS\system32\drivers\vmbus.sys
20:06:20.0197 0x1194  vmbus - ok
20:06:20.0202 0x1194  [ 9444B23FC694B5F90F21B0FC7F10D8DD, 86F92856F5C985DD8E5993B51E85E1F47EF8C9B2FB37468998C94266963BB4BD ] VMBusHID        C:\WINDOWS\System32\drivers\VMBusHID.sys
20:06:20.0219 0x1194  VMBusHID - ok
20:06:20.0236 0x1194  [ 4D0287F566B36536DD812A54C015FC4A, 01D6508CA59CF04A47902B1F7C202FD14A81240E0B447588D919DD1072B040CF ] vmgid          C:\WINDOWS\System32\drivers\vmgid.sys
20:06:20.0285 0x1194  vmgid - ok
20:06:20.0353 0x1194  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicguestinterface C:\WINDOWS\System32\icsvc.dll
20:06:20.0551 0x1194  vmicguestinterface - ok
20:06:20.0561 0x1194  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicheartbeat  C:\WINDOWS\System32\icsvc.dll
20:06:20.0587 0x1194  vmicheartbeat - ok
20:06:20.0928 0x1194  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmickvpexchange C:\WINDOWS\System32\icsvc.dll
20:06:20.0954 0x1194  vmickvpexchange - ok
20:06:21.0030 0x1194  [ 0F621B52259D88A719AA20C6D04E3D72, 80B0528CCDE6E1B6F092787E1C0769C649698B196602859A5855134F0ECCBAE5 ] vmicrdv        C:\WINDOWS\System32\icsvcext.dll
20:06:21.0285 0x1194  vmicrdv - ok
20:06:21.0444 0x1194  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicshutdown    C:\WINDOWS\System32\icsvc.dll
20:06:21.0472 0x1194  vmicshutdown - ok
20:06:21.0527 0x1194  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmictimesync    C:\WINDOWS\System32\icsvc.dll
20:06:21.0551 0x1194  vmictimesync - ok
20:06:21.0570 0x1194  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicvmsession  C:\WINDOWS\System32\icsvc.dll
20:06:21.0593 0x1194  vmicvmsession - ok
20:06:21.0620 0x1194  [ 0F621B52259D88A719AA20C6D04E3D72, 80B0528CCDE6E1B6F092787E1C0769C649698B196602859A5855134F0ECCBAE5 ] vmicvss        C:\WINDOWS\System32\icsvcext.dll
20:06:21.0646 0x1194  vmicvss - ok
20:06:21.0759 0x1194  [ 29075915F9BDC3437F8BED71C067D399, 2C7718080C11DFDD4C9A2085537F78F5633369B4A27D9C64168F0249594A4AA2 ] volmgr          C:\WINDOWS\system32\drivers\volmgr.sys
20:06:21.0776 0x1194  volmgr - ok
20:06:21.0791 0x1194  [ 6BDB6CE6D2D9E3D3F28F1C97E12B62E2, 5E77D7AF858D7B90FF395F39B86D6F96413D1DDEA28BC9FB40C5524A4DF6DAD0 ] volmgrx        C:\WINDOWS\system32\drivers\volmgrx.sys
20:06:21.0818 0x1194  volmgrx - ok
20:06:21.0864 0x1194  [ BF2546583BB75F01DDA60A7921DFB230, 579BD0BC55F4F03CD8D1FCDAC3975A1649C688820F2F7FC1AD354132D9E3BEE9 ] volsnap        C:\WINDOWS\system32\drivers\volsnap.sys
20:06:21.0891 0x1194  volsnap - ok
20:06:21.0912 0x1194  [ AC2E20A74D09D24485BE8396CE04F07B, 23FCE8BEE01B89E5CDCA536D75DBA6DCE3E92E13178A66836CEB7829310A89D1 ] volume          C:\WINDOWS\system32\drivers\volume.sys
20:06:21.0926 0x1194  volume - ok
20:06:21.0977 0x1194  [ 92F6E3E6D3F1795263EB34B37F74AEF7, 33AB1ECCA1216AF1995E1DB4F11E48156FF62391D7C176C8A4CC1037B9CB3A27 ] vpci            C:\WINDOWS\System32\drivers\vpci.sys
20:06:21.0991 0x1194  vpci - ok
20:06:22.0131 0x1194  [ 0E0CFEC8FA51AE42508A83C9CBEF4EC0, 5F5BCDEED120AEF5F20B5AE39E5CA9F20AD374FD0F578B5678CB39655B27A44A ] vpnagent        C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
20:06:22.0157 0x1194  vpnagent - ok
20:06:22.0215 0x1194  [ 0F42C39016F82F345C0F2DB2D5B90EB4, 2E957E72BB8D0293F61FA7385BA9400DF7759E1E3D35FE24F3877A6460988F4D ] vpnva          C:\WINDOWS\System32\drivers\vpnva64-6.sys
20:06:22.0224 0x1194  vpnva - ok
20:06:22.0251 0x1194  [ FD9BCB8920973CEAD4D49DC7A6D8A618, 34AB4A485FB40DF737600006D8323BE927FB0BDA2BC170F4C123BE775EAE7CC8 ] vsmraid        C:\WINDOWS\system32\drivers\vsmraid.sys
20:06:22.0268 0x1194  vsmraid - ok
20:06:22.0344 0x1194  [ 86958A24639B8E3A84F14307CE35650B, C16CC385239B441FD3B363EB17D0EA5C792F274347EA028758103E7DC85B9318 ] VSNService      C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
20:06:22.0388 0x1194  VSNService - ok
20:06:22.0501 0x1194  [ 01FFD5AF533F2CFDF26DDDC9313731C1, BFF0F2E57CD2358AC8F519F6F5692A46D97EC4E9B763D47101CEF31712FD4738 ] VSS            C:\WINDOWS\system32\vssvc.exe
20:06:22.0615 0x1194  VSS - ok
20:06:22.0658 0x1194  [ 0C111F220798CCE80484026E06822379, B98A5E44D3ABA67E6DE99E18BF3C2C606923E6269E262665C721F672ACBBED2A ] VSTXRAID        C:\WINDOWS\system32\drivers\vstxraid.sys
20:06:22.0685 0x1194  VSTXRAID - ok
20:06:22.0988 0x1194  [ 16595E67A5AE390C70F4A482644C6D3D, 5D233199963E4970CDE93A800E4C40E675979AE255590E060391AE315D45DA71 ] VUAgent        C:\Program Files\Sony\VAIO Update\VUAgent.exe
20:06:23.0043 0x1194  VUAgent - ok
20:06:23.0101 0x1194  [ 607639716E9DB1CEF4E18B5B229293B4, 1D997177093F907EFE8A04AD10443BB9C355C0D7657DBD449E7EE7FCABC3ECBC ] vwifibus        C:\WINDOWS\System32\drivers\vwifibus.sys
20:06:23.0185 0x1194  vwifibus - ok
20:06:23.0227 0x1194  [ B1ED64E628763148BF84FBE23F2AD711, 6182A39675E6049BC3DD353694720795A8E3D0331509AA8ABA4883D5C569AD5E ] vwififlt        C:\WINDOWS\system32\drivers\vwififlt.sys
20:06:24.0888 0x1194  vwififlt - ok
20:06:25.0287 0x1194  [ 59920894C38A827091A06AF559834E47, 8B40FE0B1BA3B2A79BFF70803D039DB921F85C978724722E5E5AFF188FA75471 ] vwifimp        C:\WINDOWS\System32\drivers\vwifimp.sys
20:06:25.0312 0x1194  vwifimp - ok
20:06:25.0511 0x1194  [ 76C1CC611352499326001F25A3ED15F8, 228BFA8A01BB1B3868576D509A2EA6F3D37FEDC8F12D4DC4E0A84CE926C6D1B1 ] W32Time        C:\WINDOWS\system32\w32time.dll
20:06:25.0833 0x1194  W32Time - ok
20:06:25.0884 0x1194  w7Svc - ok
20:06:25.0939 0x1194  [ 55D00B785A7587F4263D125817871283, B92400B229099C1E243F2B149881A1423A2E9C8CA2D77D868B9B923BFDEC7FF2 ] WacomPen        C:\WINDOWS\System32\drivers\wacompen.sys
20:06:25.0979 0x1194  WacomPen - ok
20:06:26.0083 0x1194  [ 1483BE4D0135C378CB61D3CD73AB3E03, B7309C9E4F370860C507BF52D17234CDF4A7FAE95D2D822714E07EF5DEC0249B ] WalletService  C:\WINDOWS\system32\WalletService.dll
20:06:26.0209 0x1194  WalletService - ok
20:06:26.0238 0x1194  [ CEF3D306C09BEC1A800E9B4A06F859F6, 75D21F97E9F94FA97024F945AF512FEC94F88DD8073F3FAD92A6E0A9FDC586DB ] wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
20:06:26.0277 0x1194  wanarp - ok
20:06:26.0284 0x1194  [ CEF3D306C09BEC1A800E9B4A06F859F6, 75D21F97E9F94FA97024F945AF512FEC94F88DD8073F3FAD92A6E0A9FDC586DB ] wanarpv6        C:\WINDOWS\system32\DRIVERS\wanarp.sys
20:06:26.0309 0x1194  wanarpv6 - ok
20:06:26.0448 0x1194  [ 30B8286F8FE1AE90A583100D45E02247, 3C86A4A5E21F9A1267EA231B20914E0A162BA4C25FE8917AD3AB6D504DA5BE0C ] wbengine        C:\WINDOWS\system32\wbengine.exe
20:06:26.0560 0x1194  wbengine - ok
20:06:26.0688 0x1194  [ 8C521D161445C3E1F38A494E7649E70D, F00990B2FE1FB52C74A2057E6480C5EBF2BDBC32955CC03C6B63360F20A49A18 ] WbioSrvc        C:\WINDOWS\System32\wbiosrvc.dll
20:06:26.0823 0x1194  WbioSrvc - ok
20:06:26.0849 0x1194  [ E330144B97D493AA886000DCAAA8DAF5, ED86F46F5A76FD8F06CA98BD61B174ADB9AD4B065394356872708DF8B614E4F9 ] wcifs          C:\WINDOWS\system32\drivers\wcifs.sys
20:06:26.0867 0x1194  wcifs - ok
20:06:26.0923 0x1194  [ 32960EA9CF836D7DD77767DCB68CE230, 679446A4FAB0331C181D2716CAEA225267C6164BB9867E360C5B3D6AB1083195 ] Wcmsvc          C:\WINDOWS\System32\wcmsvc.dll
20:06:26.0990 0x1194  Wcmsvc - ok
20:06:27.0136 0x1194  [ D50645235A507B0546B1B5CF7D0B8849, 19F5FE10C953B8EE8EEDA9A9F7F2E97AA193BB085E7FC364066686089ADD1C9F ] wcncsvc        C:\WINDOWS\System32\wcncsvc.dll
20:06:27.0221 0x1194  wcncsvc - ok
20:06:27.0251 0x1194  [ AEA1093B751339267D8C8C1EF3D669CF, 8F3325E7FB16BD856A0593C36F2E3E018909038C52CD5F92E116E0C1366F31CB ] wcnfs          C:\WINDOWS\system32\drivers\wcnfs.sys
20:06:27.0296 0x1194  wcnfs - ok
20:06:27.0310 0x1194  [ D520B1B849B6D4D707AB31722B952C2D, 149BABB7BD63C1F212ADD9306C84FFB2A5CE6DC435BD3213EAB787E9B222C61F ] WdBoot          C:\WINDOWS\system32\drivers\WdBoot.sys
20:06:27.0325 0x1194  WdBoot - ok
20:06:27.0429 0x1194  [ 5030C76047D756263093A47B82970868, E772F15973F6DE36851DD230F1F4190746CD81CA1E7284DC074711C4BF45CAF0 ] Wdf01000        C:\WINDOWS\system32\drivers\Wdf01000.sys
20:06:27.0467 0x1194  Wdf01000 - ok
20:06:27.0582 0x1194  [ 29FF9199EDEB4F5470BB134D1A2563D2, 94713F98A6EA6042203D5DD0DE6758F5F0F331F7D4BB05E91EF20CEEEBD6780F ] WdFilter        C:\WINDOWS\system32\drivers\WdFilter.sys
20:06:27.0602 0x1194  WdFilter - ok
20:06:27.0648 0x1194  [ E7A7E8803E66B7CCED95D327A4DBC135, 401ECD953D4014A95C9022822D9ACEC1A68C917281DBA2365503A473FC6D9507 ] WdiServiceHost  C:\WINDOWS\system32\wdi.dll
20:06:27.0692 0x1194  WdiServiceHost - ok
20:06:27.0698 0x1194  [ E7A7E8803E66B7CCED95D327A4DBC135, 401ECD953D4014A95C9022822D9ACEC1A68C917281DBA2365503A473FC6D9507 ] WdiSystemHost  C:\WINDOWS\system32\wdi.dll
20:06:27.0720 0x1194  WdiSystemHost - ok
20:06:27.0952 0x1194  [ 8CB606A3057355FD5A9DBDD1A0AC94EF, 6DD0B4A2270633086EBB569A00B87430EE6EF173525E341404B15845B57BE86D ] wdiwifi        C:\WINDOWS\system32\DRIVERS\wdiwifi.sys
20:06:28.0079 0x1194  wdiwifi - ok
20:06:28.0101 0x1194  [ 17CF416CFF408190F5A4CBD79AB12E55, E376C8865C7EA633AE20D2CF940E4C7584AC783BAAF7941780FB6C4C84802F33 ] WdNisDrv        C:\WINDOWS\system32\Drivers\WdNisDrv.sys
20:06:28.0119 0x1194  WdNisDrv - ok
20:06:28.0152 0x1194  WdNisSvc - ok
20:06:28.0196 0x1194  [ 3570C4E14F85CE0B537D126727ACA91C, A474C9E6B6E4E5945C63367C1D3D24D4782C4A4FEB00FAE15DFED099D8283078 ] WebClient      C:\WINDOWS\System32\webclnt.dll
20:06:28.0225 0x1194  WebClient - ok
20:06:28.0259 0x1194  [ 1785F9C96A0BDEC1F6E0C79EF412F342, D6D4EDA69457BEDDA69C2F60FC4C2FAC97D46CD8E9C1804CCD68F169383583E3 ] Wecsvc          C:\WINDOWS\system32\wecsvc.dll
20:06:28.0321 0x1194  Wecsvc - ok
20:06:28.0325 0x1194  [ B9175D63527B05131F2FA504CF0265F2, 1E43A17788F1B6A29E2889C81E0BE100D64BD3A9DEE7C154D9581F01D2D7D05F ] WEPHOSTSVC      C:\WINDOWS\system32\wephostsvc.dll
20:06:28.0358 0x1194  WEPHOSTSVC - ok
20:06:28.0380 0x1194  [ 5C58EC0C9D4DE04DCDE56F6DCEA62080, 8ED386EDF4C39C339CE0BB2AC7E199C38705E5A6B3F56A4987B9A8ABD19BB59F ] wercplsupport  C:\WINDOWS\System32\wercplsupport.dll
20:06:28.0445 0x1194  wercplsupport - ok
20:06:28.0461 0x1194  [ F899B355CC95AF26AB36E84E8A0DD685, C400F2F80FFF6473FEF066943C4A2AFF0FFE988A4F755757A2E5005C2A10DAD8 ] WerSvc          C:\WINDOWS\System32\WerSvc.dll
20:06:28.0518 0x1194  WerSvc - ok
20:06:28.0588 0x1194  [ E1785942AC51FEE6826CDF02075C5AA9, 56FE7017684086F4F9C3A2C0D3AC00369BA0938BA3987EEBEE9A75B8E3CA0AE1 ] WFPLWFS        C:\WINDOWS\system32\drivers\wfplwfs.sys
20:06:28.0611 0x1194  WFPLWFS - ok
20:06:28.0630 0x1194  [ B154618505A6A9026EFA6AB8C4123BF1, 713648D71AA027B4472E7E75B942630DBE7383687984B02A5E99C9E4192C95EB ] WiaRpc          C:\WINDOWS\System32\wiarpc.dll
20:06:28.0662 0x1194  WiaRpc - ok
20:06:28.0693 0x1194  [ 10876CF165F20DF1CFE499A110553619, 4FC4A74D51B02AD606DD5BB21788B8945ED6758003C3B09AD834FE8F55174BEB ] WIBUKEY        C:\WINDOWS\system32\DRIVERS\WibuKey64.sys
20:06:28.0703 0x1194  WIBUKEY - ok
20:06:28.0730 0x1194  [ 0CF79A0EACFFBB75A50A469A27696D02, E112BF7B5A8D0B0AD2EA0E7B9FD4E8CFEC9371C8E94A60248292D688AFE715C4 ] WIMMount        C:\WINDOWS\system32\drivers\wimmount.sys
20:06:28.0743 0x1194  WIMMount - ok
20:06:28.0746 0x1194  WinDefend - ok
20:06:28.0777 0x1194  [ 0DE131733317EB4BE67028366B0CAAC6, AC7DADBF03A3752B4D33CA19F03DBCEDD6F56893C2DA25C98B0AB07063D990E3 ] WindowsTrustedRT C:\WINDOWS\system32\drivers\WindowsTrustedRT.sys
20:06:28.0792 0x1194  WindowsTrustedRT - ok
20:06:28.0835 0x1194  [ 92EB5D38BDF10C790450F3E46BF93A0E, 0FC027398DBD43EDC1F7D703C0B6DB20294DF34E67C9288442039B1A5663CE1B ] WindowsTrustedRTProxy C:\WINDOWS\system32\drivers\WindowsTrustedRTProxy.sys
20:06:28.0849 0x1194  WindowsTrustedRTProxy - ok
20:06:28.0991 0x1194  [ C2A3B07F0118D61086C99BDCBAB6A6A3, 04D646BEF1C6F427503C594F0ECBB33140C3991A3A7AFB66B2C9581E358F9FD2 ] WinHttpAutoProxySvc C:\WINDOWS\system32\winhttp.dll
20:06:29.0075 0x1194  WinHttpAutoProxySvc - ok
20:06:29.0119 0x1194  [ F95DE20312ACCA7761446DE152BD1F7C, F6C5ACA500C2182437F4A7402BD81C3A2B77C0BBD78BA31FB574DC1997FCBFE6 ] WinMad          C:\WINDOWS\System32\drivers\winmad.sys
20:06:29.0131 0x1194  WinMad - ok
20:06:29.0206 0x1194  [ CD49CA8E3280ACEEC5ECF431A59F5EFD, 75F48EFC6DEE9E06B490703EE47602AFDEA51505285B02D2CF884601E71857CC ] Winmgmt        C:\WINDOWS\system32\wbem\WMIsvc.dll
20:06:29.0260 0x1194  Winmgmt - ok
20:06:29.0538 0x1194  [ B8C0D620219ECAA23A2AC841EAF454D1, FB527C4D36929D7FAE2A837727C557B7823A72069EBCAB7D16C49E8B21E8D952 ] WinRM          C:\WINDOWS\system32\WsmSvc.dll
20:06:29.0768 0x1194  WinRM - ok
20:06:29.0830 0x1194  [ 4EFB346BFDAEEB29316AA52BBB9852B1, 4BC5554F44BD9549D0A929D77BD410FA3EB502A7D0170303D369268672505494 ] WINUSB          C:\WINDOWS\System32\drivers\WinUSB.SYS
20:06:29.0901 0x1194  WINUSB - ok
20:06:29.0920 0x1194  [ 8B9AFF5F08E66A6F1F1063DEC9457FB6, 98F2AF6988D125521FD34CAA48B9652922F0C8ECFAE9B0C1DF4B3CE6B9CF500F ] WinVerbs        C:\WINDOWS\System32\drivers\winverbs.sys
20:06:29.0934 0x1194  WinVerbs - ok
20:06:29.0963 0x1194  [ 3A627A24EAC6CEC3BA59548AA70BAD6E, C4B908CEB2D6F7F14C635AE02E20B16DAF795073975AE3967627D27E8ABAB015 ] WirelessKeyboardFilter C:\WINDOWS\System32\drivers\WirelessKeyboardFilter.sys
20:06:29.0974 0x1194  WirelessKeyboardFilter - ok
20:06:30.0083 0x1194  [ ECD999D8412A3473C26B118F89DB9908, 5FB9B93E4B5482CCFF01D805DFA386FD8D3441BC81E7BD5DF89EE3078FD724F3 ] wisvc          C:\WINDOWS\system32\flightsettings.dll
20:06:30.0246 0x1194  wisvc - ok
20:06:30.0500 0x1194  [ 7671078AEF4C0203B053A9642C401FF7, BBFADA89CD31F20ADDBFAFAD2E492C72D82BF2F8B823BB6773F04D229B62534C ] WlanSvc        C:\WINDOWS\System32\wlansvc.dll
20:06:30.0641 0x1194  WlanSvc - ok
20:06:30.0706 0x1194  [ 06C8FA1CF39DE6A735B54D906BA791C6, D8FEC7DE227781CDA876904701B2AA995268F74DCD6CB34AA0296C557FC283B6 ] wlcrasvc        C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
20:06:30.0717 0x1194  wlcrasvc - ok
20:06:30.0934 0x1194  [ E15711970C5BE05E8D70B294D0AFF621, 30670CFC4DA57B4A3E0E895E4111100D847BB8041A258A303524CD96DC566482 ] wlidsvc        C:\WINDOWS\system32\wlidsvc.dll
20:06:31.0228 0x1194  wlidsvc - ok
20:06:31.0253 0x1194  [ 6F4F4F5A007D1710BD76FB311DA97C07, FC0FEA4364F6BA4E31DBC82735D09D429CA3BE9AFCFF5D5E1263D8B27FC2CE3E ] WmiAcpi        C:\WINDOWS\System32\drivers\wmiacpi.sys
20:06:31.0291 0x1194  WmiAcpi - ok
20:06:31.0345 0x1194  [ 3CDDFF6CAD962C5EF1C52FD667C358B6, F6F09145E9461EB17172988D26749FCF36920A1A683459334D04A6D072B31A92 ] wmiApSrv        C:\WINDOWS\system32\wbem\WmiApSrv.exe
20:06:31.0379 0x1194  wmiApSrv - ok
20:06:31.0408 0x1194  WMPNetworkSvc - ok
20:06:31.0466 0x1194  [ 43C8D087B31C592163B33A4BDA540E40, 3A6C4E5E56931B29321DCC723585F2F0E804EF4DCDEAB2A8687F30FC3AE70E43 ] Wof            C:\WINDOWS\system32\drivers\Wof.sys
20:06:31.0483 0x1194  Wof - ok
20:06:31.0688 0x1194  [ 909CB4BBF7B08E78C363000E09E79A6F, 217205D1B5EE03274AFF9405AED6D2A5665CBA4C3876E84B53DA44920CDF9CB1 ] workfolderssvc  C:\WINDOWS\system32\workfolderssvc.dll
20:06:31.0808 0x1194  workfolderssvc - ok
20:06:31.0881 0x1194  [ F02930EB91596042F2221397D60AFCE5, 10E2AB0993B67CBAA9E11C68280608965064EC9F7E0C570F5B453FACADB8AB5D ] WPDBusEnum      C:\WINDOWS\system32\wpdbusenum.dll
20:06:31.0965 0x1194  WPDBusEnum - ok
20:06:31.0995 0x1194  [ 75A9284F01FE7CB1A7D5EAE5C1EB4F33, 390EF23AEA06D8711555F7979FF8BE0620B53C1A551638C4EC6FB7C6678965B3 ] WpdUpFltr      C:\WINDOWS\system32\drivers\WpdUpFltr.sys
20:06:32.0009 0x1194  WpdUpFltr - ok
20:06:32.0036 0x1194  [ 60E2EB3E7B7F15C25E02462159F90707, D8344B529EEC0D4922CAC3E6897CC9F191ACF1376017BE38ED6BF6019F1ED181 ] WpnService      C:\WINDOWS\system32\WpnService.dll
20:06:32.0111 0x1194  WpnService - ok
20:06:32.0125 0x1194  [ C7C91FB86A3C6CD7619725A88ED1884C, 132C43C518F37BF303D768BD5FB0AB835F693C43FE693937D804A34E940D770F ] WpnUserService  C:\WINDOWS\System32\WpnUserService.dll
20:06:32.0166 0x1194  WpnUserService - ok
20:06:32.0209 0x1194  [ 36D7B73ADC3E10607ED6EC874AFB5D1E, 1737B3E4D2CA76BB27903BF460E4960E6A0BC32D35069AC7C5E4B07F625F3282 ] ws2ifsl        C:\WINDOWS\system32\drivers\ws2ifsl.sys
20:06:32.0274 0x1194  ws2ifsl - ok
20:06:32.0328 0x1194  [ 9A0E0B836413EB0BC885532D2A5389D6, AFEE4A0578D5581E4D72999A33C0DEA6253BD891F611AFF9AFDE4160A60105F3 ] wscsvc          C:\WINDOWS\System32\wscsvc.dll
20:06:32.0431 0x1194  wscsvc - ok
20:06:32.0436 0x1194  WSearch - ok
20:06:32.0550 0x1194  [ DDB7E452A99E0E5244105C6D2CF4BC9E, 1364B03AFFD20D339A2EBA303575BCCBC2D122D89810B1E3593CC55F93F9B79A ] wuauserv        C:\WINDOWS\system32\wuaueng.dll
20:06:32.0749 0x1194  wuauserv - ok
20:06:32.0776 0x1194  [ AED7FE551E8672B824A56324076183EB, FFE543AAEFDEFFE6B20C244DB141A9425BDA88ED36F4870F0B70FEC433BDF0C1 ] WudfPf          C:\WINDOWS\system32\drivers\WudfPf.sys
20:06:32.0812 0x1194  WudfPf - ok
20:06:32.0832 0x1194  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFRd          C:\WINDOWS\System32\drivers\WUDFRd.sys
20:06:32.0856 0x1194  WUDFRd - ok
20:06:32.0912 0x1194  [ 47F6450F28BAA32B2AB0D6BE00996249, C8A47D6ADF89AD613AB685C6224B9099DCEFDCD8ABCF703542AFDC356404116E ] wudfsvc        C:\WINDOWS\System32\WUDFSvc.dll
20:06:32.0944 0x1194  wudfsvc - ok
20:06:33.0020 0x1194  [ E231728BC515A4B85543AF74A1FEDFCB, 5D250D7D789B5BB56BFA2E7A109BCEB3686B7636C54D89F4E9804101D145C955 ] WwanSvc        C:\WINDOWS\System32\wwansvc.dll
20:06:33.0258 0x1194  WwanSvc - ok
20:06:33.0324 0x1194  [ F39D6915451D9226AC9A5E7AE70E2ABA, E05D678DC0423A4D0EB8B3BB5A942721BB4F3B0BED22748252DBD6053FE956F1 ] XblAuthManager  C:\WINDOWS\System32\XblAuthManager.dll
20:06:33.0454 0x1194  XblAuthManager - ok
20:06:33.0533 0x1194  [ 765FF96467A26C4C03281ECA426EC2D9, 2526B03C518D72F429C29BA4D4F11707AF277BF71520A1A92238A932950AE161 ] XblGameSave    C:\WINDOWS\System32\XblGameSave.dll
20:06:33.0724 0x1194  XblGameSave - ok
20:06:33.0765 0x1194  [ 9627BBAA50878F6833A6A7843EE3B1D9, 637566BB56501C4D11E3B6E6AC1C602D880C9D357CCE3DF1DF74EE672744F2B7 ] xboxgip        C:\WINDOWS\System32\drivers\xboxgip.sys
20:06:33.0892 0x1194  xboxgip - ok
20:06:33.0984 0x1194  [ 335E6F2BE58523B295945C840C185B00, 94ED7E2CB212A3D55B8A2CB90CD1D02A6AF92DC0DDD487CB5B7CAC9883343460 ] XboxNetApiSvc  C:\WINDOWS\system32\XboxNetApiSvc.dll
20:06:34.0060 0x1194  XboxNetApiSvc - ok
20:06:34.0107 0x1194  [ 63088A3361D9A308F328F11E9099DD87, E03FDB932FC57F199C8F8A8EADA338BDF7D2F9C6CB8FAB679A92B48B1E5AFE8A ] xinputhid      C:\WINDOWS\System32\drivers\xinputhid.sys
20:06:34.0154 0x1194  xinputhid - ok
20:06:34.0157 0x1194  ================ Scan global ===============================
20:06:34.0235 0x1194  [ 0C710DB449712EE13ACE733695DB7780, BBC7875B38D318CE4E88979D083AC72E8993254A466A8A6882DDE9E0C3B687A3 ] C:\WINDOWS\system32\basesrv.dll
20:06:34.0300 0x1194  [ 4C08BF958476A137C78B62B22B5F90A4, 11DDD033896C96F8F7F1A1EDD0F4E0F07AFBB3202DC8A2E5E3ADB51C4D0700D4 ] C:\WINDOWS\system32\winsrv.dll
20:06:34.0362 0x1194  [ 1EE06E957B0B2CA52D26DA7861E160EF, 4B743A1C7010138F5F6684BBCF7CAD6FD05F49920BDD3FDB776347AA6B44AB94 ] C:\WINDOWS\system32\sxssrv.dll
20:06:34.0420 0x1194  [ 3C69CC28665854F1AAB4B4005005FA31, 2750F5ECCD448C07E3402AA64EA625D27C6BC1D000A3FFE57C03D62428BB46C4 ] C:\WINDOWS\system32\services.exe
20:06:34.0429 0x1194  [ Global ] - ok
20:06:34.0430 0x1194  ================ Scan MBR ==================================
20:06:34.0460 0x1194  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
20:06:37.0227 0x1194  \Device\Harddisk0\DR0 - ok
20:06:37.0227 0x1194  ================ Scan VBR ==================================
20:06:37.0260 0x1194  [ 9FB77500270013705D6A5B16DF23E4CD ] \Device\Harddisk0\DR0\Partition1
20:06:37.0268 0x1194  \Device\Harddisk0\DR0\Partition1 - ok
20:06:37.0288 0x1194  [ 8B95B020F71679E8843EB81A9AAE4425 ] \Device\Harddisk0\DR0\Partition2
20:06:37.0291 0x1194  \Device\Harddisk0\DR0\Partition2 - ok
20:06:37.0318 0x1194  [ DFABC0B3722B7FECBC72153FAC88EA18 ] \Device\Harddisk0\DR0\Partition3
20:06:37.0335 0x1194  \Device\Harddisk0\DR0\Partition3 - ok
20:06:37.0336 0x1194  ================ Scan generic autorun ======================
20:06:37.0337 0x1194  Apoint - ok
20:06:37.0443 0x1194  [ 7D1B808410A734E427A229B31EAE8891, 36BB31B9119062A53D2AB6CCBFF820D8195776836D84AF7008CE1F18D2519009 ] C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe
20:06:37.0466 0x1194  cAudioFilterAgent - ok
20:06:37.0541 0x1194  [ 28134B8E1660951DBD4D400A33D9ED85, 35E524678992A02DA2334FC94A89BBBE3C644E7068F07DF16973AAE4CA51888B ] C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
20:06:37.0611 0x1194  AthBtTray - detected UnsignedFile.Multi.Generic ( 1 )
20:06:38.0776 0x1194  Detect skipped due to KSN trusted
20:06:38.0776 0x1194  AthBtTray - ok
20:06:39.0150 0x1194  [ 111474C61232202B5B588D2B512CBB25, D25FF1E6C6460A7F9DE39198D182058C1712726008D187E1953B83ABE977E4A0 ] C:\Windows\syswow64\RunDll32.exe
20:06:39.0213 0x1194  Cm112Sound - ok
20:06:39.0282 0x1194  [ 0740D338A42F7778760F2B0CB6DA5830, C6D275B4993502A155F85D8DE26B119866DEE106C98CF29CDAACBAF11484C94A ] C:\Windows\syswow64\HsMgr.exe
20:06:39.0318 0x1194  Cm112GX - detected UnsignedFile.Multi.Generic ( 1 )
20:06:40.0484 0x1194  Detect skipped due to KSN trusted
20:06:40.0484 0x1194  Cm112GX - ok
20:06:40.0516 0x1194  [ 111474C61232202B5B588D2B512CBB25, D25FF1E6C6460A7F9DE39198D182058C1712726008D187E1953B83ABE977E4A0 ] C:\Windows\syswow64\RunDll32.exe
20:06:40.0535 0x1194  Cm108Sound - ok
20:06:40.0629 0x1194  [ E9763D09729140F9C4027A70782AF657, BF40457DC5D5E794E6D31183107113E9AD8DE24D7DF537B9393FE14D6BC64C66 ] C:\Program Files\iTunes\iTunesHelper.exe
20:06:40.0641 0x1194  iTunesHelper - ok
20:06:40.0976 0x1194  [ 974B17A9A957F19F2B55F825ECA94A0A, 76A7D1CF4161EB2CDDB8C2D68220BD642905F5AA43915D0139BE1A9BCC6D18CC ] C:\Program Files\Common Files\MAYComputer\eDocPrintPro\ApplyEsf.exe
20:06:41.0463 0x1194  ApplyEsf-eDocPrintPro - detected UnsignedFile.Multi.Generic ( 1 )
20:06:42.0673 0x1194  Detect skipped due to KSN trusted
20:06:42.0673 0x1194  ApplyEsf-eDocPrintPro - ok
20:06:43.0166 0x1194  [ 40C20C7530E33CD4224DBA1B56BE01D5, 04AEBCFC9D753834D641C5E71D0036E2975BBCFA36BBCFEE95A332CB79A9F790 ] C:\Program Files\Common Files\MAYComputer\eDocPrintPro\eDocPrintProMonitor.exe
20:06:43.0453 0x1194  eDocPrintProMonitor - ok
20:06:43.0458 0x1194  WindowsDefender - ok
20:06:43.0960 0x1194  [ 440699F90786EF6A7722B4417BB0F5C7, 75C8743E944E847541848AE972B90480AD33CA7607ECA9D4FF4C90D442AEC8FB ] C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
20:06:44.0058 0x1194  ISBMgr.exe - ok
20:06:44.0500 0x1194  [ 48B9248CED8A5DE4EB0917CB676CB8D5, E39AF20AE2D8B768C9E6CD060BEB7E24F71B1398472274BA7178AB9ADF8A3248 ] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
20:06:44.0557 0x1194  PMBVolumeWatcher - ok
20:06:44.0719 0x1194  [ F655E4A1AED366E96E5D5AA397E0F255, F8573CCA72FA25079B8CE2FC5D30379487E2905B109C73C741FAB31589FA49E1 ] C:\Program Files (x86)\QuickTime\QTTask.exe
20:06:44.0776 0x1194  QuickTime Task - detected UnsignedFile.Multi.Generic ( 1 )
20:06:45.0939 0x1194  Detect skipped due to KSN trusted
20:06:45.0939 0x1194  QuickTime Task - ok
20:06:46.0191 0x1194  [ 1EE9C83050AD891F8E996A2267F0AFD6, CFCA874BD373C4BA1E3CF115DC870621634F9CBB9F5E7CC1C6AB41702CAE91A3 ] C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
20:06:46.0224 0x1194  Cisco AnyConnect Secure Mobility Agent for Windows - ok
20:06:47.0681 0x1194  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
20:06:48.0005 0x1194  OneDriveSetup - ok
20:06:49.0085 0x1194  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
20:06:49.0331 0x1194  OneDriveSetup - ok
20:06:49.0401 0x1194  [ 7DE169424B47092F16F4BDDDEB8FE104, CDD313A2495C8A5A2533672B71ED10902B0F3AAB58047005B2E510E59FCAC031 ] C:\Program Files (x86)\BillP Studios\WinPatrol\winpatrol.exe
20:06:49.0421 0x1194  WinPatrol - ok
20:06:49.0820 0x1194  [ F2AD1B265908797F8A5E21E0312F2F25, 2A6A612F7D52D297385C43E77AD0CD37B28F33ED2AF89098F5E66B812B838A52 ] C:\Users\Charlie\AppData\Local\Akamai\netsession_win.exe
20:06:50.0031 0x1194  Akamai NetSession Interface - ok
20:06:50.0187 0x1194  [ A1F58FFF448E4099297D6EE0641D4D0E, 47839789332AAF8861F7731BF2D3FBB5E0991EA0D0B457BB4C8C1784F76C73DC ] C:\Users\Charlie\AppData\Local\Dropbox\Update\DropboxUpdate.exe
20:06:50.0198 0x1194  Dropbox Update - ok
20:06:50.0357 0x1194  [ 2C110244C2FCE86BD17E1E8854FE2AE1, 99295FAFA9E98E9C6284C437269F2F7DCB058D040D1B65720DCE49B8CEC6D658 ] C:\Program Files (x86)\i-Funbox DevTeam\iFunBox_x64.exe
20:06:50.0901 0x1194  iFunBox - detected UnsignedFile.Multi.Generic ( 1 )
20:06:52.0064 0x1194  Detect skipped due to KSN trusted
20:06:52.0064 0x1194  iFunBox - ok
20:06:52.0185 0x1194  [ 11B4662A4DD118132E2648837920AF86, 7643E9CF00C0393ED4A1D294DABA84DCEB6BE696E5B520D413284BAB16CE1CD5 ] C:\Users\Charlie\AppData\Roaming\Spotify\SpotifyWebHelper.exe
20:06:52.0250 0x1194  Spotify Web Helper - ok
20:06:52.0509 0x1194  [ 6F8EDF5A5D23AD1F4FC168047C80ECE4, CAA605301395B70E724688515936A6C84F90D18EFFBF21CEDD336268AACA8D02 ] C:\Users\Charlie\AppData\Roaming\Spotify\Spotify.exe
20:06:52.0807 0x1194  Spotify - ok
20:06:52.0929 0x1194  [ 44348495F9D6ED21F4EFB3FF80677D99, 05B76248764B2BF7F9229626D7EFAFF96B724D38A82969EBE376CBE879E30450 ] C:\Users\Charlie\AppData\Local\Microsoft\OneDrive\OneDrive.exe
20:06:53.0021 0x1194  OneDrive - ok
20:06:53.0132 0x1194  [ 6DB9A0FBDA5556B925D64651D57031D3, AE4C9196EFD61B973F93FDDAA001F7C239100EDD7E3F840927C0C07B08C69C04 ] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
20:06:53.0160 0x1194  iCloudServices - ok
20:06:53.0188 0x1194  [ DD854D7F89E3994DA48490E9C440036A, 25775650B62015D6F612C77ADCC7A31E019AEBDC2D40BB9EA1DA620F8B124007 ] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
20:06:53.0197 0x1194  iCloudDrive - ok
20:06:53.0228 0x1194  [ 3C9A02CB0C05C96263E2193C7B728930, 4B948C9DF036228145B60BA0327F259694D0812B99F92BDBBB2CD6ED997E9A13 ] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe
20:06:53.0246 0x1194  iCloudPhotos - ok
20:06:53.0273 0x1194  [ F1F940D766026D99DCCB999168CC1E73, FC947CC3E10D220D62004354EE731F874762C4298DB6DCC5E7DBA2FC46A4677D ] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
20:06:53.0283 0x1194  ApplePhotoStreams - ok
20:06:53.0594 0x1194  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
20:06:53.0822 0x1194  OneDriveSetup - ok
20:06:53.0917 0x1194  [ 2781E6EF593909A8B73FE1AD397F778A, E892D6C57F8903E20129E75A9B877690229280FD8106B5C7F96173175EA1AC4E ] C:\Program Files (x86)\Windows Mail\wab.exe
20:06:53.0989 0x1194  WAB Migrate - ok
20:06:53.0990 0x1194  Waiting for KSN requests completion. In queue: 18
20:06:54.0990 0x1194  Waiting for KSN requests completion. In queue: 18
20:06:55.0155 0x0f10  Object required for P2P: [ 6F8EDF5A5D23AD1F4FC168047C80ECE4 ] C:\Users\Charlie\AppData\Roaming\Spotify\Spotify.exe
20:06:55.0991 0x1194  Waiting for KSN requests completion. In queue: 7
20:06:56.0488 0x0f10  Object send P2P result: true
20:06:57.0070 0x1194  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.187 ), 0x61100 ( enabled : updated )
20:06:57.0097 0x1194  Win FW state via NFP2: enabled ( trusted )
20:06:58.0272 0x1194  ============================================================
20:06:58.0272 0x1194  Scan finished
20:06:58.0272 0x1194  ============================================================
20:06:58.0283 0x1230  Detected object count: 2
20:06:58.0284 0x1230  Actual detected object count: 2
20:10:28.0744 0x1230  fischerUpdateSvc ( UnsignedFile.Multi.Generic ) - skipped by user
20:10:28.0744 0x1230  fischerUpdateSvc ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:10:28.0744 0x1230  OpenVPNService ( UnsignedFile.Multi.Generic ) - skipped by user
20:10:28.0744 0x1230  OpenVPNService ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:10:44.0459 0x2724  Deinitialize success

cosinus 16.01.2017 12:55
Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher lschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schliee alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewhlt sind:
    • "Tracing" Schlssel lschen
    • Winsock Einstellungen zurcksetzen
    • Proxy Einstellungen zurcksetzen
    • Internet Explorer Richtlinien zurcksetzen
    • Chrome Richtlinien zurcksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewhlt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Lschen und besttige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart ffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nchsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder hher) bitte mit Rechtsklick "als Administrator ausfhren" starten.
  • Drcke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nchsten Antwort.


chaaali 16.01.2017 19:00
Code:
# AdwCleaner v6.042 - Bericht erstellt am 16/01/2017 um 18:45:15
# Aktualisiert am 06/01/2017 von Malwarebytes
# Datenbank : 2017-01-15.1 [Server]
# Betriebssystem : Windows 10 Home  (X64)
# Benutzername : Charlie - CHARLIE-VAIO
# Gestartet von : C:\Users\Charlie\Desktop\AdwCleaner_6.042.exe
# Modus: Lschen
# Untersttzung : https://www.malwarebytes.com/support



***** [ Dienste ] *****



***** [ Ordner ] *****

[-] Ordner gelscht: C:\ProgramData\5a4cf8ca-080e-48f6-b512-229638b7ce10
[-] Ordner gelscht: C:\Users\Charlie\AppData\Roaming\.acestream
[-] Ordner gelscht: C:\Users\Charlie\AppData\Roaming\acestream
[-] Ordner gelscht: C:\Users\Charlie\AppData\Roaming\Auslogics


***** [ Dateien ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Verknpfungen ] *****



***** [ Aufgabenplanung ] *****



***** [ Registrierungsdatenbank ] *****

[-] Schlssel gelscht: HKU\S-1-5-21-1747016203-3155398904-578371931-1000\Software\Classes\acestream
[#] Schlssel mit Neustart gelscht: HKCU\Software\Classes\acestream
[-] Schlssel gelscht: HKLM\SOFTWARE\Classes\.acestream
[#] Schlssel mit Neustart gelscht: [x64] HKCU\Software\Classes\acestream
[#] Schlssel mit Neustart gelscht: [x64] HKLM\SOFTWARE\Classes\.acestream
[-] Schlssel gelscht: HKU\.DEFAULT\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
[-] Schlssel gelscht: HKU\S-1-5-21-1747016203-3155398904-578371931-1000\Software\reimagerepair
[-] Schlssel gelscht: HKU\S-1-5-21-1747016203-3155398904-578371931-1000\Software\WEBAPP
[#] Schlssel mit Neustart gelscht: HKU\S-1-5-18\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
[#] Schlssel mit Neustart gelscht: HKCU\Software\reimagerepair
[#] Schlssel mit Neustart gelscht: HKCU\Software\WEBAPP
[-] Schlssel gelscht: HKLM\SOFTWARE\Auslogics
[#] Schlssel mit Neustart gelscht: [x64] HKCU\Software\reimagerepair
[#] Schlssel mit Neustart gelscht: [x64] HKCU\Software\WEBAPP
[-] Schlssel gelscht: [x64] HKLM\SOFTWARE\Reimage
[-] Schlssel gelscht: [x64] HKLM\SOFTWARE\Auslogics
[-] Schlssel gelscht: HKU\S-1-5-21-1747016203-3155398904-578371931-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Daten  wiederhergestellt: HKU\S-1-5-21-1747016203-3155398904-578371931-1000\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[#] Schlssel mit Neustart gelscht: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Daten  wiederhergestellt: HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[#] Schlssel mit Neustart gelscht: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Daten  wiederhergestellt: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Schlssel gelscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\st.chatango.com
[-] Schlssel gelscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\st.chatango.com
[#] Schlssel mit Neustart gelscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\st.chatango.com
[#] Schlssel mit Neustart gelscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\st.chatango.com


***** [ Browser ] *****



*************************

:: "Tracing" Schlssel gelscht
:: Winsock Einstellungen zurckgesetzt
:: Proxy Einstellungen zurckgesetzt
:: Internet Explorer Richtlinien gelscht
:: Chrome Richtlinien gelscht

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [4245 Bytes] - [16/01/2017 18:45:15]
C:\AdwCleaner\AdwCleaner[R0].txt - [1783 Bytes] - [22/12/2014 09:55:05]
C:\AdwCleaner\AdwCleaner[S0].txt - [1712 Bytes] - [22/12/2014 09:58:41]
C:\AdwCleaner\AdwCleaner[S1].txt - [4296 Bytes] - [16/01/2017 18:44:26]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [4537 Bytes] ##########


Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.0 (12.05.2016)
Operating System: Windows 10 Home x64
Ran by Charlie (Administrator) on 16.01.2017 at 18:53:06,92
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 184

Successfully deleted: C:\Users\Charlie\AppData\Local\{0034DB09-6D8D-4557-813E-619B3DF70D05} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{01CFCCD8-9231-4EFB-91A4-C0434847DA6F} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{03D35EB0-878F-40DB-A83A-5DBBE73E330C} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{041BE7CE-7F2A-4115-8104-4B2DA12E59DD} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{05C0E8A0-C413-4CE7-B074-9E545514ECC5} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{0A1E7011-5359-4E2F-94C3-DE18AD94B762} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{0DE59BCD-7511-4CF4-8D30-35998E42B3FF} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{1271F2B0-7F17-4133-B7C5-D12A66F7787F} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{13DF42DD-A944-4003-BD58-859C21840831} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{1455A5EC-715F-42B7-A052-12970203FAC9} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{17925830-4F6F-4DB2-A512-EB52CB2813B9} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{1E96EB41-39C9-4ED8-B793-6C56B0AE55D4} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{1F9C35C0-D981-49F0-B13D-A1759DE317F8} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{1FC26EE2-3409-43E8-A757-27D1FFFB724E} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{207984A8-E451-4879-9AC4-08E451D9CCD4} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{2512A1AA-4A0E-497C-80E5-458BA24DFBF1} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{272C943E-1C2B-41BE-B44C-628CFD78026B} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{28359933-3B14-4936-9B12-1A4BD4DBE230} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{29E4ED1E-5B96-4D46-BCD1-BD3E9465467B} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{2BBA781A-96B5-46D0-B112-5343E6AD840B} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{2C205537-DAC1-492F-9AA4-2224FC2843C6} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{2C34737D-E00B-412D-AC1B-CC2B36D3A69D} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{2C79B5B6-5B79-4355-9454-DBE09A9C120A} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{2D21CEB7-BBE1-4C55-883D-379E5C37DC4A} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{2D5C4EF8-0A29-4362-9E30-BDE68DC3F550} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{2E77C56F-1489-4F85-905F-3ADBB8BEBF78} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{31A96B96-00C3-4C9A-93D1-33707E87A9D2} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{3318F65A-F00C-4AB3-9B68-9AF1270C34C9} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{34D7018C-2260-43E8-B6AA-F704E74F622E} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{34F8B1C6-F4E0-480E-8428-0753EB348D28} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{38BB196D-DAB7-46D3-8272-79C71D91A382} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{38FAFE4B-4B40-4211-87C3-05C997154CFF} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{39ED49DD-177C-4128-A0F4-32F0F83493E1} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{3A5E53B7-B43F-4FC6-833C-D78493F3E6E8} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{3B0F5050-A256-4DB5-BFEB-BB82D4514282} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{3B8CAE4B-CAC1-49AB-9753-BCE2E60C394D} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{3BDD7386-3CDE-47CB-80D7-541D89EC7FB3} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{3CC250A8-7A0D-476F-A68E-F531C6AFEE04} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{3E6264A6-9B2B-4B2D-95B1-83245F6CF419} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{3F324E19-9A40-40CD-B986-CBF80F0D948E} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{3F7D6659-7B29-4253-B0FC-C2FED8B2F925} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{41AD2E8D-D29B-495C-B8A1-5345C8F1C706} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{44715C76-4EC5-462A-85E3-D3F63A29E822} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{46C8E716-8BDD-474E-BF07-367FBD490428} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{4759B7EB-AD18-4245-AF51-C4D0EE793A17} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{47C46F56-9CD6-471C-A701-906B50C597CD} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{47E49B6F-983E-4F82-82D1-A23318342D96} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{49310E4C-D345-4947-A111-387B76018DDB} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{496A2B71-FA90-46DD-BCB2-DD5B3862C11F} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{4A095932-6C39-481C-8BE7-B342ACF63C79} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{4A207CFC-F583-4DE3-8A0E-12D0FEAAED44} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{4B4A7F67-F26C-48A7-B80A-05E27768D2E6} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{4C721983-3E60-4488-94A2-DD65D015D874} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{4DD6931C-0C12-4916-9AF3-F94C196081FE} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{4DFB3BB3-FB43-4683-8165-548A6355E510} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{4F21A594-E11C-48BD-8789-0C084F85BC61} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{5018D319-CD02-44DF-A1DA-7B6F6D37F452} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{50B0A972-321E-4F94-9D93-2701B168814A} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{513935F4-E4EB-43EA-B0E8-91FF7388804F} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{52DF36C2-69BF-4D4D-BD19-A7FFE535AF33} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{54068701-2616-48C8-A589-DE9AA612AAB6} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{59F8FBA3-5DDD-4B5B-A8EF-203EDE62CC9D} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{5A78E51B-FB10-477B-86A3-AAE478BB0379} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{5B0C68D8-4D39-42EE-A3F1-4C54E7A7130E} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{5DA2E9A0-3BE1-40AE-A750-9252954C648C} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{5DD41329-31AE-44DD-823D-C6DF08925DDC} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{5E77F749-02C2-48C7-BA23-2D6CA6591A27} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{60B19A51-0AC6-40C8-BFAD-386EC2121942} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{6150F84C-8D4F-4857-B4E4-5DDD44B86844} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{62831B29-96AE-4BD8-8FBE-655CD9B18BAF} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{63AA3066-0FB4-4939-9A81-EBCAE84E9268} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{64D0305B-39DD-4697-968B-156A2C478194} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{65CACA87-144D-4BA2-B919-5E4382DBB6A8} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{664F1CAB-7071-4052-9C6A-9FFDAA80E6B3} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{677E0ACD-009A-4BC9-830F-674CE8396DF8} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{683E3714-631D-4F33-9410-AE7FC328ACEF} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{69D15FDE-D9C3-49FB-9BB5-75E22DD36EF4} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{6C2A5644-9523-4128-BB79-BE0F99701153} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{6C3E4EBD-7B7F-4442-8350-C6B7BAD4C569} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{6D9A7364-F04E-475C-A2A1-4EB75F08D581} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{6DC2690E-CBD5-4279-9DE1-3482324BBFAF} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{73DDDCD4-FA6C-4F31-B76E-761A6EC7284D} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{7596FCE3-1512-4C2B-89AB-E7645E8DFA94} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{75F65C61-E58C-47B0-8D65-DDF655157DB5} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{77BAB48E-88C7-4BBC-8971-51DD41892199} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{7A3640A5-901C-4EA4-A6E5-23F9F5C6DE20} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{7C7F45F5-0F60-42FF-B2E2-3608071C7C7B} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{7D53FEA4-8A0B-49FB-A0C5-899999DA8CBD} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{7DD6D2E2-3660-4C1C-AD11-2E551FFDB6D6} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{8012017A-0986-44E0-A317-269D42402E27} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{82FFB189-8070-4F01-8A23-51254C676AC7} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{83034AEE-54E5-45DC-807C-7E26E0E4C547} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{8509B98F-3643-4C5D-AF3B-A798B17195D5} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{8806CD68-CBA3-4F10-8417-032FE646A16B} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{89DEC647-FD02-445E-8B18-298EF2A457F6} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{8A869E6C-5CE2-43AC-8A33-E29A2F86E08C} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{8BA5C270-28D0-4120-B4C7-8166123FFFC1} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{8D5625F2-AD56-47CF-B4CE-FD4AB9A03083} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{910EF6AC-DEB1-47F8-A650-0251833C1AD0} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{9161D117-98CA-4F28-AD03-1FC6C2C0ADF3} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{965E4D36-884C-45C0-9A34-80AB862A201E} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{97CDBE44-B740-4EA3-96E0-60B46BE93653} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{980B9F62-B12C-408C-9FCB-5B8EF04DF248} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{98AC9F71-294F-4239-B1CC-AA9407043C4E} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{98AD6F6F-1938-4C65-A76E-84AB665E6822} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{99AB3170-D0BF-4933-A262-0B1293F6C895} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{9B0C21B5-0ED9-4E51-B39E-6868AE436033} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{9B52F55B-B2BF-4B4C-AEA7-F5E80C70A39E} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{9B797AD1-2AC7-4EBC-98D9-9DF6AE416039} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{9BCC4A55-7681-4CB2-94A1-C713391B7D2C} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{9BE6E69D-5EF2-4DAF-8B40-56C199BD058D} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{9CDCFDEF-1914-411D-B403-1535B1DAF6D4} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{A089DE08-6638-4625-A6C6-85B94A54F614} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{A1A54B18-8CBE-4587-BD06-19415062A8E1} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{A2033412-833A-45C7-AEFF-AE475A798E11} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{A209C74C-ABAC-4FD8-98BF-AF02AA5319E8} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{A7F5408F-8F0A-463D-A14C-469260EFE0DB} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{A808D541-0BA4-41F1-B091-5B52BA6391FA} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{A8BED0F5-AF73-4813-B99A-9147D3D9E5A6} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{AA873AE2-BC74-4EE3-92F9-DBA2EA0E37EB} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{AA97BC2D-BADB-46AD-8CAC-C728AFBA6780} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{AC091B64-501A-46F8-8D77-A2094124FCA2} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{AC9C6B4A-CC0E-4494-930D-DDBECBF914B2} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{AD742EDD-EFD2-45F1-B0CF-33A45C14A33C} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{AF79F0AC-8587-4F62-8030-32CEB4C80BD8} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{AF9B8F9D-128F-470D-80D7-5296B0413BDD} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{B081BCEE-0713-4698-A022-9B40611EF0F6} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{B1D8C647-67FB-4760-B74C-D9A555FF45CA} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{B527AAEA-A32E-4F44-AAE9-C58E04354739} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{B5765C3F-F120-484B-B45F-C035217CA554} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{B7FAF530-0E3C-423F-A344-30B225CF8E9B} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{B8A6FC6E-77F3-49A8-B9DE-7B0575F5509B} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{B8F63723-9424-46FA-BA46-1EF0976BD871} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{B94C545F-A3B6-4772-BE8D-ED7ED74DFED3} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{B9BB811D-3D47-48C2-B78F-8DB16FCDF2FA} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{BB31A865-842E-4342-BBD2-28F4D2475E73} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{BBAC1EB1-953E-418F-B588-757285FFEEC8} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{BCF15C20-7B37-4623-97F9-2E1B163C3340} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{BF316626-2F4A-4632-8EAC-96A3E518B3CA} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{C44779D8-83DB-4052-86BE-9764F1CA1C4A} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{C4711C99-23A6-4D4D-85BA-ED21E8D3080D} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{C675E683-AFCF-433B-B195-4E308889F9C9} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{C78EC3AD-2B5E-423A-AE41-67E6595BC9FE} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{C79EB4CD-5E98-412A-96D8-CFEE96D61101} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{C7C3BFEB-928F-4F03-B40C-D6D863AEDB55} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{CD66A5FB-EB12-4505-8430-E2063906764F} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{CE23C9D3-4DBE-402E-A747-1059D9E54517} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{CEBEB9F1-629B-498B-80B5-877373DB4071} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{CF03D467-803E-4A13-B0F0-F4B71C09B091} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{CF83DF44-C104-4D67-9872-EC3C56A6FE59} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{D0E57753-8EC6-4175-BB0D-AE43289C17C7} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{D0EF0966-C181-4F6F-98AB-A3E34D532883} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{D335FB6F-6837-400E-8F21-CEB32DE42CCB} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{D479E39A-C956-43A5-B7B8-8524D6D8A17E} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{D62BD721-9F3D-49D4-AD30-7778B6DEA55D} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{D661D175-DD3B-49B5-B08E-0348DB130D4C} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{D993B2E5-C5F0-45D4-AD53-5D2818785AFF} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{D9A5F79E-78BC-41E0-8707-F57732C8E013} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{DC223EC3-CBB3-4F2B-88CB-EAE82DE167D7} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{DD1215E0-1685-486F-979C-9D1ACF8560EC} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{DEBFED84-35FB-48A6-B0A6-354887157AA9} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{DF02BA6D-48BB-4F14-89B9-780072AFD6C5} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{E234C96F-32FD-4779-93FE-27249CFE69DE} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{E36C4951-D17C-4E08-8EC5-3A09EE823D6F} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{E3D2D4EF-4D85-4584-A867-26B8A4DB80C1} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{E5D54069-F38A-4044-AD0F-0E66304CA658} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{E70AAACC-0947-4D8E-AC09-AC384F272CF8} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{E8011DC2-F250-4E5C-9F40-116A226AC0E9} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{E8CF54D5-8BDF-48ED-9FC5-324D67441BBD} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{E94E0E96-6EC8-4B2C-B96A-C8E3386EDD7A} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{EA920674-1B64-43A0-BE30-F144DAC57184} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{EB8FE078-0B38-40D2-990F-76049B1C476F} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{ED5A5A36-9F88-4429-9D21-7AD53BB0D39C} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{ED89F22C-0787-42D3-A71A-5DDF1273AC11} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{EFAE3B03-8531-4107-8E73-0F42AB487120} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{F02CA6F4-C4DD-4A0C-BC25-9B5A809E7008} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{F160BF0D-882B-43CC-AC69-50C7627B3A9C} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{F3B18F61-1ED6-490C-AF4C-47830C1BB511} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{F3B708FE-3C6D-411E-8AAB-3E9546B7C6B5} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{F67866CB-FA2C-44F9-BB46-E1AD6F2BF967} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{F6DFBED8-BCAB-4F3D-9C4E-63ECC7C9B4CD} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{F9E9531F-F06B-49AB-A42D-44CD9EDD8122} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{FA691CAD-EE2E-47CE-8808-438C758D7C6C} (Empty Folder)
Successfully deleted: C:\Users\Charlie\AppData\Local\{FEDBE182-74C6-4F78-A82F-8C0947029A4A} (Empty Folder)



Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16.01.2017 at 18:57:56,78
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

cosinus 16.01.2017 22:16
adwcleaner zwecks Kontrolle bitte wiederholen

chaaali 17.01.2017 20:10
Code:
# AdwCleaner v6.042 - Bericht erstellt am 17/01/2017 um 20:08:44
# Aktualisiert am 06/01/2017 von Malwarebytes
# Datenbank : 2017-01-17.2 [Server]
# Betriebssystem : Windows 10 Home  (X64)
# Benutzername : Charlie - CHARLIE-VAIO
# Gestartet von : C:\Users\Charlie\Desktop\AdwCleaner_6.042.exe
# Modus: Suchlauf
# Untersttzung : https://www.malwarebytes.com/support



***** [ Dienste ] *****

Keine schdlichen Dienste gefunden.


***** [ Ordner ] *****

Keine schdlichen Ordner gefunden.


***** [ Dateien ] *****

Keine schdlichen Dateien gefunden.


***** [ DLL ] *****

Keine infizierten DLLs gefunden.


***** [ WMI ] *****

Keine schdlichen Schlssel gefunden.


***** [ Verknpfungen ] *****

Keine infizierten Verknpfungen gefunden.


***** [ Aufgabenplanung ] *****

Keine schdlichen Aufgaben gefunden.


***** [ Registrierungsdatenbank ] *****

Keine schdlichen Elemente in der Registrierungsdatenbank gefunden.


***** [ Internetbrowser ] *****

Keine schdlichen Elemente in Firefox basierten Browsern gefunden.
Keine schdlichen Elemente in Chrome basierten Browsern gefunden.

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [4656 Bytes] - [16/01/2017 18:45:15]
C:\AdwCleaner\AdwCleaner[R0].txt - [1783 Bytes] - [22/12/2014 09:55:05]
C:\AdwCleaner\AdwCleaner[S0].txt - [1712 Bytes] - [22/12/2014 09:58:41]
C:\AdwCleaner\AdwCleaner[S1].txt - [4296 Bytes] - [16/01/2017 18:44:26]
C:\AdwCleaner\AdwCleaner[S2].txt - [1487 Bytes] - [17/01/2017 20:08:44]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1560 Bytes] ##########

cosinus 18.01.2017 11:06
Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken

http://www.trojaner-board.de/picture...&pictureid=611


Alle Zeitangaben in WEZ +1. Es ist jetzt 07:38 Uhr.
Seite 1 von 2 1 2
100 Beitrge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131