Trojaner-Board - Fraud.Foxit.daws-wird ständig von spybot gefunden

Trojaner-Board (https://www.trojaner-board.de/)

- Mülltonne (https://www.trojaner-board.de/muelltonne/)

- - Fraud.Foxit.daws-wird ständig von spybot gefunden (https://www.trojaner-board.de/181594-fraud-foxit-daws-staendig-spybot-gefunden.html)

Meine Güte, wir sind hier in einer Bereinigung. Dein tolles Avast wird dafürnicht benötigt. Und es stört sogar wenn es noch aktiv ist und Malware entfernt werden muss.

Und mal ganz ehrlich, du machst dir Gedanken darüber, dass dein toller "Schutz" nach der Deinstallation weg sei, obwohl der supertolle Schutz die Infektion nicht verhindern konnte? Echt jetzt? :wtf:

der"supertolle schutz" wie du ihn nennst, wurde erst nach der infektion aufgespielt.

wollen wir uns nun wieder auf das wesentliche konzentrieren ? die "bereinigung" :-D

Du reitest auf solchen Dingen herum verlangst aber von anderen sich auf das Wesentliche zu konzentrieren? Du solltest mal überlegen wer hier was ausgelöst hat bevor du solche Sprüche ablässt!

Und der supertolle Schutz hätte btw auch nicht zum ersten Mal versagt...aber das ist ein anderes Thema

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlaufdatum: 06.09.2016

Suchlaufzeit: 22:13

Protokolldatei: test.txt

Administrator: Ja
 

Version: 2.2.1.1043

Malware-Datenbank: v2016.09.06.08

Rootkit-Datenbank: v2016.08.15.01

Lizenz: Kostenlose Version

Malware-Schutz: Deaktiviert

Schutz vor bösartigen Websites: Deaktiviert

Selbstschutz: Deaktiviert
 

Betriebssystem: Windows 10

CPU: x64

Dateisystem: NTFS

Benutzer: ascard
 

Suchlauftyp: Bedrohungssuchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 436967

Abgelaufene Zeit: 13 Min., 57 Sek.
 

Speicher: Aktiviert

Start: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Aktiviert

Heuristik: Aktiviert

PUP: Aktiviert

PUM: Aktiviert
 

Prozesse: 0

(keine bösartigen Elemente erkannt)
 

Module: 0

(keine bösartigen Elemente erkannt)
 

Registrierungsschlüssel: 0

(keine bösartigen Elemente erkannt)
 

Registrierungswerte: 0

(keine bösartigen Elemente erkannt)
 

Registrierungsdaten: 0

(keine bösartigen Elemente erkannt)
 

Ordner: 0

(keine bösartigen Elemente erkannt)
 

Dateien: 0

(keine bösartigen Elemente erkannt)
 

Physische Sektoren: 0

(keine bösartigen Elemente erkannt)
 
 

(end)

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Code:

# AdwCleaner v6.010 - Bericht erstellt am 06/09/2016 um 22:51:47

# Aktualisiert am 12/08/2016 von ToolsLib

# Datenbank : 2016-09-06.1 [Server]

# Betriebssystem : Windows 10 Home  (X64)

# Benutzername : ascard - ASCARD-PC

# Gestartet von : C:\Users\ascard\Desktop\AdwCleaner_6.010(1).exe

# Modus: Löschen

# Unterstützung : https://toolslib.net/forum
 
 
 

***** [ Dienste ] *****
 

[-] Dienst gelöscht: scan
 
 

***** [ Ordner ] *****
 

[-] Ordner gelöscht: C:\Users\ascard\AppData\Roaming\ParetoLogic

[-] Ordner gelöscht: C:\ProgramData\ParetoLogic

[-] Ordner gelöscht: C:\Program Files (x86)\ParetoLogic

[-] Ordner gelöscht: C:\Program Files (x86)\Common Files\ParetoLogic
 
 

***** [ Dateien ] *****
 
 
 

***** [ DLL ] *****
 
 
 

***** [ WMI ] *****
 
 
 

***** [ Verknüpfungen ] *****
 
 
 

***** [ Aufgabenplanung ] *****
 
 
 

***** [ Registrierungsdatenbank ] *****
 

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\uus3url-pl

[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\CLSID\{65416821-217D-44BD-9C61-F53398FB1B46}

[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\CLSID\{6DFC0DC7-FDC5-44C2-8B80-5977BA8F8ACC}

[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\CLSID\{E5AFF088-92F8-41a9-8CAB-E9CDCCE967AC}

[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\CLSID\{4ABDD67C-44E3-42E0-816D-D7F0E54761DF}

[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\CLSID\{94915A56-4D71-4F85-B59C-CC040F5AC6F0}

[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\Interface\{65416821-217D-44BD-9C61-F53398FB1B46}

[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\Interface\{4ABDD67C-44E3-42E0-816D-D7F0E54761DF}

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{65416821-217D-44BD-9C61-F53398FB1B46}

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{4ABDD67C-44E3-42E0-816D-D7F0E54761DF}

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\TypeLib\{34F4FEAF-4921-4B5D-8BE5-CA384BFFC2CE}

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\TypeLib\{39A37965-0A96-43A3-870E-821FE5C84B0B}

[-] Schlüssel gelöscht: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\Software\ParetoLogic

[#] Schlüssel mit Neustart gelöscht: HKCU\Software\ParetoLogic

[-] Schlüssel gelöscht: HKLM\SOFTWARE\ParetoLogic
 
 

***** [ Browser ] *****
 
 
 

*************************
 

:: "Tracing" Schlüssel gelöscht

:: Winsock Einstellungen zurückgesetzt

:: "Image File Execution Options" Schlüssel gelöscht

:: "Prefetch" Dateien gelöscht

:: Proxy Einstellungen zurückgesetzt

:: Internet Explorer Richtlinien gelöscht

:: Chrome Richtlinien gelöscht
 

*************************
 

C:\AdwCleaner\AdwCleaner[C1].txt - [2631 Bytes] - [01/04/2016 09:05:52]

C:\AdwCleaner\AdwCleaner[C2].txt - [1602 Bytes] - [20/07/2016 22:23:04]

C:\AdwCleaner\AdwCleaner[C3].txt - [2366 Bytes] - [13/08/2016 10:06:07]

C:\AdwCleaner\AdwCleaner[C4].txt - [2277 Bytes] - [13/08/2016 12:59:58]

C:\AdwCleaner\AdwCleaner[C5].txt - [5564 Bytes] - [02/09/2016 21:38:35]

C:\AdwCleaner\AdwCleaner[C6].txt - [2416 Bytes] - [04/09/2016 13:55:53]

C:\AdwCleaner\AdwCleaner[C7].txt - [2729 Bytes] - [04/09/2016 14:08:13]

C:\AdwCleaner\AdwCleaner[C8].txt - [3137 Bytes] - [06/09/2016 22:51:47]

C:\AdwCleaner\AdwCleaner[R0].txt - [3965 Bytes] - [25/04/2015 08:57:44]

C:\AdwCleaner\AdwCleaner[R1].txt - [1234 Bytes] - [25/04/2015 09:06:25]

C:\AdwCleaner\AdwCleaner[S0].txt - [3897 Bytes] - [25/04/2015 08:59:16]

C:\AdwCleaner\AdwCleaner[S10].txt - [2573 Bytes] - [02/09/2016 22:27:19]

C:\AdwCleaner\AdwCleaner[S11].txt - [2647 Bytes] - [03/09/2016 08:56:07]

C:\AdwCleaner\AdwCleaner[S12].txt - [2721 Bytes] - [04/09/2016 13:55:36]

C:\AdwCleaner\AdwCleaner[S13].txt - [2868 Bytes] - [04/09/2016 14:06:58]

C:\AdwCleaner\AdwCleaner[S14].txt - [3015 Bytes] - [04/09/2016 23:40:13]

C:\AdwCleaner\AdwCleaner[S15].txt - [4479 Bytes] - [06/09/2016 22:51:17]

C:\AdwCleaner\AdwCleaner[S1].txt - [4036 Bytes] - [25/04/2015 09:07:35]

C:\AdwCleaner\AdwCleaner[S2].txt - [1192 Bytes] - [01/04/2016 09:09:11]

C:\AdwCleaner\AdwCleaner[S3].txt - [1630 Bytes] - [20/07/2016 22:21:00]

C:\AdwCleaner\AdwCleaner[S4].txt - [1418 Bytes] - [20/07/2016 22:27:07]

C:\AdwCleaner\AdwCleaner[S5].txt - [2415 Bytes] - [13/08/2016 10:05:49]

C:\AdwCleaner\AdwCleaner[S6].txt - [1936 Bytes] - [13/08/2016 10:09:53]

C:\AdwCleaner\AdwCleaner[S7].txt - [2356 Bytes] - [13/08/2016 12:57:56]

C:\AdwCleaner\AdwCleaner[S8].txt - [5498 Bytes] - [02/09/2016 21:37:23]

C:\AdwCleaner\AdwCleaner[S9].txt - [2498 Bytes] - [02/09/2016 21:53:53]
 

########## EOF - C:\AdwCleaner\AdwCleaner[C8].txt - [4530 Bytes] ##########

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 8.0.7 (07.03.2016)

Operating System: Windows 10 Home x64 

Ran by ascard (Administrator) on 06.09.2016 at 22:56:10,06

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

File System: 0 
 
 
 
 

Registry: 0 
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 06.09.2016 at 22:58:01,18

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken

http://www.trojaner-board.de/picture...&pictureid=611

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 31-08-2016

durchgeführt von ascard (06-09-2016 23:06:39)

Gestartet von C:\Users\ascard\Desktop

Windows 10 Home Version 1607 (X64) (2016-08-10 13:13:25)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-767237098-4183446396-2625044690-500 - Administrator - Disabled)

ascard (S-1-5-21-767237098-4183446396-2625044690-1002 - Administrator - Enabled) => C:\Users\ascard

DefaultAccount (S-1-5-21-767237098-4183446396-2625044690-503 - Limited - Disabled)

Gast (S-1-5-21-767237098-4183446396-2625044690-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-767237098-4183446396-2625044690-1003 - Limited - Enabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}

AS: Spybot - Search and Destroy (Enabled - Up to date) {A16C3F68-9280-E053-1818-342707FECF4D}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.100 - NTI Corporation)

Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{A0382E3C-7384-429A-9BFA-AF5888E5A193}) (Version: 1.5.3501.00 - CyberLink Corp.)

Acer Crystal Eye Webcam (x32 Version: 1.5.3501.00 - CyberLink Corp.) Hidden

Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3010 - Acer Incorporated)

Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3508 - Acer Incorporated)

Acer Instant Update Service (HKLM\...\{682EC6E8-A300-45FD-8F09-0F3A6EA334D6}) (Version: 1.00.3004 - Acer Incorporated)

Adobe Acrobat 7.0 Professional - English, Français, Deutsch (HKLM-x32\...\Adobe Acrobat 7.0 Professional - English, Français, Deutsch - V) (Version: 7.0.0 - Adobe Systems)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.017.20053 - Adobe Systems Incorporated)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 22.0.0.153 - Adobe Systems Incorporated)

Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)

Adobe Illustrator CS2 (HKLM-x32\...\Adobe Illustrator CS2) (Version: 12.000.000 - Adobe Systems Inc.)

Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)

ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.100.2020.212 - Alps Electric)

Amazon Cloud Drive (HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\Amazon Cloud Drive) (Version: 2.4.2.25 - Amazon Digital Services, LLC.)

Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Atheros Bluetooth Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.4.0.126 - Atheros)

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.8.8 - Atheros Communications Inc.)

Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)

Backup Manager V3 (x32 Version: 3.0.0.100 - NTI Corporation) Hidden

Boris Graffiti 6 for Corel VideoStudio Pro X8 64-Bit (HKLM\...\{C0AC7ED4-3714-499D-849B-77396A04591C}) (Version: 6.1.0010 - Boris FX, Inc.)

calibre 64bit (HKLM\...\{872CC218-5C6E-4598-B9C1-3B72BDB2BE44}) (Version: 2.40.0 - Kovid Goyal)

Camtasia Studio 8 (HKLM-x32\...\{A2A41B60-D51F-4C04-BC94-B4C94F7B6DC0}) (Version: 8.6.0.2054 - TechSmith Corporation)

Capture NX-D (HKLM\...\{794529D3-D489-4CF2-B2ED-CF241809E5EC}) (Version: 1.3.0 - Nikon Corporation)

CCleaner (HKLM\...\CCleaner) (Version: 5.21 - Piriform)

Classic Shell (HKLM\...\{383BB30A-B4A7-4666-9A83-22CFA8640097}) (Version: 4.3.0 - IvoSoft)

clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.00.3004 - Acer Incorporated)

clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.00.3004 - Acer Incorporated)

clear.fi SDK - MVP 2 (x32 Version: 2.0.1505 - CyberLink Corp.) Hidden

clear.fi SDK- Movie 2 (x32 Version: 2.0.1502 - CyberLink Corp.) Hidden

Comic Life 3 (HKLM-x32\...\{F028B2F8-42B1-4C82-9978-6251E11D475C}) (Version: 3.1.2.32215 - plasq LLC)

Contents64 (Version: 18.0.0.181 - Corel Corporation) Hidden

Corel VideoStudio Ultimate X8 (HKLM-x32\...\_{A22A80C4-F237-4B5A-825F-0731971ECBE6}) (Version: 18.6.0.6 - Corel Corporation)

CrazyTalk v6.21 SE (HKLM-x32\...\{60CE924D-12CB-4A96-8B75-18F92CE1D585}) (Version: 6.21.2325.1 - Reallusion)

CyberLink MediaEspresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.3318_45364 - CyberLink Corp.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Dropbox (HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\Dropbox) (Version: 8.4.21 - Dropbox, Inc.)

EPSON BX630FW Series Printer Uninstall (HKLM\...\EPSON BX630FW Series) (Version:  - SEIKO EPSON Corporation)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)

EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)

Evernote v. 4.5.2 (HKLM-x32\...\{F77EF646-19EB-11E1-9A9E-984BE15F174E}) (Version: 4.5.2.5866 - Evernote Corp.)

Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.)

Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)

Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden

ICA (x32 Version: 18.0.0.181 - Corel Corporation) Hidden

Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)

Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation)

Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version:  - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3304 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)

Intel(R) Update Manager (HKLM-x32\...\{6E8699D5-6A81-4339-A21A-1FE8D33D293B}) (Version: 3.2.1289 - Intel Corporation)

Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.9.254 - Intel Corporation)

Intel® SSD Toolbox (HKLM-x32\...\{06D085C8-1F00-11B2-96A7-8f0CE39193ED}) (Version: 3.3.6.400 - Intel Corporation)

Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation)

Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version:  - Intel Corporation)

IPM_VS_Pro64 (Version: 18.0 - Corel Corporation) Hidden

Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.15 - Acer Inc.)

Logitech Alert Commander (HKLM-x32\...\{9C815CCE-8A56-4C1E-A3CA-D1BA519882BC}) (Version: 3.5.97 - Ihr Firmenname)

MAGIX Fonts Package 1 (x32 Version: 1.0.0.0 - MAGIX AG) Hidden

MAGIX Speed burnR (MSI) (HKLM-x32\...\MX.{F069033B-2F1F-495C-B641-660DC012CAF2}) (Version: 7.0.2.6 - MAGIX Software GmbH)

MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX Software GmbH) Hidden

Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)

ManyCam 3.0.80 (remove only) (HKLM-x32\...\ManyCam) (Version: 3.0.80 - ManyCam LLC)

Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)

Mozilla Firefox 48.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 48.0.2 (x86 de)) (Version: 48.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 48.0.2.6079 - Mozilla)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden

MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden

MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.19 - Egis Technology Inc.)

MyWinLocker Suite (x32 Version: 4.0.14.19 - Egis Technology Inc.) Hidden

Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.2.0 - Nikon Corporation)

NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)

NVIDIA Grafiktreiber 364.72 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 364.72 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)

Picture Control Utility 2 (HKLM\...\{D4893C47-704F-4B84-8486-9DE4974ACA6F}) (Version: 2.1.1 - Nikon Corporation)

Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

proDAD Adorage 3.0 (64bit) (Version: 3.0.110.2 - proDAD GmbH) Hidden

proDAD Mercalli 2.0 (64bit) (Version: 2.0.120 - proDAD GmbH) Hidden

proDAD Route 4.0 (64bit) (Version: 4.0.233.1 - proDAD GmbH) Hidden

proDAD Script 4.0 (64bit) (Version: 4.0.233.1 - proDAD GmbH) Hidden

proDAD Vitascene 2.0 (64bit) (Version: 2.0.233 - proDAD GmbH) Hidden

Qualcomm Atheros Direct Connect (x32 Version: 3.1 - Qualcomm Atheros) Hidden

Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 3.1 - Qualcomm Atheros)

QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)

Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7592 - Realtek Semiconductor Corp.)

Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.85 - Realtek Semiconductor Corp.)

Red Giant Complete Suite (HKLM\...\{DAFB22DD-9F96-4F76-AFCC-86A0980CA737}) (Version: 11 - Red Giant Software)

Revo Uninstaller 2.0.0 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.0 - VS Revo Group, Ltd.)

SafeZone Stable 1.51.2220.53 (x32 Version: 1.51.2220.53 - Avast Software) Hidden

SageThumbs 2.0.0.22 (HKLM\...\SageThumbs) (Version: 2.0.0.22 - Cherubic Software)

Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.59.0 - Samsung Electronics Co., Ltd.)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)

Setup (x32 Version: 18.0.0.181 - Corel Corporation) Hidden

Share64 (Version: 18.0.0.181 - Corel Corporation) Hidden

SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden

Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden

Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden

Skype™ 7.27 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.27.101 - Skype Technologies S.A.)

Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.1.16052.2 - Samsung Electronics Co., Ltd.)

Smart Switch (x32 Version: 4.1.16052.2 - Samsung Electronics Co., Ltd.) Hidden

Topaz Adjust 4 (64-bit) (Version: 4.1.0 - Topaz Labs) Hidden

Topaz Clean 3 (64-bit) (Version: 3.0.2 - Topaz Labs) Hidden

Topaz DeJpeg 4 (64-bit) (Version: 4.0.2 - Topaz Labs) Hidden

Topaz DeNoise 5 (64-bit) (Version: 5.0.1 - Topaz Labs) Hidden

Topaz Detail 2 (64-bit) (Version: 2.0.5 - Topaz Labs) Hidden

Topaz Fusion Express 2 (64-bit) (Version: 2.0.2 - Topaz Labs) Hidden

Topaz InFocus (64-bit) (Version: 1.0.0 - Topaz Labs) Hidden

Topaz Lens Effects (64-bit) (Version: 1.0.0 - Topaz Labs) Hidden

Topaz ReMask 3 (64-bit) (Version: 3.1.0 - Topaz Labs) Hidden

Topaz Simplify 3 (64-bit) (Version: 3.0.2 - Topaz Labs) Hidden

Überwachungstool für die Intel® Turbo-Boost-Technik 2.5 (HKLM\...\{6C9365EB-1F9E-4893-9196-3EC77C88D0C5}) (Version: 2.5.1.0 - Intel)

Ulead COOL 3D Production Studio (HKLM-x32\...\{BFDC2A9E-70DB-4A33-BAAF-1F995CE33902}) (Version: 1.0 - Ulead Systems)

Ultimate EPubsoft DRM Removal 8.9.1 (HKLM-x32\...\{49617AB8-5A31-44A7-95A6-BE6CE251A6F1}) (Version: 8.9.1 - EPUBSOFT)

VideoStudio MyDVD (HKLM-x32\...\{49D8422A-D54E-425F-8A38-54167B1174A1}) (Version: 1.0 - Corel)

VideoStudio MyDVD (x32 Version: 1.0.112 - Ihr Firmenname) Hidden

ViewNX-i (HKLM\...\{C67A5551-26C1-4C7B-A9DF-AD148549D482}) (Version: 1.1.0 - Nikon Corporation)

VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)

VLC Updater (HKLM-x32\...\VLC Updater) (Version: 1.0 - VLC Updater)

VSClassic64 (Version: 18.0.0.181 - Corel Corporation) Hidden

VSUltimate64 (Version: 18.0.0.181 - Corel Corporation) Hidden

Vulkan Run Time Libraries 1.0.5.1 (HKLM\...\VulkanRT1.0.5.1) (Version: 1.0.5.1 - LunarG, Inc.)

WEB.DE MailCheck für Mozilla Firefox (HKLM-x32\...\1&1 Mail & Media GmbH Toolbar FF) (Version: 3.0.2.1739 - 1&1 Mail & Media GmbH)

Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3507 - Acer Incorporated)

WhatsApp (HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\WhatsApp) (Version: 0.2.1455 - WhatsApp)

Windows 10-Upgrade-Assistent (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.17349 - Microsoft Corporation)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)

WinISO (HKLM-x32\...\WinISO) (Version: 6.4.0.5170 - WinISO Computing Inc.)

WinRAR 5.40 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\ascard\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\FileCoAuth.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {01BFFD1C-206F-46BC-8309-DE4D8C7BF69A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG

Task: {025F302D-48D5-4291-AEBC-5F19D1872393} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG

Task: {090990C0-D8DC-4D67-926F-25AD96B5D1E9} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG

Task: {091B7D86-BB47-4474-989C-480977BCC639} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2011-03-29] (Egis Technology Inc.)

Task: {0A806A92-9173-4FD5-9232-D81FD6674663} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)

Task: {17F65761-CE87-485E-8062-C27A366FF3E6} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG

Task: {1F3986CF-19AB-41D0-85B2-622A314F64EC} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG

Task: {23A21ADB-624C-4A33-996A-211F69D6BEF0} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe

Task: {259CD72B-99E0-47DC-8B65-316A51C227A6} - System32\Tasks\{EBA32A8E-79E8-4E20-89BD-5FA973AF7B4D} => C:\Program Files\Corel\Corel VideoStudio Ultimate X8\vstudio.exe [2015-11-25] (Corel TW Corp.)

Task: {25C55B8E-51C3-452A-B45B-E71DE03EF8E5} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe

Task: {28E225A6-93EC-4F71-81D8-BE2F4F89B74D} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG

Task: {2912901C-A861-4D02-BCD1-1C02F7F5506B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2015-06-16] (Safer-Networking Ltd.)

Task: {2FC085B8-24EA-4D42-9C2C-2F4037BF6958} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-08-05] (Piriform Ltd)

Task: {37BBBAEC-669D-4C05-9ED1-55F89361A720} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-08-13] (Adobe Systems Incorporated)

Task: {387A3A37-5DE6-449A-978D-879ACCFAC4A9} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-09-05] (AVAST Software)

Task: {3EA1AE87-5BDD-4A6A-ACF3-80C825BDFE21} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe

Task: {4368ABD5-7028-4899-AC16-21F8E63B98E6} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe

Task: {4522CA81-ACC7-4F7B-8A87-071ACEA747E0} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-767237098-4183446396-2625044690-1002UA => C:\Users\ascard\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-07] (Dropbox, Inc.)

Task: {462BBEB7-223B-42B8-9137-3B5C96273ED1} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe

Task: {49E69CFD-F091-4064-B274-634729C28D73} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2012-09-18] (CyberLink)

Task: {4A0C4EDA-EB4B-48FA-81EB-90042B1B6F9D} - System32\Tasks\UALU notificatin => C:\Program Files\Acer\Acer Updater\UALU.exe [2012-02-07] (Acer Incorporated)

Task: {4A6C6DD9-79C2-4FBF-AF5C-17517F74C9FF} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe

Task: {4ED6B046-5ED5-43BA-B8AA-124D467D5CE7} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG

Task: {55898F5B-67FB-4983-9EEC-81F773DAECE4} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-767237098-4183446396-2625044690-1002Core => C:\Users\ascard\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-07] (Dropbox, Inc.)

Task: {598F0CF7-4F6A-47E4-BAD8-BB036AC74FB0} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe

Task: {5DD006F9-5955-47EC-B92E-BF68595162BE} - System32\Tasks\{65B280F0-6365-4E24-94F0-A4D23E9E16C8} => pcalua.exe -a C:\Users\ascard\Downloads\LogitechAlertCommander_3.5.97(1).exe -d C:\Users\ascard\Downloads

Task: {5E400A12-8E1E-4828-AEBA-02B8DCDB4A7C} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe

Task: {6557CFC4-944E-4E54-997A-6F2BDAA43F3E} - \Microsoft\Windows\Setup\gwx\rundetector -> Keine Datei <==== ACHTUNG

Task: {733EEED7-6355-4828-B568-5ECA7F0979F1} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe

Task: {748ABC5F-361B-436C-BD2D-D2D3812D2D39} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe

Task: {76D161A8-B21A-48D8-B73B-091CE7214CC7} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2015-06-16] (Safer-Networking Ltd.)

Task: {7CC838A6-397E-464E-A2E2-FAA6974611E3} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG

Task: {97500E21-1C16-4ACA-9B1D-FF3168A72BDE} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe

Task: {9FC87FAA-9F3C-444A-8848-D39622713FFE} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG

Task: {A1726DFA-2535-4BD6-8D1D-9E18ABB27C1C} - System32\Tasks\{5198410F-E2A3-41F6-8852-6740B0156E6B} => C:\Program Files\Corel\Corel VideoStudio Ultimate X8\vstudio.exe [2015-11-25] (Corel TW Corp.)

Task: {A1F9EC48-10A1-4D1B-B962-3612DE8ED19D} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe

Task: {A206A4CA-8FCB-4566-994B-C0A6EBB4EF6B} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe

Task: {A52309FD-C031-45D4-A61D-2DB0216F043F} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe

Task: {A6F5EFB4-080D-4746-ADEA-123B1A31FBD3} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe

Task: {A7B23270-1BCC-44A3-B1CF-0DF77D126428} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe

Task: {A7CAD570-ED2F-42C6-B515-A8F430A52FB9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)

Task: {B6C224C8-2158-4181-A5B1-C2C5D09D796C} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG

Task: {B7467F7D-DEA8-44B8-A07C-6D0692C65414} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG

Task: {B989B3E1-A294-4508-80D3-59AF605F2979} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG

Task: {BF5ADD62-F86B-4E89-986C-53B471D21C43} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2015-06-16] (Safer-Networking Ltd.)

Task: {C1075E9C-1DBA-4889-8D6D-8801FECCF92B} - \Driver Booster SkipUAC (ascard) -> Keine Datei <==== ACHTUNG

Task: {C44E0F95-9DA7-4337-B088-D09F59564136} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-10-08] (Intel Corporation)

Task: {C68C7E38-E209-466A-91C2-1629AF690FC4} - System32\Tasks\{4B620B54-2C8F-450F-BEE5-B8EC1E3A3A0B} => C:\Program Files\Corel\Corel VideoStudio Ultimate X8\vstudio.exe [2015-11-25] (Corel TW Corp.)

Task: {C7A6FA64-1748-4EBD-8DA7-1DB21506F961} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe

Task: {C8344EF4-9C9B-4BC6-8AF9-F946D1B5DDC8} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe

Task: {C98DCD91-7932-462D-B537-B7785D688E50} - System32\Tasks\SafeZone scheduled Autoupdate 1473058051 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-08-09] (Avast Software)

Task: {CB87BF96-9E19-4AEC-B738-7E8124F7DF02} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-06-25] (Adobe Systems Incorporated)

Task: {D3E45D6E-A54B-4859-AF24-BB03DB4D12C3} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe

Task: {D55FC44F-600D-4F09-8D1D-71D18111552A} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-10-08] (Intel Corporation)

Task: {DA55464F-720B-4136-BBA9-7B1CEA012CDB} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe

Task: {DDC792F2-4244-42D6-8B64-F3D38673C2D9} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG

Task: {EB0F4B17-6B18-45B3-B065-CEFE36FDE775} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe

Task: {ED569F6A-E1DA-4C49-85C8-31AD8917A132} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG

Task: {ED73B1B2-1BC0-4466-85A4-AB525EE55E2A} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe

Task: {EE60575C-D191-435B-9D29-F917936AC892} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe

Task: {F85C37B9-6703-480F-A23F-1729DC10732B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe

Task: {FB08B848-1F0E-4911-8E32-74FBA708D311} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Keine Datei <==== ACHTUNG
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-767237098-4183446396-2625044690-1002Core.job => C:\Users\ascard\AppData\Local\Dropbox\Update\DropboxUpdate.exe

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-767237098-4183446396-2625044690-1002UA.job => C:\Users\ascard\AppData\Local\Dropbox\Update\DropboxUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2016-08-22 12:51 - 2016-06-14 22:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll

2016-08-22 12:51 - 2016-06-14 22:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll

2016-08-22 12:51 - 2016-06-14 22:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll

2016-08-22 12:51 - 2016-06-14 22:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll

2016-04-15 16:49 - 2016-06-14 22:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll

2016-04-15 16:49 - 2016-06-14 22:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll

2016-04-15 16:49 - 2016-06-14 22:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll

2016-01-22 23:55 - 2016-06-14 22:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll

2016-07-16 13:42 - 2016-07-16 13:42 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll

2016-07-16 13:42 - 2016-07-16 13:42 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll

2016-08-10 15:15 - 2016-08-10 15:15 - 00959168 _____ () C:\Users\ascard\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\amd64\ClientTelemetry.dll

2016-07-16 13:42 - 2016-07-16 13:42 - 00130048 _____ () C:\WINDOWS\SYSTEM32\CHARTV.dll

2009-01-22 01:45 - 2009-01-22 01:45 - 01401856 _____ () C:\Program Files (x86)\EgisTec MyWinLocker\x64\LIBEAY32.dll

2016-08-30 07:30 - 2016-08-30 07:30 - 00071168 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.7.113.0_x64__kzf8qxf38zg5c\SkypeHost.exe

2016-08-30 07:30 - 2016-08-30 07:30 - 00178176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.7.113.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll

2016-08-30 07:30 - 2016-08-30 07:30 - 35288064 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.7.113.0_x64__kzf8qxf38zg5c\SkyWrap.dll

2016-07-16 13:42 - 2016-07-16 13:42 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll

2016-09-01 09:27 - 2016-09-01 09:27 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll

2016-09-01 09:27 - 2016-09-01 09:27 - 09761280 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2016-09-01 09:34 - 2016-08-20 06:54 - 01401344 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2016-09-01 09:27 - 2016-09-01 09:27 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll

2016-09-01 09:34 - 2016-08-20 06:54 - 02438144 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2016-09-01 09:34 - 2016-08-20 06:56 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2016-08-22 12:51 - 2016-06-14 22:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll

2016-08-22 12:51 - 2016-06-14 22:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll

2016-07-16 13:42 - 2016-07-16 13:42 - 00236488 _____ () c:\windows\system32\WerEtw.dll

2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll

2016-09-05 08:45 - 2016-09-05 08:45 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll

2016-09-06 20:45 - 2016-09-06 20:45 - 03084464 _____ () C:\Program Files\AVAST Software\Avast\defs\16090602\algo.dll

2016-09-05 08:45 - 2016-09-05 08:45 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll

2012-01-05 23:22 - 2012-01-05 23:22 - 00465344 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll

2012-01-05 23:22 - 2012-01-05 23:22 - 00125464 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll

2012-01-05 23:22 - 2012-01-05 23:22 - 01081368 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll

2016-07-11 16:04 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl

2016-07-11 16:04 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl

2016-07-24 13:28 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl

2016-07-24 13:28 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll

2016-09-05 08:45 - 2016-09-05 08:45 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2014-12-14 15:06 - 2011-12-16 04:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

2016-07-16 13:42 - 2016-07-16 13:42 - 02681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\ProgramData\Temp:CB0AACC9 [180]

AlternateDataStreams: C:\ProgramData\Temp:F0D7EE30 [117]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 

HKLM\...\.scr: SageThumbsImage.scr => "%1" /S <===== ACHTUNG
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com

IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com

IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com

IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com

IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com

IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com

IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com

IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com

IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com

IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com

IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com

IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com

IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com

IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com

IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net

IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net

IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info

IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com

IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com

IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
 

Da befinden sich 7914 mehr Seiten.
 

IE trusted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\localhost -> localhost

IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\007guard.com -> install.007guard.com

IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\008i.com -> 008i.com

IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\008k.com -> www.008k.com

IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\00hq.com -> www.00hq.com

IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\010402.com -> 010402.com

IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com

IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\0scan.com -> www.0scan.com

IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\1-2005-search.com -> www.1-2005-search.com

IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\1-domains-registrations.com -> www.1-domains-registrations.com

IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\1000gratisproben.com -> www.1000gratisproben.com

IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\1001namen.com -> www.1001namen.com

IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\100888290cs.com -> mir.100888290cs.com

IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\100sexlinks.com -> www.100sexlinks.com

IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\10sek.com -> www.10sek.com

IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\12-26.net -> user1.12-26.net

IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\12-27.net -> user1.12-27.net

IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\123fporn.info -> www.123fporn.info

IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\123haustiereundmehr.com -> www.123haustiereundmehr.com

IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\123moviedownload.com -> www.123moviedownload.com

IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\123simsen.com -> www.123simsen.com
 

Da befinden sich 7914 mehr Seiten.
 
 

==================== Hosts Inhalt: ==========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 04:34 - 2014-12-17 18:26 - 00450771 ____N C:\WINDOWS\system32\Drivers\etc\hosts
 

127.0.0.1        www.007guard.com

127.0.0.1        007guard.com

127.0.0.1        008i.com

127.0.0.1        www.008k.com

127.0.0.1        008k.com

127.0.0.1        www.00hq.com

127.0.0.1        00hq.com

127.0.0.1        010402.com

127.0.0.1        www.032439.com

127.0.0.1        032439.com

127.0.0.1        www.0scan.com

127.0.0.1        0scan.com

127.0.0.1        1000gratisproben.com

127.0.0.1        www.1000gratisproben.com

127.0.0.1        1001namen.com

127.0.0.1        www.1001namen.com

127.0.0.1        100888290cs.com

127.0.0.1        www.100888290cs.com

127.0.0.1        www.100sexlinks.com

127.0.0.1        100sexlinks.com

127.0.0.1        10sek.com

127.0.0.1        www.10sek.com

127.0.0.1        www.1-2005-search.com

127.0.0.1        1-2005-search.com

127.0.0.1        123fporn.info

127.0.0.1        www.123fporn.info

127.0.0.1        123haustiereundmehr.com

127.0.0.1        www.123haustiereundmehr.com

127.0.0.1        123moviedownload.com

127.0.0.1        www.123moviedownload.com
 

Da befinden sich 15463 zusätzliche Einträge.
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-767237098-4183446396-2625044690-1002\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Acer01.jpg

DNS Servers: 192.168.178.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

MSCONFIG\startupfolder: C:^Users^ascard^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma.lnk => C:\Windows\pss\Adobe Gamma.lnk.Startup

MSCONFIG\startupfolder: C:^Users^ascard^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup

MSCONFIG\startupreg: (default) => 

MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR

MSCONFIG\startupreg: Nikon Message Center 2 => c:\program files (x86)\nikon\nikon message center 2\nkmc2.exe -s

MSCONFIG\startupreg: OneDrive => "c:\users\ascard\appdata\local\microsoft\onedrive\onedrive.exe" /background

MSCONFIG\startupreg: QuickTime Task => "c:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

MSCONFIG\startupreg: SuiteTray => "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"

MSCONFIG\startupreg: Vidalia => "C:\Program Files (x86)\Vidalia Bridge Bundle\Vidalia\vidalia.exe"

HKLM\...\StartupApproved\StartupFolder: => "Adobe Acrobat - Schnellstart.lnk"

HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"

HKLM\...\StartupApproved\Run: => "Persistence"

HKLM\...\StartupApproved\Run: => "ShadowPlay"

HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 7.0"

HKLM\...\StartupApproved\Run32: => "APSDaemon"

HKLM\...\StartupApproved\Run32: => "USB3MON"

HKLM\...\StartupApproved\Run32: => "Nikon Message Center 2"

HKLM\...\StartupApproved\Run32: => "TrojanScanner"

HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\StartupApproved\StartupFolder: => "Dropbox.lnk"

HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\StartupApproved\Run: => "CCleaner Monitoring"

HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\StartupApproved\Run: => "OneDrive"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808

FirewallRules: [{F8CAB136-09A6-46F9-B7F2-51A1F9D497B4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [TCP Query User{C6554656-729F-440A-A7B1-A716CE5574BB}C:\program files (x86)\logitech\logitech alert\logitech alert commander.exe] => (Allow) C:\program files (x86)\logitech\logitech alert\logitech alert commander.exe

FirewallRules: [UDP Query User{3B7500FC-09EC-49CB-8142-DC81711ED4EB}C:\program files (x86)\logitech\logitech alert\logitech alert commander.exe] => (Allow) C:\program files (x86)\logitech\logitech alert\logitech alert commander.exe

FirewallRules: [TCP Query User{7185B6D2-5E37-406F-B0B7-AD1473482FBD}C:\program files (x86)\logitech\logitech alert\logitech alert commander.exe] => (Allow) C:\program files (x86)\logitech\logitech alert\logitech alert commander.exe

FirewallRules: [UDP Query User{0AC3D4F6-FD7A-4D91-98F3-529038B8D637}C:\program files (x86)\logitech\logitech alert\logitech alert commander.exe] => (Allow) C:\program files (x86)\logitech\logitech alert\logitech alert commander.exe

FirewallRules: [TCP Query User{024066AB-AEB5-4822-A5A9-0A8C93526B60}C:\program files (x86)\acer\clear.fi photo\dmcdaemon.exe] => (Block) C:\program files (x86)\acer\clear.fi photo\dmcdaemon.exe

FirewallRules: [UDP Query User{975D3E62-8BBA-4449-9578-FF0C08A91465}C:\program files (x86)\acer\clear.fi photo\dmcdaemon.exe] => (Block) C:\program files (x86)\acer\clear.fi photo\dmcdaemon.exe

FirewallRules: [TCP Query User{497093A5-0AFC-48C6-9A9D-7B9C27CEDC97}C:\program files (x86)\acer\clear.fi photo\windowsupnp.exe] => (Block) C:\program files (x86)\acer\clear.fi photo\windowsupnp.exe

FirewallRules: [UDP Query User{BC39A5F7-1006-485E-B90A-6F793C7D11C9}C:\program files (x86)\acer\clear.fi photo\windowsupnp.exe] => (Block) C:\program files (x86)\acer\clear.fi photo\windowsupnp.exe

FirewallRules: [TCP Query User{902ACC4C-38BB-4F27-AE56-352128D1FB48}C:\program files (x86)\acer\clear.fi media\dmcdaemon.exe] => (Block) C:\program files (x86)\acer\clear.fi media\dmcdaemon.exe

FirewallRules: [UDP Query User{34DB963B-B00B-4390-9BCF-29C9D79D4425}C:\program files (x86)\acer\clear.fi media\dmcdaemon.exe] => (Block) C:\program files (x86)\acer\clear.fi media\dmcdaemon.exe

FirewallRules: [TCP Query User{CD9FD0EC-2EC8-49C3-832F-E8408DDF37B5}C:\program files (x86)\acer\clear.fi media\windowsupnpmv.exe] => (Block) C:\program files (x86)\acer\clear.fi media\windowsupnpmv.exe

FirewallRules: [UDP Query User{3510D285-D45A-498E-AE60-E94B65023F38}C:\program files (x86)\acer\clear.fi media\windowsupnpmv.exe] => (Block) C:\program files (x86)\acer\clear.fi media\windowsupnpmv.exe

FirewallRules: [TCP Query User{C8126159-A58C-4CF3-A8A2-D7946EB71B17}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [UDP Query User{36FA8254-0C75-45FA-914E-913F023293FB}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [{772C33CE-AC61-46CE-8D33-82492E755C58}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [{4A3151DD-F507-46CE-9751-09C445D75D71}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{53331547-5173-4257-BDEB-03C28C2E1BE0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [TCP Query User{F86725B9-AB00-4752-B205-20F98CF9A7E8}C:\users\ascard\desktop\smp.4.48\security monitor pro.exe] => (Block) C:\users\ascard\desktop\smp.4.48\security monitor pro.exe

FirewallRules: [UDP Query User{E6E700B7-0F00-41A7-8E6B-5B6DB1EEF0EC}C:\users\ascard\desktop\smp.4.48\security monitor pro.exe] => (Block) C:\users\ascard\desktop\smp.4.48\security monitor pro.exe

FirewallRules: [TCP Query User{FA393488-2A85-4BBA-A36C-3EAF60AAFD07}C:\program files\onone software\perfect portrait 9\perfect portrait 9.exe] => (Block) C:\program files\onone software\perfect portrait 9\perfect portrait 9.exe

FirewallRules: [UDP Query User{E28046EC-5BE0-4C64-9655-600C9CC3C27A}C:\program files\onone software\perfect portrait 9\perfect portrait 9.exe] => (Block) C:\program files\onone software\perfect portrait 9\perfect portrait 9.exe

FirewallRules: [TCP Query User{B3EDB2D7-E407-4C1B-8817-46CC3E5F501D}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{153B36C1-D111-4B27-AE2D-C9EB729B95D2}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [{FF97B99B-4508-4E1C-8B8B-9BB65C3E0B5C}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe

FirewallRules: [{0501E44A-F378-4D9E-B421-E3FFCFADC8DF}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe

FirewallRules: [{4AFC0618-BB58-4656-8178-54CDF31D83E4}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe

FirewallRules: [{46092102-C47E-4BD5-8378-2E0ED06C58A7}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe

FirewallRules: [{7F75F429-1E5E-4196-87C8-3B9D7813FD18}] => (Allow) C:\Users\ascard\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{C30A54D7-35EA-42CA-BD6F-EBA37739A776}] => (Allow) C:\Users\ascard\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [TCP Query User{AAB201BF-F044-41CD-AF72-62DE02A5D60F}C:\users\ascard\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\ascard\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [UDP Query User{BB516139-1699-4FE8-800A-4D018F3F2199}C:\users\ascard\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\ascard\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [{51A45F1A-F439-4B4C-AE93-E93E478944B5}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe

FirewallRules: [{43438BAD-08E1-4EEF-A959-9B23DF44820A}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe

FirewallRules: [{EE352CB3-A1B7-481F-A4E1-506DD9776A7D}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe

FirewallRules: [{029126B9-7452-4D00-A79B-BC5911396551}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe

FirewallRules: [TCP Query User{A834D082-1A0B-400F-854E-D88FBF923E99}C:\program files\calibre2\calibre.exe] => (Allow) C:\program files\calibre2\calibre.exe

FirewallRules: [UDP Query User{3110FF1E-87F8-47A8-AD6D-570C27A67F4B}C:\program files\calibre2\calibre.exe] => (Allow) C:\program files\calibre2\calibre.exe

FirewallRules: [{35197BE9-F9F9-4EAD-9357-E948D1FD81EE}] => (Allow) LPort=8317

FirewallRules: [{1E4D0FF8-E884-462E-98F5-EF0FE215F635}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{B49D21E1-4CB7-435D-B3F1-33C24125D6D2}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{57B71E21-69FD-49B9-B275-E552273E9E1E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{FFC445EB-D827-4420-A4C2-73E4297AE860}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{DDFBF322-A24A-4708-910C-D3CCE51E3102}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{7623489E-ED3D-4D42-9D38-092BF0ED5896}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{1BCFD694-4445-44C2-B848-CCCA26904B8E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [TCP Query User{92D49C32-4671-46FB-8D8A-58411A9EDBE0}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Block) C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [UDP Query User{09557B80-E8D3-4EBF-9FF8-56D2ED955A57}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Block) C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [{0EE285C6-22BD-443B-862B-170B7C5B3470}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{7347A93C-5909-4099-83A2-CC78CF317086}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [TCP Query User{AB984973-45FC-47FD-8C51-33BDF394B2A7}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe

FirewallRules: [UDP Query User{D69FABAC-9181-4F52-8C91-C93056B46232}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe

FirewallRules: [{CDA7038E-8FA6-42C7-9CF8-ACEB028396B3}] => (Allow) C:\Program Files (x86)\Deskshare\Security Monitor Pro 4.4\Security Monitor Pro.exe

FirewallRules: [{DDA95E97-8131-40F7-8327-2B754DA62E93}] => (Allow) C:\Program Files (x86)\Deskshare\Security Monitor Pro 4.4\Security Monitor Pro.exe

FirewallRules: [TCP Query User{C0F0E7ED-7322-451E-BD43-EF2FEB17BF6A}C:\users\ascard\desktop\ipcamsearch.exe] => (Block) C:\users\ascard\desktop\ipcamsearch.exe

FirewallRules: [UDP Query User{E86A72DD-3D72-4BA6-9D4F-85007A15BA98}C:\users\ascard\desktop\ipcamsearch.exe] => (Block) C:\users\ascard\desktop\ipcamsearch.exe

FirewallRules: [{91040749-E1D9-4085-BDCB-AFC4F6370F6F}] => (Allow) C:\Program Files (x86)\Deskshare\IP Camera Viewer 3\IP Camera Viewer.exe

FirewallRules: [{80B8D53E-C6F1-409F-BD26-18CBC0BA4D38}] => (Allow) C:\Program Files (x86)\Deskshare\IP Camera Viewer 3\IP Camera Viewer.exe

FirewallRules: [{9EE08065-8CBD-462D-8088-6417EC30346A}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
 

==================== Wiederherstellungspunkte =========================
 

28-08-2016 12:24:30 Installed Blender

28-08-2016 19:00:13 Windows-Sicherung

01-09-2016 11:07:14 Windows Update

02-09-2016 11:09:49 JRT Pre-Junkware Removal

02-09-2016 21:54:16 JRT Pre-Junkware Removal

03-09-2016 08:42:52 JRT Pre-Junkware Removal

03-09-2016 13:17:02 JRT Pre-Junkware Removal

04-09-2016 14:09:53 JRT Pre-Junkware Removal

04-09-2016 14:44:45 JRT Pre-Junkware Removal

04-09-2016 22:23:38 Windows-Sicherung

04-09-2016 22:40:21 JRT Pre-Junkware Removal

04-09-2016 22:46:13 JRT Pre-Junkware Removal

05-09-2016 15:08:30 JRT Pre-Junkware Removal

06-09-2016 00:04:14 JRT Pre-Junkware Removal

06-09-2016 10:26:35 JRT Pre-Junkware Removal

06-09-2016 22:56:15 JRT Pre-Junkware Removal
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (09/06/2016 11:05:23 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.14393.0, Zeitstempel: 0x578999ab

Name des fehlerhaften Moduls: dwmcore.dll, Version: 10.0.14393.103, Zeitstempel: 0x57b7e2e5

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000144bf4

ID des fehlerhaften Prozesses: 0x1158

Startzeit der fehlerhaften Anwendung: 0x01d2088258e9e369

Pfad der fehlerhaften Anwendung: C:\WINDOWS\system32\dwm.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\dwmcore.dll

Berichtskennung: 2c76b1bc-8d23-4b26-83b7-c93aa97c3318

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (09/06/2016 11:05:07 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.14393.0, Zeitstempel: 0x578999ab

Name des fehlerhaften Moduls: dwmcore.dll, Version: 10.0.14393.103, Zeitstempel: 0x57b7e2e5

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000144bf4

ID des fehlerhaften Prozesses: 0x166c

Startzeit der fehlerhaften Anwendung: 0x01d208825331b0da

Pfad der fehlerhaften Anwendung: C:\WINDOWS\system32\dwm.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\dwmcore.dll

Berichtskennung: 6709a951-bef7-4cca-a07d-e8a7bc6faff6

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (09/06/2016 11:04:57 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.14393.0, Zeitstempel: 0x578999ab

Name des fehlerhaften Moduls: dwmcore.dll, Version: 10.0.14393.103, Zeitstempel: 0x57b7e2e5

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000144bf4

ID des fehlerhaften Prozesses: 0x1c2c

Startzeit der fehlerhaften Anwendung: 0x01d20882491ed02e

Pfad der fehlerhaften Anwendung: C:\WINDOWS\system32\dwm.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\dwmcore.dll

Berichtskennung: 86c969ed-65b3-4029-98a0-984884d395ba

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (09/06/2016 11:04:40 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.14393.0, Zeitstempel: 0x578999ab

Name des fehlerhaften Moduls: dwmcore.dll, Version: 10.0.14393.103, Zeitstempel: 0x57b7e2e5

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000144bf4

ID des fehlerhaften Prozesses: 0x214

Startzeit der fehlerhaften Anwendung: 0x01d208809a21b471

Pfad der fehlerhaften Anwendung: C:\WINDOWS\system32\dwm.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\dwmcore.dll

Berichtskennung: ecfe2a75-c235-42f3-9813-0f72ee3315ce

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (09/06/2016 10:56:17 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 

Details:

AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
 

System Error:

Zugriff verweigert

.
 

Error: (09/06/2016 02:44:35 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.14393.0, Zeitstempel: 0x578999ab

Name des fehlerhaften Moduls: dwmcore.dll, Version: 10.0.14393.103, Zeitstempel: 0x57b7e2e5

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000144bf4

ID des fehlerhaften Prozesses: 0x2568

Startzeit der fehlerhaften Anwendung: 0x01d2083c6511e2c1

Pfad der fehlerhaften Anwendung: C:\WINDOWS\system32\dwm.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\dwmcore.dll

Berichtskennung: f7af41c0-4e0a-4095-826c-ff5de7226f7b

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (09/06/2016 02:44:22 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.14393.0, Zeitstempel: 0x578999ab

Name des fehlerhaften Moduls: dwmcore.dll, Version: 10.0.14393.103, Zeitstempel: 0x57b7e2e5

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000144bf4

ID des fehlerhaften Prozesses: 0x23b8

Startzeit der fehlerhaften Anwendung: 0x01d2083c5e20f7c9

Pfad der fehlerhaften Anwendung: C:\WINDOWS\system32\dwm.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\dwmcore.dll

Berichtskennung: 81a6d950-216a-455e-ab9f-5620c477e57f

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (09/06/2016 02:44:10 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.14393.0, Zeitstempel: 0x578999ab

Name des fehlerhaften Moduls: dwmcore.dll, Version: 10.0.14393.103, Zeitstempel: 0x57b7e2e5

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000144bf4

ID des fehlerhaften Prozesses: 0x344

Startzeit der fehlerhaften Anwendung: 0x01d2080f7714151b

Pfad der fehlerhaften Anwendung: C:\WINDOWS\system32\dwm.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\dwmcore.dll

Berichtskennung: 1ff6d224-7dde-438c-a5bf-b543df53eb5d

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (09/06/2016 10:26:37 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 

Details:

AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
 

System Error:

Zugriff verweigert

.
 

Error: (09/06/2016 09:29:40 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: svchost.exe_scan, Version: 10.0.14393.0, Zeitstempel: 0x57899b1c

Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.14393.103, Zeitstempel: 0x57b7e207

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00000000000bc7f4

ID des fehlerhaften Prozesses: 0x4c4

Startzeit der fehlerhaften Anwendung: 0x01d2080f837bc3f0

Pfad der fehlerhaften Anwendung: C:\WINDOWS\System32\svchost.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll

Berichtskennung: 33a87509-3612-4095-a023-3e4a0c0c920f

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 
 

Systemfehler:

=============

Error: (09/06/2016 10:56:26 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/06/2016 10:55:16 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Netzwerkdienst" (SID: S-1-5-20) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{3185A766-B338-11E4-A71E-12E3F512A338}

 und der APPID 

{7006698D-2974-4091-A424-85DD0B909E23}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (09/06/2016 10:55:13 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Netzwerkdienst" (SID: S-1-5-20) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{3185A766-B338-11E4-A71E-12E3F512A338}

 und der APPID 

{7006698D-2974-4091-A424-85DD0B909E23}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (09/06/2016 10:52:40 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
 

Error: (09/06/2016 10:51:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Intel(R) Management and Security Application User Notification Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/06/2016 10:51:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "IconMan_R" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/06/2016 10:51:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Application Virtualization Client" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/06/2016 10:51:33 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (09/06/2016 10:51:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "NVIDIA Streamer Network Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/06/2016 10:51:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Client Virtualization Handler" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 
 

CodeIntegrity:

===================================

  Date: 2016-09-01 15:17:37.445

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2016-09-01 15:17:36.736

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2016-09-01 15:17:36.509

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2016-09-01 15:17:36.290

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2016-09-01 15:17:36.069

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2016-09-01 15:17:35.849

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2016-09-01 15:17:34.471

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2016-09-01 15:17:34.205

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2016-09-01 15:16:30.664

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2016-09-01 15:16:30.643

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz

Prozentuale Nutzung des RAM: 26%

Installierter physikalischer RAM: 8030.35 MB

Verfügbarer physikalischer RAM: 5878.36 MB

Summe virtueller Speicher: 23390.35 MB

Verfügbarer virtueller Speicher: 21257.43 MB
 

==================== Laufwerke ================================
 

Drive c: (Acer) (Fixed) (Total:110.23 GB) (Free:32.87 GB) NTFS

Drive d: (DATA) (Fixed) (Total:683.13 GB) (Free:400.62 GB) NTFS

Drive g: (Volume) (Fixed) (Total:931.51 GB) (Free:46.83 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: D7D7D5A1)

Partition 1: (Not Active) - (Size=1 GB) - (Type=27)

Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=110.2 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=467 MB) - (Type=27)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: D7D7D44A)

Partition 1: (Not Active) - (Size=15.5 GB) - (Type=27)

Partition 2: (Not Active) - (Size=683.1 GB) - (Type=07 NTFS)
 

========================================================

Disk: 2 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 50734181)

Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
 

==================== Ende von Addition.txt ============================

Code:



        Code:


        
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 31-08-2016

durchgeführt von ascard (Administrator) auf ASCARD-PC (06-09-2016 23:06:03)

Gestartet von C:\Users\ascard\Desktop

Geladene Profile: ascard (Verfügbare Profile: ascard & DefaultAppPool)

Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Egis Technology Inc. ) C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\HidMonitorSvc.exe

(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe

(Digital Care Solutions) C:\Program Files\BDServices\BitDefenderCOM.exe

(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe

(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe

(Microsoft Corporation) C:\Windows\System32\mqsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe

(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe

(Atheros) C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe

(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe

(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe

(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\hidfind.exe

(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe

(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.7.113.0_x64__kzf8qxf38zg5c\SkypeHost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\acrobat_sl.exe

(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [706440 2015-09-24] (Alps Electric Co., Ltd.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16404224 2015-08-27] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1408752 2015-08-27] (Realtek Semiconductor)

HKLM\...\Run: [InstantUpdate] => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuDaemon.exe [124520 2012-04-07] ()

HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [800896 2012-03-08] (Atheros Commnucations)

HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)

HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163800 2016-07-30] (IvoSoft)

HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\nvspcap64.dll [1767944 2016-06-14] (NVIDIA Corporation)

HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [296984 2012-01-05] (NTI Corporation)

HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1105488 2012-03-23] (Dritek System Inc.)

HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292088 2013-07-18] (Intel Corporation)

HKLM-x32\...\Run: [Logitech Alert Commander] => C:\Program Files (x86)\Logitech\Logitech Alert\Logitech Alert Commander.exe [12505400 2013-10-31] (Logitech)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)

HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4127488 2015-06-16] (Safer-Networking Ltd.)

HKLM-x32\...\Run: [Acrobat Assistant 7.0] => C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe [483328 2004-12-14] (Adobe Systems Inc.)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9107104 2016-09-05] (AVAST Software)

Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]

HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)

HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8894680 2016-08-05] (Piriform Ltd)

HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\Run: [VLC Updater] => C:\Program Files (x86)\VLC Updater\vlc-updater.exe [370128 2016-09-05] ()

ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-05] (AVAST Software)

ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)

ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Acrobat - Schnellstart.lnk [2016-08-04]

ShortcutTarget: Adobe Acrobat - Schnellstart.lnk -> C:\Windows\Installer\{AC76BA86-1033-F400-7760-100000000002}\SC_Acrobat.exe ()

Startup: C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aluagent.lnk [2016-08-19]

ShortcutTarget: aluagent.lnk -> C:\ProgramData\Acer\Acer Updater\aluagent.exe (Acer Incorporated)

Startup: C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-09-02]

ShortcutTarget: Dropbox.lnk -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{7e89f04e-0508-498e-b022-633b2fa91e15}: [DhcpNameServer] 192.168.178.1
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 

HKU\S-1-5-21-767237098-4183446396-2625044690-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/androidnews/

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-767237098-4183446396-2625044690-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2016-07-30] (IvoSoft)

BHO-x32: Kein Name -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> Keine Datei

BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)

BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-03-08] (Atheros Commnucations)

BHO-x32: AcroIEToolbarHelper Class -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [2004-12-14] (Adobe Systems Incorporated)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2016-07-30] (IvoSoft)

Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)

Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [2004-12-14] (Adobe Systems Incorporated)

Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)
 

FireFox:

========

FF ProfilePath: C:\Users\ascard\AppData\Roaming\Mozilla\Firefox\Profiles\QRx5Jf8b.default

FF NewTab: chrome://fvd.speeddial/content/fvd_about_blank.html

FF DefaultSearchEngine: Bing®

FF SelectedSearchEngine: Bing®

FF Homepage: hxxp://www.google.de

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-08-13] ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)

FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Keine Datei]

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-08-13] ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2011-12-01] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2011-12-01] (Intel Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-14] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-14] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=1.0.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Keine Datei]

FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Keine Datei]

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [Keine Datei]

FF Plugin HKU\S-1-5-21-767237098-4183446396-2625044690-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\ascard\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-03-27] (Unity Technologies ApS)

FF Extension: (Google Search by Image) - C:\Users\ascard\AppData\Roaming\Mozilla\Firefox\Profiles\QRx5Jf8b.default\extensions\google@hitachi.com.xpi [2016-04-28]

FF Extension: (Speed Dial [FVD] - New Tab Page, Sync...) - C:\Users\ascard\AppData\Roaming\Mozilla\Firefox\Profiles\QRx5Jf8b.default\extensions\pavel.sherbakov@gmail.com [2016-08-23]

FF Extension: (1-Click YouTube Video Downloader) - C:\Users\ascard\AppData\Roaming\Mozilla\Firefox\Profiles\QRx5Jf8b.default\extensions\YoutubeDownloader@PeterOlayev.com.xpi [2016-08-24]

FF Extension: (Download YouTube Videos as MP4) - C:\Users\ascard\AppData\Roaming\Mozilla\Firefox\Profiles\QRx5Jf8b.default\Extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi [2016-09-04]

FF Extension: (Adblock Plus) - C:\Users\ascard\AppData\Roaming\Mozilla\Firefox\Profiles\QRx5Jf8b.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-28]

FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-09-05]

FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt => nicht gefunden

FF HKLM-x32\...\Firefox\Extensions: [@greatdealz] - C:\Users\ascard\AppData\Roaming\Mozilla\Firefox\Profiles\QRx5Jf8b.default\extensions\@greatdealz.xpi => nicht gefunden

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
 

Chrome: 

=======

CHR StartupUrls: Default -> "chrome://bookmarks/#2","hxxps://www.facebook.com/","hxxps://web.whatsapp.com/","hxxps://startpage.com/deu/"

CHR Profile: C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Drive) - C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]

CHR Extension: (YouTube) - C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-28]

CHR Extension: (Adblock Plus) - C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-08-23]

CHR Extension: (Google-Suche) - C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]

CHR Extension: (Avast SafePrice) - C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-09-06]

CHR Extension: (Avira Browserschutz) - C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-07-18]

CHR Extension: (Avast Online Security) - C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-09-06]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]

CHR Extension: (Google Mail) - C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-30]

CHR Extension: (Chrome Media Router) - C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-30]

CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2014-12-14] (Adobe Systems) [Datei ist nicht signiert]

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2159320 2016-08-22] (Adobe Systems, Incorporated)

R2 ApHidMonitorService; C:\Program Files\Apoint2K\HidMonitorSvc.exe [104840 2015-09-24] (Alps Electric Co., Ltd.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-05] (AVAST Software)

R2 BitDefenderCOM; C:\Program Files\BDServices\BitDefenderCom.exe [1012736 2016-06-25] (Digital Care Solutions) [Datei ist nicht signiert]

R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [Datei ist nicht signiert]

S3 DCDhcpService; C:\Program Files (x86)\Acer\WDAgent\DCDhcpService.exe [111776 2012-02-10] (Atheros Communication Inc.) [Datei ist nicht signiert]

S3 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 2016\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany) [Datei ist nicht signiert]

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [337888 2016-05-03] (Intel Corporation)

S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [178312 2015-10-08] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)

R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [Datei ist nicht signiert]

R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256536 2012-01-05] (NTI Corporation)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)

R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)

R2 PSI_SVC_2_x64; C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2014-04-30] (arvato digital services llc)

R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1750712 2015-06-16] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2102496 2015-06-16] (Safer-Networking Ltd.)

R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [224712 2015-07-24] (Safer-Networking Ltd.)

R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe [72864 2012-02-19] (Atheros) [Datei ist nicht signiert]

S4 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [X]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-05] (AVAST Software)

R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-09-05] (AVAST Software)

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-05] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-05] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-05] (AVAST Software)

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969560 2016-09-05] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513496 2016-09-05] (AVAST Software)

R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-05] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [292704 2016-09-05] (AVAST Software)

S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.)

R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-04-06] (REALiX(tm))

R3 L1C; C:\Windows\System32\drivers\L1C62x64.sys [129224 2015-04-06] (Qualcomm Atheros Co., Ltd.)

R3 ManyCam; C:\Windows\system32\DRIVERS\mcvidrv_x64.sys [34304 2012-01-11] (ManyCam LLC)

R3 mcaudrv_simple; C:\Windows\system32\drivers\mcaudrv_x64.sys [28160 2012-02-22] (ManyCam LLC)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2015-04-06] (Intel Corporation)

S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)

S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [164992 2016-07-22] (Samsung Electronics Co., Ltd.)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42088 2015-10-12] (Anchorfree Inc.)

S3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [452040 2016-06-14] (BitDefender S.R.L.)

S1 Uim_DEVIM; C:\Windows\System32\DRIVERS\uim_devim.sys [25904 2015-08-26] ()

S1 Uim_IM; C:\Windows\System32\DRIVERS\uim_im.sys [701232 2015-08-26] ()

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)

R2 WinisoCDBus; C:\Windows\System32\drivers\WinisoCDBus.sys [204032 2014-02-26] (WinISO.com)

R3 WirelessKeyboardFilter; C:\Windows\System32\drivers\WirelessKeyboardFilter.sys [49896 2016-07-22] (Microsoft Corporation)

S3 WLRAWMp50x64; C:\Windows\System32\Drivers\WLRAWMp50x64.sys [35352 2013-10-31] (Logitech, Inc.)

S3 WLRAWMp50x64; C:\Windows\SysWOW64\Drivers\WLRAWMp50x64.sys [35352 2013-10-31] (Logitech, Inc.)

R3 WLRAWSp50x64; C:\Windows\System32\Drivers\WLRAWSp50x64.sys [34328 2013-10-31] (Logitech, Inc.)

R3 WLRAWSp50x64; C:\Windows\SysWOW64\Drivers\WLRAWSp50x64.sys [34328 2013-10-31] (Logitech, Inc.)

S1 epp; \??\C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\epp.sys [X]

U3 idsvc; kein ImagePath

S3 MFE_RR; \??\C:\Users\ascard\AppData\Local\Temp\mfe_rr.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-09-06 23:04 - 2016-09-06 23:05 - 02397696 _____ (Farbar) C:\Users\ascard\Desktop\FRST64.exe

2016-09-06 22:55 - 2016-09-06 22:56 - 01610560 _____ (Malwarebytes) C:\Users\ascard\Desktop\JRT.exe

2016-09-06 22:52 - 2016-09-06 22:52 - 00000000 ____H C:\ProgramData\cm-lock

2016-09-06 22:40 - 2016-09-06 22:47 - 03826240 _____ C:\Users\ascard\Desktop\AdwCleaner_6.010(1).exe

2016-09-06 22:31 - 2016-09-06 22:31 - 00001195 _____ C:\Users\ascard\Desktop\test.txt

2016-09-06 22:28 - 2016-09-06 22:28 - 00001197 _____ C:\Users\ascard\Desktop\mbytes.txt

2016-09-06 22:06 - 2016-09-06 22:06 - 00001871 _____ C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\chrome - Verknüpfung.lnk

2016-09-06 22:06 - 2016-09-06 22:06 - 00001802 _____ C:\Users\ascard\Desktop\chrome - Verknüpfung.lnk

2016-09-06 21:22 - 2016-09-06 21:22 - 00000000 ____D C:\Users\ascard\AppData\Local\Adobe

2016-09-06 15:14 - 2016-08-04 14:44 - 00002100 _____ C:\Users\ascard\Desktop\Adobe Acrobat 7.0 Professional.lnk

2016-09-06 15:14 - 2016-06-01 15:47 - 00001216 _____ C:\Users\ascard\Desktop\Ashampoo WinOptimizer 2016.lnk

2016-09-06 14:40 - 2016-09-06 14:40 - 00001095 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk

2016-09-06 14:40 - 2016-09-06 14:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller

2016-09-06 14:36 - 2016-09-06 14:36 - 00000000 ____D C:\Program Files\VS Revo Group

2016-09-06 14:09 - 2016-09-06 14:13 - 00071907 _____ C:\Users\ascard\Desktop\Addition.txt

2016-09-06 14:08 - 2016-09-06 23:06 - 00030074 _____ C:\Users\ascard\Desktop\FRST.txt

2016-09-06 12:43 - 2016-09-06 12:43 - 02397696 _____ (Farbar) C:\Users\ascard\Downloads\FRST64(1).exe

2016-09-06 12:41 - 2016-09-06 12:41 - 00373718 _____ C:\Users\ascard\Desktop\TeamSpybot-20160906-124106.cab

2016-09-06 12:40 - 2016-09-06 12:40 - 00373804 _____ C:\Users\ascard\Desktop\TeamSpybot-20160906-124022.cab

2016-09-06 09:40 - 2016-09-06 21:22 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Adobe

2016-09-06 09:22 - 2016-09-06 21:22 - 00000000 ____D C:\ProgramData\Adobe

2016-09-06 09:09 - 2016-09-06 09:23 - 00000000 ____D C:\Program Files\BDServices

2016-09-06 09:08 - 2016-09-06 09:09 - 10841384 _____ (ParetoLogic, Inc.) C:\Users\ascard\Downloads\RegCureProSetup_EF4412AB-5DA0-49E4-A69D-13F8F8E01025_.exe

2016-09-06 07:45 - 2016-09-06 07:45 - 00000000 ____D C:\Users\ascard\Desktop\PhotoshopPortable

2016-09-05 10:52 - 2016-09-05 10:52 - 00000000 ____D C:\Users\ascard\AppData\Roaming\vlc

2016-09-05 10:51 - 2016-09-05 10:51 - 00000920 _____ C:\Users\Public\Desktop\VLC media player.lnk

2016-09-05 10:51 - 2016-09-05 10:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

2016-09-05 10:49 - 2016-09-05 10:49 - 00000000 ____D C:\Program Files (x86)\VLC Updater

2016-09-05 10:48 - 2016-09-05 10:49 - 32140168 _____ C:\Users\ascard\Downloads\vlc-2.2.4-win64.exe

2016-09-05 08:55 - 2016-09-05 08:55 - 00000000 ___RD C:\Program Files (x86)\Skype

2016-09-05 08:55 - 2016-09-05 08:55 - 00000000 ____D C:\Users\ascard\Tracing

2016-09-05 08:55 - 2016-09-05 08:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2016-09-05 08:54 - 2016-09-05 08:54 - 00000020 ___SH C:\Users\DefaultAppPool\ntuser.ini

2016-09-05 08:47 - 2016-09-05 08:47 - 00037144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys

2016-09-05 08:47 - 2016-09-05 08:47 - 00004030 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1473058051

2016-09-05 08:47 - 2016-09-05 08:47 - 00001098 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk

2016-09-05 08:47 - 2016-09-05 08:47 - 00001098 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk

2016-09-05 08:47 - 2016-09-05 08:47 - 00000000 ____D C:\Users\ascard\AppData\Local\CEF

2016-09-05 08:45 - 2016-09-05 08:45 - 00969560 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys

2016-09-05 08:45 - 2016-09-05 08:45 - 00513496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys

2016-09-05 08:45 - 2016-09-05 08:45 - 00391496 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe

2016-09-05 08:45 - 2016-09-05 08:45 - 00292704 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys

2016-09-05 08:45 - 2016-09-05 08:45 - 00163416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys

2016-09-05 08:45 - 2016-09-05 08:45 - 00108816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys

2016-09-05 08:45 - 2016-09-05 08:45 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys

2016-09-05 08:45 - 2016-09-05 08:45 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys

2016-09-05 08:45 - 2016-09-05 08:45 - 00053208 _____ (AVAST Software) C:\WINDOWS\avastSS.scr

2016-09-05 08:45 - 2016-09-05 08:45 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys

2016-09-05 08:45 - 2016-09-05 08:45 - 00004004 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update

2016-09-05 08:45 - 2016-09-05 08:45 - 00001989 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk

2016-09-05 08:45 - 2016-09-05 08:45 - 00001977 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk

2016-09-05 08:44 - 2016-09-05 08:47 - 00000000 ____D C:\Program Files\AVAST Software

2016-09-05 08:41 - 2016-09-05 08:44 - 06253640 _____ (AVAST Software) C:\Users\ascard\Downloads\avast_free_antivirus_setup_online.exe

2016-09-05 00:14 - 2016-09-05 00:14 - 00000000 ____D C:\ProgramData\Emsisoft

2016-09-05 00:09 - 2016-09-05 00:12 - 277259016 _____ (Emsisoft Ltd. ) C:\Users\ascard\Downloads\EmsisoftAntiMalwareSetup.exe

2016-09-04 14:57 - 2016-09-04 14:57 - 00002487 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2016-09-04 14:31 - 2016-09-04 14:31 - 02867336 _____ (OSHI Limited) C:\Users\ascard\Downloads\Defender-Installer.exe

2016-09-04 14:16 - 2016-09-04 14:16 - 00004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task

2016-09-04 14:16 - 2016-09-04 14:16 - 00002136 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk

2016-09-04 12:44 - 2016-09-04 12:44 - 00388608 _____ (Trend Micro Inc.) C:\Users\ascard\Downloads\HijackThis.exe

2016-09-04 11:35 - 2016-09-04 11:35 - 00020810 _____ C:\Users\ascard\Documents\cc_20160904_113522.reg

2016-09-04 11:34 - 2016-09-04 11:34 - 00143438 _____ C:\Users\ascard\Documents\cc_20160904_113404.reg

2016-09-03 00:17 - 2016-09-03 00:17 - 39590890 _____ C:\Users\ascard\Desktop\andreaok.psd

2016-09-02 23:54 - 2016-09-02 23:54 - 13738940 _____ C:\Users\ascard\Desktop\3 (150).psd

2016-09-02 22:05 - 2016-09-06 23:06 - 00000000 ____D C:\FRST

2016-09-02 22:05 - 2016-09-06 13:33 - 00128478 _____ C:\Users\ascard\Downloads\FRST.txt

2016-09-02 21:55 - 2016-09-06 22:58 - 00000548 _____ C:\Users\ascard\Desktop\JRT.txt

2016-09-02 21:35 - 2016-09-02 21:35 - 03826240 _____ C:\Users\ascard\Downloads\adwcleaner_6.010.exe

2016-09-02 21:28 - 2016-09-02 21:28 - 04284888 _____ (AVAST Software) C:\Users\ascard\Downloads\avast-browser-cleanup-sfx121(1).exe

2016-09-02 21:27 - 2016-09-02 21:27 - 04284888 _____ (AVAST Software) C:\Users\ascard\Downloads\avast-browser-cleanup-sfx121.exe

2016-09-02 14:29 - 2016-08-26 07:43 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2016-09-02 14:29 - 2016-08-26 07:43 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2016-09-02 12:41 - 2016-09-06 22:13 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2016-09-02 12:41 - 2016-09-02 12:41 - 00001191 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2016-09-02 12:41 - 2016-09-02 12:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2016-09-02 12:41 - 2016-09-02 12:41 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2016-09-02 12:41 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys

2016-09-02 12:41 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys

2016-09-02 12:41 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys

2016-09-02 12:40 - 2016-09-02 12:41 - 22851472 _____ (Malwarebytes ) C:\Users\ascard\Downloads\mbam-setup-2.2.1.1043.exe

2016-09-02 11:51 - 2016-09-06 10:41 - 00000000 ____D C:\Users\ascard\AppData\Local\ManyCam

2016-09-02 11:51 - 2016-09-02 11:51 - 00000000 ____D C:\Users\ascard\AppData\Roaming\ManyCam

2016-09-02 11:51 - 2016-09-02 11:51 - 00000000 ____D C:\ProgramData\ManyCam

2016-09-02 11:40 - 2016-09-02 11:40 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2016-09-02 11:20 - 2016-09-02 11:20 - 00603640 _____ (Visicom Media inc.) C:\Users\ascard\Downloads\ManyCamWebInstaller(1).exe

2016-09-02 11:17 - 2014-12-17 18:26 - 00450771 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20160902-111744.backup

2016-09-01 09:35 - 2016-08-27 07:12 - 04130944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2016-09-01 09:35 - 2016-08-27 07:12 - 00244816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll

2016-09-01 09:35 - 2016-08-27 06:58 - 03893376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2016-09-01 09:35 - 2016-08-27 06:58 - 00121368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll

2016-09-01 09:35 - 2016-08-27 06:39 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll

2016-09-01 09:35 - 2016-08-27 06:38 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll

2016-09-01 09:35 - 2016-08-27 06:38 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll

2016-09-01 09:35 - 2016-08-27 06:37 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll

2016-09-01 09:35 - 2016-08-27 06:25 - 00804864 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll

2016-09-01 09:35 - 2016-08-20 08:05 - 01377008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe

2016-09-01 09:35 - 2016-08-20 08:04 - 07814488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2016-09-01 09:35 - 2016-08-20 08:03 - 01883784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2016-09-01 09:35 - 2016-08-20 07:52 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2016-09-01 09:35 - 2016-08-20 07:52 - 02190688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2016-09-01 09:35 - 2016-08-20 07:52 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll

2016-09-01 09:35 - 2016-08-20 07:52 - 01279328 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll

2016-09-01 09:35 - 2016-08-20 07:52 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe

2016-09-01 09:35 - 2016-08-20 07:52 - 00658776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2016-09-01 09:35 - 2016-08-20 07:52 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2016-09-01 09:35 - 2016-08-20 07:52 - 00178528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll

2016-09-01 09:35 - 2016-08-20 07:51 - 00681312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys

2016-09-01 09:35 - 2016-08-20 07:50 - 02913104 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll

2016-09-01 09:35 - 2016-08-20 07:50 - 01099608 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2016-09-01 09:35 - 2016-08-20 07:50 - 00987992 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2016-09-01 09:35 - 2016-08-20 07:50 - 00073568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys

2016-09-01 09:35 - 2016-08-20 07:50 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

2016-09-01 09:35 - 2016-08-20 07:50 - 00020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll

2016-09-01 09:35 - 2016-08-20 07:47 - 22218808 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2016-09-01 09:35 - 2016-08-20 07:47 - 01453992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll

2016-09-01 09:35 - 2016-08-20 07:47 - 01071728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll

2016-09-01 09:35 - 2016-08-20 07:46 - 01570680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2016-09-01 09:35 - 2016-08-20 07:43 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll

2016-09-01 09:35 - 2016-08-20 07:34 - 01430200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll

2016-09-01 09:35 - 2016-08-20 07:34 - 00782176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe

2016-09-01 09:35 - 2016-08-20 07:33 - 05722312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll

2016-09-01 09:35 - 2016-08-20 07:33 - 00852824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll

2016-09-01 09:35 - 2016-08-20 07:32 - 02166232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll

2016-09-01 09:35 - 2016-08-20 07:32 - 00846552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll

2016-09-01 09:35 - 2016-08-20 07:29 - 20965240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2016-09-01 09:35 - 2016-08-20 07:29 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll

2016-09-01 09:35 - 2016-08-20 07:29 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll

2016-09-01 09:35 - 2016-08-20 07:25 - 01264912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll

2016-09-01 09:35 - 2016-08-20 07:22 - 22571008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2016-09-01 09:35 - 2016-08-20 07:22 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll

2016-09-01 09:35 - 2016-08-20 07:21 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_G18030.DLL

2016-09-01 09:35 - 2016-08-20 07:21 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll

2016-09-01 09:35 - 2016-08-20 07:21 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll

2016-09-01 09:35 - 2016-08-20 07:21 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll

2016-09-01 09:35 - 2016-08-20 07:21 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\c_GSM7.DLL

2016-09-01 09:35 - 2016-08-20 07:20 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll

2016-09-01 09:35 - 2016-08-20 07:20 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll

2016-09-01 09:35 - 2016-08-20 07:20 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_IS2022.DLL

2016-09-01 09:35 - 2016-08-20 07:19 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll

2016-09-01 09:35 - 2016-08-20 07:18 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll

2016-09-01 09:35 - 2016-08-20 07:18 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe

2016-09-01 09:35 - 2016-08-20 07:18 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys

2016-09-01 09:35 - 2016-08-20 07:18 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe

2016-09-01 09:35 - 2016-08-20 07:17 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthLEEnum.sys

2016-09-01 09:35 - 2016-08-20 07:17 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll

2016-09-01 09:35 - 2016-08-20 07:16 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll

2016-09-01 09:35 - 2016-08-20 07:16 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll

2016-09-01 09:35 - 2016-08-20 07:15 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll

2016-09-01 09:35 - 2016-08-20 07:15 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll

2016-09-01 09:35 - 2016-08-20 07:15 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll

2016-09-01 09:35 - 2016-08-20 07:15 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe

2016-09-01 09:35 - 2016-08-20 07:15 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS

2016-09-01 09:35 - 2016-08-20 07:14 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_G18030.DLL

2016-09-01 09:35 - 2016-08-20 07:14 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll

2016-09-01 09:35 - 2016-08-20 07:14 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll

2016-09-01 09:35 - 2016-08-20 07:14 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll

2016-09-01 09:35 - 2016-08-20 07:14 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_IS2022.DLL

2016-09-01 09:35 - 2016-08-20 07:13 - 01081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2016-09-01 09:35 - 2016-08-20 07:13 - 00743424 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll

2016-09-01 09:35 - 2016-08-20 07:13 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe

2016-09-01 09:35 - 2016-08-20 07:12 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll

2016-09-01 09:35 - 2016-08-20 07:12 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll

2016-09-01 09:35 - 2016-08-20 07:12 - 00453120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll

2016-09-01 09:35 - 2016-08-20 07:12 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll

2016-09-01 09:35 - 2016-08-20 07:12 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll

2016-09-01 09:35 - 2016-08-20 07:11 - 00965120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys

2016-09-01 09:35 - 2016-08-20 07:11 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll

2016-09-01 09:35 - 2016-08-20 07:11 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2016-09-01 09:35 - 2016-08-20 07:11 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll

2016-09-01 09:35 - 2016-08-20 07:10 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll

2016-09-01 09:35 - 2016-08-20 07:09 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll

2016-09-01 09:35 - 2016-08-20 07:09 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll

2016-09-01 09:35 - 2016-08-20 07:08 - 01906176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll

2016-09-01 09:35 - 2016-08-20 07:08 - 01547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll

2016-09-01 09:35 - 2016-08-20 07:08 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll

2016-09-01 09:35 - 2016-08-20 07:08 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll

2016-09-01 09:35 - 2016-08-20 07:08 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe

2016-09-01 09:35 - 2016-08-20 07:07 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll

2016-09-01 09:35 - 2016-08-20 07:07 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll

2016-09-01 09:35 - 2016-08-20 07:07 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll

2016-09-01 09:35 - 2016-08-20 07:07 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll

2016-09-01 09:35 - 2016-08-20 07:07 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastLaunch.dll

2016-09-01 09:35 - 2016-08-20 07:07 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll

2016-09-01 09:35 - 2016-08-20 07:06 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll

2016-09-01 09:35 - 2016-08-20 07:06 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe

2016-09-01 09:35 - 2016-08-20 07:06 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi_passthru.dll

2016-09-01 09:35 - 2016-08-20 07:04 - 23682560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2016-09-01 09:35 - 2016-08-20 07:04 - 03245056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll

2016-09-01 09:35 - 2016-08-20 07:04 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2016-09-01 09:35 - 2016-08-20 07:04 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll

2016-09-01 09:35 - 2016-08-20 07:04 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\delegatorprovider.dll

2016-09-01 09:35 - 2016-08-20 07:03 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll

2016-09-01 09:35 - 2016-08-20 07:03 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll

2016-09-01 09:35 - 2016-08-20 07:03 - 02846208 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll

2016-09-01 09:35 - 2016-08-20 07:02 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll

2016-09-01 09:35 - 2016-08-20 07:01 - 04612096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll

2016-09-01 09:35 - 2016-08-20 07:01 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll

2016-09-01 09:35 - 2016-08-20 07:01 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll

2016-09-01 09:35 - 2016-08-20 07:00 - 19423232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2016-09-01 09:35 - 2016-08-20 07:00 - 08124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2016-09-01 09:35 - 2016-08-20 07:00 - 01316352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll

2016-09-01 09:35 - 2016-08-20 07:00 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DscCoreConfProv.dll

2016-09-01 09:35 - 2016-08-20 06:59 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll

2016-09-01 09:35 - 2016-08-20 06:59 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll

2016-09-01 09:35 - 2016-08-20 06:59 - 01106944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll

2016-09-01 09:35 - 2016-08-20 06:59 - 01077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll

2016-09-01 09:35 - 2016-08-20 06:59 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll

2016-09-01 09:35 - 2016-08-20 06:58 - 01643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll

2016-09-01 09:35 - 2016-08-20 06:58 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi_passthru.dll

2016-09-01 09:35 - 2016-08-20 06:57 - 02680832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll

2016-09-01 09:35 - 2016-08-20 06:57 - 02264064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2016-09-01 09:35 - 2016-08-20 06:57 - 01282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll

2016-09-01 09:35 - 2016-08-20 06:56 - 02711040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll

2016-09-01 09:35 - 2016-08-20 06:56 - 02315264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2016-09-01 09:35 - 2016-08-20 06:56 - 02289664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll

2016-09-01 09:35 - 2016-08-20 06:56 - 02143232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll

2016-09-01 09:35 - 2016-08-20 06:56 - 01006080 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll

2016-09-01 09:35 - 2016-08-20 06:56 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll

2016-09-01 09:35 - 2016-08-20 06:56 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\delegatorprovider.dll

2016-09-01 09:35 - 2016-08-20 06:55 - 19418624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2016-09-01 09:35 - 2016-08-20 06:55 - 00726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll

2016-09-01 09:35 - 2016-08-20 06:54 - 00806912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll

2016-09-01 09:35 - 2016-08-20 06:53 - 01220608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll

2016-09-01 09:35 - 2016-08-20 06:52 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll

2016-09-01 09:35 - 2016-08-20 06:51 - 06044672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2016-09-01 09:35 - 2016-08-20 06:51 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll

2016-09-01 09:34 - 2016-08-27 14:45 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfksproxy.dll

2016-09-01 09:34 - 2016-08-27 11:37 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfksproxy.dll

2016-09-01 09:34 - 2016-08-27 06:44 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\encapi.dll

2016-09-01 09:34 - 2016-08-27 06:43 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\encapi.dll

2016-09-01 09:34 - 2016-08-20 08:26 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll

2016-09-01 09:34 - 2016-08-20 08:13 - 00590952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll

2016-09-01 09:34 - 2016-08-20 08:06 - 01046976 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2016-09-01 09:34 - 2016-08-20 08:06 - 00885832 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe

2016-09-01 09:34 - 2016-08-20 08:06 - 00108384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys

2016-09-01 09:34 - 2016-08-20 08:04 - 01349120 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2016-09-01 09:34 - 2016-08-20 08:04 - 01163696 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe

2016-09-01 09:34 - 2016-08-20 08:03 - 02257248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys

2016-09-01 09:34 - 2016-08-20 07:50 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll

2016-09-01 09:34 - 2016-08-20 07:50 - 00942424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi

2016-09-01 09:34 - 2016-08-20 07:50 - 00807776 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe

2016-09-01 09:34 - 2016-08-20 07:42 - 02537824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2016-09-01 09:34 - 2016-08-20 07:34 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll

2016-09-01 09:34 - 2016-08-20 07:21 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb

2016-09-01 09:34 - 2016-08-20 07:21 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll

2016-09-01 09:34 - 2016-08-20 07:20 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll

2016-09-01 09:34 - 2016-08-20 07:20 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys

2016-09-01 09:34 - 2016-08-20 07:19 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll

2016-09-01 09:34 - 2016-08-20 07:17 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll

2016-09-01 09:34 - 2016-08-20 07:17 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll

2016-09-01 09:34 - 2016-08-20 07:16 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb

2016-09-01 09:34 - 2016-08-20 07:14 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll

2016-09-01 09:34 - 2016-08-20 07:14 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\c_GSM7.DLL

2016-09-01 09:34 - 2016-08-20 07:13 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll

2016-09-01 09:34 - 2016-08-20 07:12 - 01014784 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll

2016-09-01 09:34 - 2016-08-20 07:12 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe

2016-09-01 09:34 - 2016-08-20 07:11 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll

2016-09-01 09:34 - 2016-08-20 07:10 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll

2016-09-01 09:34 - 2016-08-20 07:10 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe

2016-09-01 09:34 - 2016-08-20 07:09 - 09128448 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2016-09-01 09:34 - 2016-08-20 07:09 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe

2016-09-01 09:34 - 2016-08-20 07:08 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll

2016-09-01 09:34 - 2016-08-20 07:07 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll

2016-09-01 09:34 - 2016-08-20 07:05 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll

2016-09-01 09:34 - 2016-08-20 07:05 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll

2016-09-01 09:34 - 2016-08-20 07:04 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe

2016-09-01 09:34 - 2016-08-20 07:04 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll

2016-09-01 09:34 - 2016-08-20 07:03 - 00944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2016-09-01 09:34 - 2016-08-20 06:59 - 07624192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2016-09-01 09:34 - 2016-08-20 06:59 - 01690112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll

2016-09-01 09:34 - 2016-08-20 06:57 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll

2016-09-01 09:34 - 2016-08-20 06:56 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll

Code:

2016-09-01 09:34 - 2016-08-20 06:53 - 03617792 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2016-09-01 09:34 - 2016-08-20 06:53 - 03299328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe

2016-09-01 09:34 - 2016-08-20 06:51 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll

2016-09-01 09:34 - 2016-08-20 06:50 - 01875456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll

2016-09-01 09:34 - 2016-08-20 06:49 - 02999296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2016-09-01 09:34 - 2016-08-20 06:46 - 03105792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe

2016-09-01 09:34 - 2016-08-19 03:33 - 00162850 _____ C:\WINDOWS\system32\C_932.NLS

2016-09-01 09:27 - 2016-09-01 09:27 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe

2016-09-01 09:27 - 2016-09-01 09:27 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe

2016-09-01 09:27 - 2016-09-01 09:27 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll

2016-09-01 09:27 - 2016-09-01 09:27 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll

2016-09-01 09:27 - 2016-09-01 09:27 - 00409952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS

2016-09-01 09:27 - 2016-09-01 09:27 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll

2016-09-01 09:27 - 2016-09-01 09:27 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll

2016-09-01 09:27 - 2016-09-01 09:27 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll

2016-09-01 09:27 - 2016-09-01 09:27 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll

2016-09-01 09:27 - 2016-09-01 09:27 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2016-09-01 09:27 - 2016-09-01 09:27 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys

2016-09-01 09:27 - 2016-09-01 09:27 - 00114192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll

2016-09-01 09:27 - 2016-09-01 09:27 - 00079544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll

2016-09-01 09:27 - 2016-09-01 09:27 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll

2016-09-01 09:27 - 2016-09-01 09:27 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll

2016-09-01 09:27 - 2016-09-01 09:27 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll

2016-09-01 09:27 - 2016-09-01 09:27 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe

2016-09-01 09:27 - 2016-09-01 09:27 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe

2016-08-30 14:38 - 2016-08-30 14:38 - 127071297 _____ C:\Users\ascard\Desktop\Mockup Bottle wine.psd

2016-08-28 13:18 - 2016-08-28 13:18 - 03413015 _____ C:\Users\ascard\Downloads\6059255_2799963_HD.mp4

2016-08-28 13:02 - 2016-08-28 13:02 - 03993392 _____ C:\Users\ascard\Downloads\6059255_2799881_HD.mp4

2016-08-28 12:27 - 2016-08-28 12:27 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Blender Foundation

2016-08-28 12:25 - 2016-08-28 12:25 - 00000000 ____D C:\Users\ascard\.thumbnails

2016-08-25 19:34 - 2016-08-25 19:35 - 01290240 _____ C:\Users\ascard\Downloads\GreentreesandgrassPSD-2.rar.part

2016-08-25 08:05 - 2016-09-06 09:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2016-08-25 04:57 - 2016-08-25 04:57 - 00049312 _____ (Visicom Media Inc.) C:\WINDOWS\system32\Drivers\mcvidrv.sys

2016-08-23 22:18 - 2016-08-06 06:33 - 00354264 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe

2016-08-23 22:18 - 2016-08-06 06:31 - 00041824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe

2016-08-23 22:18 - 2016-08-06 06:29 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys

2016-08-23 22:18 - 2016-08-06 06:17 - 00450400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys

2016-08-23 22:18 - 2016-08-06 06:17 - 00224096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys

2016-08-23 22:18 - 2016-08-06 06:16 - 00435040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys

2016-08-23 22:18 - 2016-08-06 06:09 - 00151224 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2016-08-23 22:18 - 2016-08-06 06:08 - 00509784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe

2016-08-23 22:18 - 2016-08-06 05:48 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe

2016-08-23 22:18 - 2016-08-06 05:41 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncPolicy.dll

2016-08-23 22:18 - 2016-08-06 05:40 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll

2016-08-23 22:18 - 2016-08-06 05:40 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafpos.dll

2016-08-23 22:18 - 2016-08-06 05:33 - 01082368 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll

2016-08-23 22:18 - 2016-08-06 05:31 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll

2016-08-23 22:18 - 2016-08-06 05:23 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll

2016-08-23 22:18 - 2016-08-06 05:19 - 01812480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll

2016-08-23 22:18 - 2016-08-05 11:14 - 01066328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll

2016-08-23 22:18 - 2016-08-05 11:12 - 05622600 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe

2016-08-23 22:18 - 2016-08-05 11:10 - 00939872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll

2016-08-23 22:18 - 2016-08-05 11:05 - 00665768 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe

2016-08-23 22:18 - 2016-08-05 10:28 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll

2016-08-23 22:18 - 2016-08-05 10:22 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll

2016-08-23 22:18 - 2016-08-05 10:20 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll

2016-08-23 22:18 - 2016-08-05 10:08 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll

2016-08-23 22:17 - 2016-08-06 06:31 - 00077664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys

2016-08-23 22:17 - 2016-08-06 06:29 - 00199008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys

2016-08-23 22:17 - 2016-08-06 06:26 - 01176664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll

2016-08-23 22:17 - 2016-08-06 06:23 - 00168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys

2016-08-23 22:17 - 2016-08-06 06:18 - 02745224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2016-08-23 22:17 - 2016-08-06 06:18 - 00584032 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe

2016-08-23 22:17 - 2016-08-06 06:18 - 00396168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll

2016-08-23 22:17 - 2016-08-06 06:17 - 00790760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll

2016-08-23 22:17 - 2016-08-06 06:17 - 00619368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2016-08-23 22:17 - 2016-08-06 06:15 - 00408600 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll

2016-08-23 22:17 - 2016-08-06 06:13 - 01847048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll

2016-08-23 22:17 - 2016-08-06 06:13 - 01694200 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll

2016-08-23 22:17 - 2016-08-06 06:13 - 01066096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll

2016-08-23 22:17 - 2016-08-06 06:13 - 00595488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll

2016-08-23 22:17 - 2016-08-06 06:13 - 00381760 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe

2016-08-23 22:17 - 2016-08-06 06:13 - 00044472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe

2016-08-23 22:17 - 2016-08-06 06:08 - 02251432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2016-08-23 22:17 - 2016-08-06 06:08 - 01469120 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2016-08-23 22:17 - 2016-08-06 06:08 - 00587968 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll

2016-08-23 22:17 - 2016-08-06 06:08 - 00313560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll

2016-08-23 22:17 - 2016-08-06 06:08 - 00050880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe

2016-08-23 22:17 - 2016-08-06 06:04 - 00361096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll

2016-08-23 22:17 - 2016-08-06 06:03 - 01557296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll

2016-08-23 22:17 - 2016-08-06 06:03 - 01343928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll

2016-08-23 22:17 - 2016-08-06 06:03 - 00955008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll

2016-08-23 22:17 - 2016-08-06 06:03 - 00529928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll

2016-08-23 22:17 - 2016-08-06 06:03 - 00036168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe

2016-08-23 22:17 - 2016-08-06 06:02 - 00321280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe

2016-08-23 22:17 - 2016-08-06 05:48 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll

2016-08-23 22:17 - 2016-08-06 05:48 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll

2016-08-23 22:17 - 2016-08-06 05:48 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll

2016-08-23 22:17 - 2016-08-06 05:48 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll

2016-08-23 22:17 - 2016-08-06 05:48 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll

2016-08-23 22:17 - 2016-08-06 05:48 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll

2016-08-23 22:17 - 2016-08-06 05:48 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx

2016-08-23 22:17 - 2016-08-06 05:48 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll

2016-08-23 22:17 - 2016-08-06 05:47 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys

2016-08-23 22:17 - 2016-08-06 05:47 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll

2016-08-23 22:17 - 2016-08-06 05:47 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll

2016-08-23 22:17 - 2016-08-06 05:47 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx

2016-08-23 22:17 - 2016-08-06 05:47 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll

2016-08-23 22:17 - 2016-08-06 05:46 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL

2016-08-23 22:17 - 2016-08-06 05:46 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL

2016-08-23 22:17 - 2016-08-06 05:46 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe

2016-08-23 22:17 - 2016-08-06 05:46 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe

2016-08-23 22:17 - 2016-08-06 05:46 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll

2016-08-23 22:17 - 2016-08-06 05:46 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys

2016-08-23 22:17 - 2016-08-06 05:45 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll

2016-08-23 22:17 - 2016-08-06 05:45 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll

2016-08-23 22:17 - 2016-08-06 05:45 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll

2016-08-23 22:17 - 2016-08-06 05:45 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll

2016-08-23 22:17 - 2016-08-06 05:45 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll

2016-08-23 22:17 - 2016-08-06 05:45 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe

2016-08-23 22:17 - 2016-08-06 05:45 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll

2016-08-23 22:17 - 2016-08-06 05:45 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe

2016-08-23 22:17 - 2016-08-06 05:44 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys

2016-08-23 22:17 - 2016-08-06 05:44 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll

2016-08-23 22:17 - 2016-08-06 05:44 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll

2016-08-23 22:17 - 2016-08-06 05:44 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceassociation.dll

2016-08-23 22:17 - 2016-08-06 05:43 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll

2016-08-23 22:17 - 2016-08-06 05:43 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe

2016-08-23 22:17 - 2016-08-06 05:43 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys

2016-08-23 22:17 - 2016-08-06 05:43 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll

2016-08-23 22:17 - 2016-08-06 05:42 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2016-08-23 22:17 - 2016-08-06 05:41 - 13867520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2016-08-23 22:17 - 2016-08-06 05:41 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll

2016-08-23 22:17 - 2016-08-06 05:41 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll

2016-08-23 22:17 - 2016-08-06 05:41 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll

2016-08-23 22:17 - 2016-08-06 05:41 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll

2016-08-23 22:17 - 2016-08-06 05:41 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll

2016-08-23 22:17 - 2016-08-06 05:41 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll

2016-08-23 22:17 - 2016-08-06 05:40 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2016-08-23 22:17 - 2016-08-06 05:40 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll

2016-08-23 22:17 - 2016-08-06 05:40 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll

2016-08-23 22:17 - 2016-08-06 05:39 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll

2016-08-23 22:17 - 2016-08-06 05:39 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll

2016-08-23 22:17 - 2016-08-06 05:39 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll

2016-08-23 22:17 - 2016-08-06 05:39 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll

2016-08-23 22:17 - 2016-08-06 05:38 - 17187328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2016-08-23 22:17 - 2016-08-06 05:38 - 00526848 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll

2016-08-23 22:17 - 2016-08-06 05:37 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2016-08-23 22:17 - 2016-08-06 05:36 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll

2016-08-23 22:17 - 2016-08-06 05:33 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll

2016-08-23 22:17 - 2016-08-06 05:31 - 12174336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2016-08-23 22:17 - 2016-08-06 05:31 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll

2016-08-23 22:17 - 2016-08-06 05:31 - 01052672 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll

2016-08-23 22:17 - 2016-08-06 05:31 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll

2016-08-23 22:17 - 2016-08-06 05:30 - 13080576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2016-08-23 22:17 - 2016-08-06 05:30 - 12345344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll

2016-08-23 22:17 - 2016-08-06 05:30 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll

2016-08-23 22:17 - 2016-08-06 05:29 - 13433856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll

2016-08-23 22:17 - 2016-08-06 05:29 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll

2016-08-23 22:17 - 2016-08-06 05:29 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll

2016-08-23 22:17 - 2016-08-06 05:29 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll

2016-08-23 22:17 - 2016-08-06 05:28 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll

2016-08-23 22:17 - 2016-08-06 05:28 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll

2016-08-23 22:17 - 2016-08-06 05:28 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll

2016-08-23 22:17 - 2016-08-06 05:26 - 02422784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAJApi.dll

2016-08-23 22:17 - 2016-08-06 05:26 - 00758784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2016-08-23 22:17 - 2016-08-06 05:26 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2016-08-23 22:17 - 2016-08-06 05:25 - 03116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAJApi.dll

2016-08-23 22:17 - 2016-08-06 05:25 - 01595904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2016-08-23 22:17 - 2016-08-06 05:24 - 02095616 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2016-08-23 22:17 - 2016-08-06 05:24 - 02026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2016-08-23 22:17 - 2016-08-06 05:23 - 02370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll

2016-08-23 22:17 - 2016-08-06 05:23 - 01780736 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2016-08-23 22:17 - 2016-08-06 05:23 - 01508864 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2016-08-23 22:17 - 2016-08-06 05:23 - 01491456 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2016-08-23 22:17 - 2016-08-06 05:23 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll

2016-08-23 22:17 - 2016-08-06 05:23 - 01062400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll

2016-08-23 22:17 - 2016-08-06 05:23 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll

2016-08-23 22:17 - 2016-08-06 05:21 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll

2016-08-23 22:17 - 2016-08-06 05:19 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll

2016-08-23 22:17 - 2016-08-05 10:29 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll

2016-08-23 22:17 - 2016-08-05 10:23 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll

2016-08-23 22:17 - 2016-08-05 10:20 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll

2016-08-23 22:17 - 2016-08-05 10:18 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll

2016-08-23 14:55 - 2016-08-23 14:55 - 248650089 _____ C:\Users\ascard\Desktop\kopfgitarre.psd

2016-08-22 12:51 - 2016-06-14 22:01 - 01767944 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll

2016-08-22 12:51 - 2016-04-14 07:38 - 00113216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll

2016-08-22 12:51 - 2016-04-14 07:38 - 00102976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll

2016-08-22 12:51 - 2016-04-14 07:38 - 00056384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys

2016-08-19 12:08 - 2016-08-19 12:08 - 00004267 _____ C:\Users\ascard\Desktop\ManyCam - Verknüpfung.lnk

2016-08-18 12:33 - 2016-08-18 12:33 - 08227032 _____ (Piriform Ltd) C:\Users\ascard\Downloads\ccsetup521.exe

2016-08-17 14:14 - 2016-08-17 14:15 - 00214264 _____ C:\TDSSKiller.3.1.0.11_17.08.2016_14.14.07_log.txt

2016-08-17 14:08 - 2016-08-17 14:08 - 11427128 _____ (Bitdefender LLC) C:\Users\ascard\Downloads\BootkitRemoval_x64.exe

2016-08-17 14:06 - 2016-08-17 14:06 - 00784152 _____ (McAfee, Inc.) C:\Users\ascard\Downloads\rootkitremover.exe

2016-08-17 08:26 - 2016-08-17 08:26 - 00000000 ____D C:\ProgramData\Simply Super Software

2016-08-17 08:25 - 2016-08-17 08:25 - 01474568 _____ C:\Users\ascard\Downloads\Trojan Remover - CHIP-Installer.exe

2016-08-16 13:35 - 2016-09-04 12:44 - 00000095 _____ C:\SILENT

2016-08-15 20:54 - 2016-08-15 20:54 - 44534205 _____ C:\Users\ascard\Downloads\NAVIGON Europe v5.4.6 Patched(appsfan.org).apk

2016-08-15 11:01 - 2016-09-05 10:43 - 00000000 ____D C:\Users\ascard\AppData\Roaming\AVAST Software

2016-08-15 11:00 - 2016-08-15 11:00 - 04284888 _____ (AVAST Software) C:\Users\ascard\Downloads\avast-browser-cleanup-sfx.exe

2016-08-14 08:35 - 2014-12-17 18:26 - 00450771 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20160814-083555.backup

2016-08-14 08:18 - 2016-08-14 08:19 - 00030256 _____ C:\Users\ascard\Downloads\MilanBold.ttf

2016-08-13 12:56 - 2016-08-13 12:56 - 03784256 _____ C:\Users\ascard\Downloads\adwcleaner_6.000(1).exe

2016-08-13 11:30 - 2016-08-13 12:10 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2016-08-13 11:30 - 2016-08-13 11:30 - 00003860 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater

2016-08-13 10:29 - 2016-09-02 11:51 - 00000000 ____D C:\Program Files (x86)\ManyCam

2016-08-13 10:04 - 2016-08-13 10:04 - 03784256 _____ C:\Users\ascard\Downloads\adwcleaner_6.000.exe

2016-08-12 17:45 - 2016-08-12 17:45 - 73850067 _____ C:\Users\ascard\Desktop\Nina1.psd

2016-08-12 17:21 - 2016-08-12 17:22 - 122029912 _____ C:\Users\ascard\Desktop\nina.psd

2016-08-12 13:03 - 2016-08-12 13:03 - 55878384 _____ (Intel Corporation) C:\Users\ascard\Downloads\Intel SSD Toolbox - v3.3.6(1).exe

2016-08-11 21:04 - 2016-08-28 10:33 - 00001456 _____ C:\Users\ascard\AppData\Local\Adobe Für Web speichern 13.0 Prefs

2016-08-11 14:17 - 2016-08-11 14:17 - 03519312 _____ ( ) C:\Users\ascard\Downloads\OneSafe_Driver_Manager.exe

2016-08-10 17:13 - 2016-08-10 17:13 - 00000000 ____D C:\ProgramData\USOShared

2016-08-10 15:55 - 2016-09-06 09:21 - 00000000 ___DC C:\WINDOWS\Panther

2016-08-10 15:49 - 2016-08-10 15:49 - 01708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll

2016-08-10 15:49 - 2016-08-10 15:49 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll

2016-08-10 15:49 - 2016-08-10 15:49 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll

2016-08-10 15:49 - 2016-08-10 15:49 - 01456640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll

2016-08-10 15:49 - 2016-08-10 15:49 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll

2016-08-10 15:49 - 2016-08-10 15:49 - 00770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll

2016-08-10 15:49 - 2016-08-10 15:49 - 00509952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll

2016-08-10 15:49 - 2016-08-10 15:49 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll

2016-08-10 15:49 - 2016-08-10 15:49 - 00389000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll

2016-08-10 15:49 - 2016-08-10 15:49 - 00297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll

2016-08-10 15:49 - 2016-08-10 15:49 - 00062816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys

2016-08-10 15:49 - 2016-07-15 20:29 - 05739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll

2016-08-10 15:49 - 2016-07-15 20:29 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll

2016-08-10 15:49 - 2016-07-15 20:14 - 06354944 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll

2016-08-10 15:49 - 2016-07-15 19:45 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll

2016-08-10 15:49 - 2016-07-15 19:29 - 05489664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll

2016-08-10 15:48 - 2016-08-10 15:48 - 00008192 _____ C:\WINDOWS\system32\config\userdiff

2016-08-10 15:46 - 2016-08-10 15:46 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer

2016-08-10 15:46 - 2016-08-10 15:46 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices

2016-08-10 15:46 - 2016-08-10 15:46 - 00000000 ____D C:\WINDOWS\system32\msmq

2016-08-10 15:46 - 2016-08-10 15:46 - 00000000 ____D C:\WINDOWS\system32\BestPractices

2016-08-10 15:46 - 2016-08-10 15:46 - 00000000 ____D C:\Program Files\Reference Assemblies

2016-08-10 15:46 - 2016-08-10 15:46 - 00000000 ____D C:\Program Files\MSBuild

2016-08-10 15:46 - 2016-08-10 15:46 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies

2016-08-10 15:46 - 2016-08-10 15:46 - 00000000 ____D C:\Program Files (x86)\MSBuild

2016-08-10 15:46 - 2016-08-10 15:46 - 00000000 ____D C:\inetpub

2016-08-10 15:46 - 2016-05-25 15:31 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll

2016-08-10 15:46 - 2016-05-25 15:31 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll

2016-08-10 15:46 - 2016-05-25 15:31 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe

2016-08-10 15:46 - 2016-05-25 12:03 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll

2016-08-10 15:46 - 2016-05-25 12:03 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2016-08-10 15:46 - 2016-05-25 12:03 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe

2016-08-10 15:43 - 2016-08-10 15:43 - 00000000 ____H C:\$WINRE_BACKUP_PARTITION.MARKER

2016-08-10 15:15 - 2016-08-10 15:15 - 00000000 ____D C:\ProgramData\Microsoft OneDrive

2016-08-10 15:13 - 2016-08-10 20:33 - 00000000 ____D C:\Users\ascard\AppData\Local\ConnectedDevicesPlatform

2016-08-10 15:13 - 2016-08-10 15:13 - 00000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat

2016-08-10 15:13 - 2016-08-10 15:13 - 00000020 ___SH C:\Users\ascard\ntuser.ini

2016-08-10 15:10 - 2016-08-10 15:10 - 00011433 _____ C:\WINDOWS\diagwrn.xml

2016-08-10 15:10 - 2016-08-10 15:10 - 00011433 _____ C:\WINDOWS\diagerr.xml

2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\Vorlagen

2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\Startmenü

2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung

2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen

2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\Eigene Dateien

2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\Druckumgebung

2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos

2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik

2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder

2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf

2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten

2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten

2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos

2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik

2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder

2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf

2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten

2016-08-10 15:08 - 2016-09-06 22:52 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2016-08-10 15:08 - 2016-08-10 15:08 - 00003842 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-767237098-4183446396-2625044690-1002UA

2016-08-10 15:08 - 2016-08-10 15:08 - 00003650 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2016-08-10 15:08 - 2016-08-10 15:08 - 00003570 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-767237098-4183446396-2625044690-1002Core

2016-08-10 15:08 - 2016-08-10 15:08 - 00003426 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2016-08-10 15:08 - 2016-08-10 15:08 - 00003042 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473

2016-08-10 15:08 - 2016-08-10 15:08 - 00002680 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon

2016-08-10 15:08 - 2016-08-10 15:08 - 00002324 _____ C:\WINDOWS\System32\Tasks\{65B280F0-6365-4E24-94F0-A4D23E9E16C8}

2016-08-10 15:08 - 2016-08-10 15:08 - 00002234 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC

2016-08-10 15:08 - 2016-08-10 15:08 - 00002164 _____ C:\WINDOWS\System32\Tasks\SidebarExecute

2016-08-10 15:08 - 2016-08-10 15:08 - 00002142 _____ C:\WINDOWS\System32\Tasks\{EBA32A8E-79E8-4E20-89BD-5FA973AF7B4D}

2016-08-10 15:08 - 2016-08-10 15:08 - 00002142 _____ C:\WINDOWS\System32\Tasks\{5198410F-E2A3-41F6-8852-6740B0156E6B}

2016-08-10 15:08 - 2016-08-10 15:08 - 00002142 _____ C:\WINDOWS\System32\Tasks\{4B620B54-2C8F-450F-BEE5-B8EC1E3A3A0B}

2016-08-10 15:08 - 2016-08-10 15:08 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD

2016-08-10 15:08 - 2016-08-10 15:08 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking

2016-08-10 15:08 - 2016-08-10 15:08 - 00000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform

2016-08-10 15:08 - 2016-08-10 15:08 - 00000000 ____D C:\WINDOWS\System32\Tasks\Aufgaben der Ereignisanzeige

2016-08-10 15:08 - 2012-04-10 14:20 - 00003200 _____ C:\WINDOWS\System32\Tasks\DeviceDetector

2016-08-10 15:08 - 2012-04-10 14:06 - 00003272 _____ C:\WINDOWS\System32\Tasks\PMMUpdate

2016-08-10 15:08 - 2012-04-10 13:48 - 00003986 _____ C:\WINDOWS\System32\Tasks\UALU notificatin

2016-08-10 15:05 - 2016-08-10 15:05 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

2016-08-10 15:05 - 2016-08-10 15:05 - 00000000 ____D C:\Users\Default\AppData\Roaming\Media Center Programs

2016-08-10 15:05 - 2016-08-10 15:05 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia

2016-08-10 15:05 - 2016-08-10 15:05 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help

2016-08-10 15:05 - 2016-08-10 15:05 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Media Center Programs

2016-08-10 15:05 - 2016-08-10 15:05 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia

2016-08-10 15:05 - 2016-08-10 15:05 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help

2016-08-10 15:01 - 2016-08-10 15:01 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines

2016-08-10 15:00 - 2016-08-10 15:06 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate

2016-08-10 14:59 - 2016-09-06 22:59 - 02731550 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2016-08-10 14:59 - 2016-09-05 08:55 - 00000000 ____D C:\Users\ascard

2016-08-10 14:59 - 2016-09-05 08:54 - 00000000 ____D C:\Users\DefaultAppPool

2016-08-10 14:59 - 2016-08-10 14:59 - 01604148 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Vorlagen

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Videos

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Musik

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Bilder

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\Vorlagen

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\Startmenü

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\Netzwerkumgebung

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\Lokale Einstellungen

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\Eigene Dateien

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\Druckumgebung

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\Documents\Eigene Videos

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\Documents\Eigene Musik

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\Documents\Eigene Bilder

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\AppData\Local\Verlauf

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\AppData\Local\Anwendungsdaten

2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\Anwendungsdaten

2016-08-10 14:58 - 2016-08-10 14:58 - 00000000 ____H C:\ProgramData\DP45977C.lfl

2016-08-10 14:58 - 2016-08-10 14:58 - 00000000 ____D C:\Program Files\Common Files\Atheros

2016-08-10 14:57 - 2016-08-10 15:01 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2016-08-10 14:57 - 2016-08-10 15:01 - 00000000 ____D C:\ProgramData\NVIDIA

2016-08-10 14:57 - 2016-08-10 15:01 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2016-08-10 14:57 - 2016-08-10 15:01 - 00000000 ____D C:\Program Files\Intel

2016-08-10 14:57 - 2016-08-10 15:01 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2016-08-10 14:57 - 2016-08-10 14:57 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf

2016-08-10 14:57 - 2016-08-10 14:57 - 00000000 ____D C:\WINDOWS\SysWOW64\sda

2016-08-10 14:57 - 2016-08-10 14:57 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM

2016-08-10 14:57 - 2016-08-10 14:57 - 00000000 ____D C:\WINDOWS\system32\DAX2

2016-08-10 14:57 - 2016-08-10 14:57 - 00000000 ____D C:\Program Files\Realtek

2016-08-10 14:57 - 2016-08-10 14:57 - 00000000 ____D C:\Program Files\Apoint2K

2016-08-10 14:57 - 2016-05-03 23:30 - 00081416 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL

2016-08-10 14:57 - 2016-05-03 23:30 - 00077832 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL

2016-08-10 14:57 - 2015-07-13 19:37 - 06873744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll

2016-08-10 14:57 - 2015-07-13 19:37 - 03493008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll

2016-08-10 14:57 - 2015-07-13 19:37 - 02558792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll

2016-08-10 14:57 - 2015-07-13 19:37 - 01059984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll

2016-08-10 14:57 - 2015-07-13 19:37 - 00937616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe

2016-08-10 14:57 - 2015-07-13 19:37 - 00385168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll

2016-08-10 14:57 - 2015-07-13 19:37 - 00075080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll

2016-08-10 14:57 - 2015-07-13 19:37 - 00062792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll

2016-08-10 14:57 - 2015-07-13 18:28 - 05096627 _____ C:\WINDOWS\system32\nvcoproc.bin

2016-08-10 14:56 - 2016-09-06 22:00 - 00000000 ____D C:\WINDOWS\system32\SleepStudy

2016-08-10 14:56 - 2016-08-10 14:56 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf

2016-08-10 14:56 - 2016-08-10 14:56 - 00000000 ____D C:\WINDOWS\ServiceProfiles

2016-08-10 14:56 - 2016-07-16 13:41 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll

2016-08-10 14:55 - 2016-09-03 13:16 - 00796576 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2016-08-10 13:56 - 2016-08-10 13:59 - 00000036 _____ C:\WINDOWS\progress.ini

2016-08-10 13:19 - 2016-09-06 09:21 - 00000000 ____D C:\Windows10Upgrade

2016-08-10 13:19 - 2016-08-10 15:13 - 00000000 ___HD C:\$GetCurrent

2016-08-10 13:19 - 2016-08-10 13:19 - 05790552 _____ (Microsoft Corporation) C:\Users\ascard\Downloads\Windows10Upgrade28084.exe

2016-08-10 13:19 - 2016-08-10 13:19 - 00000755 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows 10-Upgrade-Assistent.lnk

2016-08-10 08:40 - 2016-08-10 15:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell

2016-08-10 08:40 - 2016-08-10 08:40 - 00000000 ____D C:\Program Files\Classic Shell

2016-08-09 11:08 - 2016-08-09 11:08 - 40853954 _____ C:\Users\ascard\Desktop\8_eTIwMTYtMDUtMTUtMDQ [Konvertiert] Kopie.psd

2016-08-08 12:17 - 2016-08-08 12:17 - 00489660 _____ C:\Users\ascard\Downloads\FRITZ.Box Fon WLAN 7270 v3 (UI) 74.06.06_08.08.16_1217.export

2016-08-08 12:17 - 2016-08-08 12:17 - 00489660 _____ C:\Users\ascard\Downloads\FRITZ.Box Fon WLAN 7270 v3 (UI) 74.06.06_08.08.16_1217(1).export
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-09-06 22:59 - 2016-07-17 00:51 - 01139826 _____ C:\WINDOWS\system32\perfh007.dat

2016-09-06 22:59 - 2016-07-17 00:51 - 00279364 _____ C:\WINDOWS\system32\perfc007.dat

2016-09-06 22:52 - 2016-07-16 08:04 - 00262144 _____ C:\WINDOWS\system32\config\BBI

2016-09-06 22:52 - 2016-07-11 15:45 - 00000000 __SHD C:\Users\ascard\IntelGraphicsProfiles

2016-09-06 22:51 - 2015-04-25 08:57 - 00000000 ____D C:\AdwCleaner

2016-09-06 22:06 - 2016-07-12 14:25 - 00000000 ____D C:\Users\ascard\AppData\Local\ClassicShell

2016-09-06 12:41 - 2016-06-24 14:05 - 1227508736 _____ C:\Users\ascard\AppData\Local\SageThumbs.db3

2016-09-06 09:21 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\INF

2016-09-06 09:21 - 2016-07-11 16:03 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2

2016-09-06 09:21 - 2016-06-21 12:21 - 00000000 ____D C:\Program Files (x86)\MP3Gain

2016-09-06 09:21 - 2016-05-13 07:56 - 00000000 ____D C:\Users\ascard\AppData\Roaming\WhatsApp

2016-09-06 09:21 - 2016-05-13 07:55 - 00000000 ____D C:\Users\ascard\AppData\Local\WhatsApp

2016-09-06 09:21 - 2016-05-13 07:55 - 00000000 ____D C:\Users\ascard\AppData\Local\SquirrelTemp

2016-09-06 09:21 - 2015-12-24 12:25 - 00000000 ____D C:\ProgramData\newrestore

2016-09-06 09:21 - 2015-12-24 12:25 - 00000000 ____D C:\ProgramData\launcher

2016-09-06 09:21 - 2015-12-24 12:23 - 00000000 ____D C:\ProgramData\explauncher

2016-09-06 09:21 - 2015-10-18 23:42 - 00000000 ___RD C:\Users\ascard\Desktop\Software

2016-09-06 09:21 - 2015-10-06 23:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter

2016-09-06 09:21 - 2015-03-18 23:55 - 00000000 ____D C:\Users\ascard\AppData\Roaming\VideoEditor

2016-09-06 09:21 - 2015-02-18 22:25 - 00000000 ____D C:\Users\ascard\Desktop\SMP.4.48

2016-09-06 09:21 - 2015-02-03 00:08 - 00000000 ____D C:\Users\ascard\Documents\SelfMV

2016-09-06 09:21 - 2015-02-01 11:59 - 00000000 ____D C:\Users\ascard\AppData\Roaming\TeamViewer

2016-09-06 09:21 - 2014-12-14 16:56 - 00000000 ____D C:\Program Files\CCleaner

2016-09-06 09:21 - 2014-12-14 16:41 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Screensaver

2016-09-06 09:21 - 2014-12-14 15:22 - 00000000 ____D C:\ProgramData\install_clap

2016-09-06 09:21 - 2014-12-14 15:16 - 00000000 ____D C:\ProgramData\Atheros

2016-09-06 09:21 - 2012-04-10 14:08 - 00000000 ____D C:\ProgramData\oem

2016-09-06 09:21 - 2012-04-10 13:28 - 00000000 ___HD C:\OEM

2016-09-06 08:21 - 2012-04-10 14:09 - 00000000 ____D C:\Program Files (x86)\Adobe

2016-09-05 10:51 - 2014-12-14 17:09 - 00000000 ____D C:\Program Files\VideoLAN

2016-09-05 09:00 - 2015-01-06 12:05 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Skype

2016-09-05 08:56 - 2014-12-14 18:43 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2016-09-05 08:56 - 2014-12-14 18:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR

2016-09-05 08:56 - 2014-12-14 18:43 - 00000000 ____D C:\Program Files\WinRAR

2016-09-05 08:55 - 2015-01-06 12:06 - 00000000 ____D C:\Users\ascard\AppData\Local\Skype

2016-09-05 08:55 - 2012-04-10 13:43 - 00000000 ____D C:\ProgramData\Skype

2016-09-05 08:52 - 2014-12-14 16:43 - 00000000 ____D C:\ProgramData\Package Cache

2016-09-05 08:52 - 2014-12-14 16:43 - 00000000 ____D C:\ProgramData\Avira

2016-09-05 08:51 - 2014-12-17 14:21 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Avira

2016-09-05 08:47 - 2016-05-25 11:21 - 00000000 ____D C:\ProgramData\AVAST Software

2016-09-04 11:36 - 2014-12-14 23:22 - 00000000 ____D C:\Users\ascard\AppData\Local\CrashDumps

2016-09-04 07:46 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\AppReadiness

2016-09-03 15:42 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\rescache

2016-09-03 07:39 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps

2016-09-02 14:29 - 2016-07-16 13:36 - 00000000 ____D C:\WINDOWS\CbsTemp

2016-09-02 11:40 - 2015-04-01 17:56 - 00000000 ___RD C:\Users\ascard\Dropbox

2016-09-02 11:40 - 2014-12-17 14:20 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Dropbox

2016-09-02 08:59 - 2014-12-14 15:05 - 00000000 ____D C:\Users\UpdatusUser

2016-09-01 13:14 - 2016-04-27 07:56 - 00000000 __RHD C:\Users\Public\AccountPictures

2016-09-01 13:13 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\dsc

2016-09-01 13:13 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2016-09-01 13:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2016-09-01 13:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\lv-LV

2016-09-01 13:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\lt-LT

2016-09-01 13:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\et-EE

2016-09-01 13:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\es-MX

2016-09-01 13:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\en-GB

2016-09-01 13:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\ShellExperiences

2016-09-01 13:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Provisioning

2016-09-01 13:12 - 2014-12-14 16:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2016-09-01 11:24 - 2015-06-07 22:50 - 00000000 ____D C:\Users\ascard\AppData\Local\Amazon Cloud Drive

2016-08-23 22:26 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\appraiser

2016-08-22 12:51 - 2015-10-21 00:00 - 00000000 ____D C:\Users\ascard\AppData\Local\NVIDIA

2016-08-20 12:12 - 2014-12-18 18:59 - 00000000 ____D C:\Users\ascard\Documents\Camtasia Studio

2016-08-19 12:01 - 2015-02-21 15:07 - 00000000 ____D C:\Users\ascard\Documents\My Videos

2016-08-18 12:47 - 2015-08-31 11:20 - 00000000 ____D C:\Program Files\Avidemux 2.6 - 64 bits

2016-08-18 12:33 - 2015-11-02 12:13 - 00000867 _____ C:\Users\Public\Desktop\CCleaner.lnk

2016-08-18 09:32 - 2012-04-10 14:18 - 00000000 ____D C:\ProgramData\Temp

2016-08-16 13:31 - 2014-12-14 15:03 - 00000000 ____D C:\Dolby PCEE4

2016-08-16 13:23 - 2016-07-11 16:04 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy

2016-08-16 13:20 - 2016-02-18 02:02 - 00000779 _____ C:\Users\ascard\Desktop\Security Monitor Pro - Verknüpfung.lnk

2016-08-13 13:10 - 2016-07-11 15:46 - 00000000 ____D C:\Users\ascard\AppData\Local\Packages

2016-08-13 11:25 - 2012-04-10 14:20 - 00000000 ____D C:\WINDOWS\Downloaded Installations

2016-08-13 10:07 - 2016-07-16 08:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM

2016-08-12 13:04 - 2016-08-04 21:48 - 00001377 _____ C:\Users\Public\Desktop\Intel SSD Toolbox.lnk

2016-08-11 07:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\appcompat

2016-08-10 17:13 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\USOPrivate

2016-08-10 15:55 - 2016-07-16 13:49 - 00000000 ____D C:\WINDOWS\Setup

2016-08-10 15:55 - 2016-07-16 13:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template

2016-08-10 15:49 - 2016-07-17 00:52 - 00000000 ____D C:\WINDOWS\OCR

2016-08-10 15:46 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI

2016-08-10 15:46 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv

2016-08-10 15:46 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\MUI

2016-08-10 15:46 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\inetsrv

2016-08-10 15:46 - 2016-07-16 13:44 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll

2016-08-10 15:46 - 2016-07-16 13:44 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll

2016-08-10 15:46 - 2016-07-16 13:44 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll

2016-08-10 15:46 - 2016-07-16 13:44 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll

2016-08-10 15:46 - 2016-07-16 13:44 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll

2016-08-10 15:46 - 2016-07-16 13:44 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb

2016-08-10 15:46 - 2016-07-16 13:44 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb

2016-08-10 15:46 - 2016-07-16 13:44 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb

2016-08-10 15:46 - 2016-07-16 13:44 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll

2016-08-10 15:46 - 2016-07-16 13:44 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb

2016-08-10 15:46 - 2016-07-16 13:44 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll

2016-08-10 15:46 - 2016-07-16 13:44 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe

2016-08-10 15:46 - 2016-07-16 13:44 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll

2016-08-10 15:46 - 2016-07-16 13:44 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll

2016-08-10 15:46 - 2016-07-16 13:44 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll

2016-08-10 15:46 - 2016-07-16 13:44 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngkeyhelper.dll

2016-08-10 15:46 - 2016-07-16 13:44 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof

2016-08-10 15:46 - 2016-07-16 13:43 - 01414144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00785408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00471040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys

2016-08-10 15:46 - 2016-07-16 13:43 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb

2016-08-10 15:46 - 2016-07-16 13:43 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb

2016-08-10 15:46 - 2016-07-16 13:43 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb

2016-08-10 15:46 - 2016-07-16 13:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe

2016-08-10 15:46 - 2016-07-16 13:43 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb

2016-08-10 15:46 - 2016-07-16 13:43 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe

2016-08-10 15:46 - 2016-07-16 13:43 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe

2016-08-10 15:46 - 2016-07-16 13:43 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe

2016-08-10 15:46 - 2016-07-16 13:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe

2016-08-10 15:46 - 2016-07-16 13:43 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe

2016-08-10 15:46 - 2016-07-16 13:43 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof

2016-08-10 15:46 - 2016-07-16 13:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll

2016-08-10 15:46 - 2016-07-16 13:43 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll

2016-08-10 15:15 - 2016-07-11 15:49 - 00002429 _____ C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2016-08-10 15:15 - 2016-07-11 15:49 - 00000000 ___RD C:\Users\ascard\OneDrive

2016-08-10 15:10 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows NT

2016-08-10 15:09 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Registration

2016-08-10 15:08 - 2016-07-16 13:47 - 00000000 __RSD C:\WINDOWS\Media

2016-08-10 15:08 - 2016-07-16 13:47 - 00000000 __RHD C:\Users\Public\Libraries

2016-08-10 15:08 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase

2016-08-10 15:08 - 2016-07-11 15:41 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat

2016-08-10 15:08 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated

2016-08-10 15:06 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\FxsTmp

2016-08-10 15:06 - 2015-10-15 18:23 - 00000000 ____D C:\ProgramData\regid.1995-08.com.techsmith

2016-08-10 15:05 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2016-08-10 15:05 - 2015-10-30 08:28 - 00000000 ____D C:\Users\Default.migrated

2016-08-10 15:01 - 2016-08-02 20:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IsoBuster

2016-08-10 15:01 - 2016-07-19 17:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung

2016-08-10 15:01 - 2016-07-17 00:50 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep

2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 __SHD C:\Program Files\Windows Sidebar

2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar

2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed

2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\IME

2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\spool

2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\oobe

2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\NDF

2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\Macromed

2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\IME

2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\schemas

2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\PolicyDefinitions

2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports

2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Cursors

2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared

2016-08-10 15:01 - 2016-07-11 16:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2

2016-08-10 15:01 - 2016-07-11 13:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Core Temp

2016-08-10 15:01 - 2016-07-11 11:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMPUTER BILD

2016-08-10 15:01 - 2016-06-28 11:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime

2016-08-10 15:01 - 2016-06-24 14:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SageThumbs

2016-08-10 15:01 - 2016-06-21 12:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MP3Gain

2016-08-10 15:01 - 2016-06-03 09:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ulead COOL 3D Production Studio

2016-08-10 15:01 - 2016-06-01 15:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo

2016-08-10 15:01 - 2016-04-27 07:33 - 00000000 ____D C:\WINDOWS\ShellNew

2016-08-10 15:01 - 2016-04-15 19:17 - 00000000 ____D C:\WINDOWS\SysWOW64\NV

2016-08-10 15:01 - 2016-04-15 19:17 - 00000000 ____D C:\WINDOWS\system32\NV

2016-08-10 15:01 - 2016-04-15 17:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vulkan

2016-08-10 15:01 - 2016-03-14 13:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picture Control Utility 2

2016-08-10 15:01 - 2016-03-14 13:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nikon Message Center 2

2016-08-10 15:01 - 2016-03-14 13:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Capture NX-D

2016-08-10 15:01 - 2016-03-14 13:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ViewNX-i

2016-08-10 15:01 - 2016-03-14 13:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Link to Nikon

2016-08-10 15:01 - 2016-02-23 20:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech

2016-08-10 15:01 - 2015-10-21 10:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2016-08-10 15:01 - 2015-10-15 18:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith

2016-08-10 15:01 - 2015-10-12 20:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPUBSOFT

2016-08-10 15:01 - 2015-10-10 22:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management

2016-08-10 15:01 - 2015-10-09 00:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comic Life 3

2016-08-10 15:01 - 2015-10-06 23:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\proDAD

2016-08-10 15:01 - 2015-10-06 23:19 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Corel VideoStudio Pro X8

2016-08-10 15:01 - 2015-09-27 23:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HxD Hex Editor

2016-08-10 15:01 - 2015-04-20 00:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reallusion

2016-08-10 15:01 - 2015-03-30 11:34 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer Crystal Eye Webcam

2016-08-10 15:01 - 2015-03-26 14:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvsoft

2016-08-10 15:01 - 2015-03-18 23:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlashIntegro

2016-08-10 15:01 - 2015-02-23 12:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\onOne Software

2016-08-10 15:01 - 2015-02-09 00:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Topaz Labs

2016-08-10 15:01 - 2015-01-28 12:36 - 00000000 ____D C:\WINDOWS\SysWOW64\spool

2016-08-10 15:01 - 2015-01-15 19:23 - 00000000 ____D C:\WINDOWS\SysWOW64\Adobe

2016-08-10 15:01 - 2015-01-11 15:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office

2016-08-10 15:01 - 2014-12-30 19:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft

2016-08-10 15:01 - 2014-12-23 00:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake

2016-08-10 15:01 - 2014-12-22 21:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON

2016-08-10 15:01 - 2014-12-14 20:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2016-08-10 15:01 - 2014-12-14 19:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe

2016-08-10 15:01 - 2014-12-14 16:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

2016-08-10 15:01 - 2014-12-14 15:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AcerSystem

2016-08-10 15:01 - 2012-04-10 14:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink MediaEspresso

2016-08-10 15:01 - 2012-04-10 14:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer Backup Manager

2016-08-10 15:01 - 2012-04-10 14:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EgisTec

2016-08-10 15:01 - 2012-04-10 14:00 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live

2016-08-10 15:01 - 2012-04-10 14:00 - 00000000 ____D C:\WINDOWS\tr

2016-08-10 15:01 - 2012-04-10 14:00 - 00000000 ____D C:\WINDOWS\th

2016-08-10 15:01 - 2012-04-10 14:00 - 00000000 ____D C:\WINDOWS\sv

2016-08-10 15:01 - 2012-04-10 14:00 - 00000000 ____D C:\WINDOWS\sl

2016-08-10 15:01 - 2012-04-10 14:00 - 00000000 ____D C:\WINDOWS\sk

2016-08-10 15:01 - 2012-04-10 14:00 - 00000000 ____D C:\WINDOWS\ru

2016-08-10 15:01 - 2012-04-10 14:00 - 00000000 ____D C:\WINDOWS\ro

2016-08-10 15:01 - 2012-04-10 14:00 - 00000000 ____D C:\WINDOWS\ca

2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\pl

2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\no

2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\nl

2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\it

2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\hu

2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\hr

2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\he

2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\fr

2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\fi

2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\es

2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\en

2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\el

2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\de

2016-08-10 15:01 - 2012-04-10 13:58 - 00000000 ____D C:\WINDOWS\da

2016-08-10 15:01 - 2012-04-10 13:58 - 00000000 ____D C:\WINDOWS\cs

2016-08-10 15:01 - 2012-04-10 13:58 - 00000000 ____D C:\WINDOWS\bg

2016-08-10 15:01 - 2012-04-10 13:58 - 00000000 ____D C:\WINDOWS\ar

2016-08-10 15:01 - 2012-04-10 13:47 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer

2016-08-10 15:01 - 2012-04-10 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote

2016-08-10 15:01 - 2012-04-10 13:12 - 00000000 ____D C:\WINDOWS\SysWOW64\Atheros_L1e

2016-08-10 15:01 - 2012-04-10 13:08 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel

2016-08-10 15:01 - 2010-11-21 09:16 - 00000000 ___RD C:\Users\Public\Recorded TV

2016-08-10 15:01 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Microsoft Games

2016-08-10 15:00 - 2016-07-11 13:24 - 00000000 ___RD C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices

2016-08-10 15:00 - 2016-06-01 12:46 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Disk Space Fan 4 Free

2016-08-10 15:00 - 2016-05-13 07:56 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp

2016-08-10 15:00 - 2015-06-07 22:50 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon Cloud Drive

2016-08-10 15:00 - 2015-02-19 21:43 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinISO

2016-08-10 15:00 - 2014-12-23 00:14 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake

2016-08-10 14:59 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep

2016-08-10 14:58 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\PrintDialog

2016-08-10 14:58 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\MiracastView

2016-08-10 14:57 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Help

2016-08-10 14:24 - 2016-07-28 23:19 - 00001138 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2016-08-10 14:23 - 2015-06-07 18:01 - 00001228 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-767237098-4183446396-2625044690-1002UA.job

2016-08-10 13:17 - 2016-07-28 23:19 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2016-08-09 20:23 - 2015-06-07 18:01 - 00001176 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-767237098-4183446396-2625044690-1002Core.job

2016-08-08 23:25 - 2014-12-14 17:11 - 00002268 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2016-08-08 12:47 - 2016-06-01 12:46 - 00000000 ____D C:\Users\ascard\AppData\Roaming\DiskSpaceFan

2016-08-08 09:26 - 2016-05-07 13:29 - 00000022 _____ C:\Users\ascard\Desktop\sys.ini
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2016-03-06 13:37 - 2016-04-04 22:35 - 0000132 _____ () C:\Users\ascard\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen

2015-01-30 15:47 - 2015-07-30 21:34 - 0000132 _____ () C:\Users\ascard\AppData\Roaming\Adobe PNG Format CS5 Prefs

2016-09-06 09:10 - 2016-09-06 09:34 - 0000115 _____ () C:\Users\ascard\AppData\Roaming\LogFile.txt

2016-03-14 13:50 - 2016-03-14 13:50 - 0000268 ___RH () C:\Users\ascard\AppData\Roaming\Spacious

2016-03-14 13:50 - 2016-03-14 13:50 - 0000268 ___RH () C:\Users\ascard\AppData\Roaming\Speech Enhancer

2016-08-11 21:04 - 2016-08-28 10:33 - 0001456 _____ () C:\Users\ascard\AppData\Local\Adobe Für Web speichern 13.0 Prefs

2015-02-18 22:35 - 2016-01-07 14:56 - 0007168 _____ () C:\Users\ascard\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2015-10-11 00:52 - 2015-10-11 00:52 - 0000292 _____ () C:\Users\ascard\AppData\Local\HamsterBookConverter.cfg

2015-05-13 09:04 - 2016-07-13 13:15 - 0007605 _____ () C:\Users\ascard\AppData\Local\resmon.resmoncfg

2016-06-24 14:05 - 2016-09-06 12:41 - 1227508736 _____ () C:\Users\ascard\AppData\Local\SageThumbs.db3

2016-09-06 22:52 - 2016-09-06 22:52 - 0000000 ____H () C:\ProgramData\cm-lock

2016-08-10 14:58 - 2016-08-10 14:58 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

2016-03-14 13:50 - 2016-03-14 13:50 - 0000020 ____H () C:\ProgramData\PKP_DLet.DAT

2016-03-14 13:50 - 2016-03-14 13:50 - 0000020 ____H () C:\ProgramData\PKP_DLev.DAT

2016-03-14 13:50 - 2016-03-14 13:50 - 0000268 ___RH () C:\ProgramData\Standard

2016-03-14 13:50 - 2016-03-14 13:50 - 0000268 ___RH () C:\ProgramData\StartupItems

2015-11-23 01:30 - 2015-11-23 01:30 - 0000008 __RSH () C:\ProgramData\sysqcl1131236454.dat
 

Dateien, die verschoben oder gelöscht werden sollten:

====================

C:\ProgramData\sysqcl1131236454.dat
 
 

Einige Dateien in TEMP:

====================

C:\Users\ascard\AppData\Local\Temp\libeay32.dll

C:\Users\ascard\AppData\Local\Temp\msvcr120.dll

C:\Users\ascard\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2016-09-01 11:07
 

==================== Ende von FRST.txt ============================

Zitat:

AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

....soviel zum Thema: Avast ist deinstalliert :wtf: :wtf: :wtf:

avast habe ich auf deaktieviert gesetzt und hat sich anscheinend beim neustart wie eingeschaltet

Du hast meinen Beitrag aber schon gelesen oder? Oder einfach nur ignoriert?

deswegen habe ich ihn ja auf deaktivieren gesetzt

Was der Unterschied zwischen deinstallieren und deaktivieren ist weißt du aber?
Was Avast für einen Müll abzieht ist dir auch egal?