Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

suspected Infection of my laptop

Started by Vektic , Jul 09 2016 03:03 PM

laptop; performance; graphics; low FPS;

Please log in to reply

#1
Vektic

Posted 09 July 2016 - 03:03 PM

New Member

Member
3 posts

Hello,

First off, I wanna say, that I am not sure what is causing my problems, and I dont get any weird popups or toolbars, or find suspicious programs sucking up space in taskmanager. So I'm not sure if its actually a virus. Despite this, I'd really appreciate you having a look over it. Thanks alot in advance. I`ve first encountered problems relating to this issue several months ago, although back then I had no immediate need for help, as I didnt really use my Laptop back then. Its a MSI GE60 0ND, fyi. The performance took a huge hit and now many graphics-intense programs can only be run at the lowest settings and at about 30 FPS, whereas they used to work at 60 FPS, even with maxed out settings. There is nothing suspicious to be found in the taskmanager and overheating isn't an issue either. My first thought was that the HDD might jsut be old, so i defragged it and ran CCleaner, as well as freeing up about 100GB of space without any effect on the performance. I have then run "System Requirements Lab Detection" to find out that primarily the 3D graphics are lackluster now. Here my observation stops, as I dont have the tech-confidence to screw around with my BIOS or do anything that requires more than a basic understanding of technology. Anyways, thanks so much for helping me deal with this problem of mine, and please excuse that the report below is in german, I hope that won't be to much trouble. Greeting, Laurin

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 09-07-2016

durchgeführt von Laurin (Administrator) auf LAURIN-PC (09-07-2016 22:42:00)

Gestartet von C:\Users\Laurin\Desktop

Geladene Profile: Admini & Laurin (Verfügbare Profile: Admini & Laurin)

Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Chrome)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe

() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe

(Spotify Ltd) C:\Users\Laurin\AppData\Roaming\Spotify\SpotifyWebHelper.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\ActionUriServer.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Spotify Ltd) C:\Users\Laurin\AppData\Roaming\Spotify\Spotify.exe

(Spotify Ltd) C:\Users\Laurin\AppData\Roaming\Spotify\SpotifyCrashService.exe

(Spotify Ltd) C:\Users\Laurin\AppData\Roaming\Spotify\Spotify.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

() C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe

() C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.1.22\deploy\LoLLauncher.exe

() C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.62\deploy\LoLPatcher.exe

() C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.205\deploy\LolClient.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3349208 2016-07-08] (ELAN Microelectronics Corp.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-04] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14021336 2015-06-18] (Realtek Semiconductor)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595992 2016-03-20] (Oracle Corporation)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565960 2016-06-08] (LogMeIn Inc.)

HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [186640 2016-06-21] (AVG Technologies CZ, s.r.o.)

HKU\S-1-5-21-1109650262-165368546-2739042002-1001\...\Run: [SSync] => C:\Users\Admini\AppData\Roaming\SSync\SSync.exe [37376 2013-12-09] ()

HKU\S-1-5-21-1109650262-165368546-2739042002-1001\...\Run: [EADM] => C:\Users\Public\Desktop\Origin\Origin.exe [3632112 2015-07-16] (Electronic Arts)

HKU\S-1-5-21-1109650262-165368546-2739042002-1001\...\Run: [SteelSeries Engine] => C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe [242688 2013-11-05] (SteelSeries ApS)

HKU\S-1-5-21-1109650262-165368546-2739042002-1001\...\Run: [Intermediate] => C:\Users\Admini\AppData\Roaming\Intermediate\Intermediate.exe [37376 2013-12-09] ()

HKU\S-1-5-21-1109650262-165368546-2739042002-1001\...\Run: [Sixth] => C:\Users\Admini\AppData\Roaming\Sixth\Sixth.exe [63624 2014-08-04] ()

HKU\S-1-5-21-1109650262-165368546-2739042002-1001\...\Run: [MKLOL] => C:\Users\Admini\Desktop\MKJogo\MK IM\Bin\MKIM.exe [1092296 2015-06-05] ()

HKU\S-1-5-21-1109650262-165368546-2739042002-1001\...\Run: [DataMgr] => C:\Users\Admini\AppData\Roaming\DataMgr\DataMgr.exe [168824 2014-01-23] (HTTO Group, Ltd.)

HKU\S-1-5-21-1109650262-165368546-2739042002-1001\...\Run: [Gameo] => C:\Users\Admini\AppData\Roaming\Gameo\gameo.exe [42482176 2015-07-04] ()

HKU\S-1-5-21-1109650262-165368546-2739042002-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50670720 2016-03-01] (Skype Technologies S.A.)

HKU\S-1-5-21-1109650262-165368546-2739042002-1001\...\Run: [SCheck] => C:\Users\Admini\AppData\Roaming\SCheck\SCheck.exe [51200 2015-10-26] ()

HKU\S-1-5-21-1109650262-165368546-2739042002-1002\...\Run: [Spotify Web Helper] => C:\Users\Laurin\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1553520 2016-07-06] (Spotify Ltd)

HKU\S-1-5-21-1109650262-165368546-2739042002-1002\...\Run: [Spotify] => C:\Users\Laurin\AppData\Roaming\Spotify\Spotify.exe [7003760 2016-07-06] (Spotify Ltd)

HKU\S-1-5-21-1109650262-165368546-2739042002-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8824024 2016-06-21] (Piriform Ltd)

HKU\S-1-5-21-1109650262-165368546-2739042002-1002\...\RunOnce: [Uninstall C:\Users\Laurin\AppData\Local\Microsoft\OneDrive\17.3.5930.0814_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Laurin\AppData\Local\Microsoft\OneDrive\17.3.5930.0814_1\amd64"

HKU\S-1-5-21-1109650262-165368546-2739042002-1002\...\MountPoints2: {e035a877-f067-11e5-bf19-8c89a50ac9db} - "E:\Startme.exe"

HKU\S-1-5-21-1109650262-165368546-2739042002-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\lol.scr

ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Laurin\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\FileSyncShell64.dll [2016-05-24] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Laurin\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\FileSyncShell64.dll [2016-05-24] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Laurin\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\FileSyncShell64.dll [2016-05-24] (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Laurin\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileSyncShell.dll [2016-05-24] (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Laurin\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileSyncShell.dll [2016-05-24] (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Laurin\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileSyncShell.dll [2016-05-24] (Microsoft Corporation)

Startup: C:\Users\Laurin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2015-04-30]

ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Keine Datei)

Startup: C:\Users\Laurin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Curse.lnk [2016-06-04]

ShortcutTarget: Curse.lnk -> C:\Users\Laurin\AppData\Roaming\Curse Client\Bin\Curse.exe (Curse, Inc)

GroupPolicy: Beschränkung - Chrome <======= ACHTUNG

GroupPolicyUsers\S-1-5-21-1109650262-165368546-2739042002-1002\User: Beschränkung <======= ACHTUNG

GroupPolicyUsers\S-1-5-21-1109650262-165368546-2739042002-1001\User: Beschränkung <======= ACHTUNG

CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{39b04176-13be-4de7-81f7-51f8cb930285}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{77ed79c4-9efd-4bd2-8dc5-1c00dad8904a}: [DhcpNameServer] 192.168.178.1

Internet Explorer:

==================

HKU\S-1-5-21-1109650262-165368546-2739042002-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ_ay0kzj6uILRnD2bQzWRIklCtahJtlz9yYHBjSvUXrdkeiY7Ofoe83I8FTr9TMiym_LAqpsNCMJ3AIz8Wcvda4f4-pJxWX46Sc4EiwnMdmjvTiIV6IxBPowC56jXUthVuhM0jSO1O4ZIVSnfpsBDcTmyfQ,,&q={searchTerms}

HKU\S-1-5-21-1109650262-165368546-2739042002-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/

HKU\S-1-5-21-1109650262-165368546-2739042002-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.fdownloadr.com/?channel=fpo2&pt2610=3&t=

HKU\S-1-5-21-1109650262-165368546-2739042002-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ_ay0kzj6uILRnD2bQzWRIklCtahJtlz9yYHBjSvUXrdkeiY7Ofoe83I8FTr9TMiym_LAqpsNCMJ3AIz8Wcvda4f4-pJxWX46Sc4EiwnMdmjvTiIV6IxBPowC56jXUthVuhM0jSO1O4ZIVSnfpsBDcTmyfQ,,&q={searchTerms}

HKU\S-1-5-21-1109650262-165368546-2739042002-1001\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ_ay0kzj6uILRnD2bQzWRIklCtahJtlz9yYHBjSvUXrdkeiY7Ofoe83I8FTr9TMiym_LAqpsNCMJ3AIz8Wcvda4f4-pJxWX46Sc4EiwnMdmjvTiIV6IxBPowC56jXUthVuhM0jSO1O4ZIVSnfpsBDcTmyfQ,,&q={searchTerms}

HKU\S-1-5-21-1109650262-165368546-2739042002-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ_ay0kzj6uILRnD2bQzWRIklCtahJtlz9yYHBjSvUXrdkeiY7Ofoe83I8FTr9TMiym_LAqpsNCMJ3AIz8Wcvda4f4-pJxWX46Sc4EiwnMdmjvTiIV6IxBPowC56jXUthVuhM0jSO1O4ZIVSnfpsBDcTmyfQ,,&q={searchTerms}

HKU\S-1-5-21-1109650262-165368546-2739042002-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ_ay0kzj6uILRnD2bQzWRIklCtahJtlz9yYHBjSvUXrdkeiY7Ofoe83I8FTr9TMiym_LAqpsNCMJ3AICGygWdSngc7wSn1mkv6SQQiwOg2Dgo_mhfSbDtTA41rt5ipBIm2m8QG8IiMTKL8eUPbm0Gn9lZQg,,

HKU\S-1-5-21-1109650262-165368546-2739042002-1002\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/

HKU\S-1-5-21-1109650262-165368546-2739042002-1002\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ_ay0kzj6uILRnD2bQzWRIklCtahJtlz9yYHBjSvUXrdkeiY7Ofoe83I8FTr9TMiym_LAqpsNCMJ3AIz8Wcvda4f4-pJxWX46Sc4EiwnMdmjvTiIV6IxBPowC56jXUthVuhM0jSO1O4ZIVSnfpsBDcTmyfQ,,&q={searchTerms}

HKU\S-1-5-21-1109650262-165368546-2739042002-1002\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ_ay0kzj6uILRnD2bQzWRIklCtahJtlz9yYHBjSvUXrdkeiY7Ofoe83I8FTr9TMiym_LAqpsNCMJ3AIz8Wcvda4f4-pJxWX46Sc4EiwnMdmjvTiIV6IxBPowC56jXUthVuhM0jSO1O4ZIVSnfpsBDcTmyfQ,,&q={searchTerms}

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL =

SearchScopes: HKLM-x32 -> ielnksrch URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ_ay0kzj6uILRnD2bQzWRIklCtahJtlz9yYHBjSvUXrdkeiY7Ofoe83I8FTr9TMiym_LAqpsNCMJ3AIz8Wcvda4f4-pJxWX46Sc4EiwnMdmjvTiIV6IxBPowC56jXUthVuhM0jSO1O4ZIVSnfpsBDcTmyfQ,,&q={searchTerms}

SearchScopes: HKU\S-1-5-21-1109650262-165368546-2739042002-1001 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://search.fdownloadr.com/search.php?channel=fpo2&pt2610=3&q={searchTerms}&t=

SearchScopes: HKU\S-1-5-21-1109650262-165368546-2739042002-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://search.fdownloadr.com/search.php?channel=fpo2&pt2610=3&q={searchTerms}&t=

SearchScopes: HKU\S-1-5-21-1109650262-165368546-2739042002-1001 -> {C2DD0E45-0568-4C37-8095-A976A6AB30E7} URL = hxxp://www.search.ask.com/web?tpid=ORJ-V7C&o=APN11406&pf=V7&p2=^BBE^OSJ000^YY^DE&gct=&itbv=12.7.0.15&apn_uid=8FEA85D4-B700-4CE6-B154-43EC2BE57779&apn_ptnrs=BBE&apn_dtid=^OSJ000^YY^DE&apn_dbr=ie_10.0.9200.16537&doi=2014-02-03&trgb=IE&q={searchTerms}&psv=&pt=tb

SearchScopes: HKU\S-1-5-21-1109650262-165368546-2739042002-1001 -> {F7C78C08-3CC7-416F-B827-7C1785ABBDA8} URL = hxxp://wisersearch.com/search.php?channel=de&q={searchTerms}

SearchScopes: HKU\S-1-5-21-1109650262-165368546-2739042002-1001 -> {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ_ay0kzj6uILRnD2bQzWRIklCtahJtlz9yYHBjSvUXrdkeiY7Ofoe83I8FTr9TMiym_LAqpsNCMJ3AIz8Wcvda4f4-pJxWX46Sc4EiwnMdmjvTiIV6IxBPowC56jXUthVuhM0jSO1O4ZIVSnfpsBDcTmyfQ,,&q={searchTerms}

SearchScopes: HKU\S-1-5-21-1109650262-165368546-2739042002-1002 -> DefaultScope {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ_ay0kzj6uILRnD2bQzWRIklCtahJtlz9yYHBjSvUXrdkeiY7Ofoe83I8FTr9TMiym_LAqpsNCMJ3AIz8Wcvda4f4-pJxWX46Sc4EiwnMdmjvTiIV6IxBPowC56jXUthVuhM0jSO1O4ZIVSnfpsBDcTmyfQ,,&q={searchTerms}

SearchScopes: HKU\S-1-5-21-1109650262-165368546-2739042002-1002 -> {16D9A07F-1338-40E7-9062-F20DF5914A31} URL = hxxp://start.iminent.com/?appId=C062EA0A-8BC6-44F0-997A-0F84B6BEA366&ref=toolbox&q={searchTerms}

SearchScopes: HKU\S-1-5-21-1109650262-165368546-2739042002-1002 -> {414F6B76-E0DA-4867-81F7-467047698EAA} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8

SearchScopes: HKU\S-1-5-21-1109650262-165368546-2739042002-1002 -> {A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9} URL =

SearchScopes: HKU\S-1-5-21-1109650262-165368546-2739042002-1002 -> {A501C3BA-F4C0-4CB1-AF90-49362A0DAC85} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8

SearchScopes: HKU\S-1-5-21-1109650262-165368546-2739042002-1002 -> {C12D09C7-EBD2-4340-99D0-CF188C6800B4} URL = hxxp://www.search.ask.com/web?tpid=ORJ-V7C&o=APN11406&pf=V7&p2=^BBE^OSJ000^YY^DE&gct=&itbv=12.7.0.15&apn_uid=8FEA85D4-B700-4CE6-B154-43EC2BE57779&apn_ptnrs=BBE&apn_dtid=^OSJ000^YY^DE&apn_dbr=ie_10.0.9200.16537&doi=2014-02-03&trgb=IE&q={searchTerms}&psv=&pt=tb

SearchScopes: HKU\S-1-5-21-1109650262-165368546-2739042002-1002 -> {EAF3ABD0-FE6D-4E33-B83F-FC625215CD1D} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8

SearchScopes: HKU\S-1-5-21-1109650262-165368546-2739042002-1002 -> {F0BA6593-F952-44C1-969D-48B827D2186D} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8

SearchScopes: HKU\S-1-5-21-1109650262-165368546-2739042002-1002 -> {ielnksrch} URL = hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ_ay0kzj6uILRnD2bQzWRIklCtahJtlz9yYHBjSvUXrdkeiY7Ofoe83I8FTr9TMiym_LAqpsNCMJ3AIz8Wcvda4f4-pJxWX46Sc4EiwnMdmjvTiIV6IxBPowC56jXUthVuhM0jSO1O4ZIVSnfpsBDcTmyfQ,,&q={searchTerms}

BHO: Kein Name -> {4F524A2D-5637-4300-76A7-7A786E7484D7} -> Keine Datei

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_77\bin\ssv.dll [2016-04-09] (Oracle Corporation)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_77\bin\jp2ssv.dll [2016-04-09] (Oracle Corporation)

BHO-x32: OfferMosquito -> {82B16A3D-F03E-4565-A532-666B219C9A53} -> C:\Users\Admini\AppData\Local\ext_offermosquito\OfferMosquitoIEPlaceholder.dll [2014-02-05] (Bebo Media Ltd)

BHO-x32: Kein Name -> {a5bfd1d3-18b6-4fc3-b3f9-262ae3552dbe} -> Keine Datei

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)

BHO-x32: ChromeFrame BHO -> {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} -> C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll [2014-02-02] (Google Inc.)

Toolbar: HKU\S-1-5-21-1109650262-165368546-2739042002-1001 -> Kein Name - {4F524A2D-5637-4300-76A7-7A786E7484D7} - Keine Datei

IE Session Restore: HKU\S-1-5-21-1109650262-165368546-2739042002-1001 -> ist aktiviert.

Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll [2014-02-02] (Google Inc.)

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)

Edge:

======

Edge HomeButtonPage: HKU\S-1-5-21-1109650262-165368546-2739042002-1002 -> hxxp://go.web.de/tb/ie_startpage

FireFox:

========

FF ProfilePath: C:\Users\Laurin\AppData\Roaming\Mozilla\Firefox\Profiles\66klgi3w.default-1461020729735

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll [2014-12-11] ()

FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)

FF Plugin: @java.com/DTPlugin,version=11.77.2 -> C:\Program Files\Java\jre1.8.0_77\bin\dtplugin\npDeployJava1.dll [2016-04-09] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.77.2 -> C:\Program Files\Java\jre1.8.0_77\bin\plugin2\npjp2.dll [2016-04-09] (Oracle Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll [2014-12-11] ()

FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [Keine Datei]

FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-11-11] (VideoLAN)

FF Plugin HKU\S-1-5-21-1109650262-165368546-2739042002-1001: bebomedia.com/OfferMosquitoIEHelper -> C:\Users\Admini\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll [2014-02-05] (Bebo Media Ltd)

FF Plugin HKU\S-1-5-21-1109650262-165368546-2739042002-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Laurin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-08] (Unity Technologies ApS)

FF Plugin HKU\S-1-5-21-1109650262-165368546-2739042002-1002: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-01-03] ()

FF Extension: Adblock Plus - C:\Users\Laurin\AppData\Roaming\Mozilla\Firefox\Profiles\66klgi3w.default-1461020729735\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-30]

Chrome:

=======

CHR HomePage: Profile 1 -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBPxn49PYmQ_ay0kzj6uILRnD2bQzWRIklCtahJtlz9yYHBjSvUXrdkeiY7Ofoe83I8FTr9TMiym_LAqpsNCMJ3AIznpj02b-GFRmQ6lwyXzT5i1RmT-7b-qD_TRukakY3u7HjiRh-S7m_8xgTuKpbKcieJNV9qkNlgHQ,,

CHR StartupUrls: Profile 1 -> "hxxp://google.com/"

CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Laurin\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.823\_platform_specific\win_x86\widevinecdmadapter.dll => Keine Datei

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.103\PepperFlash\pepflashplayer.dll ()

CHR Profile: C:\Users\Laurin\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Laurin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-08-17]

CHR Extension: (Google Docs) - C:\Users\Laurin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-17]

CHR Extension: (Google Drive) - C:\Users\Laurin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-08-17]

CHR Extension: (YouTube) - C:\Users\Laurin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]

CHR Extension: (Adblock Plus) - C:\Users\Laurin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-09-24]

CHR Extension: (Google Search) - C:\Users\Laurin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-08-17]

CHR Extension: (Google Sheets) - C:\Users\Laurin\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-08-17]

CHR Extension: (Bronze Aid) - C:\Users\Laurin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fflhpnkiccpihhhnljkflpeccfjdoagc [2015-12-16] [UpdateUrl: hxxp://cdn.bronzeaid.com/update] <==== ACHTUNG

CHR Extension: (Google Docs Offline) - C:\Users\Laurin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-04]

CHR Extension: (WebGL Earth) - C:\Users\Laurin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfgafkkfnmkbdeejdgefkpcmimbommna [2015-08-17]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Laurin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-08-17]

CHR Extension: (Skype Click to Call) - C:\Users\Laurin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-08-17]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Laurin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-17]

CHR Extension: (Gmail) - C:\Users\Laurin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-17]

CHR Profile: C:\Users\Laurin\AppData\Local\Google\Chrome\User Data\Profile 1

CHR Extension: (Adblock Plus) - C:\Users\Laurin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-07-03]

CHR Extension: (Disable Youtube™ HTML5 Player) - C:\Users\Laurin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\enmofgaijnbjpblfljopnpdogpldapoc [2015-01-29]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Laurin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-03]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKU\S-1-5-21-1109650262-165368546-2739042002-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [gbmdkmlcnbapgegninelmjbfibaghdmk] - C:\Users\Admini\AppData\Local\Google\Chrome\User Data\Default\ext_offermosquito\ext_offermosquito.crx [2014-02-28]

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25]

Opera:

=======

OPR Extension: (Adblock Plus) - C:\Users\Laurin\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2016-07-06]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1080080 2016-06-21] (AVG Technologies CZ, s.r.o.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1128448 2015-08-01] ()

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation)

S2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [382312 2015-10-29] (Digital Wave Ltd.)

R2 ETDService; C:\Program Files\Elantech\ETDService.exe [145624 2016-07-08] (ELAN Microelectronics Corp.)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-04] (NVIDIA Corporation)

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-11-11] (Intel Corporation)

S2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [419248 2016-06-07] (LogMeIn, Inc.)

S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [3916368 2016-01-09] (INCA Internet Co., Ltd.)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-04] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-04] (NVIDIA Corporation)

R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [76152 2014-08-11] ()

R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2014-08-22] ()

R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1025920 2014-10-30] (Enigma Software Group USA, LLC.)

R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 cykbfltrService; C:\Windows\system32\DRIVERS\cykbfltr.sys [19968 2016-07-08] (Cypress Semiconductor, Inc.)

R3 DIRECTIO; C:\Program Files\PerformanceTest\DirectIo64.sys [31376 2015-03-10] ()

S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [15920 2014-10-30] (Enigma Software Group USA, LLC.)

S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2014-10-30] ()

S3 Hamachi; C:\Windows\System32\drivers\Hamdrv.sys [45680 2015-08-03] (LogMeIn Inc.)

R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-07-08] (REALiX™)

S3 i8042HDR; C:\Windows\system32\DRIVERS\i8042HDR.sys [15920 2009-08-14] (Windows ® Codename Longhorn DDK provider)

R3 KillerEth; C:\Windows\System32\drivers\e2xw10x64.sys [162456 2016-07-08] (Qualcomm Atheros, Inc.)

R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [185896 2016-07-08] (Intel Corporation)

R3 NETwNe64; C:\Windows\System32\drivers\NETwew01.sys [3363112 2015-07-28] (Intel Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-04] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)

S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)

R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)

R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

S3 xhunter1; C:\WINDOWS\xhunter1.sys [35880 2016-01-21] (Wellbia.com Co., Ltd.)

S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-07-09 22:42 - 2016-07-09 22:42 - 00032083 _____ C:\Users\Laurin\Desktop\FRST.txt

2016-07-09 22:41 - 2016-07-09 22:42 - 00000000 ____D C:\FRST

2016-07-09 22:40 - 2016-07-09 22:40 - 02390016 _____ (Farbar) C:\Users\Laurin\Downloads\FRST64.exe

2016-07-09 22:40 - 2016-07-09 22:40 - 02390016 _____ (Farbar) C:\Users\Laurin\Desktop\FRST64.exe

2016-07-09 22:34 - 2016-07-09 22:34 - 00002860 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC

2016-07-09 22:34 - 2016-07-09 22:34 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk

2016-07-09 22:34 - 2016-07-09 22:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

2016-07-09 22:34 - 2016-07-09 22:34 - 00000000 ____D C:\Program Files\CCleaner

2016-07-09 22:33 - 2016-07-09 22:33 - 06996256 _____ (Piriform Ltd) C:\Users\Laurin\Downloads\ccsetup_519.exe

2016-07-09 21:56 - 2016-07-09 21:56 - 19464906 _____ C:\Users\Laurin\Downloads\SpotifyLyrics-x86_64.exe

2016-07-09 20:13 - 2016-07-09 20:13 - 00000000 ____D C:\Users\Laurin\Documents\PassMark

2016-07-09 20:13 - 2016-07-09 20:13 - 00000000 ____D C:\Users\Laurin\AppData\Local\PassMark

2016-07-09 20:13 - 2016-07-09 20:13 - 00000000 ____D C:\ProgramData\Passmark

2016-07-09 20:13 - 2016-07-09 20:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PerformanceTest

2016-07-09 20:13 - 2016-07-09 20:13 - 00000000 ____D C:\Program Files\PerformanceTest

2016-07-09 20:12 - 2016-07-09 20:13 - 27054872 _____ (Passmark Software ) C:\Users\Laurin\Downloads\petst.exe

2016-07-09 20:10 - 2016-07-09 20:11 - 03887840 _____ (Husdawg, LLC) C:\Users\Laurin\Downloads\Detection.exe

2016-07-09 18:09 - 2016-07-09 18:09 - 00048261 _____ C:\Users\Laurin\Downloads\philosophie und weisheit.pdf

2016-07-09 16:25 - 2016-07-09 16:25 - 00007605 _____ C:\Users\Laurin\AppData\Local\Resmon.ResmonCfg

2016-07-09 15:25 - 2016-07-09 15:25 - 00000000 ____D C:\Users\Laurin\AppData\Local\Bluestacks

2016-07-08 22:40 - 2016-07-08 22:40 - 00000000 ____D C:\ProgramData\Avg_Update_0516piz

2016-07-08 22:38 - 2016-07-08 22:38 - 00000000 ____D C:\Users\Laurin\AppData\Roaming\AVG

2016-07-08 22:35 - 2016-07-08 22:48 - 00000000 ___HD C:\$AVG

2016-07-08 22:34 - 2016-07-08 22:48 - 00000000 ____D C:\ProgramData\MFAData

2016-07-08 22:34 - 2016-07-08 22:34 - 00000000 ____D C:\Users\Laurin\AppData\Local\MFAData

2016-07-08 22:33 - 2016-07-08 22:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen

2016-07-08 22:32 - 2016-07-08 22:35 - 00000000 ____D C:\Program Files (x86)\AVG

2016-07-08 22:31 - 2016-07-08 22:48 - 00000000 ____D C:\Users\Laurin\AppData\Local\AvgSetupLog

2016-07-08 22:31 - 2016-07-08 22:37 - 00000000 ____D C:\Users\Laurin\AppData\Local\Avg

2016-07-08 22:31 - 2016-07-08 22:35 - 00000000 ____D C:\ProgramData\Avg

2016-07-08 22:31 - 2016-07-08 22:31 - 03143504 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Laurin\Downloads\AVG_Protection_Free_1606.exe

2016-07-08 20:08 - 2016-07-08 20:09 - 00063824 _____ C:\Users\Laurin\Downloads\In_the_Loop_2009.DVDRip.DMT.en.zip

2016-07-08 20:07 - 2016-07-08 20:07 - 00989680 _____ (Garafekam ) C:\Users\Laurin\Downloads\in-the-loop-bos-6479603 (1).exe

2016-07-08 20:06 - 2016-07-08 20:07 - 00989680 _____ (Garafekam ) C:\Users\Laurin\Downloads\in-the-loop-bos-6479603.exe

2016-07-08 18:16 - 2016-07-08 18:16 - 00000000 _____ C:\Users\Laurin\AppData\Local\Driver_LOM_8161Present.flag

2016-07-08 18:07 - 2016-07-08 18:07 - 05885651 _____ C:\Users\Laurin\Downloads\lan_rtl8111e_vl_8.2.612.2012_w800.zip

2016-07-08 18:01 - 2016-07-08 18:07 - 351144222 _____ C:\Users\Laurin\Downloads\lan_killer_8.1.0.23_1.1.42.1045package_0x8d486875_818700 (1).zip

2016-07-08 17:58 - 2016-07-08 17:58 - 06012956 _____ C:\Users\Laurin\Downloads\j8rb03ww.zip

2016-07-08 17:34 - 2016-07-08 17:35 - 41176512 _____ C:\Users\Laurin\Downloads\PROWinx64.exe

2016-07-08 17:27 - 2016-07-08 17:27 - 31001328 _____ (Riot Games) C:\Users\Laurin\Downloads\LeagueofLegends_EUW_Installer_2016_05_13.exe

2016-07-08 16:55 - 2016-07-08 16:55 - 00019968 _____ (Cypress Semiconductor, Inc.) C:\WINDOWS\system32\Drivers\cykbfltr.sys

2016-07-08 16:50 - 2016-07-08 16:50 - 00185896 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\TeeDriverW8x64.sys

2016-07-08 16:49 - 2016-07-08 16:49 - 09890008 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RsCRIcon.dll

2016-07-08 16:49 - 2016-07-08 16:49 - 00083160 _____ (Realtek Semiconductor.) C:\WINDOWS\system32\RtCRX64.dll

2016-07-08 16:49 - 2016-07-08 16:49 - 00000000 ____D C:\WINDOWS\SysWOW64\sda

2016-07-08 16:47 - 2016-07-08 16:49 - 00000000 ____D C:\WINDOWS\LastGood.Tmp

2016-07-08 16:46 - 2016-07-08 16:46 - 00058584 _____ (ELAN Microelectronics Corp.) C:\WINDOWS\system32\ETDCoInstaller01000.dll

2016-07-08 16:41 - 2016-07-08 16:41 - 00000000 ____D C:\ProgramData\ProductData

2016-07-08 16:40 - 2016-07-08 16:40 - 00000000 ____D C:\WINDOWS\IObit

2016-07-08 16:39 - 2016-07-09 15:21 - 00003018 _____ C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (Laurin)

2016-07-08 16:39 - 2016-07-08 16:55 - 00002237 _____ C:\Users\Public\Desktop\Driver Booster 3.lnk

2016-07-08 16:39 - 2016-07-08 16:41 - 00000000 ____D C:\Users\Laurin\AppData\LocalLow\IObit

2016-07-08 16:39 - 2016-07-08 16:39 - 00027552 _____ (REALiX™) C:\WINDOWS\SysWOW64\Drivers\HWiNFO64A.SYS

2016-07-08 16:39 - 2016-07-08 16:39 - 00003372 _____ C:\WINDOWS\System32\Tasks\Driver Booster Scheduler

2016-07-08 16:39 - 2016-07-08 16:39 - 00000000 ____D C:\Users\Laurin\AppData\Roaming\IObit

2016-07-08 16:39 - 2016-07-08 16:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3

2016-07-08 16:39 - 2016-07-08 16:39 - 00000000 ____D C:\ProgramData\IObit

2016-07-08 16:39 - 2016-07-08 16:39 - 00000000 ____D C:\Program Files (x86)\IObit

2016-07-08 16:38 - 2016-07-08 16:52 - 00000000 ____D C:\Users\Laurin\AppData\Local\Downloaded Installations

2016-07-08 16:35 - 2016-07-08 16:35 - 01474568 _____ C:\Users\Laurin\Downloads\Driver Booster Free - CHIP-Installer.exe

2016-07-08 16:35 - 2016-07-08 16:35 - 01474568 _____ C:\Users\Laurin\Downloads\Driver Booster Free - CHIP-Installer (1).exe

2016-07-06 23:49 - 2016-07-09 21:05 - 00000000 ____D C:\Users\Laurin\AppData\Local\Spotify

2016-07-06 23:49 - 2016-07-06 23:49 - 00001894 _____ C:\Users\Laurin\Desktop\Spotify.lnk

2016-07-06 23:49 - 2016-07-06 23:49 - 00001880 _____ C:\Users\Laurin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk

2016-07-06 23:48 - 2016-07-09 21:05 - 00000000 ____D C:\Users\Laurin\AppData\Roaming\Spotify

2016-07-06 23:46 - 2016-07-06 23:46 - 00348376 _____ (Spotify Ltd) C:\Users\Laurin\Downloads\SpotifySetup (4).exe

2016-07-06 11:53 - 2016-07-06 11:53 - 00348376 _____ (Spotify Ltd) C:\Users\Laurin\Downloads\SpotifySetup (3).exe

2016-07-05 20:26 - 2016-07-05 20:26 - 00000000 ___HD C:\OneDriveTemp

2016-07-05 17:36 - 2016-07-05 17:37 - 00000000 ____D C:\Users\Laurin\Documents\FTBInventions

2016-07-01 23:21 - 2016-07-01 23:22 - 05756448 _____ (Piriform Ltd) C:\Users\Laurin\Downloads\ccsetup519_slim.exe

2016-07-01 23:21 - 2016-07-01 23:22 - 05756448 _____ (Piriform Ltd) C:\Users\Laurin\Downloads\ccsetup519_slim (1).exe

2016-06-30 18:07 - 2016-06-30 18:07 - 00000222 _____ C:\Users\Laurin\Desktop\Spelunky.url

2016-06-29 18:38 - 2016-06-29 18:38 - 00110709 _____ C:\Users\Laurin\Desktop\Handlung Deutsch.pdf

2016-06-29 14:15 - 2016-06-29 18:38 - 00048644 _____ C:\Users\Laurin\Desktop\Handlung Deutsch.pptx

2016-06-24 18:01 - 2016-06-25 13:20 - 00000000 ____D C:\Users\Laurin\Documents\Darkest

2016-06-24 17:54 - 2016-06-24 17:54 - 00000222 _____ C:\Users\Laurin\Desktop\Darkest Dungeon.url

2016-06-22 19:08 - 2016-06-22 19:09 - 12495254 _____ C:\Users\Laurin\Downloads\tPC Parkour Ver 2.2.zip

2016-06-22 17:21 - 2016-06-22 17:22 - 16967135 _____ C:\Users\Laurin\Downloads\PureBDcraft 64x MC110 (1).zip

2016-06-22 17:18 - 2016-06-22 17:21 - 16967135 _____ C:\Users\Laurin\Downloads\PureBDcraft 64x MC110.zip

2016-06-22 17:14 - 2016-06-22 17:14 - 00000000 ____D C:\Users\Laurin\AppData\Roaming\.minecraft2

2016-06-22 17:11 - 2016-06-22 17:12 - 09218216 _____ C:\Users\Laurin\Downloads\SolveITCase4.zip

2016-06-22 15:53 - 2016-06-22 15:53 - 00348376 _____ (Spotify Ltd) C:\Users\Laurin\Downloads\SpotifySetup (2).exe

2016-06-21 22:53 - 2016-06-21 22:53 - 01429211 _____ C:\Users\Laurin\Downloads\das_schwarze_auge_pfad_nach_aventurien_d84f (1).pdf

2016-06-16 23:09 - 2016-06-16 23:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2016-06-16 23:09 - 2016-06-16 23:09 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi

2016-06-15 04:07 - 2016-05-28 06:57 - 01594416 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll

2016-06-15 04:07 - 2016-05-28 06:57 - 01372312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll

2016-06-15 04:07 - 2016-05-28 06:29 - 22379008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2016-06-15 04:07 - 2016-05-28 06:29 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll

2016-06-15 04:07 - 2016-05-28 06:27 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll

2016-06-15 04:07 - 2016-05-28 06:22 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll

2016-06-15 04:07 - 2016-05-28 06:22 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll

2016-06-15 04:07 - 2016-05-28 06:19 - 24605696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2016-06-15 04:07 - 2016-05-28 06:18 - 07977472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll

2016-06-15 04:07 - 2016-05-28 06:18 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll

2016-06-15 04:07 - 2016-05-28 06:17 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll

2016-06-15 04:07 - 2016-05-28 06:15 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll

2016-06-15 04:07 - 2016-05-28 06:15 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll

2016-06-15 04:07 - 2016-05-28 06:15 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll

2016-06-15 04:07 - 2016-05-28 06:14 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll

2016-06-15 04:07 - 2016-05-28 06:14 - 00606208 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2016-06-15 04:07 - 2016-05-28 06:14 - 00499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll

2016-06-15 04:07 - 2016-05-28 06:13 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll

2016-06-15 04:07 - 2016-05-28 06:12 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll

2016-06-15 04:07 - 2016-05-28 06:11 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll

2016-06-15 04:07 - 2016-05-28 06:11 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll

2016-06-15 04:07 - 2016-05-28 06:11 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2016-06-15 04:07 - 2016-05-28 06:08 - 06295552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll

2016-06-15 04:07 - 2016-05-28 06:06 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll

2016-06-15 04:07 - 2016-05-28 06:03 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll

2016-06-15 04:07 - 2016-05-28 06:00 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll

2016-06-15 04:07 - 2016-05-28 05:58 - 01996288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll

2016-06-15 04:06 - 2016-05-28 08:13 - 01401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2016-06-15 04:06 - 2016-05-28 08:13 - 00046784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe

2016-06-15 04:06 - 2016-05-28 07:07 - 03675512 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2016-06-15 04:06 - 2016-05-28 07:07 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe

2016-06-15 04:06 - 2016-05-28 07:07 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe

2016-06-15 04:06 - 2016-05-28 06:58 - 00379232 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll

2016-06-15 04:06 - 2016-05-28 06:57 - 00636304 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe

2016-06-15 04:06 - 2016-05-28 06:57 - 00546456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe

2016-06-15 04:06 - 2016-05-28 06:57 - 00316256 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll

2016-06-15 04:06 - 2016-05-28 06:35 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe

2016-06-15 04:06 - 2016-05-28 06:35 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll

2016-06-15 04:06 - 2016-05-28 06:31 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll

2016-06-15 04:06 - 2016-05-28 06:28 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll

2016-06-15 04:06 - 2016-05-28 06:27 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll

2016-06-15 04:06 - 2016-05-28 06:26 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll

2016-06-15 04:06 - 2016-05-28 06:26 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll

2016-06-15 04:06 - 2016-05-28 06:25 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll

2016-06-15 04:06 - 2016-05-28 06:24 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll

2016-06-15 04:06 - 2016-05-28 06:24 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll

2016-06-15 04:06 - 2016-05-28 06:22 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll

2016-06-15 04:06 - 2016-05-28 06:19 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll

2016-06-15 04:06 - 2016-05-28 06:18 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2016-06-15 04:06 - 2016-05-28 06:17 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2016-06-15 04:06 - 2016-05-28 06:16 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2016-06-15 04:06 - 2016-05-28 06:15 - 00794624 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll

2016-06-15 04:06 - 2016-05-28 06:14 - 18674176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2016-06-15 04:06 - 2016-05-28 06:08 - 13385728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2016-06-15 04:06 - 2016-05-28 06:06 - 12128256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2016-06-15 04:06 - 2016-05-28 06:06 - 01339904 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll

2016-06-15 04:06 - 2016-05-28 06:05 - 03994624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll

2016-06-15 04:06 - 2016-05-28 06:05 - 03664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2016-06-15 04:06 - 2016-05-28 06:05 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll

2016-06-15 04:06 - 2016-05-28 06:04 - 06973952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll

2016-06-15 04:06 - 2016-05-28 06:03 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll

2016-06-15 04:06 - 2016-05-28 06:03 - 02609664 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll

2016-06-15 04:06 - 2016-05-28 06:02 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll

2016-06-15 04:06 - 2016-05-28 06:00 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2016-06-15 04:06 - 2016-05-28 06:00 - 03585536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll

2016-06-15 04:06 - 2016-05-28 06:00 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll

2016-06-15 04:06 - 2016-05-28 06:00 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2016-06-15 04:06 - 2016-05-28 05:58 - 07832576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2016-06-15 04:06 - 2016-05-28 05:58 - 04896256 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2016-06-15 04:05 - 2016-05-28 08:13 - 00290496 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll

2016-06-15 04:05 - 2016-05-28 08:13 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2016-06-15 04:05 - 2016-05-28 07:25 - 04268880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll

2016-06-15 04:05 - 2016-05-28 07:23 - 00388384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll

2016-06-15 04:05 - 2016-05-28 07:23 - 00312160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll

2016-06-15 04:05 - 2016-05-28 07:22 - 07474528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2016-06-15 04:05 - 2016-05-28 07:22 - 04387680 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll

2016-06-15 04:05 - 2016-05-28 07:22 - 00428896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll

2016-06-15 04:05 - 2016-05-28 07:22 - 00211296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys

2016-06-15 04:05 - 2016-05-28 07:20 - 00430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll

2016-06-15 04:05 - 2016-05-28 07:18 - 00357216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll

2016-06-15 04:05 - 2016-05-28 07:09 - 00501600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll

2016-06-15 04:05 - 2016-05-28 07:08 - 00693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll

2016-06-15 04:05 - 2016-05-28 07:07 - 02921880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2016-06-15 04:05 - 2016-05-28 07:07 - 01322248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll

2016-06-15 04:05 - 2016-05-28 07:07 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll

2016-06-15 04:05 - 2016-05-28 07:07 - 00331616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys

2016-06-15 04:05 - 2016-05-28 07:06 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2016-06-15 04:05 - 2016-05-28 07:06 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe

2016-06-15 04:05 - 2016-05-28 07:06 - 00730344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll

2016-06-15 04:05 - 2016-05-28 07:06 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe

2016-06-15 04:05 - 2016-05-28 07:06 - 00254656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe

2016-06-15 04:05 - 2016-05-28 07:05 - 04515264 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2016-06-15 04:05 - 2016-05-28 07:04 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2016-06-15 04:05 - 2016-05-28 07:04 - 00431296 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll

2016-06-15 04:05 - 2016-05-28 07:04 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys

2016-06-15 04:05 - 2016-05-28 07:04 - 00111064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll

2016-06-15 04:05 - 2016-05-28 07:04 - 00097096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll

2016-06-15 04:05 - 2016-05-28 07:03 - 00131248 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll

2016-06-15 04:05 - 2016-05-28 06:58 - 01996640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2016-06-15 04:05 - 2016-05-28 06:57 - 02548944 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll

2016-06-15 04:05 - 2016-05-28 06:57 - 02195632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll

2016-06-15 04:05 - 2016-05-28 06:57 - 00649792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll

2016-06-15 04:05 - 2016-05-28 06:57 - 00577376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2016-06-15 04:05 - 2016-05-28 06:57 - 00521664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll

2016-06-15 04:05 - 2016-05-28 06:35 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsdport.sys

2016-06-15 04:05 - 2016-05-28 06:31 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdlrecover.exe

2016-06-15 04:05 - 2016-05-28 06:26 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe

2016-06-15 04:05 - 2016-05-28 06:22 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll

2016-06-15 04:05 - 2016-05-28 06:22 - 00278528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys

2016-06-15 04:05 - 2016-05-28 06:22 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll

2016-06-15 04:05 - 2016-05-28 06:21 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrokerLib.dll

2016-06-15 04:05 - 2016-05-28 06:21 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll

2016-06-15 04:05 - 2016-05-28 06:20 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll

2016-06-15 04:05 - 2016-05-28 06:20 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\polstore.dll

2016-06-15 04:05 - 2016-05-28 06:18 - 00610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll

2016-06-15 04:05 - 2016-05-28 06:18 - 00591360 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll

2016-06-15 04:05 - 2016-05-28 06:18 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPSECSVC.DLL

2016-06-15 04:05 - 2016-05-28 06:18 - 00380416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll

2016-06-15 04:05 - 2016-05-28 06:18 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll

2016-06-15 04:05 - 2016-05-28 06:17 - 00963072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll

2016-06-15 04:05 - 2016-05-28 06:17 - 00173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll

2016-06-15 04:05 - 2016-05-28 06:16 - 00690176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys

2016-06-15 04:05 - 2016-05-28 06:16 - 00684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll

2016-06-15 04:05 - 2016-05-28 06:16 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll

2016-06-15 04:05 - 2016-05-28 06:16 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll

2016-06-15 04:05 - 2016-05-28 06:16 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys

2016-06-15 04:05 - 2016-05-28 06:15 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll

2016-06-15 04:05 - 2016-05-28 06:15 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys

2016-06-15 04:05 - 2016-05-28 06:14 - 01716736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll

2016-06-15 04:05 - 2016-05-28 06:14 - 00965632 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll

2016-06-15 04:05 - 2016-05-28 06:14 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2016-06-15 04:05 - 2016-05-28 06:14 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll

2016-06-15 04:05 - 2016-05-28 06:13 - 00990208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll

2016-06-15 04:05 - 2016-05-28 06:13 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll

2016-06-15 04:05 - 2016-05-28 06:13 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll

2016-06-15 04:05 - 2016-05-28 06:13 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll

2016-06-15 04:05 - 2016-05-28 06:12 - 00614400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll

2016-06-15 04:05 - 2016-05-28 06:12 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll

2016-06-15 04:05 - 2016-05-28 06:11 - 01445888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll

2016-06-15 04:05 - 2016-05-28 06:11 - 00890368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll

2016-06-15 04:05 - 2016-05-28 06:11 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2016-06-15 04:05 - 2016-05-28 06:09 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll

2016-06-15 04:05 - 2016-05-28 06:05 - 01797120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll

2016-06-15 04:05 - 2016-05-28 06:03 - 01185280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationFramework.dll

2016-06-15 04:05 - 2016-05-28 06:03 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll

2016-06-15 04:05 - 2016-05-28 06:02 - 03590144 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2016-06-15 04:05 - 2016-05-28 06:02 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll

2016-06-15 04:05 - 2016-05-28 06:01 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll

2016-06-15 04:05 - 2016-05-28 06:01 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll

2016-06-15 04:05 - 2016-05-28 06:01 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2016-06-15 04:05 - 2016-05-28 06:00 - 02230272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2016-06-15 04:05 - 2016-05-28 06:00 - 01730560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2016-06-15 04:05 - 2016-05-28 06:00 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe

2016-06-15 04:05 - 2016-05-28 05:58 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2016-06-15 04:05 - 2016-05-28 05:58 - 02066432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll

2016-06-15 04:05 - 2016-05-28 05:57 - 02281472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2016-06-15 04:05 - 2016-05-28 05:55 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll

2016-06-15 04:04 - 2016-05-28 08:13 - 01184960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2016-06-15 04:04 - 2016-05-28 08:13 - 00514752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll

2016-06-15 04:04 - 2016-05-28 07:22 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys

2016-06-15 04:04 - 2016-05-28 07:16 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

2016-06-15 04:04 - 2016-05-28 07:09 - 00170848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.exe

2016-06-15 04:04 - 2016-05-28 07:09 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll

2016-06-15 04:04 - 2016-05-28 07:08 - 00258912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufx01000.sys

2016-06-15 04:04 - 2016-05-28 07:08 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll

2016-06-15 04:04 - 2016-05-28 07:04 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll

2016-06-15 04:04 - 2016-05-28 06:31 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll

2016-06-15 04:04 - 2016-05-28 06:29 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll

2016-06-15 04:04 - 2016-05-28 06:29 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxp.dll

2016-06-15 04:04 - 2016-05-28 06:28 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe

2016-06-15 04:04 - 2016-05-28 06:28 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\FwRemoteSvr.dll

2016-06-15 04:04 - 2016-05-28 06:26 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe

2016-06-15 04:04 - 2016-05-28 06:26 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe

2016-06-15 04:04 - 2016-05-28 06:24 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll

2016-06-15 04:04 - 2016-05-28 06:24 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ndu.sys

2016-06-15 04:04 - 2016-05-28 06:24 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll

2016-06-15 04:04 - 2016-05-28 06:24 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll

2016-06-15 04:04 - 2016-05-28 06:24 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll

2016-06-15 04:04 - 2016-05-28 06:24 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FwRemoteSvr.dll

2016-06-15 04:04 - 2016-05-28 06:23 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys

2016-06-15 04:04 - 2016-05-28 06:23 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll

2016-06-15 04:04 - 2016-05-28 06:22 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll

2016-06-15 04:04 - 2016-05-28 06:22 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe

2016-06-15 04:04 - 2016-05-28 06:22 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll

2016-06-15 04:04 - 2016-05-28 06:21 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll

2016-06-15 04:04 - 2016-05-28 06:21 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll

2016-06-15 04:04 - 2016-05-28 06:20 - 00511488 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll

2016-06-15 04:04 - 2016-05-28 06:20 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll

2016-06-15 04:04 - 2016-05-28 06:20 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GnssAdapter.dll

2016-06-15 04:04 - 2016-05-28 06:20 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Privacy.dll

2016-06-15 04:04 - 2016-05-28 06:20 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll

2016-06-15 04:04 - 2016-05-28 06:19 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2016-06-15 04:04 - 2016-05-28 06:19 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe

2016-06-15 04:04 - 2016-05-28 06:19 - 00355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll

2016-06-15 04:04 - 2016-05-28 06:19 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll

2016-06-15 04:04 - 2016-05-28 06:17 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.dll

2016-06-15 04:04 - 2016-05-28 06:17 - 00415232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll

2016-06-15 04:04 - 2016-05-28 06:17 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll

2016-06-15 04:04 - 2016-05-28 06:17 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll

2016-06-15 04:04 - 2016-05-28 06:16 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\polstore.dll

2016-06-15 04:04 - 2016-05-28 06:16 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll

2016-06-15 04:04 - 2016-05-28 06:15 - 00293888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll

2016-06-15 04:04 - 2016-05-28 06:14 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll

2016-06-15 04:04 - 2016-05-28 06:13 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2016-06-15 04:04 - 2016-05-28 06:11 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll

2016-06-15 04:04 - 2016-05-28 06:11 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll

2016-06-15 04:04 - 2016-05-28 06:04 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll

2016-06-15 04:04 - 2016-05-28 06:04 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll

2016-06-15 04:04 - 2016-05-28 06:03 - 00693760 _____ (Microsoft Corporation) C:\WINDOWS\system32\internetmail.dll

2016-06-15 04:04 - 2016-05-28 06:02 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll

2016-06-15 04:04 - 2016-05-28 06:01 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll

2016-06-15 04:04 - 2016-05-28 06:00 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll

2016-06-15 04:04 - 2016-05-28 06:00 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll

2016-06-15 04:04 - 2016-05-28 05:59 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll

2016-06-15 04:04 - 2016-05-28 05:53 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll

2016-06-15 00:13 - 2016-06-15 00:13 - 00000000 ____D C:\Users\Laurin\AppData\Roaming\Raptr

2016-06-15 00:13 - 2016-06-15 00:13 - 00000000 ____D C:\Users\Laurin\AppData\Roaming\library_dir

2016-06-15 00:13 - 2016-06-15 00:13 - 00000000 ____D C:\Program Files (x86)\Raptr Inc

2016-06-15 00:12 - 2016-06-15 00:12 - 00077504 _____ C:\Users\Laurin\Downloads\playstv_installer.exe

2016-06-12 17:11 - 2016-06-12 17:14 - 122274373 _____ C:\Users\Laurin\Downloads\Game-of-Thrones-s06e08-Season-6-Episode-8-No-One-full-episode¾'^ €îºF-O.mp4

2016-06-10 14:35 - 2016-06-10 14:35 - 00094056 _____ C:\Users\Laurin\Downloads\ueb_berechnungen_mwg (1).pdf

2016-06-10 14:21 - 2016-06-10 14:21 - 00094056 _____ C:\Users\Laurin\Downloads\ueb_berechnungen_mwg.pdf

2016-06-09 15:27 - 2016-06-09 15:27 - 00018992 _____ C:\Users\Laurin\Downloads\Sportstundenprotokoll.odt

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-07-09 21:54 - 2014-01-30 16:14 - 00001138 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2016-07-09 21:14 - 2014-02-24 17:51 - 00000000 ____D C:\Users\Laurin\AppData\Roaming\TS3Client

2016-07-09 19:01 - 2015-10-30 20:35 - 00776766 _____ C:\WINDOWS\system32\perfh007.dat

2016-07-09 19:01 - 2015-10-30 20:35 - 00155544 _____ C:\WINDOWS\system32\perfc007.dat

2016-07-09 19:01 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF

2016-07-09 19:01 - 2015-09-04 10:08 - 01799166 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2016-07-09 17:58 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness

2016-07-09 16:32 - 2014-02-24 17:50 - 00000000 ____D C:\Users\Laurin\AppData\Local\TeamSpeak 3 Client

2016-07-09 15:26 - 2014-12-14 18:56 - 00000000 ____D C:\Users\Laurin\AppData\Roaming\Samsung

2016-07-09 15:26 - 2014-12-14 18:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung

2016-07-09 15:26 - 2014-12-14 18:55 - 00000000 ____D C:\Program Files (x86)\Samsung

2016-07-09 15:26 - 2014-06-13 09:42 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2016-07-09 15:25 - 2015-10-30 09:24 - 00000000 __RHD C:\Users\Public\Libraries

2016-07-09 15:24 - 2016-01-21 18:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCWest

2016-07-09 15:24 - 2016-01-21 18:19 - 00000000 ____D C:\Program Files (x86)\NCWest

2016-07-09 15:23 - 2016-01-21 18:21 - 00000000 ____D C:\Program Files (x86)\NCSOFT

2016-07-09 15:22 - 2016-01-21 18:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCSOFT

2016-07-09 15:21 - 2014-02-02 22:09 - 00000000 ____D C:\ProgramData\Package Cache

2016-07-09 15:18 - 2015-10-11 00:07 - 00000388 _____ C:\WINDOWS\Tasks\XPRICZF1.job

2016-07-09 15:18 - 2015-09-04 14:39 - 00000000 __SHD C:\Users\Laurin\IntelGraphicsProfiles

2016-07-09 15:18 - 2014-01-30 16:14 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2016-07-09 14:56 - 2014-10-23 20:54 - 00004160 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{566DEBF7-F642-4659-9FA1-790F5B96B94E}

2016-07-09 13:52 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps

2016-07-09 00:01 - 2014-12-14 19:08 - 00000000 ____D C:\Users\Laurin\AppData\Local\Samsung

2016-07-08 23:59 - 2014-12-14 19:03 - 00000000 ____D C:\ProgramData\Samsung

2016-07-08 22:48 - 2015-10-30 09:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP

2016-07-08 22:39 - 2015-10-30 08:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM

2016-07-08 22:36 - 2015-11-08 18:49 - 00000000 ____D C:\Users\Laurin\AppData\Roaming\TuneUp Software

2016-07-08 18:48 - 2016-01-02 07:22 - 00000000 ____D C:\Windows.old

2016-07-08 18:33 - 2016-01-02 08:11 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2016-07-08 18:32 - 2016-01-02 07:33 - 00000000 ____D C:\Program Files\Elantech

2016-07-08 18:31 - 2015-10-30 08:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI

2016-07-08 18:30 - 2016-01-02 07:40 - 00000000 ____D C:\Users\Laurin

2016-07-08 18:30 - 2015-05-13 16:37 - 00000000 ___RD C:\Users\Laurin\OneDrive

2016-07-08 17:46 - 2016-01-28 19:12 - 00000000 ____D C:\Program Files (x86)\Realtek

2016-07-08 17:34 - 2014-08-03 13:40 - 00001585 _____ C:\Users\Public\Desktop\League of Legends.lnk

2016-07-08 17:33 - 2014-02-15 16:05 - 00000000 ____D C:\Users\Laurin\AppData\Roaming\Riot Games

2016-07-08 17:22 - 2014-01-30 16:01 - 00000000 ____D C:\Users\Laurin\AppData\Local\Packages

2016-07-08 17:19 - 2016-01-04 01:46 - 00000000 ____D C:\ProgramData\HappyCloud

2016-07-08 17:19 - 2016-01-04 01:46 - 00000000 ____D C:\AeriaGames

2016-07-08 17:19 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2016-07-08 17:19 - 2014-02-04 22:07 - 00000000 ____D C:\Program Files (x86)\Origin Games

2016-07-08 17:17 - 2016-01-08 22:59 - 00000000 ____D C:\Program Files (x86)\World of Warcraft

2016-07-08 17:14 - 2015-11-25 20:10 - 00000000 ____D C:\Program Files (x86)\LSI

2016-07-08 17:13 - 2014-10-23 17:22 - 00000000 ____D C:\Program Files (x86)\Steam

2016-07-08 17:13 - 2014-02-20 20:44 - 00000000 ____D C:\Riot Games

2016-07-08 17:01 - 2014-02-15 16:08 - 00000000 __SHD C:\WINDOWS\SysWOW64\AI_RecycleBin

2016-07-08 16:49 - 2012-03-29 08:26 - 00367320 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RtsPStor.sys

2016-07-08 16:48 - 2016-02-05 17:55 - 00162456 _____ (Qualcomm Atheros, Inc.) C:\WINDOWS\system32\Drivers\e2xw10x64.sys

2016-07-08 16:46 - 2015-12-17 20:53 - 00454744 _____ (ELAN Microelectronics Corp.) C:\WINDOWS\system32\Drivers\ETD.sys

2016-07-07 21:57 - 2015-12-30 00:59 - 00000002 _____ C:\end

2016-07-07 17:37 - 2015-10-11 00:08 - 00003980 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1444514887

2016-07-07 17:37 - 2015-10-11 00:08 - 00001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk

2016-07-07 17:37 - 2015-10-11 00:07 - 00000000 ____D C:\Program Files (x86)\Opera

2016-07-07 02:39 - 2014-01-30 15:13 - 00485032 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe

2016-07-07 01:01 - 2014-12-11 18:03 - 00000000 ____D C:\ProgramData\BlueStacksSetup

2016-07-05 17:52 - 2016-04-18 18:11 - 00271013 _____ C:\Users\Laurin\Documents\MinecraftLog.txt

2016-07-05 17:52 - 2016-04-18 18:11 - 00038473 _____ C:\Users\Laurin\Documents\FTBLauncherLog.txt

2016-07-05 17:36 - 2016-04-17 22:00 - 00000000 ____D C:\Users\Laurin\AppData\Local\ftblauncher

2016-07-01 23:29 - 2014-10-17 21:01 - 00000000 ____D C:\Users\Laurin\AppData\Local\LogMeIn Hamachi

2016-07-01 23:28 - 2016-06-04 18:08 - 00000000 ____D C:\WINDOWS\Minidump

2016-06-24 04:25 - 2015-10-30 09:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2016-06-22 19:06 - 2014-02-03 22:47 - 00000000 ____D C:\Users\Laurin\AppData\Roaming\.minecraft

2016-06-21 12:48 - 2016-05-22 22:24 - 00000000 ____D C:\Users\Laurin\Desktop\ab 20.05.16

2016-06-19 17:36 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache

2016-06-18 03:56 - 2014-01-30 16:15 - 00002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2016-06-18 03:56 - 2014-01-30 16:15 - 00002252 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2016-06-17 01:25 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp

2016-06-16 23:10 - 2015-09-04 14:39 - 00000000 __RHD C:\Users\Public\AccountPictures

2016-06-16 23:06 - 2016-01-02 07:27 - 00239816 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2016-06-16 22:49 - 2015-10-30 09:24 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs

2016-06-16 22:49 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform

2016-06-16 22:49 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\bcastdvr

2016-06-15 06:10 - 2014-01-30 15:03 - 00000000 ____D C:\WINDOWS\system32\MRT

2016-06-15 05:55 - 2014-01-30 15:03 - 142482544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2016-06-14 20:33 - 2015-10-30 09:26 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2016-06-14 20:33 - 2015-10-30 09:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-11-28 04:10 - 2015-11-28 04:10 - 0003584 _____ () C:\Users\Laurin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2016-07-08 18:16 - 2016-07-08 18:16 - 0000000 _____ () C:\Users\Laurin\AppData\Local\Driver_LOM_8161Present.flag

2016-07-09 16:25 - 2016-07-09 16:25 - 0007605 _____ () C:\Users\Laurin\AppData\Local\Resmon.ResmonCfg

2014-07-16 17:46 - 2014-07-16 17:46 - 0000000 _____ () C:\Users\Laurin\AppData\Local\{DA106EC8-A0C7-4C6C-895F-834266FF7918}

2016-01-20 18:02 - 2016-01-20 18:02 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:

====================

C:\Users\Admini\AppData\Local\Temp\avgnt.exe

C:\Users\Laurin\AppData\Local\Temp\BRSVC_75017953_hlp.exe

C:\Users\Laurin\AppData\Local\Temp\hcuninstaller_20160708_171739_7444.exe

C:\Users\Laurin\AppData\Local\Temp\HD-ShortcutHandler.dll

C:\Users\Laurin\AppData\Local\Temp\uninstall.exe

==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2016-07-05 12:39

==================== Ende von FRST.txt ============================

Edited by Vektic, 09 July 2016 - 03:07 PM.

#2
RKinner

Posted 09 July 2016 - 08:15 PM

Malware Expert

Expert
24,624 posts

I see an adware infection in your browsers. Something that translates to feed.sonic-search.com

Let's see if adwcleaner will take care of it for us.

Download : ADWCleaner to your desktop. Make sure you get the correct Download button. Sometimes the ads on BleepingComputer will mimic the real Download button which should say: Download Now @BleepingComputer

NOTE: If using Internet Explorer and you get an alert that stops the program downloading, click on the warning and allow the download to complete.

Close all programs, pause your anti-virus and run AdwCleaner (Vista or Win 7 => right click and Run As Administrator).

Click on Scan and follow the prompts. Let it run unhindered. When done, click on the Clean button, and follow the prompts. Allow the system to reboot. You will then be presented with the report. Copy & Paste this report on your next reply.

The report will be saved in the C:\AdwCleaner folder.

Junkware-Removal-Tool

Please download Junkware Removal Tool to your desktop. Make sure you get the correct Download button. Sometimes the ads on BleepingComputer will mimic the real Download button which should say: Download Now @Author's site

Pause your anti-virus. Close all browsers.

Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".

The tool will open and start scanning your system.

Please be patient as this can take a while to complete depending on your system's specifications.

On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

Post the contents of JRT.txt into your next message.

Run FRST

Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.

Check the Addition.txt box

Press Scan button.

It will produce a log called FRST.txt in the same directory the tool is run from.

Please copy and paste log back here.

It will generate another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

#3
Vektic

Posted 10 July 2016 - 05:39 AM

New Member

Topic Starter
Member
3 posts

Thanks for the quick reply. I have run the programs, the logs are just below. Unfortunately I didnt manage to change the language.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 8.0.7 (07.03.2016)

Operating System: Windows 10 Home x64

Ran by Laurin (Administrator) on 10.07.2016 at 13:22:34,05

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 11

Successfully deleted: C:\ProgramData\iobit\driver booster (Folder)

Successfully deleted: C:\ProgramData\productdata (Folder)

Successfully deleted: C:\ProgramData\silsoliss (Folder)

Successfully deleted: C:\Users\Laurin\AppData\Roaming\iobit\driver booster (Folder)

Successfully deleted: C:\WINDOWS\system32\Tasks\Driver Booster Scheduler (Task)

Successfully deleted: C:\WINDOWS\system32\Tasks\Driver Booster SkipUAC (Laurin) (Task)

Successfully deleted: C:\Program Files (x86)\iobit\driver booster (Folder)

Successfully deleted: C:\WINDOWS\prefetch\DRIVER_BOOSTER_SETUP34.TMP-47AE11E5.pf (File)

Successfully deleted: C:\WINDOWS\prefetch\DRIVER_BOOSTER_SETUP34.TMP-A995A64B.pf (File)

Successfully deleted: C:\WINDOWS\prefetch\DRIVERBOOSTER.EXE-51D78DCC.pf (File)

Successfully deleted: C:\WINDOWS\prefetch\SPOTIFYLYRICS-X86_64.EXE-2055A533.pf (File)

Registry: 4

Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\Main\\SearchAssistant (Registry Value)

Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9} (Registry Key)

Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a5bfd1d3-18b6-4fc3-b3f9-262ae3552dbe} (Registry Key)

Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a5bfd1d3-18b6-4fc3-b3f9-262ae3552dbe} (Registry Key)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 10.07.2016 at 13:29:34,98

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 09-07-2016

durchgeführt von Laurin (Administrator) auf LAURIN-PC (10-07-2016 13:30:56)

Gestartet von C:\Users\Laurin\Desktop

Geladene Profile: Laurin (Verfügbare Profile: Admini & Laurin)

Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Chrome)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe

(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe

(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe