Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Very slow running Lenovo

Started by l.mart , Jun 21 2017 02:42 PM

Please log in to reply

#16
SleepyDude

Posted 09 July 2017 - 05:31 AM

Trusted Helper

Malware Removal
4,975 posts

Hi,

Select the folders from the Desktop that you don't recognize and delete them.

Lets check the system files integrity...

Download SFCFix.exe (by Niemiro) and save it to the Desktop
Run SFCFix (accept the security warning and follow the instructions on the screen)
Upon completion, a log file SFCFix.txt should be created on your Desktop
Open the SFCFix.txt log and copy & paste the contents to your post

#17
l.mart

Posted 09 July 2017 - 11:38 AM

Member

Topic Starter
Member
31 posts

Hi,

I deleted the folders. They were all quite big as well (with over 10000 files in them).

here is the log to the requested scan:

SFCFix version 3.0.0.0 by niemiro.

Start time: 2017-07-09 19:17:04.670

Microsoft Windows 7 Service Pack 1 - amd64

Not using a script file.

AutoAnalysis::

SUMMARY: No corruptions were detected.

AutoAnalysis:: directive completed successfully.

Successfully processed all directives.

Failed to generate a complete zip file. Upload aborted.

SFCFix version 3.0.0.0 by niemiro has completed.

Currently storing 0 datablocks.

Finish time: 2017-07-09 19:33:39.891

----------------------EOF-----------------------

One bit of info: after I restarted my laptop a windows update was able to install. It just took a very very long time.

Thanks again for your help.

#18
SleepyDude

Posted 09 July 2017 - 12:18 PM

Trusted Helper

Malware Removal
4,975 posts

One bit of info: after I restarted my laptop a windows update was able to install. It just took a very very long time.

Thanks again for your help.

Good. Some Windows Updates take a long time to install.

I would like to see a fresh FRST log please run EnglishFRST.exe again and make sure the box for Addition.txt is checked before pressing Scan.

Please post the new logs FRST.txt and Addition.txt in the end of the scan both can be found on the Desktop.

#19
l.mart

Posted 09 July 2017 - 01:00 PM

Member

Topic Starter
Member
31 posts

Hi, here are the two reports:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 08-07-2017

Ran by Lena Pra (administrator) on LENAPRA-PC (09-07-2017 20:56:37)

Running from C:\Users\Lena Pra\Desktop

Loaded Profiles: Lena Pra (Available Profiles: Lena Pra)

Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe

(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe

(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe

() C:\Program Files (x86)\T-Mobile\InternetManager_A\BackgroundService\ServiceManager.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe

(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe

() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe

(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE

(Olympus Corporation) C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

(Panasonic Corporation) C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGUI.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe

() C:\Program Files (x86)\T-Mobile\InternetManager_A\Background\ModemListener.exe

(Sun Microsystems, Inc.) C:\Program Files (x86)\Java\jre6\bin\jusched.exe

(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\EnergyCut\EnergyCut.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe

(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\x64\aswidsagenta.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

(Farbar) C:\Users\Lena Pra\Desktop\EnglishFRST64.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [239592 2017-07-03] (AVG Technologies CZ, s.r.o.)

HKLM\...\Run: [AVGUI.exe] => C:\Program Files (x86)\AVG\Antivirus\AvLaunch.exe [263232 2017-07-04] (AVG Technologies CZ, s.r.o.)

HKLM\...\Run: [RtsFT] => C:\Windows\RTFTrack.exe [6340312 2013-12-10] (Realtek semiconductor)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2016-11-01] (Apple Inc.)

HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [5940128 2014-02-06] (Lenovo(beijing) Limited)

HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [9770432 2014-02-06] (Lenovo (Beijing) Limited)

HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] ()

HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292088 2013-02-22] (Intel Corporation)

HKLM-x32\...\Run: [T-Mobile ModemListener] => C:\Program Files (x86)\T-Mobile\InternetManager_A\Background\ModemListener.exe [114040 2013-01-11] ()

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Java\jre6\bin\jusched.exe [148888 2016-08-25] (Sun Microsystems, Inc.)

HKLM-x32\...\Run: [EnergyCut] => C:\Program Files (x86)\Lenovo\EnergyCut\EnergyCut.exe [1167360 2007-03-09] (Lenovo (Beijing) Limited)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION

HKU\S-1-5-21-2819346672-853151906-811778091-1000\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7946656 2017-04-22] (SUPERAntiSpyware)

HKU\S-1-5-21-2819346672-853151906-811778091-1000\...\Run: [OV3_Monitor] => C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe [415768 2016-03-03] (Olympus Corporation)

HKU\S-1-5-21-2819346672-853151906-811778091-1000\...\Run: [EEDSpeedLauncher] => rundll32.exe C:\Windows\system32\eed_ec.dll,SpeedLauncher

HKU\S-1-5-21-2819346672-853151906-811778091-1000\...\MountPoints2: {576ed16f-7937-11e4-b017-8056f2e86b78} - F:\Autorun.exe

HKU\S-1-5-21-2819346672-853151906-811778091-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [242688 2010-11-21] (Microsoft Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2014-02-07]

ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PHOTOfunSTUDIO 9.6 PE.lnk [2016-10-05]

ShortcutTarget: PHOTOfunSTUDIO 9.6 PE.lnk -> C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe (Panasonic Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{43FFFB05-1ABD-4A2B-ADB4-6AE78826F132}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{898C0107-D2DD-4A28-80FD-BBBD89BFD830}: [DhcpNameServer] 10.74.210.210 10.74.210.211

Tcpip\..\Interfaces\{AAF313E0-C192-45F8-9E15-08F78EBBF4A9}: [DhcpNameServer] 10.74.210.210 10.74.210.211

Tcpip\..\Interfaces\{F6E5E89E-4568-471A-8DD3-EE3723EBAE45}: [DhcpNameServer] 10.74.210.210 10.74.210.211

Internet Explorer:

==================

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-07-06] (Microsoft Corporation)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2017-07-06] (Microsoft Corporation)

BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-07-06] (Microsoft Corporation)

BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-06-20] (Microsoft Corporation)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2017-07-06] (Microsoft Corporation)

BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-07-06] (Microsoft Corporation)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2016-08-25] (Sun Microsystems, Inc.)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-06] (Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-06] (Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-06] (Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-06] (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

FireFox:

========

FF ProfilePath: C:\Users\Lena Pra\AppData\Roaming\Mozilla\Firefox\Profiles\lsnmh4hi.default [2017-07-06]

FF Extension: (ZenMate Security, Privacy & Unblock VPN) - C:\Users\Lena Pra\AppData\Roaming\Mozilla\Firefox\Profiles\lsnmh4hi.default\Extensions\[email protected] [2017-04-23]

FF Extension: (Adblock Plus) - C:\Users\Lena Pra\AppData\Roaming\Mozilla\Firefox\Profiles\lsnmh4hi.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-05-29]

FF Extension: (Java Console) - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} [2017-01-16] [not signed]

FF Extension: (Hotspot Shield Extension) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\[email protected] [2017-01-16] [not signed]

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_131.dll [2017-06-20] ()

FF Plugin: @microsoft.com/GENUINE -> disabled [No File]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-01-31] (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_131.dll [2017-06-20] ()

FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-05-29] (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-05-29] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-02] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-02] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2017-03-28] (Adobe Systems Inc.)

Chrome:

=======

CHR Profile: C:\Users\Lena Pra\AppData\Local\Google\Chrome\User Data\Default [2017-07-09]

CHR Extension: (Google Präsentationen) - C:\Users\Lena Pra\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-07-02]

CHR Extension: (Google Docs) - C:\Users\Lena Pra\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-07-02]

CHR Extension: (Google Drive) - C:\Users\Lena Pra\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-07-02]

CHR Extension: (YouTube) - C:\Users\Lena Pra\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-02]

CHR Extension: (Google Tabellen) - C:\Users\Lena Pra\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-07-02]

CHR Extension: (Google Docs Offline) - C:\Users\Lena Pra\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-07-02]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Lena Pra\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-07-02]

CHR Extension: (Google Mail) - C:\Users\Lena Pra\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-07-02]

CHR Extension: (Chrome Media Router) - C:\Users\Lena Pra\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-02]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [173472 2017-04-22] (SUPERAntiSpyware.com)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)

R2 AVG Antivirus; C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe [264432 2017-07-04] (AVG Technologies CZ, s.r.o.)

R3 avgbIDSAgent; C:\Program Files (x86)\AVG\Antivirus\x64\aswidsagenta.exe [7481648 2017-07-04] (AVG Technologies CZ, s.r.o.)

R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1428656 2017-07-03] (AVG Technologies CZ, s.r.o.)

R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252504 2013-08-08] (Broadcom Corporation.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4411592 2017-06-23] (Microsoft Corporation)

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]

R2 Modem Device Helper; C:\Program Files (x86)\T-Mobile\InternetManager_A\BackgroundService\ServiceManager.exe [51576 2013-01-11] () [File not signed]

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AlcatelOTDCWwan; C:\Windows\System32\DRIVERS\AlcatelOTDCWwan.sys [159744 2013-01-11] (TCT International Mobile Ltd.)

S3 ALCATELUSB; C:\Windows\System32\Drivers\AlcatelUsb.sys [25088 2013-01-11] (Windows ® Codename Longhorn DDK provider)

R1 avgbdisk; C:\Windows\system32\drivers\avgbdiska.sys [166624 2017-07-04] (AVG Technologies CZ, s.r.o.)

R1 avgbidsdriver; C:\Windows\system32\drivers\avgbidsdrivera.sys [313616 2017-07-04] (AVG Technologies CZ, s.r.o.)

R0 avgbidsh; C:\Windows\system32\drivers\avgbidsha.sys [192584 2017-07-04] (AVG Technologies CZ, s.r.o.)

R0 avgblog; C:\Windows\system32\drivers\avgbloga.sys [336896 2017-07-04] (AVG Technologies CZ, s.r.o.)

R0 avgbuniv; C:\Windows\system32\drivers\avgbuniva.sys [51336 2017-07-04] (AVG Technologies CZ, s.r.o.)

S3 avgHwid; C:\Windows\system32\drivers\avgHwid.sys [39424 2017-07-04] (AVG Technologies CZ, s.r.o.)

R2 avgMonFlt; C:\Windows\system32\drivers\avgMonFlt.sys [139112 2017-07-04] (AVG Technologies CZ, s.r.o.)

R1 avgRdr; C:\Windows\system32\drivers\avgRdr2.sys [102792 2017-07-04] (AVG Technologies CZ, s.r.o.)

R0 avgRvrt; C:\Windows\system32\drivers\avgRvrt.sys [76832 2017-07-04] (AVG Technologies CZ, s.r.o.)

R1 avgSnx; C:\Windows\system32\drivers\avgSnx.sys [1008288 2017-07-04] (AVG Technologies CZ, s.r.o.)

R1 avgSP; C:\Windows\system32\drivers\avgSP.sys [578048 2017-07-04] (AVG Technologies CZ, s.r.o.)

R2 avgStm; C:\Windows\system32\drivers\avgStm.sys [191208 2017-07-04] (AVG Technologies CZ, s.r.o.)

R0 avgVmm; C:\Windows\system32\drivers\avgVmm.sys [353744 2017-07-04] (AVG Technologies CZ, s.r.o.)

R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [170712 2013-08-08] (Broadcom Corporation.)

S3 jrdusbser; C:\Windows\System32\DRIVERS\jrdusbser.sys [123776 2013-01-11] (TCT International Mobile Ltd.)

R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [127568 2013-03-04] (Qualcomm Atheros Co., Ltd.)

S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2017-06-21] (Malwarebytes)

R3 rtsuvc; C:\Windows\System32\DRIVERS\rtsuvc.sys [9101016 2013-12-10] (Realtek Semiconductor Corp.)

R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.)

R1 ZAM; C:\Windows\System32\drivers\zam64.sys [203680 2017-06-24] (Zemana Ltd.)

R1 ZAM_Guard; C:\Windows\System32\drivers\zamguard64.sys [203680 2017-06-24] (Zemana Ltd.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-07-09 19:33 - 2017-07-09 19:33 - 00001084 _____ C:\Users\Lena Pra\Desktop\SFCFix.txt

2017-07-09 19:33 - 2017-07-09 19:33 - 00000000 ____D C:\SFCFix

2017-07-09 19:17 - 2017-07-09 19:33 - 00000000 ____D C:\Users\Lena Pra\AppData\Local\niemiro

2017-07-09 19:16 - 2017-07-09 19:15 - 02884096 _____ (niemiro) C:\Users\Lena Pra\Desktop\SFCFix.exe

2017-07-09 19:15 - 2017-07-09 19:15 - 02884096 _____ (niemiro) C:\Users\Lena Pra\Downloads\SFCFix.exe

2017-07-09 18:29 - 2017-07-09 18:29 - 02790116 _____ C:\Users\Lena Pra\Downloads\Vorlesung Regionalanästhesie II 11.05.2017.pdf

2017-07-09 17:21 - 2017-07-09 17:21 - 23216628 _____ C:\Users\Lena Pra\Downloads\Beatmung des schwerkranken Patienten 2017 Kapfer 2014 Kopie (1).pdf

2017-07-08 15:02 - 2017-07-08 15:02 - 10128234 _____ C:\Users\Lena Pra\Downloads\Frakturen und Luxationen der Wirbelsäule_Beirer_3 (2).pdf

2017-07-08 15:01 - 2017-07-08 15:01 - 19382013 _____ C:\Users\Lena Pra\Downloads\Frakturen und Luxationen der Wirbelsäule_Beirer_2 (2).pdf

2017-07-07 18:15 - 2017-07-07 18:15 - 02214686 _____ C:\Users\Lena Pra\Downloads\Symptomkontrolle Meditum PM SS17 (2).pdf

2017-07-07 18:10 - 2017-07-07 18:10 - 02494575 _____ C:\Users\Lena Pra\Downloads\Schmerztherapie in der Palliativmedizin 05.07.2017 (1).pdf

2017-07-07 18:10 - 2017-07-07 18:10 - 02214686 _____ C:\Users\Lena Pra\Downloads\Symptomkontrolle Meditum PM SS17 (1).pdf

2017-07-07 17:59 - 2017-07-07 17:59 - 02494575 _____ C:\Users\Lena Pra\Downloads\Schmerztherapie in der Palliativmedizin 05.07.2017.pdf

2017-07-07 17:59 - 2017-07-07 17:59 - 02214686 _____ C:\Users\Lena Pra\Downloads\Symptomkontrolle Meditum PM SS17.pdf

2017-07-06 18:38 - 2017-07-06 18:39 - 10128234 _____ C:\Users\Lena Pra\Downloads\Frakturen und Luxationen der Wirbelsäule_Beirer_3 (1).pdf

2017-07-06 18:17 - 2017-07-06 18:17 - 19382013 _____ C:\Users\Lena Pra\Downloads\Frakturen und Luxationen der Wirbelsäule_Beirer_2 (1).pdf

2017-07-06 18:06 - 2017-07-06 18:06 - 21801975 _____ C:\Users\Lena Pra\Downloads\Frakturen und Luxationen der Wirbelsäule_Beirer_4.pdf

2017-07-06 18:05 - 2017-07-06 18:05 - 10128234 _____ C:\Users\Lena Pra\Downloads\Frakturen und Luxationen der Wirbelsäule_Beirer_3.pdf

2017-07-06 18:02 - 2017-07-06 18:02 - 19382013 _____ C:\Users\Lena Pra\Downloads\Frakturen und Luxationen der Wirbelsäule_Beirer_2.pdf

2017-07-06 17:41 - 2017-07-06 17:42 - 23604795 _____ C:\Users\Lena Pra\Downloads\Frakturen und Luxationen der Wirbelsäule_Beirer_1.pdf

2017-07-06 16:17 - 2017-07-06 16:17 - 02159510 _____ C:\Users\Lena Pra\Downloads\Osteoporose Vorlesung 14.06.pdf

2017-07-06 14:20 - 2017-07-06 14:20 - 18904639 _____ C:\Users\Lena Pra\Downloads\Pathologische Geburt 1._ Materialien f. Meditum.pdf

2017-07-06 14:20 - 2017-07-06 14:20 - 13048919 _____ C:\Users\Lena Pra\Downloads\Normale Geburt 1._ Materialen f. Meditum.pdf

2017-07-06 09:16 - 2017-07-06 09:16 - 00547120 _____ C:\Users\Lena Pra\Downloads\Schwindel_170704_Muehlau_NeuroVL (1).pdf

2017-07-05 19:16 - 2017-07-05 19:21 - 00000000 ____D C:\Windows\pss

2017-07-05 18:37 - 2017-07-05 18:37 - 00217614 _____ C:\Users\Lena Pra\Downloads\Attest Arbeitsmedizin.pdf

2017-07-05 18:17 - 2017-07-05 18:17 - 00185262 _____ C:\Users\Lena Pra\Downloads\Aushang TUM SS 2017.pdf

2017-07-05 17:46 - 2017-07-05 17:46 - 00547120 _____ C:\Users\Lena Pra\Downloads\Schwindel_170704_Muehlau_NeuroVL.pdf

2017-07-05 16:04 - 2017-07-05 16:04 - 03062577 _____ C:\Users\Lena Pra\Downloads\Vorlesung Myopathien und MND SS 2017.pdf

2017-07-05 13:15 - 2017-07-05 13:15 - 15021419 _____ C:\Users\Lena Pra\Downloads\Vorlesung Polytrauma MRI_HuWa_05.2017_gekürzt Studenten_V13.pdf

2017-07-04 16:08 - 2017-07-04 16:08 - 00401584 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\avgBoot.exe

2017-07-04 12:24 - 2017-07-04 12:24 - 23216628 _____ C:\Users\Lena Pra\Downloads\Beatmung des schwerkranken Patienten 2017 Kapfer 2014 Kopie.pdf

2017-07-04 11:10 - 2017-07-04 11:10 - 02972844 _____ C:\Users\Lena Pra\Downloads\Skript Vorlesung.pdf

2017-07-03 18:03 - 2017-07-03 18:03 - 10098702 _____ C:\Users\Lena Pra\Downloads\Vorlesung TU München Sommersemester 2017 Schmerzanalyse Schmezrtherapie bei KS%2c Orth Vorlesung TU 03 06 2016 .pdf

2017-07-03 12:46 - 2017-07-03 12:46 - 13475659 _____ C:\Users\Lena Pra\Downloads\IVL Schulter 2017.pdf

2017-07-03 12:44 - 2017-07-03 12:44 - 06633298 _____ C:\Users\Lena Pra\Downloads\IVL Weichteile Knie und SG.compressed.pdf

2017-07-02 18:13 - 2017-07-02 18:13 - 05939063 _____ C:\Users\Lena Pra\Downloads\Biometrie.pdf

2017-07-02 10:52 - 2017-07-02 10:52 - 02870984 _____ (ESET) C:\Users\Lena Pra\Downloads\esetsmartinstaller_enu.exe

2017-07-02 10:52 - 2017-07-02 10:52 - 00000000 ____D C:\Program Files (x86)\ESET

2017-07-02 10:40 - 2017-07-02 10:40 - 00004617 _____ C:\Users\Lena Pra\Desktop\AdwCleaner[C2].txt

2017-07-02 10:29 - 2017-07-02 10:29 - 04110280 _____ C:\Users\Lena Pra\Desktop\AdwCleaner.exe

2017-07-01 12:35 - 2017-07-09 20:56 - 00000000 ____D C:\Users\Lena Pra\Desktop\FRST-OlderVersion

2017-07-01 12:35 - 2017-07-01 12:39 - 00004212 _____ C:\Users\Lena Pra\Desktop\Fixlog.txt

2017-06-30 17:44 - 2017-06-30 17:44 - 21092520 _____ C:\Users\Lena Pra\Downloads\20151202-ilg-ataxie_chorea.pdf

2017-06-30 17:24 - 2017-06-30 17:24 - 16274103 _____ C:\Users\Lena Pra\Downloads\Dysimmune Neuropathien 2017-1 SS incl Zika - WEBSITE.pdf

2017-06-30 17:24 - 2017-06-30 17:24 - 02466989 _____ C:\Users\Lena Pra\Downloads\Vorlesung SS 2017 Periphere Neurologie 28.6.17.pdf

2017-06-29 10:12 - 2017-06-29 10:12 - 05453088 _____ C:\Users\Lena Pra\Downloads\Gestationsdiabetes und Präeklampsie Version für Meditum.pdf

2017-06-29 10:08 - 2017-06-29 10:09 - 05708870 _____ C:\Users\Lena Pra\Downloads\Vorlesung Graviditätsentwicklung Skript.pdf

2017-06-29 10:03 - 2017-06-29 10:03 - 05672589 _____ C:\Users\Lena Pra\Downloads\20151112-paepke-typischegynops.pdf

2017-06-29 10:03 - 2017-06-29 10:03 - 02427472 _____ C:\Users\Lena Pra\Downloads\20151013-seiefert-einführunguntersuchung.pdf

2017-06-28 21:28 - 2017-06-28 21:28 - 03623085 _____ C:\Users\Lena Pra\Downloads\20150611-schneider-ueberwach.pdf

2017-06-27 08:53 - 2017-06-27 08:53 - 03309800 _____ C:\Users\Lena Pra\Downloads\Notfälle in der Gynäkologie_Juni 2017 (1).pdf

2017-06-27 08:53 - 2017-06-27 08:53 - 00718769 _____ C:\Users\Lena Pra\Downloads\VorlesungRisikoschwangerschaft2017.pdf

2017-06-26 17:27 - 2017-06-26 17:27 - 03158146 _____ C:\Users\Lena Pra\Downloads\Hauptvorlesung_Kopfschmerz_Sei_05_2017 (2).pdf

2017-06-26 16:19 - 2017-07-09 09:33 - 00000000 ____D C:\Users\Lena Pra\Documents\Studium

2017-06-25 15:34 - 2017-06-25 15:34 - 08289209 _____ C:\Users\Lena Pra\Downloads\Hauptvorlesung_DiffhyperkinetischeMD_240517_mediTUM.pdf

2017-06-25 15:34 - 2017-06-25 15:34 - 03701918 _____ C:\Users\Lena Pra\Downloads\Gesichtsschmerz_neuropath_Schmerz2017 (2).pdf

2017-06-25 15:34 - 2017-06-25 15:34 - 03158146 _____ C:\Users\Lena Pra\Downloads\Hauptvorlesung_Kopfschmerz_Sei_05_2017 (1).pdf

2017-06-25 12:04 - 2017-06-25 12:04 - 15339834 _____ C:\Users\Lena Pra\Downloads\Hauptvorlesung_Bewegungsstörungen_IPS_300517_mediTUM.pdf

2017-06-25 11:35 - 2017-06-25 11:35 - 03075180 _____ C:\Users\Lena Pra\Downloads\DD Gangstörungen 2017-1 (1).pdf

2017-06-24 10:57 - 2017-06-26 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG

2017-06-24 10:43 - 2017-07-08 10:14 - 00004178 _____ C:\Windows\System32\Tasks\Antivirus Emergency Update

2017-06-24 10:43 - 2017-07-04 16:09 - 00353744 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgvmm.sys

2017-06-24 10:43 - 2017-07-04 16:08 - 01008288 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSnx.sys

2017-06-24 10:43 - 2017-07-04 16:08 - 00578048 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSP.sys

2017-06-24 10:43 - 2017-07-04 16:08 - 00353232 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgvmm.sys.149917735418204

2017-06-24 10:43 - 2017-07-04 16:08 - 00191208 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgStm.sys

2017-06-24 10:43 - 2017-07-04 16:08 - 00139112 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgMonFlt.sys

2017-06-24 10:43 - 2017-07-04 16:08 - 00102792 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRdr2.sys

2017-06-24 10:43 - 2017-07-04 16:08 - 00076832 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRvrt.sys

2017-06-24 10:43 - 2017-07-04 16:08 - 00039424 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgHwid.sys

2017-06-24 10:43 - 2017-07-04 16:07 - 00336896 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbloga.sys

2017-06-24 10:43 - 2017-07-04 16:07 - 00313616 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidsdrivera.sys

2017-06-24 10:43 - 2017-07-04 16:07 - 00192584 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidsha.sys

2017-06-24 10:43 - 2017-07-04 16:07 - 00166624 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbdiska.sys

2017-06-24 10:43 - 2017-07-04 16:07 - 00051336 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbuniva.sys

2017-06-24 10:39 - 2017-07-09 20:56 - 00061226 _____ C:\Windows\ZAM.krnl.trace

2017-06-24 10:39 - 2017-07-09 20:56 - 00031126 _____ C:\Windows\ZAM_Guard.krnl.trace

2017-06-24 10:39 - 2017-06-24 10:39 - 00203680 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zamguard64.sys

2017-06-24 10:39 - 2017-06-24 10:39 - 00203680 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zam64.sys

2017-06-24 10:38 - 2017-06-24 10:39 - 00000000 ____D C:\Program Files (x86)\Zemana AntiMalware

2017-06-24 10:38 - 2017-06-24 10:38 - 00001148 _____ C:\Users\Public\Desktop\Zemana AntiMalware.lnk

2017-06-24 10:38 - 2017-06-24 10:38 - 00000000 ____D C:\Users\Lena Pra\AppData\Local\Zemana

2017-06-24 10:38 - 2017-06-24 10:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zemana AntiMalware

2017-06-24 10:37 - 2017-06-26 12:37 - 00001008 _____ C:\Users\Public\Desktop\AVG.lnk

2017-06-24 10:36 - 2017-06-24 10:36 - 06589840 _____ (Zemana Ltd. ) C:\Users\Lena Pra\Downloads\Zemana.AntiMalware.Setup.exe

2017-06-22 10:28 - 2017-06-24 11:16 - 00037118 _____ C:\Users\Lena Pra\Desktop\Addition.txt

2017-06-22 10:26 - 2017-07-09 20:58 - 00018602 _____ C:\Users\Lena Pra\Desktop\FRST.txt

2017-06-22 10:26 - 2017-07-09 20:56 - 02437120 _____ (Farbar) C:\Users\Lena Pra\Desktop\EnglishFRST64.exe

2017-06-22 10:25 - 2017-06-22 10:25 - 02439680 _____ (Farbar) C:\Users\Lena Pra\Downloads\FRST64.exe

2017-06-20 11:41 - 2017-06-20 11:41 - 06030369 _____ C:\Users\Lena Pra\Downloads\HV_zerebrovaskulär_ICB_SS17_online.pdf

2017-06-20 11:34 - 2017-06-20 11:34 - 01453275 _____ C:\Users\Lena Pra\Downloads\2017 upload Poppert.pdf

2017-06-20 08:27 - 2017-06-20 08:27 - 02086013 _____ C:\Users\Lena Pra\Downloads\Hauptvorlesung Neurologie 14.06.2017.pdf

2017-06-14 10:37 - 2017-06-14 10:37 - 03701918 _____ C:\Users\Lena Pra\Downloads\Gesichtsschmerz_neuropath_Schmerz2017 (1).pdf

2017-06-14 10:36 - 2017-06-02 10:28 - 02317824 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll

2017-06-14 10:36 - 2017-06-02 10:28 - 02222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll

2017-06-14 10:36 - 2017-06-02 10:28 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll

2017-06-14 10:36 - 2017-06-02 10:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll

2017-06-14 10:36 - 2017-06-02 10:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll

2017-06-14 10:36 - 2017-06-02 10:28 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll

2017-06-14 10:36 - 2017-06-02 10:28 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll

2017-06-14 10:36 - 2017-06-02 10:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll

2017-06-14 10:36 - 2017-06-02 10:28 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll

2017-06-14 10:36 - 2017-06-02 10:11 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe

2017-06-14 10:36 - 2017-06-02 10:11 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe

2017-06-14 10:36 - 2017-06-02 10:10 - 00733696 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe

2017-06-14 10:36 - 2017-06-02 10:10 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe

2017-06-14 10:36 - 2017-06-02 10:09 - 01549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll

2017-06-14 10:36 - 2017-06-02 10:09 - 01400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll

2017-06-14 10:36 - 2017-06-02 10:09 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll

2017-06-14 10:36 - 2017-06-02 10:09 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll

2017-06-14 10:36 - 2017-06-02 10:09 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll

2017-06-14 10:36 - 2017-06-02 10:09 - 00104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll

2017-06-14 10:36 - 2017-06-02 10:09 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll

2017-06-14 10:36 - 2017-06-02 10:09 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll

2017-06-14 10:36 - 2017-06-02 09:58 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe

2017-06-14 10:36 - 2017-06-02 09:58 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe

2017-06-14 10:36 - 2017-06-02 09:57 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe

2017-06-14 10:36 - 2017-06-02 09:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll

2017-06-14 10:36 - 2017-05-21 06:28 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2017-06-14 10:36 - 2017-05-21 06:28 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2017-06-14 10:36 - 2017-05-21 06:24 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2017-06-14 10:36 - 2017-05-21 06:24 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2017-06-14 10:36 - 2017-05-21 06:24 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2017-06-14 10:36 - 2017-05-21 06:24 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2017-06-14 10:36 - 2017-05-21 06:24 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2017-06-14 10:36 - 2017-05-21 06:24 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2017-06-14 10:36 - 2017-05-21 06:24 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2017-06-14 10:36 - 2017-05-21 06:24 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2017-06-14 10:36 - 2017-05-21 06:24 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2017-06-14 10:36 - 2017-05-21 06:24 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll

2017-06-14 10:36 - 2017-05-21 06:24 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2017-06-14 10:36 - 2017-05-21 06:24 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2017-06-14 10:36 - 2017-05-21 06:24 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll

2017-06-14 10:36 - 2017-05-21 06:24 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2017-06-14 10:36 - 2017-05-21 06:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2017-06-14 10:36 - 2017-05-21 06:24 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2017-06-14 10:36 - 2017-05-21 06:24 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2017-06-14 10:36 - 2017-05-21 06:24 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2017-06-14 10:36 - 2017-05-21 06:24 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2017-06-14 10:36 - 2017-05-21 06:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2017-06-14 10:36 - 2017-05-21 06:06 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2017-06-14 10:36 - 2017-05-21 06:06 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2017-06-14 10:36 - 2017-05-21 06:06 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2017-06-14 10:36 - 2017-05-21 06:06 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2017-06-14 10:36 - 2017-05-21 06:06 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2017-06-14 10:36 - 2017-05-21 06:06 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2017-06-14 10:36 - 2017-05-21 06:06 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2017-06-14 10:36 - 2017-05-21 06:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2017-06-14 10:36 - 2017-05-21 06:06 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll

2017-06-14 10:36 - 2017-05-21 06:06 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2017-06-14 10:36 - 2017-05-21 06:06 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll

2017-06-14 10:36 - 2017-05-21 06:06 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2017-06-14 10:36 - 2017-05-21 06:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2017-06-14 10:36 - 2017-05-21 06:06 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2017-06-14 10:36 - 2017-05-21 06:06 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2017-06-14 10:36 - 2017-05-21 05:55 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2017-06-14 10:36 - 2017-05-21 05:48 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2017-06-14 10:36 - 2017-05-21 05:48 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2017-06-14 10:36 - 2017-05-21 05:48 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2017-06-14 10:36 - 2017-05-21 05:47 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2017-06-14 10:36 - 2017-05-21 05:46 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2017-06-14 10:36 - 2017-05-21 05:42 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll

2017-06-14 10:36 - 2017-05-16 20:19 - 00394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2017-06-14 10:36 - 2017-05-16 19:35 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2017-06-14 10:36 - 2017-05-14 22:46 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2017-06-14 10:36 - 2017-05-14 22:46 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2017-06-14 10:36 - 2017-05-14 22:28 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2017-06-14 10:36 - 2017-05-14 22:27 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2017-06-14 10:36 - 2017-05-14 22:27 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2017-06-14 10:36 - 2017-05-14 22:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2017-06-14 10:36 - 2017-05-14 22:26 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2017-06-14 10:36 - 2017-05-14 22:24 - 02899456 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2017-06-14 10:36 - 2017-05-14 22:19 - 25738752 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2017-06-14 10:36 - 2017-05-14 22:17 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2017-06-14 10:36 - 2017-05-14 22:16 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2017-06-14 10:36 - 2017-05-14 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2017-06-14 10:36 - 2017-05-14 22:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2017-06-14 10:36 - 2017-05-14 22:10 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2017-06-14 10:36 - 2017-05-14 22:10 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2017-06-14 10:36 - 2017-05-14 22:10 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2017-06-14 10:36 - 2017-05-14 22:01 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2017-06-14 10:36 - 2017-05-14 21:57 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2017-06-14 10:36 - 2017-05-14 21:55 - 05975040 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2017-06-14 10:36 - 2017-05-14 21:48 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2017-06-14 10:36 - 2017-05-14 21:47 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2017-06-14 10:36 - 2017-05-14 21:46 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2017-06-14 10:36 - 2017-05-14 21:42 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2017-06-14 10:36 - 2017-05-14 21:41 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2017-06-14 10:36 - 2017-05-14 21:38 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2017-06-14 10:36 - 2017-05-14 21:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2017-06-14 10:36 - 2017-05-14 21:36 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2017-06-14 10:36 - 2017-05-14 21:23 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2017-06-14 10:36 - 2017-05-14 21:23 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2017-06-14 10:36 - 2017-05-14 21:22 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2017-06-14 10:36 - 2017-05-14 21:22 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2017-06-14 10:36 - 2017-05-14 21:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2017-06-14 10:36 - 2017-05-14 21:21 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2017-06-14 10:36 - 2017-05-14 21:20 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2017-06-14 10:36 - 2017-05-14 21:19 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2017-06-14 10:36 - 2017-05-14 21:18 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2017-06-14 10:36 - 2017-05-14 21:17 - 02132992 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2017-06-14 10:36 - 2017-05-14 21:16 - 02290176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2017-06-14 10:36 - 2017-05-14 21:15 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2017-06-14 10:36 - 2017-05-14 21:14 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2017-06-14 10:36 - 2017-05-14 21:12 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2017-06-14 10:36 - 2017-05-14 21:11 - 20274688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2017-06-14 10:36 - 2017-05-14 21:11 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2017-06-14 10:36 - 2017-05-14 21:10 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2017-06-14 10:36 - 2017-05-14 21:10 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2017-06-14 10:36 - 2017-05-14 21:02 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2017-06-14 10:36 - 2017-05-14 20:57 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2017-06-14 10:36 - 2017-05-14 20:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2017-06-14 10:36 - 2017-05-14 20:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2017-06-14 10:36 - 2017-05-14 20:54 - 15252992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2017-06-14 10:36 - 2017-05-14 20:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2017-06-14 10:36 - 2017-05-14 20:52 - 03240960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2017-06-14 10:36 - 2017-05-14 20:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2017-06-14 10:36 - 2017-05-14 20:50 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2017-06-14 10:36 - 2017-05-14 20:49 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2017-06-14 10:36 - 2017-05-14 20:44 - 04549120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2017-06-14 10:36 - 2017-05-14 20:42 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2017-06-14 10:36 - 2017-05-14 20:40 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2017-06-14 10:36 - 2017-05-14 20:39 - 02057216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2017-06-14 10:36 - 2017-05-14 20:38 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2017-06-14 10:36 - 2017-05-14 20:37 - 01544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2017-06-14 10:36 - 2017-05-14 20:30 - 13664768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2017-06-14 10:36 - 2017-05-14 20:27 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2017-06-14 10:36 - 2017-05-14 20:15 - 02767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2017-06-14 10:36 - 2017-05-14 20:11 - 01314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2017-06-14 10:36 - 2017-05-14 20:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2017-06-14 10:36 - 2017-05-12 20:27 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2017-06-14 10:36 - 2017-05-12 20:26 - 05547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2017-06-14 10:36 - 2017-05-12 20:26 - 00706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2017-06-14 10:36 - 2017-05-12 20:26 - 00382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2017-06-14 10:36 - 2017-05-12 20:24 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:07 - 04001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2017-06-14 10:36 - 2017-05-12 20:07 - 03945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2017-06-14 10:36 - 2017-05-12 20:07 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2017-06-14 10:36 - 2017-05-12 20:04 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 19:55 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2017-06-14 10:36 - 2017-05-12 19:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2017-06-14 10:36 - 2017-05-12 19:54 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2017-06-14 10:36 - 2017-05-12 19:52 - 03222528 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2017-06-14 10:36 - 2017-05-12 19:51 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2017-06-14 10:36 - 2017-05-12 19:50 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2017-06-14 10:36 - 2017-05-12 19:46 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2017-06-14 10:36 - 2017-05-12 19:43 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2017-06-14 10:36 - 2017-05-12 19:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2017-06-14 10:36 - 2017-05-12 19:41 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2017-06-14 10:36 - 2017-05-12 19:41 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2017-06-14 10:36 - 2017-05-12 19:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2017-06-14 10:36 - 2017-05-12 19:40 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 19:40 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 19:40 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 19:40 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2017-06-14 10:36 - 2017-05-12 18:25 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2017-06-14 10:36 - 2017-05-12 17:58 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2017-06-14 10:36 - 2017-05-12 17:58 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2017-06-14 10:36 - 2017-05-10 17:33 - 00091368 _____ (Microsoft Corporation) C:\Windows\system32\MigAutoPlay.exe

2017-06-14 10:36 - 2017-05-10 17:29 - 14183936 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2017-06-14 10:36 - 2017-05-10 17:29 - 03165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2017-06-14 10:36 - 2017-05-10 17:29 - 01867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll

2017-06-14 10:36 - 2017-05-10 17:29 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2017-06-14 10:36 - 2017-05-10 17:29 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2017-06-14 10:36 - 2017-05-10 17:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2017-06-14 10:36 - 2017-05-10 17:16 - 00091368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MigAutoPlay.exe

2017-06-14 10:36 - 2017-05-10 17:14 - 02651136 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2017-06-14 10:36 - 2017-05-10 17:13 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2017-06-14 10:36 - 2017-05-10 17:13 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2017-06-14 10:36 - 2017-05-10 17:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2017-06-14 10:36 - 2017-05-10 17:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2017-06-14 10:36 - 2017-05-10 17:13 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2017-06-14 10:36 - 2017-05-10 17:13 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2017-06-14 10:36 - 2017-05-10 17:12 - 12880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2017-06-14 10:36 - 2017-05-10 17:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll

2017-06-14 10:36 - 2017-05-10 17:12 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2017-06-14 10:36 - 2017-05-10 17:00 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2017-06-14 10:36 - 2017-05-10 17:00 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2017-06-14 10:36 - 2017-05-10 17:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2017-06-14 10:36 - 2017-05-10 17:00 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2017-06-14 10:36 - 2017-05-10 16:52 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys

2017-06-14 10:36 - 2017-05-09 17:30 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2017-06-14 10:36 - 2017-05-09 17:29 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2017-06-14 10:36 - 2017-05-09 17:11 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll

2017-06-14 10:36 - 2017-05-07 17:33 - 00094440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys

2017-06-14 10:36 - 2017-05-07 17:29 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll

2017-06-14 10:36 - 2017-04-28 00:50 - 03550208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll

2017-06-14 10:36 - 2017-04-12 15:05 - 04296704 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll

2017-06-14 10:36 - 2017-03-30 17:03 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\rundll32.exe

2017-06-14 10:36 - 2017-03-30 16:58 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe

2017-06-14 10:15 - 2017-06-14 10:15 - 00802148 _____ C:\Users\Lena Pra\Downloads\Einführung_SPSS.pdf

2017-06-14 10:11 - 2017-06-14 10:11 - 06135753 _____ C:\Users\Lena Pra\Downloads\SPSS_Folien_II.pdf

2017-06-13 10:59 - 2017-06-13 10:59 - 04531587 _____ C:\Users\Lena Pra\Downloads\201706SStum_neurohauptvorlhirntumoren.pdf

2017-06-13 10:57 - 2017-06-13 10:57 - 03701918 _____ C:\Users\Lena Pra\Downloads\Gesichtsschmerz_neuropath_Schmerz2017.pdf

2017-06-13 10:33 - 2017-06-13 10:33 - 03075180 _____ C:\Users\Lena Pra\Downloads\DD Gangstörungen 2017-1.pdf

2017-06-13 08:50 - 2017-06-13 08:50 - 03158146 _____ C:\Users\Lena Pra\Downloads\Hauptvorlesung_Kopfschmerz_Sei_05_2017.pdf

2017-06-13 08:42 - 2017-06-13 08:42 - 00000000 ____D C:\Users\Lena Pra\AppData\Local\Microsoft Help

2017-06-12 08:52 - 2017-06-12 08:52 - 10806417 _____ C:\Users\Lena Pra\Downloads\Spinale Syndrome + FallvorstellungSS17.pptx

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-07-09 20:56 - 2015-12-16 11:27 - 00000000 ____D C:\FRST

2017-07-09 19:18 - 2009-07-14 06:45 - 00028944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2017-07-09 19:18 - 2009-07-14 06:45 - 00028944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2017-07-09 19:08 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2017-07-09 09:45 - 2014-03-04 02:58 - 01593564 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2017-07-09 09:45 - 2011-04-12 09:43 - 00699342 _____ C:\Windows\system32\perfh007.dat

2017-07-09 09:45 - 2011-04-12 09:43 - 00149450 _____ C:\Windows\system32\perfc007.dat

2017-07-09 09:45 - 2009-07-14 07:13 - 01593564 _____ C:\Windows\system32\PerfStringBackup.INI

2017-07-09 09:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf

2017-07-09 09:30 - 2016-09-22 18:38 - 00003600 _____ C:\Windows\System32\Tasks\AVG EUpdate Task

2017-07-07 18:10 - 2016-11-21 00:40 - 00000000 ____D C:\Program Files (x86)\Microsoft Office

2017-07-06 09:34 - 2016-11-21 00:45 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2017-07-06 09:13 - 2017-01-31 12:25 - 00000000 ____D C:\Users\Lena Pra\AppData\LocalLow\Mozilla

2017-07-05 19:20 - 2014-11-28 11:31 - 00000000 ____D C:\Users\Lena Pra\AppData\Local\Avg

2017-07-05 18:33 - 2015-02-02 16:32 - 00000000 ____D C:\Users\Lena Pra\Documents\Scan

2017-07-05 13:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2017-07-02 10:36 - 2015-12-17 10:28 - 00000000 ____D C:\AdwCleaner

2017-06-28 09:23 - 2016-05-17 12:44 - 00002187 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2017-06-28 09:23 - 2016-05-17 12:44 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2017-06-25 13:23 - 2015-12-08 19:52 - 00000000 ____D C:\ProgramData\Avg

2017-06-24 10:57 - 2015-12-08 20:00 - 00000000 ____D C:\Users\Lena Pra\AppData\Roaming\AVG

2017-06-24 10:57 - 2015-06-30 11:15 - 00000000 ____D C:\Program Files\Common Files\AV

2017-06-24 10:40 - 2014-02-06 12:10 - 00000000 ____D C:\Users\Lena Pra

2017-06-24 10:38 - 2014-02-06 19:07 - 00000000 ____D C:\Program Files (x86)\AVG

2017-06-22 08:38 - 2017-01-16 12:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2017-06-22 08:38 - 2014-02-06 15:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2017-06-21 22:34 - 2016-12-09 21:35 - 00000000 ____D C:\Users\Lena Pra\Desktop\Kallender

2017-06-21 21:37 - 2015-12-14 23:56 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2017-06-21 20:19 - 2009-07-14 06:45 - 00454296 _____ C:\Windows\system32\FNTCACHE.DAT

2017-06-21 20:18 - 2014-03-11 00:13 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2017-06-21 20:18 - 2014-03-11 00:13 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2017-06-21 20:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz

2017-06-21 20:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\migwiz

2017-06-21 09:46 - 2014-03-11 00:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2017-06-21 09:44 - 2014-02-06 13:53 - 00000000 ____D C:\Windows\system32\MRT

2017-06-21 09:35 - 2014-02-06 13:53 - 133627792 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

2017-06-20 08:12 - 2014-03-03 21:02 - 00004366 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2017-06-20 08:12 - 2014-03-03 21:01 - 00803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2017-06-20 08:12 - 2014-03-03 21:01 - 00144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2017-06-20 08:11 - 2014-03-03 21:01 - 00000000 ____D C:\Windows\SysWOW64\Macromed

2017-06-20 08:11 - 2014-03-03 21:01 - 00000000 ____D C:\Windows\system32\Macromed

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\dnsapi.dll => File is digitally signed

C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-07-05 13:45

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-07-2017

Ran by Lena Pra (09-07-2017 20:59:09)

Running from C:\Users\Lena Pra\Desktop

Windows 7 Home Premium Service Pack 1 (X64) (2014-02-06 10:10:14)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-2819346672-853151906-811778091-500 - Administrator - Disabled)

Gast (S-1-5-21-2819346672-853151906-811778091-501 - Limited - Disabled)

Lena Pra (S-1-5-21-2819346672-853151906-811778091-1000 - Administrator - Enabled) => C:\Users\Lena Pra

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: AVG Antivirus (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: AVG Antivirus (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 16.00 (x64) (HKLM\...\7-Zip) (Version: 16.00 - Igor Pavlov)

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )

Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.131 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.20) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.20 - Adobe Systems Incorporated)

Alcor Micro USB Card Reader Driver (HKLM-x32\...\{C538010A-17CD-461C-B198-E6E3499E4154}) (Version: 20.3.45.53553 - Alcor Micro Corp.) Hidden

Alcor Micro USB Card Reader Driver (HKLM-x32\...\InstallShield_{C538010A-17CD-461C-B198-E6E3499E4154}) (Version: 20.3.45.53553 - Alcor Micro Corp.)

Apple Application Support (32-Bit) (HKLM-x32\...\{F2871C89-C8A5-42EE-8D45-0F02506385A6}) (Version: 5.1 - Apple Inc.)

Apple Application Support (64-Bit) (HKLM\...\{9BC93467-75D1-4AA4-BD58-D9C51D88DFAB}) (Version: 5.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)

AVG (HKLM\...\{49AB2080-7813-477F-835E-946DFD2CE4AA}) (Version: 1.201.1 - AVG Technologies) Hidden

AVG AntiVirus FREE (HKLM-x32\...\AVG Antivirus) (Version: 17.5.3021 - AVG Technologies)

AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.3.8.510 - AVG Technologies)

Benutzerhandbuch anzeigen (HKLM-x32\...\View User Guide) (Version: 3.60.43.0 - )

Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)

Bullzip PDF Printer 10.4.0.2240 (HKLM\...\Bullzip PDF Printer_is1) (Version: 10.4.0.2240 - Bullzip)

Common Desktop Agent (HKLM\...\{031A0E14-0413-4C97-9772-2639B782F46F}) (Version: 1.62.0 - OEM) Hidden

Energy Management (HKLM-x32\...\{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 6.0.2.4 - Lenovo) Hidden

Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 6.0.2.4 - Lenovo)

EnergyCut (HKLM-x32\...\{6E127727-CE4B-40E4-9A7D-9D65CDE0A15C}) (Version: 1.00 - Lenovo)

ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )

FMW 1 (HKLM\...\{8DF0D8D9-0C24-47EB-9738-376DD2705133}) (Version: 1.214.2 - AVG Technologies) Hidden

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 59.0.3071.115 - Google Inc.)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2932 - Intel Corporation)

Intel® USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.8.251 - Intel Corporation)

Internet Manager (HKLM-x32\...\Internet Manager_is1) (Version: - TCT Mobile Limited)

iTunes (HKLM\...\{554C62C7-E6BB-40F1-892B-F0AE02D3C135}) (Version: 12.5.3.17 - Apple Inc.)

Java™ 6 Update 12 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216012FF}) (Version: 6.0.120 - Sun Microsystems, Inc.)

Lenovo EasyCamera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10253 - Realtek Semiconductor Corp.)

Lenovo_Wireless_Driver (HKLM-x32\...\{28ABE740-47F3-441B-9437-852F6A64EFF8}) (Version: 1.02.01 - Lenovo)

Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)

Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)

Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)

Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.8229.2073 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-2819346672-853151906-811778091-1000\...\OneDriveSetup.exe) (Version: 17.3.6390.0509 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 53.0.3 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 53.0.3 (x86 en-US)) (Version: 53.0.3 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 53.0.3.6347 - Mozilla)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)

Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8229.2073 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8229.2073 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8229.2073 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.8229.2045 - Microsoft Corporation) Hidden

OLYMPUS Digital Camera Updater (HKLM-x32\...\{392427E9-9FA4-4CD2-99EB-FD53A12BDCDA}) (Version: 1.2.1 - Olympus Corporation)

OLYMPUS Viewer 3 (HKLM-x32\...\{0CE3A5C0-9544-4CE0-8AFD-8562CD9E5913}) (Version: 2.0.0 - Olympus Corporation)

OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)

PHOTOfunSTUDIO 9.6 PE (HKLM-x32\...\{7113ACE0-A2FA-463B-969A-E3FD7BF42573}) (Version: 9.06.724.1031 - Panasonic Corporation)

posterXXL Designer 5.3 (HKLM-x32\...\posterXXL Designer_is1) (Version: - )

Qualcomm Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.15 - Qualcomm Atheros Communications Inc.)

QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)

Samsung Drucker-Diagnose (HKLM-x32\...\Samsung Printer Diagnostics) (Version: 1.0.0.15 - Samsung Electronics Co., Ltd.)

Samsung Easy Document Creator (HKLM-x32\...\Samsung Easy Document Creator) (Version: 1.05.92 (14.03.2014) - Samsung Electronics Co., Ltd.)

Samsung Easy Printer Manager (HKLM-x32\...\Samsung Easy Printer Manager) (Version: 1.05.29.00(26.03.2014) - Samsung Electronics Co., Ltd.)

Samsung M2070 Series (HKLM-x32\...\Samsung M2070 Series) (Version: 1.12 (15.04.2014) - Samsung Electronics Co., Ltd.)

Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)

Samsung Scan Process Machine (HKLM-x32\...\Samsung Scan Process Machine) (Version: 1.02.07.02 - Samsung Electronics Co., Ltd.) Hidden

SILKYPIX Developer Studio 4.2 SE (HKLM-x32\...\{8B9D37A0-F77B-41DD-932A-CE01DEC1ADAA}) (Version: 4 - Ichikawa Soft Laboratory) Hidden

SILKYPIX Developer Studio 4.2 SE (HKLM-x32\...\InstallShield_{8B9D37A0-F77B-41DD-932A-CE01DEC1ADAA}) (Version: 4 - Ichikawa Soft Laboratory)

Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.112 - Skype Technologies S.A.)

SNS Upload for Easy Document Creator (HKLM-x32\...\{B6B5F07C-88D5-49D3-A1A7-A6D4BC37DCCC}) (Version: 1.0.0 - Samsung Electronics Co.,Ltd)

SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 5.7.1018 - SUPERAntiSpyware.com)

TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.25942 - TeamViewer)

UnJPEG 1.5 (HKLM-x32\...\UnJPEG_is1) (Version: - )

Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)

Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)

WIDCOMM Bluetooth Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.8050 - Broadcom Corporation)

Windows-Treiberpaket - Lenovo (ACPIVPC) System (01/28/2011 6.1.0.1) (HKLM\...\EB9B45DC947C2D941CA61B992509A71D738AE888) (Version: 01/28/2011 6.1.0.1 - Lenovo)

Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (HKLM\...\2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)

WinZip 18.5 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240E3}) (Version: 18.5.11111 - WinZip Computing, S.L. )

Zemana AntiMalware (HKLM-x32\...\{8F0CD7D1-42F3-4195-95CD-833578D45057}_is1) (Version: 2.74.0.76 - Zemana Ltd.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2819346672-853151906-811778091-1000_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Lena Pra\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\FileCoAuthLib64.dll ()

ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File

ContextMenuHandlers01: [2.0 Zemana AntiMalware] -> {6ABB1C11-E261-4CEA-BBB5-3836225689DD} => C:\Program Files (x86)\Zemana AntiMalware\ZAMShellExt64.dll [2017-06-24] ()

ContextMenuHandlers01: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-05-10] (Igor Pavlov)

ContextMenuHandlers01: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files (x86)\AVG\Antivirus\ashShA64.dll [2017-07-04] (AVG Technologies CZ, s.r.o.)

ContextMenuHandlers01: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2014-05-21] (WinZip Computing, S.L.)

ContextMenuHandlers03: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File

ContextMenuHandlers04: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-05-10] (Igor Pavlov)

ContextMenuHandlers04: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2014-05-21] (WinZip Computing, S.L.)

ContextMenuHandlers05: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2012-12-14] (Intel Corporation)

ContextMenuHandlers06: [2.0 Zemana AntiMalware] -> {6ABB1C11-E261-4CEA-BBB5-3836225689DD} => C:\Program Files (x86)\Zemana AntiMalware\ZAMShellExt64.dll [2017-06-24] ()

ContextMenuHandlers06: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-05-10] (Igor Pavlov)

ContextMenuHandlers06: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files (x86)\AVG\Antivirus\ashShA64.dll [2017-07-04] (AVG Technologies CZ, s.r.o.)

ContextMenuHandlers06: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2014-05-21] (WinZip Computing, S.L.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {00632DEE-9918-4EBA-AB70-F9CF1F708082} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated)

Task: {079091D5-E225-4DD6-91E7-ACE4A774DAAF} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-07-06] ()

Task: {17C29866-5086-4859-ACE3-A3E9ECA97639} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-17] (Google Inc.)

Task: {4C63E3F8-4896-4240-A9FF-54CBFF73921F} - System32\Tasks\Antivirus Emergency Update => C:\Program Files (x86)\AVG\Antivirus\AvEmUpdate.exe [2017-07-04] (AVG Technologies CZ, s.r.o.)

Task: {4EFF6C01-C93F-4657-A0AB-2D3011385176} - System32\Tasks\{A194828C-4D0E-45B0-A26E-9A09396D8C76} => pcalua.exe -a "C:\drivers\WLAN Driver (Broadcom, Qualcomm)\Setup.exe" -d "C:\drivers\WLAN Driver (Broadcom, Qualcomm)"

Task: {6705F0DF-AA46-41A6-87AF-3A7B3992639E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-06-23] (Microsoft Corporation)

Task: {699E5E71-BB6E-4F62-8118-59871ED8F510} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-07-06] (Microsoft Corporation)

Task: {6BFBD678-B787-42AB-B281-F2037B5ECFBD} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-06-23] (Microsoft Corporation)

Task: {6D2E0E9A-4ED1-4538-AF29-B2943250AB97} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-07-06] (Microsoft Corporation)

Task: {6D6F4398-79F7-44AB-954D-4BEA554D0C06} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-07-06] (Microsoft Corporation)

Task: {9DAA4F66-B2FC-4A4A-B9CB-54BA7654DEEE} - System32\Tasks\{C0BC9234-B6F1-4C4A-A999-5F3D15A1495E} => pcalua.exe -a "C:\Users\Lena Pra\Desktop\WLAN_Broadcom_6.30.223.181_W81x64\WLAN\IS.exe" -d "C:\Users\Lena Pra\Desktop\WLAN_Broadcom_6.30.223.181_W81x64\WLAN"

Task: {9F3AF780-0CDC-42BB-820B-5FF850E52F14} - System32\Tasks\{4E58F9EE-1311-4F1D-83BC-9812A26DBED6} => pcalua.exe -a "C:\drivers\WLAN and Bluetooth Driver (Broadcom, Qualcomm)\Setup.exe" -d "C:\drivers\WLAN and Bluetooth Driver (Broadcom, Qualcomm)"

Task: {A18EEC6E-1F3B-40FA-9451-06D2F27EC860} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-17] (Google Inc.)

Task: {AAB5D635-0A91-42A9-8105-59F1DD47D0AF} - System32\Tasks\TunnelBear => C:\Program Files (x86)\TunnelBear\TBear.Client.exe

Task: {B2FECCB1-217F-47EB-BA68-F313B3F0D99B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)

Task: {B75FC291-32D8-446F-8CEB-7C22016D2101} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-07-06] ()

Task: {CBDCEC6C-56AA-415B-9119-C15B3EE97E2D} - System32\Tasks\AVG EUpdate Task => avgsetupx.exe

Task: {D0332663-B442-44C4-BD23-8CF78948125D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-06-20] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-01-23 19:36 - 2013-05-29 14:01 - 00034304 _____ () C:\Windows\System32\ssm4mlm.dll

2016-10-05 19:17 - 2016-10-05 19:17 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2016-10-05 19:17 - 2016-10-05 19:17 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2013-10-10 15:02 - 2013-10-10 15:02 - 00049368 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btwleapi.dll

2016-11-21 01:10 - 2016-11-21 01:10 - 00959168 _____ () C:\Users\Lena Pra\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll

2017-06-24 10:39 - 2017-06-24 10:39 - 00155504 _____ () C:\Program Files (x86)\Zemana AntiMalware\ZAMShellExt64.dll

2014-12-03 20:55 - 2013-01-11 15:27 - 00051576 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_A\BackgroundService\ServiceManager.exe

2012-12-14 03:42 - 2012-12-14 03:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll

2008-12-20 04:20 - 2014-02-06 18:38 - 00054088 _____ () C:\Program Files (x86)\Lenovo\Energy Management\kbdhook.dll

2008-12-20 04:20 - 2014-02-06 18:38 - 00054088 _____ () C:\Program Files (x86)\Lenovo\Energy Management\HookLib.dll

2012-03-09 10:58 - 2012-03-09 10:58 - 00462712 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe

2012-03-09 10:58 - 2012-03-09 10:58 - 00057208 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll

2014-12-03 20:55 - 2013-01-11 16:00 - 00114040 _____ () C:\Program Files (x86)\T-Mobile\InternetManager_A\Background\ModemListener.exe

2017-06-24 10:40 - 2017-06-24 10:40 - 00163152 _____ () c:\Program Files (x86)\AVG\Antivirus\x64\vaarclient.dll

2017-07-04 16:08 - 2017-07-04 16:08 - 00832784 _____ () C:\Program Files (x86)\AVG\Antivirus\x64\ffl2.dll

2017-07-04 16:08 - 2017-07-04 16:08 - 00277416 _____ () c:\Program Files (x86)\AVG\Antivirus\x64\StreamBack.dll

2017-06-28 09:23 - 2017-06-23 05:21 - 03807064 _____ () C:\Program Files (x86)\Google\Chrome\Application\59.0.3071.115\libglesv2.dll

2017-06-28 09:23 - 2017-06-23 05:21 - 00100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\59.0.3071.115\libegl.dll

2017-06-24 10:40 - 2017-06-24 10:40 - 00171344 _____ () C:\Program Files (x86)\AVG\Antivirus\JsonRpcServer.dll

2017-07-04 16:08 - 2017-07-04 16:08 - 00193784 _____ () C:\Program Files (x86)\AVG\Antivirus\event_routing_rpc.dll

2017-07-04 16:08 - 2017-07-04 16:08 - 00225376 _____ () C:\Program Files (x86)\AVG\Antivirus\tasks_core.dll

2017-07-09 15:36 - 2017-07-09 15:36 - 05781496 _____ () C:\Program Files (x86)\AVG\Antivirus\defs\17070900\algo.dll

2017-07-04 16:08 - 2017-07-04 16:08 - 00690392 _____ () C:\Program Files (x86)\AVG\Antivirus\ffl2.dll

2017-07-04 16:08 - 2017-07-04 16:08 - 00232784 _____ () C:\Program Files (x86)\AVG\Antivirus\streamback.dll

2016-11-29 01:18 - 2016-11-29 01:17 - 48920064 _____ () C:\Program Files (x86)\AVG\UiDll\2623\libcef.dll

2016-04-05 13:12 - 2006-09-04 20:26 - 00014336 _____ () C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\Tracer.dll

2016-04-05 13:12 - 2015-10-07 09:06 - 00122880 _____ () C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OlyPalm.dll

2016-04-05 13:12 - 2011-08-09 15:22 - 00450560 _____ () C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OSLite.dll

2017-07-04 16:08 - 2017-07-04 16:09 - 01040072 _____ () C:\Program Files (x86)\AVG\Antivirus\AvChrome.dll

2017-07-04 16:08 - 2017-07-04 16:08 - 67109376 _____ () C:\Program Files (x86)\AVG\Antivirus\libcef.dll

2014-02-06 16:25 - 2005-06-24 20:05 - 00045056 _____ () C:\Program Files (x86)\Lenovo\EnergyCut\HookLib.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2017-07-02 10:36 - 00000832 _____ C:\Windows\system32\Drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2819346672-853151906-811778091-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Lena Pra\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.178.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{B2BC1B01-8A2C-4180-B05B-E967B6661051}C:\program files\common files\common desktop agent\cdasrv.exe] => (Block) C:\program files\common files\common desktop agent\cdasrv.exe

FirewallRules: [UDP Query User{5902BAAF-756B-4127-AC28-91F0E950CE70}C:\program files\common files\common desktop agent\cdasrv.exe] => (Block) C:\program files\common files\common desktop agent\cdasrv.exe

FirewallRules: [TCP Query User{F3886EC4-9602-4B63-A6D8-B4E8DE11EA0D}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe

FirewallRules: [UDP Query User{770F7F97-B2FA-47B6-B6E2-18B054E82414}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe

FirewallRules: [{5997BA75-38E3-4417-9400-5386E24098BF}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe

FirewallRules: [{E9D72BE4-7209-42A8-9F23-164163AA2348}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe

FirewallRules: [{949BF307-689B-45A6-83B9-E6DBCCF6C7B4}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe

FirewallRules: [{B7346210-D321-4163-80A6-74EF30AF4EE1}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe

FirewallRules: [{30A25C9F-08C0-4724-A5D2-9D2D940FFD60}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe

==================== Restore Points =========================

06-07-2017 19:45:33 Geplanter Prüfpunkt

09-07-2017 09:39:42 Windows Update

==================== Faulty Device Manager Devices =============

Name: Bluetooth L2CAP Interface

Description: Bluetooth L2CAP Interface

Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}

Manufacturer: Broadcom Corp.

Service: btwl2cap

Problem: : Windows cannot load the device driver for this hardware. The driver may be corrupted or missing. (Code 39)

Resolution: Reasons for this error include a driver that is not present; a binary file that is corrupt; a file I/O problem, or a driver that references an entry point in another binary file that could not be loaded.

Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver.

Name: Bluetooth Remote Control

Description: Bluetooth Remote Control

Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}

Manufacturer: Broadcom

Service: btwrchid

Problem: : Windows cannot load the device driver for this hardware. The driver may be corrupted or missing. (Code 39)

Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver.

==================== Event log errors: =========================

Application errors:

==================

Error: (07/09/2017 07:09:52 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (07/09/2017 11:12:40 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 2044

Error: (07/09/2017 11:12:40 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 2044

Error: (07/09/2017 11:12:40 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/09/2017 11:12:39 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 999

Error: (07/09/2017 11:12:39 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 999

Error: (07/09/2017 11:12:39 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/09/2017 09:38:06 AM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "c:\program files (x86)\eset\eset online scanner\ESETSmartInstaller.exe". Fehler in

Manifest- oder Richtliniendatei "" in Zeile .

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (07/09/2017 09:33:45 AM) (Source: SideBySide) (EventID: 35) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" in Zeile 1.

Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.

Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".

Definition: UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".

Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (07/09/2017 09:30:52 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: BtStackServer.exe, Version: 12.0.0.8050, Zeitstempel: 0x52570e07

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.23807, Zeitstempel: 0x5915fdce

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000048f24

ID des fehlerhaften Prozesses: 0x12dc

Startzeit der fehlerhaften Anwendung: 0x01d2f739a251b513

Pfad der fehlerhaften Anwendung: C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe

Pfad des fehlerhaften Moduls: C:\Windows\SYSTEM32\ntdll.dll

Berichtskennung: 893f0b53-6478-11e7-b124-8056f2e86b78

System errors:

=============

Error: (07/09/2017 07:11:01 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung empfangen: 70.

Error: (07/08/2017 10:47:56 PM) (Source: BTHUSB) (EventID: 17) (User: )

Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (07/08/2017 10:47:46 PM) (Source: bcbtums) (EventID: 1026) (User: )

Description: Failed initializing BT device, failed RAM patch download.

Error: (07/08/2017 02:44:29 PM) (Source: bcbtums) (EventID: 1026) (User: )

Description: Failed initializing BT device, failed RAM patch download.

Error: (07/08/2017 01:55:05 PM) (Source: bcbtums) (EventID: 1026) (User: )

Description: Failed initializing BT device, failed RAM patch download.

Error: (07/08/2017 10:14:25 AM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung empfangen: 70.

Error: (07/06/2017 09:35:39 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: Der Server "{F9717507-6651-4EDB-BFF7-AE615179BCCF}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (07/06/2017 06:18:56 PM) (Source: volsnap) (EventID: 36) (User: )

Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (07/05/2017 07:24:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "avgbIDSAgent" wurde aufgrund folgenden Fehlers nicht gestartet:

Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (07/05/2017 07:24:26 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst avgbIDSAgent erreicht.

==================== Memory info ===========================

Processor: Intel® Pentium® CPU 2020M @ 2.40GHz

Percentage of memory in use: 59%

Total physical RAM: 3975.36 MB

Available physical RAM: 1603.42 MB

Total Virtual: 7948.89 MB

Available Virtual: 5651.15 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:148.95 GB) (Free:62.38 GB) NTFS

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: D9FA2484)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=148.9 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=149 GB) - (Type=06)

==================== End of Addition.txt ============================

#20
SleepyDude

Posted 09 July 2017 - 02:34 PM

Trusted Helper

Malware Removal
4,975 posts

Hi,

Thanks for the logs.

You have several security programs active and this could have some impact on the machine speed.

Please Uninstall:

- SUPERAntiSpyware

- Malwarebytes Anti-Malware Version 2.2.0.1024 (its outdated)

- 7-Zip 9.20 (outdated, you have also version 16 x64)

- TeamViewer 9 (outdated, remove unless you have a license for the software)

- QuickTime 7 (remove unless you are *really* sure that you need it, its a security risk no longer supported by Apple.

- Java 6 Update 12 (very very outdated and a big security risk)

Your version of Java Runtime was outdated! In light of the recent events surrounding Java that is constantly target by malware, users must seriously consider their use of Java.
Do you really need it? If Yes, uninstall the old version then go to the Java download page and click from the link Windows Offline this file will not include any unneeded extras like the ASK Toolbar. When java is installed its extremely important to update immediately when you get a notification pop-up from the Java Updater.

For extra safety you can have Java installed and available to run programs locally but disabled in your browsers, only enable it when you need it for the web in pages you *really* trust. You can Enable/Disable Java by executing the following steps:

Click the Start> Settings > Control Panel > Java, click the Security tab and uncheck the box Enable Java content in the browser and click OK

Another extra step you should do is to check the last option Suppress sponsor offers when installing or updating Java inside the Advanced tab

Do you have any Bluetooth device connected?

#21
l.mart

Posted 10 July 2017 - 09:14 AM

Member

Topic Starter
Member
31 posts

Hi,

I uninstalled all the programs listed. I did notice that AVG Web TuneUP is still installed on the laptop. Valinorum had told me to Uninstall it but I was unable to do so. Should I try to uninstall again?

For now I did not reinstall Java. For what would I need to use Java?

Regarding Bluetooth: as far as I know I have not connected anything via Bluetooth.

#22
SleepyDude

Posted 10 July 2017 - 12:57 PM

Trusted Helper

Malware Removal
4,975 posts

Hi,

Hi,

I uninstalled all the programs listed. I did notice that AVG Web TuneUP is still installed on the laptop. Valinorum had told me to Uninstall it but I was unable to do so. Should I try to uninstall again?

Its on the list but it was removed from the system on the steps execute before.

For now I did not reinstall Java. For what would I need to use Java?

Some programs that run locally need java and also some (few) web sites. Don't worry if java is needed for something you will get a notification to install.

Regarding Bluetooth: as far as I know I have not connected anything via Bluetooth.

The system is reporting that same drivers related with Bluetooth are missing or damaged, this could affect the boot speed.

Open Device Manager click Start then on the Search box type devmgmt.msc and press Enter
the Device Manager window will open
right click the Bluetooth devices with the yellow exclamation mark and click Uninstall
Restart Windows and let it try to reinstall the drivers
Restart again

Tell me if the yellow exclamation marks are gone from the Device Manager or not.

#23
l.mart

Posted 12 July 2017 - 05:34 AM

Member

Topic Starter
Member
31 posts

Hi, Ive been out of town the last two days. Will run the scans in a bit when I get home.

#24
SleepyDude

Posted 12 July 2017 - 07:07 AM

Trusted Helper

Malware Removal
4,975 posts

Hi, Ive been out of town the last two days. Will run the scans in a bit when I get home.

Ok.

#25
l.mart

Posted 14 July 2017 - 11:49 AM

Member

Topic Starter
Member
31 posts

Hi sorry for the delay.

I just uninstalled the Bluetooth driver. When I tried to reinstall it, I got an error message telling me that the driver was unable to install.

#26
SleepyDude

Posted 15 July 2017 - 09:19 AM

Trusted Helper

Malware Removal
4,975 posts

Hi,

Try to install the driver provided by Lenovo https://download.len...wlanbt120w7.exe

#27
l.mart

Posted 17 July 2017 - 10:43 AM

Member

Topic Starter
Member
31 posts

Hi,

after successfully downloading the driver off the Lenovo website I tried to install it but it did not work. I got the error message below, which basically means that the file could not be found.