API tools faq
paste
Guest User

OTL

a guest
Aug 24th, 2016
259
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 111.17 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 23.08.2016 20:44:31 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = A:\Users\Berni\Downloads
  3. 64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.14393.0)
  5. Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
  6.  
  7. 7,95 Gb Total Physical Memory | 4,34 Gb Available Physical Memory | 54,62% Memory free
  8. 11,32 Gb Paging File | 7,38 Gb Available in Paging File | 65,14% Paging File free
  9. Paging file location(s): c:\pagefile.sys 0 0 [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 119,76 Gb Total Space | 45,24 Gb Free Space | 37,77% Space Free | Partition Type: NTFS
  13. Drive G: | 531,19 Gb Total Space | 293,73 Gb Free Space | 55,30% Space Free | Partition Type: NTFS
  14.  
  15. Computer Name: BERNI-PC | User Name: Berni | Logged in as Administrator.
  16. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
  17. Company Name Whitelist: Off | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - File not found --
  22. PRC - [2016.08.23 20:42:58 | 000,602,112 | ---- | M] (OldTimer Tools) -- A:\Users\Berni\Downloads\OTL.exe
  23. PRC - [2016.08.23 20:27:30 | 001,523,312 | ---- | M] (Spotify Ltd) -- C:\Users\Berni\AppData\Roaming\Spotify\SpotifyWebHelper.exe
  24. PRC - [2016.08.23 20:27:30 | 000,515,184 | ---- | M] (Spotify Ltd) -- C:\Users\Berni\AppData\Roaming\Spotify\SpotifyCrashService.exe
  25. PRC - [2016.08.23 20:27:29 | 006,930,544 | ---- | M] (Spotify Ltd) -- C:\Users\Berni\AppData\Roaming\Spotify\Spotify.exe
  26. PRC - [2016.08.16 22:54:26 | 002,064,672 | ---- | M] (Valve Corporation) -- B:\Steam\Daten\Steam\bin\steamwebhelper.exe
  27. PRC - [2016.08.16 22:54:24 | 001,452,320 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe
  28. PRC - [2016.08.16 22:54:22 | 002,857,248 | ---- | M] (Valve Corporation) -- B:\Steam\Daten\Steam\Steam.exe
  29. PRC - [2016.08.16 11:31:17 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
  30. PRC - [2016.08.12 11:35:30 | 002,159,832 | ---- | M] (Adobe Systems, Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
  31. PRC - [2016.08.11 04:34:58 | 000,121,856 | ---- | M] (Advanced Micro Devices) -- C:\Programme\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe
  32. PRC - [2016.08.09 11:20:12 | 000,554,184 | ---- | M] (Microsoft Corporation) -- C:\Users\Berni\AppData\Local\Microsoft\OneDrive\OneDrive.exe
  33. PRC - [2016.08.08 23:25:50 | 007,248,144 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
  34. PRC - [2016.08.08 23:25:49 | 024,316,592 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\TeamViewer.exe
  35. PRC - [2016.08.08 22:21:38 | 000,241,936 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\tv_w32.exe
  36. PRC - [2016.07.16 13:42:56 | 000,416,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
  37. PRC - [2016.06.03 03:36:04 | 000,737,984 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
  38. PRC - [2016.03.10 14:07:30 | 001,136,608 | ---- | M] (Malwarebytes) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
  39. PRC - [2016.03.10 14:07:28 | 001,514,464 | ---- | M] (Malwarebytes) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
  40. PRC - [2016.03.10 14:07:20 | 009,926,112 | ---- | M] (Malwarebytes) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
  41. PRC - [2015.12.07 04:37:00 | 000,580,296 | ---- | M] () -- B:\MSI Afterburner\Daten\MSI Afterburner\MSIAfterburner.exe
  42. PRC - [2015.10.23 10:20:06 | 001,923,040 | ---- | M] (EIZO Corporation) -- C:\Program Files (x86)\EIZO\G-Ignition\Gignition.exe
  43. PRC - [2015.02.17 18:36:12 | 000,013,824 | ---- | M] () -- C:\Program Files (x86)\EIZO\G-Ignition\QtWebProcess.exe
  44. PRC - [2014.10.31 17:28:44 | 002,420,736 | ---- | M] (ROCCAT GmbH Co., Ltd.) -- C:\Program Files (x86)\ROCCAT\Roccat Talk\Roccat Talk.exe
  45. PRC - [2012.05.19 07:43:50 | 001,144,832 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe
  46.  
  47.  
  48. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  49.  
  50. MOD - [2016.08.23 20:27:31 | 051,330,160 | ---- | M] () -- C:\Users\Berni\AppData\Roaming\Spotify\libcef.dll
  51. MOD - [2016.08.23 20:27:31 | 001,763,952 | ---- | M] () -- C:\Users\Berni\AppData\Roaming\Spotify\libglesv2.dll
  52. MOD - [2016.08.23 20:27:31 | 000,088,176 | ---- | M] () -- C:\Users\Berni\AppData\Roaming\Spotify\libegl.dll
  53. MOD - [2016.08.16 22:54:28 | 002,321,184 | ---- | M] () -- B:\Steam\Daten\Steam\video.dll
  54. MOD - [2016.08.16 22:54:24 | 000,835,360 | ---- | M] () -- B:\Steam\Daten\Steam\bin\chromehtml.dll
  55. MOD - [2016.08.11 17:43:56 | 000,233,104 | ---- | M] () -- C:\Windows\SysWOW64\GameManager32.dll
  56. MOD - [2016.08.11 12:44:43 | 000,978,432 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\1f4e0bd3f7b56438c183f082a0b9f414\System.Configuration.ni.dll
  57. MOD - [2016.08.10 13:03:43 | 005,466,624 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\a811cc71a93b0b70c9547d6c8b042d3b\System.Xml.ni.dll
  58. MOD - [2016.08.10 13:03:19 | 007,996,416 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\cd85f89390c7b5776d40a993336827a5\System.ni.dll
  59. MOD - [2016.08.10 13:03:16 | 011,500,544 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\9ad5d97ade63ecd8b60f63393a947d6e\mscorlib.ni.dll
  60. MOD - [2016.08.09 11:19:57 | 000,679,624 | ---- | M] () -- C:\Users\Berni\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\ClientTelemetry.dll
  61. MOD - [2016.08.09 01:27:32 | 000,785,920 | ---- | M] () -- B:\Steam\Daten\Steam\SDL2.dll
  62. MOD - [2016.08.04 22:56:06 | 049,825,056 | ---- | M] () -- B:\Steam\Daten\Steam\bin\libcef.dll
  63. MOD - [2016.07.17 00:50:07 | 000,315,392 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
  64. MOD - [2016.07.05 00:17:58 | 000,266,560 | ---- | M] () -- B:\Steam\Daten\Steam\openvr_api.dll
  65. MOD - [2016.01.27 09:49:46 | 002,549,760 | ---- | M] () -- B:\Steam\Daten\Steam\libavcodec-56.dll
  66. MOD - [2016.01.27 09:49:46 | 000,491,008 | ---- | M] () -- B:\Steam\Daten\Steam\libavformat-56.dll
  67. MOD - [2016.01.27 09:49:46 | 000,485,888 | ---- | M] () -- B:\Steam\Daten\Steam\libswscale-3.dll
  68. MOD - [2016.01.27 09:49:46 | 000,442,880 | ---- | M] () -- B:\Steam\Daten\Steam\libavutil-54.dll
  69. MOD - [2016.01.27 09:49:46 | 000,332,800 | ---- | M] () -- B:\Steam\Daten\Steam\libavresample-2.dll
  70. MOD - [2015.12.07 04:37:00 | 000,580,296 | ---- | M] () -- B:\MSI Afterburner\Daten\MSI Afterburner\MSIAfterburner.exe
  71. MOD - [2015.12.06 08:55:36 | 000,657,408 | ---- | M] () -- B:\MSI Afterburner\Daten\MSI Afterburner\RTHAL.dll
  72. MOD - [2015.12.06 08:55:26 | 000,225,792 | ---- | M] () -- B:\MSI Afterburner\Daten\MSI Afterburner\RTCore.dll
  73. MOD - [2015.12.06 08:55:24 | 000,357,888 | ---- | M] () -- B:\MSI Afterburner\Daten\MSI Afterburner\RTUI.dll
  74. MOD - [2015.12.06 08:55:22 | 000,071,680 | ---- | M] () -- B:\MSI Afterburner\Daten\MSI Afterburner\RTMUI.dll
  75. MOD - [2015.12.06 08:55:20 | 000,057,856 | ---- | M] () -- B:\MSI Afterburner\Daten\MSI Afterburner\RTFC.dll
  76. MOD - [2015.07.02 00:06:58 | 004,962,816 | ---- | M] () -- B:\Steam\Daten\Steam\v8.dll
  77. MOD - [2015.07.02 00:06:46 | 001,556,992 | ---- | M] () -- B:\Steam\Daten\Steam\icui18n.dll
  78. MOD - [2015.07.02 00:06:46 | 001,187,840 | ---- | M] () -- B:\Steam\Daten\Steam\icuuc.dll
  79. MOD - [2015.02.17 18:36:32 | 000,037,888 | ---- | M] () -- C:\Program Files (x86)\EIZO\G-Ignition\QtWebKit\experimental\qmlwebkitexperimentalplugin.dll
  80. MOD - [2015.02.17 18:36:16 | 000,026,624 | ---- | M] () -- C:\Program Files (x86)\EIZO\G-Ignition\QtWebKit\qmlwebkitplugin.dll
  81. MOD - [2015.02.17 18:36:12 | 000,013,824 | ---- | M] () -- C:\Program Files (x86)\EIZO\G-Ignition\QtWebProcess.exe
  82. MOD - [2015.02.17 16:13:18 | 000,055,296 | ---- | M] () -- C:\Program Files (x86)\EIZO\G-Ignition\QtQuick\Layouts\qquicklayoutsplugin.dll
  83. MOD - [2015.02.17 16:12:44 | 000,783,872 | ---- | M] () -- C:\Program Files (x86)\EIZO\G-Ignition\QtQuick\Controls\qtquickcontrolsplugin.dll
  84. MOD - [2015.02.17 16:11:52 | 000,012,288 | ---- | M] () -- C:\Program Files (x86)\EIZO\G-Ignition\QtQuick\Window.2\windowplugin.dll
  85. MOD - [2015.02.17 16:11:36 | 000,012,288 | ---- | M] () -- C:\Program Files (x86)\EIZO\G-Ignition\QtQuick.2\qtquick2plugin.dll
  86. MOD - [2013.06.06 20:16:38 | 000,015,080 | ---- | M] () -- C:\Users\Berni\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter.gadget\GetCoreTempInfoNET.dll
  87. MOD - [2013.06.06 20:16:38 | 000,014,056 | ---- | M] () -- C:\Users\Berni\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter.gadget\SystemInfo.dll
  88. MOD - [2013.06.06 20:16:38 | 000,012,520 | ---- | M] () -- C:\Users\Berni\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter.gadget\CoreTempReader.dll
  89.  
  90.  
  91. [color=#E56717]========== Services (SafeList) ==========[/color]
  92.  
  93. SRV:[b]64bit:[/b] - [2016.08.16 11:41:07 | 000,076,152 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\PnkBstrA.exe -- (PnkBstrA)
  94. SRV:[b]64bit:[/b] - [2016.08.11 17:42:50 | 000,279,184 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
  95. SRV:[b]64bit:[/b] - [2016.08.09 12:05:32 | 000,770,048 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
  96. SRV:[b]64bit:[/b] - [2016.07.17 00:56:36 | 001,227,264 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\AgentService.exe -- (UevAgentService)
  97. SRV:[b]64bit:[/b] - [2016.07.17 00:56:29 | 000,197,632 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  98. SRV:[b]64bit:[/b] - [2016.07.17 00:56:25 | 000,823,136 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\AppVClient.exe -- (AppVClient)
  99. SRV:[b]64bit:[/b] - [2016.07.16 13:43:51 | 000,650,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RDXService.dll -- (RetailDemo)
  100. SRV:[b]64bit:[/b] - [2016.07.16 13:43:50 | 000,082,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
  101. SRV:[b]64bit:[/b] - [2016.07.16 13:43:47 | 000,560,128 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
  102. SRV:[b]64bit:[/b] - [2016.07.16 13:43:47 | 000,436,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WalletService.dll -- (WalletService)
  103. SRV:[b]64bit:[/b] - [2016.07.16 13:43:18 | 000,167,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
  104. SRV:[b]64bit:[/b] - [2016.07.16 13:43:10 | 001,836,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
  105. SRV:[b]64bit:[/b] - [2016.07.16 13:42:43 | 000,691,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
  106. SRV:[b]64bit:[/b] - [2016.07.16 13:42:42 | 000,088,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
  107. SRV:[b]64bit:[/b] - [2016.07.16 13:42:39 | 001,234,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dosvc.dll -- (DoSvc)
  108. SRV:[b]64bit:[/b] - [2016.07.16 13:42:39 | 000,285,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\EnterpriseAppMgmtSvc.dll -- (EntAppSvc)
  109. SRV:[b]64bit:[/b] - [2016.07.16 13:42:39 | 000,161,792 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\Windows.SharedPC.AccountManager.dll -- (shpamsvc)
  110. SRV:[b]64bit:[/b] - [2016.07.16 13:42:38 | 001,312,768 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorDataService.exe -- (SensorDataService)
  111. SRV:[b]64bit:[/b] - [2016.07.16 13:42:38 | 001,025,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XboxNetApiSvc.dll -- (XboxNetApiSvc)
  112. SRV:[b]64bit:[/b] - [2016.07.16 13:42:38 | 000,781,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PhoneService.dll -- (PhoneSvc)
  113. SRV:[b]64bit:[/b] - [2016.07.16 13:42:38 | 000,407,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
  114. SRV:[b]64bit:[/b] - [2016.07.16 13:42:38 | 000,141,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RMapi.dll -- (RmSvc)
  115. SRV:[b]64bit:[/b] - [2016.07.16 13:42:38 | 000,057,344 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dmwappushsvc.dll -- (dmwappushservice)
  116. SRV:[b]64bit:[/b] - [2016.07.16 13:42:38 | 000,055,296 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
  117. SRV:[b]64bit:[/b] - [2016.07.16 13:42:37 | 000,718,848 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
  118. SRV:[b]64bit:[/b] - [2016.07.16 13:42:36 | 001,020,928 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usermgr.dll -- (UserManager)
  119. SRV:[b]64bit:[/b] - [2016.07.16 13:42:36 | 000,539,136 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\usocore.dll -- (UsoSvc)
  120. SRV:[b]64bit:[/b] - [2016.07.16 13:42:36 | 000,183,808 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dcpsvc.dll -- (DcpSvc)
  121. SRV:[b]64bit:[/b] - [2016.07.16 13:42:34 | 002,264,064 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
  122. SRV:[b]64bit:[/b] - [2016.07.16 13:42:31 | 000,023,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
  123. SRV:[b]64bit:[/b] - [2016.07.16 13:42:28 | 000,447,488 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
  124. SRV:[b]64bit:[/b] - [2016.07.16 13:42:28 | 000,417,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorService.dll -- (SensorService)
  125. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 001,980,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
  126. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,827,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
  127. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,614,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FlightSettings.dll -- (wisvc)
  128. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,265,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NetSetupSvc.dll -- (NetSetupSvc)
  129. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,096,768 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
  130. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,093,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe -- (diagnosticshub.standardcollector.service)
  131. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (WpnUserService_49135)
  132. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_49135)
  133. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_49135)
  134. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_49135)
  135. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_49135)
  136. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (MessagingService_49135)
  137. SRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,044,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (CDPUserSvc_49135)
  138. SRV:[b]64bit:[/b] - [2016.07.16 13:42:23 | 000,765,456 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\CoreMessaging.dll -- (CoreMessagingRegistrar)
  139. SRV:[b]64bit:[/b] - [2016.07.16 13:42:23 | 000,366,592 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\APHostService.dll -- (OneSyncSvc)
  140. SRV:[b]64bit:[/b] - [2016.07.16 13:42:22 | 000,803,840 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FrameServer.dll -- (FrameServer)
  141. SRV:[b]64bit:[/b] - [2016.07.16 13:42:22 | 000,337,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
  142. SRV:[b]64bit:[/b] - [2016.07.16 13:42:20 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
  143. SRV:[b]64bit:[/b] - [2016.07.16 13:42:19 | 000,201,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
  144. SRV:[b]64bit:[/b] - [2016.07.16 13:42:16 | 000,287,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\TieringEngineService.exe -- (TieringEngineService)
  145. SRV:[b]64bit:[/b] - [2016.07.16 13:42:16 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
  146. SRV:[b]64bit:[/b] - [2016.07.16 13:42:16 | 000,013,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
  147. SRV:[b]64bit:[/b] - [2016.07.16 13:42:13 | 000,590,848 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SmsRouterSvc.dll -- (SmsRouter)
  148. SRV:[b]64bit:[/b] - [2016.07.16 13:42:12 | 000,519,168 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
  149. SRV:[b]64bit:[/b] - [2016.07.16 13:42:12 | 000,052,224 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\MessagingService.dll -- (MessagingService)
  150. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 001,512,448 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\UserDataService.dll -- (UserDataSvc)
  151. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 001,184,256 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Unistore.dll -- (UnistoreSvc)
  152. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,983,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ngcsvc.dll -- (NgcSvc)
  153. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,574,976 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\tileobjserver.dll -- (tiledatamodelsvc)
  154. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,387,072 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
  155. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,358,912 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
  156. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,339,968 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
  157. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,326,656 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NgcCtnrSvc.dll -- (NgcCtnrSvc)
  158. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,234,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wpnservice.dll -- (WpnService)
  159. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,203,776 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PimIndexMaintenance.dll -- (PimIndexMaintenanceSvc)
  160. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,202,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tetheringservice.dll -- (icssvc)
  161. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,177,664 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBrokerSvc)
  162. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,077,312 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\moshost.dll -- (MapsBroker)
  163. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,074,240 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\WpnUserService.dll -- (WpnUserService)
  164. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,037,376 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lfsvc.dll -- (lfsvc)
  165. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,034,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DevQueryBroker.dll -- (DevQueryBroker)
  166. SRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,023,040 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\LicenseManagerSvc.dll -- (LicenseManager)
  167. SRV:[b]64bit:[/b] - [2016.07.16 13:42:07 | 001,159,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblGameSave.dll -- (XblGameSave)
  168. SRV:[b]64bit:[/b] - [2016.07.16 13:42:06 | 004,136,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\Windows.StateRepository.dll -- (StateRepository)
  169. SRV:[b]64bit:[/b] - [2016.07.16 13:42:06 | 000,729,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ClipSVC.dll -- (ClipSVC)
  170. SRV:[b]64bit:[/b] - [2016.07.16 13:42:06 | 000,024,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AJRouter.dll -- (AJRouter)
  171. SRV:[b]64bit:[/b] - [2016.07.16 13:42:05 | 002,104,832 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
  172. SRV:[b]64bit:[/b] - [2016.07.16 13:42:05 | 001,012,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblAuthManager.dll -- (XblAuthManager)
  173. SRV:[b]64bit:[/b] - [2016.07.16 13:42:05 | 000,409,088 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cdpsvc.dll -- (CDPSvc)
  174. SRV:[b]64bit:[/b] - [2016.07.16 13:42:05 | 000,337,408 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\cdpusersvc.dll -- (CDPUserSvc)
  175. SRV:[b]64bit:[/b] - [2016.07.16 13:42:05 | 000,197,632 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
  176. SRV:[b]64bit:[/b] - [2016.07.16 13:42:05 | 000,152,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dssvc.dll -- (DsSvc)
  177. SRV:[b]64bit:[/b] - [2016.07.16 13:42:05 | 000,140,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\embeddedmodesvc.dll -- (embeddedmode)
  178. SRV:[b]64bit:[/b] - [2016.07.16 13:42:05 | 000,095,232 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\tzautoupdate.dll -- (tzautoupdate)
  179. SRV:[b]64bit:[/b] - [2016.07.16 13:42:04 | 000,067,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\hvhostsvc.dll -- (HvHost)
  180. SRV:[b]64bit:[/b] - [2016.07.16 13:42:02 | 000,349,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicvss)
  181. SRV:[b]64bit:[/b] - [2016.07.16 13:42:02 | 000,349,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicrdv)
  182. SRV:[b]64bit:[/b] - [2016.07.16 13:42:02 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvmsession)
  183. SRV:[b]64bit:[/b] - [2016.07.16 13:42:02 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
  184. SRV:[b]64bit:[/b] - [2016.07.16 13:42:02 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
  185. SRV:[b]64bit:[/b] - [2016.07.16 13:42:02 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
  186. SRV:[b]64bit:[/b] - [2016.07.16 13:42:02 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
  187. SRV:[b]64bit:[/b] - [2016.07.16 13:42:02 | 000,305,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
  188. SRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 003,318,272 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
  189. SRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,321,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BthHFSrv.dll -- (BthHFSrv)
  190. SRV - [2016.08.16 22:54:24 | 001,452,320 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  191. SRV - [2016.08.16 11:31:17 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
  192. SRV - [2016.08.12 11:35:30 | 002,159,832 | ---- | M] (Adobe Systems, Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe -- (AGSService)
  193. SRV - [2016.08.11 04:34:58 | 000,121,856 | ---- | M] (Advanced Micro Devices) [Auto | Running] -- C:\Programme\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe -- (amdacpusrsvc)
  194. SRV - [2016.08.08 23:25:50 | 007,248,144 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe -- (TeamViewer)
  195. SRV - [2016.07.16 13:43:02 | 000,298,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
  196. SRV - [2016.07.16 13:42:56 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)
  197. SRV - [2016.07.16 13:42:55 | 003,369,984 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\Windows.StateRepository.dll -- (StateRepository)
  198. SRV - [2016.07.16 13:42:55 | 000,968,704 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\Unistore.dll -- (UnistoreSvc)
  199. SRV - [2016.07.16 13:42:49 | 000,483,840 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\CoreMessaging.dll -- (CoreMessagingRegistrar)
  200. SRV - [2016.07.16 13:41:50 | 003,318,272 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
  201. SRV - [2016.06.10 16:06:39 | 002,122,248 | ---- | M] (Electronic Arts) [On_Demand | Stopped] -- B:\Origin\Daten\Origin\OriginClientService.exe -- (Origin Client Service)
  202. SRV - [2016.06.03 03:36:04 | 000,737,984 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe -- (AdobeUpdateService)
  203. SRV - [2016.05.23 15:17:32 | 000,324,224 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  204. SRV - [2016.05.14 15:48:17 | 001,863,688 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\BattlEye\BEService.exe -- (BEService)
  205. SRV - [2016.03.10 14:07:30 | 001,136,608 | ---- | M] (Malwarebytes) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
  206. SRV - [2016.03.10 14:07:28 | 001,514,464 | ---- | M] (Malwarebytes) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
  207. SRV - [2016.01.08 15:48:10 | 000,143,144 | ---- | M] (Dropbox, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe -- (dbupdatem)
  208. SRV - [2016.01.08 15:48:10 | 000,143,144 | ---- | M] (Dropbox, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe -- (dbupdate)
  209. SRV - [2015.09.16 22:13:56 | 000,452,096 | ---- | M] (Rivet Networks) [Auto | Running] -- C:\Programme\Killer Networking\Network Manager\KillerService.exe -- (Killer Service V2)
  210. SRV - [2015.06.10 17:03:30 | 001,723,048 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Thunderbolt Software\tbtsvc.exe -- (ThunderboltService)
  211. SRV - [2015.06.03 12:54:14 | 000,342,240 | ---- | M] (Futuremark) [On_Demand | Stopped] -- C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe -- (Futuremark SystemInfo Service)
  212. SRV - [2014.06.24 16:12:22 | 000,171,480 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe -- (ICCS)
  213.  
  214.  
  215. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  216.  
  217. DRV:[b]64bit:[/b] - [2016.08.23 20:34:24 | 000,192,216 | ---- | M] (Malwarebytes) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)
  218. DRV:[b]64bit:[/b] - [2016.08.11 17:43:12 | 000,510,096 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
  219. DRV:[b]64bit:[/b] - [2016.08.11 17:43:10 | 026,719,376 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
  220. DRV:[b]64bit:[/b] - [2016.08.11 17:40:22 | 000,314,392 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\amdacpksd.sys -- (amdacpksd)
  221. DRV:[b]64bit:[/b] - [2016.08.09 12:05:32 | 000,062,816 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
  222. DRV:[b]64bit:[/b] - [2016.07.28 13:37:02 | 000,118,848 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdWT6.sys -- (AtiHDAudioService)
  223. DRV:[b]64bit:[/b] - [2016.07.17 00:56:46 | 000,038,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
  224. DRV:[b]64bit:[/b] - [2016.07.17 00:56:40 | 000,179,040 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mssecflt.sys -- (MsSecFlt)
  225. DRV:[b]64bit:[/b] - [2016.07.17 00:56:36 | 000,040,288 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\drivers\UevAgentDriver.sys -- (UevAgentDriver)
  226. DRV:[b]64bit:[/b] - [2016.07.17 00:56:29 | 000,029,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  227. DRV:[b]64bit:[/b] - [2016.07.17 00:56:26 | 000,123,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
  228. DRV:[b]64bit:[/b] - [2016.07.17 00:56:25 | 000,157,024 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AppvVemgr.sys -- (AppvVemgr)
  229. DRV:[b]64bit:[/b] - [2016.07.17 00:56:25 | 000,141,152 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AppvVfs.sys -- (AppvVfs)
  230. DRV:[b]64bit:[/b] - [2016.07.17 00:56:25 | 000,126,304 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AppVStrm.sys -- (AppvStrm)
  231. DRV:[b]64bit:[/b] - [2016.07.16 13:44:01 | 000,030,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
  232. DRV:[b]64bit:[/b] - [2016.07.16 13:43:06 | 000,123,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)
  233. DRV:[b]64bit:[/b] - [2016.07.16 13:43:04 | 000,290,144 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter)
  234. DRV:[b]64bit:[/b] - [2016.07.16 13:43:04 | 000,044,056 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot)
  235. DRV:[b]64bit:[/b] - [2016.07.16 13:42:38 | 000,125,440 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
  236. DRV:[b]64bit:[/b] - [2016.07.16 13:42:36 | 000,198,496 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof)
  237. DRV:[b]64bit:[/b] - [2016.07.16 13:42:36 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
  238. DRV:[b]64bit:[/b] - [2016.07.16 13:42:36 | 000,078,336 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
  239. DRV:[b]64bit:[/b] - [2016.07.16 13:42:36 | 000,015,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\applockerfltr.sys -- (applockerfltr)
  240. DRV:[b]64bit:[/b] - [2016.07.16 13:42:35 | 000,928,608 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refsv1.sys -- (ReFSv1)
  241. DRV:[b]64bit:[/b] - [2016.07.16 13:42:35 | 000,376,160 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
  242. DRV:[b]64bit:[/b] - [2016.07.16 13:42:35 | 000,227,328 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
  243. DRV:[b]64bit:[/b] - [2016.07.16 13:42:35 | 000,045,920 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iorate.sys -- (iorate)
  244. DRV:[b]64bit:[/b] - [2016.07.16 13:42:28 | 000,107,032 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRT.sys -- (WindowsTrustedRT)
  245. DRV:[b]64bit:[/b] - [2016.07.16 13:42:28 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gpuenergydrv.sys -- (GpuEnergyDrv)
  246. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,263,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufx01000.sys -- (Ufx01000)
  247. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,201,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
  248. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,151,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
  249. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,108,544 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmTcpciCx.sys -- (UcmTcpciCx0101)
  250. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,095,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmCx.sys -- (UcmCx0101)
  251. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,079,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
  252. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,078,336 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\storqosflt.sys -- (storqosflt)
  253. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,074,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
  254. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urscx01000.sys -- (UrsCx01000)
  255. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,053,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
  256. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,035,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IndirectKmd.sys -- (IndirectKmd)
  257. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,031,584 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  258. DRV:[b]64bit:[/b] - [2016.07.16 13:42:27 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
  259. DRV:[b]64bit:[/b] - [2016.07.16 13:42:23 | 000,038,752 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\cnghwassist.sys -- (cnghwassist)
  260. DRV:[b]64bit:[/b] - [2016.07.16 13:42:22 | 000,048,128 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mmcss.sys -- (MMCSS)
  261. DRV:[b]64bit:[/b] - [2016.07.16 13:42:18 | 000,088,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
  262. DRV:[b]64bit:[/b] - [2016.07.16 13:42:13 | 000,719,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdiWiFi.sys -- (wdiwifi)
  263. DRV:[b]64bit:[/b] - [2016.07.16 13:42:12 | 000,120,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\irda.sys -- (irda)
  264. DRV:[b]64bit:[/b] - [2016.07.16 13:42:11 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
  265. DRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,168,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
  266. DRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,156,000 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
  267. DRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,119,648 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\wcifs.sys -- (wcifs)
  268. DRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,070,144 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\registry.sys -- (clreg)
  269. DRV:[b]64bit:[/b] - [2016.07.16 13:42:09 | 000,066,560 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\wcnfs.sys -- (wcnfs)
  270. DRV:[b]64bit:[/b] - [2016.07.16 13:42:04 | 000,073,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hvservice.sys -- (hvservice)
  271. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,210,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Ucx01000.sys -- (Ucx01000)
  272. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,126,816 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
  273. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,108,384 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
  274. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,090,624 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NetAdapterCx.sys -- (NetAdapterCx)
  275. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,088,576 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\filecrypt.sys -- (FileCrypt)
  276. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,061,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (tsusbflt)
  277. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,045,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Udecx.sys -- (UdeCx)
  278. DRV:[b]64bit:[/b] - [2016.07.16 13:42:03 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhf.sys -- (vhf)
  279. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,535,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
  280. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,381,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
  281. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,279,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  282. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,220,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
  283. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,137,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufxsynopsys.sys -- (ufxsynopsys)
  284. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,096,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UfxChipidea.sys -- (UfxChipidea)
  285. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,095,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
  286. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmUcsi.sys -- (UcmUcsi)
  287. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urschipidea.sys -- (UrsChipidea)
  288. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,027,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urssynopsys.sys -- (UrsSynopsys)
  289. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\genericusbfn.sys -- (genericusbfn)
  290. DRV:[b]64bit:[/b] - [2016.07.16 13:41:55 | 000,017,944 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRTProxy.sys -- (WindowsTrustedRTProxy)
  291. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,258,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xboxgip.sys -- (xboxgip)
  292. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,176,384 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C.sys -- (iaLPSS2i_I2C)
  293. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,081,408 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iai2c.sys -- (iai2c)
  294. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,064,512 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2.sys -- (iaLPSS2i_GPIO2)
  295. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
  296. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,050,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
  297. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,050,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidinterrupt.sys -- (hidinterrupt)
  298. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,043,520 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xinputhid.sys -- (xinputhid)
  299. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,038,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\buttonconverter.sys -- (buttonconverter)
  300. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,034,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  301. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,033,280 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iagpio.sys -- (iagpio)
  302. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
  303. DRV:[b]64bit:[/b] - [2016.07.16 13:41:54 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
  304. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 002,104,160 | ---- | M] (Chelsio Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cht4vx64.sys -- (cht4vbd)
  305. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 001,135,456 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
  306. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,842,584 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mlx4_bus.sys -- (mlx4_bus)
  307. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,673,120 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)
  308. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,544,608 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
  309. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,526,176 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ibbus.sys -- (ibbus)
  310. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,346,976 | ---- | M] (Chelsio Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cht4sx64.sys -- (cht4iscsi)
  311. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
  312. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  313. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,131,424 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
  314. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,123,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\scmdisk0101.sys -- (scmdisk0101)
  315. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\capimg.sys -- (CapImg)
  316. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,108,896 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndfltr.sys -- (ndfltr)
  317. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,107,360 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
  318. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,105,824 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2i.sys -- (LSI_SAS2i)
  319. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,101,216 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3i.sys -- (LSI_SAS3i)
  320. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,088,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\scmbus.sys -- (scmbus)
  321. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,083,296 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  322. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,082,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
  323. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,082,776 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
  324. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,077,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
  325. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,069,120 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
  326. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,064,864 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winverbs.sys -- (WinVerbs)
  327. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  328. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
  329. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,061,792 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas3i.sys -- (percsas3i)
  330. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,058,720 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas2i.sys -- (percsas2i)
  331. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
  332. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
  333. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,032,096 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storufs.sys -- (storufs)
  334. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,032,096 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winmad.sys -- (WinMad)
  335. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  336. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,028,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
  337. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,026,976 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  338. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AcpiDev.sys -- (AcpiDev)
  339. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,016,224 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volume.sys -- (volume)
  340. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
  341. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
  342. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,009,728 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
  343. DRV:[b]64bit:[/b] - [2016.07.16 13:41:53 | 000,009,728 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn.sys -- (bcmfn)
  344. DRV:[b]64bit:[/b] - [2016.07.16 13:41:52 | 003,418,976 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  345. DRV:[b]64bit:[/b] - [2016.07.16 13:41:52 | 000,533,856 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  346. DRV:[b]64bit:[/b] - [2016.07.16 13:41:52 | 000,048,152 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
  347. DRV:[b]64bit:[/b] - [2016.07.16 13:41:52 | 000,038,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
  348. DRV:[b]64bit:[/b] - [2016.07.16 13:41:52 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
  349. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,118,112 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
  350. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,113,152 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
  351. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
  352. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,065,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
  353. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,064,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
  354. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
  355. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys -- (CompositeBus)
  356. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,035,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
  357. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)
  358. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
  359. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
  360. DRV:[b]64bit:[/b] - [2016.07.16 13:41:50 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgid.sys -- (vmgid)
  361. DRV:[b]64bit:[/b] - [2016.05.11 04:09:06 | 000,047,640 | ---- | M] (Razer Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rzmpos.sys -- (rzmpos)
  362. DRV:[b]64bit:[/b] - [2016.05.11 04:08:50 | 000,051,224 | ---- | M] (Razer Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rzendpt.sys -- (rzendpt)
  363. DRV:[b]64bit:[/b] - [2016.04.08 08:35:24 | 000,203,800 | ---- | M] (Razer Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rzudd.sys -- (rzudd)
  364. DRV:[b]64bit:[/b] - [2016.03.10 14:09:10 | 000,065,408 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl)
  365. DRV:[b]64bit:[/b] - [2016.03.10 14:08:54 | 000,027,008 | ---- | M] (Malwarebytes) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
  366. DRV:[b]64bit:[/b] - [2016.02.14 13:55:02 | 000,041,192 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vbaudio_cable64_win7.sys -- (VBAudioVACMME)
  367. DRV:[b]64bit:[/b] - [2015.11.27 10:46:26 | 000,041,088 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBfilt64.sys -- (MBfilt)
  368. DRV:[b]64bit:[/b] - [2015.11.16 17:18:20 | 000,016,376 | ---- | M] (TeamViewer GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TVMonitor.sys -- (MonitorFunction)
  369. DRV:[b]64bit:[/b] - [2015.09.24 01:51:50 | 000,038,680 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ICCWDT.sys -- (ICCWDT)
  370. DRV:[b]64bit:[/b] - [2015.09.16 20:44:00 | 000,142,408 | ---- | M] (Rivet Networks, LLC.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\bwcW8x64.sys -- (BfLwf)
  371. DRV:[b]64bit:[/b] - [2015.09.03 10:46:38 | 000,157,752 | ---- | M] (Qualcomm Atheros, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\e22w8x64.sys -- (Ke2200)
  372. DRV:[b]64bit:[/b] - [2015.07.28 19:45:36 | 000,040,720 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdkmafd.sys -- (amdkmafd)
  373. DRV:[b]64bit:[/b] - [2015.07.10 16:48:50 | 000,063,840 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\XtuAcpiDriver.sys -- (XtuAcpiDriver)
  374. DRV:[b]64bit:[/b] - [2015.06.17 18:04:24 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
  375. DRV:[b]64bit:[/b] - [2015.06.12 05:54:56 | 000,183,584 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverW8x64.sys -- (MEIx64)
  376. DRV - [2016.07.16 13:41:50 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys -- (CompositeBus)
  377. DRV - [2016.05.14 15:49:33 | 000,036,904 | ---- | M] (Wellbia.com Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\xhunter1.sys -- (xhunter1)
  378. DRV - [2015.12.07 04:36:56 | 000,013,512 | ---- | M] () [Kernel | On_Demand | Running] -- B:\MSI Afterburner\Daten\MSI Afterburner\RTCore64.sys -- (RTCore64)
  379.  
  380.  
  381. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  382.  
  383.  
  384. [color=#E56717]========== Internet Explorer ==========[/color]
  385.  
  386. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  387. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  388. IE:[b]64bit:[/b] - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  389. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  390. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  391. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  392.  
  393.  
  394. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  395.  
  396. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  397.  
  398. IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
  399.  
  400. IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
  401.  
  402. IE - HKU\S-1-5-21-3712317832-831361669-298025881-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
  403. IE - HKU\S-1-5-21-3712317832-831361669-298025881-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = FC 85 72 35 B2 42 D1 01 [binary data]
  404. IE - HKU\S-1-5-21-3712317832-831361669-298025881-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = 37 E2 21 24 96 44 D1 01 [binary data]
  405. IE - HKU\S-1-5-21-3712317832-831361669-298025881-1001\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = Reg Error: Value error.
  406. IE - HKU\S-1-5-21-3712317832-831361669-298025881-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  407. IE - HKU\S-1-5-21-3712317832-831361669-298025881-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
  408. IE - HKU\S-1-5-21-3712317832-831361669-298025881-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  409.  
  410.  
  411. [color=#E56717]========== FireFox ==========[/color]
  412.  
  413. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.101.2: C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  414. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.101.2: C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll (Oracle Corporation)
  415. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
  416. FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
  417. FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.3.0: C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
  418. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
  419. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll (Google Inc.)
  420. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll (Google Inc.)
  421. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.2: B:\VLC Media player\Daten\VLC\npvlc.dll (VideoLAN)
  422. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.4: B:\VLC Media player\Daten\VLC\npvlc.dll (VideoLAN)
  423. FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
  424.  
  425.  
  426. [2016.07.31 13:04:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Berni\AppData\Roaming\mozilla\Firefox\Profiles\nwtrEH80.default\extensions
  427. [2015.12.30 06:52:12 | 000,000,000 | ---D | M] (Avira Browser Safety) -- C:\Users\Berni\AppData\Roaming\mozilla\Firefox\Profiles\nwtrEH80.default\extensions\abs@avira.com
  428. [2016.07.31 13:04:27 | 000,000,000 | ---D | M] (Avira SafeSearch Plus) -- C:\Users\Berni\AppData\Roaming\mozilla\Firefox\Profiles\nwtrEH80.default\extensions\safesearchplus2@avira.com
  429.  
  430. [color=#E56717]========== Chrome ==========[/color]
  431.  
  432. CHR - Extension: No name found = C:\Users\Berni\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\
  433. CHR - Extension: No name found = C:\Users\Berni\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\
  434. CHR - Extension: No name found = C:\Users\Berni\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\
  435. CHR - Extension: No name found = C:\Users\Berni\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\
  436. CHR - Extension: No name found = C:\Users\Berni\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl\1.9.10_0\
  437. CHR - Extension: No name found = C:\Users\Berni\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl\1.9.9.1_0\
  438. CHR - Extension: No name found = C:\Users\Berni\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\
  439. CHR - Extension: No name found = C:\Users\Berni\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.11.0_0\
  440. CHR - Extension: No name found = C:\Users\Berni\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\
  441. CHR - Extension: No name found = C:\Users\Berni\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipmkfpcnmccejididiaagpgchgjfajgp\1.4.2_0\
  442. CHR - Extension: No name found = C:\Users\Berni\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\
  443. CHR - Extension: No name found = C:\Users\Berni\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\
  444. CHR - Extension: No name found = C:\Users\Berni\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5216.530.0.14_0\
  445.  
  446. O1 HOSTS File: ([2013.08.22 15:25:41 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  447. O2:[b]64bit:[/b] - BHO: (1Password) - {037C06D5-3893-49E8-9AC0-41F7524AFBF5} - B:\1Password\Daten\1Password 4\x64\Agile1pIE4.dll (AgileBits)
  448. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.8.0_101\bin\ssv.dll (Oracle Corporation)
  449. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre1.8.0_101\bin\jp2ssv.dll (Oracle Corporation)
  450. O2 - BHO: (1Password) - {037C06D5-3893-49E8-9AC0-41F7524AFBF5} - B:\1Password\Daten\1Password 4\x86\Agile1pIE4.dll (AgileBits)
  451. O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
  452. O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
  453. O4:[b]64bit:[/b] - HKLM..\Run: [StartCN] C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe (Advanced Micro Devices, Inc.)
  454. O4:[b]64bit:[/b] - HKLM..\Run: [WindowsDefender] C:\Program Files\Windows Defender\MSASCuiL.exe (Microsoft Corporation)
  455. O4 - HKLM..\Run: [Adobe Creative Cloud] C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Systems Incorporated)
  456. O4 - HKLM..\Run: [Agile1pAgent] B:\1Password\Daten\1Password 4\Agile1pAgent.exe (AgileBits)
  457. O4 - HKLM..\Run: [Dropbox] C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc.)
  458. O4 - HKLM..\Run: [RoccatIskuFX] C:\Program Files (x86)\ROCCAT\Isku FX Keyboard\IskuFXMonitor.exe (ROCCAT GmbH)
  459. O4 - HKLM..\Run: [RoccatKoneXTDOptical] C:\Program Files (x86)\ROCCAT\Kone XTD Optical Mouse\KoneXTDOpticalMonitor.EXE (ROCCAT GmbH)
  460. O4 - HKU\S-1-5-19..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation)
  461. O4 - HKU\S-1-5-20..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation)
  462. O4 - HKU\S-1-5-21-3712317832-831361669-298025881-1001..\Run: [OneDrive] C:\Users\Berni\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
  463. O4 - HKU\S-1-5-21-3712317832-831361669-298025881-1001..\Run: [Spotify] C:\Users\Berni\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd)
  464. O4 - HKU\S-1-5-21-3712317832-831361669-298025881-1001..\Run: [Spotify Web Helper] C:\Users\Berni\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Spotify Ltd)
  465. O4 - HKU\S-1-5-21-3712317832-831361669-298025881-1001..\Run: [Steam] B:\Steam\Daten\Steam\steam.exe (Valve Corporation)
  466. O4 - Startup: C:\Users\Berni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sidebar497.lnk = C:\Program Files (x86)\Windows Sidebar\sidebar.exe (Microsoft Corporation)
  467. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  468. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  469. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  470. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  471. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2
  472. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
  473. O9:[b]64bit:[/b] - Extra Button: 1Password - {35BA58F0-BE4F-4DB5-B6D7-4A593C4B7951} - B:\1Password\Daten\1Password 4\x64\Agile1pIE4.dll (AgileBits)
  474. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : 1Password - {35BA58F0-BE4F-4DB5-B6D7-4A593C4B7951} - B:\1Password\Daten\1Password 4\x64\Agile1pIE4.dll (AgileBits)
  475. O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation)
  476. O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation)
  477. O9 - Extra Button: 1Password - {35BA58F0-BE4F-4DB5-B6D7-4A593C4B7951} - B:\1Password\Daten\1Password 4\x86\Agile1pIE4.dll (AgileBits)
  478. O9 - Extra 'Tools' menuitem : 1Password - {35BA58F0-BE4F-4DB5-B6D7-4A593C4B7951} - B:\1Password\Daten\1Password 4\x86\Agile1pIE4.dll (AgileBits)
  479. O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL (Microsoft Corporation)
  480. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
  481. O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
  482. O13[b]64bit:[/b] - gopher Prefix: missing
  483. O13 - gopher Prefix: missing
  484. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
  485. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{60ae1e0f-6736-4ad6-9918-c148ecc62838}: DhcpNameServer = 192.168.178.1
  486. O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found
  487. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  488. O18:[b]64bit:[/b] - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
  489. O18:[b]64bit:[/b] - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
  490. O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)
  491. O18 - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)
  492. O18:[b]64bit:[/b] - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
  493. O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
  494. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
  495. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\WINDOWS\System32\Userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  496. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
  497. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  498. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  499. O32 - HKLM CDRom: AutoRun - 1
  500. O34 - HKLM BootExecute: (autocheck autochk *)
  501. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  502. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  503. O35 - HKLM\..comfile [open] -- "%1" %*
  504. O35 - HKLM\..exefile [open] -- "%1" %*
  505. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  506. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  507. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  508. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  509. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  510. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  511.  
  512. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  513.  
  514. [2016.08.23 20:32:06 | 000,192,216 | ---- | C] (Malwarebytes) -- C:\WINDOWS\SysNative\drivers\MBAMSwissArmy.sys
  515. [2016.08.23 20:31:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
  516. [2016.08.23 20:31:44 | 000,140,672 | ---- | C] (Malwarebytes) -- C:\WINDOWS\SysNative\drivers\mbamchameleon.sys
  517. [2016.08.23 20:31:44 | 000,065,408 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\SysNative\drivers\mwac.sys
  518. [2016.08.23 20:31:44 | 000,027,008 | ---- | C] (Malwarebytes) -- C:\WINDOWS\SysNative\drivers\mbam.sys
  519. [2016.08.23 20:31:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes Anti-Malware
  520. [2016.08.23 20:31:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
  521. [2016.08.23 20:27:26 | 000,000,000 | -H-D | C] -- C:\OneDriveTemp
  522. [2016.08.20 17:52:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
  523. [2016.08.19 20:12:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
  524. [2016.08.19 20:12:52 | 000,000,000 | ---D | C] -- C:\Users\Berni\AppData\Roaming\Notepad++
  525. [2016.08.13 23:19:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
  526. [2016.08.11 20:37:48 | 000,000,000 | ---D | C] -- C:\Users\Berni\AppData\Roaming\Battle.net
  527. [2016.08.11 17:46:02 | 000,149,984 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\atiuxpag.dll
  528. [2016.08.11 17:46:00 | 009,311,368 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\atiumdva.dll
  529. [2016.08.11 17:45:56 | 007,234,888 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\atiumdag.dll
  530. [2016.08.11 17:45:52 | 010,285,472 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\atiumd6a.dll
  531. [2016.08.11 17:45:44 | 008,864,688 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\atiumd64.dll
  532. [2016.08.11 17:45:32 | 000,134,448 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\atiu9pag.dll
  533. [2016.08.11 17:45:30 | 000,161,432 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\atiu9p64.dll
  534. [2016.08.11 17:45:30 | 000,120,376 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\atimpc64.dll
  535. [2016.08.11 17:45:28 | 000,102,672 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\atimpc32.dll
  536. [2016.08.11 17:45:18 | 009,110,856 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\atidxx32.dll
  537. [2016.08.11 17:45:12 | 001,273,072 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\aticfx32.dll
  538. [2016.08.11 17:45:10 | 008,653,760 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\amdxc64.dll
  539. [2016.08.11 17:44:50 | 000,102,672 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\amdpcom32.dll
  540. [2016.08.11 17:44:48 | 000,152,096 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\amdhcp64.dll
  541. [2016.08.11 17:44:48 | 000,135,920 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysWow64\amdhcp32.dll
  542. [2016.08.11 17:44:22 | 000,156,248 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\amdave64.dll
  543. [2016.08.11 17:44:20 | 000,135,408 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\amdave32.dll
  544. [2016.08.11 17:44:02 | 000,151,696 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\mantle64.dll
  545. [2016.08.11 17:44:02 | 000,127,120 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\mantle32.dll
  546. [2016.08.11 17:44:02 | 000,122,504 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\mantleaxl64.dll
  547. [2016.08.11 17:44:02 | 000,101,520 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\mantleaxl32.dll
  548. [2016.08.11 17:43:50 | 000,875,152 | ---- | C] (AMD) -- C:\WINDOWS\SysNative\coinst_16.30.dll
  549. [2016.08.11 17:43:48 | 000,279,696 | ---- | C] (AMD) -- C:\WINDOWS\SysNative\atitmm64.dll
  550. [2016.08.11 17:43:46 | 000,129,160 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\atisamu64.dll
  551. [2016.08.11 17:43:46 | 000,110,736 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\atisamu32.dll
  552. [2016.08.11 17:43:30 | 000,342,160 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\ATIODE.exe
  553. [2016.08.11 17:43:30 | 000,060,560 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\ATIODCLI.exe
  554. [2016.08.11 17:43:14 | 000,103,056 | ---- | C] (AMD) -- C:\WINDOWS\SysNative\atimuixx.dll
  555. [2016.08.11 17:42:52 | 000,194,704 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\atig6txx.dll
  556. [2016.08.11 17:42:52 | 000,115,856 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\atig6pxx.dll
  557. [2016.08.11 17:42:50 | 000,279,184 | ---- | C] (AMD) -- C:\WINDOWS\SysNative\atiesrxx.exe
  558. [2016.08.11 17:42:48 | 000,513,680 | ---- | C] (AMD) -- C:\WINDOWS\SysNative\atieclxx.exe
  559. [2016.08.11 17:42:42 | 000,451,728 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\atidemgy.dll
  560. [2016.08.11 17:42:40 | 000,071,824 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\aticalrt64.dll
  561. [2016.08.11 17:42:38 | 000,061,584 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\aticalrt.dll
  562. [2016.08.11 17:42:34 | 015,721,104 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\aticaldd64.dll
  563. [2016.08.11 17:42:26 | 014,312,080 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\aticaldd.dll
  564. [2016.08.11 17:42:20 | 000,058,512 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\aticalcl.dll
  565. [2016.08.11 17:42:18 | 000,394,896 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\atiapfxx.exe
  566. [2016.08.11 17:42:16 | 001,321,104 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\atiadlxx.dll
  567. [2016.08.11 17:42:14 | 002,139,792 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\amfrt64.dll
  568. [2016.08.11 17:42:14 | 000,052,880 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\drivers\ati2erec.dll
  569. [2016.08.11 17:42:12 | 001,829,520 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysWow64\amfrt32.dll
  570. [2016.08.11 17:42:06 | 008,828,560 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\amdvlk64.dll
  571. [2016.08.11 17:42:02 | 007,085,712 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\amdvlk32.dll
  572. [2016.08.11 17:41:52 | 048,811,664 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\amdocl64.dll
  573. [2016.08.11 17:41:36 | 027,481,232 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\amdocl12cl64.dll
  574. [2016.08.11 17:41:26 | 021,633,168 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\amdocl12cl.dll
  575. [2016.08.11 17:41:18 | 038,258,832 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\amdocl.dll
  576. [2016.08.11 17:41:02 | 000,060,048 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\amdmmcl6.dll
  577. [2016.08.11 17:41:02 | 000,047,760 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\amdmmcl.dll
  578. [2016.08.11 17:41:00 | 008,620,176 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\amdmantle64.dll
  579. [2016.08.11 17:41:00 | 000,075,920 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\amdmcl64.dll
  580. [2016.08.11 17:41:00 | 000,059,536 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\amdmcl32.dll
  581. [2016.08.11 17:40:48 | 006,947,984 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\amdmantle32.dll
  582. [2016.08.11 17:40:40 | 000,743,568 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\amdlvr64.dll
  583. [2016.08.11 17:40:38 | 000,619,152 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysWow64\amdlvr32.dll
  584. [2016.08.11 17:40:22 | 000,314,392 | ---- | C] (Advanced Micro Devices) -- C:\WINDOWS\SysNative\drivers\amdacpksd.sys
  585. [2016.08.11 17:40:22 | 000,105,616 | ---- | C] (Khronos Group) -- C:\WINDOWS\SysNative\OpenCL.dll
  586. [2016.08.11 17:40:20 | 000,096,400 | ---- | C] (Khronos Group) -- C:\WINDOWS\SysWow64\OpenCL.dll
  587. [2016.08.11 17:38:24 | 007,045,344 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\amdxc32.dll
  588. [2016.08.11 17:38:22 | 000,120,376 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\amdpcom64.dll
  589. [2016.08.11 17:37:58 | 032,550,032 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\atio6axx.dll
  590. [2016.08.11 17:37:48 | 000,100,496 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\atiglpxx.dll
  591. [2016.08.11 17:37:46 | 000,065,168 | ---- | C] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\aticalcl64.dll
  592. [2016.08.11 04:34:16 | 000,364,544 | ---- | C] (Advanced Micro Devices) -- C:\WINDOWS\SysNative\amdacpusl.dll
  593. [2016.08.11 04:34:04 | 000,248,832 | ---- | C] (Advanced Micro Devices) -- C:\WINDOWS\SysWow64\amdacpusl.dll
  594. [2016.08.09 20:49:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\PCHEALTH
  595. [2016.08.09 13:13:41 | 000,000,000 | ---D | C] -- C:\Users\Berni\AppData\Roaming\.minecraft
  596. [2016.08.09 13:12:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft
  597. [2016.08.09 13:12:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Minecraft
  598. [2016.08.09 12:06:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\Panther
  599. [2016.08.09 12:05:35 | 000,000,000 | ---D | C] -- C:\Program Files\CMAK
  600. [2016.08.09 12:05:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CMAK
  601. [2016.08.09 12:05:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServiceProfiles
  602. [2016.08.09 12:05:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Microsoft
  603. [2016.08.09 12:04:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\XPSViewer
  604. [2016.08.09 12:04:31 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
  605. [2016.08.09 12:04:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Reference Assemblies
  606. [2016.08.09 12:04:31 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
  607. [2016.08.09 12:04:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSBuild
  608. [2016.08.09 11:19:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft OneDrive
  609. [2016.08.09 11:19:09 | 000,000,000 | ---D | C] -- C:\ProgramData\USOShared
  610. [2016.08.09 11:18:24 | 000,000,000 | ---D | C] -- C:\Users\Berni\AppData\Local\ConnectedDevicesPlatform
  611. [2016.08.09 11:17:28 | 000,000,000 | -HSD | C] -- C:\ProgramData\Desktop
  612. [2016.08.09 11:08:48 | 000,000,000 | -HSD | C] -- C:\Users\Berni\Vorlagen
  613. [2016.08.09 11:08:48 | 000,000,000 | -HSD | C] -- C:\Users\Berni\AppData\Local\Verlauf
  614. [2016.08.09 11:08:48 | 000,000,000 | -HSD | C] -- C:\Users\Berni\AppData\Local\Temporary Internet Files
  615. [2016.08.09 11:08:48 | 000,000,000 | -HSD | C] -- C:\Users\Berni\Startmenü
  616. [2016.08.09 11:08:48 | 000,000,000 | -HSD | C] -- C:\Users\Berni\SendTo
  617. [2016.08.09 11:08:48 | 000,000,000 | -HSD | C] -- C:\Users\Berni\Recent
  618. [2016.08.09 11:08:48 | 000,000,000 | -HSD | C] -- C:\Users\Berni\Lokale Einstellungen
  619. [2016.08.09 11:08:48 | 000,000,000 | -HSD | C] -- C:\Users\Berni\Druckumgebung
  620. [2016.08.09 11:08:48 | 000,000,000 | -HSD | C] -- C:\Users\Berni\Cookies
  621. [2016.08.09 11:08:48 | 000,000,000 | -HSD | C] -- C:\Users\Berni\AppData\Local\Anwendungsdaten
  622. [2016.08.09 11:08:47 | 000,000,000 | --SD | C] -- C:\Users\Berni\AppData\Roaming\Microsoft
  623. [2016.08.09 11:08:47 | 000,000,000 | R--D | C] -- C:\Users\Berni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
  624. [2016.08.09 11:08:47 | 000,000,000 | R--D | C] -- C:\Users\Berni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
  625. [2016.08.09 11:08:47 | 000,000,000 | R--D | C] -- C:\Users\Berni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
  626. [2016.08.09 11:08:47 | 000,000,000 | R--D | C] -- C:\Users\Berni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
  627. [2016.08.09 11:08:47 | 000,000,000 | -HSD | C] -- C:\Users\Berni\Netzwerkumgebung
  628. [2016.08.09 11:08:47 | 000,000,000 | -HSD | C] -- C:\Users\Berni\Eigene Dateien
  629. [2016.08.09 11:08:47 | 000,000,000 | -HSD | C] -- C:\Users\Berni\Anwendungsdaten
  630. [2016.08.09 11:08:47 | 000,000,000 | -H-D | C] -- C:\Users\Berni\AppData
  631. [2016.08.09 11:08:47 | 000,000,000 | ---D | C] -- C:\Users\Berni\AppData\Local\Temp
  632. [2016.08.09 11:08:47 | 000,000,000 | ---D | C] -- C:\Users\Berni\AppData\Local\Microsoft
  633. [2016.08.09 11:08:47 | 000,000,000 | ---D | C] -- C:\Users\Berni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
  634. [2016.08.09 11:08:14 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Uninstall Information
  635. [2016.08.09 11:08:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Razer
  636. [2016.08.09 11:08:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Razer
  637. [2016.08.09 11:07:56 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ATI Technologies
  638. [2016.08.09 11:07:56 | 000,000,000 | ---D | C] -- C:\Program Files\AMD
  639. [2016.08.09 11:07:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\RTCOM
  640. [2016.08.09 11:07:45 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
  641. [2016.08.09 11:07:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
  642. [2016.08.09 11:07:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SleepStudy
  643. [2016.08.07 23:48:00 | 000,000,000 | ---D | C] -- C:\Users\Berni\AppData\Roaming\Raptr
  644. [2016.08.04 19:09:29 | 000,000,000 | ---D | C] -- C:\Users\Berni\BrawlhallaReplays
  645. [2016.08.04 19:02:24 | 000,000,000 | ---D | C] -- C:\Users\Berni\AppData\Roaming\BrawlhallaAir
  646. [2016.07.31 13:08:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
  647. [2016.07.28 13:37:02 | 000,123,400 | ---- | C] (Advanced Micro Devices) -- C:\WINDOWS\SysNative\DelayAPO.dll
  648. [2016.07.26 14:50:36 | 000,000,000 | ---D | C] -- A:\Users\Berni\Documents\Soundaufnahmen
  649. [73 C:\WINDOWS\SysWow64\*.tmp files -> C:\WINDOWS\SysWow64\*.tmp -> ]
  650. [33 C:\WINDOWS\SysNative\*.tmp files -> C:\WINDOWS\SysNative\*.tmp -> ]
  651. [12 C:\WINDOWS\SysNative\drivers\*.tmp files -> C:\WINDOWS\SysNative\drivers\*.tmp -> ]
  652.  
  653. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  654.  
  655. [2016.08.23 20:34:24 | 000,192,216 | ---- | M] (Malwarebytes) -- C:\WINDOWS\SysNative\drivers\MBAMSwissArmy.sys
  656. [2016.08.23 20:31:48 | 000,001,177 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  657. [2016.08.23 20:31:30 | 001,875,216 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
  658. [2016.08.23 20:31:30 | 000,802,982 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
  659. [2016.08.23 20:31:30 | 000,715,726 | ---- | M] () -- C:\WINDOWS\SysNative\perfh007.dat
  660. [2016.08.23 20:31:30 | 000,203,692 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
  661. [2016.08.23 20:31:30 | 000,151,308 | ---- | M] () -- C:\WINDOWS\SysNative\perfc007.dat
  662. [2016.08.23 20:28:55 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
  663. [2016.08.23 20:27:30 | 000,002,458 | ---- | M] () -- C:\Users\Berni\IP_Log_Data.js
  664. [2016.08.23 20:27:27 | 000,001,130 | ---- | M] () -- C:\Users\Berni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sidebar497.lnk
  665. [2016.08.23 20:26:54 | 016,777,216 | -HS- | M] () -- C:\swapfile.sys
  666. [2016.08.23 20:26:52 | 3414,364,160 | -HS- | M] () -- C:\hiberfil.sys
  667. [2016.08.23 20:26:39 | 000,065,536 | ---- | M] () -- C:\WINDOWS\SysNative\spu_storage.bin
  668. [2016.08.23 20:26:22 | 000,000,027 | ---- | M] () -- C:\Users\Berni\AppData\Roaming\Network Meter_Usage.ini
  669. [2016.08.23 20:00:00 | 000,050,641 | ---- | M] () -- C:\Users\Berni\Network_Meter_Data.js
  670. [2016.08.23 18:02:28 | 000,130,769 | ---- | M] () -- A:\Users\Berni\Desktop\Unbenannt.JPG
  671. [2016.08.18 14:47:20 | 000,226,168 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrB.exe
  672. [2016.08.17 14:33:38 | 000,226,168 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrB.ex0
  673. [2016.08.16 11:41:07 | 000,076,152 | ---- | M] () -- C:\WINDOWS\SysNative\PnkBstrA.exe
  674. [2016.08.16 11:31:36 | 000,000,843 | ---- | M] () -- C:\Users\Public\Desktop\Battlefield 4.lnk
  675. [2016.08.16 11:31:17 | 000,076,888 | ---- | M] () -- C:\WINDOWS\SysWow64\PnkBstrA.exe
  676. [2016.08.15 21:07:57 | 000,001,136 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
  677. [2016.08.15 21:07:57 | 000,001,132 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
  678. [2016.08.15 14:06:36 | 000,002,330 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  679. [2016.08.14 20:17:25 | 000,000,000 | ---- | M] () -- C:\History
  680. [2016.08.14 20:16:46 | 000,000,140 | ---- | M] () -- C:\WINDOWS\Reimage.ini
  681. [2016.08.11 17:46:02 | 000,181,064 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\atiuxp64.dll
  682. [2016.08.11 17:46:02 | 000,149,984 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\atiuxpag.dll
  683. [2016.08.11 17:46:00 | 009,311,368 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\atiumdva.dll
  684. [2016.08.11 17:45:56 | 007,234,888 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\atiumdag.dll
  685. [2016.08.11 17:45:52 | 010,285,472 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\atiumd6a.dll
  686. [2016.08.11 17:45:44 | 008,864,688 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\atiumd64.dll
  687. [2016.08.11 17:45:32 | 000,134,448 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\atiu9pag.dll
  688. [2016.08.11 17:45:30 | 000,161,432 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\atiu9p64.dll
  689. [2016.08.11 17:45:30 | 000,120,376 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\atimpc64.dll
  690. [2016.08.11 17:45:28 | 000,102,672 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\atimpc32.dll
  691. [2016.08.11 17:45:18 | 009,110,856 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\atidxx32.dll
  692. [2016.08.11 17:45:14 | 001,548,000 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\aticfx64.dll
  693. [2016.08.11 17:45:12 | 001,273,072 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\aticfx32.dll
  694. [2016.08.11 17:45:10 | 008,653,760 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\amdxc64.dll
  695. [2016.08.11 17:44:50 | 000,475,632 | ---- | M] () -- C:\WINDOWS\SysNative\amdmiracast.dll
  696. [2016.08.11 17:44:50 | 000,102,672 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\amdpcom32.dll
  697. [2016.08.11 17:44:48 | 000,152,096 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\amdhcp64.dll
  698. [2016.08.11 17:44:48 | 000,135,920 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysWow64\amdhcp32.dll
  699. [2016.08.11 17:44:22 | 000,156,248 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\amdave64.dll
  700. [2016.08.11 17:44:20 | 000,135,408 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\amdave32.dll
  701. [2016.08.11 17:44:02 | 000,151,696 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\mantle64.dll
  702. [2016.08.11 17:44:02 | 000,127,120 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\mantle32.dll
  703. [2016.08.11 17:44:02 | 000,122,504 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\mantleaxl64.dll
  704. [2016.08.11 17:44:02 | 000,101,520 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\mantleaxl32.dll
  705. [2016.08.11 17:44:00 | 000,260,744 | ---- | M] () -- C:\WINDOWS\SysNative\hsa-thunk64.dll
  706. [2016.08.11 17:43:58 | 000,226,448 | ---- | M] () -- C:\WINDOWS\SysWow64\hsa-thunk.dll
  707. [2016.08.11 17:43:56 | 000,267,920 | ---- | M] () -- C:\WINDOWS\SysNative\GameManager64.dll
  708. [2016.08.11 17:43:56 | 000,233,104 | ---- | M] () -- C:\WINDOWS\SysWow64\GameManager32.dll
  709. [2016.08.11 17:43:52 | 000,284,304 | ---- | M] () -- C:\WINDOWS\SysNative\dgtrayicon.exe
  710. [2016.08.11 17:43:50 | 000,875,152 | ---- | M] (AMD) -- C:\WINDOWS\SysNative\coinst_16.30.dll
  711. [2016.08.11 17:43:48 | 000,279,696 | ---- | M] (AMD) -- C:\WINDOWS\SysNative\atitmm64.dll
  712. [2016.08.11 17:43:48 | 000,262,288 | ---- | M] () -- C:\WINDOWS\SysNative\clinfo.exe
  713. [2016.08.11 17:43:46 | 000,129,160 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\atisamu64.dll
  714. [2016.08.11 17:43:46 | 000,110,736 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\atisamu32.dll
  715. [2016.08.11 17:43:44 | 026,633,872 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysWow64\atioglxx.dll
  716. [2016.08.11 17:43:30 | 000,342,160 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\ATIODE.exe
  717. [2016.08.11 17:43:30 | 000,060,560 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\ATIODCLI.exe
  718. [2016.08.11 17:43:14 | 000,103,056 | ---- | M] (AMD) -- C:\WINDOWS\SysNative\atimuixx.dll
  719. [2016.08.11 17:43:12 | 000,510,096 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\drivers\atikmpag.sys
  720. [2016.08.11 17:43:10 | 026,719,376 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\drivers\atikmdag.sys
  721. [2016.08.11 17:42:54 | 000,168,592 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\atigktxx.dll
  722. [2016.08.11 17:42:52 | 000,194,704 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\atig6txx.dll
  723. [2016.08.11 17:42:52 | 000,115,856 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\atig6pxx.dll
  724. [2016.08.11 17:42:50 | 000,279,184 | ---- | M] (AMD) -- C:\WINDOWS\SysNative\atiesrxx.exe
  725. [2016.08.11 17:42:48 | 000,513,680 | ---- | M] (AMD) -- C:\WINDOWS\SysNative\atieclxx.exe
  726. [2016.08.11 17:42:46 | 000,223,368 | ---- | M] () -- C:\WINDOWS\SysNative\atieah64.exe
  727. [2016.08.11 17:42:44 | 000,201,360 | ---- | M] () -- C:\WINDOWS\SysWow64\atieah32.exe
  728. [2016.08.11 17:42:42 | 000,451,728 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\atidemgy.dll
  729. [2016.08.11 17:42:40 | 000,071,824 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\aticalrt64.dll
  730. [2016.08.11 17:42:38 | 000,061,584 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\aticalrt.dll
  731. [2016.08.11 17:42:34 | 015,721,104 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\aticaldd64.dll
  732. [2016.08.11 17:42:26 | 014,312,080 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\aticaldd.dll
  733. [2016.08.11 17:42:20 | 000,058,512 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\aticalcl.dll
  734. [2016.08.11 17:42:18 | 000,394,896 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\atiapfxx.exe
  735. [2016.08.11 17:42:16 | 001,321,104 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\atiadlxx.dll
  736. [2016.08.11 17:42:16 | 000,987,280 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysWow64\atiadlxy.dll
  737. [2016.08.11 17:42:16 | 000,987,280 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysWow64\atiadlxx.dll
  738. [2016.08.11 17:42:14 | 002,139,792 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\amfrt64.dll
  739. [2016.08.11 17:42:14 | 000,052,880 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\drivers\ati2erec.dll
  740. [2016.08.11 17:42:12 | 001,829,520 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysWow64\amfrt32.dll
  741. [2016.08.11 17:42:06 | 008,828,560 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\amdvlk64.dll
  742. [2016.08.11 17:42:02 | 007,085,712 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\amdvlk32.dll
  743. [2016.08.11 17:41:58 | 002,370,704 | ---- | M] () -- C:\WINDOWS\SysNative\amdoclvp9lib64.dll
  744. [2016.08.11 17:41:58 | 002,281,096 | ---- | M] () -- C:\WINDOWS\SysWow64\amdoclvp9lib32.dll
  745. [2016.08.11 17:41:52 | 048,811,664 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\amdocl64.dll
  746. [2016.08.11 17:41:36 | 027,481,232 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\amdocl12cl64.dll
  747. [2016.08.11 17:41:26 | 021,633,168 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\amdocl12cl.dll
  748. [2016.08.11 17:41:18 | 038,258,832 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysWow64\amdocl.dll
  749. [2016.08.11 17:41:02 | 000,060,048 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\amdmmcl6.dll
  750. [2016.08.11 17:41:02 | 000,047,760 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\amdmmcl.dll
  751. [2016.08.11 17:41:00 | 008,620,176 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\amdmantle64.dll
  752. [2016.08.11 17:41:00 | 000,075,920 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\amdmcl64.dll
  753. [2016.08.11 17:41:00 | 000,059,536 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\amdmcl32.dll
  754. [2016.08.11 17:40:48 | 006,947,984 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\amdmantle32.dll
  755. [2016.08.11 17:40:40 | 000,743,568 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\amdlvr64.dll
  756. [2016.08.11 17:40:38 | 000,619,152 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysWow64\amdlvr32.dll
  757. [2016.08.11 17:40:30 | 000,193,680 | ---- | M] () -- C:\WINDOWS\SysNative\amdhdl64.dll
  758. [2016.08.11 17:40:28 | 000,173,712 | ---- | M] () -- C:\WINDOWS\SysWow64\amdhdl32.dll
  759. [2016.08.11 17:40:26 | 000,241,296 | ---- | M] () -- C:\WINDOWS\SysNative\amdgfxinfo64.dll
  760. [2016.08.11 17:40:24 | 000,214,160 | ---- | M] () -- C:\WINDOWS\SysWow64\amdgfxinfo32.dll
  761. [2016.08.11 17:40:22 | 000,314,392 | ---- | M] (Advanced Micro Devices) -- C:\WINDOWS\SysNative\drivers\amdacpksd.sys
  762. [2016.08.11 17:40:22 | 000,105,616 | ---- | M] (Khronos Group) -- C:\WINDOWS\SysNative\OpenCL.dll
  763. [2016.08.11 17:40:20 | 000,096,400 | ---- | M] (Khronos Group) -- C:\WINDOWS\SysWow64\OpenCL.dll
  764. [2016.08.11 17:38:24 | 010,970,120 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\atidxx64.dll
  765. [2016.08.11 17:38:24 | 007,045,344 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\amdxc32.dll
  766. [2016.08.11 17:38:22 | 000,120,376 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\amdpcom64.dll
  767. [2016.08.11 17:37:58 | 032,550,032 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\SysNative\atio6axx.dll
  768. [2016.08.11 17:37:48 | 000,100,496 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysWow64\atiglpxx.dll
  769. [2016.08.11 17:37:48 | 000,100,496 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\WINDOWS\SysNative\atiglpxx.dll
  770. [2016.08.11 17:37:46 | 000,065,168 | ---- | M] (Advanced Micro Devices Inc.) -- C:\WINDOWS\SysNative\aticalcl64.dll
  771. [2016.08.11 06:29:44 | 000,732,056 | ---- | M] () -- C:\WINDOWS\SysWow64\atiapfxx.blb
  772. [2016.08.11 06:29:44 | 000,732,056 | ---- | M] () -- C:\WINDOWS\SysNative\atiapfxx.blb
  773. [2016.08.11 06:24:00 | 003,437,632 | ---- | M] () -- C:\WINDOWS\SysNative\atiumd6a.cap
  774. [2016.08.11 06:19:30 | 003,471,376 | ---- | M] () -- C:\WINDOWS\SysWow64\atiumdva.cap
  775. [2016.08.11 04:43:46 | 002,412,544 | ---- | M] () -- C:\WINDOWS\SysNative\amdacpusl.pdb
  776. [2016.08.11 04:34:18 | 000,306,176 | ---- | M] () -- C:\WINDOWS\SysNative\amdacpusl.pdb.pub
  777. [2016.08.11 04:34:16 | 000,364,544 | ---- | M] (Advanced Micro Devices) -- C:\WINDOWS\SysNative\amdacpusl.dll
  778. [2016.08.11 04:34:04 | 000,248,832 | ---- | M] (Advanced Micro Devices) -- C:\WINDOWS\SysWow64\amdacpusl.dll
  779. [2016.08.09 23:00:12 | 005,071,176 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
  780. [2016.08.09 13:12:50 | 000,001,036 | ---- | M] () -- C:\Users\Public\Desktop\Minecraft.lnk
  781. [2016.08.09 11:16:57 | 000,011,433 | ---- | M] () -- C:\WINDOWS\diagwrn.xml
  782. [2016.08.09 11:16:57 | 000,011,433 | ---- | M] () -- C:\WINDOWS\diagerr.xml
  783. [2016.08.09 11:13:07 | 000,023,056 | ---- | M] () -- C:\WINDOWS\SysNative\emptyregdb.dat
  784. [2016.08.09 11:07:57 | 000,000,000 | ---- | M] () -- C:\WINDOWS\ativpsrm.bin
  785. [2016.08.08 22:51:13 | 000,001,230 | ---- | M] () -- C:\WINDOWS\tasks\DropboxUpdateTaskMachineUA.job
  786. [2016.08.08 21:02:00 | 000,001,226 | ---- | M] () -- C:\WINDOWS\tasks\DropboxUpdateTaskMachineCore.job
  787. [2016.08.07 22:33:55 | 000,000,002 | ---- | M] () -- C:\END
  788. [2016.08.04 19:00:30 | 000,000,214 | ---- | M] () -- A:\Users\Berni\Desktop\Brawlhalla.url
  789. [2016.08.01 09:21:12 | 000,892,015 | ---- | M] () -- C:\WINDOWS\SysNative\amdicdxx.dat
  790. [2016.07.31 13:07:35 | 000,110,144 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysNative\WindowsAccessBridge-64.dll
  791. [2016.07.28 13:37:02 | 000,123,400 | ---- | M] (Advanced Micro Devices) -- C:\WINDOWS\SysNative\DelayAPO.dll
  792. [2016.07.28 13:37:02 | 000,118,848 | ---- | M] (Advanced Micro Devices) -- C:\WINDOWS\SysNative\drivers\AtihdWT6.sys
  793. [73 C:\WINDOWS\SysWow64\*.tmp files -> C:\WINDOWS\SysWow64\*.tmp -> ]
  794. [33 C:\WINDOWS\SysNative\*.tmp files -> C:\WINDOWS\SysNative\*.tmp -> ]
  795. [12 C:\WINDOWS\SysNative\drivers\*.tmp files -> C:\WINDOWS\SysNative\drivers\*.tmp -> ]
  796.  
  797. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  798.  
  799. [2016.08.23 20:31:48 | 000,001,177 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  800. [2016.08.23 20:27:27 | 000,001,130 | ---- | C] () -- C:\Users\Berni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sidebar497.lnk
  801. [2016.08.23 18:02:28 | 000,130,769 | ---- | C] () -- A:\Users\Berni\Desktop\Unbenannt.JPG
  802. [2016.08.15 14:06:36 | 000,002,342 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
  803. [2016.08.15 14:06:36 | 000,002,330 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  804. [2016.08.15 14:06:05 | 000,001,136 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
  805. [2016.08.15 14:06:05 | 000,001,132 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
  806. [2016.08.14 20:17:25 | 000,000,000 | ---- | C] () -- C:\History
  807. [2016.08.14 20:15:42 | 000,000,140 | ---- | C] () -- C:\WINDOWS\Reimage.ini
  808. [2016.08.11 17:44:50 | 000,475,632 | ---- | C] () -- C:\WINDOWS\SysNative\amdmiracast.dll
  809. [2016.08.11 17:44:00 | 000,260,744 | ---- | C] () -- C:\WINDOWS\SysNative\hsa-thunk64.dll
  810. [2016.08.11 17:43:58 | 000,226,448 | ---- | C] () -- C:\WINDOWS\SysWow64\hsa-thunk.dll
  811. [2016.08.11 17:43:56 | 000,267,920 | ---- | C] () -- C:\WINDOWS\SysNative\GameManager64.dll
  812. [2016.08.11 17:43:52 | 000,284,304 | ---- | C] () -- C:\WINDOWS\SysNative\dgtrayicon.exe
  813. [2016.08.11 17:43:48 | 000,262,288 | ---- | C] () -- C:\WINDOWS\SysNative\clinfo.exe
  814. [2016.08.11 17:42:46 | 000,223,368 | ---- | C] () -- C:\WINDOWS\SysNative\atieah64.exe
  815. [2016.08.11 17:42:44 | 000,201,360 | ---- | C] () -- C:\WINDOWS\SysWow64\atieah32.exe
  816. [2016.08.11 17:41:58 | 002,370,704 | ---- | C] () -- C:\WINDOWS\SysNative\amdoclvp9lib64.dll
  817. [2016.08.11 17:41:58 | 002,281,096 | ---- | C] () -- C:\WINDOWS\SysWow64\amdoclvp9lib32.dll
  818. [2016.08.11 17:40:30 | 000,193,680 | ---- | C] () -- C:\WINDOWS\SysNative\amdhdl64.dll
  819. [2016.08.11 17:40:28 | 000,173,712 | ---- | C] () -- C:\WINDOWS\SysWow64\amdhdl32.dll
  820. [2016.08.11 17:40:26 | 000,241,296 | ---- | C] () -- C:\WINDOWS\SysNative\amdgfxinfo64.dll
  821. [2016.08.11 17:40:24 | 000,214,160 | ---- | C] () -- C:\WINDOWS\SysWow64\amdgfxinfo32.dll
  822. [2016.08.11 06:29:44 | 000,732,056 | ---- | C] () -- C:\WINDOWS\SysWow64\atiapfxx.blb
  823. [2016.08.11 06:29:44 | 000,732,056 | ---- | C] () -- C:\WINDOWS\SysNative\atiapfxx.blb
  824. [2016.08.11 06:24:00 | 003,437,632 | ---- | C] () -- C:\WINDOWS\SysNative\atiumd6a.cap
  825. [2016.08.11 06:19:30 | 003,471,376 | ---- | C] () -- C:\WINDOWS\SysWow64\atiumdva.cap
  826. [2016.08.11 04:43:46 | 002,412,544 | ---- | C] () -- C:\WINDOWS\SysNative\amdacpusl.pdb
  827. [2016.08.11 04:34:18 | 000,306,176 | ---- | C] () -- C:\WINDOWS\SysNative\amdacpusl.pdb.pub
  828. [2016.08.09 13:12:50 | 000,001,036 | ---- | C] () -- C:\Users\Public\Desktop\Minecraft.lnk
  829. [2016.08.09 12:06:51 | 000,047,428 | ---- | C] () -- C:\WINDOWS\SysWow64\license.rtf
  830. [2016.08.09 12:06:51 | 000,047,428 | ---- | C] () -- C:\WINDOWS\SysNative\license.rtf
  831. [2016.08.09 11:16:18 | 000,011,433 | ---- | C] () -- C:\WINDOWS\diagwrn.xml
  832. [2016.08.09 11:16:18 | 000,011,433 | ---- | C] () -- C:\WINDOWS\diagerr.xml
  833. [2016.08.09 11:11:51 | 3414,364,160 | -HS- | C] () -- C:\hiberfil.sys
  834. [2016.08.09 11:11:10 | 000,001,576 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
  835. [2016.08.09 11:08:00 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
  836. [2016.08.09 11:07:57 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
  837. [2016.08.09 11:07:56 | 000,065,536 | ---- | C] () -- C:\WINDOWS\SysNative\spu_storage.bin
  838. [2016.08.09 11:07:16 | 005,071,176 | ---- | C] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
  839. [2016.08.07 22:33:54 | 000,000,002 | ---- | C] () -- C:\END
  840. [2016.08.06 18:30:55 | 000,002,458 | ---- | C] () -- C:\Users\Berni\IP_Log_Data.js
  841. [2016.08.06 17:00:00 | 000,050,641 | ---- | C] () -- C:\Users\Berni\Network_Meter_Data.js
  842. [2016.08.04 19:00:30 | 000,000,214 | ---- | C] () -- A:\Users\Berni\Desktop\Brawlhalla.url
  843. [2016.08.01 09:21:12 | 000,892,015 | ---- | C] () -- C:\WINDOWS\SysNative\amdicdxx.dat
  844. [2016.07.20 16:17:55 | 000,264,992 | ---- | C] () -- C:\WINDOWS\SysWow64\vulkan-1.dll
  845. [2016.07.20 16:17:55 | 000,110,880 | ---- | C] () -- C:\WINDOWS\SysWow64\vulkaninfo.exe
  846. [2016.07.16 13:47:57 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
  847. [2016.07.16 13:47:57 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
  848. [2016.07.16 13:43:04 | 000,055,296 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
  849. [2016.07.16 13:43:00 | 000,019,968 | ---- | C] () -- C:\WINDOWS\SysWow64\GamePanelExternalHook.dll
  850. [2016.07.16 13:42:56 | 000,185,368 | ---- | C] () -- C:\WINDOWS\SysWow64\weretw.dll
  851. [2016.07.16 13:42:55 | 002,048,496 | ---- | C] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll
  852. [2016.07.16 13:42:55 | 000,167,640 | ---- | C] () -- C:\WINDOWS\SysWow64\chs_singlechar_pinyin.dat
  853. [2016.07.16 13:42:55 | 000,038,400 | ---- | C] () -- C:\WINDOWS\SysWow64\dtdump.exe
  854. [2016.07.16 13:42:54 | 000,265,728 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.Perception.Stub.dll
  855. [2016.07.16 13:42:53 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
  856. [2016.07.16 13:42:49 | 000,304,640 | ---- | C] () -- C:\WINDOWS\SysWow64\HrtfApo.dll
  857. [2016.07.16 13:42:48 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
  858. [2016.07.16 13:42:46 | 000,109,056 | ---- | C] () -- C:\WINDOWS\SysWow64\chartv.dll
  859. [2016.07.16 13:42:46 | 000,031,232 | ---- | C] () -- C:\WINDOWS\SysWow64\efsext.dll
  860. [2016.07.16 13:42:45 | 000,336,896 | ---- | C] () -- C:\WINDOWS\SysWow64\msinfo32.exe
  861. [2016.07.16 13:42:43 | 000,002,307 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini
  862. [2016.07.16 13:42:12 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
  863. [2016.07.15 21:27:32 | 000,233,104 | ---- | C] () -- C:\WINDOWS\SysWow64\GameManager32.dll
  864. [2016.07.15 13:30:38 | 000,204,952 | ---- | C] () -- C:\WINDOWS\SysWow64\ativvsvl.dat
  865. [2016.07.15 13:30:38 | 000,157,144 | ---- | C] () -- C:\WINDOWS\SysWow64\ativvsva.dat
  866. [2016.06.23 20:22:00 | 000,264,992 | ---- | C] () -- C:\WINDOWS\SysWow64\vulkan-1-1-0-17-0.dll
  867. [2016.06.23 20:21:24 | 000,110,880 | ---- | C] () -- C:\WINDOWS\SysWow64\vulkaninfo-1-1-0-17-0.exe
  868. [2016.05.14 14:18:33 | 000,000,122 | ---- | C] () -- C:\Users\Berni\AppData\Roaming\System Monitor II_UptimeRecord.ini
  869. [2016.05.14 14:16:55 | 000,000,283 | ---- | C] () -- C:\Users\Berni\AppData\Roaming\GPU MeterV2_Settings.ini
  870. [2016.05.14 14:13:52 | 000,000,997 | ---- | C] () -- C:\Users\Berni\AppData\Roaming\Currency Meter_Settings.ini
  871. [2016.05.05 15:42:53 | 000,000,504 | ---- | C] () -- C:\Users\Berni\AppData\Roaming\Drives Monitor_Settings.ini
  872. [2016.03.29 13:43:40 | 000,007,615 | ---- | C] () -- C:\Users\Berni\AppData\Local\Resmon.ResmonCfg
  873. [2015.12.30 22:12:18 | 000,226,168 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrB.exe
  874. [2015.12.30 22:12:18 | 000,076,888 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrA.exe
  875. [2015.12.30 07:27:49 | 000,000,022 | ---- | C] () -- C:\WINDOWS\GPU-Z.INI
  876. [2015.12.30 07:26:01 | 000,000,027 | ---- | C] () -- C:\Users\Berni\AppData\Roaming\Network Meter_Usage.ini
  877. [2015.12.30 07:01:04 | 000,000,841 | ---- | C] () -- C:\Users\Berni\AppData\Roaming\Drives Meter_Settings.ini
  878. [2015.12.30 07:00:12 | 000,000,961 | ---- | C] () -- C:\Users\Berni\AppData\Roaming\Network Meter_Settings.ini
  879. [2015.12.30 06:59:53 | 000,000,626 | ---- | C] () -- C:\Users\Berni\AppData\Roaming\All CPU MeterV3_Settings.ini
  880. [2015.12.30 06:25:06 | 000,000,516 | ---- | C] () -- C:\WINDOWS\ampa.ini
  881. [2015.12.30 05:26:31 | 000,000,000 | ---- | C] () -- C:\Users\Berni\AppData\Local\Driver_LOM_8161Present.flag
  882. [2015.12.16 21:07:38 | 001,004,032 | ---- | C] () -- C:\WINDOWS\SysWow64\amdocl_as32.exe
  883. [2015.12.16 21:07:36 | 000,807,424 | ---- | C] () -- C:\WINDOWS\SysWow64\amdocl_ld32.exe
  884. [2014.10.17 12:15:58 | 000,024,296 | ---- | C] () -- C:\WINDOWS\SysWow64\LightFX.dll
  885.  
  886. [color=#E56717]========== ZeroAccess Check ==========[/color]
  887.  
  888. [2016.08.16 11:30:42 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
  889.  
  890. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  891.  
  892. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  893.  
  894. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  895.  
  896. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  897.  
  898. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  899. "" = C:\Windows\SysNative\windows.storage.dll -- [2016.07.16 13:42:06 | 007,222,240 | ---- | M] (Microsoft Corporation)
  900. "ThreadingModel" = Apartment
  901.  
  902. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  903. "" = %SystemRoot%\system32\windows.storage.dll -- [2016.07.16 13:42:54 | 005,723,344 | ---- | M] (Microsoft Corporation)
  904. "ThreadingModel" = Apartment
  905.  
  906. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  907. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2016.07.16 13:42:31 | 000,977,920 | ---- | M] (Microsoft Corporation)
  908. "ThreadingModel" = Free
  909.  
  910. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  911. "" = %systemroot%\system32\wbem\fastprox.dll -- [2016.07.16 13:42:56 | 000,779,776 | ---- | M] (Microsoft Corporation)
  912. "ThreadingModel" = Free
  913.  
  914. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  915. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2016.07.16 13:42:31 | 000,518,656 | ---- | M] (Microsoft Corporation)
  916. "ThreadingModel" = Both
  917.  
  918. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  919.  
  920. [color=#E56717]========== LOP Check ==========[/color]
  921.  
  922. [2016.08.23 17:43:40 | 000,000,000 | ---D | M] -- C:\Users\Berni\AppData\Roaming\.minecraft
  923. [2016.02.12 17:25:55 | 000,000,000 | ---D | M] -- C:\Users\Berni\AppData\Roaming\AgileBits
  924. [2016.08.11 20:37:48 | 000,000,000 | ---D | M] -- C:\Users\Berni\AppData\Roaming\Battle.net
  925. [2016.08.04 19:02:28 | 000,000,000 | ---D | M] -- C:\Users\Berni\AppData\Roaming\BrawlhallaAir
  926. [2016.02.15 15:27:32 | 000,000,000 | ---D | M] -- C:\Users\Berni\AppData\Roaming\Dropbox
  927. [2016.02.14 21:56:52 | 000,000,000 | ---D | M] -- C:\Users\Berni\AppData\Roaming\Equalify
  928. [2016.01.14 22:17:06 | 000,000,000 | ---D | M] -- C:\Users\Berni\AppData\Roaming\FileZilla
  929. [2016.01.08 14:51:00 | 000,000,000 | ---D | M] -- C:\Users\Berni\AppData\Roaming\ftblauncher
  930. [2016.02.15 16:45:45 | 000,000,000 | ---D | M] -- C:\Users\Berni\AppData\Roaming\Guild Wars 2
  931. [2015.12.30 05:33:25 | 000,000,000 | ---D | M] -- C:\Users\Berni\AppData\Roaming\java
  932. [2015.12.30 05:41:55 | 000,000,000 | ---D | M] -- C:\Users\Berni\AppData\Roaming\library_dir
  933. [2016.01.19 16:44:03 | 000,000,000 | ---D | M] -- C:\Users\Berni\AppData\Roaming\LibreOffice
  934. [2016.05.12 13:14:00 | 000,000,000 | ---D | M] -- C:\Users\Berni\AppData\Roaming\MAXON
  935. [2016.08.20 13:06:33 | 000,000,000 | ---D | M] -- C:\Users\Berni\AppData\Roaming\Notepad++
  936. [2016.08.10 12:08:48 | 000,000,000 | ---D | M] -- C:\Users\Berni\AppData\Roaming\OBS
  937. [2016.06.16 19:28:45 | 000,000,000 | ---D | M] -- C:\Users\Berni\AppData\Roaming\Origin
  938. [2016.01.29 20:36:14 | 000,000,000 | ---D | M] -- C:\Users\Berni\AppData\Roaming\PDAppFlex
  939. [2016.08.07 23:48:00 | 000,000,000 | ---D | M] -- C:\Users\Berni\AppData\Roaming\Raptr
  940. [2016.08.23 20:37:33 | 000,000,000 | ---D | M] -- C:\Users\Berni\AppData\Roaming\Spotify
  941. [2016.07.15 23:42:47 | 000,000,000 | ---D | M] -- C:\Users\Berni\AppData\Roaming\StardewValley
  942. [2016.01.03 19:33:57 | 000,000,000 | ---D | M] -- C:\Users\Berni\AppData\Roaming\TeamViewer
  943. [2016.06.29 20:14:55 | 000,000,000 | ---D | M] -- C:\Users\dfbhu\AppData\Roaming\Origin
  944.  
  945. [color=#E56717]========== Purity Check ==========[/color]
  946.  
  947.  
  948.  
  949. < End of report >
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!