|
Log-Analyse und Auswertung: G Data meldet Junkware (PUP): Script.Adware.DealPly.G (Engine B)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
23.07.2015, 12:41 | #1 |
| G Data meldet Junkware (PUP): Script.Adware.DealPly.G (Engine B) Hallo erstmal, Ich bekomme seit mehreren Tagen dauerhaft die Meldung, dass G Data bei der Virenprüfung von Webinhalten etwas gefunden hat. Dabei wird mir laut Programm diese Addresse angezeigt: hxxp://i.mgicinjs.info/mgicin/javascript.js Es handelt sich um Junkware wie im Themenname zu sehen. G Data verweigert dem Virus (?) den Zugriff, allerdings erscheint das Pop-Up Fenster mit der Meldung jedes mal sofort wieder, wenn ich es geschlossen habe, selbst wenn kein Browser geöffnet ist. Außerdem kommt es mir so vor als wäre mein Laptop langsamer geworden, seit die Meldungen kommen. Habe in diversen Foren, auch hier, nach Hilfe gesucht und dabei Malwarebytes, Hitman, JRK, Bitdefender und natürlich G Data meinen PC scannen lassen. Die gefundenen Infektionen wurden entfernt, allerdings kommt das Pop-Up von G Data jedesmal wieder. Die Additions.txt musste ich leider anhängen, da mir angezeigt wurde, dass der Post sonst zu viele Zeichen hat. defogger_disable.txt Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1) Log created at 12:56 on 23/07/2015 (Micha_000) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. HKCU:DAEMON Tools Lite -> Removed Checking for services/drivers... -=E.O.F=- Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:20-07-2015 Ran by Micha_000 (administrator) on ARCUS on 23-07-2015 13:02:15 Running from C:\Users\Micha_000\Downloads Loaded Profiles: Micha_000 (Available Profiles: Micha_000 & Gast) Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe (G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Microsoft Corporation) C:\Windows\System32\cmd.exe () C:\Windows\ERUNT.exe (Microsoft Corporation) C:\Windows\System32\Taskmgr.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13651672 2013-09-03] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-30] (Realtek Semiconductor) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585928 2015-01-16] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [InstallerLauncher] => "C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-41 (the data entry has 36 more characters). HKLM-x32\...\Run: [ASUS InstantKey] => C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [13936 2013-08-27] (ASUS) HKLM-x32\...\Run: [G Data ASM] => C:\Program Files (x86)\G Data\InternetSecurity\DelayLoader\AutorunDelayLoader.exe [434296 2015-02-20] (G Data Software AG) HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation) HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [493960 2014-12-05] (Autodesk Inc.) HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink) HKLM-x32\...\Run: [UpdatePSTShortCut] => C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe [222504 2013-02-05] (CyberLink Corp.) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.) HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-10-13] (Geek Software GmbH) HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFirewallTray.exe [1864312 2015-06-16] (G DATA Software AG) HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G DATA\InternetSecurity\AVKTray\AVKTray.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] (Atheros Communications) HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Run: [Akamai NetSession Interface] => C:\Users\Micha_000\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.) HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1193352 2014-05-01] (Autodesk, Inc.) HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Run: [Dropbox Update] => C:\Users\Micha_000\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-30] (Dropbox, Inc.) HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Run: [EADM] => D:\Sims4\Origin\Origin.exe [3632112 2015-07-22] (Electronic Arts) HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1193352 2014-05-01] (Autodesk, Inc.) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [177624 2015-01-10] (NVIDIA Corporation) AppInit_DLLs: ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [177624 2015-01-10] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [164568 2015-01-10] (NVIDIA Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GoPro Importer.lnk [2015-07-07] ShortcutTarget: GoPro Importer.lnk -> C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe (GoPro) Startup: C:\Users\Micha_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-07-04] ShortcutTarget: Dropbox.lnk -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.) ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-995147136-1539619246-4169388671-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com HKU\S-1-5-21-995147136-1539619246-4169388671-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-04-14] (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-04-14] (Oracle Corporation) Tcpip\Parameters: [DhcpNameServer] 129.217.129.42 Tcpip\..\Interfaces\{3A923A30-1465-48E7-A82A-6C30F7F2798B}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{DB78376F-9FC3-424E-B0BE-DE5DA1E5F3ED}: [DhcpNameServer] 129.217.129.42 FireFox: ======== FF ProfilePath: C:\Users\Micha_000\AppData\Roaming\Mozilla\Firefox\Profiles\0me8w9ks.default FF NetworkProxy: "ftp", "proxyuk.stealthy.co" FF NetworkProxy: "ftp_port", 3128 FF NetworkProxy: "http", "proxyuk.stealthy.co" FF NetworkProxy: "http_port", 3128 FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co" FF NetworkProxy: "share_proxy_settings", true FF NetworkProxy: "socks", "proxyuk.stealthy.co" FF NetworkProxy: "socks_port", 3128 FF NetworkProxy: "ssl", "proxyuk.stealthy.co" FF NetworkProxy: "ssl_port", 3128 FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-14] () FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\WINDOWS\system32\npDeployJava1.dll [2015-04-14] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.21.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-04-14] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-21] () FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-06-23] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-06-23] (Intel Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-995147136-1539619246-4169388671-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Micha_000\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS) FF Extension: SaveFrom.net helper - C:\Users\Micha_000\AppData\Roaming\Mozilla\Firefox\Profiles\0me8w9ks.default\Extensions\helper@savefrom.net.xpi [2014-11-10] FF Extension: Adblock Plus - C:\Users\Micha_000\AppData\Roaming\Mozilla\Firefox\Profiles\0me8w9ks.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-28] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-05] (Autodesk Inc.) S2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-08-29] (ASUS) S2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] () [File not signed] S2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider) [File not signed] R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.) R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2558072 2015-06-19] (G Data Software AG) R2 AVKService; C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKService.exe [966776 2015-06-16] (G Data Software AG) R2 AVKWCtl; C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKWCtlx64.exe [3711712 2015-06-16] (G Data Software AG) S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation) S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink) R3 GDFwSvc; C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFwSvcx64.exe [3202368 2015-06-19] (G Data Software AG) R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [789624 2015-06-16] (G Data Software AG) S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2015-01-16] (NVIDIA Corporation) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed] R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation) S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-06-23] (Intel Corporation) S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-06-23] (Intel Corporation) S2 mitsijm2015; D:\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe [968480 2013-10-12] (Autodesk, Inc.) S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706312 2015-01-16] (NVIDIA Corporation) S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833544 2015-01-16] (NVIDIA Corporation) S3 Origin Client Service; D:\Sims4\Origin\OriginClientService.exe [2004488 2015-07-22] (Electronic Arts) S2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-04-17] () S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation) S2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-09-07] (Atheros) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70416 2013-09-23] (ASUS Corporation) S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation) R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-04-03] (Disc Soft Ltd) R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [158720 2015-07-13] (G Data Software AG) S0 GDElam; C:\Windows\System32\DRIVERS\GDElam.sys [117904 2015-01-08] (G Data Software AG) R3 GDKBB; C:\WINDOWS\system32\drivers\GDKBB64.sys [27648 2015-07-07] (G Data Software AG) R3 GDKBFlt; C:\WINDOWS\system32\drivers\GDKBFlt64.sys [20992 2015-07-07] (G Data Software AG) R1 GDMnIcpt; C:\WINDOWS\system32\drivers\MiniIcpt.sys [230912 2015-07-13] (G Data Software AG) R3 GDPkIcpt; C:\WINDOWS\system32\drivers\PktIcpt.sys [91648 2015-07-13] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [68608 2015-07-18] (G Data Software AG) R1 GRD; C:\WINDOWS\system32\drivers\GRD.sys [106272 2015-07-19] (G Data Software) R1 HookCentre; C:\WINDOWS\system32\drivers\HookCentre.sys [125952 2015-07-13] (G Data Software AG) R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( ) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2015-01-16] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation) R2 plctrl; C:\Program Files\ASUS\P4G\plctrl.sys [14136 2013-08-29] (Windows (R) Win 7 DDK provider) S3 usbrndis6; C:\Windows\system32\DRIVERS\usb80236.sys [20992 2013-08-22] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation) S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-07-23 13:02 - 2015-07-23 13:02 - 00020476 _____ C:\Users\Micha_000\Downloads\FRST.txt 2015-07-23 12:58 - 2015-07-23 13:02 - 00000000 ____D C:\FRST 2015-07-23 12:57 - 2015-07-23 12:57 - 02135552 _____ (Farbar) C:\Users\Micha_000\Downloads\FRST64.exe 2015-07-23 12:56 - 2015-07-23 12:56 - 00050477 _____ C:\Users\Micha_000\Downloads\Defogger.exe 2015-07-23 12:56 - 2015-07-23 12:56 - 00000550 _____ C:\Users\Micha_000\Downloads\defogger_disable.log 2015-07-23 12:56 - 2015-07-23 12:56 - 00000168 _____ C:\Users\Micha_000\defogger_reenable 2015-07-23 12:39 - 2015-07-23 12:39 - 01798288 _____ (Malwarebytes Corporation) C:\Users\Micha_000\Downloads\JRT-751.exe 2015-07-23 07:28 - 2015-07-23 07:28 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2015-07-22 23:39 - 2015-07-14 16:14 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2015-07-22 23:39 - 2015-07-14 16:14 - 00301056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2015-07-22 23:39 - 2015-07-14 16:14 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2015-07-22 23:39 - 2015-07-14 16:13 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2015-07-22 23:16 - 2015-07-22 23:16 - 00003518 _____ C:\WINDOWS\System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8 2015-07-22 23:14 - 2015-07-22 23:14 - 00074000 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll 2015-07-22 23:13 - 2015-07-22 23:13 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml 2015-07-22 23:13 - 2015-07-22 23:13 - 00000385 _____ C:\Users\Micha_000\AppData\Roaminguser_gensett.xml 2015-07-22 23:12 - 2015-07-22 23:12 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf 2015-07-22 23:12 - 2015-07-22 23:12 - 00000000 ____D C:\ProgramData\BDLogging 2015-07-22 23:12 - 2015-01-09 11:44 - 00074000 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll 2015-07-22 23:12 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll 2015-07-22 23:05 - 2015-07-23 12:31 - 00000000 ____D C:\Program Files\Bitdefender 2015-07-22 23:05 - 2015-07-23 12:30 - 00000000 ____D C:\Program Files\Common Files\Bitdefender 2015-07-22 23:05 - 2015-07-22 23:05 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\Micha_000\Downloads\SpyHunter-Installer(1).exe 2015-07-22 23:05 - 2015-07-22 23:05 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\QuickScan 2015-07-22 23:05 - 2015-01-09 11:44 - 00084848 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUISkin.dll 2015-07-22 23:05 - 2015-01-09 11:44 - 00033360 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUH.dll 2015-07-22 22:55 - 2015-07-22 22:55 - 00000184 _____ C:\Users\Micha_000\Desktop\G DATA Protokoll ID 1777.txt 2015-07-22 22:40 - 2015-07-22 22:40 - 02868840 _____ C:\Users\Micha_000\Downloads\bitdefender_antivirus.exe 2015-07-22 22:29 - 2015-07-22 22:29 - 00001188 _____ C:\WINDOWS\SysWOW64\ServiceConfig.xml 2015-07-22 22:08 - 2015-07-22 23:16 - 00000000 ____D C:\Program Files\Common Files\AV 2015-07-22 22:08 - 2015-07-22 22:08 - 00000000 ____D C:\ProgramData\VIPRE 2015-07-22 21:37 - 2015-07-22 22:44 - 00000000 ____D C:\ProgramData\STOPzilla! 2015-07-22 21:37 - 2015-07-22 21:37 - 00000000 ____D C:\Program Files (x86)\iS3 2015-07-22 21:34 - 2015-07-22 21:34 - 02042328 _____ (iS3, Inc.) C:\Users\Micha_000\Downloads\STOPzillaPRO_Downloader.exe 2015-07-22 21:33 - 2015-07-22 21:33 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\Micha_000\Downloads\SpyHunter-Installer.exe 2015-07-22 13:20 - 2015-07-22 13:29 - 00009522 _____ C:\Users\Micha_000\Desktop\Sicherheitseinweisung_Zeit.odt 2015-07-19 20:01 - 2015-07-19 20:01 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe 2015-07-19 19:48 - 2015-07-19 20:02 - 00000000 ____D C:\ProgramData\HitmanPro 2015-07-19 19:40 - 2015-07-19 19:40 - 11032736 _____ (SurfRight B.V.) C:\Users\Micha_000\Downloads\HitmanPro_x64.exe 2015-07-19 19:27 - 2015-07-19 19:27 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-07-19 19:20 - 2015-07-19 19:26 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Micha_000\Downloads\mbam-setup-2.1.8.1057.exe 2015-07-19 19:07 - 2015-07-19 19:07 - 01798288 _____ (Malwarebytes Corporation) C:\Users\Micha_000\Downloads\JRT.exe 2015-07-19 18:59 - 2015-07-19 19:02 - 00000000 ____D C:\AdwCleaner 2015-07-19 18:59 - 2015-07-19 18:59 - 02248704 _____ C:\Users\Micha_000\Downloads\adwcleaner_4.208.exe 2015-07-19 18:50 - 2015-07-19 18:50 - 00562784 _____ (Oracle Corporation) C:\Users\Micha_000\Downloads\jxpiinstall.exe 2015-07-19 17:45 - 2015-07-19 17:45 - 00106272 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GRD.sys 2015-07-19 17:45 - 2015-07-19 17:45 - 00018160 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GdPhyMem.sys 2015-07-18 16:08 - 2015-07-18 16:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA INTERNET SECURITY 2015-07-18 15:50 - 2015-07-18 15:50 - 00283050 _____ C:\Users\Micha_000\Downloads\RocketLeague-FLT - ThePirateBay.TO.torrent 2015-07-16 21:17 - 2015-05-03 02:39 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2015-07-16 21:17 - 2015-04-30 01:22 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll 2015-07-16 21:16 - 2015-05-07 17:21 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll 2015-07-16 21:16 - 2015-05-07 17:05 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll 2015-07-16 21:15 - 2015-05-11 20:17 - 01201664 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2015-07-16 21:15 - 2015-05-07 19:50 - 22292672 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2015-07-16 21:15 - 2015-05-07 19:00 - 03109376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll 2015-07-16 21:15 - 2015-05-07 18:53 - 19734960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2015-07-16 21:15 - 2015-05-07 18:12 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll 2015-07-16 21:14 - 2015-04-25 04:25 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys 2015-07-16 21:14 - 2014-11-04 21:25 - 00059712 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdclass.sys 2015-07-16 21:14 - 2014-11-04 21:25 - 00051008 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouclass.sys 2015-07-16 21:14 - 2014-11-04 08:55 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sermouse.sys 2015-07-16 21:14 - 2014-11-04 08:54 - 00108544 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\i8042prt.sys 2015-07-16 21:14 - 2014-11-04 08:54 - 00032256 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys 2015-07-16 21:14 - 2014-11-04 08:54 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys 2015-07-16 21:13 - 2015-06-30 00:43 - 00026288 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2015-07-16 21:13 - 2015-06-29 17:07 - 01145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2015-07-16 21:13 - 2015-06-29 17:07 - 01084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2015-07-16 21:13 - 2015-06-29 17:07 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2015-07-16 21:13 - 2015-06-29 17:07 - 00433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2015-07-16 21:13 - 2015-06-29 17:07 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2015-07-16 21:13 - 2015-06-27 01:21 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2015-07-16 21:13 - 2015-06-27 01:21 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll 2015-07-16 21:12 - 2015-05-03 17:09 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-07-16 21:12 - 2015-05-03 16:58 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-07-16 21:12 - 2015-05-03 16:55 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2015-07-16 21:12 - 2015-05-03 16:49 - 00811008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2015-07-16 09:43 - 2015-07-09 21:51 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2015-07-16 09:43 - 2015-07-09 20:40 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll 2015-07-16 09:43 - 2015-07-09 18:03 - 03701760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2015-07-16 09:43 - 2015-07-09 17:54 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe 2015-07-16 09:43 - 2015-07-09 17:53 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll 2015-07-16 09:43 - 2015-07-09 17:50 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2015-07-16 09:43 - 2015-07-09 17:50 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2015-07-16 09:43 - 2015-07-09 17:48 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2015-07-16 09:43 - 2015-07-09 17:46 - 02229248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2015-07-16 09:43 - 2015-07-09 17:38 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe 2015-07-16 09:43 - 2015-07-09 17:37 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll 2015-07-16 09:43 - 2015-07-09 17:35 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2015-07-16 09:43 - 2015-07-09 17:34 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2015-07-16 09:43 - 2015-06-27 05:08 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2015-07-16 09:43 - 2015-06-27 05:08 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2015-07-16 09:43 - 2015-06-27 04:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2015-07-16 09:42 - 2015-06-25 04:31 - 04177920 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2015-07-16 09:41 - 2015-06-27 05:13 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2015-07-16 09:41 - 2015-06-27 05:12 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2015-07-16 09:41 - 2015-06-27 05:12 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2015-07-16 09:40 - 2015-06-28 07:07 - 00442712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2015-07-16 09:40 - 2015-06-28 07:07 - 00178008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2015-07-16 09:40 - 2015-06-28 07:06 - 01311960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2015-07-16 09:40 - 2015-06-28 07:06 - 00332120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2015-07-16 09:40 - 2015-06-27 18:42 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2015-07-16 09:40 - 2015-06-27 04:40 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll 2015-07-16 09:40 - 2015-06-27 04:05 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2015-07-16 09:40 - 2015-06-27 04:00 - 00989184 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2015-07-16 09:40 - 2015-06-27 03:53 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll 2015-07-16 09:40 - 2015-06-27 03:26 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2015-07-16 09:39 - 2015-05-30 23:18 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll 2015-07-16 09:39 - 2015-05-30 21:36 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2015-07-16 09:39 - 2015-05-30 21:35 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2015-07-16 09:38 - 2015-06-16 00:41 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe 2015-07-16 09:38 - 2015-06-16 00:24 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2015-07-16 09:38 - 2015-06-15 23:16 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe 2015-07-16 09:38 - 2015-06-15 23:09 - 03607552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2015-07-16 09:38 - 2015-06-15 22:50 - 02774528 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2015-07-16 09:38 - 2015-06-15 21:57 - 02460160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2015-07-16 09:36 - 2015-07-02 00:08 - 05923840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2015-07-16 09:36 - 2015-07-01 23:14 - 04520448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2015-07-16 09:34 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2015-07-16 09:34 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2015-07-16 09:34 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2015-07-16 09:34 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2015-07-16 09:34 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2015-07-16 09:34 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2015-07-16 09:34 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2015-07-16 09:34 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2015-07-16 09:32 - 2015-06-16 00:39 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2015-07-16 09:32 - 2015-06-16 00:38 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2015-07-16 09:32 - 2015-06-16 00:26 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll 2015-07-16 09:32 - 2015-06-16 00:24 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2015-07-16 09:32 - 2015-06-16 00:02 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx 2015-07-16 09:32 - 2015-06-15 23:58 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2015-07-16 09:32 - 2015-06-15 23:57 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2015-07-16 09:32 - 2015-06-15 23:56 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2015-07-16 09:32 - 2015-06-15 23:55 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2015-07-16 09:32 - 2015-06-15 23:49 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2015-07-16 09:32 - 2015-06-15 23:41 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2015-07-16 09:32 - 2015-06-15 23:38 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2015-07-16 09:32 - 2015-06-15 23:36 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2015-07-16 09:32 - 2015-06-15 23:17 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2015-07-16 09:32 - 2015-06-15 23:16 - 02427392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2015-07-16 09:32 - 2015-06-15 23:15 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2015-07-16 09:32 - 2015-06-15 23:13 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll 2015-07-16 09:32 - 2015-06-15 23:04 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll 2015-07-16 09:32 - 2015-06-15 23:03 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2015-07-16 09:32 - 2015-06-15 22:52 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2015-07-16 09:32 - 2015-06-15 22:47 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx 2015-07-16 09:32 - 2015-06-15 22:44 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2015-07-16 09:32 - 2015-06-15 22:43 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2015-07-16 09:32 - 2015-06-15 22:42 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2015-07-16 09:32 - 2015-06-15 22:41 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2015-07-16 09:32 - 2015-06-15 22:37 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2015-07-16 09:32 - 2015-06-15 22:32 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2015-07-16 09:32 - 2015-06-15 22:31 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2015-07-16 09:32 - 2015-06-15 22:30 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2015-07-16 09:32 - 2015-06-15 22:30 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2015-07-16 09:32 - 2015-06-15 22:17 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2015-07-16 09:32 - 2015-06-15 22:07 - 01951232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2015-07-16 09:32 - 2015-06-15 22:02 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2015-07-15 21:20 - 2015-06-11 05:49 - 01380600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2015-07-15 21:20 - 2015-06-10 18:13 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2015-07-15 21:20 - 2015-05-11 18:34 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll 2015-07-15 21:19 - 2015-06-16 07:36 - 01661576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2015-07-15 21:19 - 2015-06-16 07:36 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2015-07-15 21:19 - 2015-05-12 15:19 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2015-07-15 21:19 - 2015-05-07 18:47 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll 2015-07-15 21:19 - 2015-05-02 01:33 - 00410739 _____ C:\WINDOWS\system32\ApnDatabase.xml 2015-07-15 21:19 - 2015-04-28 15:13 - 00513480 _____ C:\WINDOWS\SysWOW64\locale.nls 2015-07-15 21:19 - 2015-04-28 15:13 - 00513480 _____ C:\WINDOWS\system32\locale.nls 2015-07-15 21:19 - 2015-04-23 17:47 - 03084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2015-07-15 21:19 - 2015-04-23 17:16 - 02471424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2015-07-15 21:18 - 2015-05-03 17:07 - 07784448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2015-07-15 21:18 - 2015-05-03 16:57 - 05264384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2015-07-15 12:08 - 2015-07-23 12:28 - 00003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1 2015-07-13 13:21 - 2015-07-18 16:07 - 00007678 _____ C:\WINDOWS\DPINST.LOG 2015-07-12 19:56 - 2015-07-12 19:56 - 00000000 _____ C:\Users\Micha_000\AppData\Local\{D2C6117B-095A-4BAB-B770-7A033EDC2AD3} 2015-07-12 19:53 - 2015-07-23 12:32 - 00003533 _____ C:\WINDOWS\setupact.log 2015-07-12 19:53 - 2015-07-12 19:53 - 00000000 _____ C:\WINDOWS\setuperr.log 2015-07-12 19:52 - 2015-07-23 12:31 - 00011848 _____ C:\WINDOWS\PFRO.log 2015-07-10 14:20 - 2015-07-10 14:20 - 00003694 _____ C:\WINDOWS\System32\Tasks\Adobe-Online-Aktualisierungsprogramm 2015-07-09 14:49 - 2015-07-09 14:49 - 00002080 _____ C:\Users\Micha_000\Desktop\Minecraft Launcher - Verknüpfung.lnk 2015-07-07 14:28 - 2015-07-18 16:08 - 00001960 _____ C:\Users\Public\Desktop\G DATA INTERNET SECURITY.lnk 2015-07-07 14:28 - 2015-07-13 13:21 - 00091648 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\PktIcpt.sys 2015-07-07 14:28 - 2015-07-07 14:28 - 00027648 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDKBB64.sys 2015-07-07 14:28 - 2015-07-07 14:28 - 00020992 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDKBFlt64.sys 2015-07-07 14:27 - 2015-07-23 12:31 - 00000000 ____D C:\WINDOWS\ELAMBKUP 2015-07-07 14:27 - 2015-07-18 16:08 - 00068608 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\gdwfpcd64.sys 2015-07-07 14:27 - 2015-07-13 13:21 - 00230912 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\MiniIcpt.sys 2015-07-07 14:27 - 2015-07-13 13:21 - 00158720 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDBehave.sys 2015-07-07 14:27 - 2015-07-13 13:21 - 00125952 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\HookCentre.sys 2015-07-07 13:59 - 2015-07-07 14:07 - 226997104 _____ (G Data Software AG) C:\Users\Micha_000\Downloads\INT_R_BASE_IS(1).exe 2015-07-07 13:37 - 2015-07-17 10:10 - 00002305 _____ C:\Users\Micha_000\Desktop\Autodesk Inventor 2015 jetzt installieren.lnk 2015-07-07 13:33 - 2015-07-07 13:33 - 00000870 _____ C:\Users\Public\Desktop\Autodesk Vault Basic 2015.lnk 2015-07-07 13:33 - 2015-07-07 13:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk Data Management 2015-07-07 13:26 - 2015-07-07 13:26 - 00001688 _____ C:\Users\Public\Desktop\Autodesk ReCap.lnk 2015-07-07 13:26 - 2015-07-07 13:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk ReCap 2015-07-07 13:26 - 2015-07-07 13:26 - 00000000 ____D C:\ProgramData\FARO 2015-07-07 13:26 - 2015-07-07 13:26 - 00000000 ____D C:\Program Files (x86)\Microsoft WSE 2015-07-07 13:15 - 2015-07-07 13:15 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Autodesk,_Inc 2015-07-07 13:09 - 2015-07-07 13:33 - 00000000 ____D C:\Users\Micha_000\Documents\Inventor 2015-07-07 12:50 - 2015-07-07 12:50 - 00001792 _____ C:\Users\Public\Desktop\Autodesk Inventor Professional 2015.lnk 2015-07-07 12:50 - 2015-07-07 12:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk Inventor 2015 2015-07-07 12:27 - 2015-07-07 12:27 - 00002157 _____ C:\Users\Public\Desktop\Autodesk Design Review 2013.lnk 2015-07-07 12:24 - 2015-07-07 12:24 - 00002223 _____ C:\Users\Public\Desktop\DWG TrueView 2015 - English.lnk 2015-07-07 12:24 - 2015-07-07 12:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DWG TrueView 2015 - English 2015-07-07 11:40 - 2015-07-07 13:41 - 07533018 _____ C:\Users\Micha_000\Downloads\Autodesk_Inventor_2015_R1_German_Win_64bit_wi_de-DE_Setup.exe 2015-07-07 11:40 - 2015-07-07 11:40 - 00337832 _____ (Autodesk Inc.) C:\Users\Micha_000\Downloads\Autodesk_Inventor_2015_R1_German_Win_64bit_wi_de-DE_Setup_webinstall.exe 2015-07-06 23:36 - 2015-07-06 23:36 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft 2015-07-06 23:35 - 2015-07-09 14:58 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\.minecraft 2015-07-06 23:28 - 2015-04-14 12:24 - 00311200 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe 2015-07-06 23:28 - 2015-04-14 12:24 - 00188832 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe 2015-07-06 23:28 - 2015-04-14 12:24 - 00188320 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe 2015-07-06 22:49 - 2015-07-06 22:49 - 00000000 ____D C:\Users\Micha_000\Downloads\Album Wochenende Rapper 2015-07-06 22:44 - 2015-07-06 22:44 - 00000098 _____ C:\Users\Micha_000\Downloads\17a4fefc-a9cf-4e34-8dd5-588aba6f55b7.htm 2015-07-06 22:42 - 2015-07-06 22:46 - 00000000 ____D C:\Users\Micha_000\Downloads\Minecraft 1.8 by TeamExtremeMc.com 2015-07-06 22:38 - 2015-07-16 20:07 - 00000000 ____D C:\Users\Micha_000\Desktop\HiWi_Dokumente 2015-07-06 14:05 - 2015-07-06 14:24 - 60149697 _____ C:\Users\Micha_000\Downloads\WK13AWR.rar.part 2015-07-03 13:36 - 2015-07-03 13:36 - 50502393 _____ C:\Users\Micha_000\Downloads\Weekend - FCKWKND (16BARS.TV PREMIERE).mp4 2015-07-03 11:16 - 2015-07-03 11:16 - 00001121 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-07-03 11:13 - 2015-07-03 11:14 - 00242928 _____ C:\Users\Micha_000\Downloads\Firefox Setup Stub 39.0.exe 2015-06-30 17:12 - 2015-07-23 12:24 - 00001252 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002UA.job 2015-06-30 17:12 - 2015-07-18 14:23 - 00001200 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002Core.job 2015-06-30 17:12 - 2015-07-18 14:18 - 00004206 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002UA 2015-06-30 17:12 - 2015-07-18 14:18 - 00003826 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002Core 2015-06-30 17:12 - 2015-06-30 17:12 - 00122759 _____ C:\Users\Micha_000\Downloads\A0-ME-mit-Hilfen_01.dwt 2015-06-30 17:12 - 2015-06-30 17:12 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Dropbox 2015-06-30 17:12 - 2015-06-30 17:12 - 00000000 ____D C:\ProgramData\Dropbox 2015-06-30 16:04 - 2015-06-30 16:11 - 00000000 ____D C:\Users\Micha_000\Desktop\Nina Urlaub 2015-06-24 13:10 - 2015-06-24 13:10 - 00009336 ____N (G DATA Software AG) C:\WINDOWS\SysWOW64\GdScrSv.de.dll 2015-06-24 12:06 - 2015-06-24 12:06 - 02230392 ____N (G Data Software AG) C:\WINDOWS\SysWOW64\GdScrSv.scr ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-07-23 13:00 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru 2015-07-23 12:56 - 2014-06-10 17:20 - 00000000 ____D C:\Users\Micha_000 2015-07-23 12:51 - 2014-06-10 17:13 - 01081157 _____ C:\WINDOWS\WindowsUpdate.log 2015-07-23 12:46 - 2015-01-05 17:43 - 00000000 ____D C:\Users\Micha_000\Desktop\Studium 2015-07-23 12:45 - 2014-03-28 14:24 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2015-07-23 12:44 - 2014-03-28 22:04 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-995147136-1539619246-4169388671-1002 2015-07-23 12:40 - 2014-06-30 18:47 - 00001126 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2015-07-23 12:34 - 2014-06-10 17:50 - 00000000 ___DO C:\Users\Micha_000\OneDrive 2015-07-23 12:32 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2015-07-23 12:31 - 2013-08-22 15:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI 2015-07-23 12:28 - 2015-05-26 12:02 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2 2015-07-23 12:22 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM 2015-07-23 12:21 - 2014-06-30 18:47 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2015-07-23 07:29 - 2014-03-29 13:29 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Dropbox 2015-07-22 23:43 - 2013-08-22 16:44 - 00489576 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2015-07-22 23:39 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp 2015-07-22 22:53 - 2014-11-02 18:31 - 00000000 ____D C:\ProgramData\Origin 2015-07-22 22:50 - 2014-11-02 18:57 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Origin 2015-07-22 22:50 - 2014-11-02 18:35 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Origin 2015-07-22 21:34 - 2015-03-06 23:21 - 00000000 ____D C:\Users\Micha_000\Downloads\RollerCoaster Tycoon 3 Platinum 2015-07-21 11:53 - 2015-05-20 12:43 - 00000987 _____ C:\Users\Micha_000\Documents\plot.log 2015-07-21 11:53 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness 2015-07-19 23:30 - 2014-07-07 09:13 - 00000000 ____D C:\Users\Micha_000\AppData\Local\G DATA 2015-07-19 23:29 - 2014-04-15 17:53 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\BitTorrent 2015-07-19 20:09 - 2014-03-29 13:34 - 00000000 ___RD C:\Users\Micha_000\Dropbox 2015-07-18 16:08 - 2014-04-28 19:37 - 00000000 ____D C:\ProgramData\G Data 2015-07-17 10:51 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache 2015-07-17 10:07 - 2015-04-13 16:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk 2015-07-17 09:53 - 2015-04-13 16:13 - 00000000 ____D C:\Program Files\Autodesk 2015-07-17 09:53 - 2015-04-13 16:04 - 00000000 ____D C:\Program Files (x86)\Autodesk 2015-07-17 08:51 - 2015-04-13 15:55 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Akamai 2015-07-17 08:44 - 2015-04-19 09:03 - 00000000 ____D C:\WINDOWS\system32\appraiser 2015-07-17 08:44 - 2015-03-17 20:44 - 00000000 ___SD C:\WINDOWS\system32\CompatTel 2015-07-17 08:44 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData 2015-07-17 08:44 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\WinStore 2015-07-16 14:20 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\FxsTmp 2015-07-16 12:53 - 2015-01-01 23:37 - 00003886 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2015-07-16 12:53 - 2014-04-04 15:28 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2015-07-16 10:15 - 2014-06-30 18:47 - 00004102 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2015-07-16 10:15 - 2014-06-30 18:47 - 00003866 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2015-07-15 21:23 - 2014-03-29 22:39 - 00000000 ____D C:\WINDOWS\system32\MRT 2015-07-14 17:57 - 2014-07-03 10:02 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Adobe 2015-07-14 17:55 - 2014-03-28 14:24 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2015-07-14 12:41 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\NDF 2015-07-14 11:43 - 2014-03-18 12:03 - 01776918 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2015-07-14 11:43 - 2014-03-18 11:25 - 00765582 _____ C:\WINDOWS\system32\perfh007.dat 2015-07-14 11:43 - 2014-03-18 11:25 - 00159366 _____ C:\WINDOWS\system32\perfc007.dat 2015-07-13 23:31 - 2015-04-10 16:20 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX 2015-07-13 23:31 - 2015-04-10 16:20 - 00000000 ___SD C:\WINDOWS\system32\GWX 2015-07-13 23:10 - 2015-03-17 20:52 - 00792568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2015-07-13 23:10 - 2015-03-17 20:52 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2015-07-10 14:27 - 2014-09-04 21:01 - 00000000 ____D C:\Program Files (x86)\Steam 2015-07-10 14:27 - 2014-04-15 18:05 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2015-07-10 14:24 - 2014-06-10 18:09 - 00000000 ___DC C:\WINDOWS\Panther 2015-07-10 14:24 - 2014-06-10 17:34 - 00000000 ____D C:\WINDOWS\Minidump 2015-07-10 14:24 - 2014-03-28 17:09 - 00000000 ____D C:\Users\Micha_000\AppData\Local\CrashDumps 2015-07-10 11:36 - 2015-04-13 15:57 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Autodesk 2015-07-07 14:27 - 2014-07-07 08:47 - 00001755 _____ C:\Users\Micha_000\AppData\Roaming\gdscan.log 2015-07-07 14:25 - 2014-04-28 19:37 - 00000000 ____D C:\Program Files (x86)\G Data 2015-07-07 13:37 - 2015-04-13 16:26 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autodesk 2015-07-07 13:33 - 2015-04-13 16:13 - 00000000 ____D C:\Users\Public\Documents\Autodesk 2015-07-07 13:33 - 2015-04-13 15:57 - 00000000 ____D C:\ProgramData\Autodesk 2015-07-07 13:09 - 2015-04-13 16:20 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Autodesk 2015-07-07 12:49 - 2015-04-13 16:13 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared 2015-07-07 12:00 - 2014-04-19 14:00 - 00000000 ____D C:\ProgramData\Package Cache 2015-07-07 12:00 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2015-07-07 11:41 - 2015-04-13 15:54 - 00000000 ____D C:\Autodesk 2015-07-06 23:27 - 2015-04-14 12:24 - 00000000 ____D C:\Program Files\Java 2015-07-03 11:16 - 2015-06-02 19:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-07-03 11:16 - 2014-03-28 22:08 - 00001133 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-07-03 11:15 - 2014-03-28 22:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-07-03 08:43 - 2014-03-29 22:39 - 130333168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe ==================== Files in the root of some directories ======= 2014-07-07 08:47 - 2014-07-07 08:47 - 0000000 _____ () C:\Users\Micha_000\AppData\Roaming\gdfw.log 2014-07-07 08:47 - 2015-07-07 14:27 - 0001755 _____ () C:\Users\Micha_000\AppData\Roaming\gdscan.log 2014-07-17 11:38 - 2002-09-10 02:00 - 0351048 _____ () C:\Users\Micha_000\AppData\Roaming\omch.dll 2015-01-11 20:19 - 2015-01-11 20:19 - 0003400 _____ () C:\Users\Micha_000\AppData\Local\recently-used.xbel 2014-03-29 10:40 - 2014-03-29 10:40 - 0007609 _____ () C:\Users\Micha_000\AppData\Local\Resmon.ResmonCfg 2015-07-12 19:56 - 2015-07-12 19:56 - 0000000 _____ () C:\Users\Micha_000\AppData\Local\{D2C6117B-095A-4BAB-B770-7A033EDC2AD3} 2014-06-10 17:12 - 2014-06-10 17:12 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2015-04-13 16:18 - 2015-04-13 16:18 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc 2013-04-26 01:15 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd 2013-04-26 01:15 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe 2013-04-26 01:15 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS 2013-11-21 20:46 - 2013-11-21 20:46 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log 2013-11-21 20:42 - 2013-11-21 20:44 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log 2013-11-21 20:44 - 2013-11-21 20:45 - 0000108 _____ () C:\ProgramData\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}.log 2013-11-21 20:41 - 2013-11-21 20:42 - 0000110 _____ () C:\ProgramData\{E3739848-5329-48E3-8D28-5BBD6E8BE384}.log Files to move or delete: ==================== C:\ProgramData\SetStretch.VBS Some files in TEMP: ==================== C:\Users\Micha_000\AppData\Local\Temp\AcDeltree.exe C:\Users\Micha_000\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpihefjg.dll C:\Users\Micha_000\AppData\Local\Temp\DseShExt-x64.dll C:\Users\Micha_000\AppData\Local\Temp\DseShExt-x86.dll C:\Users\Micha_000\AppData\Local\Temp\HitmanPro.exe C:\Users\Micha_000\AppData\Local\Temp\Quarantine.exe C:\Users\Micha_000\AppData\Local\Temp\SDShelEx-win32.dll C:\Users\Micha_000\AppData\Local\Temp\SDShelEx-x64.dll C:\Users\Micha_000\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-07-23 09:02 ==================== End of log ============================ Code:
ATTFilter Virenprüfung von Web-Inhalten Adresse: hxxp://i.mgicinjs.info/mgicin/javascript.js Junkware (PUP): Script.Adware.DealPly.G (Engine B) Status: Der Zugriff wurde verweigert. Hoffe hier kann mir jemand helfen, im Vorraus schonmal: PS.: Ich hoffe, ich habe beim Posten keine Forenregelungen verletzt, bin neu hier! |
23.07.2015, 13:19 | #2 |
/// the machine /// TB-Ausbilder | G Data meldet Junkware (PUP): Script.Adware.DealPly.G (Engine B) Hi,
__________________Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen. Ich kann auf Arbeit keine Anhänge öffnen, danke. So funktioniert es: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
23.07.2015, 14:24 | #3 |
| G Data meldet Junkware (PUP): Script.Adware.DealPly.G (Engine B) Ah, okay, das wusste ich nicht, sorry!
__________________Dann die Additions.txt nochmal so: [CODE]Additional FRST Logfile: Code:
ATTFilter scan result of Farbar Recovery Scan Tool (x64) Version:20-07-2015 Ran by Micha_000 at 2015-07-23 13:02:51 Running from C:\Users\Micha_000\Downloads Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-995147136-1539619246-4169388671-500 - Administrator - Disabled) Gast (S-1-5-21-995147136-1539619246-4169388671-501 - Limited - Enabled) => C:\Users\Gast HomeGroupUser$ (S-1-5-21-995147136-1539619246-4169388671-1006 - Limited - Enabled) Micha_000 (S-1-5-21-995147136-1539619246-4169388671-1002 - Administrator - Enabled) => C:\Users\Micha_000 ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: G DATA INTERNET SECURITY (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: G DATA INTERNET SECURITY (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: G*DATA Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - ) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated) Adobe Reader XI (11.0.12) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated) Akamai NetSession Interface (HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Akamai) (Version: - Akamai Technologies, Inc) Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Assassin's Creed Liberation HD (HKLM-x32\...\Assassin's Creed Liberation HD_is1) (Version: - ) ASUS Console (HKLM\...\{6D989E08-8143-4AB8-B0A8-5B836235CAA4}) (Version: 1.0.3 - ASUS) ASUS Instant Key (HKLM-x32\...\{D97A1B80-131F-4692-9543-E652956D8B99}) (Version: 1.1.3 - ASUS) ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.4 - ASUS) ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 3.0.6 - ASUS) ASUS Screen Saver (HKLM\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 1.0.1 - ASUS) ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.2.5 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 2.01.0018 - ASUS) ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 3.1.7 - ASUS) ASUS Video Magic (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.5005 - CyberLink Corp.) ASUS Video Magic (x32 Version: 6.0.5005 - CyberLink Corp.) Hidden ASUS WebStorage Sync Agent (HKLM-x32\...\ASUS WebStorage) (Version: 1.1.18.159 - ASUS Cloud Corporation) ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4924.52 - CyberLink Corp.) ASUSDVD (x32 Version: 10.0.4924.52 - CyberLink Corp.) Hidden AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.310 - ASUSTEK) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0030 - ASUS) Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team) AutoCAD Mechanical 2014 - Deutsch (German) (Version: 18.0.17.0 - Autodesk) Hidden AutoCAD Mechanical 2014 Language Pack - Deutsch (German) (Version: 18.0.17.0 - Autodesk) Hidden Autodesk 360 (HKLM\...\{556966D9-F7F6-421B-9707-D07901604DDF}) (Version: 5.1.2.1000 - Autodesk) Autodesk App Manager (HKLM-x32\...\{C8125548-F2D5-4059-823F-1F3C5BBD9F19}) (Version: 1.2.0 - Autodesk) Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 4.0.69.0 - Autodesk) Autodesk AutoCAD Mechanical 2014 - Deutsch (German) (HKLM\...\AutoCAD Mechanical 2014 - Deutsch (German)) (Version: 18.0.17.0 - Autodesk) Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.1.3.0 - Autodesk) Autodesk Content Service (x32 Version: 3.1.3.0 - Autodesk) Hidden Autodesk Content Service (x32 Version: 3.2.0.0 - Autodesk) Hidden Autodesk Content Service Language Pack (x32 Version: 3.1.3.0 - Autodesk) Hidden Autodesk Content Service Language Pack (x32 Version: 3.2.0.0 - Autodesk) Hidden Autodesk Design Review 2013 (HKLM-x32\...\Autodesk Design Review 2013) (Version: 13.0.0.82 - Autodesk, Inc.) Autodesk Design Review 2013 (x32 Version: 13.0.0.82 - Autodesk, Inc.) Hidden Autodesk DWG TrueView 2015 - English (HKLM\...\DWG TrueView 2015 - English) (Version: 20.0.51.0 - Autodesk) Autodesk Inventor Content Center Libraries 2015 (Desktop Content) (HKLM\...\{B46DECD1-1964-4EF1-0000-22D71E81877C}) (Version: 19.0.15900.0000 - Autodesk) Autodesk Inventor Professional 2015 - Deutsch (German) (HKLM\...\Autodesk Inventor Professional 2015) (Version: 19.0.15900.0000 - Autodesk) Autodesk Inventor Professional 2015 (Version: 19.0.15900.0000 - Autodesk) Hidden Autodesk Inventor Professional 2015 Language Pack - Deutsch (German) (Version: 19.0.15900.0000 - Autodesk) Hidden Autodesk Material Library 2014 (HKLM-x32\...\{644F9B19-A462-499C-BF4D-300ABC2A28B1}) (Version: 4.0.19.0 - Autodesk) Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk) Autodesk Material Library Base Resolution Image Library 2014 (HKLM-x32\...\{51BF3210-B825-4092-8E0D-66D689916E02}) (Version: 4.0.19.0 - Autodesk) Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk) Autodesk Material Library Low Resolution Image Library 2015 (HKLM-x32\...\{4FBC9635-AC56-4378-8FDE-C4D3ED072681}) (Version: 5.2.9.100 - Autodesk) Autodesk ReCap (HKLM\...\Autodesk ReCap) (Version: 1.3.3.1 - Autodesk) Autodesk ReCap (Version: 1.3.3.1 - Autodesk) Hidden Autodesk Vault Basic 2015 (Client) (HKLM\...\Autodesk Vault Basic 2015 (Client)) (Version: 19.0.49.0 - Autodesk) Autodesk Vault Basic 2015 (Client) (Version: 19.0.49.0 - Autodesk) Hidden Autodesk Vault Basic 2015 (Client) German Language Pack (Version: 19.0.49.0 - Autodesk) Hidden AxCrypt 1.7.3156.0 (HKLM\...\{8B49CDB9-824C-44D6-A5D3-D0235D3030B8}) (Version: 1.7.3156.0 - Axantum Software AB) BitTorrent (HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\BitTorrent) (Version: 7.9.3.40761 - BitTorrent Inc.) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) calibre 64bit (HKLM\...\{C7530E59-3196-4EFD-A7EE-C0BFD80026BC}) (Version: 1.46.0 - Kovid Goyal) Canon MG5100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5100_series) (Version: - Canon Inc.) CyberLink MediaEspresso 6.5 (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.3718_45957 - CyberLink Corp.) CyberLink PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.5817a - CyberLink Corp.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd) Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.5.139.1020 - Electronic Arts Inc.) Dropbox (HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Dropbox) (Version: 3.6.9 - Dropbox, Inc.) DWG TrueView 2015 - English (Version: 20.0.51.0 - Autodesk) Hidden FarCry 4 (HKLM-x32\...\Uplay Install 420) (Version: - Ubisoft) Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden G DATA INTERNET SECURITY (HKLM-x32\...\{AC68D2FF-1674-4C16-A536-A69FC11BBD82}) (Version: 25.1.0.7 - G DATA Software AG) Galerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team) Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden GoPro Studio 2.5.4 (HKLM-x32\...\GoPro Studio) (Version: 2.5.4 - GoPro, Inc.) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.10.1372 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation) IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan) iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.) Java 7 Update 21 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417021FF}) (Version: 7.0.210 - Oracle) Java 7 Update 9 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417009F0}) (Version: 7.0.90 - Oracle) JMP Pro 11 (HKLM-x32\...\{01E891AA-F4F0-4BFC-869E-8463F0304F1A}) (Version: 11.0.0 - SAS Institute Inc.) Just Cause 2 (HKLM-x32\...\Steam App 8190) (Version: - Avalanche Studios) LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) Lazarus 1.2.2 (HKLM\...\lazarus_is1) (Version: 1.2.2 - Lazarus Team) Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Minecraft1.8 (HKLM-x32\...\Minecraft1.8) (Version: - ) Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Mozilla Firefox 39.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 39.0 (x86 de)) (Version: 39.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 39.0 - Mozilla) MSXML 4.0 SP2 Parser und SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation) MyBitCast 2.0 (HKLM-x32\...\MyBitCast) (Version: 2.0 - ASUS) NetStress 2.0.9686.0 (HKLM-x32\...\NetStress_is1) (Version: - Nuts About Nets, LLC) NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation) NVIDIA Grafiktreiber 347.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.25 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation) OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation) Origin (HKLM-x32\...\Origin) (Version: 9.4.22.2815 - Electronic Arts, Inc.) Pack 500 track (HKLM-x32\...\Pack 500 track) (Version: 1.0 - ) PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.) PAYDAY: The Heist (HKLM-x32\...\Steam App 24240) (Version: - OVERKILL Software) PDF24 Creator 6.8.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org) Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.305 - Qualcomm Atheros Communications) Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros) QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.) Raccolta foto (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.11.201.2013 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7032 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.) RollerCoaster Tycoon 3 Platinum (HKLM-x32\...\{907B4640-266B-4A21-92FB-CD1A86CD0F63}) (Version: 1.00.000 - Atari) Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14083.9 - Samsung Electronics Co., Ltd.) Samsung Kies3 (x32 Version: 3.2.14083.9 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.33.0 - SAMSUNG Electronics Co., Ltd.) SeeYou Version 6.15 (HKLM-x32\...\SeeYou_is1) (Version: - ) Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee) SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden SketchUp-Import (HKLM-x32\...\{C403E867-FCF1-432B-BCC1-8FFD40A10A6E}) (Version: 1.2.0 - Autodesk) Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) TmNationsForever (HKLM-x32\...\TmNationsForever_is1) (Version: - Nadeo) UFRaw 0.9.1 (HKLM-x32\...\UFRaw_is1) (Version: - Udi Fuchs) Unity Web Player (HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS) Uplay (HKLM-x32\...\Uplay) (Version: 4.8 - Ubisoft) Verfügbare Autodesk-Apps (HKLM-x32\...\{EDDEE94B-214D-4B07-9727-A3E46F3E379A}) (Version: 1.2.0 - Autodesk) Windows Driver Package - ASUS (ATP) Mouse (09/17/2013 1.0.0.186) (HKLM\...\D9E691DCEE7D3B9B7C62A7F5C2EAABBB9335DC9A) (Version: 09/17/2013 1.0.0.186 - ASUS) Windows Driver Package - GoPro (WinUSB) Universal Serial Bus devices (03/07/2012 ) (HKLM\...\0B624A43DD66DBF5CF3EDFA9741A364E688062A4) (Version: 03/07/2012 - GoPro) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation) WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS) WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH) XMedia Recode Version 3.1.9.1 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.1.9.1 - XMedia Recode) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{00F064D8-FEC3-48ac-B07D-39C314D1727B}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\TestServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{1029ABC3-2457-11D5-8E9D-0010B541CD80}\localserver32 -> D:\Autodesk\Inventor 2015\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{12545889-6D32-4424-9967-1E1D7BD1F809}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{13009989-EFB5-48C9-8BD2-943E0392BD71}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\RxAppCtrl.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{18A21864-E37B-42b9-9612-2C1E8C450A29}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{1D625598-C876-4C51-8EF5-F9D8F96F62AA}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{1D6DFD6A-9E16-435A-9327-6FFEC6BA372F}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\InprocServer32 -> AcETransmit.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{1E8A29BA-827D-4031-A4A3-AE7999B402F6}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{1EA072EE-57FD-495E-889C-8243C3BDBDBC}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{1FD7F53F-7ED5-439C-9A77-A3821CD09E98}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{20E47D5B-529A-45BD-8E77-BF1A3064A008}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{21DB88B0-BFBF-11D4-8DE6-0010B541CAA8}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\iDrop.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{244298EC-E661-11d4-BC13-0010B5891E89}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\TI.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{2709544A-5B24-4F9F-A5DA-CEC7297D3A4E}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{2BCA857B-A18B-4AFA-B183-CC0E49C12058}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{2C74F89E-7421-46B4-BA54-F86F1BD9F237}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{2C7D1157-7D50-4A88-9777-5EBBA3189AB8}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{2F8377FC-50C1-44EF-AB7A-8FF1BB8EA277}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{3497C2EC-5684-4B21-AF74-F6760E0221DC}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{3897B445-D5B8-410d-899A-9789B8ADB643}\localserver32 -> D:\Autodesk\Inventor 2015\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{38C8B14E-7879-4DA9-8C3F-8CAAC359293A}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{3C3F63EA-C7BA-11d4-8E60-0010B541CD80}\localserver32 -> D:\Autodesk\Inventor 2015\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{3FC94EB5-AEBD-4f3f-A2A4-B6CE57113C01}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\RxAppDocView.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291}\InprocServer32 -> AcETransmit.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{40770568-0D5E-49D4-BE47-BC47A4F0B0A4}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{44A52280-AE56-490D-890C-89FB7279ED6B}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{45122C53-8483-4b62-B15A-EAA9FE5FC3D5}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA}\InprocServer32 -> AcETransmit.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{4C80573A-9150-11d2-B772-0060B0F159EF}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\RxAppDocView.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{4D29B490-49B2-11D0-93C3-7E0706000000}\localserver32 -> D:\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{4E6F2E83-E7F0-4333-9772-875EB733C820}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\RxTest.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B}\InprocServer32 -> AcETransmit.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{59A224A2-BEF8-4C89-96E0-83A5411ABB6C}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{622F6193-E4DD-46E6-BC66-2ED88E9FD28D}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{62FBB030-24C7-11D3-B78D-0060B0F159EF}\localserver32 -> D:\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{644190AE-BD8F-493F-B63D-C79404AC5E07}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{6451051B-AD22-4C6A-ACCE-013A0E1DDBC3}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{64B99FDB-1D85-447F-98C7-569DBDA723DB}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{6A221957-2D85-42A7-8E19-BE33950D1DEB}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{6BCE6F6E-C050-4F39-BD98-E2743949F724}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{6F56D7C9-18DD-4C15-9FA8-C54E3610EC40}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{6FDE7A70-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{6FDE7A71-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{6FDE7A72-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{6FDE7A73-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{6FDE7A74-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{6FDE7A77-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\DtCp.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{70DBCAE8-8C2B-450C-9E1D-43E4686C6512}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{713C0E8A-5AE8-4695-B442-5ED6C4FE5C42}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3}\InprocServer32 -> AcETransmit.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{72EC5CC5-88F3-45B1-A865-0A327DF58CC8}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{72EFC580-D085-4B81-8C55-26A79E445338}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{750AEC19-2E4C-4ED9-9B9F-F9CAFCD060F3}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{76283A80-50DD-11D3-A7E3-00C04F79D7BC}\localserver32 -> D:\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{7BA16B3F-1AB3-4BD7-B959-52C4B8504EE9}\InprocServer32 -> AcInetUI.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{7DE1BE5C-CEBA-4F1D-ACBC-9CE11EE9A2A1}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{81D07C3D-0350-11D3-B7C2-0060B0EC020B}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\RxAppCtrl.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{834CE679-2E47-49DE-9E41-FEC87E9192EB}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{8421A29C-54B8-11D1-9837-0060B03C43C8}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\SolidObject.Dll () CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{846217D0-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\UCxTextBtn.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{846217D1-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\UCxTextBtn.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{849AFB5B-D6C9-4924-A712-F7118FF9611F}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{85452F88-5071-492E-B850-2E3C586DCBD8}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{87F5CF8F-A06D-498F-A05F-E520E6B570DB}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{89F0FC31-3B1D-494B-A75B-6BD4FA527B8A}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{8AA16DFC-DFC6-4B51-8FA2-A5D812BE33BF}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{8B0E6BD9-610C-11D1-9842-0060B03C43C8}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\SolidObject.Dll () CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\TestServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{8ED07FEF-E1B0-4CC3-B2BA-D354828AB952}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{97E17F04-17DF-11d5-BC38-0010B5891E89}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\BodyReceiver.dll () CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{988F4102-E6E3-4282-ACAC-55270827F2A8}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{9906CDFC-DB2C-4126-9422-13139B148495}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{9A21C6C5-27FC-4442-8590-575E7AFD73BB}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{9ECF83FB-23C5-43B6-83DE-93CFBDD74D4A}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{A58F47CC-FF65-4152-B0B1-666C643A5BFC}\InprocServer32 -> AcETransmit.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{A6A3D586-44CF-44C2-A92C-620BB713B4F2}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{ABBE3F83-D585-4A50-9B69-198B0F566F2E}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{AC5CECFA-F03A-41D2-A89C-704C44935941}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{B1560245-190E-4BBD-81DF-9B642D0E5325}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{B2A579E0-A797-40B1-8AEE-A8F6404719F8}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{B47196BC-D4AB-41BB-A771-543D67CFC9F5}\InprocServer32 -> AcETransmit.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{B53CEF4B-1A13-49DE-BBC5-A7100FB2F38C}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{B5EE2B68-9A23-4BCD-BB77-FEA6DFB24DD6}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{B6B5DC40-96E3-11d2-B774-0060B0F159EF}\localserver32 -> D:\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{B80687F9-FA4C-4735-9DC4-E5715F2BC698}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{B8E7214B-25CA-4116-84CB-E86FB9625B36}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{BAE5802A-CF21-4F9C-AE04-D98F4036AC31}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{BBF6A206-CB04-479D-96AE-349E1E83319A}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{BBF9FDF1-52DC-11D0-8C04-0800090BE8EC}\localserver32 -> D:\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{BC71DEA1-D6FB-48B8-AB06-D151C81BBCDD}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{BD0DEB94-63DB-4392-9420-6EEE05094B1F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{BE54741D-E02B-4572-93D6-105AF4EDE777}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{BF224DC3-B602-4EEE-BFE9-9E4E0AED6837}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{BF4CC07E-E9BB-40D6-873F-855B211033B9}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{C061C82C-D041-4214-BB07-B608107CEFCB}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{C2D4ACCC-A3D1-4A0A-AD59-0DD8BA3D5EE1}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{C343ED84-A129-11d3-B799-0060B0F159EF}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\RxApprenticeServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{C92F8F8C-8B2C-11d4-B872-0060B0EC020B}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{CFEE2BAF-14F9-4D23-853D-B6E2BCC14263}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22}\InprocServer32 -> AcETransmit.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{D7A1987D-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ColorButton.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{D7A1987E-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ColorButton.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{DA1F437C-9BD9-11d4-B87C-0060B0EC020B}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{DB5D476B-3FF4-4E9D-A606-1E2B473BE571}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\AcInetUI.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{DCA7356C-FF94-4b20-AE04-7AA6A8E14117}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{DDA9A20F-5B56-49F5-9465-CE82FC199352}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{DE6B563C-B074-4BF1-A8A0-B3FED8703E99}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{E1C85E9F-60B2-4007-80C3-2C5E09474C3B}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\RxInventorUtilities.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2014\de-DE\acadficn.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\TestServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{E60F81E1-49B3-11D0-93C3-7E0706000000}\localserver32 -> D:\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{F13E75B9-6AF6-49CB-80B3-6D2FF6E09932}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{F2D4F4E5-EEA1-46FF-A83B-A270C92DAE4B}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\DTInterop.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{F61064CC-DBFB-47ee-9BC8-CA5A1CBDF0DA}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\InvResc.dll (Autodesk) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FA62F626-EBD5-4dc5-B970-D9E81E0E20E0}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FB469644-3F14-4403-ACCA-6B13486FF7BD}\localserver32 -> D:\Autodesk\Inventor 2015\Bin\InvTXTStack.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FD703B01-4362-423E-9BDB-91BDCB16C1C9}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\DTInterop.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220}\InprocServer32 -> axdb.dll No File CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1}\InprocServer32 -> axdb.dll No File ==================== Restore Points ========================= 19-07-2015 16:42:33 TuneUp Utilities 2014 wird entfernt 22-07-2015 21:35:58 Installed STOPzilla 7 Install. ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {0F1A5947-04BB-4E69-988E-0EBD9A31A6A1} - System32\Tasks\ASUS InstantOn Config => C:\Program Files\ASUS\P4G\InsOnCfg.exe Task: {1E16583A-0BC4-4A42-BABD-1FF4D7D7A2E8} - System32\Tasks\ASUS Console => C:\Program Files\ASUS\ASUS Console\ASUS Console Starter.exe [2013-08-16] (ASUSTek Computer Inc.) Task: {260A261F-1C3B-4903-993C-7DBC8CED29D8} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2013-07-09] () Task: {36D1A153-282A-4D87-91F2-98A843B3B02B} - System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8 => C:\Program Files\Bitdefender\Bitdefender 2015\bdproductdata.exe Task: {3BA2642B-B377-42C6-913B-48E50F4A366C} - System32\Tasks\{E49BFC09-603C-446D-9310-A363789500BC} => pcalua.exe -a "C:\Program Files (x86)\Atari\RollerCoaster Tycoon 3 Platinum\RCT3plus.exe" -d "C:\Program Files (x86)\Atari\RollerCoaster Tycoon 3 Platinum" Task: {542E0095-843C-4963-87EB-CECAD05A5D10} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-07-03] (Microsoft Corporation) Task: {6022CAF1-3A95-4B8E-8080-55911691534C} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2013-08-19] (ASUS) Task: {62DD64AD-830C-49AF-86C1-B0E12E39CEF8} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002UA => C:\Users\Micha_000\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-30] (Dropbox, Inc.) Task: {6522DBCB-84B5-4533-8B2B-B784E4AC15B6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-30] (Google Inc.) Task: {79F48D2B-DE18-4C99-95DB-9DBE9323D359} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-14] (Adobe Systems Incorporated) Task: {7BBB76FA-5EE6-40F0-9349-4C7E593FED3D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-30] (Google Inc.) Task: {7CB2FF54-B9F1-43D4-AD96-7CC1359ADBF8} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2013-08-16] (ASUSTeK Computer Inc.) Task: {8039B256-F8EB-47DE-86DA-DE236C31F584} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.) Task: {8BFCCB34-6B5C-40E7-A205-69D4746D6DF4} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2015-02-12] () Task: {9B34F10F-51EB-424C-AFC2-A51C62A0DE13} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.) Task: {B796667D-8F6F-42F5-AB7A-2AD68DEF7E0F} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2013-08-29] (ASUS) Task: {D3A76FD0-065B-4532-8E38-37EA00569C3C} - System32\Tasks\{CB434B48-8C53-4A19-B720-188ABE057E5B} => pcalua.exe -a "C:\Program Files (x86)\TmNationsForever\TmForeverLauncher.exe" -d "C:\Program Files (x86)\TmNationsForever" Task: {D41434F6-7171-464D-9018-C5C962594354} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated) Task: {D43CE6F4-C633-4032-AEBC-A9B31D41CF9F} - System32\Tasks\{86138844-4E1C-48F9-89D1-8F3060589E3E} => pcalua.exe -a E:\setup.exe -d E:\ Task: {D8658E11-F172-42AB-85BF-FFBAD35AFF4F} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002Core => C:\Users\Micha_000\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-30] (Dropbox, Inc.) Task: {F185E425-351F-4FCC-A0A5-BC4F68C4E805} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated) Task: {F2A0FEF7-B1BE-4733-AE06-26FE84B733FF} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2013-08-29] (ASUSTek Computer Inc.) Task: {FE27B1EE-9B13-40B5-9C82-7FAE76DA4E3A} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2013-09-23] (AsusTek) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002Core.job => C:\Users\Micha_000\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002UA.job => C:\Users\Micha_000\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (Whitelisted) ============== 2014-05-30 14:13 - 2015-01-10 10:07 - 00012104 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll 2015-06-16 11:17 - 2015-06-16 11:17 - 00382584 ____N () C:\Program Files (x86)\Common Files\G Data\AVKProxy\PktIcpt2x64.dll 2013-02-22 17:05 - 2013-02-22 04:04 - 00157696 _____ () C:\WINDOWS\ERUNT.exe 2013-11-21 20:22 - 2013-06-23 22:05 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2014-05-30 14:13 - 2015-01-10 10:07 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\ProgramData\Temp:054203E4 AlternateDataStreams: C:\Users\Micha_000\OneDrive:ms-properties AlternateDataStreams: C:\Users\Micha_000\Documents\Formeln.jpg:com.dropbox.attributes ==================== Safe Mode (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-995147136-1539619246-4169388671-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Micha_000\AppData\Roaming\Microsoft\Windows Photo Viewer\Hintergrundbild der Windows-Fotoanzeige.jpg DNS Servers: 129.217.129.42 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) HKLM\...\StartupApproved\StartupFolder: => "GoPro Importer.lnk" HKLM\...\StartupApproved\Run: => "NvBackend" HKLM\...\StartupApproved\Run32: => "BDRegion" HKLM\...\StartupApproved\Run32: => "UpdatePSTShortCut" HKLM\...\StartupApproved\Run32: => "RemoteControl10" HKLM\...\StartupApproved\Run32: => "iTunesHelper" HKLM\...\StartupApproved\Run32: => "G Data ASM" HKLM\...\StartupApproved\Run32: => "ADSKAppManager" HKLM\...\StartupApproved\Run32: => "PDFPrint" HKLM\...\StartupApproved\Run32: => "QuickTime Task" HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\StartupApproved\StartupFolder: => "Dropbox.lnk" HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\StartupApproved\Run: => "DAEMON Tools Lite" HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\StartupApproved\Run: => "Akamai NetSession Interface" HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\StartupApproved\Run: => "Autodesk Sync" HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\StartupApproved\Run: => "DevidAgent" HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\StartupApproved\Run: => "Dropbox Update" HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\StartupApproved\Run: => "EADM" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{935EE17C-F709-4773-BA5D-7DDA9A27DF95}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{88618AE9-236C-49DD-9C53-2FA540C291E1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{295C1829-0F0D-4842-87B6-C37E474D71EC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{0A327574-7A6B-4117-97D0-5D02C4BA0E9E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{F71B8C73-3769-48E7-8E44-ADEF4B000CE2}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{DD40DF70-C193-48D4-B3E6-8A8AD0A51457}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{D5BD6AF3-86DB-4C90-9665-9D277F1C4357}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{5F368745-4C5D-4983-B153-7B8EB49C8B56}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{983DF9AC-51B6-407B-914C-E54F275226E7}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{7C8C1AA2-B66B-46D3-A5DC-08B91006C4EB}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{3FFF0FB7-475E-49E8-83BD-EA6B7BEEC632}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe FirewallRules: [{14B9CB64-E7A5-4EC5-8D40-BA204488A315}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe FirewallRules: [{832C775E-D83A-456B-AB20-6F4202743BF2}] => (Allow) C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{AF8ADED2-C6DE-4056-B90A-46D95C7F56D0}] => (Allow) C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{5B7597CB-8464-47DA-9AE4-84D6660C9A71}] => (Allow) C:\Program Files (x86)\Cyberlink\PowerDVD10\PowerDVD10.EXE FirewallRules: [{1DC26C88-E657-464B-BA8C-C720F34B2154}] => (Allow) C:\Program Files (x86)\Cyberlink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe FirewallRules: [{6F9B5EDF-20B9-433A-9880-382776300DB4}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDirector\PDR8.EXE FirewallRules: [{08DF9207-336B-4D4F-B1FD-122BC45D324B}] => (Allow) LPort=1900 FirewallRules: [{CACDB418-5466-44CB-97EB-234638B11E8D}] => (Allow) LPort=2869 FirewallRules: [{8F742722-EB63-4B60-8280-435B83C49A8F}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{01245DFD-66D8-4060-A4D4-EA32525538DC}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe FirewallRules: [{1C44C1E1-5F0F-49BC-A278-3B6AF36DA401}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{3B169D18-050B-48AB-8F67-D4311DFB4883}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{24ABCF6F-C0E0-45BE-88F4-CE89233E3E21}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{A002F52C-D88F-4947-A053-AD32977C00F3}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{62644631-DD2F-45B4-ADC1-EB7FB18CEDC7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe FirewallRules: [{A92D18D5-D544-4E3F-A50F-47BF82AB411C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe FirewallRules: [{4EAEC07F-E813-401C-8435-9072EA4E70E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe FirewallRules: [{C5387DA9-AED5-4428-9E59-B709F6612D28}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe FirewallRules: [{B127F453-789C-4C7B-B942-CDB1982FF35E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Just Cause 2\JustCause2.exe FirewallRules: [{BE1CF53B-436E-4576-8150-043ACCAA4217}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Just Cause 2\JustCause2.exe FirewallRules: [{A1D171BF-134F-401B-B804-3E904CC6E764}] => (Allow) D:\Ubisoft\FarCry 4\bin\FarCry4.exe FirewallRules: [{07F46608-E7A4-4C36-88D4-FB6DD553354E}] => (Allow) D:\Ubisoft\FarCry 4\bin\FarCry4.exe FirewallRules: [{A4FBC3E8-1800-481A-84B2-16C4BF0A3038}] => (Allow) D:\Ubisoft\FarCry 4\bin\IGE_WPF64.exe FirewallRules: [{C9AFCA7A-9885-4DC4-B3D9-0A808F826AB5}] => (Allow) D:\Ubisoft\FarCry 4\bin\IGE_WPF64.exe FirewallRules: [{837236C9-AA97-4294-84FD-88285CB73761}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{D862F272-9EEA-4B99-89CD-C74FAD20A216}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{B3572565-0486-4FB9-ADF1-7DB92D99EED3}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe FirewallRules: [{A41C3FE6-6C5D-408A-95CE-C6D346914404}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe FirewallRules: [TCP Query User{73DE4DD8-27F5-4507-9E5D-E592D302F086}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{CC183B46-DD94-4795-9B01-2D33ADC495F7}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [{B745C93E-E5ED-4D51-AE1B-3D4B0EA41FCC}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe FirewallRules: [{359D2ECF-1615-4C5D-B733-626A79786B48}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe FirewallRules: [{665F67A8-9007-4EEB-9BE6-65B7B426D945}] => (Allow) D:\Program Files (x86)\Origin Games\Syndicate (1993)\data\Game\DOSBox\LAUNCHER.exe FirewallRules: [{F8481C0C-6EC1-4F0D-AFDD-D67734250331}] => (Allow) D:\Program Files (x86)\Origin Games\Syndicate (1993)\data\Game\DOSBox\LAUNCHER.exe FirewallRules: [TCP Query User{1B2F0464-F482-4F31-AC66-3DAD0B1C0E77}C:\users\micha_000\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\micha_000\appdata\local\akamai\netsession_win.exe FirewallRules: [UDP Query User{D59F5760-B252-4A75-B755-FB9B87583627}C:\users\micha_000\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\micha_000\appdata\local\akamai\netsession_win.exe FirewallRules: [{228AD7B6-BC7C-4B2F-B425-B68DD4E5D143}] => (Allow) LPort=50248 FirewallRules: [{897C89C9-A4DF-4E0E-858E-7992AED8FA66}] => (Allow) LPort=50248 ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (07/23/2015 01:02:06 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm FRST64.exe, Version 20.7.2015.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1120 Startzeit: 01d0c5368b4f5b25 Endzeit: 4294967295 Anwendungspfad: C:\Users\Micha_000\Downloads\FRST64.exe Berichts-ID: 40320528-312a-11e5-bf04-bcee7b11dba8 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (07/23/2015 12:18:57 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 3774015 Error: (07/23/2015 12:18:57 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 3774015 Error: (07/23/2015 12:18:57 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (07/23/2015 11:16:06 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 2531 Error: (07/23/2015 11:16:06 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 2531 Error: (07/23/2015 11:16:06 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (07/22/2015 11:37:22 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: vsserv.exe, Version: 18.23.0.1602, Zeitstempel: 0x5582e7ed Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.17736, Zeitstempel: 0x550f4336 Ausnahmecode: 0xc0000374 Fehleroffset: 0x00000000000f0f20 ID des fehlerhaften Prozesses: 0x9e0 Startzeit der fehlerhaften Anwendung: 0xvsserv.exe0 Pfad der fehlerhaften Anwendung: vsserv.exe1 Pfad des fehlerhaften Moduls: vsserv.exe2 Berichtskennung: vsserv.exe3 Vollständiger Name des fehlerhaften Pakets: vsserv.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: vsserv.exe5 Error: (07/22/2015 09:35:57 PM) (Source: MsiInstaller) (EventID: 1002) (User: ARCUS) Description: Nicht erwarteter oder fehlender Wert (Name: "PackageCode", Wert: "GUID") für Schlüssel "HKLM\Software\Classes\Installer\Products\B476F94747628E7478C965620AB6A219". Error: (07/22/2015 09:35:44 PM) (Source: MsiInstaller) (EventID: 1002) (User: ARCUS) Description: Nicht erwarteter oder fehlender Wert (Name: "PackageCode", Wert: "GUID") für Schlüssel "HKLM\Software\Classes\Installer\Products\B476F94747628E7478C965620AB6A219". System errors: ============= Error: (07/23/2015 12:40:36 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts. Error: (07/23/2015 12:40:36 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (07/23/2015 12:40:36 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Intel(R) ME Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (07/23/2015 12:40:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "ZAtheros Bt and Wlan Coex Agent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (07/23/2015 12:40:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Cyberlink RichVideo Service(CRVS)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (07/23/2015 12:40:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "NVIDIA Streamer Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (07/23/2015 12:40:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "NVIDIA Network Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (07/23/2015 12:40:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Autodesk Simulation Moldflow MITSI 2015 Job-Manager" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (07/23/2015 12:40:34 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Intel(R) Capability Licensing Service Interface" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts. Error: (07/23/2015 12:40:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "NVIDIA GeForce Experience Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Microsoft Office: ========================= Error: (07/23/2015 01:02:06 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: FRST64.exe20.7.2015.0112001d0c5368b4f5b254294967295C:\Users\Micha_000\Downloads\FRST64.exe40320528-312a-11e5-bf04-bcee7b11dba8 Error: (07/23/2015 12:18:57 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 3774015 Error: (07/23/2015 12:18:57 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 3774015 Error: (07/23/2015 12:18:57 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (07/23/2015 11:16:06 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 2531 Error: (07/23/2015 11:16:06 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 2531 Error: (07/23/2015 11:16:06 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (07/22/2015 11:37:22 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: vsserv.exe18.23.0.16025582e7edntdll.dll6.3.9600.17736550f4336c000037400000000000f0f209e001d0c4c32e8695eeC:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exeC:\WINDOWS\SYSTEM32\ntdll.dlld59d2835-30b9-11e5-bf01-bcee7b11dba8 Error: (07/22/2015 09:35:57 PM) (Source: MsiInstaller) (EventID: 1002) (User: ARCUS) Description: PackageCodeGUIDHKLM\Software\Classes\Installer\Products\B476F94747628E7478C965620AB6A219(NULL)(NULL)(NULL) Error: (07/22/2015 09:35:44 PM) (Source: MsiInstaller) (EventID: 1002) (User: ARCUS) Description: PackageCodeGUIDHKLM\Software\Classes\Installer\Products\B476F94747628E7478C965620AB6A219(NULL)(NULL)(NULL) ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-4700HQ CPU @ 2.40GHz Percentage of memory in use: 30% Total physical RAM: 8075.18 MB Available physical RAM: 5626.05 MB Total Virtual: 9355.18 MB Available Virtual: 6612.89 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:372.17 GB) (Free:104.74 GB) NTFS ==>[system with boot components (obtained from reading drive)] Drive d: (DATA) (Fixed) (Total:537.8 GB) (Free:408.38 GB) NTFS Drive e: (Sims4EP01) (CDROM) (Total:1.6 GB) (Free:0 GB) UDF ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: 5B98F280) Partition: GPT Partition Type. ==================== End of log ============================ |
24.07.2015, 06:47 | #4 |
/// the machine /// TB-Ausbilder | G Data meldet Junkware (PUP): Script.Adware.DealPly.G (Engine B) Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
24.07.2015, 11:24 | #5 |
| G Data meldet Junkware (PUP): Script.Adware.DealPly.G (Engine B) mbam.txt Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 24.07.2015 Suchlaufzeit: 11:09 Protokolldatei: mbam.txt Administrator: Ja Version: 2.1.8.1057 Malware-Datenbank: v2015.07.24.04 Rootkit-Datenbank: v2015.07.22.01 Lizenz: Testversion Malware-Schutz: Aktiviert Schutz vor bösartigen Websites: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: Micha_000 Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 453845 Abgelaufene Zeit: 14 Min., 42 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 2 PUP.Optional.Downloader, C:\Users\Micha_000\Downloads\Steam - CHIP-Installer.exe, In Quarantäne, [7a1a8b5a4a40c076eceead9bb54bb14f], PUP.Optional.Downloader, C:\Users\Micha_000\Downloads\Samsung Android USB Composite Device Treiber - CHIP-Installer.exe, In Quarantäne, [3b5911d46624f93d34a677d1ab55b050], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) AdwCleaner[S1] Code:
ATTFilter # AdwCleaner v4.208 - Bericht erstellt 24/07/2015 um 11:32:42 # Aktualisiert 09/07/2015 von Xplode # Datenbank : 2015-07-15.1 [Server] # Betriebssystem : Windows 8.1 (x64) # Benutzername : Micha_000 - ARCUS # Gestarted von : C:\Users\Micha_000\Desktop\AdwCleaner_4.208(1).exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** ***** [ Geplante Tasks ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** ***** [ Internetbrowser ] ***** -\\ Internet Explorer v11.0.9600.17840 -\\ Mozilla Firefox v39.0 (x86 de) ************************* AdwCleaner[R0].txt - [1719 Bytes] - [19/07/2015 19:01:32] AdwCleaner[R1].txt - [891 Bytes] - [24/07/2015 11:31:16] AdwCleaner[S0].txt - [1732 Bytes] - [19/07/2015 19:02:54] AdwCleaner[S1].txt - [812 Bytes] - [24/07/2015 11:32:42] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [870 Bytes] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 7.5.1 (07.16.2015:1) OS: Windows 8.1 x64 Ran by Micha_000 on 24.07.2015 at 12:12:18,20 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Tasks ~~~ Registry Values ~~~ Registry Keys ~~~ Files Successfully deleted: [File] C:\Users\Micha_000\AppData\Roaming\sp_data.sys ~~~ Folders ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 24.07.2015 at 12:18:05,58 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:20-07-2015 Ran by Micha_000 (administrator) on ARCUS on 24-07-2015 12:19:19 Running from C:\Users\Micha_000\Downloads Loaded Profiles: Micha_000 (Available Profiles: Micha_000 & Gast) Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\GUI\GDSC.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13651672 2013-09-03] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-30] (Realtek Semiconductor) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585928 2015-01-16] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [InstallerLauncher] => "C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-41 (the data entry has 36 more characters). HKLM-x32\...\Run: [ASUS InstantKey] => C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [13936 2013-08-27] (ASUS) HKLM-x32\...\Run: [G Data ASM] => C:\Program Files (x86)\G Data\InternetSecurity\DelayLoader\AutorunDelayLoader.exe [434296 2015-02-20] (G Data Software AG) HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation) HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [493960 2014-12-05] (Autodesk Inc.) HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink) HKLM-x32\...\Run: [UpdatePSTShortCut] => C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe [222504 2013-02-05] (CyberLink Corp.) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.) HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-10-13] (Geek Software GmbH) HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFirewallTray.exe [1864312 2015-06-16] (G DATA Software AG) HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G DATA\InternetSecurity\AVKTray\AVKTray.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe, Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] (Atheros Communications) HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Run: [Akamai NetSession Interface] => C:\Users\Micha_000\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.) HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1193352 2014-05-01] (Autodesk, Inc.) HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Run: [Dropbox Update] => C:\Users\Micha_000\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-30] (Dropbox, Inc.) HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Run: [EADM] => D:\Sims4\Origin\Origin.exe [3632112 2015-07-22] (Electronic Arts) HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd) HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1193352 2014-05-01] (Autodesk, Inc.) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [177624 2015-01-10] (NVIDIA Corporation) AppInit_DLLs: , C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [177624 2015-01-10] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [164568 2015-01-10] (NVIDIA Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GoPro Importer.lnk [2015-07-07] ShortcutTarget: GoPro Importer.lnk -> C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe (GoPro) Startup: C:\Users\Micha_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-07-04] ShortcutTarget: Dropbox.lnk -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.) ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-995147136-1539619246-4169388671-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com HKU\S-1-5-21-995147136-1539619246-4169388671-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-04-14] (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-04-14] (Oracle Corporation) Tcpip\Parameters: [DhcpNameServer] 129.217.129.42 Tcpip\..\Interfaces\{3A923A30-1465-48E7-A82A-6C30F7F2798B}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{DB78376F-9FC3-424E-B0BE-DE5DA1E5F3ED}: [DhcpNameServer] 129.217.129.42 FireFox: ======== FF ProfilePath: C:\Users\Micha_000\AppData\Roaming\Mozilla\Firefox\Profiles\0me8w9ks.default FF NetworkProxy: "ftp", "proxyuk.stealthy.co" FF NetworkProxy: "ftp_port", 3128 FF NetworkProxy: "http", "proxyuk.stealthy.co" FF NetworkProxy: "http_port", 3128 FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co" FF NetworkProxy: "share_proxy_settings", true FF NetworkProxy: "socks", "proxyuk.stealthy.co" FF NetworkProxy: "socks_port", 3128 FF NetworkProxy: "ssl", "proxyuk.stealthy.co" FF NetworkProxy: "ssl_port", 3128 FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-14] () FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\WINDOWS\system32\npDeployJava1.dll [2015-04-14] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.21.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-04-14] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-21] () FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-06-23] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-06-23] (Intel Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-995147136-1539619246-4169388671-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Micha_000\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS) FF Extension: SaveFrom.net helper - C:\Users\Micha_000\AppData\Roaming\Mozilla\Firefox\Profiles\0me8w9ks.default\Extensions\helper@savefrom.net.xpi [2014-11-10] FF Extension: Adblock Plus - C:\Users\Micha_000\AppData\Roaming\Mozilla\Firefox\Profiles\0me8w9ks.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-28] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-05] (Autodesk Inc.) S2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-08-29] (ASUS) S2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] () [File not signed] S2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider) [File not signed] R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.) R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2558072 2015-06-19] (G Data Software AG) R2 AVKService; C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKService.exe [966776 2015-06-16] (G Data Software AG) R2 AVKWCtl; C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKWCtlx64.exe [3711712 2015-06-16] (G Data Software AG) S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation) S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink) R3 GDFwSvc; C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFwSvcx64.exe [3202368 2015-06-19] (G Data Software AG) R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [789624 2015-06-16] (G Data Software AG) S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2015-01-16] (NVIDIA Corporation) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed] R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation) S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-06-23] (Intel Corporation) S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-06-23] (Intel Corporation) S2 mitsijm2015; D:\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe [968480 2013-10-12] (Autodesk, Inc.) S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706312 2015-01-16] (NVIDIA Corporation) S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833544 2015-01-16] (NVIDIA Corporation) S3 Origin Client Service; D:\Sims4\Origin\OriginClientService.exe [2004488 2015-07-22] (Electronic Arts) S2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-04-17] () S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation) S2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-09-07] (Atheros) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70416 2013-09-23] (ASUS Corporation) S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation) R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-04-03] (Disc Soft Ltd) R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [158720 2015-07-13] (G Data Software AG) S0 GDElam; C:\Windows\System32\DRIVERS\GDElam.sys [117904 2015-01-08] (G Data Software AG) R3 GDKBB; C:\WINDOWS\system32\drivers\GDKBB64.sys [27648 2015-07-07] (G Data Software AG) R3 GDKBFlt; C:\WINDOWS\system32\drivers\GDKBFlt64.sys [20992 2015-07-07] (G Data Software AG) R1 GDMnIcpt; C:\WINDOWS\system32\drivers\MiniIcpt.sys [230912 2015-07-13] (G Data Software AG) R3 GDPkIcpt; C:\WINDOWS\system32\drivers\PktIcpt.sys [91648 2015-07-13] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [68608 2015-07-18] (G Data Software AG) R1 GRD; C:\WINDOWS\system32\drivers\GRD.sys [106272 2015-07-19] (G Data Software) R1 HookCentre; C:\WINDOWS\system32\drivers\HookCentre.sys [125952 2015-07-13] (G Data Software AG) R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( ) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2015-01-16] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation) R2 plctrl; C:\Program Files\ASUS\P4G\plctrl.sys [14136 2013-08-29] (Windows (R) Win 7 DDK provider) S3 usbrndis6; C:\Windows\system32\DRIVERS\usb80236.sys [20992 2013-08-22] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-07-24 12:18 - 2015-07-24 12:18 - 00000677 _____ C:\Users\Micha_000\Desktop\JRT.txt 2015-07-24 11:37 - 2015-07-24 11:37 - 01798288 _____ (Malwarebytes Corporation) C:\Users\Micha_000\Downloads\JRT(1).exe 2015-07-24 11:37 - 2015-07-24 11:37 - 01798288 _____ (Malwarebytes Corporation) C:\Users\Micha_000\Desktop\JRT(1).exe 2015-07-24 11:36 - 2015-07-24 11:36 - 00000949 _____ C:\Users\Micha_000\Desktop\AdwCleaner[S1].txt 2015-07-24 11:26 - 2015-07-24 11:26 - 00001462 _____ C:\Users\Micha_000\Desktop\mbam.txt 2015-07-24 11:15 - 2015-07-24 11:15 - 02248704 _____ C:\Users\Micha_000\Desktop\AdwCleaner_4.208(1).exe 2015-07-24 09:34 - 2015-07-24 09:35 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Micha_000\Downloads\mbam-setup-2.1.6.1022.exe 2015-07-23 23:37 - 2015-07-23 23:37 - 00000000 ____D C:\Users\Micha_000\AppData\Local\EMU 2015-07-23 23:36 - 2015-07-23 23:36 - 00018587 _____ C:\WINDOWS\DirectX.log 2015-07-23 23:35 - 2015-07-23 23:35 - 00001358 _____ C:\Users\Public\Desktop\Rocket League.lnk 2015-07-23 23:35 - 2015-07-23 23:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rocket League 2015-07-23 23:32 - 2015-07-23 23:35 - 00000000 ____D C:\Program Files (x86)\rocketleague 2015-07-23 18:36 - 2015-07-23 23:29 - 1849327616 _____ C:\Users\Micha_000\Downloads\flt-role.iso 2015-07-23 13:10 - 2015-07-23 13:10 - 00004062 _____ C:\Users\Micha_000\Desktop\Gmer.txt 2015-07-23 13:10 - 2015-07-23 13:03 - 00072099 _____ C:\Users\Micha_000\Desktop\Addition.txt 2015-07-23 13:10 - 2015-07-23 13:03 - 00056145 _____ C:\Users\Micha_000\Desktop\FRST.txt 2015-07-23 13:10 - 2015-07-23 12:56 - 00000550 _____ C:\Users\Micha_000\Desktop\defogger_disable.log 2015-07-23 13:04 - 2015-07-23 13:04 - 00380416 _____ C:\Users\Micha_000\Downloads\Gmer-19357.exe 2015-07-23 13:02 - 2015-07-24 12:19 - 00020326 _____ C:\Users\Micha_000\Downloads\FRST.txt 2015-07-23 13:02 - 2015-07-23 13:03 - 00072099 _____ C:\Users\Micha_000\Downloads\Addition.txt 2015-07-23 12:58 - 2015-07-24 12:19 - 00000000 ____D C:\FRST 2015-07-23 12:57 - 2015-07-23 12:57 - 02135552 _____ (Farbar) C:\Users\Micha_000\Downloads\FRST64.exe 2015-07-23 12:56 - 2015-07-23 12:56 - 00050477 _____ C:\Users\Micha_000\Downloads\Defogger.exe 2015-07-23 12:56 - 2015-07-23 12:56 - 00000550 _____ C:\Users\Micha_000\Downloads\defogger_disable.log 2015-07-23 12:56 - 2015-07-23 12:56 - 00000168 _____ C:\Users\Micha_000\defogger_reenable 2015-07-23 12:39 - 2015-07-23 12:39 - 01798288 _____ (Malwarebytes Corporation) C:\Users\Micha_000\Downloads\JRT-751.exe 2015-07-23 07:28 - 2015-07-23 07:28 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2015-07-22 23:39 - 2015-07-14 16:14 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2015-07-22 23:39 - 2015-07-14 16:14 - 00301056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2015-07-22 23:39 - 2015-07-14 16:14 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2015-07-22 23:39 - 2015-07-14 16:13 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2015-07-22 23:16 - 2015-07-22 23:16 - 00003518 _____ C:\WINDOWS\System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8 2015-07-22 23:14 - 2015-07-22 23:14 - 00074000 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll 2015-07-22 23:13 - 2015-07-22 23:13 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml 2015-07-22 23:13 - 2015-07-22 23:13 - 00000385 _____ C:\Users\Micha_000\AppData\Roaminguser_gensett.xml 2015-07-22 23:12 - 2015-07-22 23:12 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf 2015-07-22 23:12 - 2015-07-22 23:12 - 00000000 ____D C:\ProgramData\BDLogging 2015-07-22 23:12 - 2015-01-09 11:44 - 00074000 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll 2015-07-22 23:12 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll 2015-07-22 23:05 - 2015-07-23 12:31 - 00000000 ____D C:\Program Files\Bitdefender 2015-07-22 23:05 - 2015-07-23 12:30 - 00000000 ____D C:\Program Files\Common Files\Bitdefender 2015-07-22 23:05 - 2015-07-22 23:05 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\Micha_000\Downloads\SpyHunter-Installer(1).exe 2015-07-22 23:05 - 2015-07-22 23:05 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\QuickScan 2015-07-22 23:05 - 2015-01-09 11:44 - 00084848 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUISkin.dll 2015-07-22 23:05 - 2015-01-09 11:44 - 00033360 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUH.dll 2015-07-22 22:55 - 2015-07-22 22:55 - 00000184 _____ C:\Users\Micha_000\Desktop\G*DATA Protokoll ID 1777.txt 2015-07-22 22:40 - 2015-07-22 22:40 - 02868840 _____ C:\Users\Micha_000\Downloads\bitdefender_antivirus.exe 2015-07-22 22:29 - 2015-07-22 22:29 - 00001188 _____ C:\WINDOWS\SysWOW64\ServiceConfig.xml 2015-07-22 22:08 - 2015-07-22 23:16 - 00000000 ____D C:\Program Files\Common Files\AV 2015-07-22 22:08 - 2015-07-22 22:08 - 00000000 ____D C:\ProgramData\VIPRE 2015-07-22 21:37 - 2015-07-22 22:44 - 00000000 ____D C:\ProgramData\STOPzilla! 2015-07-22 21:37 - 2015-07-22 21:37 - 00000000 ____D C:\Program Files (x86)\iS3 2015-07-22 21:34 - 2015-07-22 21:34 - 02042328 _____ (iS3, Inc.) C:\Users\Micha_000\Downloads\STOPzillaPRO_Downloader.exe 2015-07-22 21:33 - 2015-07-22 21:33 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\Micha_000\Downloads\SpyHunter-Installer.exe 2015-07-22 13:20 - 2015-07-22 13:29 - 00009522 _____ C:\Users\Micha_000\Desktop\Sicherheitseinweisung_Zeit.odt 2015-07-19 20:01 - 2015-07-19 20:01 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe 2015-07-19 19:48 - 2015-07-19 20:02 - 00000000 ____D C:\ProgramData\HitmanPro 2015-07-19 19:40 - 2015-07-19 19:40 - 11032736 _____ (SurfRight B.V.) C:\Users\Micha_000\Downloads\HitmanPro_x64.exe 2015-07-19 19:27 - 2015-07-19 19:27 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-07-19 19:20 - 2015-07-19 19:26 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Micha_000\Downloads\mbam-setup-2.1.8.1057.exe 2015-07-19 19:07 - 2015-07-19 19:07 - 01798288 _____ (Malwarebytes Corporation) C:\Users\Micha_000\Downloads\JRT.exe 2015-07-19 18:59 - 2015-07-24 11:32 - 00000000 ____D C:\AdwCleaner 2015-07-19 18:59 - 2015-07-19 18:59 - 02248704 _____ C:\Users\Micha_000\Downloads\adwcleaner_4.208.exe 2015-07-19 18:50 - 2015-07-19 18:50 - 00562784 _____ (Oracle Corporation) C:\Users\Micha_000\Downloads\jxpiinstall.exe 2015-07-19 17:45 - 2015-07-19 17:45 - 00106272 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GRD.sys 2015-07-19 17:45 - 2015-07-19 17:45 - 00018160 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GdPhyMem.sys 2015-07-18 16:08 - 2015-07-18 16:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA INTERNET SECURITY 2015-07-18 15:50 - 2015-07-18 15:50 - 00283050 _____ C:\Users\Micha_000\Downloads\RocketLeague-FLT - ThePirateBay.TO.torrent 2015-07-16 21:17 - 2015-05-03 02:39 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2015-07-16 21:17 - 2015-04-30 01:22 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll 2015-07-16 21:16 - 2015-05-07 17:21 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll 2015-07-16 21:16 - 2015-05-07 17:05 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll 2015-07-16 21:15 - 2015-05-11 20:17 - 01201664 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2015-07-16 21:15 - 2015-05-07 19:50 - 22292672 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2015-07-16 21:15 - 2015-05-07 19:00 - 03109376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll 2015-07-16 21:15 - 2015-05-07 18:53 - 19734960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2015-07-16 21:15 - 2015-05-07 18:12 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll 2015-07-16 21:14 - 2015-04-25 04:25 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys 2015-07-16 21:14 - 2014-11-04 21:25 - 00059712 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdclass.sys 2015-07-16 21:14 - 2014-11-04 21:25 - 00051008 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouclass.sys 2015-07-16 21:14 - 2014-11-04 08:55 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sermouse.sys 2015-07-16 21:14 - 2014-11-04 08:54 - 00108544 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\i8042prt.sys 2015-07-16 21:14 - 2014-11-04 08:54 - 00032256 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys 2015-07-16 21:14 - 2014-11-04 08:54 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys 2015-07-16 21:13 - 2015-06-30 00:43 - 00026288 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2015-07-16 21:13 - 2015-06-29 17:07 - 01145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2015-07-16 21:13 - 2015-06-29 17:07 - 01084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2015-07-16 21:13 - 2015-06-29 17:07 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2015-07-16 21:13 - 2015-06-29 17:07 - 00433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2015-07-16 21:13 - 2015-06-29 17:07 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2015-07-16 21:13 - 2015-06-27 01:21 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2015-07-16 21:13 - 2015-06-27 01:21 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll 2015-07-16 21:12 - 2015-05-03 17:09 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-07-16 21:12 - 2015-05-03 16:58 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-07-16 21:12 - 2015-05-03 16:55 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2015-07-16 21:12 - 2015-05-03 16:49 - 00811008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2015-07-16 09:43 - 2015-07-09 21:51 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2015-07-16 09:43 - 2015-07-09 20:40 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll 2015-07-16 09:43 - 2015-07-09 18:03 - 03701760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2015-07-16 09:43 - 2015-07-09 17:54 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe 2015-07-16 09:43 - 2015-07-09 17:53 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll 2015-07-16 09:43 - 2015-07-09 17:50 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2015-07-16 09:43 - 2015-07-09 17:50 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2015-07-16 09:43 - 2015-07-09 17:48 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2015-07-16 09:43 - 2015-07-09 17:46 - 02229248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2015-07-16 09:43 - 2015-07-09 17:38 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe 2015-07-16 09:43 - 2015-07-09 17:37 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll 2015-07-16 09:43 - 2015-07-09 17:35 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2015-07-16 09:43 - 2015-07-09 17:34 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2015-07-16 09:43 - 2015-06-27 05:08 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2015-07-16 09:43 - 2015-06-27 05:08 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2015-07-16 09:43 - 2015-06-27 04:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2015-07-16 09:42 - 2015-06-25 04:31 - 04177920 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2015-07-16 09:41 - 2015-06-27 05:13 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2015-07-16 09:41 - 2015-06-27 05:12 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2015-07-16 09:41 - 2015-06-27 05:12 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2015-07-16 09:40 - 2015-06-28 07:07 - 00442712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2015-07-16 09:40 - 2015-06-28 07:07 - 00178008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2015-07-16 09:40 - 2015-06-28 07:06 - 01311960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2015-07-16 09:40 - 2015-06-28 07:06 - 00332120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2015-07-16 09:40 - 2015-06-27 18:42 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2015-07-16 09:40 - 2015-06-27 04:40 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll 2015-07-16 09:40 - 2015-06-27 04:05 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2015-07-16 09:40 - 2015-06-27 04:00 - 00989184 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2015-07-16 09:40 - 2015-06-27 03:53 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll 2015-07-16 09:40 - 2015-06-27 03:26 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2015-07-16 09:39 - 2015-05-30 23:18 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll 2015-07-16 09:39 - 2015-05-30 21:36 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2015-07-16 09:39 - 2015-05-30 21:35 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2015-07-16 09:38 - 2015-06-16 00:41 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe 2015-07-16 09:38 - 2015-06-16 00:24 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2015-07-16 09:38 - 2015-06-15 23:16 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe 2015-07-16 09:38 - 2015-06-15 23:09 - 03607552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2015-07-16 09:38 - 2015-06-15 22:50 - 02774528 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2015-07-16 09:38 - 2015-06-15 21:57 - 02460160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2015-07-16 09:36 - 2015-07-02 00:08 - 05923840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2015-07-16 09:36 - 2015-07-01 23:14 - 04520448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2015-07-16 09:34 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2015-07-16 09:34 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2015-07-16 09:34 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2015-07-16 09:34 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2015-07-16 09:34 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2015-07-16 09:34 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2015-07-16 09:34 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2015-07-16 09:34 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2015-07-16 09:32 - 2015-06-16 00:39 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2015-07-16 09:32 - 2015-06-16 00:38 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2015-07-16 09:32 - 2015-06-16 00:26 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll 2015-07-16 09:32 - 2015-06-16 00:24 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2015-07-16 09:32 - 2015-06-16 00:02 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx 2015-07-16 09:32 - 2015-06-15 23:58 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2015-07-16 09:32 - 2015-06-15 23:57 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2015-07-16 09:32 - 2015-06-15 23:56 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2015-07-16 09:32 - 2015-06-15 23:55 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2015-07-16 09:32 - 2015-06-15 23:49 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2015-07-16 09:32 - 2015-06-15 23:41 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2015-07-16 09:32 - 2015-06-15 23:38 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2015-07-16 09:32 - 2015-06-15 23:36 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2015-07-16 09:32 - 2015-06-15 23:17 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2015-07-16 09:32 - 2015-06-15 23:16 - 02427392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2015-07-16 09:32 - 2015-06-15 23:15 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2015-07-16 09:32 - 2015-06-15 23:13 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll 2015-07-16 09:32 - 2015-06-15 23:04 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll 2015-07-16 09:32 - 2015-06-15 23:03 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2015-07-16 09:32 - 2015-06-15 22:52 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2015-07-16 09:32 - 2015-06-15 22:47 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx 2015-07-16 09:32 - 2015-06-15 22:44 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2015-07-16 09:32 - 2015-06-15 22:43 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2015-07-16 09:32 - 2015-06-15 22:42 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2015-07-16 09:32 - 2015-06-15 22:41 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2015-07-16 09:32 - 2015-06-15 22:37 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2015-07-16 09:32 - 2015-06-15 22:32 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2015-07-16 09:32 - 2015-06-15 22:31 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2015-07-16 09:32 - 2015-06-15 22:30 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2015-07-16 09:32 - 2015-06-15 22:30 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2015-07-16 09:32 - 2015-06-15 22:17 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2015-07-16 09:32 - 2015-06-15 22:07 - 01951232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2015-07-16 09:32 - 2015-06-15 22:02 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2015-07-15 21:20 - 2015-06-11 05:49 - 01380600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2015-07-15 21:20 - 2015-06-10 18:13 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2015-07-15 21:20 - 2015-05-11 18:34 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll 2015-07-15 21:19 - 2015-06-16 07:36 - 01661576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2015-07-15 21:19 - 2015-06-16 07:36 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2015-07-15 21:19 - 2015-05-12 15:19 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2015-07-15 21:19 - 2015-05-07 18:47 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll 2015-07-15 21:19 - 2015-05-02 01:33 - 00410739 _____ C:\WINDOWS\system32\ApnDatabase.xml 2015-07-15 21:19 - 2015-04-28 15:13 - 00513480 _____ C:\WINDOWS\SysWOW64\locale.nls 2015-07-15 21:19 - 2015-04-28 15:13 - 00513480 _____ C:\WINDOWS\system32\locale.nls 2015-07-15 21:19 - 2015-04-23 17:47 - 03084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2015-07-15 21:19 - 2015-04-23 17:16 - 02471424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2015-07-15 21:18 - 2015-05-03 17:07 - 07784448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2015-07-15 21:18 - 2015-05-03 16:57 - 05264384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2015-07-15 12:08 - 2015-07-24 12:18 - 00003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1 2015-07-13 13:21 - 2015-07-18 16:07 - 00007678 _____ C:\WINDOWS\DPINST.LOG 2015-07-12 19:56 - 2015-07-12 19:56 - 00000000 _____ C:\Users\Micha_000\AppData\Local\{D2C6117B-095A-4BAB-B770-7A033EDC2AD3} 2015-07-12 19:53 - 2015-07-24 11:35 - 00003995 _____ C:\WINDOWS\setupact.log 2015-07-12 19:53 - 2015-07-12 19:53 - 00000000 _____ C:\WINDOWS\setuperr.log 2015-07-12 19:52 - 2015-07-24 11:34 - 00012798 _____ C:\WINDOWS\PFRO.log 2015-07-10 14:20 - 2015-07-10 14:20 - 00003694 _____ C:\WINDOWS\System32\Tasks\Adobe-Online-Aktualisierungsprogramm 2015-07-09 14:49 - 2015-07-09 14:49 - 00002080 _____ C:\Users\Micha_000\Desktop\Minecraft Launcher - Verknüpfung.lnk 2015-07-07 14:28 - 2015-07-18 16:08 - 00001960 _____ C:\Users\Public\Desktop\G DATA INTERNET SECURITY.lnk 2015-07-07 14:28 - 2015-07-13 13:21 - 00091648 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\PktIcpt.sys 2015-07-07 14:28 - 2015-07-07 14:28 - 00027648 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDKBB64.sys 2015-07-07 14:28 - 2015-07-07 14:28 - 00020992 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDKBFlt64.sys 2015-07-07 14:27 - 2015-07-23 12:31 - 00000000 ____D C:\WINDOWS\ELAMBKUP 2015-07-07 14:27 - 2015-07-18 16:08 - 00068608 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\gdwfpcd64.sys 2015-07-07 14:27 - 2015-07-13 13:21 - 00230912 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\MiniIcpt.sys 2015-07-07 14:27 - 2015-07-13 13:21 - 00158720 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDBehave.sys 2015-07-07 14:27 - 2015-07-13 13:21 - 00125952 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\HookCentre.sys 2015-07-07 13:59 - 2015-07-07 14:07 - 226997104 _____ (G Data Software AG) C:\Users\Micha_000\Downloads\INT_R_BASE_IS(1).exe 2015-07-07 13:37 - 2015-07-17 10:10 - 00002305 _____ C:\Users\Micha_000\Desktop\Autodesk Inventor 2015 jetzt installieren.lnk 2015-07-07 13:33 - 2015-07-07 13:33 - 00000870 _____ C:\Users\Public\Desktop\Autodesk Vault Basic 2015.lnk 2015-07-07 13:33 - 2015-07-07 13:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk Data Management 2015-07-07 13:26 - 2015-07-07 13:26 - 00001688 _____ C:\Users\Public\Desktop\Autodesk ReCap.lnk 2015-07-07 13:26 - 2015-07-07 13:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk ReCap 2015-07-07 13:26 - 2015-07-07 13:26 - 00000000 ____D C:\ProgramData\FARO 2015-07-07 13:26 - 2015-07-07 13:26 - 00000000 ____D C:\Program Files (x86)\Microsoft WSE 2015-07-07 13:15 - 2015-07-07 13:15 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Autodesk,_Inc 2015-07-07 13:09 - 2015-07-07 13:33 - 00000000 ____D C:\Users\Micha_000\Documents\Inventor 2015-07-07 12:50 - 2015-07-07 12:50 - 00001792 _____ C:\Users\Public\Desktop\Autodesk Inventor Professional 2015.lnk 2015-07-07 12:50 - 2015-07-07 12:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk Inventor 2015 2015-07-07 12:27 - 2015-07-07 12:27 - 00002157 _____ C:\Users\Public\Desktop\Autodesk Design Review 2013.lnk 2015-07-07 12:24 - 2015-07-07 12:24 - 00002223 _____ C:\Users\Public\Desktop\DWG TrueView 2015 - English.lnk 2015-07-07 12:24 - 2015-07-07 12:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DWG TrueView 2015 - English 2015-07-07 11:40 - 2015-07-07 13:41 - 07533018 _____ C:\Users\Micha_000\Downloads\Autodesk_Inventor_2015_R1_German_Win_64bit_wi_de-DE_Setup.exe 2015-07-07 11:40 - 2015-07-07 11:40 - 00337832 _____ (Autodesk Inc.) C:\Users\Micha_000\Downloads\Autodesk_Inventor_2015_R1_German_Win_64bit_wi_de-DE_Setup_webinstall.exe 2015-07-06 23:36 - 2015-07-06 23:36 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft 2015-07-06 23:35 - 2015-07-09 14:58 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\.minecraft 2015-07-06 23:28 - 2015-04-14 12:24 - 00311200 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe 2015-07-06 23:28 - 2015-04-14 12:24 - 00188832 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe 2015-07-06 23:28 - 2015-04-14 12:24 - 00188320 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe 2015-07-06 22:49 - 2015-07-06 22:49 - 00000000 ____D C:\Users\Micha_000\Downloads\Album Wochenende Rapper 2015-07-06 22:44 - 2015-07-06 22:44 - 00000098 _____ C:\Users\Micha_000\Downloads\17a4fefc-a9cf-4e34-8dd5-588aba6f55b7.htm 2015-07-06 22:42 - 2015-07-06 22:46 - 00000000 ____D C:\Users\Micha_000\Downloads\Minecraft 1.8 by TeamExtremeMc.com 2015-07-06 22:38 - 2015-07-16 20:07 - 00000000 ____D C:\Users\Micha_000\Desktop\HiWi_Dokumente 2015-07-06 14:05 - 2015-07-06 14:24 - 60149697 _____ C:\Users\Micha_000\Downloads\WK13AWR.rar.part 2015-07-03 13:36 - 2015-07-03 13:36 - 50502393 _____ C:\Users\Micha_000\Downloads\Weekend - FCKWKND (16BARS.TV PREMIERE).mp4 2015-07-03 11:16 - 2015-07-03 11:16 - 00001121 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-07-03 11:13 - 2015-07-03 11:14 - 00242928 _____ C:\Users\Micha_000\Downloads\Firefox Setup Stub 39.0.exe 2015-06-30 17:12 - 2015-07-24 11:23 - 00001252 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002UA.job 2015-06-30 17:12 - 2015-07-18 14:23 - 00001200 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002Core.job 2015-06-30 17:12 - 2015-07-18 14:18 - 00004206 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002UA 2015-06-30 17:12 - 2015-07-18 14:18 - 00003826 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002Core 2015-06-30 17:12 - 2015-06-30 17:12 - 00122759 _____ C:\Users\Micha_000\Downloads\A0-ME-mit-Hilfen_01.dwt 2015-06-30 17:12 - 2015-06-30 17:12 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Dropbox 2015-06-30 17:12 - 2015-06-30 17:12 - 00000000 ____D C:\ProgramData\Dropbox 2015-06-30 16:04 - 2015-06-30 16:11 - 00000000 ____D C:\Users\Micha_000\Desktop\Nina Urlaub 2015-06-24 13:10 - 2015-06-24 13:10 - 00009336 ____N (G*DATA Software AG) C:\WINDOWS\SysWOW64\GdScrSv.de.dll 2015-06-24 12:06 - 2015-06-24 12:06 - 02230392 ____N (G Data Software AG) C:\WINDOWS\SysWOW64\GdScrSv.scr ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-07-24 12:18 - 2015-05-26 12:02 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2 2015-07-24 12:13 - 2014-03-28 22:04 - 00003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-995147136-1539619246-4169388671-1002 2015-07-24 12:11 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru 2015-07-24 11:36 - 2014-06-30 18:47 - 00001126 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2015-07-24 11:36 - 2014-06-10 17:50 - 00000000 __RDO C:\Users\Micha_000\OneDrive 2015-07-24 11:34 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\Speech 2015-07-24 11:34 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2015-07-24 11:20 - 2014-06-30 18:47 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2015-07-24 09:45 - 2014-03-28 14:24 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2015-07-24 09:35 - 2014-06-10 17:13 - 01274149 _____ C:\WINDOWS\WindowsUpdate.log 2015-07-23 23:43 - 2014-06-10 17:20 - 00000000 ____D C:\Users\Micha_000 2015-07-23 23:37 - 2014-05-02 13:41 - 00000000 ____D C:\Users\Micha_000\Documents\My Games 2015-07-23 18:09 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness 2015-07-23 17:48 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM 2015-07-23 12:46 - 2015-01-05 17:43 - 00000000 ____D C:\Users\Micha_000\Desktop\Studium 2015-07-23 12:31 - 2013-08-22 15:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI 2015-07-23 07:29 - 2014-03-29 13:29 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Dropbox 2015-07-22 23:43 - 2013-08-22 16:44 - 00489576 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2015-07-22 23:39 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp 2015-07-22 22:53 - 2014-11-02 18:31 - 00000000 ____D C:\ProgramData\Origin 2015-07-22 22:50 - 2014-11-02 18:57 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Origin 2015-07-22 22:50 - 2014-11-02 18:35 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Origin 2015-07-22 21:34 - 2015-03-06 23:21 - 00000000 ____D C:\Users\Micha_000\Downloads\RollerCoaster Tycoon 3 Platinum 2015-07-21 11:53 - 2015-05-20 12:43 - 00000987 _____ C:\Users\Micha_000\Documents\plot.log 2015-07-19 23:30 - 2014-07-07 09:13 - 00000000 ____D C:\Users\Micha_000\AppData\Local\G DATA 2015-07-19 23:29 - 2014-04-15 17:53 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\BitTorrent 2015-07-19 20:09 - 2014-03-29 13:34 - 00000000 ___RD C:\Users\Micha_000\Dropbox 2015-07-18 16:08 - 2014-04-28 19:37 - 00000000 ____D C:\ProgramData\G Data 2015-07-17 10:51 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache 2015-07-17 10:07 - 2015-04-13 16:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk 2015-07-17 09:53 - 2015-04-13 16:13 - 00000000 ____D C:\Program Files\Autodesk 2015-07-17 09:53 - 2015-04-13 16:04 - 00000000 ____D C:\Program Files (x86)\Autodesk 2015-07-17 08:51 - 2015-04-13 15:55 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Akamai 2015-07-17 08:44 - 2015-04-19 09:03 - 00000000 ____D C:\WINDOWS\system32\appraiser 2015-07-17 08:44 - 2015-03-17 20:44 - 00000000 ___SD C:\WINDOWS\system32\CompatTel 2015-07-17 08:44 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData 2015-07-17 08:44 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\WinStore 2015-07-16 14:20 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\FxsTmp 2015-07-16 12:53 - 2015-01-01 23:37 - 00003886 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2015-07-16 12:53 - 2014-04-04 15:28 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2015-07-16 10:15 - 2014-06-30 18:47 - 00004102 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2015-07-16 10:15 - 2014-06-30 18:47 - 00003866 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2015-07-15 21:23 - 2014-03-29 22:39 - 00000000 ____D C:\WINDOWS\system32\MRT 2015-07-14 17:57 - 2014-07-03 10:02 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Adobe 2015-07-14 17:55 - 2014-03-28 14:24 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2015-07-14 12:41 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\NDF 2015-07-14 11:43 - 2014-03-18 12:03 - 01776918 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2015-07-14 11:43 - 2014-03-18 11:25 - 00765582 _____ C:\WINDOWS\system32\perfh007.dat 2015-07-14 11:43 - 2014-03-18 11:25 - 00159366 _____ C:\WINDOWS\system32\perfc007.dat 2015-07-13 23:31 - 2015-04-10 16:20 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX 2015-07-13 23:31 - 2015-04-10 16:20 - 00000000 ___SD C:\WINDOWS\system32\GWX 2015-07-13 23:10 - 2015-03-17 20:52 - 00792568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2015-07-13 23:10 - 2015-03-17 20:52 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2015-07-10 14:27 - 2014-09-04 21:01 - 00000000 ____D C:\Program Files (x86)\Steam 2015-07-10 14:27 - 2014-04-15 18:05 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2015-07-10 14:24 - 2014-06-10 18:09 - 00000000 ___DC C:\WINDOWS\Panther 2015-07-10 14:24 - 2014-06-10 17:34 - 00000000 ____D C:\WINDOWS\Minidump 2015-07-10 14:24 - 2014-03-28 17:09 - 00000000 ____D C:\Users\Micha_000\AppData\Local\CrashDumps 2015-07-10 11:36 - 2015-04-13 15:57 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Autodesk 2015-07-07 14:27 - 2014-07-07 08:47 - 00001755 _____ C:\Users\Micha_000\AppData\Roaming\gdscan.log 2015-07-07 14:25 - 2014-04-28 19:37 - 00000000 ____D C:\Program Files (x86)\G Data 2015-07-07 13:37 - 2015-04-13 16:26 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autodesk 2015-07-07 13:33 - 2015-04-13 16:13 - 00000000 ____D C:\Users\Public\Documents\Autodesk 2015-07-07 13:33 - 2015-04-13 15:57 - 00000000 ____D C:\ProgramData\Autodesk 2015-07-07 13:09 - 2015-04-13 16:20 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Autodesk 2015-07-07 12:49 - 2015-04-13 16:13 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared 2015-07-07 12:00 - 2014-04-19 14:00 - 00000000 ____D C:\ProgramData\Package Cache 2015-07-07 12:00 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2015-07-07 11:41 - 2015-04-13 15:54 - 00000000 ____D C:\Autodesk 2015-07-06 23:27 - 2015-04-14 12:24 - 00000000 ____D C:\Program Files\Java 2015-07-03 11:16 - 2015-06-02 19:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-07-03 11:16 - 2014-03-28 22:08 - 00001133 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-07-03 11:15 - 2014-03-28 22:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-07-03 08:43 - 2014-03-29 22:39 - 130333168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe ==================== Files in the root of some directories ======= 2014-07-07 08:47 - 2014-07-07 08:47 - 0000000 _____ () C:\Users\Micha_000\AppData\Roaming\gdfw.log 2014-07-07 08:47 - 2015-07-07 14:27 - 0001755 _____ () C:\Users\Micha_000\AppData\Roaming\gdscan.log 2014-07-17 11:38 - 2002-09-10 02:00 - 0351048 _____ () C:\Users\Micha_000\AppData\Roaming\omch.dll 2015-01-11 20:19 - 2015-01-11 20:19 - 0003400 _____ () C:\Users\Micha_000\AppData\Local\recently-used.xbel 2014-03-29 10:40 - 2014-03-29 10:40 - 0007609 _____ () C:\Users\Micha_000\AppData\Local\Resmon.ResmonCfg 2015-07-12 19:56 - 2015-07-12 19:56 - 0000000 _____ () C:\Users\Micha_000\AppData\Local\{D2C6117B-095A-4BAB-B770-7A033EDC2AD3} 2014-06-10 17:12 - 2014-06-10 17:12 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2015-04-13 16:18 - 2015-04-13 16:18 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc 2013-04-26 01:15 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd 2013-04-26 01:15 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe 2013-04-26 01:15 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS 2013-11-21 20:46 - 2013-11-21 20:46 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log 2013-11-21 20:42 - 2013-11-21 20:44 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log 2013-11-21 20:44 - 2013-11-21 20:45 - 0000108 _____ () C:\ProgramData\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}.log 2013-11-21 20:41 - 2013-11-21 20:42 - 0000110 _____ () C:\ProgramData\{E3739848-5329-48E3-8D28-5BBD6E8BE384}.log Files to move or delete: ==================== C:\ProgramData\SetStretch.VBS Some files in TEMP: ==================== C:\Users\Micha_000\AppData\Local\Temp\AcDeltree.exe C:\Users\Micha_000\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpihefjg.dll C:\Users\Micha_000\AppData\Local\Temp\DseShExt-x64.dll C:\Users\Micha_000\AppData\Local\Temp\DseShExt-x86.dll C:\Users\Micha_000\AppData\Local\Temp\HitmanPro.exe C:\Users\Micha_000\AppData\Local\Temp\Quarantine.exe C:\Users\Micha_000\AppData\Local\Temp\SDShelEx-win32.dll C:\Users\Micha_000\AppData\Local\Temp\SDShelEx-x64.dll C:\Users\Micha_000\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-07-23 18:46 ==================== End of log ============================ |
25.07.2015, 09:59 | #6 |
/// the machine /// TB-Ausbilder | G Data meldet Junkware (PUP): Script.Adware.DealPly.G (Engine B)ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ --> G Data meldet Junkware (PUP): Script.Adware.DealPly.G (Engine B) |
25.07.2015, 18:04 | #7 |
| G Data meldet Junkware (PUP): Script.Adware.DealPly.G (Engine B) Erstmal vielen Dank für die Hilfe! Eset hat leider etwas gedauert, knapp 4 std. Probleme hab' ich leider immernoch, mich wundert's nur, dass keins der Programme irgendetwas findet... G Data ist dauerhaft offen, selbst wenn ich das Pop-Up schließe, öffnet sich die Meldung sofort wieder. Hier mal die Logs: Eset Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=5d41c343fe067c43bf460b32d1c73ed9 # end=init # utc_time=2015-07-25 10:23:00 # local_time=2015-07-25 12:23:00 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # osver=6.2.9200 NT Update Init Update Download Update Finalize Updated modules version: 24971 # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=5d41c343fe067c43bf460b32d1c73ed9 # end=updated # utc_time=2015-07-25 10:26:21 # local_time=2015-07-25 12:26:21 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # osver=6.2.9200 NT # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7777 # api_version=3.1.1 # EOSSerial=5d41c343fe067c43bf460b32d1c73ed9 # engine=24971 # end=stopped # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2015-07-25 10:27:16 # local_time=2015-07-25 12:27:16 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1031 # osver=6.2.9200 NT # compatibility_mode_1='G DATA INTERNET SECURITY' # compatibility_mode=4112 16777213 100 100 89520 13420040 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776574 100 94 11205732 62701329 0 0 # scanned=2188 # found=0 # cleaned=0 # scan_time=54 ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=5d41c343fe067c43bf460b32d1c73ed9 # end=init # utc_time=2015-07-25 10:30:31 # local_time=2015-07-25 12:30:31 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # osver=6.2.9200 NT Update Init Update Download esets_scanner_update returned -1 esets_gle=53251 Update Finalize Updated modules version: 24971 # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=5d41c343fe067c43bf460b32d1c73ed9 # end=updated # utc_time=2015-07-25 10:30:43 # local_time=2015-07-25 12:30:43 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # osver=6.2.9200 NT # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7777 # api_version=3.1.1 # EOSSerial=5d41c343fe067c43bf460b32d1c73ed9 # engine=24971 # end=stopped # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2015-07-25 12:03:26 # local_time=2015-07-25 02:03:26 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1031 # osver=6.2.9200 NT # compatibility_mode_1='G DATA INTERNET SECURITY' # compatibility_mode=4112 16777213 100 100 95280 13425800 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776574 100 94 11207892 62707089 0 0 # scanned=194287 # found=0 # cleaned=0 # scan_time=5552 ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=5d41c343fe067c43bf460b32d1c73ed9 # end=init # utc_time=2015-07-25 12:46:14 # local_time=2015-07-25 02:46:14 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # osver=6.2.9200 NT Update Init Update Download Update Finalize Updated modules version: 24974 # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=5d41c343fe067c43bf460b32d1c73ed9 # end=updated # utc_time=2015-07-25 12:47:04 # local_time=2015-07-25 02:47:04 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # osver=6.2.9200 NT # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7777 # api_version=3.1.1 # EOSSerial=5d41c343fe067c43bf460b32d1c73ed9 # engine=24974 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2015-07-25 04:32:50 # local_time=2015-07-25 06:32:50 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1031 # osver=6.2.9200 NT # compatibility_mode_1='G DATA INTERNET SECURITY' # compatibility_mode=4112 16777213 100 100 16024 13441974 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776574 100 94 11224066 62723263 0 0 # scanned=420737 # found=0 # cleaned=0 # scan_time=13545 Code:
ATTFilter Results of screen317's Security Check version 1.004 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` G DATA INTERNET SECURITY Windows Defender Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Adobe Flash Player 18.0.0.209 Adobe Reader XI Mozilla Firefox (39.0) ````````Process Check: objlist.exe by Laurent```````` G DATA InternetSecurity Firewall GDFwSvcx64.exe G Data InternetSecurity Firewall GDFirewallTray.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:25-07-2015 durchgeführt von Micha_000 (Administrator) auf ARCUS (25-07-2015 18:54:45) Gestartet von C:\Users\Micha_000\Downloads Geladene Profile: Micha_000 (Verfügbare Profile: Micha_000 & Gast) Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ASUS) C:\Program Files\ASUS\P4G\InsOnSrv.exe () C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe (Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS) C:\Program Files\ASUS\P4G\InsOnWMI.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe (ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Console\ASUS Console Starter.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Autodesk, Inc.) D:\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler64.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\GUI\GDSC.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe (G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe (Microsoft Corporation) C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe konnte nicht auf den Prozess zugreifen -> FRST64.exe ==================== Registry (Nicht auf der Ausnahmeliste) ================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13651672 2013-09-03] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-30] (Realtek Semiconductor) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585928 2015-01-16] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [InstallerLauncher] => "C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-41 (Der Dateneintrag hat 36 mehr Zeichen). HKLM-x32\...\Run: [ASUS InstantKey] => C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [13936 2013-08-27] (ASUS) HKLM-x32\...\Run: [G Data ASM] => C:\Program Files (x86)\G Data\InternetSecurity\DelayLoader\AutorunDelayLoader.exe [434296 2015-02-20] (G Data Software AG) HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation) HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [493960 2014-12-05] (Autodesk Inc.) HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink) HKLM-x32\...\Run: [UpdatePSTShortCut] => C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe [222504 2013-02-05] (CyberLink Corp.) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.) HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-10-13] (Geek Software GmbH) HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFirewallTray.exe [1864312 2015-06-16] (G DATA Software AG) HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G DATA\InternetSecurity\AVKTray\AVKTray.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe, Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] (Atheros Communications) HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Run: [Akamai NetSession Interface] => C:\Users\Micha_000\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.) HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1193352 2014-05-01] (Autodesk, Inc.) HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Run: [Dropbox Update] => C:\Users\Micha_000\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-30] (Dropbox, Inc.) HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Run: [EADM] => D:\Sims4\Origin\Origin.exe [3632112 2015-07-22] (Electronic Arts) HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd) HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1193352 2014-05-01] (Autodesk, Inc.) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [177624 2015-01-10] (NVIDIA Corporation) AppInit_DLLs: , C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [177624 2015-01-10] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [164568 2015-01-10] (NVIDIA Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GoPro Importer.lnk [2015-07-07] ShortcutTarget: GoPro Importer.lnk -> C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe (GoPro) Startup: C:\Users\Micha_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-07-04] ShortcutTarget: Dropbox.lnk -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => Keine Datei ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => Keine Datei ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => Keine Datei ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Keine Datei ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.) ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => Keine Datei ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => Keine Datei ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => Keine Datei ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..) HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-995147136-1539619246-4169388671-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com HKU\S-1-5-21-995147136-1539619246-4169388671-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-04-14] (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-04-14] (Oracle Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{3A923A30-1465-48E7-A82A-6C30F7F2798B}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{DB78376F-9FC3-424E-B0BE-DE5DA1E5F3ED}: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Micha_000\AppData\Roaming\Mozilla\Firefox\Profiles\0me8w9ks.default FF NetworkProxy: "ftp", "proxyuk.stealthy.co" FF NetworkProxy: "ftp_port", 3128 FF NetworkProxy: "http", "proxyuk.stealthy.co" FF NetworkProxy: "http_port", 3128 FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co" FF NetworkProxy: "share_proxy_settings", true FF NetworkProxy: "socks", "proxyuk.stealthy.co" FF NetworkProxy: "socks_port", 3128 FF NetworkProxy: "ssl", "proxyuk.stealthy.co" FF NetworkProxy: "ssl_port", 3128 FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-14] () FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\WINDOWS\system32\npDeployJava1.dll [2015-04-14] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.21.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-04-14] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-21] () FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-06-23] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-06-23] (Intel Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-995147136-1539619246-4169388671-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Micha_000\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS) FF Extension: SaveFrom.net helper - C:\Users\Micha_000\AppData\Roaming\Mozilla\Firefox\Profiles\0me8w9ks.default\Extensions\helper@savefrom.net.xpi [2014-11-10] FF Extension: Adblock Plus - C:\Users\Micha_000\AppData\Roaming\Mozilla\Firefox\Profiles\0me8w9ks.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-28] ==================== Services (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-05] (Autodesk Inc.) R2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-08-29] (ASUS) R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] () [Datei ist nicht signiert] R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider) [Datei ist nicht signiert] R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.) R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2558072 2015-06-19] (G Data Software AG) R2 AVKService; C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKService.exe [966776 2015-06-16] (G Data Software AG) R2 AVKWCtl; C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKWCtlx64.exe [3711712 2015-06-16] (G Data Software AG) S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation) S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink) R3 GDFwSvc; C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFwSvcx64.exe [3202368 2015-06-19] (G Data Software AG) R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [789624 2015-06-16] (G Data Software AG) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2015-01-16] (NVIDIA Corporation) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert] R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Datei ist nicht signiert] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-06-23] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-06-23] (Intel Corporation) R2 mitsijm2015; D:\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe [968480 2013-10-12] (Autodesk, Inc.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706312 2015-01-16] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833544 2015-01-16] (NVIDIA Corporation) S3 Origin Client Service; D:\Sims4\Origin\OriginClientService.exe [2004488 2015-07-22] (Electronic Arts) R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-04-17] () S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation) R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-09-07] (Atheros) [Datei ist nicht signiert] ==================== Drivers (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70416 2013-09-23] (ASUS Corporation) S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation) R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-04-03] (Disc Soft Ltd) R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [158720 2015-07-13] (G Data Software AG) S0 GDElam; C:\Windows\System32\DRIVERS\GDElam.sys [117904 2015-01-08] (G Data Software AG) R3 GDKBB; C:\WINDOWS\system32\drivers\GDKBB64.sys [27648 2015-07-07] (G Data Software AG) R3 GDKBFlt; C:\WINDOWS\system32\drivers\GDKBFlt64.sys [20992 2015-07-07] (G Data Software AG) R1 GDMnIcpt; C:\WINDOWS\system32\drivers\MiniIcpt.sys [230912 2015-07-13] (G Data Software AG) R3 GDPkIcpt; C:\WINDOWS\system32\drivers\PktIcpt.sys [91648 2015-07-13] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [68608 2015-07-18] (G Data Software AG) R1 GRD; C:\WINDOWS\system32\drivers\GRD.sys [106272 2015-07-19] (G Data Software) R1 HookCentre; C:\WINDOWS\system32\drivers\HookCentre.sys [125952 2015-07-13] (G Data Software AG) R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( ) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2015-01-16] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation) R2 plctrl; C:\Program Files\ASUS\P4G\plctrl.sys [14136 2013-08-29] (Windows (R) Win 7 DDK provider) S3 usbrndis6; C:\Windows\system32\DRIVERS\usb80236.sys [20992 2013-08-22] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation) ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-07-25 18:52 - 2015-07-25 18:52 - 02146816 _____ (Farbar) C:\Users\Micha_000\Downloads\FRST64.exe 2015-07-25 18:45 - 2015-07-25 18:49 - 00000000 ____D C:\Users\Micha_000\Downloads\FRST-OlderVersion 2015-07-25 18:42 - 2015-07-25 18:42 - 00000768 _____ C:\Users\Micha_000\Desktop\checkup.txt 2015-07-25 18:40 - 2015-07-25 18:39 - 00852662 _____ C:\Users\Micha_000\Desktop\SecurityCheck.exe 2015-07-25 18:39 - 2015-07-25 18:39 - 00852662 _____ C:\Users\Micha_000\Downloads\SecurityCheck.exe 2015-07-25 14:06 - 2015-07-25 14:09 - 00000074 _____ C:\Users\Micha_000\AppData\Roaming\sp_data.sys 2015-07-25 12:21 - 2015-07-25 12:21 - 02870984 _____ (ESET) C:\Users\Micha_000\Downloads\esetsmartinstaller_deu.exe 2015-07-24 12:48 - 2015-07-24 13:47 - 821746644 _____ C:\Users\Micha_000\Downloads\rld-spor.iso.part 2015-07-24 12:18 - 2015-07-24 12:18 - 00000677 _____ C:\Users\Micha_000\Desktop\JRT.txt 2015-07-24 11:37 - 2015-07-24 11:37 - 01798288 _____ (Malwarebytes Corporation) C:\Users\Micha_000\Downloads\JRT(1).exe 2015-07-24 11:37 - 2015-07-24 11:37 - 01798288 _____ (Malwarebytes Corporation) C:\Users\Micha_000\Desktop\JRT(1).exe 2015-07-24 11:36 - 2015-07-24 11:36 - 00000949 _____ C:\Users\Micha_000\Desktop\AdwCleaner[S1].txt 2015-07-24 11:26 - 2015-07-24 11:26 - 00001462 _____ C:\Users\Micha_000\Desktop\mbam.txt 2015-07-24 11:15 - 2015-07-24 11:15 - 02248704 _____ C:\Users\Micha_000\Desktop\AdwCleaner_4.208(1).exe 2015-07-24 09:34 - 2015-07-24 09:35 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Micha_000\Downloads\mbam-setup-2.1.6.1022.exe 2015-07-23 23:37 - 2015-07-23 23:37 - 00000000 ____D C:\Users\Micha_000\AppData\Local\EMU 2015-07-23 23:36 - 2015-07-23 23:36 - 00018587 _____ C:\WINDOWS\DirectX.log 2015-07-23 23:35 - 2015-07-23 23:35 - 00001358 _____ C:\Users\Public\Desktop\Rocket League.lnk 2015-07-23 23:35 - 2015-07-23 23:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rocket League 2015-07-23 23:32 - 2015-07-23 23:35 - 00000000 ____D C:\Program Files (x86)\rocketleague 2015-07-23 18:36 - 2015-07-23 23:29 - 1849327616 _____ C:\Users\Micha_000\Downloads\flt-role.iso 2015-07-23 13:10 - 2015-07-24 12:20 - 00058063 _____ C:\Users\Micha_000\Desktop\FRST.txt 2015-07-23 13:10 - 2015-07-23 13:10 - 00004062 _____ C:\Users\Micha_000\Desktop\Gmer.txt 2015-07-23 13:10 - 2015-07-23 13:03 - 00072099 _____ C:\Users\Micha_000\Desktop\Addition.txt 2015-07-23 13:10 - 2015-07-23 12:56 - 00000550 _____ C:\Users\Micha_000\Desktop\defogger_disable.log 2015-07-23 13:04 - 2015-07-23 13:04 - 00380416 _____ C:\Users\Micha_000\Downloads\Gmer-19357.exe 2015-07-23 13:02 - 2015-07-25 18:55 - 00024583 _____ C:\Users\Micha_000\Downloads\FRST.txt 2015-07-23 13:02 - 2015-07-23 13:03 - 00072099 _____ C:\Users\Micha_000\Downloads\Addition.txt 2015-07-23 12:58 - 2015-07-25 18:54 - 00000000 ____D C:\FRST 2015-07-23 12:56 - 2015-07-23 12:56 - 00050477 _____ C:\Users\Micha_000\Downloads\Defogger.exe 2015-07-23 12:56 - 2015-07-23 12:56 - 00000550 _____ C:\Users\Micha_000\Downloads\defogger_disable.log 2015-07-23 12:56 - 2015-07-23 12:56 - 00000168 _____ C:\Users\Micha_000\defogger_reenable 2015-07-23 12:39 - 2015-07-23 12:39 - 01798288 _____ (Malwarebytes Corporation) C:\Users\Micha_000\Downloads\JRT-751.exe 2015-07-23 07:28 - 2015-07-23 07:28 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2015-07-22 23:39 - 2015-07-14 16:14 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2015-07-22 23:39 - 2015-07-14 16:14 - 00301056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2015-07-22 23:39 - 2015-07-14 16:14 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2015-07-22 23:39 - 2015-07-14 16:13 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2015-07-22 23:16 - 2015-07-22 23:16 - 00003518 _____ C:\WINDOWS\System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8 2015-07-22 23:14 - 2015-07-22 23:14 - 00074000 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll 2015-07-22 23:13 - 2015-07-22 23:13 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml 2015-07-22 23:13 - 2015-07-22 23:13 - 00000385 _____ C:\Users\Micha_000\AppData\Roaminguser_gensett.xml 2015-07-22 23:12 - 2015-07-22 23:12 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf 2015-07-22 23:12 - 2015-07-22 23:12 - 00000000 ____D C:\ProgramData\BDLogging 2015-07-22 23:12 - 2015-01-09 11:44 - 00074000 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll 2015-07-22 23:12 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll 2015-07-22 23:05 - 2015-07-23 12:31 - 00000000 ____D C:\Program Files\Bitdefender 2015-07-22 23:05 - 2015-07-23 12:30 - 00000000 ____D C:\Program Files\Common Files\Bitdefender 2015-07-22 23:05 - 2015-07-22 23:05 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\Micha_000\Downloads\SpyHunter-Installer(1).exe 2015-07-22 23:05 - 2015-07-22 23:05 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\QuickScan 2015-07-22 23:05 - 2015-01-09 11:44 - 00084848 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUISkin.dll 2015-07-22 23:05 - 2015-01-09 11:44 - 00033360 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUH.dll 2015-07-22 22:55 - 2015-07-22 22:55 - 00000184 _____ C:\Users\Micha_000\Desktop\G*DATA Protokoll ID 1777.txt 2015-07-22 22:40 - 2015-07-22 22:40 - 02868840 _____ C:\Users\Micha_000\Downloads\bitdefender_antivirus.exe 2015-07-22 22:29 - 2015-07-22 22:29 - 00001188 _____ C:\WINDOWS\SysWOW64\ServiceConfig.xml 2015-07-22 22:08 - 2015-07-22 23:16 - 00000000 ____D C:\Program Files\Common Files\AV 2015-07-22 22:08 - 2015-07-22 22:08 - 00000000 ____D C:\ProgramData\VIPRE 2015-07-22 21:37 - 2015-07-22 22:44 - 00000000 ____D C:\ProgramData\STOPzilla! 2015-07-22 21:37 - 2015-07-22 21:37 - 00000000 ____D C:\Program Files (x86)\iS3 2015-07-22 21:34 - 2015-07-22 21:34 - 02042328 _____ (iS3, Inc.) C:\Users\Micha_000\Downloads\STOPzillaPRO_Downloader.exe 2015-07-22 21:33 - 2015-07-22 21:33 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\Micha_000\Downloads\SpyHunter-Installer.exe 2015-07-22 13:20 - 2015-07-24 12:42 - 00009737 _____ C:\Users\Micha_000\Desktop\Sicherheitseinweisung_Zeit.odt 2015-07-19 20:01 - 2015-07-19 20:01 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe 2015-07-19 19:48 - 2015-07-19 20:02 - 00000000 ____D C:\ProgramData\HitmanPro 2015-07-19 19:40 - 2015-07-19 19:40 - 11032736 _____ (SurfRight B.V.) C:\Users\Micha_000\Downloads\HitmanPro_x64.exe 2015-07-19 19:27 - 2015-07-19 19:27 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-07-19 19:20 - 2015-07-19 19:26 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Micha_000\Downloads\mbam-setup-2.1.8.1057.exe 2015-07-19 19:07 - 2015-07-19 19:07 - 01798288 _____ (Malwarebytes Corporation) C:\Users\Micha_000\Downloads\JRT.exe 2015-07-19 18:59 - 2015-07-24 11:32 - 00000000 ____D C:\AdwCleaner 2015-07-19 18:59 - 2015-07-19 18:59 - 02248704 _____ C:\Users\Micha_000\Downloads\adwcleaner_4.208.exe 2015-07-19 18:50 - 2015-07-19 18:50 - 00562784 _____ (Oracle Corporation) C:\Users\Micha_000\Downloads\jxpiinstall.exe 2015-07-19 17:45 - 2015-07-19 17:45 - 00106272 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GRD.sys 2015-07-19 17:45 - 2015-07-19 17:45 - 00018160 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GdPhyMem.sys 2015-07-18 16:08 - 2015-07-18 16:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA INTERNET SECURITY 2015-07-18 15:50 - 2015-07-18 15:50 - 00283050 _____ C:\Users\Micha_000\Downloads\RocketLeague-FLT - ThePirateBay.TO.torrent 2015-07-16 21:17 - 2015-05-03 02:39 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2015-07-16 21:17 - 2015-04-30 01:22 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll 2015-07-16 21:16 - 2015-05-07 17:21 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll 2015-07-16 21:16 - 2015-05-07 17:05 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll 2015-07-16 21:15 - 2015-05-11 20:17 - 01201664 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2015-07-16 21:15 - 2015-05-07 19:50 - 22292672 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2015-07-16 21:15 - 2015-05-07 19:00 - 03109376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll 2015-07-16 21:15 - 2015-05-07 18:53 - 19734960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2015-07-16 21:15 - 2015-05-07 18:12 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll 2015-07-16 21:14 - 2015-04-25 04:25 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys 2015-07-16 21:14 - 2014-11-04 21:25 - 00059712 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdclass.sys 2015-07-16 21:14 - 2014-11-04 21:25 - 00051008 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouclass.sys 2015-07-16 21:14 - 2014-11-04 08:55 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sermouse.sys 2015-07-16 21:14 - 2014-11-04 08:54 - 00108544 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\i8042prt.sys 2015-07-16 21:14 - 2014-11-04 08:54 - 00032256 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys 2015-07-16 21:14 - 2014-11-04 08:54 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys 2015-07-16 21:13 - 2015-06-30 00:43 - 00026288 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2015-07-16 21:13 - 2015-06-29 17:07 - 01145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2015-07-16 21:13 - 2015-06-29 17:07 - 01084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2015-07-16 21:13 - 2015-06-29 17:07 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2015-07-16 21:13 - 2015-06-29 17:07 - 00433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2015-07-16 21:13 - 2015-06-29 17:07 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2015-07-16 21:13 - 2015-06-27 01:21 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2015-07-16 21:13 - 2015-06-27 01:21 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll 2015-07-16 21:12 - 2015-05-03 17:09 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-07-16 21:12 - 2015-05-03 16:58 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-07-16 21:12 - 2015-05-03 16:55 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2015-07-16 21:12 - 2015-05-03 16:49 - 00811008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2015-07-16 09:43 - 2015-07-09 21:51 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2015-07-16 09:43 - 2015-07-09 20:40 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll 2015-07-16 09:43 - 2015-07-09 18:03 - 03701760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2015-07-16 09:43 - 2015-07-09 17:54 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe 2015-07-16 09:43 - 2015-07-09 17:53 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll 2015-07-16 09:43 - 2015-07-09 17:50 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2015-07-16 09:43 - 2015-07-09 17:50 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2015-07-16 09:43 - 2015-07-09 17:48 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2015-07-16 09:43 - 2015-07-09 17:46 - 02229248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2015-07-16 09:43 - 2015-07-09 17:38 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe 2015-07-16 09:43 - 2015-07-09 17:37 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll 2015-07-16 09:43 - 2015-07-09 17:35 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2015-07-16 09:43 - 2015-07-09 17:34 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2015-07-16 09:43 - 2015-06-27 05:08 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2015-07-16 09:43 - 2015-06-27 05:08 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2015-07-16 09:43 - 2015-06-27 04:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2015-07-16 09:42 - 2015-06-25 04:31 - 04177920 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2015-07-16 09:41 - 2015-06-27 05:13 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2015-07-16 09:41 - 2015-06-27 05:12 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2015-07-16 09:41 - 2015-06-27 05:12 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2015-07-16 09:40 - 2015-06-28 07:07 - 00442712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2015-07-16 09:40 - 2015-06-28 07:07 - 00178008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2015-07-16 09:40 - 2015-06-28 07:06 - 01311960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2015-07-16 09:40 - 2015-06-28 07:06 - 00332120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2015-07-16 09:40 - 2015-06-27 18:42 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2015-07-16 09:40 - 2015-06-27 04:40 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll 2015-07-16 09:40 - 2015-06-27 04:05 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2015-07-16 09:40 - 2015-06-27 04:00 - 00989184 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2015-07-16 09:40 - 2015-06-27 03:53 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll 2015-07-16 09:40 - 2015-06-27 03:26 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2015-07-16 09:39 - 2015-05-30 23:18 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll 2015-07-16 09:39 - 2015-05-30 21:36 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2015-07-16 09:39 - 2015-05-30 21:35 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2015-07-16 09:38 - 2015-06-16 00:41 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe 2015-07-16 09:38 - 2015-06-16 00:24 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2015-07-16 09:38 - 2015-06-15 23:16 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe 2015-07-16 09:38 - 2015-06-15 23:09 - 03607552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2015-07-16 09:38 - 2015-06-15 22:50 - 02774528 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2015-07-16 09:38 - 2015-06-15 21:57 - 02460160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2015-07-16 09:36 - 2015-07-02 00:08 - 05923840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2015-07-16 09:36 - 2015-07-01 23:14 - 04520448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2015-07-16 09:34 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2015-07-16 09:34 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2015-07-16 09:34 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2015-07-16 09:34 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2015-07-16 09:34 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2015-07-16 09:34 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2015-07-16 09:34 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2015-07-16 09:34 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2015-07-16 09:32 - 2015-06-16 00:39 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2015-07-16 09:32 - 2015-06-16 00:38 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2015-07-16 09:32 - 2015-06-16 00:26 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll 2015-07-16 09:32 - 2015-06-16 00:24 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2015-07-16 09:32 - 2015-06-16 00:02 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx 2015-07-16 09:32 - 2015-06-15 23:58 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2015-07-16 09:32 - 2015-06-15 23:57 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2015-07-16 09:32 - 2015-06-15 23:56 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2015-07-16 09:32 - 2015-06-15 23:55 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2015-07-16 09:32 - 2015-06-15 23:49 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2015-07-16 09:32 - 2015-06-15 23:41 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2015-07-16 09:32 - 2015-06-15 23:38 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2015-07-16 09:32 - 2015-06-15 23:36 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2015-07-16 09:32 - 2015-06-15 23:17 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2015-07-16 09:32 - 2015-06-15 23:16 - 02427392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2015-07-16 09:32 - 2015-06-15 23:15 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2015-07-16 09:32 - 2015-06-15 23:13 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll 2015-07-16 09:32 - 2015-06-15 23:04 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll 2015-07-16 09:32 - 2015-06-15 23:03 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2015-07-16 09:32 - 2015-06-15 22:52 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2015-07-16 09:32 - 2015-06-15 22:47 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx 2015-07-16 09:32 - 2015-06-15 22:44 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2015-07-16 09:32 - 2015-06-15 22:43 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2015-07-16 09:32 - 2015-06-15 22:42 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2015-07-16 09:32 - 2015-06-15 22:41 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2015-07-16 09:32 - 2015-06-15 22:37 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2015-07-16 09:32 - 2015-06-15 22:32 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2015-07-16 09:32 - 2015-06-15 22:31 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2015-07-16 09:32 - 2015-06-15 22:30 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2015-07-16 09:32 - 2015-06-15 22:30 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2015-07-16 09:32 - 2015-06-15 22:17 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2015-07-16 09:32 - 2015-06-15 22:07 - 01951232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2015-07-16 09:32 - 2015-06-15 22:02 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2015-07-15 21:20 - 2015-06-11 05:49 - 01380600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2015-07-15 21:20 - 2015-06-10 18:13 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2015-07-15 21:20 - 2015-05-11 18:34 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll 2015-07-15 21:19 - 2015-06-16 07:36 - 01661576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2015-07-15 21:19 - 2015-06-16 07:36 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2015-07-15 21:19 - 2015-05-12 15:19 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2015-07-15 21:19 - 2015-05-07 18:47 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll 2015-07-15 21:19 - 2015-05-02 01:33 - 00410739 _____ C:\WINDOWS\system32\ApnDatabase.xml 2015-07-15 21:19 - 2015-04-28 15:13 - 00513480 _____ C:\WINDOWS\SysWOW64\locale.nls 2015-07-15 21:19 - 2015-04-28 15:13 - 00513480 _____ C:\WINDOWS\system32\locale.nls 2015-07-15 21:19 - 2015-04-23 17:47 - 03084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2015-07-15 21:19 - 2015-04-23 17:16 - 02471424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2015-07-15 21:18 - 2015-05-03 17:07 - 07784448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2015-07-15 21:18 - 2015-05-03 16:57 - 05264384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2015-07-15 12:08 - 2015-07-25 12:22 - 00003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1 2015-07-13 13:21 - 2015-07-18 16:07 - 00007678 _____ C:\WINDOWS\DPINST.LOG 2015-07-12 19:56 - 2015-07-12 19:56 - 00000000 _____ C:\Users\Micha_000\AppData\Local\{D2C6117B-095A-4BAB-B770-7A033EDC2AD3} 2015-07-12 19:53 - 2015-07-25 14:06 - 00004226 _____ C:\WINDOWS\setupact.log 2015-07-12 19:53 - 2015-07-12 19:53 - 00000000 _____ C:\WINDOWS\setuperr.log 2015-07-12 19:52 - 2015-07-25 14:04 - 00013148 _____ C:\WINDOWS\PFRO.log 2015-07-10 14:20 - 2015-07-10 14:20 - 00003694 _____ C:\WINDOWS\System32\Tasks\Adobe-Online-Aktualisierungsprogramm 2015-07-09 14:49 - 2015-07-09 14:49 - 00002080 _____ C:\Users\Micha_000\Desktop\Minecraft Launcher - Verknüpfung.lnk 2015-07-07 14:28 - 2015-07-18 16:08 - 00001960 _____ C:\Users\Public\Desktop\G DATA INTERNET SECURITY.lnk 2015-07-07 14:28 - 2015-07-13 13:21 - 00091648 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\PktIcpt.sys 2015-07-07 14:28 - 2015-07-07 14:28 - 00027648 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDKBB64.sys 2015-07-07 14:28 - 2015-07-07 14:28 - 00020992 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDKBFlt64.sys 2015-07-07 14:27 - 2015-07-23 12:31 - 00000000 ____D C:\WINDOWS\ELAMBKUP 2015-07-07 14:27 - 2015-07-18 16:08 - 00068608 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\gdwfpcd64.sys 2015-07-07 14:27 - 2015-07-13 13:21 - 00230912 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\MiniIcpt.sys 2015-07-07 14:27 - 2015-07-13 13:21 - 00158720 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDBehave.sys 2015-07-07 14:27 - 2015-07-13 13:21 - 00125952 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\HookCentre.sys 2015-07-07 13:59 - 2015-07-07 14:07 - 226997104 _____ (G Data Software AG) C:\Users\Micha_000\Downloads\INT_R_BASE_IS(1).exe 2015-07-07 13:37 - 2015-07-17 10:10 - 00002305 _____ C:\Users\Micha_000\Desktop\Autodesk Inventor 2015 jetzt installieren.lnk 2015-07-07 13:33 - 2015-07-07 13:33 - 00000870 _____ C:\Users\Public\Desktop\Autodesk Vault Basic 2015.lnk 2015-07-07 13:33 - 2015-07-07 13:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk Data Management 2015-07-07 13:26 - 2015-07-07 13:26 - 00001688 _____ C:\Users\Public\Desktop\Autodesk ReCap.lnk 2015-07-07 13:26 - 2015-07-07 13:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk ReCap 2015-07-07 13:26 - 2015-07-07 13:26 - 00000000 ____D C:\ProgramData\FARO 2015-07-07 13:26 - 2015-07-07 13:26 - 00000000 ____D C:\Program Files (x86)\Microsoft WSE 2015-07-07 13:15 - 2015-07-07 13:15 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Autodesk,_Inc 2015-07-07 13:09 - 2015-07-07 13:33 - 00000000 ____D C:\Users\Micha_000\Documents\Inventor 2015-07-07 12:50 - 2015-07-07 12:50 - 00001792 _____ C:\Users\Public\Desktop\Autodesk Inventor Professional 2015.lnk 2015-07-07 12:50 - 2015-07-07 12:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk Inventor 2015 2015-07-07 12:27 - 2015-07-07 12:27 - 00002157 _____ C:\Users\Public\Desktop\Autodesk Design Review 2013.lnk 2015-07-07 12:24 - 2015-07-07 12:24 - 00002223 _____ C:\Users\Public\Desktop\DWG TrueView 2015 - English.lnk 2015-07-07 12:24 - 2015-07-07 12:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DWG TrueView 2015 - English 2015-07-07 11:40 - 2015-07-07 13:41 - 07533018 _____ C:\Users\Micha_000\Downloads\Autodesk_Inventor_2015_R1_German_Win_64bit_wi_de-DE_Setup.exe 2015-07-07 11:40 - 2015-07-07 11:40 - 00337832 _____ (Autodesk Inc.) C:\Users\Micha_000\Downloads\Autodesk_Inventor_2015_R1_German_Win_64bit_wi_de-DE_Setup_webinstall.exe 2015-07-06 23:36 - 2015-07-06 23:36 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft 2015-07-06 23:35 - 2015-07-09 14:58 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\.minecraft 2015-07-06 23:28 - 2015-04-14 12:24 - 00311200 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe 2015-07-06 23:28 - 2015-04-14 12:24 - 00188832 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe 2015-07-06 23:28 - 2015-04-14 12:24 - 00188320 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe 2015-07-06 22:49 - 2015-07-06 22:49 - 00000000 ____D C:\Users\Micha_000\Downloads\Album Wochenende Rapper 2015-07-06 22:44 - 2015-07-06 22:44 - 00000098 _____ C:\Users\Micha_000\Downloads\17a4fefc-a9cf-4e34-8dd5-588aba6f55b7.htm 2015-07-06 22:42 - 2015-07-06 22:46 - 00000000 ____D C:\Users\Micha_000\Downloads\Minecraft 1.8 by TeamExtremeMc.com 2015-07-06 22:38 - 2015-07-16 20:07 - 00000000 ____D C:\Users\Micha_000\Desktop\HiWi_Dokumente 2015-07-06 14:05 - 2015-07-06 14:24 - 60149697 _____ C:\Users\Micha_000\Downloads\WK13AWR.rar.part 2015-07-03 13:36 - 2015-07-03 13:36 - 50502393 _____ C:\Users\Micha_000\Downloads\Weekend - FCKWKND (16BARS.TV PREMIERE).mp4 2015-07-03 11:16 - 2015-07-03 11:16 - 00001121 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-07-03 11:13 - 2015-07-03 11:14 - 00242928 _____ C:\Users\Micha_000\Downloads\Firefox Setup Stub 39.0.exe 2015-06-30 17:12 - 2015-07-25 18:23 - 00001252 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002UA.job 2015-06-30 17:12 - 2015-07-25 14:23 - 00001200 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002Core.job 2015-06-30 17:12 - 2015-07-18 14:18 - 00004206 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002UA 2015-06-30 17:12 - 2015-07-18 14:18 - 00003826 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002Core 2015-06-30 17:12 - 2015-06-30 17:12 - 00122759 _____ C:\Users\Micha_000\Downloads\A0-ME-mit-Hilfen_01.dwt 2015-06-30 17:12 - 2015-06-30 17:12 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Dropbox 2015-06-30 17:12 - 2015-06-30 17:12 - 00000000 ____D C:\ProgramData\Dropbox 2015-06-30 16:04 - 2015-06-30 16:11 - 00000000 ____D C:\Users\Micha_000\Desktop\Nina Urlaub ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-07-25 18:46 - 2014-06-10 17:13 - 01668365 _____ C:\WINDOWS\WindowsUpdate.log 2015-07-25 18:45 - 2014-03-28 14:24 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2015-07-25 18:21 - 2014-06-30 18:47 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2015-07-25 18:00 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru 2015-07-25 15:00 - 2014-03-28 22:04 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-995147136-1539619246-4169388671-1002 2015-07-25 14:07 - 2014-06-30 18:47 - 00001126 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2015-07-25 14:07 - 2014-06-10 17:50 - 00000000 __RDO C:\Users\Micha_000\OneDrive 2015-07-25 14:05 - 2014-06-10 17:20 - 00000000 ____D C:\Users\Micha_000 2015-07-25 14:04 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2015-07-25 13:01 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness 2015-07-25 12:38 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM 2015-07-25 12:22 - 2015-05-26 12:02 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2 2015-07-25 12:21 - 2015-04-10 16:20 - 00000000 ___SD C:\WINDOWS\system32\GWX 2015-07-24 11:34 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\Speech 2015-07-23 23:37 - 2014-05-02 13:41 - 00000000 ____D C:\Users\Micha_000\Documents\My Games 2015-07-23 12:46 - 2015-01-05 17:43 - 00000000 ____D C:\Users\Micha_000\Desktop\Studium 2015-07-23 12:31 - 2013-08-22 15:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI 2015-07-23 07:29 - 2014-03-29 13:29 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Dropbox 2015-07-22 23:43 - 2013-08-22 16:44 - 00489576 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2015-07-22 23:39 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp 2015-07-22 22:53 - 2014-11-02 18:31 - 00000000 ____D C:\ProgramData\Origin 2015-07-22 22:50 - 2014-11-02 18:57 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Origin 2015-07-22 22:50 - 2014-11-02 18:35 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Origin 2015-07-22 21:34 - 2015-03-06 23:21 - 00000000 ____D C:\Users\Micha_000\Downloads\RollerCoaster Tycoon 3 Platinum 2015-07-21 11:53 - 2015-05-20 12:43 - 00000987 _____ C:\Users\Micha_000\Documents\plot.log 2015-07-19 23:30 - 2014-07-07 09:13 - 00000000 ____D C:\Users\Micha_000\AppData\Local\G DATA 2015-07-19 23:29 - 2014-04-15 17:53 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\BitTorrent 2015-07-19 20:09 - 2014-03-29 13:34 - 00000000 ___RD C:\Users\Micha_000\Dropbox 2015-07-18 16:08 - 2014-04-28 19:37 - 00000000 ____D C:\ProgramData\G Data 2015-07-17 10:51 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache 2015-07-17 10:07 - 2015-04-13 16:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk 2015-07-17 09:53 - 2015-04-13 16:13 - 00000000 ____D C:\Program Files\Autodesk 2015-07-17 09:53 - 2015-04-13 16:04 - 00000000 ____D C:\Program Files (x86)\Autodesk 2015-07-17 08:51 - 2015-04-13 15:55 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Akamai 2015-07-17 08:44 - 2015-04-19 09:03 - 00000000 ____D C:\WINDOWS\system32\appraiser 2015-07-17 08:44 - 2015-03-17 20:44 - 00000000 ___SD C:\WINDOWS\system32\CompatTel 2015-07-17 08:44 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData 2015-07-17 08:44 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\WinStore 2015-07-16 14:20 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\FxsTmp 2015-07-16 12:53 - 2015-01-01 23:37 - 00003886 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2015-07-16 12:53 - 2014-04-04 15:28 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2015-07-16 10:15 - 2014-06-30 18:47 - 00004102 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2015-07-16 10:15 - 2014-06-30 18:47 - 00003866 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2015-07-15 21:23 - 2014-03-29 22:39 - 00000000 ____D C:\WINDOWS\system32\MRT 2015-07-14 17:57 - 2014-07-03 10:02 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Adobe 2015-07-14 17:55 - 2014-03-28 14:24 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2015-07-14 12:41 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\NDF 2015-07-14 11:43 - 2014-03-18 12:03 - 01776918 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2015-07-14 11:43 - 2014-03-18 11:25 - 00765582 _____ C:\WINDOWS\system32\perfh007.dat 2015-07-14 11:43 - 2014-03-18 11:25 - 00159366 _____ C:\WINDOWS\system32\perfc007.dat 2015-07-13 23:31 - 2015-04-10 16:20 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX 2015-07-13 23:10 - 2015-03-17 20:52 - 00792568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2015-07-13 23:10 - 2015-03-17 20:52 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2015-07-10 14:27 - 2014-09-04 21:01 - 00000000 ____D C:\Program Files (x86)\Steam 2015-07-10 14:27 - 2014-04-15 18:05 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2015-07-10 14:24 - 2014-06-10 18:09 - 00000000 ___DC C:\WINDOWS\Panther 2015-07-10 14:24 - 2014-06-10 17:34 - 00000000 ____D C:\WINDOWS\Minidump 2015-07-10 14:24 - 2014-03-28 17:09 - 00000000 ____D C:\Users\Micha_000\AppData\Local\CrashDumps 2015-07-10 11:36 - 2015-04-13 15:57 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Autodesk 2015-07-07 14:27 - 2014-07-07 08:47 - 00001755 _____ C:\Users\Micha_000\AppData\Roaming\gdscan.log 2015-07-07 14:25 - 2014-04-28 19:37 - 00000000 ____D C:\Program Files (x86)\G Data 2015-07-07 13:37 - 2015-04-13 16:26 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autodesk 2015-07-07 13:33 - 2015-04-13 16:13 - 00000000 ____D C:\Users\Public\Documents\Autodesk 2015-07-07 13:33 - 2015-04-13 15:57 - 00000000 ____D C:\ProgramData\Autodesk 2015-07-07 13:09 - 2015-04-13 16:20 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Autodesk 2015-07-07 12:49 - 2015-04-13 16:13 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared 2015-07-07 12:00 - 2014-04-19 14:00 - 00000000 ____D C:\ProgramData\Package Cache 2015-07-07 12:00 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2015-07-07 11:41 - 2015-04-13 15:54 - 00000000 ____D C:\Autodesk 2015-07-06 23:27 - 2015-04-14 12:24 - 00000000 ____D C:\Program Files\Java 2015-07-03 11:16 - 2015-06-02 19:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-07-03 11:16 - 2014-03-28 22:08 - 00001133 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-07-03 11:15 - 2014-03-28 22:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-07-03 08:43 - 2014-03-29 22:39 - 130333168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2014-07-07 08:47 - 2014-07-07 08:47 - 0000000 _____ () C:\Users\Micha_000\AppData\Roaming\gdfw.log 2014-07-07 08:47 - 2015-07-07 14:27 - 0001755 _____ () C:\Users\Micha_000\AppData\Roaming\gdscan.log 2014-07-17 11:38 - 2002-09-10 02:00 - 0351048 _____ () C:\Users\Micha_000\AppData\Roaming\omch.dll 2015-07-25 14:06 - 2015-07-25 14:09 - 0000074 _____ () C:\Users\Micha_000\AppData\Roaming\sp_data.sys 2015-01-11 20:19 - 2015-01-11 20:19 - 0003400 _____ () C:\Users\Micha_000\AppData\Local\recently-used.xbel 2014-03-29 10:40 - 2014-03-29 10:40 - 0007609 _____ () C:\Users\Micha_000\AppData\Local\Resmon.ResmonCfg 2015-07-12 19:56 - 2015-07-12 19:56 - 0000000 _____ () C:\Users\Micha_000\AppData\Local\{D2C6117B-095A-4BAB-B770-7A033EDC2AD3} 2014-06-10 17:12 - 2014-06-10 17:12 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2015-04-13 16:18 - 2015-04-13 16:18 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc 2013-04-26 01:15 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd 2013-04-26 01:15 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe 2013-04-26 01:15 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS 2013-11-21 20:46 - 2013-11-21 20:46 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log 2013-11-21 20:42 - 2013-11-21 20:44 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log 2013-11-21 20:44 - 2013-11-21 20:45 - 0000108 _____ () C:\ProgramData\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}.log 2013-11-21 20:41 - 2013-11-21 20:42 - 0000110 _____ () C:\ProgramData\{E3739848-5329-48E3-8D28-5BBD6E8BE384}.log Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\ProgramData\SetStretch.VBS Einige Dateien in TEMP: ==================== C:\Users\Micha_000\AppData\Local\Temp\AcDeltree.exe C:\Users\Micha_000\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpihefjg.dll C:\Users\Micha_000\AppData\Local\Temp\DseShExt-x64.dll C:\Users\Micha_000\AppData\Local\Temp\DseShExt-x86.dll C:\Users\Micha_000\AppData\Local\Temp\HitmanPro.exe C:\Users\Micha_000\AppData\Local\Temp\Quarantine.exe C:\Users\Micha_000\AppData\Local\Temp\SDShelEx-win32.dll C:\Users\Micha_000\AppData\Local\Temp\SDShelEx-x64.dll C:\Users\Micha_000\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\System32\winlogon.exe => Datei ist digital signiert C:\Windows\System32\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\System32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\System32\services.exe => Datei ist digital signiert C:\Windows\System32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\System32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\System32\rpcss.dll => Datei ist digital signiert C:\Windows\System32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-07-25 15:02 ==================== Ende von log ============================ |
25.07.2015, 18:04 | #8 |
| G Data meldet Junkware (PUP): Script.Adware.DealPly.G (Engine B) Und noch die Additions Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:25-07-2015 durchgeführt von Micha_000 an 2015-07-25 18:55:41 Gestartet von C:\Users\Micha_000\Downloads Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-995147136-1539619246-4169388671-500 - Administrator - Disabled) Gast (S-1-5-21-995147136-1539619246-4169388671-501 - Limited - Enabled) => C:\Users\Gast HomeGroupUser$ (S-1-5-21-995147136-1539619246-4169388671-1006 - Limited - Enabled) Micha_000 (S-1-5-21-995147136-1539619246-4169388671-1002 - Administrator - Enabled) => C:\Users\Micha_000 ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: G DATA INTERNET SECURITY (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: G DATA INTERNET SECURITY (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: G DATA Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) 7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - ) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated) Adobe Reader XI (11.0.12) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated) Akamai NetSession Interface (HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Akamai) (Version: - Akamai Technologies, Inc) Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Assassin's Creed Liberation HD (HKLM-x32\...\Assassin's Creed Liberation HD_is1) (Version: - ) ASUS Console (HKLM\...\{6D989E08-8143-4AB8-B0A8-5B836235CAA4}) (Version: 1.0.3 - ASUS) ASUS Instant Key (HKLM-x32\...\{D97A1B80-131F-4692-9543-E652956D8B99}) (Version: 1.1.3 - ASUS) ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.4 - ASUS) ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 3.0.6 - ASUS) ASUS Screen Saver (HKLM\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 1.0.1 - ASUS) ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.2.5 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 2.01.0018 - ASUS) ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 3.1.7 - ASUS) ASUS Video Magic (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.5005 - CyberLink Corp.) ASUS Video Magic (x32 Version: 6.0.5005 - CyberLink Corp.) Hidden ASUS WebStorage Sync Agent (HKLM-x32\...\ASUS WebStorage) (Version: 1.1.18.159 - ASUS Cloud Corporation) ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4924.52 - CyberLink Corp.) ASUSDVD (x32 Version: 10.0.4924.52 - CyberLink Corp.) Hidden AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.310 - ASUSTEK) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0030 - ASUS) Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team) AutoCAD Mechanical 2014 - Deutsch (German) (Version: 18.0.17.0 - Autodesk) Hidden AutoCAD Mechanical 2014 Language Pack - Deutsch (German) (Version: 18.0.17.0 - Autodesk) Hidden Autodesk 360 (HKLM\...\{556966D9-F7F6-421B-9707-D07901604DDF}) (Version: 5.1.2.1000 - Autodesk) Autodesk App Manager (HKLM-x32\...\{C8125548-F2D5-4059-823F-1F3C5BBD9F19}) (Version: 1.2.0 - Autodesk) Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 4.0.69.0 - Autodesk) Autodesk AutoCAD Mechanical 2014 - Deutsch (German) (HKLM\...\AutoCAD Mechanical 2014 - Deutsch (German)) (Version: 18.0.17.0 - Autodesk) Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.1.3.0 - Autodesk) Autodesk Content Service (x32 Version: 3.1.3.0 - Autodesk) Hidden Autodesk Content Service (x32 Version: 3.2.0.0 - Autodesk) Hidden Autodesk Content Service Language Pack (x32 Version: 3.1.3.0 - Autodesk) Hidden Autodesk Content Service Language Pack (x32 Version: 3.2.0.0 - Autodesk) Hidden Autodesk Design Review 2013 (HKLM-x32\...\Autodesk Design Review 2013) (Version: 13.0.0.82 - Autodesk, Inc.) Autodesk Design Review 2013 (x32 Version: 13.0.0.82 - Autodesk, Inc.) Hidden Autodesk DWG TrueView 2015 - English (HKLM\...\DWG TrueView 2015 - English) (Version: 20.0.51.0 - Autodesk) Autodesk Inventor Content Center Libraries 2015 (Desktop Content) (HKLM\...\{B46DECD1-1964-4EF1-0000-22D71E81877C}) (Version: 19.0.15900.0000 - Autodesk) Autodesk Inventor Professional 2015 - Deutsch (German) (HKLM\...\Autodesk Inventor Professional 2015) (Version: 19.0.15900.0000 - Autodesk) Autodesk Inventor Professional 2015 (Version: 19.0.15900.0000 - Autodesk) Hidden Autodesk Inventor Professional 2015 Language Pack - Deutsch (German) (Version: 19.0.15900.0000 - Autodesk) Hidden Autodesk Material Library 2014 (HKLM-x32\...\{644F9B19-A462-499C-BF4D-300ABC2A28B1}) (Version: 4.0.19.0 - Autodesk) Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk) Autodesk Material Library Base Resolution Image Library 2014 (HKLM-x32\...\{51BF3210-B825-4092-8E0D-66D689916E02}) (Version: 4.0.19.0 - Autodesk) Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk) Autodesk Material Library Low Resolution Image Library 2015 (HKLM-x32\...\{4FBC9635-AC56-4378-8FDE-C4D3ED072681}) (Version: 5.2.9.100 - Autodesk) Autodesk ReCap (HKLM\...\Autodesk ReCap) (Version: 1.3.3.1 - Autodesk) Autodesk ReCap (Version: 1.3.3.1 - Autodesk) Hidden Autodesk Vault Basic 2015 (Client) (HKLM\...\Autodesk Vault Basic 2015 (Client)) (Version: 19.0.49.0 - Autodesk) Autodesk Vault Basic 2015 (Client) (Version: 19.0.49.0 - Autodesk) Hidden Autodesk Vault Basic 2015 (Client) German Language Pack (Version: 19.0.49.0 - Autodesk) Hidden AxCrypt 1.7.3156.0 (HKLM\...\{8B49CDB9-824C-44D6-A5D3-D0235D3030B8}) (Version: 1.7.3156.0 - Axantum Software AB) BitTorrent (HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\BitTorrent) (Version: 7.9.3.40761 - BitTorrent Inc.) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) calibre 64bit (HKLM\...\{C7530E59-3196-4EFD-A7EE-C0BFD80026BC}) (Version: 1.46.0 - Kovid Goyal) Canon MG5100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5100_series) (Version: - Canon Inc.) CyberLink MediaEspresso 6.5 (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.3718_45957 - CyberLink Corp.) CyberLink PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.5817a - CyberLink Corp.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd) Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.5.139.1020 - Electronic Arts Inc.) Dropbox (HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Dropbox) (Version: 3.6.9 - Dropbox, Inc.) DWG TrueView 2015 - English (Version: 20.0.51.0 - Autodesk) Hidden FarCry 4 (HKLM-x32\...\Uplay Install 420) (Version: - Ubisoft) Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden G DATA INTERNET SECURITY (HKLM-x32\...\{AC68D2FF-1674-4C16-A536-A69FC11BBD82}) (Version: 25.1.0.7 - G DATA Software AG) Galerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team) Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden GoPro Studio 2.5.4 (HKLM-x32\...\GoPro Studio) (Version: 2.5.4 - GoPro, Inc.) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.10.1372 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation) IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan) iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.) Java 7 Update 21 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417021FF}) (Version: 7.0.210 - Oracle) Java 7 Update 9 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417009F0}) (Version: 7.0.90 - Oracle) JMP Pro 11 (HKLM-x32\...\{01E891AA-F4F0-4BFC-869E-8463F0304F1A}) (Version: 11.0.0 - SAS Institute Inc.) Just Cause 2 (HKLM-x32\...\Steam App 8190) (Version: - Avalanche Studios) LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) Lazarus 1.2.2 (HKLM\...\lazarus_is1) (Version: 1.2.2 - Lazarus Team) Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Minecraft1.8 (HKLM-x32\...\Minecraft1.8) (Version: - ) Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Mozilla Firefox 39.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 39.0 (x86 de)) (Version: 39.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 39.0 - Mozilla) MSXML 4.0 SP2 Parser und SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation) MyBitCast 2.0 (HKLM-x32\...\MyBitCast) (Version: 2.0 - ASUS) NetStress 2.0.9686.0 (HKLM-x32\...\NetStress_is1) (Version: - Nuts About Nets, LLC) NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation) NVIDIA Grafiktreiber 347.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.25 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation) OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation) Origin (HKLM-x32\...\Origin) (Version: 9.4.22.2815 - Electronic Arts, Inc.) Pack 500 track (HKLM-x32\...\Pack 500 track) (Version: 1.0 - ) PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.) PAYDAY: The Heist (HKLM-x32\...\Steam App 24240) (Version: - OVERKILL Software) PDF24 Creator 6.8.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org) Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.305 - Qualcomm Atheros Communications) Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros) QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.) Raccolta foto (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.11.201.2013 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7032 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.) Rocket League (HKLM-x32\...\Rocket League_is1) (Version: - Psyonix) <==== ATTENTION! RollerCoaster Tycoon 3 Platinum (HKLM-x32\...\{907B4640-266B-4A21-92FB-CD1A86CD0F63}) (Version: 1.00.000 - Atari) Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14083.9 - Samsung Electronics Co., Ltd.) Samsung Kies3 (x32 Version: 3.2.14083.9 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.33.0 - SAMSUNG Electronics Co., Ltd.) SeeYou Version 6.15 (HKLM-x32\...\SeeYou_is1) (Version: - ) Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee) SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden SketchUp-Import (HKLM-x32\...\{C403E867-FCF1-432B-BCC1-8FFD40A10A6E}) (Version: 1.2.0 - Autodesk) Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) TmNationsForever (HKLM-x32\...\TmNationsForever_is1) (Version: - Nadeo) UFRaw 0.9.1 (HKLM-x32\...\UFRaw_is1) (Version: - Udi Fuchs) Unity Web Player (HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS) Uplay (HKLM-x32\...\Uplay) (Version: 4.8 - Ubisoft) Verfügbare Autodesk-Apps (HKLM-x32\...\{EDDEE94B-214D-4B07-9727-A3E46F3E379A}) (Version: 1.2.0 - Autodesk) Windows Driver Package - ASUS (ATP) Mouse (09/17/2013 1.0.0.186) (HKLM\...\D9E691DCEE7D3B9B7C62A7F5C2EAABBB9335DC9A) (Version: 09/17/2013 1.0.0.186 - ASUS) Windows Driver Package - GoPro (WinUSB) Universal Serial Bus devices (03/07/2012 ) (HKLM\...\0B624A43DD66DBF5CF3EDFA9741A364E688062A4) (Version: 03/07/2012 - GoPro) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation) WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS) WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH) XMedia Recode Version 3.1.9.1 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.1.9.1 - XMedia Recode) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{00F064D8-FEC3-48ac-B07D-39C314D1727B}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\TestServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{1029ABC3-2457-11D5-8E9D-0010B541CD80}\localserver32 -> D:\Autodesk\Inventor 2015\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{12545889-6D32-4424-9967-1E1D7BD1F809}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{13009989-EFB5-48C9-8BD2-943E0392BD71}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\RxAppCtrl.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{18A21864-E37B-42b9-9612-2C1E8C450A29}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{1D625598-C876-4C51-8EF5-F9D8F96F62AA}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{1D6DFD6A-9E16-435A-9327-6FFEC6BA372F}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\InprocServer32 -> AcETransmit.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{1E8A29BA-827D-4031-A4A3-AE7999B402F6}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{1EA072EE-57FD-495E-889C-8243C3BDBDBC}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{1FD7F53F-7ED5-439C-9A77-A3821CD09E98}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{20E47D5B-529A-45BD-8E77-BF1A3064A008}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{21DB88B0-BFBF-11D4-8DE6-0010B541CAA8}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\iDrop.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{244298EC-E661-11d4-BC13-0010B5891E89}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\TI.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{2709544A-5B24-4F9F-A5DA-CEC7297D3A4E}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{2BCA857B-A18B-4AFA-B183-CC0E49C12058}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{2C74F89E-7421-46B4-BA54-F86F1BD9F237}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{2C7D1157-7D50-4A88-9777-5EBBA3189AB8}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{2F8377FC-50C1-44EF-AB7A-8FF1BB8EA277}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{3497C2EC-5684-4B21-AF74-F6760E0221DC}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{3897B445-D5B8-410d-899A-9789B8ADB643}\localserver32 -> D:\Autodesk\Inventor 2015\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{38C8B14E-7879-4DA9-8C3F-8CAAC359293A}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{3C3F63EA-C7BA-11d4-8E60-0010B541CD80}\localserver32 -> D:\Autodesk\Inventor 2015\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{3FC94EB5-AEBD-4f3f-A2A4-B6CE57113C01}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\RxAppDocView.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291}\InprocServer32 -> AcETransmit.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{40770568-0D5E-49D4-BE47-BC47A4F0B0A4}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{44A52280-AE56-490D-890C-89FB7279ED6B}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{45122C53-8483-4b62-B15A-EAA9FE5FC3D5}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA}\InprocServer32 -> AcETransmit.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{4C80573A-9150-11d2-B772-0060B0F159EF}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\RxAppDocView.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{4D29B490-49B2-11D0-93C3-7E0706000000}\localserver32 -> D:\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{4E6F2E83-E7F0-4333-9772-875EB733C820}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\RxTest.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B}\InprocServer32 -> AcETransmit.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{59A224A2-BEF8-4C89-96E0-83A5411ABB6C}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{622F6193-E4DD-46E6-BC66-2ED88E9FD28D}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{62FBB030-24C7-11D3-B78D-0060B0F159EF}\localserver32 -> D:\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{644190AE-BD8F-493F-B63D-C79404AC5E07}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{6451051B-AD22-4C6A-ACCE-013A0E1DDBC3}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{64B99FDB-1D85-447F-98C7-569DBDA723DB}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{6A221957-2D85-42A7-8E19-BE33950D1DEB}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{6BCE6F6E-C050-4F39-BD98-E2743949F724}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{6F56D7C9-18DD-4C15-9FA8-C54E3610EC40}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{6FDE7A70-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{6FDE7A71-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{6FDE7A72-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{6FDE7A73-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{6FDE7A74-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{6FDE7A77-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\DtCp.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{70DBCAE8-8C2B-450C-9E1D-43E4686C6512}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{713C0E8A-5AE8-4695-B442-5ED6C4FE5C42}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3}\InprocServer32 -> AcETransmit.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{72EC5CC5-88F3-45B1-A865-0A327DF58CC8}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{72EFC580-D085-4B81-8C55-26A79E445338}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{750AEC19-2E4C-4ED9-9B9F-F9CAFCD060F3}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{76283A80-50DD-11D3-A7E3-00C04F79D7BC}\localserver32 -> D:\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{7BA16B3F-1AB3-4BD7-B959-52C4B8504EE9}\InprocServer32 -> AcInetUI.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{7DE1BE5C-CEBA-4F1D-ACBC-9CE11EE9A2A1}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{81D07C3D-0350-11D3-B7C2-0060B0EC020B}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\RxAppCtrl.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{834CE679-2E47-49DE-9E41-FEC87E9192EB}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{8421A29C-54B8-11D1-9837-0060B03C43C8}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\SolidObject.Dll () CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{846217D0-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\UCxTextBtn.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{846217D1-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\UCxTextBtn.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{849AFB5B-D6C9-4924-A712-F7118FF9611F}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{85452F88-5071-492E-B850-2E3C586DCBD8}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{87F5CF8F-A06D-498F-A05F-E520E6B570DB}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{89F0FC31-3B1D-494B-A75B-6BD4FA527B8A}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{8AA16DFC-DFC6-4B51-8FA2-A5D812BE33BF}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{8B0E6BD9-610C-11D1-9842-0060B03C43C8}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\SolidObject.Dll () CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\TestServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{8ED07FEF-E1B0-4CC3-B2BA-D354828AB952}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{97E17F04-17DF-11d5-BC38-0010B5891E89}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\BodyReceiver.dll () CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{988F4102-E6E3-4282-ACAC-55270827F2A8}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{9906CDFC-DB2C-4126-9422-13139B148495}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{9A21C6C5-27FC-4442-8590-575E7AFD73BB}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{9ECF83FB-23C5-43B6-83DE-93CFBDD74D4A}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{A58F47CC-FF65-4152-B0B1-666C643A5BFC}\InprocServer32 -> AcETransmit.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{A6A3D586-44CF-44C2-A92C-620BB713B4F2}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{ABBE3F83-D585-4A50-9B69-198B0F566F2E}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{AC5CECFA-F03A-41D2-A89C-704C44935941}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{B1560245-190E-4BBD-81DF-9B642D0E5325}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{B2A579E0-A797-40B1-8AEE-A8F6404719F8}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{B47196BC-D4AB-41BB-A771-543D67CFC9F5}\InprocServer32 -> AcETransmit.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{B53CEF4B-1A13-49DE-BBC5-A7100FB2F38C}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{B5EE2B68-9A23-4BCD-BB77-FEA6DFB24DD6}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{B6B5DC40-96E3-11d2-B774-0060B0F159EF}\localserver32 -> D:\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{B80687F9-FA4C-4735-9DC4-E5715F2BC698}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{B8E7214B-25CA-4116-84CB-E86FB9625B36}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{BAE5802A-CF21-4F9C-AE04-D98F4036AC31}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{BBF6A206-CB04-479D-96AE-349E1E83319A}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{BBF9FDF1-52DC-11D0-8C04-0800090BE8EC}\localserver32 -> D:\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{BC71DEA1-D6FB-48B8-AB06-D151C81BBCDD}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{BD0DEB94-63DB-4392-9420-6EEE05094B1F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{BE54741D-E02B-4572-93D6-105AF4EDE777}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{BF224DC3-B602-4EEE-BFE9-9E4E0AED6837}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{BF4CC07E-E9BB-40D6-873F-855B211033B9}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{C061C82C-D041-4214-BB07-B608107CEFCB}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{C2D4ACCC-A3D1-4A0A-AD59-0DD8BA3D5EE1}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{C343ED84-A129-11d3-B799-0060B0F159EF}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\RxApprenticeServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{C92F8F8C-8B2C-11d4-B872-0060B0EC020B}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{CFEE2BAF-14F9-4D23-853D-B6E2BCC14263}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22}\InprocServer32 -> AcETransmit.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{D7A1987D-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ColorButton.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{D7A1987E-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ColorButton.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{DA1F437C-9BD9-11d4-B87C-0060B0EC020B}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{DB5D476B-3FF4-4E9D-A606-1E2B473BE571}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\AcInetUI.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{DCA7356C-FF94-4b20-AE04-7AA6A8E14117}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{DDA9A20F-5B56-49F5-9465-CE82FC199352}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{DE6B563C-B074-4BF1-A8A0-B3FED8703E99}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{E1C85E9F-60B2-4007-80C3-2C5E09474C3B}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\RxInventorUtilities.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2014\de-DE\acadficn.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\TestServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{E60F81E1-49B3-11D0-93C3-7E0706000000}\localserver32 -> D:\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{F13E75B9-6AF6-49CB-80B3-6D2FF6E09932}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{F2D4F4E5-EEA1-46FF-A83B-A270C92DAE4B}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\DTInterop.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{F61064CC-DBFB-47ee-9BC8-CA5A1CBDF0DA}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\InvResc.dll (Autodesk) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FA62F626-EBD5-4dc5-B970-D9E81E0E20E0}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FB469644-3F14-4403-ACCA-6B13486FF7BD}\localserver32 -> D:\Autodesk\Inventor 2015\Bin\InvTXTStack.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FD703B01-4362-423E-9BDB-91BDCB16C1C9}\InprocServer32 -> D:\Autodesk\Inventor 2015\Bin\DTInterop.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220}\InprocServer32 -> axdb.dll Keine Datei CustomCLSID: HKU\S-1-5-21-995147136-1539619246-4169388671-1002_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1}\InprocServer32 -> axdb.dll Keine Datei ==================== Wiederherstellungspunkte ========================= 19-07-2015 16:42:33 TuneUp Utilities 2014 wird entfernt 22-07-2015 21:35:58 Installed STOPzilla 7 Install. 23-07-2015 23:35:21 DirectX wurde installiert ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {0F1A5947-04BB-4E69-988E-0EBD9A31A6A1} - System32\Tasks\ASUS InstantOn Config => C:\Program Files\ASUS\P4G\InsOnCfg.exe Task: {1E16583A-0BC4-4A42-BABD-1FF4D7D7A2E8} - System32\Tasks\ASUS Console => C:\Program Files\ASUS\ASUS Console\ASUS Console Starter.exe [2013-08-16] (ASUSTek Computer Inc.) Task: {260A261F-1C3B-4903-993C-7DBC8CED29D8} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2013-07-09] () Task: {2A407FC5-33EE-4DFE-9760-849A7EB99718} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.) Task: {36D1A153-282A-4D87-91F2-98A843B3B02B} - System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8 => C:\Program Files\Bitdefender\Bitdefender 2015\bdproductdata.exe Task: {3BA2642B-B377-42C6-913B-48E50F4A366C} - System32\Tasks\{E49BFC09-603C-446D-9310-A363789500BC} => pcalua.exe -a "C:\Program Files (x86)\Atari\RollerCoaster Tycoon 3 Platinum\RCT3plus.exe" -d "C:\Program Files (x86)\Atari\RollerCoaster Tycoon 3 Platinum" Task: {6022CAF1-3A95-4B8E-8080-55911691534C} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2013-08-19] (ASUS) Task: {62DD64AD-830C-49AF-86C1-B0E12E39CEF8} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002UA => C:\Users\Micha_000\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-30] (Dropbox, Inc.) Task: {6522DBCB-84B5-4533-8B2B-B784E4AC15B6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-30] (Google Inc.) Task: {79F48D2B-DE18-4C99-95DB-9DBE9323D359} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-14] (Adobe Systems Incorporated) Task: {7BBB76FA-5EE6-40F0-9349-4C7E593FED3D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-30] (Google Inc.) Task: {7CB2FF54-B9F1-43D4-AD96-7CC1359ADBF8} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2013-08-16] (ASUSTeK Computer Inc.) Task: {8BFCCB34-6B5C-40E7-A205-69D4746D6DF4} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2015-02-12] () Task: {9D177AA0-F9BA-4EE3-8A4A-6B4ADEB41D0D} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.) Task: {B796667D-8F6F-42F5-AB7A-2AD68DEF7E0F} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2013-08-29] (ASUS) Task: {D3A76FD0-065B-4532-8E38-37EA00569C3C} - System32\Tasks\{CB434B48-8C53-4A19-B720-188ABE057E5B} => pcalua.exe -a "C:\Program Files (x86)\TmNationsForever\TmForeverLauncher.exe" -d "C:\Program Files (x86)\TmNationsForever" Task: {D41434F6-7171-464D-9018-C5C962594354} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated) Task: {D43CE6F4-C633-4032-AEBC-A9B31D41CF9F} - System32\Tasks\{86138844-4E1C-48F9-89D1-8F3060589E3E} => pcalua.exe -a E:\setup.exe -d E:\ Task: {D8658E11-F172-42AB-85BF-FFBAD35AFF4F} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002Core => C:\Users\Micha_000\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-30] (Dropbox, Inc.) Task: {F185E425-351F-4FCC-A0A5-BC4F68C4E805} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated) Task: {F2A0FEF7-B1BE-4733-AE06-26FE84B733FF} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2013-08-29] (ASUSTek Computer Inc.) Task: {FE27B1EE-9B13-40B5-9C82-7FAE76DA4E3A} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2013-09-23] (AsusTek) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002Core.job => C:\Users\Micha_000\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002UA.job => C:\Users\Micha_000\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2014-05-30 14:13 - 2015-01-10 10:07 - 00012104 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll 2014-06-10 17:13 - 2015-01-10 01:29 - 00117392 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2012-12-19 08:10 - 2012-12-19 08:10 - 00072192 _____ () C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe 2013-08-29 18:01 - 2013-08-29 18:01 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll 2013-11-21 20:44 - 2009-04-17 12:01 - 00247152 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe 2015-06-16 11:17 - 2015-06-16 11:17 - 00382584 ____N () C:\Program Files (x86)\Common Files\G Data\AVKProxy\PktIcpt2x64.dll 2013-09-07 03:48 - 2013-09-07 03:48 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll 2013-09-07 03:45 - 2013-09-07 03:45 - 00086016 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll 2013-09-07 03:52 - 2013-09-07 03:52 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe 2015-04-13 16:25 - 2014-12-05 04:27 - 00055688 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\QtSolutions_Service-head.dll 2015-04-13 16:25 - 2014-12-05 04:27 - 00104328 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\qjson0.dll 2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-08-19 19:16 - 2013-08-19 19:16 - 00015440 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll 2013-08-16 12:03 - 2013-08-16 12:03 - 00023040 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll 2013-11-21 20:22 - 2013-06-23 22:05 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) AlternateDataStreams: C:\ProgramData\Temp:054203E4 AlternateDataStreams: C:\Users\Micha_000\OneDrive:ms-properties AlternateDataStreams: C:\Users\Micha_000\Documents\Formeln.jpg:com.dropbox.attributes ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. The "AlternateShell" value will be restored.) ==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer trusted/restricted =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-995147136-1539619246-4169388671-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Micha_000\AppData\Roaming\Microsoft\Windows Photo Viewer\Hintergrundbild der Windows-Fotoanzeige.jpg DNS Servers: 192.168.2.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKLM\...\StartupApproved\StartupFolder: => "GoPro Importer.lnk" HKLM\...\StartupApproved\Run: => "NvBackend" HKLM\...\StartupApproved\Run32: => "BDRegion" HKLM\...\StartupApproved\Run32: => "UpdatePSTShortCut" HKLM\...\StartupApproved\Run32: => "RemoteControl10" HKLM\...\StartupApproved\Run32: => "iTunesHelper" HKLM\...\StartupApproved\Run32: => "G Data ASM" HKLM\...\StartupApproved\Run32: => "ADSKAppManager" HKLM\...\StartupApproved\Run32: => "PDFPrint" HKLM\...\StartupApproved\Run32: => "QuickTime Task" HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\StartupApproved\StartupFolder: => "Dropbox.lnk" HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\StartupApproved\Run: => "DAEMON Tools Lite" HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\StartupApproved\Run: => "Akamai NetSession Interface" HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\StartupApproved\Run: => "Autodesk Sync" HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\StartupApproved\Run: => "DevidAgent" HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\StartupApproved\Run: => "Dropbox Update" HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\StartupApproved\Run: => "EADM" ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{935EE17C-F709-4773-BA5D-7DDA9A27DF95}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{88618AE9-236C-49DD-9C53-2FA540C291E1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{295C1829-0F0D-4842-87B6-C37E474D71EC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{0A327574-7A6B-4117-97D0-5D02C4BA0E9E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{F71B8C73-3769-48E7-8E44-ADEF4B000CE2}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{DD40DF70-C193-48D4-B3E6-8A8AD0A51457}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{D5BD6AF3-86DB-4C90-9665-9D277F1C4357}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{5F368745-4C5D-4983-B153-7B8EB49C8B56}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{983DF9AC-51B6-407B-914C-E54F275226E7}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{7C8C1AA2-B66B-46D3-A5DC-08B91006C4EB}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{3FFF0FB7-475E-49E8-83BD-EA6B7BEEC632}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe FirewallRules: [{14B9CB64-E7A5-4EC5-8D40-BA204488A315}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe FirewallRules: [{832C775E-D83A-456B-AB20-6F4202743BF2}] => (Allow) C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{AF8ADED2-C6DE-4056-B90A-46D95C7F56D0}] => (Allow) C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{5B7597CB-8464-47DA-9AE4-84D6660C9A71}] => (Allow) C:\Program Files (x86)\Cyberlink\PowerDVD10\PowerDVD10.EXE FirewallRules: [{1DC26C88-E657-464B-BA8C-C720F34B2154}] => (Allow) C:\Program Files (x86)\Cyberlink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe FirewallRules: [{6F9B5EDF-20B9-433A-9880-382776300DB4}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDirector\PDR8.EXE FirewallRules: [{08DF9207-336B-4D4F-B1FD-122BC45D324B}] => (Allow) LPort=1900 FirewallRules: [{CACDB418-5466-44CB-97EB-234638B11E8D}] => (Allow) LPort=2869 FirewallRules: [{8F742722-EB63-4B60-8280-435B83C49A8F}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{01245DFD-66D8-4060-A4D4-EA32525538DC}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe FirewallRules: [{1C44C1E1-5F0F-49BC-A278-3B6AF36DA401}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{3B169D18-050B-48AB-8F67-D4311DFB4883}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{24ABCF6F-C0E0-45BE-88F4-CE89233E3E21}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{A002F52C-D88F-4947-A053-AD32977C00F3}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{62644631-DD2F-45B4-ADC1-EB7FB18CEDC7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe FirewallRules: [{A92D18D5-D544-4E3F-A50F-47BF82AB411C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe FirewallRules: [{4EAEC07F-E813-401C-8435-9072EA4E70E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe FirewallRules: [{C5387DA9-AED5-4428-9E59-B709F6612D28}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe FirewallRules: [{B127F453-789C-4C7B-B942-CDB1982FF35E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Just Cause 2\JustCause2.exe FirewallRules: [{BE1CF53B-436E-4576-8150-043ACCAA4217}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Just Cause 2\JustCause2.exe FirewallRules: [{A1D171BF-134F-401B-B804-3E904CC6E764}] => (Allow) D:\Ubisoft\FarCry 4\bin\FarCry4.exe FirewallRules: [{07F46608-E7A4-4C36-88D4-FB6DD553354E}] => (Allow) D:\Ubisoft\FarCry 4\bin\FarCry4.exe FirewallRules: [{A4FBC3E8-1800-481A-84B2-16C4BF0A3038}] => (Allow) D:\Ubisoft\FarCry 4\bin\IGE_WPF64.exe FirewallRules: [{C9AFCA7A-9885-4DC4-B3D9-0A808F826AB5}] => (Allow) D:\Ubisoft\FarCry 4\bin\IGE_WPF64.exe FirewallRules: [{837236C9-AA97-4294-84FD-88285CB73761}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{D862F272-9EEA-4B99-89CD-C74FAD20A216}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{B3572565-0486-4FB9-ADF1-7DB92D99EED3}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe FirewallRules: [{A41C3FE6-6C5D-408A-95CE-C6D346914404}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe FirewallRules: [TCP Query User{73DE4DD8-27F5-4507-9E5D-E592D302F086}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{CC183B46-DD94-4795-9B01-2D33ADC495F7}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [{B745C93E-E5ED-4D51-AE1B-3D4B0EA41FCC}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe FirewallRules: [{359D2ECF-1615-4C5D-B733-626A79786B48}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe FirewallRules: [{665F67A8-9007-4EEB-9BE6-65B7B426D945}] => (Allow) D:\Program Files (x86)\Origin Games\Syndicate (1993)\data\Game\DOSBox\LAUNCHER.exe FirewallRules: [{F8481C0C-6EC1-4F0D-AFDD-D67734250331}] => (Allow) D:\Program Files (x86)\Origin Games\Syndicate (1993)\data\Game\DOSBox\LAUNCHER.exe FirewallRules: [TCP Query User{1B2F0464-F482-4F31-AC66-3DAD0B1C0E77}C:\users\micha_000\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\micha_000\appdata\local\akamai\netsession_win.exe FirewallRules: [UDP Query User{D59F5760-B252-4A75-B755-FB9B87583627}C:\users\micha_000\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\micha_000\appdata\local\akamai\netsession_win.exe FirewallRules: [{228AD7B6-BC7C-4B2F-B425-B68DD4E5D143}] => (Allow) LPort=50248 FirewallRules: [{897C89C9-A4DF-4E0E-858E-7992AED8FA66}] => (Allow) LPort=50248 ==================== Fehlerhafte Geräte im Gerätemanager ============= ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (07/25/2015 06:49:51 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm FRST64.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 13ac Startzeit: 01d0c6f95b03f474 Endzeit: 60000 Anwendungspfad: C:\Users\Micha_000\Downloads\FRST64.exe Berichts-ID: bd14d9b0-32ec-11e5-bf07-bcee7b11dba8 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (07/25/2015 06:37:45 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest. Error: (07/25/2015 02:45:58 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest. Error: (07/25/2015 02:45:57 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest. Error: (07/25/2015 02:39:58 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest. Error: (07/25/2015 12:30:24 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest. Error: (07/25/2015 12:30:22 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest. Error: (07/25/2015 12:22:32 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest. Error: (07/25/2015 12:22:30 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest. Error: (07/25/2015 12:22:28 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest. Systemfehler: ============= Error: (07/25/2015 02:46:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (07/25/2015 02:46:44 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\MICHA_~1\AppData\Local\Temp\ehdrv.sys Error: (07/25/2015 02:46:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (07/25/2015 02:46:43 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\MICHA_~1\AppData\Local\Temp\ehdrv.sys Error: (07/25/2015 02:46:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (07/25/2015 02:46:43 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\MICHA_~1\AppData\Local\Temp\ehdrv.sys Error: (07/25/2015 02:04:40 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Das System wurde zuvor am 24.07.2015 um 13:45:13 unerwartet heruntergefahren. Error: (07/25/2015 12:32:25 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80010108 fehlgeschlagen: Microsoft.Office.OneNote Error: (07/25/2015 12:24:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: %%1275 Error: (07/25/2015 12:24:34 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\MICHA_~1\AppData\Local\Temp\ehdrv.sys Microsoft Office: ========================= Error: (07/25/2015 06:49:51 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: FRST64.exe0.0.0.013ac01d0c6f95b03f47460000C:\Users\Micha_000\Downloads\FRST64.exebd14d9b0-32ec-11e5-bf07-bcee7b11dba8 Error: (07/25/2015 06:37:45 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe Error: (07/25/2015 02:45:58 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\Users\Micha_000\Downloads\esetsmartinstaller_deu.exe Error: (07/25/2015 02:45:57 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\Users\Micha_000\Downloads\esetsmartinstaller_deu.exe Error: (07/25/2015 02:39:58 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\Users\Micha_000\Downloads\esetsmartinstaller_deu.exe Error: (07/25/2015 12:30:24 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\Users\Micha_000\Downloads\esetsmartinstaller_deu.exe Error: (07/25/2015 12:30:22 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\Users\Micha_000\Downloads\esetsmartinstaller_deu.exe Error: (07/25/2015 12:22:32 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\Users\Micha_000\Downloads\esetsmartinstaller_deu.exe Error: (07/25/2015 12:22:30 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\Users\Micha_000\Downloads\esetsmartinstaller_deu.exe Error: (07/25/2015 12:22:28 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\Users\Micha_000\Downloads\esetsmartinstaller_deu.exe ==================== Speicherinformationen =========================== Processor: Intel(R) Core(TM) i7-4700HQ CPU @ 2.40GHz Percentage of memory in use: 29% Total physical RAM: 8075.18 MB Available physical RAM: 5687.36 MB Total Virtual: 9355.18 MB Available Virtual: 6285.23 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:372.17 GB) (Free:99.29 GB) NTFS ==>[System mit Startkomponenten (eingeholt von lesen Laufwerk)] Drive d: (DATA) (Fixed) (Total:537.8 GB) (Free:408.38 GB) NTFS Drive e: (Sims4EP01) (CDROM) (Total:1.6 GB) (Free:0 GB) UDF ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: 5B98F280) Partition: GPT Partition Type. ==================== Ende von log ============================ |
26.07.2015, 13:12 | #9 |
/// the machine /// TB-Ausbilder | G Data meldet Junkware (PUP): Script.Adware.DealPly.G (Engine B) Kommt das Popup nur wenn Du den Browser offen hast? Wenn ja welchen Browser? Zeig mal nen Screenshot von dem Fund.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
26.07.2015, 14:38 | #10 |
| G Data meldet Junkware (PUP): Script.Adware.DealPly.G (Engine B) PopUp kommt immer, egal ob Browser oder nicht. Sogar wenn ich das Wlan abgeschaltet habe, d.h. keine Verbindung zum Internet da ist, meldet sich G Data. Als Browser benutze ich nur Firefox, ansonsten ist halt der Internet Explorer installiert, den habe ich bis jetzt aber noch nie benutzt. Screenshot ist angehängt! Interessant ist, dass die Meldung sogar kommt, wenn ich alle Programmteile von G Data deaktiviert habe, d.h. kein Virenwächter, keine Verhaltensüberwachung, kein Webschutz, keine Firewall. Geändert von Zodiak (26.07.2015 um 14:45 Uhr) |
27.07.2015, 06:54 | #11 |
/// the machine /// TB-Ausbilder | G Data meldet Junkware (PUP): Script.Adware.DealPly.G (Engine B) Revo Uninstaller - Download - Filepony damit Firefox deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren. Dann: https://support.mozilla.org/de/kb/fi...einfach-loesen Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter Emptytemp: Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
27.07.2015, 18:07 | #12 |
| G Data meldet Junkware (PUP): Script.Adware.DealPly.G (Engine B) So, das Gute zuerst: Die Meldung ist weg! Bzw. tritt nicht mehr auf! Problem ist jetzt nur bei FRST, ich habe das Programm auf deutsch, allerdings finde ich da keinen Fix Button oder ähnliches. Gibt nur Untersuchen, Datei-Suche, Registry-Suche und Entfernen. Bei den Checkboxen ist auch nichts mit 'Fix'. LG |
28.07.2015, 07:19 | #13 |
/// the machine /// TB-Ausbilder | G Data meldet Junkware (PUP): Script.Adware.DealPly.G (Engine B) Ja, gibt es jetzt auf Deutsch. Und Fix auf Deutsch heißt Entfernen.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
28.07.2015, 13:24 | #14 |
| G Data meldet Junkware (PUP): Script.Adware.DealPly.G (Engine B) Ah, okay, dann macht das Sinn! Dann hier der Log: fixlist.txt Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:25-07-2015 durchgeführt von Micha_000 an 2015-07-28 14:19:30 Run:1 Gestartet von C:\Users\Micha_000\Desktop\TrojanerBoard Geladene Profile: Micha_000 (Verfügbare Profile: Micha_000 & Gast) Start-Modus: Normal ============================================== fixlist Inhalt: ***************** Emptytemp: ***************** EmptyTemp: => 1.1 GB temporäre Dateien entfernt. Das System musste neu gestartet werden.. ==== Ende von Fixlog 14:20:24 ==== |
29.07.2015, 06:49 | #15 |
/// the machine /// TB-Ausbilder | G Data meldet Junkware (PUP): Script.Adware.DealPly.G (Engine B) Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu G Data meldet Junkware (PUP): Script.Adware.DealPly.G (Engine B) |
akamai, avast, browser, computer, dealply, defender, desktop, explorer, firefox, flash player, ftp, g data, hängen, junkware, mozilla, programm, realtek, registry, rundll, scan, security, services.exe, software, svchost.exe, system, virus, windows, wlan |