| |  Ständige Werbung in allen Browsern unter Windows 10
 Wie hier schon einige gepostet haben, hab auch ich sofort nach der installation von Windows 10 überall in allen brosern nur ständige Werbung und es öffnen sich Seiten und all so ein Mist.
FRST hab ich mir schon riuntergeladen und ausgeführt. Hier sind die logs :
frst.txt Zitat:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:13-08-2015
durchgeführt von Stefan Rienits (Administrator) auf WIN7 (14-08-2015 13:37:29)
Gestartet von C:\Users\Stefan Rienits\Desktop
Geladene Profile: Stefan Rienits (Verfügbare Profile: Stefan Rienits & DefaultAppPool)
Platform: Windows 10 Home (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
() C:\Windows\System32\AppleOSSMgr.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Windows\System32\AppleTimeSrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
() C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Lavasoft Limited) C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe
(3Dconnexion) C:\Program Files\3Dconnexion\3DxWare\3DxWinCore64\Mgl3DCtlrRPCService.exe
(Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Realtek) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
() C:\Windows\DAODx.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Microsoft Corporation) C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(3Dconnexion, INC) C:\Program Files\3Dconnexion\3DxWare\3DxWinCore64\3DxService.exe
(3Dconnexion) C:\Program Files\3Dconnexion\3DxWare\3DxWinCore64\3dxpiemenus.exe
(Apple Inc.) C:\Program Files\Boot Camp\Bootcamp.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Lavasoft) C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
() C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Microsoft Corporation) C:\Users\Stefan Rienits\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Bridge CC (64 Bit)\Bridge.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite\QFan4\FanHelp.exe
() C:\Program Files\ASUS\TurboV\TurboV.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe
(Joyent, Inc) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\ActionUriServer.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.12101.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_232.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_232.exe
==================== Registry (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [3DxWare Service] => C:\Program Files\3Dconnexion\3DxWare\3DxWinCore64\3DxService.exe [2040704 2015-03-02] (3Dconnexion, INC)
HKLM\...\Run: [Apple_KbdMgr] => C:\Program Files\Boot Camp\Bootcamp.exe [741760 2011-06-29] (Apple Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-07-22] (Adobe Systems Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170280 2015-07-11] (Apple Inc.)
HKLM-x32\...\Run: [ATICustomerCare] => C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe [311296 2010-05-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [QFan Help] => C:\Program Files (x86)\ASUS\AI Suite\QFan4\FanHelp.exe [888960 2010-03-25] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [TurboV] => C:\Program Files\ASUS\TurboV\TurboV.exe [5391872 2009-05-25] ()
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [85160 2009-05-27] (Elaborate Bytes AG)
HKLM-x32\...\Run: [LexwareInfoService] => C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe [196648 2014-09-26] (Haufe-Lexware GmbH & Co. KG)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [39179912 2015-08-06] (Dropbox, Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-17] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2303152 2015-07-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [1855672 2015-07-03] (Adobe Systems Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [134368 2015-07-02] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [782008 2015-07-15] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-19\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-20\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-21-3284333134-1924242821-226728937-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2015-03-23] (Google Inc.)
HKU\S-1-5-21-3284333134-1924242821-226728937-1000\...\Run: [uTorrent] => C:\Users\Stefan Rienits\AppData\Roaming\uTorrent\uTorrent.exe [1693024 2015-07-30] (BitTorrent Inc.)
HKU\S-1-5-21-3284333134-1924242821-226728937-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [2899136 2015-08-12] (Valve Corporation)
HKU\S-1-5-21-3284333134-1924242821-226728937-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53655680 2015-07-28] (Skype Technologies S.A.)
HKU\S-1-5-21-3284333134-1924242821-226728937-1000\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [1381648 2015-06-08] (Lavasoft)
HKU\S-1-5-21-3284333134-1924242821-226728937-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-3284333134-1924242821-226728937-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-3284333134-1924242821-226728937-1000\...\Run: [OneDrive] => C:\Users\Stefan Rienits\AppData\Local\Microsoft\OneDrive\OneDrive.exe [402632 2015-08-06] (Microsoft Corporation)
HKU\S-1-5-21-3284333134-1924242821-226728937-1000\...\Run: [AdobeBridge] => C:\Program Files\Adobe\Adobe Bridge CC (64 Bit)\Bridge.exe [20848816 2015-03-26] (Adobe Systems Incorporated)
HKU\S-1-5-21-3284333134-1924242821-226728937-1000\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [876728 2015-07-03] (Adobe Systems Incorporated)
HKU\S-1-5-21-3284333134-1924242821-226728937-1000\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-3284333134-1924242821-226728937-1000\...\RunOnce: [Uninstall C:\Users\Stefan Rienits\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Stefan Rienits\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
HKU\S-1-5-21-3284333134-1924242821-226728937-1000\...\RunOnce: [Uninstall C:\Users\Stefan Rienits\AppData\Local\Microsoft\OneDrive\17.3.5892.0626] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Stefan Rienits\AppData\Local\Microsoft\OneDrive\17.3.5892.0626"
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-07-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-07-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-07-22] ()
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
CHR HKLM\SOFTWARE\Policies\Google: Richtlinienbeschränkung <======= ACHTUNG
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-21-3284333134-1924242821-226728937-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKU\S-1-5-21-3284333134-1924242821-226728937-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
HKU\S-1-5-21-3284333134-1924242821-226728937-1000\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=MSE&Tid=000328B0&OHP=about%3Ablank&OSP=http%3A%2F%2Fwww.bing.com%2Fsearch%3Fq%3D%7BsearchTerms%7D%26form%3DMSSEDF%26pc%3DMSSE
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www-searching.com/search.aspx?site=shdefault&pid=s&shr=d&q={searchTerms}&s=F86zamodk011652,1e811dac-d4fb-4f9e-aa56-f30826842e81,
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM-x32 -> {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-3284333134-1924242821-226728937-1000 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=SAMSUNGXSSDX830XSeries_S0Z3NSAC930246&ts=1438867767&type=default&q={s earchTerms}
SearchScopes: HKU\S-1-5-21-3284333134-1924242821-226728937-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=SAMSUNGXSSDX830XSeries_S0Z3NSAC930246&ts=1438867767&type=default&q={s earchTerms}
SearchScopes: HKU\S-1-5-21-3284333134-1924242821-226728937-1000 -> {29ECCBF7-035E-46A0-AD93-B601C3857264} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=SAMSUNGXSSDX830XSeries_S0Z3NSAC930246&ts=1438867767&type=default&q={s earchTerms}
SearchScopes: HKU\S-1-5-21-3284333134-1924242821-226728937-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKU\S-1-5-21-3284333134-1924242821-226728937-1000 -> {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=SAMSUNGXSSDX830XSeries_S0Z3NSAC930246&ts=1438867767&type=default&q={s earchTerms}
SearchScopes: HKU\S-1-5-21-3284333134-1924242821-226728937-1000 -> {A6715F03-E83B-4FFF-A19A-6B62BBB4B4BC} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=SAMSUNGXSSDX830XSeries_S0Z3NSAC930246&ts=1438867767&type=default&q={s earchTerms}
SearchScopes: HKU\S-1-5-21-3284333134-1924242821-226728937-1000 -> {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=SAMSUNGXSSDX830XSeries_S0Z3NSAC930246&ts=1438867767&type=default&q={s earchTerms}
SearchScopes: HKU\S-1-5-21-3284333134-1924242821-226728937-1000 -> {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=SAMSUNGXSSDX830XSeries_S0Z3NSAC930246&ts=1438867767&type=default&q={s earchTerms}
SearchScopes: HKU\S-1-5-21-3284333134-1924242821-226728937-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=SAMSUNGXSSDX830XSeries_S0Z3NSAC930246&ts=1438867767&type=default&q={s earchTerms}
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-30] (Google Inc.)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-07-03] (Adobe Systems Incorporated)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-07-03] (Adobe Systems Incorporated)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-30] (Google Inc.)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-07-03] (Adobe Systems Incorporated)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2015-05-31] (Sun Microsystems, Inc.)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-07-03] (Adobe Systems Incorporated)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-30] (Google Inc.)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-07-03] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-30] (Google Inc.)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-07-03] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-3284333134-1924242821-226728937-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-30] (Google Inc.)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Winsock: Catalog9-x64 01 C:\Windows\system32\LavasoftTcpService64.dll [428880 2015-06-16] (Lavasoft Limited)
Winsock: Catalog9-x64 02 C:\Windows\system32\LavasoftTcpService64.dll [428880 2015-06-16] (Lavasoft Limited)
Winsock: Catalog9-x64 03 C:\Windows\system32\LavasoftTcpService64.dll [428880 2015-06-16] (Lavasoft Limited)
Winsock: Catalog9-x64 04 C:\Windows\system32\LavasoftTcpService64.dll [428880 2015-06-16] (Lavasoft Limited)
Winsock: Catalog9-x64 05 C:\Windows\system32\LavasoftTcpService64.dll [428880 2015-06-16] (Lavasoft Limited)
Winsock: Catalog9-x64 18 C:\WINDOWS\system32\Peakoar64.dll File Not ' & $found1 & '
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\..\Interfaces\{00f21293-3fe3-4a0a-a089-f119d38602eb}: [NameServer] 192.168.2.1
Tcpip\..\Interfaces\{9c0c0e06-8708-40cb-9e2c-c1f66cb0bb32}: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Stefan Rienits\AppData\Roaming\Mozilla\Firefox\Profiles\ncnxmjih.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: Google Default
FF SelectedSearchEngine: mystartsearch
FF Homepage: about:home
FF Keyword.URL: hxxp://www-searching.com/search.aspx?site=shdefault&pid=s&shr=d&q={searchTerms}&s=F86zamodk011652,1e811dac-d4fb-4f9e-aa56-f30826842e81,
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-11] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-07-23] (Adobe Systems)
FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-01-06] ()
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll [2015-05-31] (Sun Microsystems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [Keine Datei]
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-30] (Google Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-07-23] (Adobe Systems)
FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF user.js: detected! => C:\Users\Stefan Rienits\AppData\Roaming\Mozilla\Firefox\Profiles\ncnxmjih.default\user.js [2015-08-11]
FF SearchPlugin: C:\Users\Stefan Rienits\AppData\Roaming\Mozilla\Firefox\Profiles\ncnxmjih.default\searchplugins\google-default.xml [2015-06-25]
FF SearchPlugin: C:\Users\Stefan Rienits\AppData\Roaming\Mozilla\Firefox\Profiles\ncnxmjih.default\searchplugins\securesearch.xml [2015-06-16]
FF SearchPlugin: C:\Users\Stefan Rienits\AppData\Roaming\Mozilla\Firefox\Profiles\ncnxmjih.default\searchplugins\smod.xml [2015-08-06]
FF Extension: Avira Browser Safety - C:\Users\Stefan Rienits\AppData\Roaming\Mozilla\Firefox\Profiles\ncnxmjih.default\Extensions\abs@avira.com [2015-08-12]
FF Extension: iCloud Bookmarks - C:\Users\Stefan Rienits\AppData\Roaming\Mozilla\Firefox\Profiles\ncnxmjih.default\Extensions\firefoxdav@icloud.com [2015-08-06]
FF Extension: Avira SafeSearch Plus - C:\Users\Stefan Rienits\AppData\Roaming\Mozilla\Firefox\Profiles\ncnxmjih.default\Extensions\safesearchplus@avira.com [2015-08-12]
FF Extension: Adblock Plus - C:\Users\Stefan Rienits\AppData\Roaming\Mozilla\Firefox\Profiles\ncnxmjih.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-08-13]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-08-13]
FF HKLM\...\Firefox\Extensions: [{0a0e29f6-0ab0-44e1-a98e-bd050ee692ec}] - C:\Program Files\shopperz04082015\Firefox
FF HKLM-x32\...\Firefox\Extensions: [defsearchp@gmail.com] - C:\Users\Stefan Rienits\AppData\Roaming\Mozilla\Firefox\Profiles\ncnxmjih.default\extensions\defsearchp@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [{0a0e29f6-0ab0-44e1-a98e-bd050ee692ec}] - C:\Program Files\shopperz04082015\Firefox
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat DC - Create PDF - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn [2015-08-11]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\browser\defaults\preferences\prefs.js [2015-08-13]
Chrome:
=======
CHR dev: Chrome dev build erkannt! <======= ACHTUNG
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [khjilmcjipkeokomeekfnhkpbnhmgaje] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [khjilmcjipkeokomeekfnhkpbnhmgaje] - https://clients2.google.com/service/update2/crx
Opera:
=======
OPR Extension: (CinemaPlus_1.3dV31.07) - C:\Users\Stefan Rienits\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi [2015-08-06]
OPR Extension: (Cinema_Plus-1.2V31.07) - C:\Users\Stefan Rienits\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-08-06]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [680112 2015-07-22] (Adobe Systems Incorporated)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [887128 2015-07-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [461672 2015-07-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [461672 2015-07-15] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1213072 2015-07-15] (Avira Operations GmbH & Co. KG)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)
R2 AppleOSSMgr; C:\Windows\system32\AppleOSSMgr.exe [224640 2011-06-29] ()
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [96896 2009-12-28] (ASUSTeK Computer Inc.)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [218816 2015-07-02] (Avira Operations GmbH & Co. KG)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [326144 2015-07-10] (Microsoft Corporation)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S3 CDPSvc; C:\Windows\System32\CDPSvc.dll [134144 2015-07-10] (Microsoft Corporation)
R2 CoreMessagingRegistrar; C:\Windows\system32\coremessaging.dll [808856 2015-08-06] (Microsoft Corporation)
R2 CoreMessagingRegistrar; C:\Windows\SysWOW64\coremessaging.dll [510976 2015-08-06] (Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-12] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-12] (Dropbox, Inc.)
S3 diagnosticshub.standardcollector.service; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [27136 2015-07-10] (Microsoft Corporation)
R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [216576 2015-07-10] () [Datei ist nicht signiert]
S3 DmEnrollmentSvc; C:\Windows\system32\Windows.Internal.Management.dll [267776 2015-07-10] (Microsoft Corporation)
S3 DmEnrollmentSvc; C:\Windows\SysWOW64\Windows.Internal.Management.dll [193024 2015-07-10] (Microsoft Corporation)
S3 embeddedmode; C:\Windows\System32\embeddedmodesvc.dll [87040 2015-07-10] (Microsoft Corporation)
S3 EntAppSvc; C:\Windows\system32\EnterpriseAppMgmtSvc.dll [275456 2015-07-10] (Microsoft Corporation)
S3 icssvc; C:\Windows\System32\tetheringservice.dll [148992 2015-08-06] (Microsoft Corporation)
R2 LavasoftTcpService; C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe [2751792 2015-06-08] (Lavasoft Limited)
R2 Lexware_Update_Service; C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe [64552 2014-10-02] (Haufe-Lexware GmbH & Co. KG)
R3 lfsvc; C:\Windows\SysWOW64\lfsvc.dll [22528 2015-07-10] (Microsoft Corporation)
R3 LicenseManager; C:\Windows\system32\LicenseManagerSvc.dll [21504 2015-07-10] (Microsoft Corporation)
S2 MapsBroker; C:\Windows\System32\moshost.dll [62464 2015-07-10] (Microsoft Corporation)
R2 Mgl3DCtlrRPCService; C:\Program Files\3Dconnexion\3DxWare\3DxWinCore64\Mgl3DCtlrRPCService.exe [57856 2015-03-02] (3Dconnexion) [Datei ist nicht signiert]
R2 MSMQ; C:\Windows\system32\mqsvc.exe [26112 2015-08-06] (Microsoft Corporation)
S2 OneSyncSvc; C:\Windows\System32\APHostService.dll [296960 2015-07-10] (Microsoft Corporation)
R2 OneSyncSvc_Session1; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
R2 OneSyncSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 PimIndexMaintenanceSvc; C:\Windows\System32\PimIndexMaintenance.dll [289280 2015-07-10] (Microsoft Corporation)
R3 PimIndexMaintenanceSvc_Session1; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
R3 PimIndexMaintenanceSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
R2 Realtek11nSU; C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek) [Datei ist nicht signiert]
S3 RetailDemo; C:\Windows\system32\RDXService.dll [988672 2015-08-03] (Microsoft Corporation)
R2 SearchProtectionService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe [19816 2015-06-08] ()
S3 SensorDataService; C:\Windows\System32\SensorDataService.exe [1031680 2015-08-06] (Microsoft Corporation)
R3 StateRepository; C:\Windows\system32\windows.staterepository.dll [2674176 2015-07-10] (Microsoft Corporation)
R3 StateRepository; C:\Windows\SysWOW64\windows.staterepository.dll [2049024 2015-07-10] (Microsoft Corporation)
S3 UnistoreSvc; C:\Windows\System32\unistore.dll [1203200 2015-08-06] (Microsoft Corporation)
S3 UnistoreSvc; C:\Windows\SysWOW64\unistore.dll [925696 2015-08-06] (Microsoft Corporation)
R3 UnistoreSvc_Session1; C:\WINDOWS\System32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
R3 UnistoreSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 UserDataSvc; C:\Windows\System32\userdataservice.dll [1420288 2015-08-06] (Microsoft Corporation)
R3 UserDataSvc_Session1; C:\WINDOWS\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
R3 UserDataSvc_Session1; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 vmicvmsession; C:\Windows\System32\ICSvc.dll [506880 2015-07-10] (Microsoft Corporation)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [84480 2015-08-06] (Microsoft Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [578560 2015-08-06] (Microsoft Corporation)
S3 WalletService; C:\Windows\system32\WalletService.dll [504320 2015-07-10] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [655040 2015-07-08] (Wacom Technology, Corp.)
S3 XblAuthManager; C:\Windows\System32\XblAuthManager.dll [918016 2015-07-10] (Microsoft Corporation)
S3 XblGameSave; C:\Windows\System32\XblGameSave.dll [1149440 2015-07-10] (Microsoft Corporation)
S3 XboxNetApiSvc; C:\Windows\system32\XboxNetApiSvc.dll [1019392 2015-07-10] (Microsoft Corporation)
S2 BrsHelper; C:\PROGRA~2\YTDOWN~1\BROWSE~2.EXE [X]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /medsvc [X] <==== ACHTUNG
S2 wbsvc; "C:\Program Files\WebBar\wbsvc.exe" [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 3dxhid; C:\Windows\System32\drivers\3dxhid.sys [39184 2015-01-22] (3Dconnexion SAM)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [137288 2015-07-15] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [148632 2015-07-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2015-07-15] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [43576 2015-07-15] (Avira Operations GmbH & Co. KG)
R1 bsdriver; C:\WINDOWS\system32\drivers\bsdriver.sys [34712 2015-08-07] ()
S1 cherimoya; C:\Windows\System32\drivers\cherimoya.sys [61336 2015-06-18] () [Datei ist nicht signiert]
R3 CompositeBus; C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys [39936 2015-07-10] (Microsoft Corporation)
R3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [146856 2015-08-08] (Windows (R) Win 7 DDK provider)
R3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [21928 2015-08-08] (Windows (R) Win 7 DDK provider)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3436896 2015-07-10] (QLogic Corporation)
R1 FileCrypt; C:\Windows\System32\drivers\filecrypt.sys [83968 2015-07-10] (Microsoft Corporation)
S3 genericusbfn; C:\Windows\System32\drivers\genericusbfn.sys [20992 2015-07-10] (Microsoft Corporation)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2015-06-16] (GFI Software)
R1 GpuEnergyDrv; C:\Windows\System32\drivers\gpuenergydrv.sys [8192 2015-07-10] (Microsoft Corporation)
S3 ibbus; C:\Windows\System32\drivers\ibbus.sys [424800 2015-07-10] (Mellanox)
S3 IoQos; C:\Windows\System32\drivers\ioqos.sys [26624 2015-07-10] (Microsoft Corporation)
R3 KMJHidMini; C:\Windows\System32\drivers\3dxkmj.sys [18944 2013-10-08] (3Dconnextion Inc.)
R3 KMJShim; C:\Windows\System32\drivers\3dxshim.sys [7168 2013-10-08] (3Dconnextion Inc.)
S0 LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [99168 2015-07-10] (Avago Technologies)
S3 mlx4_bus; C:\Windows\System32\drivers\mlx4_bus.sys [705376 2015-07-10] (Mellanox)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [175104 2015-08-06] (Microsoft Corporation)
R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] ()
S3 ndfltr; C:\Windows\System32\drivers\ndfltr.sys [76128 2015-07-10] (Mellanox)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek )
R2 storqosflt; C:\Windows\System32\drivers\storqosflt.sys [61952 2015-07-10] (Microsoft Corporation)
R3 swenum; C:\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys [17760 2015-07-10] (Microsoft Corporation)
S3 UcmCx0101; C:\Windows\System32\Drivers\UcmCx.sys [61952 2015-07-10] (Microsoft Corporation)
S3 UcmUcsi; C:\Windows\System32\drivers\UcmUcsi.sys [46080 2015-08-06] (Microsoft Corporation)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
R0 WindowsTrustedRT; C:\Windows\System32\drivers\WindowsTrustedRT.sys [106520 2015-07-10] (Microsoft Corporation)
R0 WindowsTrustedRTProxy; C:\Windows\System32\drivers\WindowsTrustedRTProxy.sys [17944 2015-07-10] (Microsoft Corporation)
S3 WinMad; C:\Windows\System32\drivers\winmad.sys [26976 2015-07-10] (Mellanox)
S3 WinVerbs; C:\Windows\System32\drivers\winverbs.sys [59232 2015-07-10] (Mellanox)
S3 xboxgip; C:\Windows\System32\drivers\xboxgip.sys [222720 2015-07-10] (Microsoft Corporation)
S3 xinputhid; C:\Windows\System32\drivers\xinputhid.sys [25600 2015-07-10] (Microsoft Corporation)
R1 {92c9ea8e-d032-4248-a8a1-80ea1615e38a}Gw64; C:\Windows\System32\drivers\{92c9ea8e-d032-4248-a8a1-80ea1615e38a}Gw64.sys [48784 2015-08-06] (StdLib)
S3 EraserUtilDrv11511; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11511.sys [X]
U3 idsvc; kein ImagePath
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
U3 wpcsvc; kein ImagePath
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
NETSVC: dosvc -> C:\Windows\system32\dosvc.dll (Microsoft Corporation)
NETSVC: DcpSvc -> C:\Windows\system32\dcpsvc.dll (Microsoft Corporation)
NETSVC: NetSetupSvc -> C:\Windows\System32\NetSetupSvc.dll (Microsoft Corporation)
NETSVC: dmwappushservice -> C:\Windows\system32\dmwappushsvc.dll (Microsoft Corporation)
NETSVC: XblGameSave -> C:\Windows\System32\XblGameSave.dll (Microsoft Corporation)
NETSVC: XboxNetApiSvc -> C:\Windows\system32\XboxNetApiSvc.dll (Microsoft Corporation)
NETSVC: UsoSvc -> C:\Windows\system32\usocore.dll (Microsoft Corporation)
NETSVC: UserManager -> C:\Windows\System32\usermgr.dll (Microsoft Corporation)
NETSVC: DmEnrollmentSvc -> C:\Windows\system32\Windows.Internal.Management.dll (Microsoft Corporation)
NETSVC: XblAuthManager -> C:\Windows\System32\XblAuthManager.dll (Microsoft Corporation)
NETSVC: RetailDemo -> C:\Windows\system32\RDXService.dll (Microsoft Corporation)
NETSVCx32: NetSetupSvc -> C:\Windows\SysWOW64\NetSetupSvc.dll ==> Keine Datei
NETSVCx32: UserManager -> C:\Windows\SysWOW64\usermgr.dll ==> Keine Datei
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-08-14 13:37 - 2015-08-14 13:37 - 00043483 _____ C:\Users\Stefan Rienits\Desktop\FRST.txt
2015-08-14 13:37 - 2015-08-14 13:37 - 00000000 ____D C:\FRST
2015-08-14 13:35 - 2015-08-14 13:36 - 02173952 _____ (Farbar) C:\Users\Stefan Rienits\Desktop\FRST64.exe
2015-08-14 13:30 - 2015-08-14 13:30 - 00016148 _____ C:\WINDOWS\system32\WIN7_Stefan Rienits_HistoryPrediction.bin
2015-08-14 09:07 - 2015-08-14 09:07 - 00000000 ___HD C:\OneDriveTemp
2015-08-14 09:06 - 2015-08-14 09:06 - 00000022 _____ C:\WINDOWS\S.dirmngr
2015-08-13 14:11 - 2015-08-13 14:11 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-08-13 13:46 - 2015-08-13 13:46 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2015-08-13 06:59 - 2015-08-14 09:07 - 00000000 ___RD C:\Users\Stefan Rienits\iCloudDrive
2015-08-13 06:59 - 2015-08-13 06:59 - 00000000 ____D C:\Users\Stefan Rienits\AppData\Local\Apple Inc
2015-08-13 06:55 - 2015-08-13 06:55 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk
2015-08-13 06:55 - 2015-08-13 06:55 - 00000000 ____D C:\Program Files (x86)\Safari
2015-08-13 06:52 - 2015-08-13 06:54 - 38494576 _____ (Apple Inc.) C:\Users\Stefan Rienits\Downloads\safarisetup.exe
2015-08-13 00:46 - 2015-08-14 09:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-12 21:02 - 2015-08-12 21:02 - 00003852 _____ C:\WINDOWS\System32\Tasks\WebBarUpdateTask
2015-08-12 21:02 - 2015-08-12 21:02 - 00003328 _____ C:\WINDOWS\System32\Tasks\WebBarLaunchTask
2015-08-12 21:02 - 2015-08-12 21:02 - 00000000 ____D C:\ProgramData\InstallSightSDK
2015-08-12 20:57 - 2015-08-12 20:57 - 00010770 _____ C:\claraInstaller.txt
2015-08-12 20:57 - 2015-08-12 20:57 - 00004168 _____ C:\WINDOWS\System32\Tasks\PostPoneInstall
2015-08-12 20:53 - 2015-08-12 20:53 - 00000000 ____D C:\Users\Stefan Rienits\AppData\Roaming\Avira
2015-08-12 20:47 - 2015-07-15 08:37 - 00148632 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2015-08-12 20:47 - 2015-07-15 08:37 - 00137288 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2015-08-12 20:47 - 2015-07-15 08:37 - 00043576 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2015-08-12 20:47 - 2015-07-15 08:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2015-08-12 20:44 - 2015-08-12 20:44 - 00001273 _____ C:\Users\Public\Desktop\Avira.lnk
2015-08-12 20:43 - 2015-08-12 20:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-08-12 20:43 - 2015-08-12 20:47 - 00000000 ____D C:\ProgramData\Avira
2015-08-12 20:43 - 2015-08-12 20:47 - 00000000 ____D C:\Program Files (x86)\Avira
2015-08-12 20:40 - 2015-08-12 20:43 - 04721376 _____ (Avira Operations GmbH & Co. KG) C:\Users\Stefan Rienits\Downloads\avira_de_av_55cb92b89fb9b__ws.exe
2015-08-12 17:11 - 2015-08-12 17:11 - 00000000 ____D C:\WINDOWS\PCHEALTH
2015-08-11 22:30 - 2015-08-08 09:30 - 08020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-08-11 22:30 - 2015-08-08 09:29 - 01822280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-08-11 22:30 - 2015-08-08 09:19 - 00608936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-08-11 22:30 - 2015-08-08 09:01 - 01533496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-08-11 22:30 - 2015-08-08 08:48 - 00539728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-08-11 22:30 - 2015-08-08 08:40 - 00365056 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-08-11 22:30 - 2015-08-08 08:24 - 02415104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2015-08-11 22:30 - 2015-08-08 08:24 - 01679360 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2015-08-11 22:30 - 2015-08-08 08:22 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2015-08-11 22:30 - 2015-08-08 08:21 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdbui.dll
2015-08-11 22:30 - 2015-08-08 08:15 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-08-11 22:30 - 2015-08-08 08:00 - 01985024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2015-08-11 22:30 - 2015-08-06 05:18 - 00290768 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2015-08-11 22:30 - 2015-08-06 05:17 - 00237392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys
2015-08-11 22:30 - 2015-08-06 05:17 - 00200528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2015-08-11 22:30 - 2015-08-06 04:36 - 21874176 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-08-11 22:30 - 2015-08-06 04:22 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2015-08-11 22:30 - 2015-08-06 04:03 - 18805248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-08-11 22:30 - 2015-08-05 06:49 - 00783112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2015-08-11 22:30 - 2015-08-05 06:29 - 00644128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2015-08-11 22:30 - 2015-08-05 06:03 - 02416640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-08-11 22:30 - 2015-08-05 06:00 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll
2015-08-11 22:30 - 2015-08-05 05:54 - 01274880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2015-08-11 22:30 - 2015-08-05 05:47 - 03588096 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-08-11 22:30 - 2015-08-05 05:47 - 01383424 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-08-11 22:30 - 2015-08-05 05:43 - 01916416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-08-11 22:30 - 2015-08-05 05:39 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenter.dll
2015-08-11 22:30 - 2015-08-04 06:08 - 02462648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-08-11 22:30 - 2015-08-04 06:07 - 00102752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
2015-08-11 22:30 - 2015-08-04 06:06 - 00583128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-08-11 22:30 - 2015-08-04 06:06 - 00243248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-08-11 22:30 - 2015-08-04 05:50 - 02151208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-08-11 22:30 - 2015-08-04 05:23 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2015-08-11 22:30 - 2015-08-04 05:21 - 16709120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-11 22:30 - 2015-08-04 05:10 - 13025792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-08-11 22:30 - 2015-08-04 04:59 - 01212416 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-08-11 22:30 - 2015-08-04 04:47 - 00898560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
2015-08-11 22:30 - 2015-08-03 04:32 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll
2015-08-11 22:30 - 2015-08-03 04:28 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NotificationObjFactory.dll
2015-08-11 22:30 - 2015-08-03 04:19 - 00505696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2015-08-11 22:30 - 2015-08-03 04:19 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2015-08-11 22:30 - 2015-08-03 04:18 - 08613200 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2015-08-11 22:30 - 2015-08-03 04:18 - 01983840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2015-08-11 22:30 - 2015-08-03 04:18 - 00594472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2015-08-11 22:30 - 2015-08-03 04:18 - 00046432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpiowin32.sys
2015-08-11 22:30 - 2015-08-03 04:17 - 00516960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-08-11 22:30 - 2015-08-03 04:17 - 00052264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2015-08-11 22:30 - 2015-08-03 04:13 - 22322624 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-08-11 22:30 - 2015-08-03 04:12 - 00801632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-08-11 22:30 - 2015-08-03 03:56 - 06878256 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2015-08-11 22:30 - 2015-08-03 03:50 - 20857848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-08-11 22:30 - 2015-08-03 03:49 - 00700256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-08-11 22:30 - 2015-08-03 03:31 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2015-08-11 22:30 - 2015-08-03 03:30 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll
2015-08-11 22:30 - 2015-08-03 03:24 - 24592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-08-11 22:30 - 2015-08-03 03:24 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2015-08-11 22:30 - 2015-08-03 03:24 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2015-08-11 22:30 - 2015-08-03 03:24 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModelShim.dll
2015-08-11 22:30 - 2015-08-03 03:23 - 02446336 _____ C:\WINDOWS\system32\InputService.dll
2015-08-11 22:30 - 2015-08-03 03:23 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2015-08-11 22:30 - 2015-08-03 03:22 - 01601536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-08-11 22:30 - 2015-08-03 03:22 - 01008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2015-08-11 22:30 - 2015-08-03 03:22 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2015-08-11 22:30 - 2015-08-03 03:22 - 00293376 _____ C:\WINDOWS\system32\TextInputFramework.dll
2015-08-11 22:30 - 2015-08-03 03:21 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll
2015-08-11 22:30 - 2015-08-03 03:19 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe
2015-08-11 22:30 - 2015-08-03 03:19 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe
2015-08-11 22:30 - 2015-08-03 03:18 - 12503552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-08-11 22:30 - 2015-08-03 03:18 - 03780096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-08-11 22:30 - 2015-08-03 03:18 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll
2015-08-11 22:30 - 2015-08-03 03:18 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkStatus.dll
2015-08-11 22:30 - 2015-08-03 03:15 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-08-11 22:30 - 2015-08-03 03:15 - 01290752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-08-11 22:30 - 2015-08-03 03:15 - 00988672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2015-08-11 22:30 - 2015-08-03 03:15 - 00595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2015-08-11 22:30 - 2015-08-03 03:15 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2015-08-11 22:30 - 2015-08-03 03:15 - 00384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2015-08-11 22:30 - 2015-08-03 03:15 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
2015-08-11 22:30 - 2015-08-03 03:14 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-08-11 22:30 - 2015-08-03 03:14 - 00247808 _____ C:\WINDOWS\system32\facecredentialprovider.dll
2015-08-11 22:30 - 2015-08-03 03:12 - 19323392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-08-11 22:30 - 2015-08-03 03:12 - 01890304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-08-11 22:30 - 2015-08-03 03:12 - 01823232 _____ C:\WINDOWS\SysWOW64\InputService.dll
2015-08-11 22:30 - 2015-08-03 03:12 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2015-08-11 22:30 - 2015-08-03 03:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll
2015-08-11 22:30 - 2015-08-03 03:11 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-08-11 22:30 - 2015-08-03 03:11 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfuimanager.dll
2015-08-11 22:30 - 2015-08-03 03:11 - 00200704 _____ C:\WINDOWS\SysWOW64\TextInputFramework.dll
2015-08-11 22:30 - 2015-08-03 03:10 - 01162240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2015-08-11 22:30 - 2015-08-03 03:06 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe
2015-08-11 22:30 - 2015-08-03 03:03 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2015-08-11 22:30 - 2015-08-03 03:02 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2015-08-11 22:30 - 2015-08-03 03:02 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2015-08-11 22:30 - 2015-08-03 03:01 - 11262464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-08-11 22:30 - 2015-08-03 03:00 - 01593856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-08-11 22:30 - 2015-08-03 02:59 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfuimanager.dll
2015-08-11 19:52 - 2015-08-11 19:52 - 00001083 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CC (64bit).lnk
2015-08-11 19:44 - 2015-08-11 19:44 - 00002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2015-08-11 19:44 - 2015-08-11 19:44 - 00002122 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk
2015-08-11 19:44 - 2015-08-11 19:44 - 00002099 _____ C:\Users\Public\Desktop\Adobe Acrobat DC.lnk
2015-08-11 13:32 - 2015-08-11 13:32 - 00811506 _____ C:\Users\Stefan Rienits\Downloads\broschuere-a5-jpg-cmyk.zip
2015-08-11 13:32 - 2015-08-11 13:32 - 00000000 ____D C:\Users\Stefan Rienits\Downloads\broschuere-a5-jpg-cmyk
2015-08-11 13:31 - 2015-08-11 13:31 - 00000000 ____D C:\Users\Stefan Rienits\Downloads\broschuere-a5-quer-jpg-cmyk
2015-08-11 13:22 - 2015-08-11 13:22 - 00849344 _____ C:\Users\Stefan Rienits\Downloads\broschuere-a5-quer-jpg-cmyk.zip
2015-08-11 13:21 - 2015-08-11 13:21 - 00000000 ____D C:\Users\Stefan Rienits\Downloads\broschuere-a4-jpg-cmyk
2015-08-11 13:20 - 2015-08-11 13:20 - 00863231 _____ C:\Users\Stefan Rienits\Downloads\broschuere-a4-jpg-cmyk.zip
2015-08-11 12:45 - 2015-08-11 13:00 - 00000000 ____D C:\Users\Stefan Rienits\AppData\Roaming\.kde
2015-08-11 12:45 - 2015-08-11 12:45 - 00000758 _____ C:\Users\Stefan Rienits\AppData\Local\recently-used.xbel
2015-08-11 12:44 - 2015-08-11 12:44 - 00000000 ____D C:\Users\Stefan Rienits\AppData\Local\gtk-2.0
2015-08-11 12:42 - 2015-08-11 12:42 - 00000000 ____D C:\Users\Stefan Rienits\AppData\Local\GNU
2015-08-11 12:41 - 2015-08-14 08:43 - 00000000 ____D C:\Users\Stefan Rienits\AppData\Roaming\gnupg
2015-08-11 12:41 - 2015-08-11 12:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gpg4win
2015-08-11 12:41 - 2015-08-11 12:41 - 00000000 ____D C:\ProgramData\GNU
2015-08-11 12:40 - 2015-08-11 12:40 - 00000000 ____D C:\Program Files (x86)\GNU
2015-08-11 12:39 - 2015-08-11 12:39 - 30585424 _____ (g10 Code GmbH) C:\Users\Stefan Rienits\Downloads\gpg4win-2.2.5.exe
2015-08-11 12:39 - 2015-08-11 12:39 - 00000181 _____ C:\Users\Stefan Rienits\Downloads\gpg4win-2.2.5.exe.sig
2015-08-11 08:03 - 2015-08-11 08:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-08-11 07:14 - 2015-08-13 19:50 - 00000000 ____D C:\Users\Stefan Rienits\Desktop\Sonderausgabe_Stadionzeitung
2015-08-11 07:12 - 2015-08-11 07:12 - 00007603 _____ C:\Users\Stefan Rienits\AppData\Local\Resmon.ResmonCfg
2015-08-11 06:56 - 2015-08-11 06:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-08-11 06:56 - 2015-08-11 06:56 - 00000000 ____D C:\Program Files\iTunes
2015-08-11 06:56 - 2015-08-11 06:56 - 00000000 ____D C:\Program Files\iPod
2015-08-11 06:56 - 2015-08-11 06:56 - 00000000 ____D C:\Program Files (x86)\iTunes
2015-08-11 06:49 - 2015-08-11 06:49 - 00001942 _____ C:\Users\Stefan Rienits\Documents\scan.txt
2015-08-10 22:30 - 2013-07-16 12:18 - 01829093 _____ C:\Users\Stefan Rienits\Downloads\ISOcoated_v2_300_eci.icc
2015-08-10 22:29 - 2013-06-24 14:44 - 00466774 _____ C:\Users\Stefan Rienits\Downloads\xplosion_brush_set_by_GspotSIMULANT.zip
2015-08-10 21:28 - 2015-08-10 21:28 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett
2015-08-10 20:22 - 2015-08-13 19:51 - 00000034 _____ C:\Users\Stefan Rienits\AppData\Roaming\AdobeWLCMCache.dat
2015-08-10 19:51 - 2015-08-10 19:51 - 00001041 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Flash Professional CC 2015.lnk
2015-08-10 19:46 - 2015-08-10 19:46 - 00061440 _____ C:\Users\Stefan Rienits\Documents\Buch 1.indb
2015-08-10 19:33 - 2015-08-10 19:33 - 00001037 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Muse CC 2015.lnk
2015-08-10 19:33 - 2015-08-10 19:33 - 00000000 ____D C:\Users\Stefan Rienits\AppData\Roaming\com.adobe.AdobeMuseCC.2015.0
2015-08-10 19:26 - 2015-08-10 19:26 - 00001117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Dreamweaver CC 2015.lnk
2015-08-10 19:10 - 2015-08-10 19:10 - 00001385 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Character Animator (Preview).lnk
2015-08-10 19:10 - 2015-08-10 19:10 - 00001279 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe After Effects CC 2015.lnk
2015-08-10 18:42 - 2015-08-10 18:42 - 00001171 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder CC 2015.lnk
2015-08-10 18:27 - 2015-08-10 18:27 - 00001159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Premiere Pro CC 2015.lnk
2015-08-10 18:05 - 2015-08-10 18:05 - 00001081 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe InDesign CC 2015.lnk
2015-08-10 17:47 - 2015-08-10 17:47 - 00001548 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator CC 2015.lnk
2015-08-10 17:47 - 2015-08-10 17:47 - 00000000 ____D C:\ProgramData\ALM
2015-08-10 17:15 - 2015-08-10 17:15 - 00001037 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom.lnk
2015-08-10 17:02 - 2015-08-10 17:02 - 00003656 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-stefan@rienits.de
2015-08-10 16:51 - 2015-08-10 18:42 - 00000000 ____D C:\Users\Stefan Rienits\Documents\Adobe
2015-08-10 16:51 - 2015-08-10 16:51 - 00001093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2015.lnk
2015-08-10 16:50 - 2015-08-11 19:51 - 00000000 ____D C:\Program Files\Adobe
2015-08-10 16:50 - 2015-08-10 19:51 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-08-10 16:36 - 2015-08-14 09:08 - 00000000 ___RD C:\Users\Stefan Rienits\Creative Cloud Files
2015-08-10 16:35 - 2015-08-14 09:08 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-08-10 16:35 - 2015-08-10 16:35 - 00001306 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2015-08-10 16:35 - 2015-08-10 16:35 - 00001294 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2015-08-10 16:31 - 2015-08-10 16:31 - 00675504 _____ (Adobe Systems Incorporated) C:\Users\Stefan Rienits\Downloads\CreativeCloudSet-Up.exe
2015-08-10 15:03 - 2015-08-10 15:03 - 00000020 ___SH C:\Users\DefaultAppPool\ntuser.ini
2015-08-10 15:03 - 2015-08-10 15:03 - 00000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2015-08-10 15:03 - 2015-08-10 15:03 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2015-08-10 15:03 - 2015-08-10 15:03 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2015-08-10 15:03 - 2015-08-10 15:03 - 00000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2015-08-10 15:03 - 2015-08-10 15:03 - 00000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2015-08-10 15:03 - 2015-08-10 15:03 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2015-08-10 15:03 - 2015-08-10 15:03 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Musik
2015-08-10 15:03 - 2015-08-10 15:03 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Bilder
2015-08-10 15:03 - 2015-08-10 15:03 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-08-10 15:03 - 2015-08-10 15:03 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf
2015-08-10 15:03 - 2015-08-10 15:03 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten
2015-08-10 15:03 - 2015-08-10 15:03 - 00000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2015-08-10 15:03 - 2015-08-10 15:03 - 00000000 ____D C:\Users\DefaultAppPool
2015-08-10 15:03 - 2015-08-06 18:47 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Macromedia
2015-08-10 15:03 - 2015-08-06 16:25 - 00000000 ___RD C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-10 15:03 - 2015-08-06 16:25 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Local\Microsoft Help
2015-08-10 15:03 - 2015-07-10 13:04 - 00000000 __RSD C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-08-10 15:03 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-10 15:03 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-08-10 15:03 - 2015-07-10 13:04 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-08-10 14:57 - 2015-08-14 09:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-10 14:57 - 2015-08-10 14:57 - 00001236 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-08-10 14:56 - 2015-08-10 14:56 - 00243000 _____ C:\Users\Stefan Rienits\Downloads\Firefox Setup Stub 39.0.3.exe
2015-08-10 14:22 - 2015-08-10 14:23 - 00001165 _____ C:\Users\Stefan Rienits\Desktop\FreeCommander XE.lnk
2015-08-10 14:22 - 2015-08-10 14:22 - 05923536 _____ C:\Users\Stefan Rienits\Downloads\FreeCommanderXE-32-public_setup.zip
2015-08-10 14:22 - 2015-08-10 14:22 - 00000000 ____D C:\Users\Stefan Rienits\Downloads\FreeCommanderXE-32-public_setup
2015-08-10 14:22 - 2015-08-10 14:22 - 00000000 ____D C:\Users\Stefan Rienits\AppData\Local\FreeCommanderXE
2015-08-10 14:22 - 2015-08-10 14:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeCommander XE
2015-08-10 14:22 - 2015-08-10 14:22 - 00000000 ____D C:\Program Files (x86)\FreeCommander XE
2015-08-10 07:09 - 2015-08-10 07:09 - 00000000 ____D C:\Users\Stefan Rienits\Downloads\AD0B3schluesselFORwinANDmacosxBYteamXF0RC3 (1)
2015-08-10 07:07 - 2015-08-10 07:08 - 00179574 _____ C:\Users\Stefan Rienits\Downloads\AD0B3schluesselFORwinANDmacosxBYteamXF0RC3 (1).rar
2015-08-08 16:36 - 2015-08-08 16:36 - 00556456 _____ (Hewlett Packard) C:\WINDOWS\system32\hppldcoi.dll
2015-08-08 16:36 - 2015-08-08 16:36 - 00207784 _____ (Hewlett Packard ) C:\WINDOWS\system32\PortChanger.exe
2015-08-08 16:36 - 2015-08-08 16:36 - 00146856 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\Dot4.sys
2015-08-08 16:36 - 2015-08-08 16:36 - 00043944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dot4usb.sys
2015-08-08 16:36 - 2015-08-08 16:36 - 00021928 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\Dot4Prt.sys
2015-08-08 16:17 - 2015-08-14 08:58 - 00000000 ____D C:\Users\Stefan Rienits\AppData\Local\CrashDumps
2015-08-08 09:44 - 2015-08-08 09:44 - 00000654 _____ C:\Users\Stefan Rienits\Desktop\geschäftspapiere - Shortcut.lnk
2015-08-07 21:09 - 2015-08-12 20:42 - 00000000 ____D C:\ProgramData\Norton
2015-08-07 21:09 - 2015-08-07 21:09 - 01110792 _____ (Symantec Corporation) C:\Users\Stefan Rienits\Downloads\NSBUDownloader (1).exe
2015-08-07 21:09 - 2015-08-07 21:09 - 00001382 _____ C:\Users\Stefan Rienits\Desktop\Norton Installation Files.lnk
2015-08-07 21:09 - 2015-08-07 21:09 - 00000000 ____D C:\Users\Public\Downloads\Norton
2015-08-07 21:08 - 2015-08-07 21:09 - 01110792 _____ (Symantec Corporation) C:\Users\Stefan Rienits\Downloads\NSBUDownloader.exe
2015-08-07 20:59 - 2015-08-07 20:59 - 02009904 _____ C:\Users\Stefan Rienits\Downloads\Adaware_Installer (1).exe
2015-08-07 15:25 - 2015-08-07 15:25 - 00000654 _____ C:\Users\Stefan Rienits\Desktop\vorlagen_allgemein - Shortcut.lnk
2015-08-07 15:25 - 2015-08-07 15:25 - 00000590 _____ C:\Users\Stefan Rienits\Desktop\Rechnungen - Shortcut.lnk
2015-08-07 15:25 - 2015-08-07 15:25 - 00000565 _____ C:\Users\Stefan Rienits\Desktop\Studium - Shortcut.lnk
2015-08-07 15:25 - 2015-08-07 15:25 - 00000558 _____ C:\Users\Stefan Rienits\Desktop\kunden - Shortcut.lnk
2015-08-07 15:24 - 2015-08-07 15:24 - 00000622 _____ C:\Users\Stefan Rienits\Desktop\eigene_werbung - Shortcut.lnk
2015-08-07 15:24 - 2015-08-07 15:24 - 00000590 _____ C:\Users\Stefan Rienits\Desktop\Bildarchiv - Shortcut.lnk
2015-08-07 13:58 - 2015-08-07 13:58 - 00000000 ____D C:\Users\Stefan Rienits\Tracing
2015-08-07 13:57 - 2015-08-14 12:04 - 00004166 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{59ED3A1A-174F-400E-9A2D-AB96F49BD899}
2015-08-07 13:29 - 2015-08-07 13:29 - 00000000 ____D C:\Users\Stefan Rienits\Downloads\ACS.6.MC.KG
2015-08-07 06:20 - 2015-08-07 06:20 - 00034712 _____ () C:\WINDOWS\system32\Drivers\bsdriver.sys
2015-08-07 06:17 - 2015-08-07 20:56 - 00004760 _____ C:\WINDOWS\SysWOW64\Peakoar.ini
2015-08-07 06:17 - 2015-08-07 20:56 - 00002472 _____ C:\WINDOWS\SysWOW64\PeakoarOff.ini
2015-08-07 06:17 - 2015-08-07 20:56 - 00002472 _____ C:\WINDOWS\system32\PeakoarOff.ini
2015-08-07 06:17 - 2015-08-07 06:17 - 00000000 ____D C:\WINDOWS\system32\pok
2015-08-07 06:15 - 2015-06-18 12:08 - 00061336 _____ C:\WINDOWS\system32\Drivers\cherimoya.sys
2015-08-06 20:57 - 2015-08-06 20:57 - 00000000 ____D C:\Users\Stefan Rienits\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2015-08-06 20:55 - 2015-08-11 19:44 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-08-06 20:54 - 2015-08-06 20:54 - 00000000 ____D C:\Users\Stefan Rienits\Downloads\AD0B3schluesselFORwinANDmacosxBYteamXF0RC3
2015-08-06 20:52 - 2015-08-06 20:53 - 00179574 _____ C:\Users\Stefan Rienits\Downloads\AD0B3schluesselFORwinANDmacosxBYteamXF0RC3.rar
2015-08-06 20:34 - 2015-08-06 20:34 - 00000000 ____D C:\Users\Stefan Rienits\AppData\Local\NetworkTiles
2015-08-06 20:16 - 2015-08-06 20:16 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-08-06 18:48 - 2015-08-06 18:48 - 00001178 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Widget Browser.lnk
2015-08-06 18:48 - 2015-08-06 18:48 - 00000000 ____D C:\Program Files (x86)\My Company Name
2015-08-06 18:48 - 2011-11-03 03:01 - 00056208 ____N (Rovi Corporation) C:\WINDOWS\system32\Drivers\PxHlpa64.sys
2015-08-06 18:48 - 2011-10-17 03:00 - 00010224 ____N (Sonic Solutions) C:\WINDOWS\system32\Drivers\cdralw2k.sys
2015-08-06 18:48 - 2011-10-17 03:00 - 00010224 ____N (Sonic Solutions) C:\WINDOWS\system32\Drivers\cdr4_xp.sys
2015-08-06 18:47 - 2015-08-06 18:47 - 00001078 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
2015-08-06 18:47 - 2015-08-06 18:47 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2015-08-06 18:47 - 2015-08-06 18:47 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2015-08-06 18:30 - 2015-08-14 09:07 - 00000390 _____ C:\WINDOWS\Tasks\AmiUpdXp.job
2015-08-06 18:30 - 2015-08-07 22:32 - 00000000 ____D C:\Users\Stefan Rienits\AppData\Local\4756
2015-08-06 18:30 - 2015-08-06 18:30 - 00003466 _____ C:\WINDOWS\System32\Tasks\AmiUpdXp
2015-08-06 18:23 - 2015-08-06 18:23 - 00003242 _____ C:\WINDOWS\System32\Tasks\{B61EDC62-BBEC-40DB-ACE9-EF1C88D6F940}
2015-08-06 18:23 - 2015-08-06 18:23 - 00000000 ____D C:\ProgramData\2916e3a0000022b3
2015-08-06 18:21 - 2015-08-06 18:21 - 00000000 ___RD C:\Users\Stefan Rienits\3D Objects
2015-08-06 18:12 - 2015-08-14 13:12 - 00002140 _____ C:\WINDOWS\Tasks\c316cf62-e974-4aca-bc5f-70c0472d94a8-10_user.job
2015-08-06 18:11 - 2015-08-12 21:36 - 00000000 ____D C:\Program Files (x86)\Cinema_Plus-1.2V31.07
2015-08-06 18:11 - 2015-08-12 20:43 - 00000004 _____ C:\WINDOWS\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-08-06 18:11 - 2015-08-07 21:30 - 00000000 ____D C:\ProgramData\{d9e4efe7-7533-3b09-d9e4-4efe7753bf9d}
2015-08-06 18:11 - 2015-08-06 18:11 - 00003828 _____ C:\WINDOWS\System32\Tasks\SMupdate1
2015-08-06 18:11 - 2015-08-06 18:11 - 00000000 ____D C:\Users\Stefan Rienits\AppData\Local\globalUpdate
2015-08-06 18:10 - 2015-08-14 12:15 - 00000370 ____H C:\WINDOWS\Tasks\ASMBXFCQDHRAKHOW.job
2015-08-06 18:10 - 2015-08-10 14:39 - 00000000 ____D C:\ProgramData\LolliScan
2015-08-06 18:10 - 2015-08-10 14:39 - 00000000 ____D C:\ProgramData\7c0535b143fc4671b6ebd202fbffe066
2015-08-06 18:10 - 2015-08-06 18:11 - 00001386 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-08-06 18:10 - 2015-08-06 18:10 - 03359008 _____ C:\WINDOWS\SysWOW64\ins_smk.exe
2015-08-06 18:10 - 2015-08-06 18:10 - 00520704 _____ C:\WINDOWS\SysWOW64\ins_U501EXE.exe
2015-08-06 18:10 - 2015-08-06 18:10 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASMBXFCQDHRAKHOW
2015-08-06 18:10 - 2015-08-06 18:10 - 00000000 ____D C:\Users\Stefan Rienits\AppData\Roaming\Opera Software
2015-08-06 18:10 - 2015-08-06 18:10 - 00000000 ____D C:\Users\Stefan Rienits\AppData\Local\Opera Software
2015-08-06 18:10 - 2015-08-06 18:10 - 00000000 ____D C:\ProgramData\Service7609
2015-08-06 18:10 - 2015-08-06 04:14 - 00048784 _____ (StdLib) C:\WINDOWS\system32\Drivers\{92c9ea8e-d032-4248-a8a1-80ea1615e38a}Gw64.sys
2015-08-06 18:09 - 2015-08-06 18:10 - 00000000 ____D C:\Program Files (x86)\Opera
2015-08-06 18:06 - 2015-08-06 18:06 - 00000000 ____D C:\Users\Stefan Rienits\Downloads\Adobe.Photoshop.CS6.v13.0.Pre.Release.Incl.Keymaker.Only-CORE
2015-08-06 17:42 - 2015-08-06 17:47 - 00000000 ____D C:\Users\Stefan Rienits\AppData\Local\MicrosoftEdge
2015-08-06 17:34 - 2015-08-06 17:36 - 00000000 ____D C:\Users\Stefan Rienits\AppData\Local\Comms
2015-08-06 17:32 - 2015-08-14 09:07 - 00000000 ___RD C:\Users\Stefan Rienits\OneDrive
2015-08-06 17:32 - 2015-08-06 17:33 - 00002423 _____ C:\Users\Stefan Rienits\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-08-06 17:32 - 2015-08-06 17:32 - 00001055 _____ C:\Users\Stefan Rienits\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Optionale Features.lnk
2015-08-06 17:32 - 2015-08-06 17:32 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2015-08-06 17:32 - 2015-07-09 20:39 - 04847104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2015-08-06 17:32 - 2015-07-09 20:36 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2015-08-06 17:32 - 2015-07-09 20:28 - 06358016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2015-08-06 17:32 - 2015-07-09 20:25 - 05739520 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2015-08-06 17:32 - 2015-07-09 20:25 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2015-08-06 17:30 - 2015-08-07 21:46 - 00000000 ____D C:\Users\Stefan Rienits\AppData\Local\Packages
2015-08-06 17:30 - 2015-08-06 17:30 - 00000020 ___SH C:\Users\Stefan Rienits\ntuser.ini
2015-08-06 17:30 - 2015-08-06 17:30 - 00000000 ____D C:\Users\Stefan Rienits\AppData\Local\TileDataLayer
2015-08-06 17:30 - 2015-08-06 17:30 - 00000000 ____D C:\Users\Stefan Rienits\AppData\Local\Publishers
2015-08-06 17:18 - 2015-08-06 17:30 - 00000000 ___DC C:\WINDOWS\Panther
2015-08-06 17:15 - 2015-08-06 17:15 - 14241792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 12589056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 11557888 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 09889792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 07569408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 07523328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 07051264 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 06488312 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 06305792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 06101504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 05118024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 05076480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 04791296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 04760576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 04611584 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 04532304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-08-06 17:15 - 2015-08-06 17:15 - 04398080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 04350464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 04169728 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 04047288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-08-06 17:15 - 2015-08-06 17:15 - 03687936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 03620736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 03579904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 03443200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 03362816 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 02878000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 02741760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 02662400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 02646528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 02606080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 02558976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 02498808 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 02235904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 02224128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 02207744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 02147080 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 02116448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-08-06 17:15 - 2015-08-06 17:15 - 02112512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01867160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01773056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01769056 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01643872 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01611264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01591856 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01562968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01561872 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01521664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01420288 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01418240 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2015-08-06 17:15 - 2015-08-06 17:15 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01411072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01396064 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01365072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01356368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01334784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01294352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2015-08-06 17:15 - 2015-08-06 17:15 - 01203200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01203200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01201664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01200400 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01177600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-08-06 17:15 - 2015-08-06 17:15 - 01169408 _____ (Microsoft Corporation)
|
|
14.08.2015, 12:47
Baum-Darstellung