Guten Morgen,

ich habe WIN 7 auf meinem Rechner, als Schutzsoftware gegen Trojaner AVIRA. Dort bleibt seit vorgestern der "Regenschirm" geschlossen. Die Netzwerkfirewall lässt sich nicht mehr einschalten, weder über AVIRA noch über die Systemsteuerung. Bei der vorgeschlagenen manuellen Einstellung erhalte ich den Fehlercode 0x8007042c.

Was muss ich nun unternehmen?

Danke Rainer.

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Danke für die schnelle Reaktion!
         

Zusätzliches Untersuchungsergebnis von Farbar 

Recovery Scan Tool (x64) Version:14-10-2015 01
durchgeführt von rainer (2015-10-15 09:08:32)
Gestartet von C:\Users\rainer\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2012-

01-31 08:38:34)
Start-Modus: Normal
===================================================

=======


==================== Konten: 

=============================

Administrator (S-1-5-21-2598399437-2432177153-

1626090690-500 - Administrator - Disabled)
Gast (S-1-5-21-2598399437-2432177153-1626090690-501 

- Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2598399437-2432177153-

1626090690-1005 - Limited - Enabled)
rainer (S-1-5-21-2598399437-2432177153-1626090690-

1000 - Administrator - Enabled) => C:\Users\rainer

==================== Sicherheits-Center 

========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, 

wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) 

{4D041356-F94D-285F-8768-AAE50FA36859}
AV: Microsoft Security Essentials (Enabled - Up to 

date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to 

date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Avira Antivirus (Enabled - Up to date) 

{F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) 

{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme 

======================

(Nur Adware-Programme mit dem Zusatz "Hidden" 

können in die Fixlist aufgenommen werden, um sie 

sichtbar zu machen. Die Adware-Programme sollten 

manuell deinstalliert werden.)

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-

2702-0920-000001000000}) (Version: 9.20.00.0 - Igor 

Pavlov)
ACDSee 18 (HKLM\...\{6D0F6DF4-553E-43CD-AA95-

69AB3644A8FF}) (Version: 18.2.0.250 - ACD Systems 

International Inc.)
ACDSee Pro 8 (64-bit) (HKLM\...\{F84CE839-8CDD-

4DC1-9A05-FA93BEA8B63D}) (Version: 8.2.0.287 - ACD 

Systems International Inc.)
Acer Arcade Deluxe (HKLM-x32\...\InstallShield_

{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 

3.2.7110 - CyberLink Corp.)
Acer Arcade Deluxe (x32 Version: 3.2.7110 - 

CyberLink Corp.) Hidden
Acer Backup Manager (HKLM-x32\...\InstallShield_

{30075A70-B5D2-440B-AFA3-FB2021740121}) (Version: 

2.0.2.19 - NewTech Infosystems)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-

5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3005 - 

Acer Incorporated)
Acer GameZone Console (HKLM-x32\...\{8ed9688e-4f79

-4308-91ca-f1c37ca142b4}_is1) (Version: 5.1.0.2 - 

Oberon Media, Inc.)
Acer Registration (HKLM-x32\...\Acer Registration) 

(Version: 1.02.3006 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) 

(Version: 1.2.0812 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-

887D-CB62727F01CA}) (Version: 1.01.3017 - Acer 

Incorporated)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-

A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe 

Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 

2.6.0.19140 - Adobe Systems Incorporated)
Adobe Community Help (HKLM-x32\...

\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) 

(Version: 3.5.23 - Adobe Systems Incorporated.)
Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe 

Flash Player ActiveX) (Version: 10.0.32.18 - Adobe 

Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe 

Flash Player NPAPI) (Version: 19.0.0.207 - Adobe 

Systems Incorporated)
Adobe Photoshop CS3 (HKLM-x32\...

\Adobe_5f143314a5d434c8511097393d17397) (Version: 

10.0 - Adobe Systems Incorporated)
Adobe Reader 9.5.5 MUI (HKLM-x32\...\{AC76BA86-

7AD7-FFFF-7B44-A91000000001}) (Version: 9.5.5 - 

Adobe Systems Incorporated)
Advertising Center (x32 Version: 0.0.0.2 - Nero AG) 

Hidden
Ahead PDF Password Remover 2.0.0 (HKLM-x32\...

\{B114A585-8D20-4409-80E3-03E53C6F9E9F}_is1) 

(Version:  - AheadPDF)
ASUS USB-N13 WLAN Card Utilities & Driver (HKLM-

x32\...\{9C049499-055C-4a0c-A916-1D12314F45EB}) 

(Version: 1.0.0.7 - ASUS)
Avira (HKLM-x32\...\{bd538030-07d4-4999-a525-

7fafa2483f56}) (Version: 1.1.30.21727 - Avira 

Operations & Co. KG)
Avira (x32 Version: 1.1.30.21727 - Avira Operations 

& Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) 

(Version: 15.0.13.210 - Avira Operations GmbH & Co. 

KG)
Avira Browser Safety (HKLM-x32\...\{9E10EA90-5E97-

43B7-A246-FC7B4F5E9493}) (Version: 1.4.5.509 - 

Avira Operations GmbH & Co KG)
Backup Manager Advance (x32 Version: 2.0.2.19 - 

NewTech Infosystems) Hidden
Belarc Advisor 8.4 (HKLM-x32\...\Belarc Advisor) 

(Version: 8.4.0.0 - Belarc Inc.)
CanoScan LiDE 600F (HKLM\...\{1199FAD5-9546-44f3-

81CF-FFDB8040B7BF}_CNQ4802) (Version:  - )
Chicken Invaders 2 (HKLM-x32\...\{82C36957-D2B8-

4EF2-B88C-5FA03AA848C7-110209593}) (Version:  - 

Oberon Media)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2

-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco 

Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-

4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco 

Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-

46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco 

Systems, Inc.)
CLIQZ (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-

6DFE509ACD75}_is1) (Version: 1.0.22 - CLIQZ.com)
Compatibility Pack für 2007 Office System (HKLM-

x32\...\{90120000-0020-0407-0000-0000000FF1CE}) 

(Version: 12.0.6612.1000 - Microsoft Corporation)
Dairy Dash (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-

5FA03AA848C7-115053100}) (Version:  - Oberon Media)
dradio-Recorder Version 3.02.6 (HKLM-x32\...

\dradio-Recorder_is1) (Version:  - )
Dream Day First Home (HKLM-x32\...\{82C36957-D2B8-

4EF2-B88C-5FA03AA848C7-113832110}) (Version:  - 

Oberon Media)
Dropbox (HKLM-x32\...\Dropbox) (Version: 3.10.7 - 

Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.27.33 - 

Dropbox, Inc.) Hidden
EASEUS Partition Master 9.1.0 Home Edition (HKLM-

x32\...\EASEUS Partition Master Home Edition_is1) 

(Version:  - EASEUS)
eSobi v2 (HKLM-x32\...\InstallShield_{15D967B5-

A4BE-42AE-9E84-64CD062B25AA}) (Version: 

2.0.4.000274 - esobi Inc.)
eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) 

Hidden
Farm Frenzy 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-

B88C-5FA03AA848C7-11531173}) (Version:  - Oberon 

Media)
FinePrint (HKLM\...\FinePrint) (Version: 6.25 - 

FinePrint Software, LLC)
First Class Flurry (HKLM-x32\...\{82C36957-D2B8-

4EF2-B88C-5FA03AA848C7-115208410}) (Version:  - 

Oberon Media)
Garmin BaseCamp (HKLM-x32\...\{11172DEF-77A3-418C-

B980-EF0D097CA237}) (Version: 4.5.1 - Garmin Ltd or 

its subsidiaries)
Garmin USB Drivers (HKLM\...\{DC7720F2-98BE-41C1-

B0A8-E391362E86B8}) (Version: 2.3.1.1 - Garmin Ltd 

or its subsidiaries)
Google Chrome (HKU\S-1-5-21-2598399437-2432177153-

1626090690-1000\...\Google Chrome) (Version: 

46.0.2490.71 - Google Inc.)
Google Drive (HKLM-x32\...\{7159FB02-B77E-41E6-

B7BF-75431631864B}) (Version: 1.25.0468.5720 - 

Google, Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-

9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.28.15 - 

Google Inc.) Hidden
Granny In Paradise (HKLM-x32\...\{82C36957-D2B8-

4EF2-B88C-5FA03AA848C7-110551697}) (Version:  - 

Oberon Media)
Heroes of Hellas (HKLM-x32\...\{82C36957-D2B8-4EF2

-B88C-5FA03AA848C7-113786380}) (Version:  - Oberon 

Media)
Hotkey Utility (HKLM-x32\...\Hotkey Utility) 

(Version: 1.00.3004 - Acer Incorporated)
Identity Card (HKLM-x32\...\Identity Card) 

(Version: 1.00.3002 - Acer Incorporated)
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.6.0 - 

LIGHTNING UK!)
Intel(R) Management Engine Components (HKLM-

x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) 

(Version: 6.0.0.1179 - Intel Corporation)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-

D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel 

Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) 

(Version: 4.35 - Irfan Skiljan)
Junk Mail filter update (x32 Version: 14.0.8089.726 

- Microsoft Corporation) Hidden
LibreOffice 4.4.5.2 SDK (HKLM-x32\...\{656996F9-

2619-45F7-81FD-C90926766B87}) (Version: 4.4.5.2 - 

The Document Foundation)
LibreOffice 5.0 Help Pack (German) (HKLM-x32\...

\{3A35B9EB-331E-4FDC-950C-7B1EAFB77C6E}) (Version: 

5.0.2.2 - The Document Foundation)
LibreOffice 5.0.2.2 (HKLM\...\{7A0F2924-C991-40C2-

851D-14DAE2E398DF}) (Version: 5.0.2.2 - The 

Document Foundation)
Merriam Websters Spell Jam (HKLM-x32\...\{82C36957

-D2B8-4EF2-B88C-5FA03AA848C7-112662477}) (Version:  

- Oberon Media)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...

\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) 

(Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44

-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 

4.5.51209 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-

x32\...\{90120000-0100-0407-0000-0000000FF1CE}

_OMUI.de-de_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) 

(Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-

x32\...\{91120000-002F-0000-0000-0000000FF1CE}

_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-

199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM-

x32\...\{90140000-2005-0000-0000-0000000FF1CE}) 

(Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-

x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - 

Microsoft Corporation)
Microsoft Office Language Pack 2007 - 

German/Deutsch (HKLM-x32\...\OMUI.de-de) (Version: 

12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...

\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 

2.0.4024.1 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (German) 

(HKLM-x32\...\{95120000-00AF-0407-0000-

0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft 

Corporation)
Microsoft Office Suite Activation Assistant (HKLM-

x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) 

(Version: 2.9 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft 

Security Client) (Version: 4.8.204.0 - Microsoft 

Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-

4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - 

Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] 

(HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-

AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft 

Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 

9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-

835434E766AD}) (Version: 9.0.21022 - Microsoft 

Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 

9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-

22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft 

Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 

9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-

BCB8-725134ADF989}) (Version: 9.0.30729.4148 - 

Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 

9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-

88E4-87755C07200F}) (Version: 9.0.30729.6161 - 

Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 

10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-

6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft 

Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 

10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-

68EF0DE699A5}) (Version: 10.0.40219 - Microsoft 

Corporation)
Microsoft Works (HKLM-x32\...\{62F7DA7E-CCCB-439C-

A760-00C3926E761F}) (Version: 9.7.0621 - Microsoft 

Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-

CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 

- Microsoft Corp.)
Microsoft-Maus- und Tastatur-Center (HKLM\...

\Microsoft Mouse and Keyboard Center) (Version: 

2.3.188.0 - Microsoft Corporation)
Mozilla Firefox 41.0.1 (x86 de) (HKLM-x32\...

\Mozilla Firefox 41.0.1 (x86 de)) (Version: 41.0.1 

- Mozilla)
Mozilla Maintenance Service (HKLM-x32\...

\MozillaMaintenanceService) (Version: 41.0.1 - 

Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-

824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 

- Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-

F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 

- Microsoft Corporation)
MyWinLocker (HKLM-x32\...\{68301905-2DEA-41CE-A4D4

-E8B443B099BA}) (Version: 3.1.76.0 - Egis 

Technology Inc.)
Nero 9 Essentials (HKLM-x32\...\{9d5299f9-f94e-

43ed-9632-a5e045b51f7d}) (Version:  - Nero AG)
Netzmanager (Version: 1.200 - Deutsche Telekom AG, 

Marmiko IT-Solutions GmbH) Hidden
NVIDIA 3D Vision Controller-Treiber 340.50 (HKLM

\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

_Display.NVIRUSB) (Version: 340.50 - NVIDIA 

Corporation)
NVIDIA 3D Vision Treiber 341.81 (HKLM\...

\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

_Display.3DVision) (Version: 341.81 - NVIDIA 

Corporation)
NVIDIA GeForce Experience 2.0.1 (HKLM\...

\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

_Display.GFExperience) (Version: 2.0.1 - NVIDIA 

Corporation)
NVIDIA Grafiktreiber 341.81 (HKLM\...\{B2FE1952-

0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) 

(Version: 341.81 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...

\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA 

Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...

\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

_Display.PhysX) (Version: 9.13.1220 - NVIDIA 

Corporation)
PDF Settings (x32 Version: 1.0 - Adobe Systems 

Incorporated) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-

FD14BA3AB01D}) (Version: 2.1.2 - pdfforge)
Realtek High Definition Audio Driver (HKLM-x32\...

\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 

6.0.1.5930 - Realtek Semiconductor Corp.)
ResScan (HKLM-x32\...\{4905FE08-AADF-491E-AC37-

5CE0DC078367}) (Version: 5.3 - ResMed Ltd)
Samsung Kies3 (HKLM-x32\...\InstallShield_

{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 

3.2.15072.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.15072.2 - Samsung 

Electronics Co., Ltd.) Hidden
Saturn Fotoservice (HKLM-x32\...\Saturn 

Fotoservice) (Version: 6.0.5 - CEWE Stiftung u Co. 

KGaA)
SHIELD Streaming (Version: 2.1.108 - NVIDIA 

Corporation) Hidden
Snagit 12 (HKLM-x32\...\{979028FC-2DBF-4BB4-A9EC-

4627A9D63D50}) (Version: 12.2.2 - TechSmith 

Corporation)
Tablett (HKLM-x32\...\Tablet Driver) (Version:  - 

Wacom Technology Corp.)
TuneUp Utilities 2014 (de-DE) (x32 Version: 

14.0.1000.340 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp 

Utilities) (Version: 14.0.1000.340 - TuneUp 

Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.340 - 

TuneUp Software) Hidden
Update for 2007 Microsoft Office System (KB967642) 

(HKLM-x32\...\{91120000-002F-0000-0000-

0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-

91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help 

(KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-

0000000FF1CE}_OMUI.de-de_{BEC163EC-7A83-48A1-BFB6-

3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help 

(KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-

0000000FF1CE}_OMUI.de-de_{F6828576-6F79-470D-AB50-

69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help 

(KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-

0000000FF1CE}_OMUI.de-de_{EA160DA3-E9B5-4D03-A518-

21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help 

(KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-

0000000FF1CE}_OMUI.de-de_{38472199-D7B6-4833-A949-

10E4EE6365A1}) (Version:  - Microsoft)
VideoDownloaderUltimate (HKU\S-1-5-21-2598399437-

2432177153-1626090690-1000\...

\VideoDownloaderUltimateWinApp) (Version: 1.0.1.55 

- Link64)
VLC media player 2.1.3 (HKLM\...\VLC media player) 

(Version: 2.1.3 - VideoLAN)
Wartung Samsung ML-2525W Series (HKLM-x32\...

\Samsung ML-2525W Series) (Version:  - Samsung 

Electronics CO.,LTD)
Welcome Center (HKLM-x32\...\Acer Welcome Center) 

(Version: 1.00.3008 - Acer Incorporated)
Windows Live Anmelde-Assistent (HKLM-x32\...

\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 

5.000.818.5 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...

\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - 

Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{76618402-179D-

4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - 

Microsoft Corporation)
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-

7B73-42DE-8505-9A093F35A238}) (Version: 

14.0.8014.1029 - Microsoft Corporation)

==================== Benutzerdefinierte CLSID 

(Nicht auf der Ausnahmeliste): 

==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, 

wird er aus der Registry entfernt. Die Datei wird 

nicht verschoben solange sie nicht separat 

aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2598399437-2432177153-

1626090690-1000_Classes\CLSID\{D1EDC4F5-7F4D-4B12-

906A-614ECF66DDAF}\InprocServer32 -> C:\Users

\rainer\AppData\Local\Google\Update

\1.3.28.15\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2598399437-2432177153-

1626090690-1000_Classes\CLSID\{E8CF3E55-F919-49D9-

ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users

\rainer\AppData\Local\Google\Update

\1.3.28.15\psuser_64.dll (Google Inc.)

==================== Wiederherstellungspunkte 

=========================

27-09-2015 19:10:55 Windows-Sicherung
04-10-2015 20:00:47 Windows-Sicherung
11-10-2015 20:41:56 Windows-Sicherung

==================== Hosts Inhalt: 

===============================

(Wenn benötigt kann der Hosts: Schalter in die 

Fixlist aufgenommen werden um die Hosts Datei 

zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 

____A C:\Windows\system32\Drivers\etc\hosts


==================== Geplante Aufgaben (Nicht auf 

der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, 

wird er aus der Registry entfernt. Die Datei wird 

nicht verschoben solange sie nicht separat 

aufgelistet wird.)

Task: {03CCB4DA-180E-4392-A739-08B2463956D4} - 

System32\Tasks\Microsoft\Windows\TabletPC

\InputPersonalization => C:\Program Files\Common 

Files\Microsoft Shared\Ink\InputPersonalization.exe 

[2009-07-14] (Microsoft Corporation)
Task: {2F6CDDDC-09B1-47F3-8DC0-46E80EDB7312} - 

System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe 

=> c:\Program Files\Microsoft Mouse and Keyboard 

Center\itype.exe [2014-03-19] (Microsoft 

Corporation)
Task: {36AA9C51-9EE2-4FC1-A3B5-512DA7AEB4FC} - 

System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe 

=> c:\Program Files\Microsoft Mouse and Keyboard 

Center\ipoint.exe [2014-03-19] (Microsoft 

Corporation)
Task: {595607BE-3A28-4913-958A-7A7FB14B24FC} - 

System32\Tasks\{EECA8AD3-7C71-4E7B-ABF2-

876D6435F375} => Firefox.exe 
Task: {5A418CCC-D46D-4AE5-B683-080386F69288} - 

System32\Tasks\TechSmith Updater => C:\Program 

Files (x86)\Common Files\TechSmith Shared\Updater

\TSCUpdClt.exe [2014-05-30] (TechSmith Corporation)
Task: {5D191DD8-C757-49E6-9E82-F1008111553E} - 

System32\Tasks\GoogleUpdateTaskMachineUA => C:

\Program Files (x86)\Google\Update\GoogleUpdate.exe 

[2015-08-29] (Google Inc.)
Task: {748782FE-5025-4335-81A1-D30E6A804026} - 

System32\Tasks\McQcModifier-5c47-a7b0 => C:

\ProgramData\McQcModifier-5c47-a7b0\McQcModifier-

5c47-a7b0.cmd [2009-08-29] ()
Task: {75DF793C-2632-4DA6-87AD-E23635E3EB77} - 

System32\Tasks\Adobe-Online-Aktualisierungsprogramm 

=> C:\Program Files (x86)\Common Files\Adobe\ARM

\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems 

Incorporated)
Task: {77736E0C-94B8-4CE1-BA00-32F83D94F4FE} - 

System32\Tasks\Egis technology-Online-

Aktualisierungsprogramm => C:\Program Files 

(x86)\EgisTec Egis Software Update\EgisUpdate.exe 

[2009-08-04] (Egis Technology Inc.)
Task: {7AE40439-4E7A-4B77-B5A0-9937EFBA1B3A} - 

System32\Tasks\GoogleUpdateTaskUserS-1-5-21-

2598399437-2432177153-1626090690-1000Core => C:

\Users\rainer\AppData\Local\Google\Update

\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {83FAECA5-4C8D-4491-BE0E-07B87376E059} - 

System32\Tasks\GoogleUpdateTaskUserS-1-5-21-

2598399437-2432177153-1626090690-1000UA => C:

\Users\rainer\AppData\Local\Google\Update

\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {8E26D3CD-C824-46D9-9B41-2B8886EB300D} - 

System32\Tasks\GoogleUpdateTaskMachineCore => C:

\Program Files (x86)\Google\Update\GoogleUpdate.exe 

[2015-08-29] (Google Inc.)
Task: {925DF76B-BED0-430A-8117-B49EF38DB880} - 

System32\Tasks\Google Updater and Installer => C:

\Users\rainer\AppData\Local\Google\Update

\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {926C9E2C-A39F-4D09-9757-972479DE4DCE} - 

System32\Tasks

\Microsoft_Hardware_Launch_mousekeyboardcenter_exe 

=> c:\Program Files\Microsoft Mouse and Keyboard 

Center\mousekeyboardcenter.exe [2014-03-19] 

(Microsoft)
Task: {97928C22-0C5E-4A0D-8815-33B294CF8DF4} - 

System32\Tasks\Adobe Flash Player Updater => C:

\Windows\SysWOW64\Macromed\Flash

\FlashPlayerUpdateService.exe [2015-10-14] (Adobe 

Systems Incorporated)
Task: {A0B7EC95-06FB-4AEE-AA89-9531D61FBE62} - 

System32\Tasks\DropboxUpdateTaskMachineCore => C:

\Program Files (x86)\Dropbox\Update

\DropboxUpdate.exe [2015-10-11] (Dropbox, Inc.)
Task: {A1FD35DC-4263-4977-9E39-FEB6E98F985A} - 

System32\Tasks\Microsoft_Hardware_Launch_itype_exe 

=> c:\Program Files\Microsoft Mouse and Keyboard 

Center\itype.exe [2014-03-19] (Microsoft 

Corporation)
Task: {B43C0AC5-F790-4517-A714-21D9AB41F581} - 

System32\Tasks\{0C81888C-1DD2-42D4-B19D-

CAD855AE8FEF} => pcalua.exe -a C:\Users\rainer

\Downloads\iview435g_setup.exe -d C:\Users\rainer

\Downloads
Task: {BBC0AFA7-2789-492E-BC2D-E560C96CC080} - 

System32\Tasks\DropboxUpdateTaskMachineUA => C:

\Program Files (x86)\Dropbox\Update

\DropboxUpdate.exe [2015-10-11] (Dropbox, Inc.)
Task: {C91A712C-E89A-4721-80CC-2CB37D75EDA6} - 

System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe 

=> c:\Program Files\Microsoft Mouse and Keyboard 

Center\ipoint.exe [2014-03-19] (Microsoft 

Corporation)
Task: {D75443E1-2389-4F6E-8318-942FD1D97153} - 

System32\Tasks\{F44449EF-FE74-4F20-9BBC-

C349DB07125C} => Firefox.exe 
Task: {DCE1FA77-2025-4FAE-B274-795295E1977B} - 

System32\Tasks

\TuneUpUtilities_Task_BkGndMaintenance2013 => C:

\Program Files (x86)\TuneUp Utilities 

2014\OneClick.exe [2014-07-16] (TuneUp Software)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, 

wird die Aufgabe verschoben. Die Datei, die durch 

die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player 

Updater.job => C:\Windows\SysWOW64\Macromed\Flash

\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks

\DropboxUpdateTaskMachineCore.job => C:\Program 

Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks

\DropboxUpdateTaskMachineUA.job => C:\Program Files 

(x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks

\GoogleUpdateTaskMachineCore.job => C:\Program 

Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks

\GoogleUpdateTaskMachineUA.job => C:\Program Files 

(x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-

21-2598399437-2432177153-1626090690-1000Core.job => 

C:\Users\rainer\AppData\Local\Google\Update

\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-

21-2598399437-2432177153-1626090690-1000UA.job => 

C:\Users\rainer\AppData\Local\Google\Update

\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der 

Ausnahmeliste) ==============

2012-02-08 18:36 - 2015-08-18 02:07 - 00115376 

_____ () C:\Program Files\NVIDIA Corporation

\Display\NvSmartMax64.dll
2011-06-22 10:48 - 2011-06-22 10:48 - 00034304 

_____ () C:\Windows\System32\ssp6ml6.dll
2011-06-22 10:47 - 2011-06-22 10:47 - 00826880 

_____ () C:\Windows\system32\spool\DRIVERS

\x64\3\ssp6mdu.dll
2014-07-02 18:22 - 2012-10-13 16:05 - 00042496 

_____ () C:\Program Files (x86)\dradio-Recorder

\phonostarTimer.exe
2015-05-07 00:50 - 2015-05-07 00:50 - 02141192 

_____ () C:\Program Files\ACD Systems\ACDSee Pro

\8.0\ACDSeeCommanderPro8.exe
2015-05-06 15:48 - 2015-05-06 15:48 - 01973256 

_____ () C:\Program Files (x86)\ACD Systems\ACDSee

\18.0\ACDSeeCommander18.exe
2009-08-18 09:27 - 2009-08-18 09:27 - 00629280 

_____ () C:\Program Files (x86)\Acer\Hotkey 

Utility\HotkeyUtility.exe
2014-07-16 10:24 - 2014-07-16 10:24 - 00699704 

_____ () C:\Program Files (x86)\TuneUp Utilities 

2014\avgrepliba.dll
2009-12-14 04:19 - 2009-12-09 11:24 - 00076320 

_____ () C:\OEM\USBDECTION\USBS3S4Detection.exe
2014-08-15 17:02 - 2014-08-15 17:02 - 02099200 

_____ () C:\Program Files (x86)\TechSmith\Snagit 

12\opencv_core249.dll
2014-08-15 17:02 - 2014-08-15 17:02 - 00050688 

_____ () C:\Program Files (x86)\TechSmith\Snagit 

12\ScrollingCapture.dll
2014-08-15 17:02 - 2014-08-15 17:02 - 01914368 

_____ () C:\Program Files (x86)\TechSmith\Snagit 

12\opencv_imgproc249.dll
2009-02-03 03:33 - 2009-02-03 03:33 - 00460199 

_____ () C:\Program Files (x86)\NewTech 

Infosystems\Acer Backup Manager\sqlite3.dll
2008-09-29 03:55 - 2008-09-29 03:55 - 01076224 

_____ () C:\Program Files (x86)\NewTech 

Infosystems\Acer Backup Manager\ACE.dll
2009-08-18 09:31 - 2009-08-18 09:31 - 00163840 

_____ () C:\Program Files (x86)\Acer\Hotkey 

Utility\HotkeyHook.dll
2015-10-14 15:26 - 2015-10-09 02:53 - 01532744 

_____ () C:\Users\rainer\AppData\Local\Google

\Chrome\Application\46.0.2490.71\libglesv2.dll
2015-10-14 15:26 - 2015-10-09 02:53 - 00081224 

_____ () C:\Users\rainer\AppData\Local\Google

\Chrome\Application\46.0.2490.71\libegl.dll
2014-03-14 11:59 - 2012-08-28 17:54 - 00114688 

_____ () C:\Program Files (x86)\ASUS\USB-N13 WLAN 

Card Utilities\EnumDevLib.dll

==================== Alternate Data Streams (Nicht 

auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, 

wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf 

der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, 

wird er aus der Registry entfernt. Der Wert 

"AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot

\Minimal\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot

\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot

\Network\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot

\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot

\Network\MpfService => ""="Service"

==================== EXE Verknüpfungen (Nicht auf 

der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, 

wird der Registryeintrag auf den Standardwert 

zurückgesetzt oder entfernt.)


==================== Internet Explorer 

Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, 

wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-2598399437-

2432177153-1626090690-1000\...\samsungsetup.com -> 

hxxp://www.samsungsetup.com


==================== Andere Bereiche 

============================

(Aktuell gibt es keinen automatisierten Fix für 

diesen Bereich.)

HKU\S-1-5-21-2598399437-2432177153-1626090690-

1000\Control Panel\Desktop\\Wallpaper -> C:\Users

\rainer\AppData\Roaming\Microsoft\Windows\Themes

\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion

\Policies\System => (ConsentPromptBehaviorAdmin: 5) 

(ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
mpsdrv => Firewall Dienst läuft nicht.
MpsSvc => Firewall Dienst läuft nicht.

==================== MSCONFIG/TASK MANAGER 

Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für 

diesen Bereich.)

MSCONFIG\startupreg: msnmsgr => "C:\Program Files 

(x86)\Windows Live\Messenger\msnmsgr.exe" 

/background

==================== Firewall Regeln (Nicht auf der 

Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, 

wird er aus der Registry entfernt. Die Datei wird 

nicht verschoben solange sie nicht separat 

aufgelistet wird.)

FirewallRules: [{D491286D-2E5F-4800-BD58-

6F59F4700ACC}] => (Allow) C:\Program Files 

(x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\Acer 

Arcade Deluxe.exe
FirewallRules: [{1C4866F2-1AF2-4E66-8E6D-

03E9D91185AF}] => (Allow) C:\Program Files 

(x86)\Acer Arcade Deluxe\PlayMovie\PlayMovie.exe
FirewallRules: [{77F82E70-7EDF-43DA-8440-

21761034826A}] => (Allow) C:\Program Files 

(x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe
FirewallRules: [{728D1E18-D238-422A-B8C9-

11831EBCFC51}] => (Allow) C:\Program Files 

(x86)\Acer Arcade Deluxe\HomeMedia\HomeMedia.exe
FirewallRules: [{77BC0361-B90C-4B32-9452-

D8EB2063D523}] => (Allow) C:\Program Files 

(x86)\Windows Live\Messenger\wlcsdk.exe
FirewallRules: [{204EABAB-EE1B-4B9F-9A1C-

492152DBB411}] => (Allow) C:\Program Files 

(x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{6E8C918B-28FC-41D9-9EF7-

00EF9BF1F567}] => (Allow) C:\Program Files 

(x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{A7EF483C-DAD3-4DA3-80E9-

C7978ADEEE54}] => (Allow) C:\Program Files 

(x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{7E855260-F271-41FD-8DE4-

1DE315ACEA6A}] => (Allow) C:\Program Files 

(x86)\ASUS\USB-N13 WLAN Card Utilities\RtWLan.exe
FirewallRules: [{E3C58970-B39E-4A38-ACDF-

05F78747F3AA}] => (Allow) C:\Program Files 

(x86)\ASUS\USB-N13 WLAN Card Utilities\RtWLan.exe
FirewallRules: [{5988008E-ED72-4DC0-A9E7-

A9A03A8116FB}] => (Allow) LPort=1542
FirewallRules: [{99F18B2F-362D-4461-A0FE-

B696FB41122B}] => (Allow) LPort=1542
FirewallRules: [{38DFD14F-6486-437B-BF82-

D865FD7CBC09}] => (Allow) LPort=53
FirewallRules: [{5F1B9B14-086B-4B81-B31D-

459EF4B82236}] => (Allow) C:\Program Files 

(x86)\NVIDIA Corporation\NetService

\NvNetworkService.exe
FirewallRules: [{33164F7E-75E1-4F52-8138-

3E651DAB1CDF}] => (Allow) C:\Program Files 

(x86)\NVIDIA Corporation\NetService

\NvNetworkService.exe
FirewallRules: [{948F543C-DACC-4B20-8856-

2DE2A7A8BEC4}] => (Allow) C:\Program Files\NVIDIA 

Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{144B11A7-20D4-4147-BF33-

E0F33EF4D0AC}] => (Allow) C:\Program Files\NVIDIA 

Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{A84F4352-8976-414D-9FBE-

3F02E762D5B2}] => (Allow) C:\Program Files\NVIDIA 

Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{382E7208-586C-43CA-8958-

F2940B51466B}] => (Allow) C:\Program Files\NVIDIA 

Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{DCA086D5-8BE8-4DA6-BCAC-

08A9A26CE4B0}] => (Allow) LPort=8298
FirewallRules: [{24B323F7-F754-4B3B-B517-

88B03B2724A4}] => (Allow) C:\Program Files 

(x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{3A20D3B5-0C1B-407F-9711-

DD52A254D242}] => (Allow) C:\Program Files 

(x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B1624F26-81C9-4327-B764-

71E73C638C7E}] => (Allow) C:\Program Files 

(x86)\Dropbox\Client\Dropbox.exe

==================== Fehlerhafte Geräte im 

Gerätemanager =============

Name: Windows-Firewallautorisierungstreiber
Description: Windows-Firewallautorisierungstreiber
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: mpsdrv
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and 

then click "Enable Device". This starts the Enable 

Device wizard. Follow the instructions.

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not 

working properly, or does not have all its drivers 

installed. (Code 24)
Resolution: The device is installed incorrectly. 

The problem could be a hardware failure, or a new 

driver might be needed.
Devices stay in this state if they have been 

prepared for removal.
After you remove the device, this error 

disappears.Remove the device, and this error should 

be resolved.

Konnte Geräte nicht auflisten. Überprüfen Sie den 

"winmgmt" Dienst oder reparieren Sie den WMI.


==================== Fehlereinträge in der 

Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (10/15/2015 08:27:18 AM) (Source: ResScan) 

(EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  

8:27:18
ErrorCode        : 80004005
ErrorMessage     

: Unbekannter Fehler
Program Message  : hResult Error
File             : 

.\RWDevice.cpp
Function         : 

RWDevice::GetMetaDataForGroup
Line             : 

1609

Error: (10/15/2015 08:27:18 AM) (Source: ResScan) 

(EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  

8:27:18
ErrorCode        : 80004005
ErrorMessage     

: Unbekannter Fehler
Program Message  : hResult Error
File             : 

.\RWDevice.cpp
Function         : 

RWDevice::GetMetaDataForGroup
Line             : 

1589

Error: (10/15/2015 08:27:18 AM) (Source: ResScan) 

(EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  

8:27:18
ErrorCode        : 80004005
ErrorMessage     

: Unbekannter Fehler
Program Message  : hResult Error
File             : 

.\RWDevice.cpp
Function         : 

RWDevice::GetMetaDataForGroup
Line             : 

1609

Error: (10/15/2015 08:27:18 AM) (Source: ResScan) 

(EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  

8:27:18
ErrorCode        : 80004005
ErrorMessage     

: Unbekannter Fehler
Program Message  : hResult Error
File             : 

.\RWDevice.cpp
Function         : 

RWDevice::GetMetaDataForGroup
Line             : 

1589

Error: (10/15/2015 08:27:17 AM) (Source: ResScan) 

(EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  

8:27:17
ErrorCode        : 80004005
ErrorMessage     

: Unbekannter Fehler
Program Message  : hResult Error
File             : 

.\RWDevice.cpp
Function         : 

RWDevice::GetMetaDataForGroup
Line             : 

1609

Error: (10/15/2015 08:27:17 AM) (Source: ResScan) 

(EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  

8:27:17
ErrorCode        : 80004005
ErrorMessage     

: Unbekannter Fehler
Program Message  : hResult Error
File             : 

.\RWDevice.cpp
Function         : 

RWDevice::GetMetaDataForGroup
Line             : 

1589

Error: (10/15/2015 08:27:17 AM) (Source: ResScan) 

(EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  

8:27:17
ErrorCode        : 80004005
ErrorMessage     

: Unbekannter Fehler
Program Message  : hResult Error
File             : 

.\RWDevice.cpp
Function         : 

RWDevice::GetMetaDataForGroup
Line             : 

1609

Error: (10/15/2015 08:27:17 AM) (Source: ResScan) 

(EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  

8:27:17
ErrorCode        : 80004005
ErrorMessage     

: Unbekannter Fehler
Program Message  : hResult Error
File             : 

.\RWDevice.cpp
Function         : 

RWDevice::GetMetaDataForGroup
Line             : 

1589

Error: (10/15/2015 08:27:16 AM) (Source: ResScan) 

(EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  

8:27:16
ErrorCode        : 80004005
ErrorMessage     

: Unbekannter Fehler
Program Message  : hResult Error
File             : 

.\RWDevice.cpp
Function         : 

RWDevice::GetMetaDataForGroup
Line             : 

1609

Error: (10/15/2015 08:27:16 AM) (Source: ResScan) 

(EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  

8:27:16
ErrorCode        : 80004005
ErrorMessage     

: Unbekannter Fehler
Program Message  : hResult Error
File             : 

.\RWDevice.cpp
Function         : 

RWDevice::GetMetaDataForGroup
Line             : 

1589


Systemfehler:
=============
Error: (10/15/2015 08:30:28 AM) (Source: Service 

Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für 

"FailureCommand" aufgrund folgenden Fehlers 

fehlgeschlagen: 
%%5

Error: (10/15/2015 08:23:30 AM) (Source: Service 

Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für 

"Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (10/15/2015 08:17:00 AM) (Source: Service 

Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Windows-Firewall" ist vom 

Dienst "Windows-Firewallautorisierungstreiber" 

abhängig, der aufgrund folgenden Fehlers nicht 

gestartet wurde: 
%%1058

Error: (10/15/2015 08:17:00 AM) (Source: Service 

Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows-

Firewallautorisierungstreiber" wurde aufgrund 

folgenden Fehlers nicht gestartet: 
%%1058

Error: (10/15/2015 08:16:53 AM) (Source: Service 

Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" 

wurde mit folgendem dienstspezifischem Fehler 

beendet: %%-2147023143.

Error: (10/15/2015 08:16:36 AM) (Source: Service 

Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Windows-Firewall" ist vom 

Dienst "Windows-Firewallautorisierungstreiber" 

abhängig, der aufgrund folgenden Fehlers nicht 

gestartet wurde: 
%%1058

Error: (10/15/2015 08:16:36 AM) (Source: Service 

Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows-

Firewallautorisierungstreiber" wurde aufgrund 

folgenden Fehlers nicht gestartet: 
%%1058

Error: (10/15/2015 08:14:46 AM) (Source: Service 

Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SSPORT" wurde aufgrund 

folgenden Fehlers nicht gestartet: 
%%2

Error: (10/15/2015 08:14:01 AM) (Source: Service 

Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim 

Verbindungsversuch mit dem Dienst Netzmanager 

Infrastruktur Informationssystem Dienst erreicht.

Error: (10/15/2015 08:13:27 AM) (Source: Service 

Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund 

folgenden Fehlers nicht gestartet: 
%%2


==================== Speicherinformationen 

=========================== 

Prozessor: Intel(R) Core(TM) i3 CPU 530 @ 2.93GHz
Prozentuale Nutzung des RAM: 60%
Installierter physikalischer RAM: 3959.09 MB
Verfügbarer physikalischer RAM: 1576.13 MB
Summe virtueller Speicher: 7916.39 MB
Verfügbarer virtueller Speicher: 4769.08 MB

==================== Laufwerke 

================================

Drive c: (Acer) (Fixed) (Total:458.87 GB) 

(Free:328.53 GB) NTFS
Drive d: (Data) (Fixed) (Total:286.12 GB) 

(Free:270.84 GB) NTFS

==================== MBR & Partitionstabelle 

==================

===================================================

=====
Disk: 0 (Size: 931.5 GB) (Disk ID: F467897B)
Partition 1: (Not Active) - (Size=13.7 GB) - 

(Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 

NTFS)
Partition 3: (Not Active) - (Size=458.9 GB) - 

(Type=07 NTFS)
Partition 4: (Not Active) - (Size=458.9 GB) - 

(Type=OF Extended)

==================== Ende von Addition.txt 

============================

	
	
Zusätzliches Untersuchungsergebnis von Farbar 

Recovery Scan Tool (x64) Version:14-10-2015 01
durchgeführt von rainer (2015-10-15 09:08:32)
Gestartet von C:\Users\rainer\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2012-

01-31 08:38:34)
Start-Modus: Normal
===================================================

=======


==================== Konten: 

=============================

Administrator (S-1-5-21-2598399437-2432177153-

1626090690-500 - Administrator - Disabled)
Gast (S-1-5-21-2598399437-2432177153-1626090690-501 

- Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2598399437-2432177153-

1626090690-1005 - Limited - Enabled)
rainer (S-1-5-21-2598399437-2432177153-1626090690-

1000 - Administrator - Enabled) => C:\Users\rainer

==================== Sicherheits-Center 

========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, 

wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) 

{4D041356-F94D-285F-8768-AAE50FA36859}
AV: Microsoft Security Essentials (Enabled - Up to 

date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to 

date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Avira Antivirus (Enabled - Up to date) 

{F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) 

{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme 

======================

(Nur Adware-Programme mit dem Zusatz "Hidden" 

können in die Fixlist aufgenommen werden, um sie 

sichtbar zu machen. Die Adware-Programme sollten 

manuell deinstalliert werden.)

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-

2702-0920-000001000000}) (Version: 9.20.00.0 - Igor 

Pavlov)
ACDSee 18 (HKLM\...\{6D0F6DF4-553E-43CD-AA95-

69AB3644A8FF}) (Version: 18.2.0.250 - ACD Systems 

International Inc.)
ACDSee Pro 8 (64-bit) (HKLM\...\{F84CE839-8CDD-

4DC1-9A05-FA93BEA8B63D}) (Version: 8.2.0.287 - ACD 

Systems International Inc.)
Acer Arcade Deluxe (HKLM-x32\...\InstallShield_

{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 

3.2.7110 - CyberLink Corp.)
Acer Arcade Deluxe (x32 Version: 3.2.7110 - 

CyberLink Corp.) Hidden
Acer Backup Manager (HKLM-x32\...\InstallShield_

{30075A70-B5D2-440B-AFA3-FB2021740121}) (Version: 

2.0.2.19 - NewTech Infosystems)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-

5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3005 - 

Acer Incorporated)
Acer GameZone Console (HKLM-x32\...\{8ed9688e-4f79

-4308-91ca-f1c37ca142b4}_is1) (Version: 5.1.0.2 - 

Oberon Media, Inc.)
Acer Registration (HKLM-x32\...\Acer Registration) 

(Version: 1.02.3006 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) 

(Version: 1.2.0812 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-

887D-CB62727F01CA}) (Version: 1.01.3017 - Acer 

Incorporated)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-

A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe 

Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 

2.6.0.19140 - Adobe Systems Incorporated)
Adobe Community Help (HKLM-x32\...

\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) 

(Version: 3.5.23 - Adobe Systems Incorporated.)
Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe 

Flash Player ActiveX) (Version: 10.0.32.18 - Adobe 

Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe 

Flash Player NPAPI) (Version: 19.0.0.207 - Adobe 

Systems Incorporated)
Adobe Photoshop CS3 (HKLM-x32\...

\Adobe_5f143314a5d434c8511097393d17397) (Version: 

10.0 - Adobe Systems Incorporated)
Adobe Reader 9.5.5 MUI (HKLM-x32\...\{AC76BA86-

7AD7-FFFF-7B44-A91000000001}) (Version: 9.5.5 - 

Adobe Systems Incorporated)
Advertising Center (x32 Version: 0.0.0.2 - Nero AG) 

Hidden
Ahead PDF Password Remover 2.0.0 (HKLM-x32\...

\{B114A585-8D20-4409-80E3-03E53C6F9E9F}_is1) 

(Version:  - AheadPDF)
ASUS USB-N13 WLAN Card Utilities & Driver (HKLM-

x32\...\{9C049499-055C-4a0c-A916-1D12314F45EB}) 

(Version: 1.0.0.7 - ASUS)
Avira (HKLM-x32\...\{bd538030-07d4-4999-a525-

7fafa2483f56}) (Version: 1.1.30.21727 - Avira 

Operations & Co. KG)
Avira (x32 Version: 1.1.30.21727 - Avira Operations 

& Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) 

(Version: 15.0.13.210 - Avira Operations GmbH & Co. 

KG)
Avira Browser Safety (HKLM-x32\...\{9E10EA90-5E97-

43B7-A246-FC7B4F5E9493}) (Version: 1.4.5.509 - 

Avira Operations GmbH & Co KG)
Backup Manager Advance (x32 Version: 2.0.2.19 - 

NewTech Infosystems) Hidden
Belarc Advisor 8.4 (HKLM-x32\...\Belarc Advisor) 

(Version: 8.4.0.0 - Belarc Inc.)
CanoScan LiDE 600F (HKLM\...\{1199FAD5-9546-44f3-

81CF-FFDB8040B7BF}_CNQ4802) (Version:  - )
Chicken Invaders 2 (HKLM-x32\...\{82C36957-D2B8-

4EF2-B88C-5FA03AA848C7-110209593}) (Version:  - 

Oberon Media)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2

-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco 

Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-

4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco 

Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-

46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco 

Systems, Inc.)
CLIQZ (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-

6DFE509ACD75}_is1) (Version: 1.0.22 - CLIQZ.com)
Compatibility Pack für 2007 Office System (HKLM-

x32\...\{90120000-0020-0407-0000-0000000FF1CE}) 

(Version: 12.0.6612.1000 - Microsoft Corporation)
Dairy Dash (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-

5FA03AA848C7-115053100}) (Version:  - Oberon Media)
dradio-Recorder Version 3.02.6 (HKLM-x32\...

\dradio-Recorder_is1) (Version:  - )
Dream Day First Home (HKLM-x32\...\{82C36957-D2B8-

4EF2-B88C-5FA03AA848C7-113832110}) (Version:  - 

Oberon Media)
Dropbox (HKLM-x32\...\Dropbox) (Version: 3.10.7 - 

Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.27.33 - 

Dropbox, Inc.) Hidden
EASEUS Partition Master 9.1.0 Home Edition (HKLM-

x32\...\EASEUS Partition Master Home Edition_is1) 

(Version:  - EASEUS)
eSobi v2 (HKLM-x32\...\InstallShield_{15D967B5-

A4BE-42AE-9E84-64CD062B25AA}) (Version: 

2.0.4.000274 - esobi Inc.)
eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) 

Hidden
Farm Frenzy 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-

B88C-5FA03AA848C7-11531173}) (Version:  - Oberon 

Media)
FinePrint (HKLM\...\FinePrint) (Version: 6.25 - 

FinePrint Software, LLC)
First Class Flurry (HKLM-x32\...\{82C36957-D2B8-

4EF2-B88C-5FA03AA848C7-115208410}) (Version:  - 

Oberon Media)
Garmin BaseCamp (HKLM-x32\...\{11172DEF-77A3-418C-

B980-EF0D097CA237}) (Version: 4.5.1 - Garmin Ltd or 

its subsidiaries)
Garmin USB Drivers (HKLM\...\{DC7720F2-98BE-41C1-

B0A8-E391362E86B8}) (Version: 2.3.1.1 - Garmin Ltd 

or its subsidiaries)
Google Chrome (HKU\S-1-5-21-2598399437-2432177153-

1626090690-1000\...\Google Chrome) (Version: 

46.0.2490.71 - Google Inc.)
Google Drive (HKLM-x32\...\{7159FB02-B77E-41E6-

B7BF-75431631864B}) (Version: 1.25.0468.5720 - 

Google, Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-

9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.28.15 - 

Google Inc.) Hidden
Granny In Paradise (HKLM-x32\...\{82C36957-D2B8-

4EF2-B88C-5FA03AA848C7-110551697}) (Version:  - 

Oberon Media)
Heroes of Hellas (HKLM-x32\...\{82C36957-D2B8-4EF2

-B88C-5FA03AA848C7-113786380}) (Version:  - Oberon 

Media)
Hotkey Utility (HKLM-x32\...\Hotkey Utility) 

(Version: 1.00.3004 - Acer Incorporated)
Identity Card (HKLM-x32\...\Identity Card) 

(Version: 1.00.3002 - Acer Incorporated)
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.6.0 - 

LIGHTNING UK!)
Intel(R) Management Engine Components (HKLM-

x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) 

(Version: 6.0.0.1179 - Intel Corporation)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-

D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel 

Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) 

(Version: 4.35 - Irfan Skiljan)
Junk Mail filter update (x32 Version: 14.0.8089.726 

- Microsoft Corporation) Hidden
LibreOffice 4.4.5.2 SDK (HKLM-x32\...\{656996F9-

2619-45F7-81FD-C90926766B87}) (Version: 4.4.5.2 - 

The Document Foundation)
LibreOffice 5.0 Help Pack (German) (HKLM-x32\...

\{3A35B9EB-331E-4FDC-950C-7B1EAFB77C6E}) (Version: 

5.0.2.2 - The Document Foundation)
LibreOffice 5.0.2.2 (HKLM\...\{7A0F2924-C991-40C2-

851D-14DAE2E398DF}) (Version: 5.0.2.2 - The 

Document Foundation)
Merriam Websters Spell Jam (HKLM-x32\...\{82C36957

-D2B8-4EF2-B88C-5FA03AA848C7-112662477}) (Version:  

- Oberon Media)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...

\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) 

(Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44

-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 

4.5.51209 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-

x32\...\{90120000-0100-0407-0000-0000000FF1CE}

_OMUI.de-de_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) 

(Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-

x32\...\{91120000-002F-0000-0000-0000000FF1CE}

_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-

199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM-

x32\...\{90140000-2005-0000-0000-0000000FF1CE}) 

(Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-

x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - 

Microsoft Corporation)
Microsoft Office Language Pack 2007 - 

German/Deutsch (HKLM-x32\...\OMUI.de-de) (Version: 

12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...

\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 

2.0.4024.1 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (German) 

(HKLM-x32\...\{95120000-00AF-0407-0000-

0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft 

Corporation)
Microsoft Office Suite Activation Assistant (HKLM-

x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) 

(Version: 2.9 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft 

Security Client) (Version: 4.8.204.0 - Microsoft 

Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-

4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - 

Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] 

(HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-

AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft 

Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 

9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-

835434E766AD}) (Version: 9.0.21022 - Microsoft 

Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 

9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-

22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft 

Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 

9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-

BCB8-725134ADF989}) (Version: 9.0.30729.4148 - 

Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 

9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-

88E4-87755C07200F}) (Version: 9.0.30729.6161 - 

Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 

10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-

6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft 

Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 

10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-

68EF0DE699A5}) (Version: 10.0.40219 - Microsoft 

Corporation)
Microsoft Works (HKLM-x32\...\{62F7DA7E-CCCB-439C-

A760-00C3926E761F}) (Version: 9.7.0621 - Microsoft 

Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-

CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 

- Microsoft Corp.)
Microsoft-Maus- und Tastatur-Center (HKLM\...

\Microsoft Mouse and Keyboard Center) (Version: 

2.3.188.0 - Microsoft Corporation)
Mozilla Firefox 41.0.1 (x86 de) (HKLM-x32\...

\Mozilla Firefox 41.0.1 (x86 de)) (Version: 41.0.1 

- Mozilla)
Mozilla Maintenance Service (HKLM-x32\...

\MozillaMaintenanceService) (Version: 41.0.1 - 

Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-

824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 

- Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-

F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 

- Microsoft Corporation)
MyWinLocker (HKLM-x32\...\{68301905-2DEA-41CE-A4D4

-E8B443B099BA}) (Version: 3.1.76.0 - Egis 

Technology Inc.)
Nero 9 Essentials (HKLM-x32\...\{9d5299f9-f94e-

43ed-9632-a5e045b51f7d}) (Version:  - Nero AG)
Netzmanager (Version: 1.200 - Deutsche Telekom AG, 

Marmiko IT-Solutions GmbH) Hidden
NVIDIA 3D Vision Controller-Treiber 340.50 (HKLM

\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

_Display.NVIRUSB) (Version: 340.50 - NVIDIA 

Corporation)
NVIDIA 3D Vision Treiber 341.81 (HKLM\...

\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

_Display.3DVision) (Version: 341.81 - NVIDIA 

Corporation)
NVIDIA GeForce Experience 2.0.1 (HKLM\...

\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

_Display.GFExperience) (Version: 2.0.1 - NVIDIA 

Corporation)
NVIDIA Grafiktreiber 341.81 (HKLM\...\{B2FE1952-

0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) 

(Version: 341.81 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...

\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA 

Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...

\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

_Display.PhysX) (Version: 9.13.1220 - NVIDIA 

Corporation)
PDF Settings (x32 Version: 1.0 - Adobe Systems 

Incorporated) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-

FD14BA3AB01D}) (Version: 2.1.2 - pdfforge)
Realtek High Definition Audio Driver (HKLM-x32\...

\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 

6.0.1.5930 - Realtek Semiconductor Corp.)
ResScan (HKLM-x32\...\{4905FE08-AADF-491E-AC37-

5CE0DC078367}) (Version: 5.3 - ResMed Ltd)
Samsung Kies3 (HKLM-x32\...\InstallShield_

{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 

3.2.15072.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.15072.2 - Samsung 

Electronics Co., Ltd.) Hidden
Saturn Fotoservice (HKLM-x32\...\Saturn 

Fotoservice) (Version: 6.0.5 - CEWE Stiftung u Co. 

KGaA)
SHIELD Streaming (Version: 2.1.108 - NVIDIA 

Corporation) Hidden
Snagit 12 (HKLM-x32\...\{979028FC-2DBF-4BB4-A9EC-

4627A9D63D50}) (Version: 12.2.2 - TechSmith 

Corporation)
Tablett (HKLM-x32\...\Tablet Driver) (Version:  - 

Wacom Technology Corp.)
TuneUp Utilities 2014 (de-DE) (x32 Version: 

14.0.1000.340 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp 

Utilities) (Version: 14.0.1000.340 - TuneUp 

Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.340 - 

TuneUp Software) Hidden
Update for 2007 Microsoft Office System (KB967642) 

(HKLM-x32\...\{91120000-002F-0000-0000-

0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-

91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help 

(KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-

0000000FF1CE}_OMUI.de-de_{BEC163EC-7A83-48A1-BFB6-

3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help 

(KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-

0000000FF1CE}_OMUI.de-de_{F6828576-6F79-470D-AB50-

69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help 

(KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-

0000000FF1CE}_OMUI.de-de_{EA160DA3-E9B5-4D03-A518-

21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help 

(KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-

0000000FF1CE}_OMUI.de-de_{38472199-D7B6-4833-A949-

10E4EE6365A1}) (Version:  - Microsoft)
VideoDownloaderUltimate (HKU\S-1-5-21-2598399437-

2432177153-1626090690-1000\...

\VideoDownloaderUltimateWinApp) (Version: 1.0.1.55 

- Link64)
VLC media player 2.1.3 (HKLM\...\VLC media player) 

(Version: 2.1.3 - VideoLAN)
Wartung Samsung ML-2525W Series (HKLM-x32\...

\Samsung ML-2525W Series) (Version:  - Samsung 

Electronics CO.,LTD)
Welcome Center (HKLM-x32\...\Acer Welcome Center) 

(Version: 1.00.3008 - Acer Incorporated)
Windows Live Anmelde-Assistent (HKLM-x32\...

\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 

5.000.818.5 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...

\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - 

Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{76618402-179D-

4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - 

Microsoft Corporation)
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-

7B73-42DE-8505-9A093F35A238}) (Version: 

14.0.8014.1029 - Microsoft Corporation)

==================== Benutzerdefinierte CLSID 

(Nicht auf der Ausnahmeliste): 

==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, 

wird er aus der Registry entfernt. Die Datei wird 

nicht verschoben solange sie nicht separat 

aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2598399437-2432177153-

1626090690-1000_Classes\CLSID\{D1EDC4F5-7F4D-4B12-

906A-614ECF66DDAF}\InprocServer32 -> C:\Users

\rainer\AppData\Local\Google\Update

\1.3.28.15\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2598399437-2432177153-

1626090690-1000_Classes\CLSID\{E8CF3E55-F919-49D9-

ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users

\rainer\AppData\Local\Google\Update

\1.3.28.15\psuser_64.dll (Google Inc.)

==================== Wiederherstellungspunkte 

=========================

27-09-2015 19:10:55 Windows-Sicherung
04-10-2015 20:00:47 Windows-Sicherung
11-10-2015 20:41:56 Windows-Sicherung

==================== Hosts Inhalt: 

===============================

(Wenn benötigt kann der Hosts: Schalter in die 

Fixlist aufgenommen werden um die Hosts Datei 

zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 

____A C:\Windows\system32\Drivers\etc\hosts


==================== Geplante Aufgaben (Nicht auf 

der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, 

wird er aus der Registry entfernt. Die Datei wird 

nicht verschoben solange sie nicht separat 

aufgelistet wird.)

Task: {03CCB4DA-180E-4392-A739-08B2463956D4} - 

System32\Tasks\Microsoft\Windows\TabletPC

\InputPersonalization => C:\Program Files\Common 

Files\Microsoft Shared\Ink\InputPersonalization.exe 

[2009-07-14] (Microsoft Corporation)
Task: {2F6CDDDC-09B1-47F3-8DC0-46E80EDB7312} - 

System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe 

=> c:\Program Files\Microsoft Mouse and Keyboard 

Center\itype.exe [2014-03-19] (Microsoft 

Corporation)
Task: {36AA9C51-9EE2-4FC1-A3B5-512DA7AEB4FC} - 

System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe 

=> c:\Program Files\Microsoft Mouse and Keyboard 

Center\ipoint.exe [2014-03-19] (Microsoft 

Corporation)
Task: {595607BE-3A28-4913-958A-7A7FB14B24FC} - 

System32\Tasks\{EECA8AD3-7C71-4E7B-ABF2-

876D6435F375} => Firefox.exe 
Task: {5A418CCC-D46D-4AE5-B683-080386F69288} - 

System32\Tasks\TechSmith Updater => C:\Program 

Files (x86)\Common Files\TechSmith Shared\Updater

\TSCUpdClt.exe [2014-05-30] (TechSmith Corporation)
Task: {5D191DD8-C757-49E6-9E82-F1008111553E} - 

System32\Tasks\GoogleUpdateTaskMachineUA => C:

\Program Files (x86)\Google\Update\GoogleUpdate.exe 

[2015-08-29] (Google Inc.)
Task: {748782FE-5025-4335-81A1-D30E6A804026} - 

System32\Tasks\McQcModifier-5c47-a7b0 => C:

\ProgramData\McQcModifier-5c47-a7b0\McQcModifier-

5c47-a7b0.cmd [2009-08-29] ()
Task: {75DF793C-2632-4DA6-87AD-E23635E3EB77} - 

System32\Tasks\Adobe-Online-Aktualisierungsprogramm 

=> C:\Program Files (x86)\Common Files\Adobe\ARM

\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems 

Incorporated)
Task: {77736E0C-94B8-4CE1-BA00-32F83D94F4FE} - 

System32\Tasks\Egis technology-Online-

Aktualisierungsprogramm => C:\Program Files 

(x86)\EgisTec Egis Software Update\EgisUpdate.exe 

[2009-08-04] (Egis Technology Inc.)
Task: {7AE40439-4E7A-4B77-B5A0-9937EFBA1B3A} - 

System32\Tasks\GoogleUpdateTaskUserS-1-5-21-

2598399437-2432177153-1626090690-1000Core => C:

\Users\rainer\AppData\Local\Google\Update

\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {83FAECA5-4C8D-4491-BE0E-07B87376E059} - 

System32\Tasks\GoogleUpdateTaskUserS-1-5-21-

2598399437-2432177153-1626090690-1000UA => C:

\Users\rainer\AppData\Local\Google\Update

\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {8E26D3CD-C824-46D9-9B41-2B8886EB300D} - 

System32\Tasks\GoogleUpdateTaskMachineCore => C:

\Program Files (x86)\Google\Update\GoogleUpdate.exe 

[2015-08-29] (Google Inc.)
Task: {925DF76B-BED0-430A-8117-B49EF38DB880} - 

System32\Tasks\Google Updater and Installer => C:

\Users\rainer\AppData\Local\Google\Update

\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {926C9E2C-A39F-4D09-9757-972479DE4DCE} - 

System32\Tasks

\Microsoft_Hardware_Launch_mousekeyboardcenter_exe 

=> c:\Program Files\Microsoft Mouse and Keyboard 

Center\mousekeyboardcenter.exe [2014-03-19] 

(Microsoft)
Task: {97928C22-0C5E-4A0D-8815-33B294CF8DF4} - 

System32\Tasks\Adobe Flash Player Updater => C:

\Windows\SysWOW64\Macromed\Flash

\FlashPlayerUpdateService.exe [2015-10-14] (Adobe 

Systems Incorporated)
Task: {A0B7EC95-06FB-4AEE-AA89-9531D61FBE62} - 

System32\Tasks\DropboxUpdateTaskMachineCore => C:

\Program Files (x86)\Dropbox\Update

\DropboxUpdate.exe [2015-10-11] (Dropbox, Inc.)
Task: {A1FD35DC-4263-4977-9E39-FEB6E98F985A} - 

System32\Tasks\Microsoft_Hardware_Launch_itype_exe 

=> c:\Program Files\Microsoft Mouse and Keyboard 

Center\itype.exe [2014-03-19] (Microsoft 

Corporation)
Task: {B43C0AC5-F790-4517-A714-21D9AB41F581} - 

System32\Tasks\{0C81888C-1DD2-42D4-B19D-

CAD855AE8FEF} => pcalua.exe -a C:\Users\rainer

\Downloads\iview435g_setup.exe -d C:\Users\rainer

\Downloads
Task: {BBC0AFA7-2789-492E-BC2D-E560C96CC080} - 

System32\Tasks\DropboxUpdateTaskMachineUA => C:

\Program Files (x86)\Dropbox\Update

\DropboxUpdate.exe [2015-10-11] (Dropbox, Inc.)
Task: {C91A712C-E89A-4721-80CC-2CB37D75EDA6} - 

System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe 

=> c:\Program Files\Microsoft Mouse and Keyboard 

Center\ipoint.exe [2014-03-19] (Microsoft 

Corporation)
Task: {D75443E1-2389-4F6E-8318-942FD1D97153} - 

System32\Tasks\{F44449EF-FE74-4F20-9BBC-

C349DB07125C} => Firefox.exe 
Task: {DCE1FA77-2025-4FAE-B274-795295E1977B} - 

System32\Tasks

\TuneUpUtilities_Task_BkGndMaintenance2013 => C:

\Program Files (x86)\TuneUp Utilities 

2014\OneClick.exe [2014-07-16] (TuneUp Software)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, 

wird die Aufgabe verschoben. Die Datei, die durch 

die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player 

Updater.job => C:\Windows\SysWOW64\Macromed\Flash

\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks

\DropboxUpdateTaskMachineCore.job => C:\Program 

Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks

\DropboxUpdateTaskMachineUA.job => C:\Program Files 

(x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks

\GoogleUpdateTaskMachineCore.job => C:\Program 

Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks

\GoogleUpdateTaskMachineUA.job => C:\Program Files 

(x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-

21-2598399437-2432177153-1626090690-1000Core.job => 

C:\Users\rainer\AppData\Local\Google\Update

\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-

21-2598399437-2432177153-1626090690-1000UA.job => 

C:\Users\rainer\AppData\Local\Google\Update

\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der 

Ausnahmeliste) ==============

2012-02-08 18:36 - 2015-08-18 02:07 - 00115376 

_____ () C:\Program Files\NVIDIA Corporation

\Display\NvSmartMax64.dll
2011-06-22 10:48 - 2011-06-22 10:48 - 00034304 

_____ () C:\Windows\System32\ssp6ml6.dll
2011-06-22 10:47 - 2011-06-22 10:47 - 00826880 

_____ () C:\Windows\system32\spool\DRIVERS

\x64\3\ssp6mdu.dll
2014-07-02 18:22 - 2012-10-13 16:05 - 00042496 

_____ () C:\Program Files (x86)\dradio-Recorder

\phonostarTimer.exe
2015-05-07 00:50 - 2015-05-07 00:50 - 02141192 

_____ () C:\Program Files\ACD Systems\ACDSee Pro

\8.0\ACDSeeCommanderPro8.exe
2015-05-06 15:48 - 2015-05-06 15:48 - 01973256 

_____ () C:\Program Files (x86)\ACD Systems\ACDSee

\18.0\ACDSeeCommander18.exe
2009-08-18 09:27 - 2009-08-18 09:27 - 00629280 

_____ () C:\Program Files (x86)\Acer\Hotkey 

Utility\HotkeyUtility.exe
2014-07-16 10:24 - 2014-07-16 10:24 - 00699704 

_____ () C:\Program Files (x86)\TuneUp Utilities 

2014\avgrepliba.dll
2009-12-14 04:19 - 2009-12-09 11:24 - 00076320 

_____ () C:\OEM\USBDECTION\USBS3S4Detection.exe
2014-08-15 17:02 - 2014-08-15 17:02 - 02099200 

_____ () C:\Program Files (x86)\TechSmith\Snagit 

12\opencv_core249.dll
2014-08-15 17:02 - 2014-08-15 17:02 - 00050688 

_____ () C:\Program Files (x86)\TechSmith\Snagit 

12\ScrollingCapture.dll
2014-08-15 17:02 - 2014-08-15 17:02 - 01914368 

_____ () C:\Program Files (x86)\TechSmith\Snagit 

12\opencv_imgproc249.dll
2009-02-03 03:33 - 2009-02-03 03:33 - 00460199 

_____ () C:\Program Files (x86)\NewTech 

Infosystems\Acer Backup Manager\sqlite3.dll
2008-09-29 03:55 - 2008-09-29 03:55 - 01076224 

_____ () C:\Program Files (x86)\NewTech 

Infosystems\Acer Backup Manager\ACE.dll
2009-08-18 09:31 - 2009-08-18 09:31 - 00163840 

_____ () C:\Program Files (x86)\Acer\Hotkey 

Utility\HotkeyHook.dll
2015-10-14 15:26 - 2015-10-09 02:53 - 01532744 

_____ () C:\Users\rainer\AppData\Local\Google

\Chrome\Application\46.0.2490.71\libglesv2.dll
2015-10-14 15:26 - 2015-10-09 02:53 - 00081224 

_____ () C:\Users\rainer\AppData\Local\Google

\Chrome\Application\46.0.2490.71\libegl.dll
2014-03-14 11:59 - 2012-08-28 17:54 - 00114688 

_____ () C:\Program Files (x86)\ASUS\USB-N13 WLAN 

Card Utilities\EnumDevLib.dll

==================== Alternate Data Streams (Nicht 

auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, 

wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf 

der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, 

wird er aus der Registry entfernt. Der Wert 

"AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot

\Minimal\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot

\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot

\Network\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot

\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot

\Network\MpfService => ""="Service"

==================== EXE Verknüpfungen (Nicht auf 

der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, 

wird der Registryeintrag auf den Standardwert 

zurückgesetzt oder entfernt.)


==================== Internet Explorer 

Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, 

wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-2598399437-

2432177153-1626090690-1000\...\samsungsetup.com -> 

hxxp://www.samsungsetup.com


==================== Andere Bereiche 

============================

(Aktuell gibt es keinen automatisierten Fix für 

diesen Bereich.)

HKU\S-1-5-21-2598399437-2432177153-1626090690-

1000\Control Panel\Desktop\\Wallpaper -> C:\Users

\rainer\AppData\Roaming\Microsoft\Windows\Themes

\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion

\Policies\System => (ConsentPromptBehaviorAdmin: 5) 

(ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
mpsdrv => Firewall Dienst läuft nicht.
MpsSvc => Firewall Dienst läuft nicht.

==================== MSCONFIG/TASK MANAGER 

Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für 

diesen Bereich.)

MSCONFIG\startupreg: msnmsgr => "C:\Program Files 

(x86)\Windows Live\Messenger\msnmsgr.exe" 

/background

==================== Firewall Regeln (Nicht auf der 

Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, 

wird er aus der Registry entfernt. Die Datei wird 

nicht verschoben solange sie nicht separat 

aufgelistet wird.)

FirewallRules: [{D491286D-2E5F-4800-BD58-

6F59F4700ACC}] => (Allow) C:\Program Files 

(x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\Acer 

Arcade Deluxe.exe
FirewallRules: [{1C4866F2-1AF2-4E66-8E6D-

03E9D91185AF}] => (Allow) C:\Program Files 

(x86)\Acer Arcade Deluxe\PlayMovie\PlayMovie.exe
FirewallRules: [{77F82E70-7EDF-43DA-8440-

21761034826A}] => (Allow) C:\Program Files 

(x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe
FirewallRules: [{728D1E18-D238-422A-B8C9-

11831EBCFC51}] => (Allow) C:\Program Files 

(x86)\Acer Arcade Deluxe\HomeMedia\HomeMedia.exe
FirewallRules: [{77BC0361-B90C-4B32-9452-

D8EB2063D523}] => (Allow) C:\Program Files 

(x86)\Windows Live\Messenger\wlcsdk.exe
FirewallRules: [{204EABAB-EE1B-4B9F-9A1C-

492152DBB411}] => (Allow) C:\Program Files 

(x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{6E8C918B-28FC-41D9-9EF7-

00EF9BF1F567}] => (Allow) C:\Program Files 

(x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{A7EF483C-DAD3-4DA3-80E9-

C7978ADEEE54}] => (Allow) C:\Program Files 

(x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{7E855260-F271-41FD-8DE4-

1DE315ACEA6A}] => (Allow) C:\Program Files 

(x86)\ASUS\USB-N13 WLAN Card Utilities\RtWLan.exe
FirewallRules: [{E3C58970-B39E-4A38-ACDF-

05F78747F3AA}] => (Allow) C:\Program Files 

(x86)\ASUS\USB-N13 WLAN Card Utilities\RtWLan.exe
FirewallRules: [{5988008E-ED72-4DC0-A9E7-

A9A03A8116FB}] => (Allow) LPort=1542
FirewallRules: [{99F18B2F-362D-4461-A0FE-

B696FB41122B}] => (Allow) LPort=1542
FirewallRules: [{38DFD14F-6486-437B-BF82-

D865FD7CBC09}] => (Allow) LPort=53
FirewallRules: [{5F1B9B14-086B-4B81-B31D-

459EF4B82236}] => (Allow) C:\Program Files 

(x86)\NVIDIA Corporation\NetService

\NvNetworkService.exe
FirewallRules: [{33164F7E-75E1-4F52-8138-

3E651DAB1CDF}] => (Allow) C:\Program Files 

(x86)\NVIDIA Corporation\NetService

\NvNetworkService.exe
FirewallRules: [{948F543C-DACC-4B20-8856-

2DE2A7A8BEC4}] => (Allow) C:\Program Files\NVIDIA 

Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{144B11A7-20D4-4147-BF33-

E0F33EF4D0AC}] => (Allow) C:\Program Files\NVIDIA 

Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{A84F4352-8976-414D-9FBE-

3F02E762D5B2}] => (Allow) C:\Program Files\NVIDIA 

Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{382E7208-586C-43CA-8958-

F2940B51466B}] => (Allow) C:\Program Files\NVIDIA 

Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{DCA086D5-8BE8-4DA6-BCAC-

08A9A26CE4B0}] => (Allow) LPort=8298
FirewallRules: [{24B323F7-F754-4B3B-B517-

88B03B2724A4}] => (Allow) C:\Program Files 

(x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{3A20D3B5-0C1B-407F-9711-

DD52A254D242}] => (Allow) C:\Program Files 

(x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B1624F26-81C9-4327-B764-

71E73C638C7E}] => (Allow) C:\Program Files 

(x86)\Dropbox\Client\Dropbox.exe

==================== Fehlerhafte Geräte im 

Gerätemanager =============

Name: Windows-Firewallautorisierungstreiber
Description: Windows-Firewallautorisierungstreiber
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: mpsdrv
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and 

then click "Enable Device". This starts the Enable 

Device wizard. Follow the instructions.

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not 

working properly, or does not have all its drivers 

installed. (Code 24)
Resolution: The device is installed incorrectly. 

The problem could be a hardware failure, or a new 

driver might be needed.
Devices stay in this state if they have been 

prepared for removal.
After you remove the device, this error 

disappears.Remove the device, and this error should 

be resolved.

Konnte Geräte nicht auflisten. Überprüfen Sie den 

"winmgmt" Dienst oder reparieren Sie den WMI.


==================== Fehlereinträge in der 

Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (10/15/2015 08:27:18 AM) (Source: ResScan) 

(EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  

8:27:18
ErrorCode        : 80004005
ErrorMessage     

: Unbekannter Fehler
Program Message  : hResult Error
File             : 

.\RWDevice.cpp
Function         : 

RWDevice::GetMetaDataForGroup
Line             : 

1609

Error: (10/15/2015 08:27:18 AM) (Source: ResScan) 

(EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  

8:27:18
ErrorCode        : 80004005
ErrorMessage     

: Unbekannter Fehler
Program Message  : hResult Error
File             : 

.\RWDevice.cpp
Function         : 

RWDevice::GetMetaDataForGroup
Line             : 

1589

Error: (10/15/2015 08:27:18 AM) (Source: ResScan) 

(EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  

8:27:18
ErrorCode        : 80004005
ErrorMessage     

: Unbekannter Fehler
Program Message  : hResult Error
File             : 

.\RWDevice.cpp
Function         : 

RWDevice::GetMetaDataForGroup
Line             : 

1609

Error: (10/15/2015 08:27:18 AM) (Source: ResScan) 

(EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  

8:27:18
ErrorCode        : 80004005
ErrorMessage     

: Unbekannter Fehler
Program Message  : hResult Error
File             : 

.\RWDevice.cpp
Function         : 

RWDevice::GetMetaDataForGroup
Line             : 

1589

Error: (10/15/2015 08:27:17 AM) (Source: ResScan) 

(EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  

8:27:17
ErrorCode        : 80004005
ErrorMessage     

: Unbekannter Fehler
Program Message  : hResult Error
File             : 

.\RWDevice.cpp
Function         : 

RWDevice::GetMetaDataForGroup
Line             : 

1609

Error: (10/15/2015 08:27:17 AM) (Source: ResScan) 

(EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  

8:27:17
ErrorCode        : 80004005
ErrorMessage     

: Unbekannter Fehler
Program Message  : hResult Error
File             : 

.\RWDevice.cpp
Function         : 

RWDevice::GetMetaDataForGroup
Line             : 

1589

Error: (10/15/2015 08:27:17 AM) (Source: ResScan) 

(EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  

8:27:17
ErrorCode        : 80004005
ErrorMessage     

: Unbekannter Fehler
Program Message  : hResult Error
File             : 

.\RWDevice.cpp
Function         : 

RWDevice::GetMetaDataForGroup
Line             : 

1609

Error: (10/15/2015 08:27:17 AM) (Source: ResScan) 

(EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  

8:27:17
ErrorCode        : 80004005
ErrorMessage     

: Unbekannter Fehler
Program Message  : hResult Error
File             : 

.\RWDevice.cpp
Function         : 

RWDevice::GetMetaDataForGroup
Line             : 

1589

Error: (10/15/2015 08:27:16 AM) (Source: ResScan) 

(EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  

8:27:16
ErrorCode        : 80004005
ErrorMessage     

: Unbekannter Fehler
Program Message  : hResult Error
File             : 

.\RWDevice.cpp
Function         : 

RWDevice::GetMetaDataForGroup
Line             : 

1609

Error: (10/15/2015 08:27:16 AM) (Source: ResScan) 

(EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  

8:27:16
ErrorCode        : 80004005
ErrorMessage     

: Unbekannter Fehler
Program Message  : hResult Error
File             : 

.\RWDevice.cpp
Function         : 

RWDevice::GetMetaDataForGroup
Line             : 

1589


Systemfehler:
=============
Error: (10/15/2015 08:30:28 AM) (Source: Service 

Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für 

"FailureCommand" aufgrund folgenden Fehlers 

fehlgeschlagen: 
%%5

Error: (10/15/2015 08:23:30 AM) (Source: Service 

Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für 

"Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (10/15/2015 08:17:00 AM) (Source: Service 

Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Windows-Firewall" ist vom 

Dienst "Windows-Firewallautorisierungstreiber" 

abhängig, der aufgrund folgenden Fehlers nicht 

gestartet wurde: 
%%1058

Error: (10/15/2015 08:17:00 AM) (Source: Service 

Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows-

Firewallautorisierungstreiber" wurde aufgrund 

folgenden Fehlers nicht gestartet: 
%%1058

Error: (10/15/2015 08:16:53 AM) (Source: Service 

Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" 

wurde mit folgendem dienstspezifischem Fehler 

beendet: %%-2147023143.

Error: (10/15/2015 08:16:36 AM) (Source: Service 

Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Windows-Firewall" ist vom 

Dienst "Windows-Firewallautorisierungstreiber" 

abhängig, der aufgrund folgenden Fehlers nicht 

gestartet wurde: 
%%1058

Error: (10/15/2015 08:16:36 AM) (Source: Service 

Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows-

Firewallautorisierungstreiber" wurde aufgrund 

folgenden Fehlers nicht gestartet: 
%%1058

Error: (10/15/2015 08:14:46 AM) (Source: Service 

Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SSPORT" wurde aufgrund 

folgenden Fehlers nicht gestartet: 
%%2

Error: (10/15/2015 08:14:01 AM) (Source: Service 

Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim 

Verbindungsversuch mit dem Dienst Netzmanager 

Infrastruktur Informationssystem Dienst erreicht.

Error: (10/15/2015 08:13:27 AM) (Source: Service 

Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund 

folgenden Fehlers nicht gestartet: 
%%2


==================== Speicherinformationen 

=========================== 

Prozessor: Intel(R) Core(TM) i3 CPU 530 @ 2.93GHz
Prozentuale Nutzung des RAM: 60%
Installierter physikalischer RAM: 3959.09 MB
Verfügbarer physikalischer RAM: 1576.13 MB
Summe virtueller Speicher: 7916.39 MB
Verfügbarer virtueller Speicher: 4769.08 MB

==================== Laufwerke 

================================

Drive c: (Acer) (Fixed) (Total:458.87 GB) 

(Free:328.53 GB) NTFS
Drive d: (Data) (Fixed) (Total:286.12 GB) 

(Free:270.84 GB) NTFS

==================== MBR & Partitionstabelle 

==================

===================================================

=====
Disk: 0 (Size: 931.5 GB) (Disk ID: F467897B)
Partition 1: (Not Active) - (Size=13.7 GB) - 

(Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 

NTFS)
Partition 3: (Not Active) - (Size=458.9 GB) - 

(Type=07 NTFS)
Partition 4: (Not Active) - (Size=458.9 GB) - 

(Type=OF Extended)

==================== Ende von Addition.txt 

============================
         
 
 

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:14-10-2015 01
durchgeführt von rainer (Administrator) auf ACER (15-10-2015 09:06:22)
Gestartet von C:\Users\rainer\Downloads
Geladene Profile: rainer (Verfügbare Profile: rainer)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe
() C:\Program Files\ACD Systems\ACDSee Pro\8.0\ACDSeeCommanderPro8.exe
() C:\Program Files (x86)\ACD Systems\ACDSee\18.0\ACDSeeCommander18.exe
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\Snagit 12\Snagit32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Google Inc.) C:\Users\rainer\AppData\Local\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
() C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(ACD Systems) C:\Program Files (x86)\ACD Systems\ACDSee\18.0\acdIDInTouch2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Google Inc.) C:\Users\rainer\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\rainer\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\rainer\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\rainer\AppData\Local\Google\Chrome\Application\chrome.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\ASUS\USB-N13 WLAN Card Utilities\RtlService.exe
(Wacom Technology, Corp.) C:\Windows\System32\Tablet.exe
(Wacom Technology, Corp.) C:\Windows\System32\WTablet\TabUserW.exe
(Wacom Technology, Corp.) C:\Windows\System32\Tablet.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
() C:\OEM\USBDECTION\USBS3S4Detection.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\USB-N13 WLAN Card Utilities\RtWLan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\Snagit 12\SnagPriv.exe
(Microsoft Corporation) C:\Windows\System32\UI0Detect.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\Snagit 12\TscHelp.exe
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\Snagit 12\SnagitEditor.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\splwow64.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-10-13] (Intel Corporation)
HKLM\...\Run: [mwlDaemon] => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [349480 2009-09-10] (Egis Technology Inc.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8098848 2009-09-02] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888 2009-08-13] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [Hotkey Utility] => C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [629280 2009-08-18] ()
HKLM-x32\...\Run: [ArcadeDeluxeAgent] => C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [128296 2009-11-10] (CyberLink Corp.)
HKLM-x32\...\Run: [ACSW18DE] => C:\Program Files (x86)\ACD Systems\ACDSee\18.0\acdIDInTouch2.exe [1470736 2015-02-03] (ACD Systems)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [36710768 2015-10-02] (Dropbox, Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126712 2015-01-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [782520 2015-10-05] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\Run: [dradio-RecorderTimer] => C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe [42496 2012-10-13] ()
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\Run: [ACDSeeCommanderPro8] => C:\Program Files\ACD Systems\ACDSee Pro\8.0\ACDSeeCommanderPro8.exe [2141192 2015-05-07] ()
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\Run: [VideoDownloaderUltimate] => C:\ProgramData\VideoDownloaderUltimateWinApp\VideoDownloaderUltimate.exe [2258760 2015-08-14] (Link64 GmbH)
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\Run: [ACDSeeCommander18] => C:\Program Files (x86)\ACD Systems\ACDSee\18.0\ACDSeeCommander18.exe [1973256 2015-05-06] ()
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\Run: [GoogleChromeAutoLaunch_290FB52F6B1D9B39F20FE44B3D2BD2B2] => C:\Users\rainer\AppData\Local\Google\Chrome\Application\chrome.exe [811848 2015-10-09] (Google Inc.)
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\MountPoints2: {075a8144-4f47-11e2-ac87-90fba62d539c} - G:\LaunchU3.exe -a
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\MountPoints2: {52690921-1c75-11e4-a4ca-90fba62d539c} - H:\LaunchU3.exe -a
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\MountPoints2: {f774a40f-a6a2-11e3-9da6-90fba62d539c} - H:\pushinst.exe
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\Acer.scr [425984 2009-08-05] ()
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-10-05] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-10-05] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-10-05] (Google)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [egisPSDP] -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x64\psdprotect.dll [2009-09-10] (Egis Technology Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [egisPSDP] -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\psdprotect.dll [2009-09-10] (Egis Technology Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Snagit 12.lnk [2015-10-07]
ShortcutTarget: Snagit 12.lnk -> C:\Program Files (x86)\TechSmith\Snagit 12\Snagit32.exe (TechSmith Corporation)
Startup: C:\Users\rainer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk [2015-06-20]
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{39AACB1F-D224-41D8-93D9-9188FE6C1AB7}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{8CDC23DE-5CF5-4E8B-B511-FFE518B6A645}: [DhcpNameServer] 192.168.2.1

Internet Explorer:
==================
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_x3900&r=17360112ln07973780f753h9j1y34o
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_x3900&r=17360112ln07973780f753h9j1y34o
SearchScopes: HKLM-x32 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKU\S-1-5-21-2598399437-2432177153-1626090690-1000 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE469
SearchScopes: HKU\S-1-5-21-2598399437-2432177153-1626090690-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE469
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08] (Adobe Systems Incorporated)
BHO-x32: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)
BHO-x32: AviraBrowserSafety.BrowserSafety -> {c3c77255-42c0-499f-b664-6e981a0b1647} -> C:\Windows\SysWOW64\mscoree.dll [2010-11-05] (Microsoft Corporation)
Handler-x32: abs - {E00957BD-D0E1-4eb9-A025-7743FDC8B27B} - C:\Windows\SysWOW64\mscoree.dll [2010-11-05] (Microsoft Corporation)
Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll [2013-04-16] (Belarc, Inc.)

FireFox:
========
FF ProfilePath: C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default
FF Homepage: hxxp://www.google.de/
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_207.dll [2015-10-14] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-01-31] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_207.dll [2015-10-14] ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Keine Datei]
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-17] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-17] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-24] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-24] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2013-05-08] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2598399437-2432177153-1626090690-1000: @phonostar.de/phonostar -> C:\Program Files (x86)\dradio-Recorder\npphonostarDetectNP.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-2598399437-2432177153-1626090690-1000: @tools.google.com/Google Update;version=3 -> C:\Users\rainer\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-24] (Google Inc.)
FF Plugin HKU\S-1-5-21-2598399437-2432177153-1626090690-1000: @tools.google.com/Google Update;version=9 -> C:\Users\rainer\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-24] (Google Inc.)
FF user.js: detected! => C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\user.js [2014-10-31]
FF SearchPlugin: C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\searchplugins\google-images.xml [2015-08-16]
FF SearchPlugin: C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\searchplugins\google-maps.xml [2015-08-16]
FF Extension: Avira Browser Safety - C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\Extensions\abs@avira.com [2015-09-24]
FF Extension: Youtube Downloader - 4K Download - C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\Extensions\paulsaintuzb@gmail.com [2015-08-17]
FF Extension: FireFTP - C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f} [2015-05-29]
FF Extension: Adblock Plus - C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-03]
FF HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\extensions\cliqz@cliqz.com => nicht gefunden

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR Plugin: (Native Client) - C:\Users\rainer\AppData\Local\Google\Chrome\Application\46.0.2490.71\ppGoogleNaClPluginChrome.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Users\rainer\AppData\Local\Google\Chrome\Application\46.0.2490.71\pdf.dll => Keine Datei
CHR Plugin: (Shockwave Flash) - C:\Users\rainer\AppData\Local\Google\Chrome\Application\46.0.2490.71\gcswf32.dll => Keine Datei
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll => Keine Datei
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Users\rainer\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll => Keine Datei
CHR Profile: C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-01-31]
CHR Extension: (Google-Suche) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-01-31]
CHR Extension: (PasswordBox - Free Password Vault) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\epnpbkpfpmpbheinimppjadpcbkechhk [2014-04-26]
CHR Extension: (Avira Browserschutz) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-11-16]
CHR Extension: (Chrome Remote Desktop) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2012-01-31]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-08]
CHR Extension: (Memo Notepad) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmoihkoninaoanjobiiknmgenhpaecec [2014-04-26]
CHR Extension: (Google Mail) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-01-31]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - C:\Users\rainer\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2015936 2015-09-29] (Adobe Systems, Incorporated)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [932912 2015-10-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [461672 2015-10-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [461672 2015-10-05] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1147720 2015-10-05] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [182520 2015-01-19] (Avira Operations GmbH & Co. KG)
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [Datei ist nicht signiert]
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-10-11] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-10-11] (Dropbox, Inc.)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2012-01-31] (Macrovision Europe Ltd.) [Datei ist nicht signiert]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
S3 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-10] (Egis Technology Inc.)
S2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2869248 2015-03-27] (Deutsche Telekom AG) [Datei ist nicht signiert]
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1617696 2014-04-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21007192 2014-04-30] (NVIDIA Corporation)
R2 Realtek11nCU; C:\Program Files (x86)\ASUS\USB-N13 WLAN Card Utilities\RtlService.exe [36864 2012-05-10] (Realtek Semiconductor Corp.) [Datei ist nicht signiert]
R2 TabletService; C:\Windows\system32\Tablet.exe [1574448 2007-03-31] (Wacom Technology, Corp.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2145080 2014-07-16] (TuneUp Software)
R2 USBS3S4Detection; C:\OEM\USBDECTION\USBS3S4Detection.exe [76320 2009-12-09] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [163544 2015-10-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-10-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2015-10-05] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [74952 2015-10-05] (Avira Operations GmbH & Co. KG)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [16776 2011-07-29] () [Datei ist nicht signiert]
S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [14216 2011-07-29] () [Datei ist nicht signiert]
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9096 2011-07-29] () [Datei ist nicht signiert]
S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [8456 2011-07-29] () [Datei ist nicht signiert]
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18776 2014-04-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R3 RTL8192cu; C:\Windows\System32\DRIVERS\rtwlanu.sys [986728 2012-02-10] (Realtek Semiconductor Corporation                           )
S2 SSPORT; C:\Windows\SysWOW64\Drivers\SSPORT.sys [11576 2009-08-27] (Samsung Electronics)
S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-10-15 09:06 - 2015-10-15 09:07 - 00028838 _____ C:\Users\rainer\Downloads\FRST.txt
2015-10-15 09:05 - 2015-10-15 09:06 - 00000000 ____D C:\FRST
2015-10-15 09:04 - 2015-10-15 09:04 - 02196992 _____ (Farbar) C:\Users\rainer\Downloads\FRST64.exe
2015-10-14 15:47 - 2015-10-14 15:47 - 00001167 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-10-14 15:47 - 2015-10-14 15:47 - 00001155 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-10-14 15:47 - 2015-10-14 15:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-10-14 15:46 - 2015-10-14 15:46 - 42621984 _____ C:\Users\rainer\Downloads\firefox_setup_41.0.1 (2).exe
2015-10-14 15:46 - 2015-10-14 15:46 - 42621984 _____ C:\Users\rainer\Downloads\firefox_setup_41.0.1 (1).exe
2015-10-14 15:45 - 2015-10-14 15:46 - 42621984 _____ C:\Users\rainer\Downloads\firefox_setup_41.0.1.exe
2015-10-14 15:37 - 2015-10-14 15:37 - 00000000 ____D C:\Users\rainer\AppData\Roaming\Avira
2015-10-14 15:34 - 2015-10-05 15:51 - 00163544 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-10-14 15:34 - 2015-10-05 15:51 - 00141416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-10-14 15:34 - 2015-10-05 15:51 - 00074952 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-10-14 15:34 - 2015-10-05 15:51 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2015-10-14 15:33 - 2015-10-15 08:17 - 00000000 ____D C:\ProgramData\Package Cache
2015-10-14 15:33 - 2015-10-14 15:36 - 00000000 ____D C:\Program Files (x86)\Avira
2015-10-14 15:33 - 2015-10-14 15:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-10-14 15:32 - 2015-10-14 15:32 - 04515896 _____ (Avira Operations & Co. KG) C:\Users\rainer\Downloads\avira_de_av___ws (1).exe
2015-10-14 15:31 - 2015-10-14 15:31 - 04515896 _____ (Avira Operations & Co. KG) C:\Users\rainer\Downloads\avira_de_av___ws.exe
2015-10-14 08:37 - 2015-08-06 20:04 - 14176768 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-10-14 08:37 - 2015-08-06 20:03 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2015-10-14 08:37 - 2015-08-06 19:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-10-14 08:37 - 2015-08-06 19:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2015-10-14 08:36 - 2015-09-25 20:07 - 03168768 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-10-14 08:36 - 2015-09-25 20:07 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-10-14 08:36 - 2015-09-25 20:07 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-10-14 08:36 - 2015-09-25 20:07 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-10-14 08:36 - 2015-09-25 20:07 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-10-14 08:36 - 2015-09-25 20:07 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-10-14 08:36 - 2015-09-25 20:07 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-10-14 08:36 - 2015-09-25 20:06 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-10-14 08:36 - 2015-09-25 20:06 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-10-14 08:36 - 2015-09-25 20:06 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-10-14 08:36 - 2015-09-25 20:06 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-10-14 08:36 - 2015-09-25 19:59 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-10-14 08:36 - 2015-09-25 19:59 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-10-14 08:36 - 2015-09-25 19:59 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-10-14 08:36 - 2015-09-25 19:59 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-10-14 08:36 - 2015-09-25 19:58 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-10-14 08:36 - 2015-09-18 21:31 - 00391784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-10-14 08:36 - 2015-09-18 20:58 - 00345688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-10-14 08:36 - 2015-09-16 06:48 - 25851904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-10-14 08:36 - 2015-09-16 06:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-10-14 08:36 - 2015-09-16 06:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-10-14 08:36 - 2015-09-16 06:22 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-10-14 08:36 - 2015-09-16 06:21 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-10-14 08:36 - 2015-09-16 06:21 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-10-14 08:36 - 2015-09-16 06:21 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-10-14 08:36 - 2015-09-16 06:21 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-10-14 08:36 - 2015-09-16 06:21 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-10-14 08:36 - 2015-09-16 06:14 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-10-14 08:36 - 2015-09-16 06:13 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-10-14 08:36 - 2015-09-16 06:10 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-10-14 08:36 - 2015-09-16 06:09 - 05990912 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-10-14 08:36 - 2015-09-16 06:08 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-10-14 08:36 - 2015-09-16 06:08 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-10-14 08:36 - 2015-09-16 06:08 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-10-14 08:36 - 2015-09-16 06:08 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-10-14 08:36 - 2015-09-16 06:01 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-10-14 08:36 - 2015-09-16 05:58 - 20357632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-10-14 08:36 - 2015-09-16 05:58 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-10-14 08:36 - 2015-09-16 05:50 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-10-14 08:36 - 2015-09-16 05:46 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-10-14 08:36 - 2015-09-16 05:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-10-14 08:36 - 2015-09-16 05:45 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-10-14 08:36 - 2015-09-16 05:43 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-10-14 08:36 - 2015-09-16 05:41 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-10-14 08:36 - 2015-09-16 05:33 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-10-14 08:36 - 2015-09-16 05:33 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-10-14 08:36 - 2015-09-16 05:32 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-10-14 08:36 - 2015-09-16 05:32 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-10-14 08:36 - 2015-09-16 05:31 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-10-14 08:36 - 2015-09-16 05:31 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-10-14 08:36 - 2015-09-16 05:29 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-10-14 08:36 - 2015-09-16 05:29 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-10-14 08:36 - 2015-09-16 05:28 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-10-14 08:36 - 2015-09-16 05:28 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-10-14 08:36 - 2015-09-16 05:26 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-10-14 08:36 - 2015-09-16 05:26 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-10-14 08:36 - 2015-09-16 05:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-10-14 08:36 - 2015-09-16 05:24 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-10-14 08:36 - 2015-09-16 05:23 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-10-14 08:36 - 2015-09-16 05:22 - 14458368 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-10-14 08:36 - 2015-09-16 05:22 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-10-14 08:36 - 2015-09-16 05:22 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-10-14 08:36 - 2015-09-16 05:15 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-10-14 08:36 - 2015-09-16 05:11 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-10-14 08:36 - 2015-09-16 05:10 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-10-14 08:36 - 2015-09-16 05:07 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-10-14 08:36 - 2015-09-16 05:06 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-10-14 08:36 - 2015-09-16 05:05 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-10-14 08:36 - 2015-09-16 05:05 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-10-14 08:36 - 2015-09-16 05:04 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-10-14 08:36 - 2015-09-16 04:59 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-10-14 08:36 - 2015-09-16 04:58 - 12853760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-10-14 08:36 - 2015-09-16 04:58 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-10-14 08:36 - 2015-09-16 04:56 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-10-14 08:36 - 2015-09-16 04:55 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-10-14 08:36 - 2015-09-16 04:55 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-10-14 08:36 - 2015-09-16 04:48 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-10-14 08:36 - 2015-09-16 04:37 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-10-14 08:36 - 2015-09-16 04:34 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-10-14 08:36 - 2015-09-16 04:32 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-10-14 08:35 - 2015-10-01 20:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-10-14 08:35 - 2015-10-01 20:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-10-14 08:35 - 2015-10-01 20:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-10-14 08:35 - 2015-10-01 20:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-10-14 08:35 - 2015-10-01 20:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-10-14 08:35 - 2015-10-01 20:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-10-14 08:35 - 2015-10-01 20:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-10-14 08:35 - 2015-10-01 19:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-10-14 08:35 - 2015-10-01 19:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-10-14 08:35 - 2015-09-29 05:16 - 05569472 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-10-14 08:35 - 2015-09-29 05:13 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-10-14 08:35 - 2015-09-29 05:10 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-10-14 08:35 - 2015-09-29 05:10 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-10-14 08:35 - 2015-09-29 05:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-10-14 08:35 - 2015-09-29 05:09 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-10-14 08:35 - 2015-09-29 05:05 - 03990976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-10-14 08:35 - 2015-09-29 05:05 - 03936192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-10-14 08:35 - 2015-09-29 05:05 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-10-14 08:35 - 2015-09-29 05:05 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-10-14 08:35 - 2015-09-29 05:02 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:59 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-10-14 08:35 - 2015-09-29 04:59 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-10-14 08:35 - 2015-09-29 04:59 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-10-14 08:35 - 2015-09-29 04:59 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-10-14 08:35 - 2015-09-29 04:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-10-14 08:35 - 2015-09-29 04:59 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-10-14 08:35 - 2015-09-29 04:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-10-14 08:35 - 2015-09-29 04:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-10-14 08:35 - 2015-09-29 04:58 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-10-14 08:35 - 2015-09-29 04:58 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-10-14 08:35 - 2015-09-29 04:57 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-10-14 08:35 - 2015-09-29 04:57 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-10-14 08:35 - 2015-09-29 04:57 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-10-14 08:35 - 2015-09-29 04:57 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-10-14 08:35 - 2015-09-29 04:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-10-14 08:35 - 2015-09-29 04:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 03:50 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-10-14 08:35 - 2015-09-29 03:49 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-10-14 08:35 - 2015-09-29 03:49 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-10-14 08:35 - 2015-09-29 03:43 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-10-14 08:35 - 2015-09-29 03:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-10-14 08:35 - 2015-09-29 03:40 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 03:40 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 03:40 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 03:40 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-10-14 08:35 - 2015-09-15 20:17 - 00157016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-10-14 08:35 - 2015-09-15 20:17 - 00097112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-10-14 08:35 - 2015-09-15 20:11 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-10-14 08:35 - 2015-09-15 20:11 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-10-14 08:35 - 2015-09-15 20:11 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-10-14 08:35 - 2015-09-15 20:11 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-10-14 08:35 - 2015-09-15 20:11 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-10-14 08:35 - 2015-09-15 20:11 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-10-14 08:35 - 2015-09-15 20:10 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-10-14 08:35 - 2015-09-15 19:36 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-10-14 08:35 - 2015-09-15 19:36 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-10-14 08:35 - 2015-09-15 19:36 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-10-14 08:35 - 2015-09-15 19:35 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2015-10-11 21:35 - 2015-10-11 21:35 - 00000000 ____D C:\ProgramData\regid.1995-08.com.techsmith
2015-10-11 21:35 - 2015-10-11 21:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2015-10-11 10:27 - 2015-10-11 10:27 - 00000000 ____D C:\Users\rainer\AppData\Roaming\Dropbox
2015-10-11 10:27 - 2015-10-11 10:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-10-11 10:26 - 2015-10-15 08:37 - 00001214 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2015-10-11 10:26 - 2015-10-15 08:13 - 00001210 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2015-10-11 10:26 - 2015-10-11 10:32 - 00004210 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineUA
2015-10-11 10:26 - 2015-10-11 10:32 - 00003958 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineCore
2015-10-11 10:26 - 2015-10-11 10:27 - 00000000 ____D C:\Users\rainer\AppData\Local\Dropbox
2015-10-11 10:26 - 2015-10-11 10:27 - 00000000 ____D C:\Program Files (x86)\Dropbox
2015-10-11 10:26 - 2015-10-11 10:26 - 00000000 ____D C:\ProgramData\Dropbox
2015-10-09 21:37 - 2015-10-09 21:37 - 00002046 _____ C:\Users\Public\Desktop\Google Slides.lnk
2015-10-09 21:37 - 2015-10-09 21:37 - 00002044 _____ C:\Users\Public\Desktop\Google Sheets.lnk
2015-10-09 21:37 - 2015-10-09 21:37 - 00002034 _____ C:\Users\Public\Desktop\Google Docs.lnk
2015-10-09 21:37 - 2015-10-09 21:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-10-09 21:36 - 2015-10-09 21:36 - 00929872 _____ (Google Inc.) C:\Users\rainer\Downloads\googledrivesync.exe
2015-10-09 14:21 - 2015-10-09 14:21 - 415136986 _____ C:\Windows\MEMORY.DMP
2015-10-09 14:21 - 2015-10-09 14:21 - 00286920 _____ C:\Windows\Minidump\100915-17097-01.dmp
2015-10-09 14:21 - 2015-10-09 14:21 - 00000000 ____D C:\Windows\Minidump
2015-10-06 09:05 - 2015-10-06 09:05 - 00000000 ____D C:\Users\rainer\AppData\Roaming\No Company Name
2015-10-04 20:44 - 2015-10-04 20:44 - 00019043 _____ C:\Users\rainer\Documents\Finanzen 01-10-2015.odt
2015-10-02 10:43 - 2015-10-02 10:43 - 00014169 _____ C:\Windows\DirectX.log
2015-10-02 10:43 - 2015-10-02 10:43 - 00002220 _____ C:\Users\Public\Desktop\ACDSee 18.lnk
2015-10-02 10:43 - 2015-10-02 10:43 - 00000000 ____D C:\Program Files (x86)\ACD Systems
2015-10-01 21:02 - 2015-10-01 21:02 - 00000000 ____D C:\Program Files (x86)\LibreOffice 5
2015-10-01 21:01 - 2015-10-01 21:01 - 00001426 _____ C:\Users\Public\Desktop\LibreOffice 5.0.lnk
2015-10-01 21:01 - 2015-10-01 21:01 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 5.0
2015-10-01 21:00 - 2015-10-01 21:01 - 00000000 ____D C:\Program Files\LibreOffice 5
2015-10-01 13:47 - 2015-10-01 13:47 - 00000000 ____D C:\Program Files (x86)\LibreOffice_4.4_SDK
2015-09-24 11:29 - 2015-08-05 19:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-09-24 11:29 - 2015-08-05 19:56 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-09-24 11:29 - 2015-08-05 19:56 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-09-24 11:29 - 2015-08-05 19:40 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-09-24 11:29 - 2015-07-15 05:17 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-09-24 11:29 - 2015-07-15 04:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-09-24 11:29 - 2015-07-09 19:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-09-24 11:29 - 2015-07-09 19:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-09-24 11:29 - 2015-07-09 19:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-09-24 11:29 - 2015-07-09 19:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-09-24 11:28 - 2015-07-23 02:02 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-09-24 11:28 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-09-24 11:28 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-09-24 11:28 - 2015-07-22 19:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-09-24 11:28 - 2015-07-22 19:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-09-24 11:28 - 2015-07-22 18:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-09-24 11:27 - 2015-08-27 20:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-09-24 11:27 - 2015-08-27 20:18 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-09-24 11:27 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-09-24 11:27 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-09-24 11:27 - 2015-08-27 19:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-09-24 11:27 - 2015-08-27 19:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-09-24 11:27 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2015-09-24 11:27 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-09-24 11:27 - 2015-06-25 12:06 - 00115136 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-09-24 11:27 - 2015-06-25 12:01 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-09-24 11:27 - 2015-06-25 12:01 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-09-24 11:27 - 2015-06-25 11:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-09-24 11:26 - 2015-09-02 05:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-09-24 11:26 - 2015-09-02 05:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-09-24 11:26 - 2015-09-02 05:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-09-24 11:26 - 2015-09-02 05:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-09-24 11:26 - 2015-09-02 04:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-09-24 11:26 - 2015-09-02 04:48 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-09-24 11:26 - 2015-09-02 04:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-09-24 11:26 - 2015-09-02 04:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-09-24 11:26 - 2015-09-02 03:51 - 03209216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-09-24 11:26 - 2015-09-02 03:47 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-09-24 11:26 - 2015-09-02 03:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-09-17 19:28 - 2015-09-17 19:28 - 00963232 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120.dll
2015-09-17 19:28 - 2015-09-17 19:28 - 00660128 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120.dll
2015-09-17 19:28 - 2015-09-17 19:28 - 00356528 _____ (Microsoft Corporation) C:\Windows\system32\vccorlib120.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-10-15 08:47 - 2012-12-26 21:54 - 00000000 ____D C:\Users\rainer\Documents\FinePrint-Dateien
2015-10-15 08:47 - 2012-02-01 14:52 - 00000072 _____ C:\Users\Public\LMDebug.log
2015-10-15 08:35 - 2009-07-14 06:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-15 08:35 - 2009-07-14 06:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-15 08:34 - 2012-12-26 15:36 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-10-15 08:34 - 2007-10-10 13:06 - 01464184 _____ C:\Windows\WindowsUpdate.log
2015-10-15 08:14 - 2015-08-16 09:52 - 00016192 _____ C:\Windows\setupact.log
2015-10-15 08:14 - 2012-01-31 19:43 - 00000000 ____D C:\Users\rainer\AppData\Roaming\WTablet
2015-10-15 08:13 - 2012-12-23 18:17 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-15 08:13 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-15 08:13 - 2007-10-10 13:12 - 00000000 ____D C:\ProgramData\NVIDIA
2015-10-15 08:12 - 2015-08-16 09:52 - 00150270 _____ C:\Windows\PFRO.log
2015-10-14 15:47 - 2014-11-15 09:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-10-14 15:34 - 2014-11-14 22:01 - 00000000 ____D C:\ProgramData\Avira
2015-10-14 15:34 - 2012-12-26 15:36 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-10-14 15:34 - 2012-12-26 15:36 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-14 15:34 - 2012-12-26 15:36 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-10-14 15:26 - 2012-01-31 15:27 - 00002365 _____ C:\Users\rainer\Desktop\Google Chrome.lnk
2015-10-14 15:09 - 2012-12-23 18:17 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-14 08:50 - 2014-03-08 14:20 - 00000000 ____D C:\Windows\system32\MRT
2015-10-14 08:45 - 2012-02-01 18:03 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-10-14 08:43 - 2009-11-26 19:39 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-10-14 08:12 - 2009-07-14 07:13 - 01620684 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-14 08:12 - 2007-10-10 22:58 - 00699432 _____ C:\Windows\system32\perfh007.dat
2015-10-14 08:12 - 2007-10-10 22:58 - 00149572 _____ C:\Windows\system32\perfc007.dat
2015-10-13 19:55 - 2014-11-08 09:12 - 00000000 ____D C:\Users\rainer\AppData\Local\Downloaded Installations
2015-10-13 19:49 - 2015-06-20 13:42 - 00000000 ____D C:\ProgramData\Netzmanager
2015-10-13 14:16 - 2014-04-27 19:26 - 00000000 ____D C:\Users\rainer\AppData\Roaming\vlc
2015-10-11 10:26 - 2015-08-31 08:10 - 00000000 ____D C:\Users\rainer\Downloads\7z
2015-10-09 21:37 - 2012-01-31 12:40 - 00000000 ____D C:\Users\rainer\AppData\Local\Google
2015-10-09 21:37 - 2009-11-26 19:47 - 00000000 ____D C:\Program Files (x86)\Google
2015-10-09 13:34 - 2015-04-04 09:06 - 00000000 ___SD C:\Windows\system32\GWX
2015-10-08 09:44 - 2015-04-04 09:06 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-10-06 20:43 - 2014-11-08 09:12 - 00002215 _____ C:\Users\Public\Desktop\ACDSee Pro 8 (64-bit).lnk
2015-10-06 20:43 - 2014-11-08 09:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACD Systems
2015-10-06 20:37 - 2015-08-15 13:29 - 00096704 _____ C:\Users\rainer\AppData\Local\GDIPFONTCACHEV1.DAT
2015-10-06 20:36 - 2015-08-16 09:52 - 02329128 _____ C:\Windows\system32\FNTCACHE.DAT
2015-10-06 09:06 - 2012-01-31 19:48 - 00000000 ____D C:\adobe
2015-10-06 08:44 - 2014-08-15 14:02 - 00000000 ____D C:\Users\rainer\AppData\Local\Adobe
2015-10-05 22:04 - 2012-01-31 12:40 - 00000000 ____D C:\Users\rainer\AppData\Roaming\Adobe
2015-10-05 14:43 - 2014-11-08 09:14 - 00000000 ____D C:\Users\rainer\AppData\Local\ACD Systems
2015-10-04 12:07 - 2015-06-04 09:20 - 00000591 _____ C:\Windows\wininit.ini
2015-10-03 13:21 - 2014-10-06 14:05 - 00000000 ____D C:\ProgramData\tmp
2015-10-02 14:18 - 2015-05-22 14:12 - 00072192 ___SH C:\Users\rainer\Downloads\Thumbs.db
2015-10-02 11:35 - 2015-01-04 15:15 - 00000000 __SHD C:\Users\rainer\AppData\LocalLow\EmieUserList
2015-10-02 11:35 - 2015-01-04 15:15 - 00000000 __SHD C:\Users\rainer\AppData\LocalLow\EmieBrowserModeList
2015-10-02 11:35 - 2014-11-14 21:02 - 00000000 __SHD C:\Users\rainer\AppData\LocalLow\EmieSiteList
2015-10-02 11:35 - 2014-11-14 21:02 - 00000000 __SHD C:\Users\rainer\AppData\Local\EmieUserList
2015-10-02 11:35 - 2014-11-14 21:02 - 00000000 __SHD C:\Users\rainer\AppData\Local\EmieSiteList
2015-10-02 11:35 - 2014-11-14 21:02 - 00000000 __SHD C:\Users\rainer\AppData\Local\EmieBrowserModeList
2015-09-26 10:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-09-24 22:07 - 2015-05-20 11:34 - 00000542 _____ C:\Users\Public\Desktop\CEWE FOTOSCHAU.lnk
2015-09-24 22:07 - 2014-10-06 14:05 - 00000554 _____ C:\Users\Public\Desktop\Saturn Fotoservice.lnk
2015-09-24 19:29 - 2009-07-14 09:45 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-24 19:29 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-09-24 11:04 - 2012-12-23 18:17 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-09-24 11:04 - 2012-12-23 18:17 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-09-24 11:04 - 2012-01-31 15:24 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2598399437-2432177153-1626090690-1000UA
2015-09-24 11:04 - 2012-01-31 15:24 - 00003700 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2598399437-2432177153-1626090690-1000Core
2015-09-24 11:04 - 2012-01-31 15:24 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2598399437-2432177153-1626090690-1000UA.job
2015-09-24 11:04 - 2012-01-31 15:24 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2598399437-2432177153-1626090690-1000Core.job

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2009-11-26 19:31 - 2009-02-10 22:23 - 0192484 _____ () C:\Program Files (x86)\Common Files\Acer GameZone online.ico
2013-01-24 21:19 - 2013-01-24 21:19 - 0000000 _____ () C:\Users\rainer\AppData\Roaming\wklnhst.dat
2014-05-24 17:06 - 2014-08-02 09:56 - 0011264 _____ () C:\Users\rainer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2007-10-10 13:14 - 2007-10-10 13:15 - 0008463 _____ () C:\ProgramData\ArcadeDeluxe3.log
2009-11-26 19:31 - 2009-07-18 04:57 - 0036136 _____ (Oberon Media) C:\ProgramData\FullRemove.exe

Einige Dateien in TEMP:
====================
C:\Users\rainer\AppData\Local\Temp\avgnt.exe
C:\Users\rainer\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpa1zhpc.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-09-26 10:35

==================== Ende von FRST.txt ============================

	
	
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:14-10-2015 01
durchgeführt von rainer (2015-10-15 09:08:32)
Gestartet von C:\Users\rainer\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2012-01-31 08:38:34)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2598399437-2432177153-1626090690-500 - Administrator - Disabled)
Gast (S-1-5-21-2598399437-2432177153-1626090690-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2598399437-2432177153-1626090690-1005 - Limited - Enabled)
rainer (S-1-5-21-2598399437-2432177153-1626090690-1000 - Administrator - Enabled) => C:\Users\rainer

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
ACDSee 18 (HKLM\...\{6D0F6DF4-553E-43CD-AA95-69AB3644A8FF}) (Version: 18.2.0.250 - ACD Systems International Inc.)
ACDSee Pro 8 (64-bit) (HKLM\...\{F84CE839-8CDD-4DC1-9A05-FA93BEA8B63D}) (Version: 8.2.0.287 - ACD Systems International Inc.)
Acer Arcade Deluxe (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 3.2.7110 - CyberLink Corp.)
Acer Arcade Deluxe (x32 Version: 3.2.7110 - CyberLink Corp.) Hidden
Acer Backup Manager (HKLM-x32\...\InstallShield_{30075A70-B5D2-440B-AFA3-FB2021740121}) (Version: 2.0.2.19 - NewTech Infosystems)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3005 - Acer Incorporated)
Acer GameZone Console (HKLM-x32\...\{8ed9688e-4f79-4308-91ca-f1c37ca142b4}_is1) (Version: 5.1.0.2 - Oberon Media, Inc.)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.02.3006 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.2.0812 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.01.3017 - Acer Incorporated)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.6.0.19140 - Adobe Systems Incorporated)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.5.23 - Adobe Systems Incorporated.)
Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.0.32.18 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.207 - Adobe Systems Incorporated)
Adobe Photoshop CS3 (HKLM-x32\...\Adobe_5f143314a5d434c8511097393d17397) (Version: 10.0 - Adobe Systems Incorporated)
Adobe Reader 9.5.5 MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.5.5 - Adobe Systems Incorporated)
Advertising Center (x32 Version: 0.0.0.2 - Nero AG) Hidden
Ahead PDF Password Remover 2.0.0 (HKLM-x32\...\{B114A585-8D20-4409-80E3-03E53C6F9E9F}_is1) (Version:  - AheadPDF)
ASUS USB-N13 WLAN Card Utilities & Driver (HKLM-x32\...\{9C049499-055C-4a0c-A916-1D12314F45EB}) (Version: 1.0.0.7 - ASUS)
Avira (HKLM-x32\...\{bd538030-07d4-4999-a525-7fafa2483f56}) (Version: 1.1.30.21727 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.30.21727 - Avira Operations & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.13.210 - Avira Operations GmbH & Co. KG)
Avira Browser Safety (HKLM-x32\...\{9E10EA90-5E97-43B7-A246-FC7B4F5E9493}) (Version: 1.4.5.509 - Avira Operations GmbH & Co KG)
Backup Manager Advance (x32 Version: 2.0.2.19 - NewTech Infosystems) Hidden
Belarc Advisor 8.4 (HKLM-x32\...\Belarc Advisor) (Version: 8.4.0.0 - Belarc Inc.)
CanoScan LiDE 600F (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ4802) (Version:  - )
Chicken Invaders 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593}) (Version:  - Oberon Media)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
CLIQZ (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 1.0.22 - CLIQZ.com)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Dairy Dash (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115053100}) (Version:  - Oberon Media)
dradio-Recorder Version 3.02.6 (HKLM-x32\...\dradio-Recorder_is1) (Version:  - )
Dream Day First Home (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110}) (Version:  - Oberon Media)
Dropbox (HKLM-x32\...\Dropbox) (Version: 3.10.7 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.27.33 - Dropbox, Inc.) Hidden
EASEUS Partition Master 9.1.0 Home Edition (HKLM-x32\...\EASEUS Partition Master Home Edition_is1) (Version:  - EASEUS)
eSobi v2 (HKLM-x32\...\InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}) (Version: 2.0.4.000274 - esobi Inc.)
eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) Hidden
Farm Frenzy 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11531173}) (Version:  - Oberon Media)
FinePrint (HKLM\...\FinePrint) (Version: 6.25 - FinePrint Software, LLC)
First Class Flurry (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115208410}) (Version:  - Oberon Media)
Garmin BaseCamp (HKLM-x32\...\{11172DEF-77A3-418C-B980-EF0D097CA237}) (Version: 4.5.1 - Garmin Ltd or its subsidiaries)
Garmin USB Drivers (HKLM\...\{DC7720F2-98BE-41C1-B0A8-E391362E86B8}) (Version: 2.3.1.1 - Garmin Ltd or its subsidiaries)
Google Chrome (HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\Google Chrome) (Version: 46.0.2490.71 - Google Inc.)
Google Drive (HKLM-x32\...\{7159FB02-B77E-41E6-B7BF-75431631864B}) (Version: 1.25.0468.5720 - Google, Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Granny In Paradise (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110551697}) (Version:  - Oberon Media)
Heroes of Hellas (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113786380}) (Version:  - Oberon Media)
Hotkey Utility (HKLM-x32\...\Hotkey Utility) (Version: 1.00.3004 - Acer Incorporated)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3002 - Acer Incorporated)
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.6.0 - LIGHTNING UK!)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.35 - Irfan Skiljan)
Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
LibreOffice 4.4.5.2 SDK (HKLM-x32\...\{656996F9-2619-45F7-81FD-C90926766B87}) (Version: 4.4.5.2 - The Document Foundation)
LibreOffice 5.0 Help Pack (German) (HKLM-x32\...\{3A35B9EB-331E-4FDC-950C-7B1EAFB77C6E}) (Version: 5.0.2.2 - The Document Foundation)
LibreOffice 5.0.2.2 (HKLM\...\{7A0F2924-C991-40C2-851D-14DAE2E398DF}) (Version: 5.0.2.2 - The Document Foundation)
Merriam Websters Spell Jam (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112662477}) (Version:  - Oberon Media)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Language Pack 2007 - German/Deutsch (HKLM-x32\...\OMUI.de-de) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM-x32\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{62F7DA7E-CCCB-439C-A760-00C3926E761F}) (Version: 9.7.0621 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
Mozilla Firefox 41.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 41.0.1 (x86 de)) (Version: 41.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyWinLocker (HKLM-x32\...\{68301905-2DEA-41CE-A4D4-E8B443B099BA}) (Version: 3.1.76.0 - Egis Technology Inc.)
Nero 9 Essentials (HKLM-x32\...\{9d5299f9-f94e-43ed-9632-a5e045b51f7d}) (Version:  - Nero AG)
Netzmanager (Version: 1.200 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden
NVIDIA 3D Vision Controller-Treiber 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 341.81 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 341.81 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.0.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.0.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 341.81 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.81 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
PDF Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.1.2 - pdfforge)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5930 - Realtek Semiconductor Corp.)
ResScan (HKLM-x32\...\{4905FE08-AADF-491E-AC37-5CE0DC078367}) (Version: 5.3 - ResMed Ltd)
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.15072.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.15072.2 - Samsung Electronics Co., Ltd.) Hidden
Saturn Fotoservice (HKLM-x32\...\Saturn Fotoservice) (Version: 6.0.5 - CEWE Stiftung u Co. KGaA)
SHIELD Streaming (Version: 2.1.108 - NVIDIA Corporation) Hidden
Snagit 12 (HKLM-x32\...\{979028FC-2DBF-4BB4-A9EC-4627A9D63D50}) (Version: 12.2.2 - TechSmith Corporation)
Tablett (HKLM-x32\...\Tablet Driver) (Version:  - Wacom Technology Corp.)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.340 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.340 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.340 - TuneUp Software) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_OMUI.de-de_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_OMUI.de-de_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_OMUI.de-de_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_OMUI.de-de_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VideoDownloaderUltimate (HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\VideoDownloaderUltimateWinApp) (Version: 1.0.1.55 - Link64)
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Wartung Samsung ML-2525W Series (HKLM-x32\...\Samsung ML-2525W Series) (Version:  - Samsung Electronics CO.,LTD)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.00.3008 - Acer Incorporated)
Windows Live Anmelde-Assistent (HKLM-x32\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2598399437-2432177153-1626090690-1000_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\rainer\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2598399437-2432177153-1626090690-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\rainer\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll (Google Inc.)

==================== Wiederherstellungspunkte =========================

27-09-2015 19:10:55 Windows-Sicherung
04-10-2015 20:00:47 Windows-Sicherung
11-10-2015 20:41:56 Windows-Sicherung

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {03CCB4DA-180E-4392-A739-08B2463956D4} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {2F6CDDDC-09B1-47F3-8DC0-46E80EDB7312} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {36AA9C51-9EE2-4FC1-A3B5-512DA7AEB4FC} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {595607BE-3A28-4913-958A-7A7FB14B24FC} - System32\Tasks\{EECA8AD3-7C71-4E7B-ABF2-876D6435F375} => Firefox.exe 
Task: {5A418CCC-D46D-4AE5-B683-080386F69288} - System32\Tasks\TechSmith Updater => C:\Program Files (x86)\Common Files\TechSmith Shared\Updater\TSCUpdClt.exe [2014-05-30] (TechSmith Corporation)
Task: {5D191DD8-C757-49E6-9E82-F1008111553E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {748782FE-5025-4335-81A1-D30E6A804026} - System32\Tasks\McQcModifier-5c47-a7b0 => C:\ProgramData\McQcModifier-5c47-a7b0\McQcModifier-5c47-a7b0.cmd [2009-08-29] ()
Task: {75DF793C-2632-4DA6-87AD-E23635E3EB77} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {77736E0C-94B8-4CE1-BA00-32F83D94F4FE} - System32\Tasks\Egis technology-Online-Aktualisierungsprogramm => C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe [2009-08-04] (Egis Technology Inc.)
Task: {7AE40439-4E7A-4B77-B5A0-9937EFBA1B3A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2598399437-2432177153-1626090690-1000Core => C:\Users\rainer\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {83FAECA5-4C8D-4491-BE0E-07B87376E059} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2598399437-2432177153-1626090690-1000UA => C:\Users\rainer\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {8E26D3CD-C824-46D9-9B41-2B8886EB300D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {925DF76B-BED0-430A-8117-B49EF38DB880} - System32\Tasks\Google Updater and Installer => C:\Users\rainer\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {926C9E2C-A39F-4D09-9757-972479DE4DCE} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)
Task: {97928C22-0C5E-4A0D-8815-33B294CF8DF4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-14] (Adobe Systems Incorporated)
Task: {A0B7EC95-06FB-4AEE-AA89-9531D61FBE62} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-10-11] (Dropbox, Inc.)
Task: {A1FD35DC-4263-4977-9E39-FEB6E98F985A} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {B43C0AC5-F790-4517-A714-21D9AB41F581} - System32\Tasks\{0C81888C-1DD2-42D4-B19D-CAD855AE8FEF} => pcalua.exe -a C:\Users\rainer\Downloads\iview435g_setup.exe -d C:\Users\rainer\Downloads
Task: {BBC0AFA7-2789-492E-BC2D-E560C96CC080} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-10-11] (Dropbox, Inc.)
Task: {C91A712C-E89A-4721-80CC-2CB37D75EDA6} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {D75443E1-2389-4F6E-8318-942FD1D97153} - System32\Tasks\{F44449EF-FE74-4F20-9BBC-C349DB07125C} => Firefox.exe 
Task: {DCE1FA77-2025-4FAE-B274-795295E1977B} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2014-07-16] (TuneUp Software)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2598399437-2432177153-1626090690-1000Core.job => C:\Users\rainer\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2598399437-2432177153-1626090690-1000UA.job => C:\Users\rainer\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2012-02-08 18:36 - 2015-08-18 02:07 - 00115376 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-06-22 10:48 - 2011-06-22 10:48 - 00034304 _____ () C:\Windows\System32\ssp6ml6.dll
2011-06-22 10:47 - 2011-06-22 10:47 - 00826880 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\ssp6mdu.dll
2014-07-02 18:22 - 2012-10-13 16:05 - 00042496 _____ () C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe
2015-05-07 00:50 - 2015-05-07 00:50 - 02141192 _____ () C:\Program Files\ACD Systems\ACDSee Pro\8.0\ACDSeeCommanderPro8.exe
2015-05-06 15:48 - 2015-05-06 15:48 - 01973256 _____ () C:\Program Files (x86)\ACD Systems\ACDSee\18.0\ACDSeeCommander18.exe
2009-08-18 09:27 - 2009-08-18 09:27 - 00629280 _____ () C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
2014-07-16 10:24 - 2014-07-16 10:24 - 00699704 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll
2009-12-14 04:19 - 2009-12-09 11:24 - 00076320 _____ () C:\OEM\USBDECTION\USBS3S4Detection.exe
2014-08-15 17:02 - 2014-08-15 17:02 - 02099200 _____ () C:\Program Files (x86)\TechSmith\Snagit 12\opencv_core249.dll
2014-08-15 17:02 - 2014-08-15 17:02 - 00050688 _____ () C:\Program Files (x86)\TechSmith\Snagit 12\ScrollingCapture.dll
2014-08-15 17:02 - 2014-08-15 17:02 - 01914368 _____ () C:\Program Files (x86)\TechSmith\Snagit 12\opencv_imgproc249.dll
2009-02-03 03:33 - 2009-02-03 03:33 - 00460199 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2008-09-29 03:55 - 2008-09-29 03:55 - 01076224 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll
2009-08-18 09:31 - 2009-08-18 09:31 - 00163840 _____ () C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyHook.dll
2015-10-14 15:26 - 2015-10-09 02:53 - 01532744 _____ () C:\Users\rainer\AppData\Local\Google\Chrome\Application\46.0.2490.71\libglesv2.dll
2015-10-14 15:26 - 2015-10-09 02:53 - 00081224 _____ () C:\Users\rainer\AppData\Local\Google\Chrome\Application\46.0.2490.71\libegl.dll
2014-03-14 11:59 - 2012-08-28 17:54 - 00114688 _____ () C:\Program Files (x86)\ASUS\USB-N13 WLAN Card Utilities\EnumDevLib.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\samsungsetup.com -> hxxp://www.samsungsetup.com


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\rainer\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
mpsdrv => Firewall Dienst läuft nicht.
MpsSvc => Firewall Dienst läuft nicht.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\startupreg: msnmsgr => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{D491286D-2E5F-4800-BD58-6F59F4700ACC}] => (Allow) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\Acer Arcade Deluxe.exe
FirewallRules: [{1C4866F2-1AF2-4E66-8E6D-03E9D91185AF}] => (Allow) C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PlayMovie.exe
FirewallRules: [{77F82E70-7EDF-43DA-8440-21761034826A}] => (Allow) C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe
FirewallRules: [{728D1E18-D238-422A-B8C9-11831EBCFC51}] => (Allow) C:\Program Files (x86)\Acer Arcade Deluxe\HomeMedia\HomeMedia.exe
FirewallRules: [{77BC0361-B90C-4B32-9452-D8EB2063D523}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\wlcsdk.exe
FirewallRules: [{204EABAB-EE1B-4B9F-9A1C-492152DBB411}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{6E8C918B-28FC-41D9-9EF7-00EF9BF1F567}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{A7EF483C-DAD3-4DA3-80E9-C7978ADEEE54}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{7E855260-F271-41FD-8DE4-1DE315ACEA6A}] => (Allow) C:\Program Files (x86)\ASUS\USB-N13 WLAN Card Utilities\RtWLan.exe
FirewallRules: [{E3C58970-B39E-4A38-ACDF-05F78747F3AA}] => (Allow) C:\Program Files (x86)\ASUS\USB-N13 WLAN Card Utilities\RtWLan.exe
FirewallRules: [{5988008E-ED72-4DC0-A9E7-A9A03A8116FB}] => (Allow) LPort=1542
FirewallRules: [{99F18B2F-362D-4461-A0FE-B696FB41122B}] => (Allow) LPort=1542
FirewallRules: [{38DFD14F-6486-437B-BF82-D865FD7CBC09}] => (Allow) LPort=53
FirewallRules: [{5F1B9B14-086B-4B81-B31D-459EF4B82236}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{33164F7E-75E1-4F52-8138-3E651DAB1CDF}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{948F543C-DACC-4B20-8856-2DE2A7A8BEC4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{144B11A7-20D4-4147-BF33-E0F33EF4D0AC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{A84F4352-8976-414D-9FBE-3F02E762D5B2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{382E7208-586C-43CA-8958-F2940B51466B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{DCA086D5-8BE8-4DA6-BCAC-08A9A26CE4B0}] => (Allow) LPort=8298
FirewallRules: [{24B323F7-F754-4B3B-B517-88B03B2724A4}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{3A20D3B5-0C1B-407F-9711-DD52A254D242}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B1624F26-81C9-4327-B764-71E73C638C7E}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Windows-Firewallautorisierungstreiber
Description: Windows-Firewallautorisierungstreiber
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: mpsdrv
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Konnte Geräte nicht auflisten. Überprüfen Sie den "winmgmt" Dienst oder reparieren Sie den WMI.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (10/15/2015 08:27:18 AM) (Source: ResScan) (EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  8:27:18
ErrorCode        : 80004005
ErrorMessage     : Unbekannter Fehler
Program Message  : hResult Error
File             : .\RWDevice.cpp
Function         : RWDevice::GetMetaDataForGroup
Line             : 1609

Error: (10/15/2015 08:27:18 AM) (Source: ResScan) (EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  8:27:18
ErrorCode        : 80004005
ErrorMessage     : Unbekannter Fehler
Program Message  : hResult Error
File             : .\RWDevice.cpp
Function         : RWDevice::GetMetaDataForGroup
Line             : 1589

Error: (10/15/2015 08:27:18 AM) (Source: ResScan) (EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  8:27:18
ErrorCode        : 80004005
ErrorMessage     : Unbekannter Fehler
Program Message  : hResult Error
File             : .\RWDevice.cpp
Function         : RWDevice::GetMetaDataForGroup
Line             : 1609

Error: (10/15/2015 08:27:18 AM) (Source: ResScan) (EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  8:27:18
ErrorCode        : 80004005
ErrorMessage     : Unbekannter Fehler
Program Message  : hResult Error
File             : .\RWDevice.cpp
Function         : RWDevice::GetMetaDataForGroup
Line             : 1589

Error: (10/15/2015 08:27:17 AM) (Source: ResScan) (EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  8:27:17
ErrorCode        : 80004005
ErrorMessage     : Unbekannter Fehler
Program Message  : hResult Error
File             : .\RWDevice.cpp
Function         : RWDevice::GetMetaDataForGroup
Line             : 1609

Error: (10/15/2015 08:27:17 AM) (Source: ResScan) (EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  8:27:17
ErrorCode        : 80004005
ErrorMessage     : Unbekannter Fehler
Program Message  : hResult Error
File             : .\RWDevice.cpp
Function         : RWDevice::GetMetaDataForGroup
Line             : 1589

Error: (10/15/2015 08:27:17 AM) (Source: ResScan) (EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  8:27:17
ErrorCode        : 80004005
ErrorMessage     : Unbekannter Fehler
Program Message  : hResult Error
File             : .\RWDevice.cpp
Function         : RWDevice::GetMetaDataForGroup
Line             : 1609

Error: (10/15/2015 08:27:17 AM) (Source: ResScan) (EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  8:27:17
ErrorCode        : 80004005
ErrorMessage     : Unbekannter Fehler
Program Message  : hResult Error
File             : .\RWDevice.cpp
Function         : RWDevice::GetMetaDataForGroup
Line             : 1589

Error: (10/15/2015 08:27:16 AM) (Source: ResScan) (EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  8:27:16
ErrorCode        : 80004005
ErrorMessage     : Unbekannter Fehler
Program Message  : hResult Error
File             : .\RWDevice.cpp
Function         : RWDevice::GetMetaDataForGroup
Line             : 1609

Error: (10/15/2015 08:27:16 AM) (Source: ResScan) (EventID: 256) (User: )
Description: Error Date/Time  : 15/10/2015  8:27:16
ErrorCode        : 80004005
ErrorMessage     : Unbekannter Fehler
Program Message  : hResult Error
File             : .\RWDevice.cpp
Function         : RWDevice::GetMetaDataForGroup
Line             : 1589


Systemfehler:
=============
Error: (10/15/2015 08:30:28 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureCommand" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (10/15/2015 08:23:30 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (10/15/2015 08:17:00 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Windows-Firewall" ist vom Dienst "Windows-Firewallautorisierungstreiber" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (10/15/2015 08:17:00 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows-Firewallautorisierungstreiber" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1058

Error: (10/15/2015 08:16:53 AM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143.

Error: (10/15/2015 08:16:36 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Windows-Firewall" ist vom Dienst "Windows-Firewallautorisierungstreiber" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (10/15/2015 08:16:36 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows-Firewallautorisierungstreiber" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1058

Error: (10/15/2015 08:14:46 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SSPORT" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (10/15/2015 08:14:01 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Netzmanager Infrastruktur Informationssystem Dienst erreicht.

Error: (10/15/2015 08:13:27 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i3 CPU 530 @ 2.93GHz
Prozentuale Nutzung des RAM: 60%
Installierter physikalischer RAM: 3959.09 MB
Verfügbarer physikalischer RAM: 1576.13 MB
Summe virtueller Speicher: 7916.39 MB
Verfügbarer virtueller Speicher: 4769.08 MB

==================== Laufwerke ================================

Drive c: (Acer) (Fixed) (Total:458.87 GB) (Free:328.53 GB) NTFS
Drive d: (Data) (Fixed) (Total:286.12 GB) (Free:270.84 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: F467897B)
Partition 1: (Not Active) - (Size=13.7 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=458.9 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=458.9 GB) - (Type=OF Extended)

==================== Ende von Addition.txt ============================
         
 
 

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Combofix Logfile:

ComboFix 15-10-15.01 - rainer 16.10.2015  21:04:49.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3959.1376 [GMT 2:00]
ausgeführt von:: c:\users\rainer\Downloads\ComboFix.exe
AV: Avira Antivirus *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Microsoft Security Essentials *Disabled/Updated* {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
SP: Avira Antivirus *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Microsoft Security Essentials *Disabled/Updated* {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Install.exe
c:\program files (x86)\Common Files\Acer GameZone online.ico
c:\users\rainer\AppData\Local\assembly\tmp
c:\users\rainer\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
c:\users\rainer\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpqprmag.dll
c:\windows\wininit.ini
.
.
(((((((((((((((((((((((   Dateien erstellt von 2015-09-16 bis 2015-10-16  ))))))))))))))))))))))))))))))
.
.
2015-10-16 19:13 . 2015-10-16 19:13	--------	d-----w-	c:\users\UpdatusUser\AppData\Local\temp
2015-10-16 19:13 . 2015-10-16 19:13	--------	d-----w-	c:\users\Default\AppData\Local\temp
2015-10-16 18:59 . 2015-08-31 22:45	11062400	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{59524445-7286-4DC7-AF02-8CBB62EB7355}\mpengine.dll
2015-10-16 18:58 . 2015-08-31 22:45	11062400	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2015-10-15 19:02 . 2015-10-16 18:48	--------	d-----r-	c:\users\rainer\Dropbox
2015-10-15 07:05 . 2015-10-15 07:09	--------	d-----w-	C:\FRST
2015-10-15 06:30 . 2015-09-18 19:22	25432	----a-w-	c:\windows\system32\CompatTelRunner.exe
2015-10-15 06:30 . 2015-09-18 19:19	700416	----a-w-	c:\windows\system32\invagent.dll
2015-10-15 06:30 . 2015-09-18 19:19	766464	----a-w-	c:\windows\system32\generaltel.dll
2015-10-15 06:30 . 2015-09-18 19:19	503808	----a-w-	c:\windows\system32\devinv.dll
2015-10-15 06:30 . 2015-09-18 19:19	73216	----a-w-	c:\windows\system32\acmigration.dll
2015-10-15 06:30 . 2015-09-18 19:19	1291264	----a-w-	c:\windows\system32\appraiser.dll
2015-10-15 06:30 . 2015-09-18 19:09	1163776	----a-w-	c:\windows\system32\aeinv.dll
2015-10-14 13:37 . 2015-10-14 13:37	--------	d-----w-	c:\users\rainer\AppData\Roaming\Avira
2015-10-14 13:34 . 2015-10-05 13:51	74952	----a-w-	c:\windows\system32\drivers\avnetflt.sys
2015-10-14 13:34 . 2015-10-05 13:51	28600	----a-w-	c:\windows\system32\drivers\avkmgr.sys
2015-10-14 13:34 . 2015-10-05 13:51	141416	----a-w-	c:\windows\system32\drivers\avipbb.sys
2015-10-14 13:34 . 2015-10-05 13:51	163544	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2015-10-14 13:33 . 2015-10-15 17:45	--------	d-----w-	c:\program files (x86)\Avira
2015-10-14 13:33 . 2015-10-15 17:45	--------	d-----w-	c:\programdata\Package Cache
2015-10-14 06:37 . 2015-08-06 18:04	14176768	----a-w-	c:\windows\system32\shell32.dll
2015-10-14 06:37 . 2015-08-06 18:03	1866752	----a-w-	c:\windows\system32\ExplorerFrame.dll
2015-10-14 06:37 . 2015-08-06 17:44	1498624	----a-w-	c:\windows\SysWow64\ExplorerFrame.dll
2015-10-14 06:37 . 2015-09-01 18:14	503296	----a-w-	c:\program files\Common Files\Microsoft Shared\ink\tiptsf.dll
2015-10-14 06:37 . 2015-09-01 18:14	1247232	----a-w-	c:\program files\Common Files\Microsoft Shared\ink\tipskins.dll
2015-10-14 06:37 . 2015-09-01 18:14	110592	----a-w-	c:\program files\Common Files\Microsoft Shared\ink\TipBand.dll
2015-10-14 06:37 . 2015-09-01 18:13	224768	----a-w-	c:\program files\Common Files\Microsoft Shared\ink\TabTip.exe
2015-10-14 06:37 . 2015-09-01 17:52	348672	----a-w-	c:\program files (x86)\Common Files\Microsoft Shared\ink\tiptsf.dll
2015-10-14 06:37 . 2015-09-01 17:52	10240	----a-w-	c:\program files (x86)\Common Files\Microsoft Shared\ink\TabTip32.exe
2015-10-14 06:37 . 2015-09-01 18:12	544768	----a-w-	c:\program files\Common Files\Microsoft Shared\ink\TipRes.dll
2015-10-14 06:35 . 2015-09-29 03:16	5569472	----a-w-	c:\windows\system32\ntoskrnl.exe
2015-10-14 06:34 . 2015-07-18 13:08	984448	----a-w-	c:\windows\system32\ucrtbase.dll
2015-10-13 07:30 . 2015-07-02 12:54	1190000	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{12060C82-BE15-419D-9213-272CEBD3F4F2}\gapaengine.dll
2015-10-11 19:35 . 2015-10-11 19:35	--------	d-----w-	c:\programdata\regid.1995-08.com.techsmith
2015-10-11 08:27 . 2015-10-11 08:27	--------	d-----w-	c:\users\rainer\AppData\Roaming\Dropbox
2015-10-11 08:26 . 2015-10-11 08:27	--------	d-----w-	c:\program files (x86)\Dropbox
2015-10-11 08:26 . 2015-10-16 18:48	--------	d-----w-	c:\users\rainer\AppData\Local\Dropbox
2015-10-11 08:26 . 2015-10-11 08:26	--------	d-----w-	c:\programdata\Dropbox
2015-10-06 07:05 . 2015-10-06 07:05	--------	d-----w-	c:\users\rainer\AppData\Roaming\No Company Name
2015-10-02 14:40 . 2015-10-02 14:40	17314496	----a-w-	c:\program files (x86)\Common Files\Microsoft Shared\OFFICE12\MSO.DLL
2015-10-02 08:43 . 2015-10-02 08:43	--------	d-----w-	c:\program files (x86)\Common Files\ACD Systems
2015-10-02 08:43 . 2015-10-02 08:43	--------	d-----w-	c:\program files (x86)\ACD Systems
2015-10-01 19:02 . 2015-10-01 19:02	--------	d-----w-	c:\program files (x86)\LibreOffice 5
2015-10-01 19:00 . 2015-10-01 19:01	--------	d-----w-	c:\program files\LibreOffice 5
2015-10-01 11:47 . 2015-10-01 11:47	--------	d-----w-	c:\program files (x86)\LibreOffice_4.4_SDK
2015-09-24 09:28 . 2015-07-23 00:02	1390592	----a-w-	c:\windows\system32\diagtrack.dll
2015-09-24 09:28 . 2015-07-22 16:48	41984	----a-w-	c:\windows\system32\UtcResources.dll
2015-09-24 09:28 . 2015-07-23 00:02	879104	----a-w-	c:\windows\system32\tdh.dll
2015-09-24 09:28 . 2015-07-22 17:53	635392	----a-w-	c:\windows\SysWow64\tdh.dll
2015-09-24 09:28 . 2015-07-23 00:02	879104	----a-w-	c:\windows\system32\advapi32.dll
2015-09-24 09:28 . 2015-07-22 17:53	641536	----a-w-	c:\windows\SysWow64\advapi32.dll
2015-09-24 09:27 . 2015-06-25 10:06	115136	----a-w-	c:\windows\system32\consent.exe
2015-09-24 09:27 . 2015-06-25 10:01	1941504	----a-w-	c:\windows\system32\authui.dll
2015-09-24 09:27 . 2015-06-25 09:44	1805824	----a-w-	c:\windows\SysWow64\authui.dll
2015-09-24 09:27 . 2015-06-25 10:01	70656	----a-w-	c:\windows\system32\appinfo.dll
2015-09-24 09:27 . 2015-08-27 18:18	2004480	----a-w-	c:\windows\system32\msxml6.dll
2015-09-24 09:27 . 2015-08-27 18:18	1887232	----a-w-	c:\windows\system32\msxml3.dll
2015-09-24 09:27 . 2015-08-27 17:58	1391104	----a-w-	c:\windows\SysWow64\msxml6.dll
2015-09-24 09:27 . 2015-08-27 17:58	1241088	----a-w-	c:\windows\SysWow64\msxml3.dll
2015-09-24 09:27 . 2015-08-27 17:51	2048	----a-w-	c:\windows\SysWow64\msxml6r.dll
2015-09-24 09:27 . 2015-08-27 18:13	2048	----a-w-	c:\windows\system32\msxml6r.dll
2015-09-24 09:27 . 2015-08-27 18:13	2048	----a-w-	c:\windows\system32\msxml3r.dll
2015-09-24 09:27 . 2015-08-27 17:51	2048	----a-w-	c:\windows\SysWow64\msxml3r.dll
2015-09-24 09:26 . 2015-09-02 01:51	3209216	----a-w-	c:\windows\system32\win32k.sys
2015-09-24 09:26 . 2015-09-02 01:47	372736	----a-w-	c:\windows\system32\atmfd.dll
2015-09-24 09:26 . 2015-09-02 03:04	41984	----a-w-	c:\windows\system32\lpk.dll
2015-09-24 09:26 . 2015-09-02 03:04	100864	----a-w-	c:\windows\system32\fontsub.dll
2015-09-24 09:26 . 2015-09-02 03:04	14336	----a-w-	c:\windows\system32\dciman32.dll
2015-09-24 09:26 . 2015-09-02 03:04	46080	----a-w-	c:\windows\system32\atmlib.dll
2015-09-24 09:26 . 2015-09-02 02:48	70656	----a-w-	c:\windows\SysWow64\fontsub.dll
2015-09-24 09:26 . 2015-09-02 02:48	10240	----a-w-	c:\windows\SysWow64\dciman32.dll
2015-09-24 09:26 . 2015-09-02 02:48	34304	----a-w-	c:\windows\SysWow64\atmlib.dll
2015-09-24 09:26 . 2015-09-02 02:47	25600	----a-w-	c:\windows\SysWow64\lpk.dll
2015-09-24 09:26 . 2015-09-02 01:33	299520	----a-w-	c:\windows\SysWow64\atmfd.dll
2015-09-17 17:28 . 2015-09-17 17:28	963232	----a-w-	c:\windows\system32\msvcr120.dll
2015-09-17 17:28 . 2015-09-17 17:28	660128	----a-w-	c:\windows\system32\msvcp120.dll
2015-09-17 17:28 . 2015-09-17 17:28	356528	----a-w-	c:\windows\system32\vccorlib120.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-10-14 13:34 . 2012-12-26 13:36	780488	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2015-10-14 13:34 . 2012-12-26 13:36	142536	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-10-14 06:45 . 2012-02-01 16:03	143481208	----a-w-	c:\windows\system32\MRT.exe
2015-09-29 02:58 . 2015-10-14 06:35	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2015-08-18 08:48 . 2015-08-25 20:49	945456	----a-w-	c:\windows\system32\NvIFR64.dll
2015-08-18 08:48 . 2015-08-25 20:49	908592	----a-w-	c:\windows\SysWow64\NvIFR.dll
2015-08-18 08:48 . 2015-08-25 20:49	903472	----a-w-	c:\windows\system32\NvFBC64.dll
2015-08-18 08:48 . 2015-08-25 20:49	870008	----a-w-	c:\windows\SysWow64\NvFBC.dll
2015-08-18 08:48 . 2015-08-25 20:49	4245808	----a-w-	c:\windows\system32\nvcuvid.dll
2015-08-18 08:48 . 2015-08-25 20:49	3987760	----a-w-	c:\windows\SysWow64\nvcuvid.dll
2015-08-18 08:48 . 2015-08-25 20:49	31515256	----a-w-	c:\windows\system32\nvoglv64.dll
2015-08-18 08:48 . 2015-08-25 20:49	1908528	----a-w-	c:\windows\system32\nvdispco6434181.dll
2015-08-18 08:48 . 2015-08-25 20:49	17559240	----a-w-	c:\windows\system32\nvd3dumx.dll
2015-08-18 08:48 . 2015-08-25 20:49	1556656	----a-w-	c:\windows\system32\nvdispgenco6434181.dll
2015-08-18 08:48 . 2015-08-25 20:49	13916600	----a-w-	c:\windows\system32\nvopencl.dll
2015-08-18 08:48 . 2015-08-25 20:49	13828032	----a-w-	c:\windows\system32\nvcuda.dll
2015-08-18 08:48 . 2015-08-25 20:49	12896432	----a-w-	c:\windows\system32\drivers\nvlddmkm.sys
2015-08-18 08:48 . 2015-08-25 20:49	11272048	----a-w-	c:\windows\SysWow64\nvopencl.dll
2015-08-18 08:48 . 2015-08-25 20:49	11209376	----a-w-	c:\windows\SysWow64\nvcuda.dll
2015-08-18 08:48 . 2015-08-25 20:49	22992048	----a-w-	c:\windows\system32\nvcompiler.dll
2015-08-18 08:48 . 2015-08-25 20:49	15294072	----a-w-	c:\windows\SysWow64\nvcompiler.dll
2015-08-18 08:48 . 2013-10-28 11:53	18634264	----a-w-	c:\windows\system32\nvwgf2umx.dll
2015-08-18 08:48 . 2013-10-28 11:53	16128576	----a-w-	c:\windows\SysWow64\nvwgf2um.dll
2015-08-18 08:48 . 2013-10-28 11:53	24200312	----a-w-	c:\windows\SysWow64\nvoglv32.dll
2015-08-18 08:48 . 2013-10-28 11:53	14497760	----a-w-	c:\windows\SysWow64\nvd3dum.dll
2015-08-18 08:48 . 2013-10-28 11:52	2824176	----a-w-	c:\windows\SysWow64\nvapi.dll
2015-08-18 08:48 . 2009-11-16 03:15	3209736	----a-w-	c:\windows\system32\nvapi64.dll
2015-08-18 00:07 . 2009-09-19 04:09	6783280	----a-w-	c:\windows\system32\nvcpl.dll
2015-08-18 00:07 . 2009-09-19 04:09	3522168	----a-w-	c:\windows\system32\nvsvc64.dll
2015-08-18 00:07 . 2009-09-19 04:09	933168	----a-w-	c:\windows\system32\nvvsvc.exe
2015-08-18 00:07 . 2009-09-19 04:09	62768	----a-w-	c:\windows\system32\nvshext.dll
2015-08-18 00:07 . 2009-09-19 04:09	385144	----a-w-	c:\windows\system32\nvmctray.dll
2015-08-18 00:07 . 2009-09-19 04:09	2558768	----a-w-	c:\windows\system32\nvsvcr.dll
2015-08-18 00:06 . 2014-05-27 16:27	5147024	----a-w-	c:\windows\system32\nvcoproc.bin
2015-08-17 21:43 . 2015-08-25 20:53	608048	----a-w-	c:\windows\SysWow64\nvStreaming.exe
2015-07-30 18:06 . 2015-08-12 10:36	1648128	----a-w-	c:\windows\system32\DWrite.dll
2015-07-30 18:06 . 2015-08-12 10:36	1180160	----a-w-	c:\windows\system32\FntCache.dll
2015-07-30 18:06 . 2015-08-12 10:36	2565120	----a-w-	c:\windows\system32\d3d10warp.dll
2015-07-30 17:57 . 2015-08-12 10:36	1251328	----a-w-	c:\windows\SysWow64\DWrite.dll
2015-07-30 17:57 . 2015-08-12 10:36	1987584	----a-w-	c:\windows\SysWow64\d3d10warp.dll
2015-07-30 13:13 . 2015-08-12 11:20	103120	----a-w-	c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2015-07-30 13:13 . 2015-08-12 11:20	124624	----a-w-	c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-01 23:08	194824	----a-w-	c:\program files (x86)\Dropbox\Client\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-01 23:08	194824	----a-w-	c:\program files (x86)\Dropbox\Client\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt3]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-01 23:08	194824	----a-w-	c:\program files (x86)\Dropbox\Client\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt4]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-01 23:08	194824	----a-w-	c:\program files (x86)\Dropbox\Client\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt5]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-01 23:08	194824	----a-w-	c:\program files (x86)\Dropbox\Client\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt6]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-01 23:08	194824	----a-w-	c:\program files (x86)\Dropbox\Client\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt7]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-01 23:08	194824	----a-w-	c:\program files (x86)\Dropbox\Client\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt8]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-01 23:08	194824	----a-w-	c:\program files (x86)\Dropbox\Client\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2009-09-10 13:41	120104	----a-w-	c:\program files (x86)\EgisTec\MyWinLocker 3\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"dradio-RecorderTimer"="c:\program files (x86)\dradio-Recorder\phonostarTimer.exe" [2012-10-13 42496]
"ACDSeeCommanderPro8"="c:\program files\ACD Systems\ACDSee Pro\8.0\ACDSeeCommanderPro8.exe" [2015-05-06 2141192]
"VideoDownloaderUltimate"="c:\programdata\VideoDownloaderUltimateWinApp\VideoDownloaderUltimate.exe" [2015-08-14 2258760]
"ACDSeeCommander18"="c:\program files (x86)\ACD Systems\ACDSee\18.0\ACDSeeCommander18.exe" [2015-05-06 1973256]
"GoogleChromeAutoLaunch_290FB52F6B1D9B39F20FE44B3D2BD2B2"="c:\users\rainer\AppData\Local\Google\Chrome\Application\chrome.exe" [2015-10-09 811848]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2009-08-12 261888]
"Hotkey Utility"="c:\program files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe" [2009-08-18 629280]
"ArcadeDeluxeAgent"="c:\program files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" [2009-11-10 128296]
"ACSW18DE"="c:\program files (x86)\ACD Systems\ACDSee\18.0\acdIDInTouch2.exe" [2015-02-03 1470736]
"Dropbox"="c:\program files (x86)\Dropbox\Client\Dropbox.exe" [2015-10-01 36710768]
"avgnt"="c:\program files (x86)\Avira\Antivirus\avgnt.exe" [2015-10-05 782520]
"Avira SystrayStartTrigger"="c:\program files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe" [2015-09-10 66320]
.
c:\users\rainer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Netzmanager.lnk - c:\program files\Netzmanager\netzmanager.exe /Autostart [2015-3-27 14235648]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Snagit 12.lnk - c:\program files (x86)\TechSmith\Snagit 12\Snagit32.exe [2014-10-28 7348544]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"EgisTecLiveUpdate"="c:\program files (x86)\EgisTec Egis Software Update\EgisUpdate.exe"
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"PlayMovie"="c:\program files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe"
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
.
R2 AntiVirMailService;Avira Email-Schutz;c:\program files (x86)\Avira\Antivirus\avmailc7.exe;c:\program files (x86)\Avira\Antivirus\avmailc7.exe [x]
R2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\Antivirus\avwebg7.exe;c:\program files (x86)\Avira\Antivirus\avwebg7.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 dbupdate;Dropbox-Update-Service (dbupdate);c:\program files (x86)\Dropbox\Update\DropboxUpdate.exe;c:\program files (x86)\Dropbox\Update\DropboxUpdate.exe [x]
R2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys;c:\windows\SYSNATIVE\Drivers\SSPORT.sys [x]
R3 dbupdatem;Dropbox-Update-Service (dbupdatem);c:\program files (x86)\Dropbox\Update\DropboxUpdate.exe;c:\program files (x86)\Dropbox\Update\DropboxUpdate.exe [x]
R3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x]
R3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys;c:\windows\SYSNATIVE\epmntdrv.sys [x]
R3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys;c:\windows\SYSNATIVE\EuGdiDrv.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe;c:\program files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TelekomNM6;Telekom Netzmanager Packet Filter Driver;c:\program files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys;c:\program files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]
S2 AGSService;Adobe Genuine Software Integrity Service;c:\program files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe;c:\program files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\Antivirus\sched.exe;c:\program files (x86)\Avira\Antivirus\sched.exe [x]
S2 Avira.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\Launcher\Avira.ServiceHost.exe;c:\program files (x86)\Avira\Launcher\Avira.ServiceHost.exe [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 Greg_Service;GRegService;c:\program files (x86)\Acer\Registration\GregHSRW.exe;c:\program files (x86)\Acer\Registration\GregHSRW.exe [x]
S2 Netzmanager Service;Netzmanager Infrastruktur Informationssystem Dienst;c:\program files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe ;c:\program files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe  [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 Realtek11nCU;Realtek11nCU;c:\program files (x86)\ASUS\USB-N13 WLAN Card Utilities\RtlService.exe;c:\program files (x86)\ASUS\USB-N13 WLAN Card Utilities\RtlService.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S2 USBS3S4Detection;USBS3S4Detection;c:\oem\USBDECTION\USBS3S4Detection.exe;c:\oem\USBDECTION\USBS3S4Detection.exe [x]
S3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K;c:\windows\system32\DRIVERS\e1k62x64.sys;c:\windows\SYSNATIVE\DRIVERS\e1k62x64.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 Point64;Microsoft Mouse and Keyboard Center Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
S3 RTL8192cu;Realtek RTL8192CU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\rtwlanu.sys;c:\windows\SYSNATIVE\DRIVERS\rtwlanu.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2015-10-16 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-26 13:34]
.
2015-10-16 c:\windows\Tasks\DropboxUpdateTaskMachineCore.job
- c:\program files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-10-11 08:26]
.
2015-10-16 c:\windows\Tasks\DropboxUpdateTaskMachineUA.job
- c:\program files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-10-11 08:26]
.
2015-10-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-23 06:58]
.
2015-10-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-23 06:58]
.
2015-09-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2598399437-2432177153-1626090690-1000Core.job
- c:\users\rainer\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-31 11:50]
.
2015-09-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2598399437-2432177153-1626090690-1000UA.job
- c:\users\rainer\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-31 11:50]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\  GoogleDriveBlacklisted]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2015-10-05 11:13	775496	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\  GoogleDriveSynced]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2015-10-05 11:13	775496	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\  GoogleDriveSyncing]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2015-10-05 11:13	775496	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-01 23:08	232712	----a-w-	c:\program files (x86)\Dropbox\Client\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-01 23:08	232712	----a-w-	c:\program files (x86)\Dropbox\Client\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt3]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-01 23:08	232712	----a-w-	c:\program files (x86)\Dropbox\Client\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt4]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-01 23:08	232712	----a-w-	c:\program files (x86)\Dropbox\Client\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt5]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-01 23:08	232712	----a-w-	c:\program files (x86)\Dropbox\Client\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt6]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-01 23:08	232712	----a-w-	c:\program files (x86)\Dropbox\Client\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt7]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-01 23:08	232712	----a-w-	c:\program files (x86)\Dropbox\Client\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt8]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-01 23:08	232712	----a-w-	c:\program files (x86)\Dropbox\Client\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2009-09-10 13:44	137512	----a-w-	c:\program files (x86)\EgisTec\MyWinLocker 3\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-10-13 186904]
"mwlDaemon"="c:\program files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe" [2009-09-10 349480]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-09-02 8098848]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2015-04-29 1337000]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-04-30 2199840]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-04-30 1225920]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_x3900&r=17360112ln07973780f753h9j1y34o
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: {{d8f67242-b229-4065-95fa-391b077ed6ca} - {d8f67242-b229-4065-95fa-391b077ed6ca} - mscoree.dll
Trusted Zone: samsungsetup.com\www
TCP: DhcpNameServer = 192.168.2.1
Handler: abs - {E00957BD-D0E1-4eb9-A025-7743FDC8B27B} - c:\windows\System32\mscoree.dll
FF - ProfilePath - c:\users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/
FF - prefs.js: network.proxy.type - 0
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
SafeBoot-mcmscsvc
SafeBoot-MCODS
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.032"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.abr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.abr"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.acdc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.acdc"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ani\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.ani"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.apd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 8.apd"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.arw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.arw"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.bay"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.bmp"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.cr2"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.crw"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.cs1"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cur\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.cur"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.dcr"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.dcx"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.dib"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.djv"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djvu\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.djvu"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.dng"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.emf"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eps\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.eps"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.erf"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.fff"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.gif"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hdr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.hdr"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icl\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.icl"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.icn"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.iw4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.j2c"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.j2k"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jbr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.jbr"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.jfif"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.jif"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jp2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.jp2"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.jpc"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.jpe"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.jpeg"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.jpg"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.jpk"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.jpx"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kdc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.kdc"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.mef"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.mos"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.mrw"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.nef"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nrw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.nrw"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.orf"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.pbr"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.pct"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.pcx"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.pef"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.pic"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.pict"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.png"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.psd"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.psp"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspbrush\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.pspbrush"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspimage\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.pspimage"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.raf"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.raw"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.rle"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rw2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.rw2"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rwl\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.rwl"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.sr2"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.srf"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.srw"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.tga"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.thm"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.tif"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.tiff"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.ttc"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.ttf"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v18o\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.v18o"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v18p\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.v18p"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v18pf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.v18pf"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v80po\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 8.v80po"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v80pp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 8.v80pp"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v80ppf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 8.v80ppf"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.wbm"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.wbmp"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.webp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.webp"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.wmf"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.xif"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xmp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 8.xmp"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.032"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.abr\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.abr"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.acdc\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.acdc"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ANI\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.ani"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.apd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 8.apd"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.arw\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.arw"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.bay"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.bmp"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CR2\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.cr2"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CRW\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.crw"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.cs1"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CUR\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.cur"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.dcr"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.DCX\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.dcx"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.dib"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.djv"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.DJVU\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.djvu"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.dng"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.emf"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.EPS\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.eps"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.erf"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.fff"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.gif"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hdr\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.hdr"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ICL\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.icl"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.icn"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.iw4"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.j2c"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.j2k"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jbr\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.jbr"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.jfif"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.jif"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.JP2\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.jp2"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.jpc"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.jpe"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.jpeg"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.jpg"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.jpk"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.jpx"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.KDC\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.kdc"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mef\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.mef"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.mos"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.mrw"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.nef"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nrw\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.nrw"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.orf"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbr\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.pbr"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.pct"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PCX\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.pcx"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.pef"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.pic"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.pict"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.png"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PSD\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.psd"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PSP\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.psp"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspbrush\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.pspbrush"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspimage\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.pspimage"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.raf"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.RAW\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.raw"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.rle"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rw2\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.rw2"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rwl\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.rwl"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.sr2"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.srf"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srw\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.srw"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TGA\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.tga"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.thm"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.tif"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.tiff"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.ttc"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.ttf"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v80po\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 8.v80po"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v80pp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 8.v80pp"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v80ppf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 8.v80ppf"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.wbm"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.WBMP\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.wbmp"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.WEBP\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.webp"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.wmf"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.xif"
.
[HKEY_USERS\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xmp\UserChoice]
@Denied: (2) (S-1-5-21-2598399437-2432177153-1626090690-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 18.xmp"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Avira\Antivirus\avguard.exe
c:\program files (x86)\Bonjour\mDNSResponder.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
c:\program files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe
c:\program files (x86)\ASUS\USB-N13 WLAN Card Utilities\RtWlan.exe
c:\program files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2015-10-16  21:24:49 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2015-10-16 19:24
.
Vor Suchlauf: 16 Verzeichnis(se), 348.979.240.960 Bytes frei
Nach Suchlauf: 21 Verzeichnis(se), 348.592.885.760 Bytes frei
.
- - End Of File - - A334036EDA079D058C6F23F4A2A87F7B
         

--- --- ---
8E734BD7AA1D4F7E9AF58DF495F6CF9E

[/CODE]

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

MBAM Suchlauf brachte 0 Auffälligkeiten.
Logfile von AdwCleaner:
AdwCleaner Logfile:

# AdwCleaner v5.013 - Bericht erstellt am 18/10/2015 um 10:55:52
# Aktualisiert am 09/10/2015 von Xplode
# Datenbank : 2015-10-18.3 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : rainer - ACER
# Gestartet von : C:\Users\rainer\Downloads\AdwCleaner_5.013.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****

[-] Ordner Gelöscht : C:\ProgramData\Partner
[-] Ordner Gelöscht : C:\ProgramData\VideoDownloaderUltimateWinApp
[-] Ordner Gelöscht : C:\Users\rainer\AppData\Local\PackageAware
[-] Ordner Gelöscht : C:\Users\rainer\AppData\Roaming\pdfforge

***** [ Dateien ] *****

[-] Datei Gelöscht : C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\user.js

***** [ DLLs ] *****


***** [ Verknüpfungen ] *****


***** [ Geplante Tasks ] *****


***** [ Registrierungsdatenbank ] *****

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
[-] Schlüssel Gelöscht : HKCU\Software\OCS
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EE171732-BEB4-4576-887D-CB62727F01CA}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A2D81E70-2A98-4A08-A628-94388B063C5E}
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\OCS

***** [ Internetbrowser ] *****


*************************

:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [2272 Bytes] ##########
         

--- --- ---


JRT.txt und FRST folgen.

JRT Logfile:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.6.4 (09.28.2015:1)
OS: Windows 7 Home Premium x64
Ran by rainer on 18.10.2015 at 11:24:45,43
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks

Successfully deleted: [Task] C:\Windows\system32\tasks\TuneUpUtilities_Task_BkGndMaintenance2013



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_290FB52F6B1D9B39F20FE44B3D2BD2B2



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4858E7D9-8E12-45a3-B6A3-1CD128C9D403}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\TuneUp Undelete
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shellex\ContextMenuHandlers\TuneUp Shredder Shell Extension
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\TuneUp Disk Space Explorer Shell Extension
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\TuneUp Shredder Shell Extension
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\ACER
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer



~~~ Files

Successfully deleted: [File] C:\Users\Public\Desktop\tuneup utilities 2014.lnk



~~~ Folders

Successfully deleted: [Folder] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\tuneup utilities 2014



~~~ FireFox

Emptied folder: C:\Users\rainer\AppData\Roaming\mozilla\firefox\profiles\drdv05tc.default\minidumps [8 files]



~~~ Chrome


[C:\Users\rainer\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\rainer\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\rainer\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\rainer\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 18.10.2015 at 11:28:42,53
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

--- --- ---


FRST Logfile:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:17-10-2015
durchgeführt von rainer (Administrator) auf ACER (18-10-2015 11:34:44)
Gestartet von C:\Users\rainer\Downloads
Geladene Profile: rainer (Verfügbare Profile: rainer)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-10-13] (Intel Corporation)
HKLM\...\Run: [mwlDaemon] => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [349480 2009-09-10] (Egis Technology Inc.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8098848 2009-09-02] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888 2009-08-13] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [Hotkey Utility] => C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [629280 2009-08-18] ()
HKLM-x32\...\Run: [ArcadeDeluxeAgent] => C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [128296 2009-11-10] (CyberLink Corp.)
HKLM-x32\...\Run: [ACSW18DE] => C:\Program Files (x86)\ACD Systems\ACDSee\18.0\acdIDInTouch2.exe [1470736 2015-02-03] (ACD Systems)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [36710768 2015-10-02] (Dropbox, Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [782520 2015-10-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66320 2015-09-10] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\Run: [dradio-RecorderTimer] => C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe [42496 2012-10-13] ()
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\Run: [ACDSeeCommanderPro8] => C:\Program Files\ACD Systems\ACDSee Pro\8.0\ACDSeeCommanderPro8.exe [2141192 2015-05-07] ()
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\Run: [VideoDownloaderUltimate] => C:\ProgramData\VideoDownloaderUltimateWinApp\VideoDownloaderUltimate.exe /repair
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\Run: [ACDSeeCommander18] => C:\Program Files (x86)\ACD Systems\ACDSee\18.0\ACDSeeCommander18.exe [1973256 2015-05-06] ()
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\Acer.scr [425984 2009-08-05] ()
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-10-05] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-10-05] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-10-05] (Google)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [egisPSDP] -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x64\psdprotect.dll [2009-09-10] (Egis Technology Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [egisPSDP] -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\psdprotect.dll [2009-09-10] (Egis Technology Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Snagit 12.lnk [2015-10-07]
ShortcutTarget: Snagit 12.lnk -> C:\Program Files (x86)\TechSmith\Snagit 12\Snagit32.exe (TechSmith Corporation)
Startup: C:\Users\rainer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk [2015-06-20]
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{39AACB1F-D224-41D8-93D9-9188FE6C1AB7}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{8CDC23DE-5CF5-4E8B-B511-FFE518B6A645}: [DhcpNameServer] 192.168.2.1

Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_x3900&r=17360112ln07973780f753h9j1y34o
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM-x32 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKU\S-1-5-21-2598399437-2432177153-1626090690-1000 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE469
SearchScopes: HKU\S-1-5-21-2598399437-2432177153-1626090690-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE469
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08] (Adobe Systems Incorporated)
BHO-x32: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)
BHO-x32: AviraBrowserSafety.BrowserSafety -> {c3c77255-42c0-499f-b664-6e981a0b1647} -> C:\Windows\SysWOW64\mscoree.dll [2010-11-05] (Microsoft Corporation)
Handler-x32: abs - {E00957BD-D0E1-4eb9-A025-7743FDC8B27B} - C:\Windows\SysWOW64\mscoree.dll [2010-11-05] (Microsoft Corporation)
Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll [2013-04-16] (Belarc, Inc.)

FireFox:
========
FF ProfilePath: C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default
FF Homepage: hxxp://www.google.de/
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-17] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-01-31] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-17] ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Keine Datei]
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-17] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-17] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-24] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-24] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2013-05-08] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2598399437-2432177153-1626090690-1000: @phonostar.de/phonostar -> C:\Program Files (x86)\dradio-Recorder\npphonostarDetectNP.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-2598399437-2432177153-1626090690-1000: @tools.google.com/Google Update;version=3 -> C:\Users\rainer\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-24] (Google Inc.)
FF Plugin HKU\S-1-5-21-2598399437-2432177153-1626090690-1000: @tools.google.com/Google Update;version=9 -> C:\Users\rainer\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-24] (Google Inc.)
FF SearchPlugin: C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\searchplugins\google-images.xml [2015-08-16]
FF SearchPlugin: C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\searchplugins\google-maps.xml [2015-08-16]
FF Extension: Avira Browser Safety - C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\Extensions\abs@avira.com [2015-09-24] [ist nicht signiert]
FF Extension: Youtube Downloader - 4K Download - C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\Extensions\paulsaintuzb@gmail.com [2015-08-17]
FF Extension: FireFTP - C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f} [2015-05-29]
FF Extension: Adblock Plus - C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-03]
FF HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\extensions\cliqz@cliqz.com => nicht gefunden

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR Plugin: (Native Client) - C:\Users\rainer\AppData\Local\Google\Chrome\Application\46.0.2490.71\ppGoogleNaClPluginChrome.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Users\rainer\AppData\Local\Google\Chrome\Application\46.0.2490.71\pdf.dll => Keine Datei
CHR Plugin: (Shockwave Flash) - C:\Users\rainer\AppData\Local\Google\Chrome\Application\46.0.2490.71\gcswf32.dll => Keine Datei
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll => Keine Datei
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Users\rainer\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll => Keine Datei
CHR Profile: C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-01-31]
CHR Extension: (Google-Suche) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-01-31]
CHR Extension: (PasswordBox - Free Password Vault) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\epnpbkpfpmpbheinimppjadpcbkechhk [2014-04-26]
CHR Extension: (Avira Browserschutz) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-11-16]
CHR Extension: (Chrome Remote Desktop) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2012-01-31]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-08]
CHR Extension: (Memo Notepad) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmoihkoninaoanjobiiknmgenhpaecec [2014-04-26]
CHR Extension: (Google Mail) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-01-31]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - C:\Users\rainer\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2015936 2015-09-29] (Adobe Systems, Incorporated)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [932912 2015-10-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [461672 2015-10-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [461672 2015-10-05] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1147720 2015-10-05] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [240872 2015-09-10] (Avira Operations GmbH & Co. KG)
S2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [Datei ist nicht signiert]
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-10-11] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-10-11] (Dropbox, Inc.)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2012-01-31] (Macrovision Europe Ltd.) [Datei ist nicht signiert]
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
S3 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-10] (Egis Technology Inc.)
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2869248 2015-03-27] (Deutsche Telekom AG) [Datei ist nicht signiert]
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1617696 2014-04-30] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21007192 2014-04-30] (NVIDIA Corporation)
S2 Realtek11nCU; C:\Program Files (x86)\ASUS\USB-N13 WLAN Card Utilities\RtlService.exe [36864 2012-05-10] (Realtek Semiconductor Corp.) [Datei ist nicht signiert]
S2 TabletService; C:\Windows\system32\Tablet.exe [1574448 2007-03-31] (Wacom Technology, Corp.)
S2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2145080 2014-07-16] (TuneUp Software)
S2 USBS3S4Detection; C:\OEM\USBDECTION\USBS3S4Detection.exe [76320 2009-12-09] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [163544 2015-10-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-10-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2015-10-05] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [74952 2015-10-05] (Avira Operations GmbH & Co. KG)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [16776 2011-07-29] () [Datei ist nicht signiert]
S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [14216 2011-07-29] () [Datei ist nicht signiert]
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9096 2011-07-29] () [Datei ist nicht signiert]
S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [8456 2011-07-29] () [Datei ist nicht signiert]
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18776 2014-04-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R3 RTL8192cu; C:\Windows\System32\DRIVERS\rtwlanu.sys [986728 2012-02-10] (Realtek Semiconductor Corporation                           )
S2 SSPORT; C:\Windows\SysWOW64\Drivers\SSPORT.sys [11576 2009-08-27] (Samsung Electronics)
R3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-10-18 11:28 - 2015-10-18 11:28 - 00002476 _____ C:\Users\rainer\Desktop\JRT.txt
2015-10-18 11:23 - 2015-10-18 11:23 - 01798976 _____ (Malwarebytes) C:\Users\rainer\Downloads\JRT.exe
2015-10-18 11:23 - 2015-10-05 23:26 - 01801288 _____ (Malwarebytes) C:\Users\rainer\Desktop\JRT.exe
2015-10-18 10:54 - 2015-10-18 10:55 - 00000000 ____D C:\AdwCleaner
2015-10-18 10:52 - 2015-10-18 10:52 - 01682432 _____ C:\Users\rainer\Downloads\AdwCleaner_5.013.exe
2015-10-18 10:30 - 2015-10-18 10:30 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-10-18 10:29 - 2015-10-18 10:29 - 00001110 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-10-18 10:29 - 2015-10-18 10:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-10-18 10:29 - 2015-10-18 10:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-10-18 10:29 - 2015-10-18 10:29 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-10-18 10:29 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-10-18 10:29 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-10-18 10:29 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2015-10-18 10:27 - 2015-10-18 10:27 - 22908888 _____ (Malwarebytes ) C:\Users\rainer\Downloads\mbam-setup-2.2.0.1024.exe
2015-10-16 21:24 - 2015-10-16 21:24 - 00070130 _____ C:\ComboFix.txt
2015-10-16 21:02 - 2015-10-16 21:24 - 00000000 ____D C:\ComboFix
2015-10-16 21:02 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-10-16 21:02 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-10-16 21:02 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-10-16 21:02 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-10-16 21:02 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-10-16 21:02 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-10-16 21:02 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-10-16 21:02 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-10-16 20:56 - 2015-10-16 21:24 - 00000000 ____D C:\Qoobox
2015-10-16 20:55 - 2015-10-16 21:22 - 00000000 ____D C:\Windows\erdnt
2015-10-16 20:54 - 2015-10-16 20:54 - 05636101 ____R (Swearware) C:\Users\rainer\Downloads\ComboFix.exe
2015-10-16 13:25 - 2015-10-16 20:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-10-15 21:02 - 2015-10-18 11:01 - 00000000 ___RD C:\Users\rainer\Dropbox
2015-10-15 21:02 - 2015-10-15 21:02 - 00001234 _____ C:\Users\rainer\Desktop\Dropbox.lnk
2015-10-15 09:08 - 2015-10-15 09:14 - 00038328 _____ C:\Users\rainer\Downloads\Addition.txt
2015-10-15 09:06 - 2015-10-18 11:34 - 00024748 _____ C:\Users\rainer\Downloads\FRST.txt
2015-10-15 09:05 - 2015-10-18 11:34 - 00000000 ____D C:\FRST
2015-10-15 09:04 - 2015-10-18 11:33 - 02196992 _____ (Farbar) C:\Users\rainer\Downloads\FRST64.exe
2015-10-15 08:30 - 2015-09-18 21:22 - 00025432 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-10-15 08:30 - 2015-09-18 21:19 - 01291264 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-10-15 08:30 - 2015-09-18 21:19 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-10-15 08:30 - 2015-09-18 21:19 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-10-15 08:30 - 2015-09-18 21:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-10-15 08:30 - 2015-09-18 21:19 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-10-15 08:30 - 2015-09-18 21:09 - 01163776 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-10-14 15:47 - 2015-10-14 15:47 - 00001167 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-10-14 15:47 - 2015-10-14 15:47 - 00001155 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-10-14 15:46 - 2015-10-14 15:46 - 42621984 _____ C:\Users\rainer\Downloads\firefox_setup_41.0.1 (2).exe
2015-10-14 15:46 - 2015-10-14 15:46 - 42621984 _____ C:\Users\rainer\Downloads\firefox_setup_41.0.1 (1).exe
2015-10-14 15:45 - 2015-10-14 15:46 - 42621984 _____ C:\Users\rainer\Downloads\firefox_setup_41.0.1.exe
2015-10-14 15:37 - 2015-10-14 15:37 - 00000000 ____D C:\Users\rainer\AppData\Roaming\Avira
2015-10-14 15:34 - 2015-10-05 15:51 - 00163544 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-10-14 15:34 - 2015-10-05 15:51 - 00141416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-10-14 15:34 - 2015-10-05 15:51 - 00074952 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-10-14 15:34 - 2015-10-05 15:51 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2015-10-14 15:33 - 2015-10-15 19:45 - 00000000 ____D C:\ProgramData\Package Cache
2015-10-14 15:33 - 2015-10-15 19:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-10-14 15:33 - 2015-10-15 19:45 - 00000000 ____D C:\Program Files (x86)\Avira
2015-10-14 15:32 - 2015-10-14 15:32 - 04515896 _____ (Avira Operations & Co. KG) C:\Users\rainer\Downloads\avira_de_av___ws (1).exe
2015-10-14 15:31 - 2015-10-14 15:31 - 04515896 _____ (Avira Operations & Co. KG) C:\Users\rainer\Downloads\avira_de_av___ws.exe
2015-10-14 08:37 - 2015-08-06 20:04 - 14176768 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-10-14 08:37 - 2015-08-06 20:03 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2015-10-14 08:37 - 2015-08-06 19:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-10-14 08:37 - 2015-08-06 19:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2015-10-14 08:36 - 2015-09-25 20:07 - 03168768 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-10-14 08:36 - 2015-09-25 20:07 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-10-14 08:36 - 2015-09-25 20:07 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-10-14 08:36 - 2015-09-25 20:07 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-10-14 08:36 - 2015-09-25 20:07 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-10-14 08:36 - 2015-09-25 20:07 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-10-14 08:36 - 2015-09-25 20:07 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-10-14 08:36 - 2015-09-25 20:06 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-10-14 08:36 - 2015-09-25 20:06 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-10-14 08:36 - 2015-09-25 20:06 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-10-14 08:36 - 2015-09-25 20:06 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-10-14 08:36 - 2015-09-25 19:59 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-10-14 08:36 - 2015-09-25 19:59 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-10-14 08:36 - 2015-09-25 19:59 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-10-14 08:36 - 2015-09-25 19:59 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-10-14 08:36 - 2015-09-25 19:58 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-10-14 08:36 - 2015-09-18 21:31 - 00391784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-10-14 08:36 - 2015-09-18 20:58 - 00345688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-10-14 08:36 - 2015-09-16 06:48 - 25851904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-10-14 08:36 - 2015-09-16 06:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-10-14 08:36 - 2015-09-16 06:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-10-14 08:36 - 2015-09-16 06:22 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-10-14 08:36 - 2015-09-16 06:21 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-10-14 08:36 - 2015-09-16 06:21 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-10-14 08:36 - 2015-09-16 06:21 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-10-14 08:36 - 2015-09-16 06:21 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-10-14 08:36 - 2015-09-16 06:21 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-10-14 08:36 - 2015-09-16 06:14 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-10-14 08:36 - 2015-09-16 06:13 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-10-14 08:36 - 2015-09-16 06:10 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-10-14 08:36 - 2015-09-16 06:09 - 05990912 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-10-14 08:36 - 2015-09-16 06:08 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-10-14 08:36 - 2015-09-16 06:08 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-10-14 08:36 - 2015-09-16 06:08 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-10-14 08:36 - 2015-09-16 06:08 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-10-14 08:36 - 2015-09-16 06:01 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-10-14 08:36 - 2015-09-16 05:58 - 20357632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-10-14 08:36 - 2015-09-16 05:58 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-10-14 08:36 - 2015-09-16 05:50 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-10-14 08:36 - 2015-09-16 05:46 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-10-14 08:36 - 2015-09-16 05:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-10-14 08:36 - 2015-09-16 05:45 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-10-14 08:36 - 2015-09-16 05:43 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-10-14 08:36 - 2015-09-16 05:41 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-10-14 08:36 - 2015-09-16 05:33 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-10-14 08:36 - 2015-09-16 05:33 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-10-14 08:36 - 2015-09-16 05:32 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-10-14 08:36 - 2015-09-16 05:32 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-10-14 08:36 - 2015-09-16 05:31 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-10-14 08:36 - 2015-09-16 05:31 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-10-14 08:36 - 2015-09-16 05:29 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-10-14 08:36 - 2015-09-16 05:29 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-10-14 08:36 - 2015-09-16 05:28 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-10-14 08:36 - 2015-09-16 05:28 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-10-14 08:36 - 2015-09-16 05:26 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-10-14 08:36 - 2015-09-16 05:26 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-10-14 08:36 - 2015-09-16 05:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-10-14 08:36 - 2015-09-16 05:24 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-10-14 08:36 - 2015-09-16 05:23 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-10-14 08:36 - 2015-09-16 05:22 - 14458368 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-10-14 08:36 - 2015-09-16 05:22 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-10-14 08:36 - 2015-09-16 05:22 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-10-14 08:36 - 2015-09-16 05:15 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-10-14 08:36 - 2015-09-16 05:11 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-10-14 08:36 - 2015-09-16 05:10 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-10-14 08:36 - 2015-09-16 05:07 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-10-14 08:36 - 2015-09-16 05:06 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-10-14 08:36 - 2015-09-16 05:05 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-10-14 08:36 - 2015-09-16 05:05 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-10-14 08:36 - 2015-09-16 05:04 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-10-14 08:36 - 2015-09-16 04:59 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-10-14 08:36 - 2015-09-16 04:58 - 12853760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-10-14 08:36 - 2015-09-16 04:58 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-10-14 08:36 - 2015-09-16 04:56 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-10-14 08:36 - 2015-09-16 04:55 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-10-14 08:36 - 2015-09-16 04:55 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-10-14 08:36 - 2015-09-16 04:48 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-10-14 08:36 - 2015-09-16 04:37 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-10-14 08:36 - 2015-09-16 04:34 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-10-14 08:36 - 2015-09-16 04:32 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-10-14 08:35 - 2015-10-01 20:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-10-14 08:35 - 2015-10-01 20:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-10-14 08:35 - 2015-10-01 20:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-10-14 08:35 - 2015-10-01 20:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-10-14 08:35 - 2015-10-01 20:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-10-14 08:35 - 2015-10-01 20:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-10-14 08:35 - 2015-10-01 20:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-10-14 08:35 - 2015-10-01 19:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-10-14 08:35 - 2015-10-01 19:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-10-14 08:35 - 2015-09-29 05:16 - 05569472 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-10-14 08:35 - 2015-09-29 05:13 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-10-14 08:35 - 2015-09-29 05:10 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-10-14 08:35 - 2015-09-29 05:10 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-10-14 08:35 - 2015-09-29 05:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-10-14 08:35 - 2015-09-29 05:09 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-10-14 08:35 - 2015-09-29 05:05 - 03990976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-10-14 08:35 - 2015-09-29 05:05 - 03936192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-10-14 08:35 - 2015-09-29 05:05 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-10-14 08:35 - 2015-09-29 05:05 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-10-14 08:35 - 2015-09-29 05:02 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:59 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-10-14 08:35 - 2015-09-29 04:59 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-10-14 08:35 - 2015-09-29 04:59 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-10-14 08:35 - 2015-09-29 04:59 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-10-14 08:35 - 2015-09-29 04:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-10-14 08:35 - 2015-09-29 04:59 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-10-14 08:35 - 2015-09-29 04:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-10-14 08:35 - 2015-09-29 04:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-10-14 08:35 - 2015-09-29 04:58 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-10-14 08:35 - 2015-09-29 04:58 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-10-14 08:35 - 2015-09-29 04:57 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-10-14 08:35 - 2015-09-29 04:57 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-10-14 08:35 - 2015-09-29 04:57 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-10-14 08:35 - 2015-09-29 04:57 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-10-14 08:35 - 2015-09-29 04:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-10-14 08:35 - 2015-09-29 04:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 03:50 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-10-14 08:35 - 2015-09-29 03:49 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-10-14 08:35 - 2015-09-29 03:49 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-10-14 08:35 - 2015-09-29 03:43 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-10-14 08:35 - 2015-09-29 03:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-10-14 08:35 - 2015-09-29 03:40 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 03:40 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 03:40 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 03:40 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-10-14 08:35 - 2015-09-15 20:17 - 00157016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-10-14 08:35 - 2015-09-15 20:17 - 00097112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-10-14 08:35 - 2015-09-15 20:11 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-10-14 08:35 - 2015-09-15 20:11 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-10-14 08:35 - 2015-09-15 20:11 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-10-14 08:35 - 2015-09-15 20:11 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-10-14 08:35 - 2015-09-15 20:11 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-10-14 08:35 - 2015-09-15 20:11 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-10-14 08:35 - 2015-09-15 20:10 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-10-14 08:35 - 2015-09-15 19:36 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-10-14 08:35 - 2015-09-15 19:36 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-10-14 08:35 - 2015-09-15 19:36 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-10-14 08:35 - 2015-09-15 19:35 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2015-10-11 21:35 - 2015-10-11 21:35 - 00000000 ____D C:\ProgramData\regid.1995-08.com.techsmith
2015-10-11 21:35 - 2015-10-11 21:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2015-10-11 10:27 - 2015-10-11 10:27 - 00000000 ____D C:\Users\rainer\AppData\Roaming\Dropbox
2015-10-11 10:27 - 2015-10-11 10:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-10-11 10:26 - 2015-10-18 11:01 - 00000000 ____D C:\Users\rainer\AppData\Local\Dropbox
2015-10-11 10:26 - 2015-10-18 10:57 - 00001210 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2015-10-11 10:26 - 2015-10-18 10:38 - 00001214 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2015-10-11 10:26 - 2015-10-11 10:32 - 00004210 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineUA
2015-10-11 10:26 - 2015-10-11 10:32 - 00003958 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineCore
2015-10-11 10:26 - 2015-10-11 10:27 - 00000000 ____D C:\Program Files (x86)\Dropbox
2015-10-11 10:26 - 2015-10-11 10:26 - 00000000 ____D C:\ProgramData\Dropbox
2015-10-09 21:37 - 2015-10-09 21:37 - 00002046 _____ C:\Users\Public\Desktop\Google Slides.lnk
2015-10-09 21:37 - 2015-10-09 21:37 - 00002044 _____ C:\Users\Public\Desktop\Google Sheets.lnk
2015-10-09 21:37 - 2015-10-09 21:37 - 00002034 _____ C:\Users\Public\Desktop\Google Docs.lnk
2015-10-09 21:37 - 2015-10-09 21:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-10-09 21:36 - 2015-10-09 21:36 - 00929872 _____ (Google Inc.) C:\Users\rainer\Downloads\googledrivesync.exe
2015-10-09 14:21 - 2015-10-09 14:21 - 415136986 _____ C:\Windows\MEMORY.DMP
2015-10-09 14:21 - 2015-10-09 14:21 - 00286920 _____ C:\Windows\Minidump\100915-17097-01.dmp
2015-10-09 14:21 - 2015-10-09 14:21 - 00000000 ____D C:\Windows\Minidump
2015-10-06 09:05 - 2015-10-06 09:05 - 00000000 ____D C:\Users\rainer\AppData\Roaming\No Company Name
2015-10-04 20:44 - 2015-10-04 20:44 - 00019043 _____ C:\Users\rainer\Documents\Finanzen 01-10-2015.odt
2015-10-02 10:43 - 2015-10-02 10:43 - 00014169 _____ C:\Windows\DirectX.log
2015-10-02 10:43 - 2015-10-02 10:43 - 00002220 _____ C:\Users\Public\Desktop\ACDSee 18.lnk
2015-10-02 10:43 - 2015-10-02 10:43 - 00000000 ____D C:\Program Files (x86)\ACD Systems
2015-10-01 21:02 - 2015-10-01 21:02 - 00000000 ____D C:\Program Files (x86)\LibreOffice 5
2015-10-01 21:01 - 2015-10-01 21:01 - 00001426 _____ C:\Users\Public\Desktop\LibreOffice 5.0.lnk
2015-10-01 21:01 - 2015-10-01 21:01 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 5.0
2015-10-01 21:00 - 2015-10-01 21:01 - 00000000 ____D C:\Program Files\LibreOffice 5
2015-10-01 13:47 - 2015-10-01 13:47 - 00000000 ____D C:\Program Files (x86)\LibreOffice_4.4_SDK
2015-09-24 11:29 - 2015-08-05 19:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-09-24 11:29 - 2015-08-05 19:56 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-09-24 11:29 - 2015-08-05 19:56 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-09-24 11:29 - 2015-08-05 19:40 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-09-24 11:29 - 2015-07-15 05:17 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-09-24 11:29 - 2015-07-15 04:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-09-24 11:29 - 2015-07-09 19:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-09-24 11:29 - 2015-07-09 19:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-09-24 11:29 - 2015-07-09 19:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-09-24 11:29 - 2015-07-09 19:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-09-24 11:28 - 2015-07-23 02:02 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-09-24 11:28 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-09-24 11:28 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-09-24 11:28 - 2015-07-22 19:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-09-24 11:28 - 2015-07-22 19:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-09-24 11:28 - 2015-07-22 18:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-09-24 11:27 - 2015-08-27 20:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-09-24 11:27 - 2015-08-27 20:18 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-09-24 11:27 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-09-24 11:27 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-09-24 11:27 - 2015-08-27 19:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-09-24 11:27 - 2015-08-27 19:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-09-24 11:27 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2015-09-24 11:27 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-09-24 11:27 - 2015-06-25 12:06 - 00115136 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-09-24 11:27 - 2015-06-25 12:01 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-09-24 11:27 - 2015-06-25 12:01 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-09-24 11:27 - 2015-06-25 11:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-09-24 11:26 - 2015-09-02 05:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-09-24 11:26 - 2015-09-02 05:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-09-24 11:26 - 2015-09-02 05:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-09-24 11:26 - 2015-09-02 05:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-09-24 11:26 - 2015-09-02 04:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-09-24 11:26 - 2015-09-02 04:48 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-09-24 11:26 - 2015-09-02 04:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-09-24 11:26 - 2015-09-02 04:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-09-24 11:26 - 2015-09-02 03:51 - 03209216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-09-24 11:26 - 2015-09-02 03:47 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-09-24 11:26 - 2015-09-02 03:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-10-18 11:34 - 2012-12-26 15:36 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-10-18 11:09 - 2012-12-23 18:17 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-18 11:09 - 2012-12-23 18:17 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-18 11:09 - 2009-07-14 06:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-18 11:09 - 2009-07-14 06:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-18 10:58 - 2015-08-16 09:52 - 00017536 _____ C:\Windows\setupact.log
2015-10-18 10:58 - 2012-01-31 19:43 - 00000000 ____D C:\Users\rainer\AppData\Roaming\WTablet
2015-10-18 10:57 - 2015-08-16 09:52 - 00152338 _____ C:\Windows\PFRO.log
2015-10-18 10:57 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-18 10:57 - 2007-10-10 13:12 - 00000000 ____D C:\ProgramData\NVIDIA
2015-10-18 10:56 - 2007-10-10 13:06 - 01747437 _____ C:\Windows\WindowsUpdate.log
2015-10-18 10:25 - 2012-12-26 21:54 - 00000000 ____D C:\Users\rainer\Documents\FinePrint-Dateien
2015-10-18 10:25 - 2012-02-01 14:52 - 00000072 _____ C:\Users\Public\LMDebug.log
2015-10-17 18:34 - 2012-12-26 15:36 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-10-17 18:34 - 2012-12-26 15:36 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-17 18:34 - 2012-12-26 15:36 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-10-16 21:38 - 2014-03-14 11:53 - 00000000 ____D C:\Program Files (x86)\Samsung
2015-10-16 21:16 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2015-10-16 20:44 - 2014-11-15 09:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-10-16 12:51 - 2014-11-14 22:01 - 00000000 ____D C:\ProgramData\Avira
2015-10-15 21:02 - 2012-01-31 10:38 - 00000000 ____D C:\Users\rainer
2015-10-15 10:15 - 2014-12-11 20:21 - 00000000 ____D C:\Windows\system32\appraiser
2015-10-15 10:15 - 2014-04-25 18:29 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-10-14 15:26 - 2012-01-31 15:27 - 00002365 _____ C:\Users\rainer\Desktop\Google Chrome.lnk
2015-10-14 08:50 - 2014-03-08 14:20 - 00000000 ____D C:\Windows\system32\MRT
2015-10-14 08:45 - 2012-02-01 18:03 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-10-14 08:43 - 2009-11-26 19:39 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-10-14 08:12 - 2009-07-14 07:13 - 01620684 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-14 08:12 - 2007-10-10 22:58 - 00699432 _____ C:\Windows\system32\perfh007.dat
2015-10-14 08:12 - 2007-10-10 22:58 - 00149572 _____ C:\Windows\system32\perfc007.dat
2015-10-13 19:55 - 2014-11-08 09:12 - 00000000 ____D C:\Users\rainer\AppData\Local\Downloaded Installations
2015-10-13 19:49 - 2015-06-20 13:42 - 00000000 ____D C:\ProgramData\Netzmanager
2015-10-13 14:16 - 2014-04-27 19:26 - 00000000 ____D C:\Users\rainer\AppData\Roaming\vlc
2015-10-11 10:26 - 2015-08-31 08:10 - 00000000 ____D C:\Users\rainer\Downloads\7z
2015-10-09 21:37 - 2012-01-31 12:40 - 00000000 ____D C:\Users\rainer\AppData\Local\Google
2015-10-09 21:37 - 2009-11-26 19:47 - 00000000 ____D C:\Program Files (x86)\Google
2015-10-09 13:34 - 2015-04-04 09:06 - 00000000 ___SD C:\Windows\system32\GWX
2015-10-08 09:44 - 2015-04-04 09:06 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-10-06 20:43 - 2014-11-08 09:12 - 00002215 _____ C:\Users\Public\Desktop\ACDSee Pro 8 (64-bit).lnk
2015-10-06 20:43 - 2014-11-08 09:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACD Systems
2015-10-06 20:37 - 2015-08-15 13:29 - 00096704 _____ C:\Users\rainer\AppData\Local\GDIPFONTCACHEV1.DAT
2015-10-06 20:36 - 2015-08-16 09:52 - 02329128 _____ C:\Windows\system32\FNTCACHE.DAT
2015-10-06 09:06 - 2012-01-31 19:48 - 00000000 ____D C:\adobe
2015-10-06 08:44 - 2014-08-15 14:02 - 00000000 ____D C:\Users\rainer\AppData\Local\Adobe
2015-10-05 22:04 - 2012-01-31 12:40 - 00000000 ____D C:\Users\rainer\AppData\Roaming\Adobe
2015-10-05 14:43 - 2014-11-08 09:14 - 00000000 ____D C:\Users\rainer\AppData\Local\ACD Systems
2015-10-03 13:21 - 2014-10-06 14:05 - 00000000 ____D C:\ProgramData\tmp
2015-10-02 14:18 - 2015-05-22 14:12 - 00072192 ___SH C:\Users\rainer\Downloads\Thumbs.db
2015-10-02 11:35 - 2015-01-04 15:15 - 00000000 __SHD C:\Users\rainer\AppData\LocalLow\EmieUserList
2015-10-02 11:35 - 2015-01-04 15:15 - 00000000 __SHD C:\Users\rainer\AppData\LocalLow\EmieBrowserModeList
2015-10-02 11:35 - 2014-11-14 21:02 - 00000000 __SHD C:\Users\rainer\AppData\LocalLow\EmieSiteList
2015-10-02 11:35 - 2014-11-14 21:02 - 00000000 __SHD C:\Users\rainer\AppData\Local\EmieUserList
2015-10-02 11:35 - 2014-11-14 21:02 - 00000000 __SHD C:\Users\rainer\AppData\Local\EmieSiteList
2015-10-02 11:35 - 2014-11-14 21:02 - 00000000 __SHD C:\Users\rainer\AppData\Local\EmieBrowserModeList
2015-09-26 10:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-09-24 22:07 - 2015-05-20 11:34 - 00000542 _____ C:\Users\Public\Desktop\CEWE FOTOSCHAU.lnk
2015-09-24 22:07 - 2014-10-06 14:05 - 00000554 _____ C:\Users\Public\Desktop\Saturn Fotoservice.lnk
2015-09-24 19:29 - 2009-07-14 09:45 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-24 19:29 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-09-24 11:04 - 2012-12-23 18:17 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-09-24 11:04 - 2012-12-23 18:17 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-09-24 11:04 - 2012-01-31 15:24 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2598399437-2432177153-1626090690-1000UA
2015-09-24 11:04 - 2012-01-31 15:24 - 00003700 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2598399437-2432177153-1626090690-1000Core
2015-09-24 11:04 - 2012-01-31 15:24 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2598399437-2432177153-1626090690-1000UA.job
2015-09-24 11:04 - 2012-01-31 15:24 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2598399437-2432177153-1626090690-1000Core.job

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2013-01-24 21:19 - 2013-01-24 21:19 - 0000000 _____ () C:\Users\rainer\AppData\Roaming\wklnhst.dat
2014-05-24 17:06 - 2014-08-02 09:56 - 0011264 _____ () C:\Users\rainer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2007-10-10 13:14 - 2007-10-10 13:15 - 0008463 _____ () C:\ProgramData\ArcadeDeluxe3.log
2009-11-26 19:31 - 2009-07-18 04:57 - 0036136 _____ (Oberon Media) C:\ProgramData\FullRemove.exe

Einige Dateien in TEMP:
====================
C:\Users\rainer\AppData\Local\Temp\avgnt.exe
C:\Users\rainer\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpb9fma1.dll
C:\Users\rainer\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-09-26 10:35

==================== Ende von FRST.txt ============================
         

--- --- ---

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=352dc45ca36ca8429ffeba575175a50d
# end=init
# utc_time=2015-10-18 07:13:34
# local_time=2015-10-18 09:13:34 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=352dc45ca36ca8429ffeba575175a50d
# end=init
# utc_time=2015-10-18 07:15:57
# local_time=2015-10-18 09:15:57 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 26294
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=352dc45ca36ca8429ffeba575175a50d
# end=updated
# utc_time=2015-10-18 07:18:43
# local_time=2015-10-18 09:18:43 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=352dc45ca36ca8429ffeba575175a50d
# engine=26294
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-10-19 06:13:07
# local_time=2015-10-19 08:13:07 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 13379369 68215581 0 0
# scanned=315600
# found=2
# cleaned=0
# scan_time=39263
sh=F218CB4810038F0B9E1DAA6A8E73FA258D620A8C ft=1 fh=719afe2b4494447f vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\rainer\Documents\Downloads\pdfcreator-2_1_1-setup.exe"
sh=2FC4E5FBFDAD3F2E68253645EC3B0F2FA31FFD80 ft=1 fh=58d8cdf04867bd19 vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\rainer\Downloads\PDFCreator-2_1_2-setup.exe"
         

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=352dc45ca36ca8429ffeba575175a50d
# end=init
# utc_time=2015-10-18 07:13:34
# local_time=2015-10-18 09:13:34 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=352dc45ca36ca8429ffeba575175a50d
# end=init
# utc_time=2015-10-18 07:15:57
# local_time=2015-10-18 09:15:57 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 26294
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=352dc45ca36ca8429ffeba575175a50d
# end=updated
# utc_time=2015-10-18 07:18:43
# local_time=2015-10-18 09:18:43 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=352dc45ca36ca8429ffeba575175a50d
# engine=26294
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-10-19 06:13:07
# local_time=2015-10-19 08:13:07 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 13379369 68215581 0 0
# scanned=315600
# found=2
# cleaned=0
# scan_time=39263
sh=F218CB4810038F0B9E1DAA6A8E73FA258D620A8C ft=1 fh=719afe2b4494447f vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\rainer\Documents\Downloads\pdfcreator-2_1_1-setup.exe"
sh=2FC4E5FBFDAD3F2E68253645EC3B0F2FA31FFD80 ft=1 fh=58d8cdf04867bd19 vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\rainer\Downloads\PDFCreator-2_1_2-setup.exe"
         

 Results of screen317's Security Check version 1.009  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Avira Antivirus                 
Microsoft Security Essentials   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 TuneUp Utilities 2014   
 TuneUp Utilities 2014 (de-DE)  
 TuneUp Utilities 2014   
 Adobe Flash Player 10 Flash Player out of Date! 
 Adobe Flash Player 19.0.0.226  
 Adobe Reader 9 Adobe Reader out of Date! 
 Mozilla Firefox (41.0.2) 
 Google Chrome (45.0.2454.101) 
 Google Chrome (46.0.2490.71) 
````````Process Check: objlist.exe by Laurent````````  
 Microsoft Security Essentials MSMpEng.exe 
 Microsoft Security Essentials msseces.exe 
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
 Avira Antivirus sched.exe  
 Avira Antivirus avshadow.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

FRST Logfile:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:18-10-2015
durchgeführt von rainer (Administrator) auf ACER (19-10-2015 08:36:35)
Gestartet von C:\Users\rainer\Downloads
Geladene Profile: rainer (Verfügbare Profile: rainer)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe
() C:\Program Files\ACD Systems\ACDSee Pro\8.0\ACDSeeCommanderPro8.exe
() C:\Program Files (x86)\ACD Systems\ACDSee\18.0\ACDSeeCommander18.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
() C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\Snagit 12\Snagit32.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\ASUS\USB-N13 WLAN Card Utilities\RtlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\USB-N13 WLAN Card Utilities\RtWLan.exe
(Wacom Technology, Corp.) C:\Windows\System32\Tablet.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(Wacom Technology, Corp.) C:\Windows\System32\WTablet\TabUserW.exe
(Wacom Technology, Corp.) C:\Windows\System32\Tablet.exe
(Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
() C:\OEM\USBDECTION\USBS3S4Detection.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(ACD Systems) C:\Program Files\ACD Systems\ACDSee Pro\8.0\acdIDInTouch2.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\Snagit 12\SnagPriv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\Snagit 12\TscHelp.exe
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\Snagit 12\SnagitEditor.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Users\rainer\Downloads\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-10-13] (Intel Corporation)
HKLM\...\Run: [mwlDaemon] => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [349480 2009-09-10] (Egis Technology Inc.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8098848 2009-09-02] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888 2009-08-13] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [Hotkey Utility] => C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [629280 2009-08-18] ()
HKLM-x32\...\Run: [ArcadeDeluxeAgent] => C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [128296 2009-11-10] (CyberLink Corp.)
HKLM-x32\...\Run: [ACSW18DE] => C:\Program Files (x86)\ACD Systems\ACDSee\18.0\acdIDInTouch2.exe [1470736 2015-02-03] (ACD Systems)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [36710768 2015-10-02] (Dropbox, Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [782520 2015-10-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66320 2015-09-10] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\Run: [dradio-RecorderTimer] => C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe [42496 2012-10-13] ()
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\Run: [ACDSeeCommanderPro8] => C:\Program Files\ACD Systems\ACDSee Pro\8.0\ACDSeeCommanderPro8.exe [2141192 2015-05-07] ()
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\Run: [VideoDownloaderUltimate] => C:\ProgramData\VideoDownloaderUltimateWinApp\VideoDownloaderUltimate.exe /repair
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\Run: [ACDSeeCommander18] => C:\Program Files (x86)\ACD Systems\ACDSee\18.0\ACDSeeCommander18.exe [1973256 2015-05-06] ()
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\Acer.scr [425984 2009-08-05] ()
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-10-12] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-10-12] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-10-12] (Google)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [egisPSDP] -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x64\psdprotect.dll [2009-09-10] (Egis Technology Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [egisPSDP] -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\psdprotect.dll [2009-09-10] (Egis Technology Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Snagit 12.lnk [2015-10-07]
ShortcutTarget: Snagit 12.lnk -> C:\Program Files (x86)\TechSmith\Snagit 12\Snagit32.exe (TechSmith Corporation)
Startup: C:\Users\rainer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk [2015-06-20]
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{39AACB1F-D224-41D8-93D9-9188FE6C1AB7}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{8CDC23DE-5CF5-4E8B-B511-FFE518B6A645}: [DhcpNameServer] 192.168.2.1

Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_x3900&r=17360112ln07973780f753h9j1y34o
HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM-x32 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKU\S-1-5-21-2598399437-2432177153-1626090690-1000 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE469
SearchScopes: HKU\S-1-5-21-2598399437-2432177153-1626090690-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE469
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08] (Adobe Systems Incorporated)
BHO-x32: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)
BHO-x32: AviraBrowserSafety.BrowserSafety -> {c3c77255-42c0-499f-b664-6e981a0b1647} -> C:\Windows\SysWOW64\mscoree.dll [2010-11-05] (Microsoft Corporation)
Handler-x32: abs - {E00957BD-D0E1-4eb9-A025-7743FDC8B27B} - C:\Windows\SysWOW64\mscoree.dll [2010-11-05] (Microsoft Corporation)
Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll [2013-04-16] (Belarc, Inc.)

FireFox:
========
FF ProfilePath: C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default
FF Homepage: hxxp://www.google.de/
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-17] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-01-31] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-17] ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Keine Datei]
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-17] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-17] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-24] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-24] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2013-05-08] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2598399437-2432177153-1626090690-1000: @phonostar.de/phonostar -> C:\Program Files (x86)\dradio-Recorder\npphonostarDetectNP.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-2598399437-2432177153-1626090690-1000: @tools.google.com/Google Update;version=3 -> C:\Users\rainer\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-24] (Google Inc.)
FF Plugin HKU\S-1-5-21-2598399437-2432177153-1626090690-1000: @tools.google.com/Google Update;version=9 -> C:\Users\rainer\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-24] (Google Inc.)
FF SearchPlugin: C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\searchplugins\google-images.xml [2015-08-16]
FF SearchPlugin: C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\searchplugins\google-maps.xml [2015-08-16]
FF Extension: Avira Browser Safety - C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\Extensions\abs@avira.com [2015-09-24] [ist nicht signiert]
FF Extension: Youtube Downloader - 4K Download - C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\Extensions\paulsaintuzb@gmail.com [2015-08-17]
FF Extension: FireFTP - C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f} [2015-05-29]
FF Extension: Adblock Plus - C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-03]
FF HKU\S-1-5-21-2598399437-2432177153-1626090690-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\rainer\AppData\Roaming\Mozilla\Firefox\Profiles\drdv05tc.default\extensions\cliqz@cliqz.com => nicht gefunden

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR Plugin: (Native Client) - C:\Users\rainer\AppData\Local\Google\Chrome\Application\46.0.2490.71\ppGoogleNaClPluginChrome.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Users\rainer\AppData\Local\Google\Chrome\Application\46.0.2490.71\pdf.dll => Keine Datei
CHR Plugin: (Shockwave Flash) - C:\Users\rainer\AppData\Local\Google\Chrome\Application\46.0.2490.71\gcswf32.dll => Keine Datei
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll => Keine Datei
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Users\rainer\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll => Keine Datei
CHR Profile: C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-01-31]
CHR Extension: (Google-Suche) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-01-31]
CHR Extension: (PasswordBox - Free Password Vault) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\epnpbkpfpmpbheinimppjadpcbkechhk [2014-04-26]
CHR Extension: (Avira Browserschutz) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-11-16]
CHR Extension: (Chrome Remote Desktop) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2012-01-31]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-08]
CHR Extension: (Memo Notepad) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmoihkoninaoanjobiiknmgenhpaecec [2014-04-26]
CHR Extension: (Google Mail) - C:\Users\rainer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-01-31]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - C:\Users\rainer\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2015936 2015-09-29] (Adobe Systems, Incorporated)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [932912 2015-10-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [461672 2015-10-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [461672 2015-10-05] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1147720 2015-10-05] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [240872 2015-09-10] (Avira Operations GmbH & Co. KG)
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [Datei ist nicht signiert]
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-10-11] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-10-11] (Dropbox, Inc.)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2012-01-31] (Macrovision Europe Ltd.) [Datei ist nicht signiert]
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
S3 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-10] (Egis Technology Inc.)
S2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2869248 2015-03-27] (Deutsche Telekom AG) [Datei ist nicht signiert]
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1617696 2014-04-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21007192 2014-04-30] (NVIDIA Corporation)
R2 Realtek11nCU; C:\Program Files (x86)\ASUS\USB-N13 WLAN Card Utilities\RtlService.exe [36864 2012-05-10] (Realtek Semiconductor Corp.) [Datei ist nicht signiert]
R2 TabletService; C:\Windows\system32\Tablet.exe [1574448 2007-03-31] (Wacom Technology, Corp.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2145080 2014-07-16] (TuneUp Software)
R2 USBS3S4Detection; C:\OEM\USBDECTION\USBS3S4Detection.exe [76320 2009-12-09] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [163544 2015-10-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-10-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2015-10-05] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [74952 2015-10-05] (Avira Operations GmbH & Co. KG)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [16776 2011-07-29] () [Datei ist nicht signiert]
S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [14216 2011-07-29] () [Datei ist nicht signiert]
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9096 2011-07-29] () [Datei ist nicht signiert]
S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [8456 2011-07-29] () [Datei ist nicht signiert]
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18776 2014-04-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R3 RTL8192cu; C:\Windows\System32\DRIVERS\rtwlanu.sys [986728 2012-02-10] (Realtek Semiconductor Corporation                           )
S2 SSPORT; C:\Windows\SysWOW64\Drivers\SSPORT.sys [11576 2009-08-27] (Samsung Electronics)
S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-10-19 08:28 - 2015-10-19 08:28 - 00852720 _____ C:\Users\rainer\Downloads\SecurityCheck.exe
2015-10-19 07:21 - 2015-10-19 07:21 - 00000000 ____D C:\Users\Default\AppData\Local\Google
2015-10-19 07:21 - 2015-10-19 07:21 - 00000000 ____D C:\Users\Default User\AppData\Local\Google
2015-10-18 21:11 - 2015-10-18 21:12 - 02870984 _____ (ESET) C:\Users\rainer\Downloads\esetsmartinstaller_deu.exe
2015-10-18 11:28 - 2015-10-18 11:28 - 00002476 _____ C:\Users\rainer\Desktop\JRT.txt
2015-10-18 11:23 - 2015-10-18 11:23 - 01798976 _____ (Malwarebytes) C:\Users\rainer\Downloads\JRT.exe
2015-10-18 11:23 - 2015-10-05 23:26 - 01801288 _____ (Malwarebytes) C:\Users\rainer\Desktop\JRT.exe
2015-10-18 10:54 - 2015-10-18 10:55 - 00000000 ____D C:\AdwCleaner
2015-10-18 10:52 - 2015-10-18 10:52 - 01682432 _____ C:\Users\rainer\Downloads\AdwCleaner_5.013.exe
2015-10-18 10:30 - 2015-10-18 10:30 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-10-18 10:29 - 2015-10-18 10:29 - 00001110 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-10-18 10:29 - 2015-10-18 10:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-10-18 10:29 - 2015-10-18 10:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-10-18 10:29 - 2015-10-18 10:29 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-10-18 10:29 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-10-18 10:29 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-10-18 10:29 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2015-10-18 10:27 - 2015-10-18 10:27 - 22908888 _____ (Malwarebytes ) C:\Users\rainer\Downloads\mbam-setup-2.2.0.1024.exe
2015-10-16 21:24 - 2015-10-16 21:24 - 00070130 _____ C:\ComboFix.txt
2015-10-16 21:02 - 2015-10-16 21:24 - 00000000 ____D C:\ComboFix
2015-10-16 21:02 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-10-16 21:02 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-10-16 21:02 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-10-16 21:02 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-10-16 21:02 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-10-16 21:02 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-10-16 21:02 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-10-16 21:02 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-10-16 20:56 - 2015-10-16 21:24 - 00000000 ____D C:\Qoobox
2015-10-16 20:55 - 2015-10-16 21:22 - 00000000 ____D C:\Windows\erdnt
2015-10-16 20:54 - 2015-10-16 20:54 - 05636101 ____R (Swearware) C:\Users\rainer\Downloads\ComboFix.exe
2015-10-16 13:25 - 2015-10-16 20:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-10-15 21:02 - 2015-10-18 21:07 - 00000000 ___RD C:\Users\rainer\Dropbox
2015-10-15 21:02 - 2015-10-15 21:02 - 00001234 _____ C:\Users\rainer\Desktop\Dropbox.lnk
2015-10-15 09:08 - 2015-10-15 09:14 - 00038328 _____ C:\Users\rainer\Downloads\Addition.txt
2015-10-15 09:06 - 2015-10-19 08:36 - 00028456 _____ C:\Users\rainer\Downloads\FRST.txt
2015-10-15 09:05 - 2015-10-19 08:36 - 00000000 ____D C:\FRST
2015-10-15 09:04 - 2015-10-19 08:35 - 02196992 _____ (Farbar) C:\Users\rainer\Downloads\FRST64.exe
2015-10-15 08:30 - 2015-09-18 21:22 - 00025432 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-10-15 08:30 - 2015-09-18 21:19 - 01291264 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-10-15 08:30 - 2015-09-18 21:19 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-10-15 08:30 - 2015-09-18 21:19 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-10-15 08:30 - 2015-09-18 21:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-10-15 08:30 - 2015-09-18 21:19 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-10-15 08:30 - 2015-09-18 21:09 - 01163776 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-10-14 15:47 - 2015-10-14 15:47 - 00001167 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-10-14 15:47 - 2015-10-14 15:47 - 00001155 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-10-14 15:46 - 2015-10-14 15:46 - 42621984 _____ C:\Users\rainer\Downloads\firefox_setup_41.0.1 (2).exe
2015-10-14 15:46 - 2015-10-14 15:46 - 42621984 _____ C:\Users\rainer\Downloads\firefox_setup_41.0.1 (1).exe
2015-10-14 15:45 - 2015-10-14 15:46 - 42621984 _____ C:\Users\rainer\Downloads\firefox_setup_41.0.1.exe
2015-10-14 15:37 - 2015-10-14 15:37 - 00000000 ____D C:\Users\rainer\AppData\Roaming\Avira
2015-10-14 15:34 - 2015-10-05 15:51 - 00163544 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-10-14 15:34 - 2015-10-05 15:51 - 00141416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-10-14 15:34 - 2015-10-05 15:51 - 00074952 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-10-14 15:34 - 2015-10-05 15:51 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2015-10-14 15:33 - 2015-10-15 19:45 - 00000000 ____D C:\ProgramData\Package Cache
2015-10-14 15:33 - 2015-10-15 19:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-10-14 15:33 - 2015-10-15 19:45 - 00000000 ____D C:\Program Files (x86)\Avira
2015-10-14 15:32 - 2015-10-14 15:32 - 04515896 _____ (Avira Operations & Co. KG) C:\Users\rainer\Downloads\avira_de_av___ws (1).exe
2015-10-14 15:31 - 2015-10-14 15:31 - 04515896 _____ (Avira Operations & Co. KG) C:\Users\rainer\Downloads\avira_de_av___ws.exe
2015-10-14 08:37 - 2015-08-06 20:04 - 14176768 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-10-14 08:37 - 2015-08-06 20:03 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2015-10-14 08:37 - 2015-08-06 19:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-10-14 08:37 - 2015-08-06 19:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2015-10-14 08:36 - 2015-09-25 20:07 - 03168768 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-10-14 08:36 - 2015-09-25 20:07 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-10-14 08:36 - 2015-09-25 20:07 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-10-14 08:36 - 2015-09-25 20:07 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-10-14 08:36 - 2015-09-25 20:07 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-10-14 08:36 - 2015-09-25 20:07 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-10-14 08:36 - 2015-09-25 20:07 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-10-14 08:36 - 2015-09-25 20:06 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-10-14 08:36 - 2015-09-25 20:06 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-10-14 08:36 - 2015-09-25 20:06 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-10-14 08:36 - 2015-09-25 20:06 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-10-14 08:36 - 2015-09-25 19:59 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-10-14 08:36 - 2015-09-25 19:59 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-10-14 08:36 - 2015-09-25 19:59 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-10-14 08:36 - 2015-09-25 19:59 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-10-14 08:36 - 2015-09-25 19:58 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-10-14 08:36 - 2015-09-18 21:31 - 00391784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-10-14 08:36 - 2015-09-18 20:58 - 00345688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-10-14 08:36 - 2015-09-16 06:48 - 25851904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-10-14 08:36 - 2015-09-16 06:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-10-14 08:36 - 2015-09-16 06:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-10-14 08:36 - 2015-09-16 06:22 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-10-14 08:36 - 2015-09-16 06:21 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-10-14 08:36 - 2015-09-16 06:21 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-10-14 08:36 - 2015-09-16 06:21 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-10-14 08:36 - 2015-09-16 06:21 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-10-14 08:36 - 2015-09-16 06:21 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-10-14 08:36 - 2015-09-16 06:14 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-10-14 08:36 - 2015-09-16 06:13 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-10-14 08:36 - 2015-09-16 06:10 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-10-14 08:36 - 2015-09-16 06:09 - 05990912 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-10-14 08:36 - 2015-09-16 06:08 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-10-14 08:36 - 2015-09-16 06:08 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-10-14 08:36 - 2015-09-16 06:08 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-10-14 08:36 - 2015-09-16 06:08 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-10-14 08:36 - 2015-09-16 06:01 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-10-14 08:36 - 2015-09-16 05:58 - 20357632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-10-14 08:36 - 2015-09-16 05:58 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-10-14 08:36 - 2015-09-16 05:50 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-10-14 08:36 - 2015-09-16 05:46 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-10-14 08:36 - 2015-09-16 05:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-10-14 08:36 - 2015-09-16 05:45 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-10-14 08:36 - 2015-09-16 05:43 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-10-14 08:36 - 2015-09-16 05:41 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-10-14 08:36 - 2015-09-16 05:33 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-10-14 08:36 - 2015-09-16 05:33 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-10-14 08:36 - 2015-09-16 05:32 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-10-14 08:36 - 2015-09-16 05:32 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-10-14 08:36 - 2015-09-16 05:31 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-10-14 08:36 - 2015-09-16 05:31 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-10-14 08:36 - 2015-09-16 05:29 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-10-14 08:36 - 2015-09-16 05:29 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-10-14 08:36 - 2015-09-16 05:28 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-10-14 08:36 - 2015-09-16 05:28 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-10-14 08:36 - 2015-09-16 05:26 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-10-14 08:36 - 2015-09-16 05:26 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-10-14 08:36 - 2015-09-16 05:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-10-14 08:36 - 2015-09-16 05:24 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-10-14 08:36 - 2015-09-16 05:23 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-10-14 08:36 - 2015-09-16 05:22 - 14458368 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-10-14 08:36 - 2015-09-16 05:22 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-10-14 08:36 - 2015-09-16 05:22 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-10-14 08:36 - 2015-09-16 05:15 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-10-14 08:36 - 2015-09-16 05:11 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-10-14 08:36 - 2015-09-16 05:10 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-10-14 08:36 - 2015-09-16 05:07 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-10-14 08:36 - 2015-09-16 05:06 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-10-14 08:36 - 2015-09-16 05:05 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-10-14 08:36 - 2015-09-16 05:05 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-10-14 08:36 - 2015-09-16 05:04 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-10-14 08:36 - 2015-09-16 04:59 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-10-14 08:36 - 2015-09-16 04:58 - 12853760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-10-14 08:36 - 2015-09-16 04:58 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-10-14 08:36 - 2015-09-16 04:56 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-10-14 08:36 - 2015-09-16 04:55 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-10-14 08:36 - 2015-09-16 04:55 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-10-14 08:36 - 2015-09-16 04:48 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-10-14 08:36 - 2015-09-16 04:37 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-10-14 08:36 - 2015-09-16 04:34 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-10-14 08:36 - 2015-09-16 04:32 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-10-14 08:35 - 2015-10-01 20:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-10-14 08:35 - 2015-10-01 20:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-10-14 08:35 - 2015-10-01 20:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-10-14 08:35 - 2015-10-01 20:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-10-14 08:35 - 2015-10-01 20:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-10-14 08:35 - 2015-10-01 20:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-10-14 08:35 - 2015-10-01 20:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-10-14 08:35 - 2015-10-01 19:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-10-14 08:35 - 2015-10-01 19:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-10-14 08:35 - 2015-09-29 05:16 - 05569472 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-10-14 08:35 - 2015-09-29 05:13 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-10-14 08:35 - 2015-09-29 05:11 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-10-14 08:35 - 2015-09-29 05:10 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-10-14 08:35 - 2015-09-29 05:10 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-10-14 08:35 - 2015-09-29 05:10 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-10-14 08:35 - 2015-09-29 05:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-10-14 08:35 - 2015-09-29 05:09 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-10-14 08:35 - 2015-09-29 05:05 - 03990976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-10-14 08:35 - 2015-09-29 05:05 - 03936192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-10-14 08:35 - 2015-09-29 05:05 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-10-14 08:35 - 2015-09-29 05:05 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-10-14 08:35 - 2015-09-29 05:02 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:59 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-10-14 08:35 - 2015-09-29 04:59 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-10-14 08:35 - 2015-09-29 04:59 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-10-14 08:35 - 2015-09-29 04:59 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-10-14 08:35 - 2015-09-29 04:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-10-14 08:35 - 2015-09-29 04:59 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-10-14 08:35 - 2015-09-29 04:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-10-14 08:35 - 2015-09-29 04:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-10-14 08:35 - 2015-09-29 04:58 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-10-14 08:35 - 2015-09-29 04:58 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-10-14 08:35 - 2015-09-29 04:57 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-10-14 08:35 - 2015-09-29 04:57 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-10-14 08:35 - 2015-09-29 04:57 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-10-14 08:35 - 2015-09-29 04:57 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-10-14 08:35 - 2015-09-29 04:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-10-14 08:35 - 2015-09-29 04:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 03:50 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-10-14 08:35 - 2015-09-29 03:49 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-10-14 08:35 - 2015-09-29 03:49 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-10-14 08:35 - 2015-09-29 03:43 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-10-14 08:35 - 2015-09-29 03:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-10-14 08:35 - 2015-09-29 03:40 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 03:40 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 03:40 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-10-14 08:35 - 2015-09-29 03:40 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-10-14 08:35 - 2015-09-15 20:17 - 00157016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-10-14 08:35 - 2015-09-15 20:17 - 00097112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-10-14 08:35 - 2015-09-15 20:11 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-10-14 08:35 - 2015-09-15 20:11 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-10-14 08:35 - 2015-09-15 20:11 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-10-14 08:35 - 2015-09-15 20:11 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-10-14 08:35 - 2015-09-15 20:11 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-10-14 08:35 - 2015-09-15 20:11 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-10-14 08:35 - 2015-09-15 20:10 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-10-14 08:35 - 2015-09-15 19:36 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-10-14 08:35 - 2015-09-15 19:36 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-10-14 08:35 - 2015-09-15 19:36 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-10-14 08:35 - 2015-09-15 19:35 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2015-10-14 08:34 - 2015-07-18 15:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2015-10-11 21:35 - 2015-10-11 21:35 - 00000000 ____D C:\ProgramData\regid.1995-08.com.techsmith
2015-10-11 21:35 - 2015-10-11 21:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2015-10-11 10:27 - 2015-10-11 10:27 - 00000000 ____D C:\Users\rainer\AppData\Roaming\Dropbox
2015-10-11 10:27 - 2015-10-11 10:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-10-11 10:26 - 2015-10-19 08:37 - 00001214 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2015-10-11 10:26 - 2015-10-18 21:07 - 00000000 ____D C:\Users\rainer\AppData\Local\Dropbox
2015-10-11 10:26 - 2015-10-18 21:06 - 00001210 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2015-10-11 10:26 - 2015-10-11 10:32 - 00004210 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineUA
2015-10-11 10:26 - 2015-10-11 10:32 - 00003958 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskMachineCore
2015-10-11 10:26 - 2015-10-11 10:27 - 00000000 ____D C:\Program Files (x86)\Dropbox
2015-10-11 10:26 - 2015-10-11 10:26 - 00000000 ____D C:\ProgramData\Dropbox
2015-10-09 21:37 - 2015-10-19 07:21 - 00002046 _____ C:\Users\Public\Desktop\Google Slides.lnk
2015-10-09 21:37 - 2015-10-19 07:21 - 00002044 _____ C:\Users\Public\Desktop\Google Sheets.lnk
2015-10-09 21:37 - 2015-10-19 07:21 - 00002034 _____ C:\Users\Public\Desktop\Google Docs.lnk
2015-10-09 21:37 - 2015-10-19 07:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-10-09 21:36 - 2015-10-09 21:36 - 00929872 _____ (Google Inc.) C:\Users\rainer\Downloads\googledrivesync.exe
2015-10-09 14:21 - 2015-10-09 14:21 - 415136986 _____ C:\Windows\MEMORY.DMP
2015-10-09 14:21 - 2015-10-09 14:21 - 00286920 _____ C:\Windows\Minidump\100915-17097-01.dmp
2015-10-09 14:21 - 2015-10-09 14:21 - 00000000 ____D C:\Windows\Minidump
2015-10-06 09:05 - 2015-10-06 09:05 - 00000000 ____D C:\Users\rainer\AppData\Roaming\No Company Name
2015-10-04 20:44 - 2015-10-04 20:44 - 00019043 _____ C:\Users\rainer\Documents\Finanzen 01-10-2015.odt
2015-10-02 10:43 - 2015-10-02 10:43 - 00014169 _____ C:\Windows\DirectX.log
2015-10-02 10:43 - 2015-10-02 10:43 - 00002220 _____ C:\Users\Public\Desktop\ACDSee 18.lnk
2015-10-02 10:43 - 2015-10-02 10:43 - 00000000 ____D C:\Program Files (x86)\ACD Systems
2015-10-01 21:02 - 2015-10-01 21:02 - 00000000 ____D C:\Program Files (x86)\LibreOffice 5
2015-10-01 21:01 - 2015-10-01 21:01 - 00001426 _____ C:\Users\Public\Desktop\LibreOffice 5.0.lnk
2015-10-01 21:01 - 2015-10-01 21:01 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 5.0
2015-10-01 21:00 - 2015-10-01 21:01 - 00000000 ____D C:\Program Files\LibreOffice 5
2015-10-01 13:47 - 2015-10-01 13:47 - 00000000 ____D C:\Program Files (x86)\LibreOffice_4.4_SDK
2015-09-24 11:29 - 2015-08-05 19:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-09-24 11:29 - 2015-08-05 19:56 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-09-24 11:29 - 2015-08-05 19:56 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-09-24 11:29 - 2015-08-05 19:40 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-09-24 11:29 - 2015-07-15 05:17 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-09-24 11:29 - 2015-07-15 04:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-09-24 11:29 - 2015-07-09 19:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-09-24 11:29 - 2015-07-09 19:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-09-24 11:29 - 2015-07-09 19:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-09-24 11:29 - 2015-07-09 19:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-09-24 11:28 - 2015-07-23 02:02 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-09-24 11:28 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-09-24 11:28 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-09-24 11:28 - 2015-07-22 19:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-09-24 11:28 - 2015-07-22 19:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-09-24 11:28 - 2015-07-22 18:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-09-24 11:27 - 2015-08-27 20:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-09-24 11:27 - 2015-08-27 20:18 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-09-24 11:27 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-09-24 11:27 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-09-24 11:27 - 2015-08-27 19:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-09-24 11:27 - 2015-08-27 19:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-09-24 11:27 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2015-09-24 11:27 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-09-24 11:27 - 2015-06-25 12:06 - 00115136 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-09-24 11:27 - 2015-06-25 12:01 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-09-24 11:27 - 2015-06-25 12:01 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-09-24 11:27 - 2015-06-25 11:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-09-24 11:26 - 2015-09-02 05:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-09-24 11:26 - 2015-09-02 05:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-09-24 11:26 - 2015-09-02 05:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-09-24 11:26 - 2015-09-02 05:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-09-24 11:26 - 2015-09-02 04:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-09-24 11:26 - 2015-09-02 04:48 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-09-24 11:26 - 2015-09-02 04:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-09-24 11:26 - 2015-09-02 04:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-09-24 11:26 - 2015-09-02 03:51 - 03209216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-09-24 11:26 - 2015-09-02 03:47 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-09-24 11:26 - 2015-09-02 03:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-10-19 08:34 - 2012-12-26 15:36 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-10-19 08:09 - 2012-12-23 18:17 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-19 07:30 - 2009-07-14 06:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-19 07:30 - 2009-07-14 06:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-19 07:22 - 2014-10-17 14:48 - 00000000 ____D C:\Users\rainer\AppData\Local\CrashDumps
2015-10-19 07:18 - 2007-10-10 13:06 - 01786061 _____ C:\Windows\WindowsUpdate.log
2015-10-18 21:06 - 2015-08-16 09:52 - 00017704 _____ C:\Windows\setupact.log
2015-10-18 21:06 - 2012-12-23 18:17 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-18 21:06 - 2012-01-31 19:43 - 00000000 ____D C:\Users\rainer\AppData\Roaming\WTablet
2015-10-18 21:06 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-18 21:06 - 2007-10-10 13:12 - 00000000 ____D C:\ProgramData\NVIDIA
2015-10-18 10:57 - 2015-08-16 09:52 - 00152338 _____ C:\Windows\PFRO.log
2015-10-18 10:25 - 2012-12-26 21:54 - 00000000 ____D C:\Users\rainer\Documents\FinePrint-Dateien
2015-10-18 10:25 - 2012-02-01 14:52 - 00000072 _____ C:\Users\Public\LMDebug.log
2015-10-17 18:34 - 2012-12-26 15:36 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-10-17 18:34 - 2012-12-26 15:36 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-17 18:34 - 2012-12-26 15:36 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-10-16 21:38 - 2014-03-14 11:53 - 00000000 ____D C:\Program Files (x86)\Samsung
2015-10-16 21:16 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2015-10-16 20:44 - 2014-11-15 09:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-10-16 12:51 - 2014-11-14 22:01 - 00000000 ____D C:\ProgramData\Avira
2015-10-15 21:02 - 2012-01-31 10:38 - 00000000 ____D C:\Users\rainer
2015-10-15 10:15 - 2014-12-11 20:21 - 00000000 ____D C:\Windows\system32\appraiser
2015-10-15 10:15 - 2014-04-25 18:29 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-10-14 15:26 - 2012-01-31 15:27 - 00002365 _____ C:\Users\rainer\Desktop\Google Chrome.lnk
2015-10-14 08:50 - 2014-03-08 14:20 - 00000000 ____D C:\Windows\system32\MRT
2015-10-14 08:45 - 2012-02-01 18:03 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-10-14 08:43 - 2009-11-26 19:39 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-10-14 08:12 - 2009-07-14 07:13 - 01620684 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-14 08:12 - 2007-10-10 22:58 - 00699432 _____ C:\Windows\system32\perfh007.dat
2015-10-14 08:12 - 2007-10-10 22:58 - 00149572 _____ C:\Windows\system32\perfc007.dat
2015-10-13 19:55 - 2014-11-08 09:12 - 00000000 ____D C:\Users\rainer\AppData\Local\Downloaded Installations
2015-10-13 19:49 - 2015-06-20 13:42 - 00000000 ____D C:\ProgramData\Netzmanager
2015-10-13 14:16 - 2014-04-27 19:26 - 00000000 ____D C:\Users\rainer\AppData\Roaming\vlc
2015-10-11 10:26 - 2015-08-31 08:10 - 00000000 ____D C:\Users\rainer\Downloads\7z
2015-10-09 21:37 - 2012-01-31 12:40 - 00000000 ____D C:\Users\rainer\AppData\Local\Google
2015-10-09 21:37 - 2009-11-26 19:47 - 00000000 ____D C:\Program Files (x86)\Google
2015-10-09 13:34 - 2015-04-04 09:06 - 00000000 ___SD C:\Windows\system32\GWX
2015-10-08 09:44 - 2015-04-04 09:06 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-10-06 20:43 - 2014-11-08 09:12 - 00002215 _____ C:\Users\Public\Desktop\ACDSee Pro 8 (64-bit).lnk
2015-10-06 20:43 - 2014-11-08 09:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACD Systems
2015-10-06 20:37 - 2015-08-15 13:29 - 00096704 _____ C:\Users\rainer\AppData\Local\GDIPFONTCACHEV1.DAT
2015-10-06 20:36 - 2015-08-16 09:52 - 02329128 _____ C:\Windows\system32\FNTCACHE.DAT
2015-10-06 09:06 - 2012-01-31 19:48 - 00000000 ____D C:\adobe
2015-10-06 08:44 - 2014-08-15 14:02 - 00000000 ____D C:\Users\rainer\AppData\Local\Adobe
2015-10-05 22:04 - 2012-01-31 12:40 - 00000000 ____D C:\Users\rainer\AppData\Roaming\Adobe
2015-10-05 14:43 - 2014-11-08 09:14 - 00000000 ____D C:\Users\rainer\AppData\Local\ACD Systems
2015-10-03 13:21 - 2014-10-06 14:05 - 00000000 ____D C:\ProgramData\tmp
2015-10-02 14:18 - 2015-05-22 14:12 - 00072192 ___SH C:\Users\rainer\Downloads\Thumbs.db
2015-10-02 11:35 - 2015-01-04 15:15 - 00000000 __SHD C:\Users\rainer\AppData\LocalLow\EmieUserList
2015-10-02 11:35 - 2015-01-04 15:15 - 00000000 __SHD C:\Users\rainer\AppData\LocalLow\EmieBrowserModeList
2015-10-02 11:35 - 2014-11-14 21:02 - 00000000 __SHD C:\Users\rainer\AppData\LocalLow\EmieSiteList
2015-10-02 11:35 - 2014-11-14 21:02 - 00000000 __SHD C:\Users\rainer\AppData\Local\EmieUserList
2015-10-02 11:35 - 2014-11-14 21:02 - 00000000 __SHD C:\Users\rainer\AppData\Local\EmieSiteList
2015-10-02 11:35 - 2014-11-14 21:02 - 00000000 __SHD C:\Users\rainer\AppData\Local\EmieBrowserModeList
2015-09-26 10:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-09-24 22:07 - 2015-05-20 11:34 - 00000542 _____ C:\Users\Public\Desktop\CEWE FOTOSCHAU.lnk
2015-09-24 22:07 - 2014-10-06 14:05 - 00000554 _____ C:\Users\Public\Desktop\Saturn Fotoservice.lnk
2015-09-24 19:29 - 2009-07-14 09:45 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-24 19:29 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-09-24 11:04 - 2012-12-23 18:17 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-09-24 11:04 - 2012-12-23 18:17 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-09-24 11:04 - 2012-01-31 15:24 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2598399437-2432177153-1626090690-1000UA
2015-09-24 11:04 - 2012-01-31 15:24 - 00003700 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2598399437-2432177153-1626090690-1000Core
2015-09-24 11:04 - 2012-01-31 15:24 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2598399437-2432177153-1626090690-1000UA.job
2015-09-24 11:04 - 2012-01-31 15:24 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2598399437-2432177153-1626090690-1000Core.job

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2013-01-24 21:19 - 2013-01-24 21:19 - 0000000 _____ () C:\Users\rainer\AppData\Roaming\wklnhst.dat
2014-05-24 17:06 - 2014-08-02 09:56 - 0011264 _____ () C:\Users\rainer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2007-10-10 13:14 - 2007-10-10 13:15 - 0008463 _____ () C:\ProgramData\ArcadeDeluxe3.log
2009-11-26 19:31 - 2009-07-18 04:57 - 0036136 _____ (Oberon Media) C:\ProgramData\FullRemove.exe

Einige Dateien in TEMP:
====================
C:\Users\rainer\AppData\Local\Temp\avgnt.exe
C:\Users\rainer\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpkdbbat.dll
C:\Users\rainer\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-09-26 10:35

==================== Ende von FRST.txt ============================
         

--- --- ---

Flash und Adobe updaten.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

C:\Users\rainer\Documents\Downloads\pdfcreator-2_1_1-setup.exe

C:\Users\rainer\Downloads\PDFCreator-2_1_2-setup.exe
Emptytemp:
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
Combofix deinstallieren .

• Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
  
• Drücke bitte die + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
• Klicke auf OK.
  Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
• Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte DelFix herunter.

• Schließe alle offenen Programme.
• Starte die delfix.exe mit einem Doppelklick.
• Setze vor jede Funktion ein Häkchen.
• Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...und/oder das Forum mit einer kleinen Spende unterstützen.

Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank.
Meine Empfehlung:

Emsisoft

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.


Lade Software von einem sauberen Portal wie .
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwarecleaner .


Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Flash und Adobe updaten.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

C:\Users\rainer\Documents\Downloads\pdfcreator-2_1_1-setup.exe

C:\Users\rainer\Downloads\PDFCreator-2_1_2-setup.exe
Emptytemp:
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
Combofix deinstallieren .

• Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
  
• Drücke bitte die + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
• Klicke auf OK.
  Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
• Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte DelFix herunter.

• Schließe alle offenen Programme.
• Starte die delfix.exe mit einem Doppelklick.
• Setze vor jede Funktion ein Häkchen.
• Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...und/oder das Forum mit einer kleinen Spende unterstützen.

Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank.
Meine Empfehlung:

Emsisoft

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.


Lade Software von einem sauberen Portal wie .
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwarecleaner .


Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:18-10-2015
durchgeführt von rainer (2015-10-20 09:48:00) Run:1
Gestartet von C:\FRST
Geladene Profile: rainer (Verfügbare Profile: rainer)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
C:\Users\rainer\Documents\Downloads\pdfcreator-2_1_1-setup.exe

C:\Users\rainer\Downloads\PDFCreator-2_1_2-setup.exe
Emptytemp:
         
*****************

C:\Users\rainer\Documents\Downloads\pdfcreator-2_1_1-setup.exe => erfolgreich verschoben
C:\Users\rainer\Downloads\PDFCreator-2_1_2-setup.exe => erfolgreich verschoben
EmptyTemp: => 805.8 MB temporäre Dateien entfernt.


Das System musste neu gestartet werden.

==== Ende von Fixlog 09:49:48 ====
         

# DelFix v1.011 - Datei am 20/10/2015 um 10:24:37 erstellt
# Aktualisiert am 18/08/2015 von Xplode
# Benutzer : rainer - ACER
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Aktiviere die Benutzerkontensteuerung ... OK

~ Entferne die Bereinigungsprogramme ...

Gelöscht : C:\FRST
Gelöscht : C:\AdwCleaner
Gelöscht : C:\ComboFix.txt
Gelöscht : C:\Users\rainer\Desktop\JRT.exe
Gelöscht : C:\Users\rainer\Desktop\JRT.txt
Gelöscht : C:\Users\rainer\Downloads\Addition.txt
Gelöscht : C:\Users\rainer\Downloads\AdwCleaner_5.013.exe
Gelöscht : C:\Users\rainer\Downloads\esetsmartinstaller_deu.exe
Gelöscht : C:\Users\rainer\Downloads\FRST.txt
Gelöscht : C:\Users\rainer\Downloads\FRST64.exe
Gelöscht : C:\Users\rainer\Downloads\JRT.exe
Gelöscht : C:\Users\rainer\Downloads\SecurityCheck.exe
Gelöscht : HKLM\SOFTWARE\AdwCleaner
Gelöscht : HKLM\SOFTWARE\Swearware

~ Erstelle ein Backup der Registrierungsdatenbank ... OK

~ Lösche die Wiederherstellungspunkte ...

Gelöscht : RP #85 [ComboFix created restore point | 10/20/2015 08:08:04]

Ein neuer Wiederherstellungspunkt wurde erstellt !

~ Stelle die Systemeinstellungen wieder her ... OK

########## - EOF - ##########
         

Hi schrauber,
dies ist der Dank zwischendurch. Die Fehlermeldung bei meiner Firewall besteht noch immer!

Gruss