Avira deaktiviert und re-aktiviert sich automatisch

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:07-11-2015
durchgeführt von Claudio (Administrator) auf CLAUDIO (11-11-2015 22:38:40)
Gestartet von C:\Users\Claudio\Downloads
Geladene Profile: Claudio (Verfügbare Profile: Claudio)
Platform: Windows 10 Pro (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1026.13580.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avscan.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avscan.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-21] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508104 2015-09-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66320 2015-10-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [788176 2015-11-11] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-21] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2292912 2015-09-17] (Adobe Systems Incorporated)
HKU\S-1-5-21-4061816720-3657876876-2457947277-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3011152 2015-11-10] (Valve Corporation)
HKU\S-1-5-21-4061816720-3657876876-2457947277-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [55100016 2015-08-26] (Skype Technologies S.A.)
HKU\S-1-5-21-4061816720-3657876876-2457947277-1002\...\RunOnce: [Uninstall C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"
HKU\S-1-5-21-4061816720-3657876876-2457947277-1002\...\RunOnce: [Uninstall C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64"
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-28] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-28] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-28] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ISCTSystray.lnk [2015-08-21]
ShortcutTarget: ISCTSystray.lnk -> C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe (Intel Corporation)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{652a196b-5ec4-4e66-9837-e98b338c8b62}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-09-29] (Microsoft Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-10-28] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-09-29] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-22] (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-28] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-22] (Oracle Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-10-02] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Claudio\AppData\Roaming\Mozilla\Firefox\Profiles\02qgi9zt.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll [2015-11-10] ()
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-09-17] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-10] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-22] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-10-02] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-10-02] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-09-17] (Adobe Systems)
FF Extension: Avira Browser Safety - C:\Users\Claudio\AppData\Roaming\Mozilla\Firefox\Profiles\02qgi9zt.default\Extensions\abs@avira.com [2015-10-23] [ist nicht signiert]
FF Extension: Lightbeam - C:\Users\Claudio\AppData\Roaming\Mozilla\Firefox\Profiles\02qgi9zt.default\Extensions\jid1-F9UJ2thwoAm5gQ@jetpack.xpi [2015-08-22]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [669872 2015-09-15] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2015936 2015-09-29] (Adobe Systems, Incorporated)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [936544 2015-11-11] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [466408 2015-11-11] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [466408 2015-11-11] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1105952 2015-11-11] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [243968 2015-10-14] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2780856 2015-10-07] (Microsoft Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [198120 2013-11-07] ()
U2 OneSyncSvc_Session10; C:\Windows\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
U2 OneSyncSvc_Session10; C:\Windows\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
U3 PimIndexMaintenanceSvc_Session10; C:\Windows\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
U3 PimIndexMaintenanceSvc_Session10; C:\Windows\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
U3 UnistoreSvc_Session10; C:\Windows\System32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
U3 UnistoreSvc_Session10; C:\Windows\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
U3 UserDataSvc_Session10; C:\Windows\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
U3 UserDataSvc_Session10; C:\Windows\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [31992 2015-06-03] (Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-08-21] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [137800 2015-10-10] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [148632 2015-07-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2015-07-15] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [74440 2015-10-10] (Avira Operations GmbH & Co. KG)
S3 dc1-controller; C:\Windows\System32\drivers\dc1-controller.sys [50688 2015-07-10] (Microsoft Corp.)
R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21408 2013-08-08] ()
R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21920 2013-08-08] ()
R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [29088 2013-08-07] ()
R3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [46568 2013-08-07] ()
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [193336 2015-08-21] (Intel Corporation)
S3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek                                            )
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
R0 vsock; C:\Windows\System32\drivers\vsock.sys [76480 2015-01-07] (VMware, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-11-11 22:38 - 2015-11-11 22:39 - 00016727 _____ C:\Users\Claudio\Downloads\FRST.txt
2015-11-11 22:36 - 2015-11-11 22:38 - 02198528 _____ (Farbar) C:\Users\Claudio\Downloads\FRST64.exe
2015-11-11 22:25 - 2015-11-11 22:25 - 00016148 _____ C:\Windows\system32\CLAUDIO_Claudio_HistoryPrediction.bin
2015-11-08 22:16 - 2015-11-08 22:16 - 00007600 _____ C:\Users\Claudio\AppData\Local\Resmon.ResmonCfg
2015-11-03 23:17 - 2015-11-10 22:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-11-01 18:49 - 2015-11-01 18:49 - 00000000 ____D C:\Users\Claudio\AppData\Roaming\PDAppFlex
2015-11-01 17:58 - 2015-11-01 17:58 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2015-11-01 17:57 - 2015-11-01 17:57 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-11-01 17:54 - 2015-11-01 17:56 - 00000000 ____D C:\Program Files\Adobe
2015-11-01 17:54 - 2015-11-01 17:54 - 00001029 _____ C:\Users\Claudio\Desktop\Adobe Lightroom.lnk
2015-11-01 17:54 - 2015-11-01 17:54 - 00001029 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom.lnk
2015-11-01 17:46 - 2015-11-06 22:55 - 00000000 ___RD C:\Users\Claudio\Creative Cloud Files
2015-11-01 17:45 - 2015-11-01 17:45 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-11-01 17:44 - 2015-11-01 17:44 - 00001302 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2015-11-01 17:44 - 2015-11-01 17:44 - 00001290 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2015-11-01 17:41 - 2015-11-01 17:41 - 00686768 _____ (Adobe Systems Incorporated) C:\Users\Claudio\Downloads\CreativeCloudSet-Up.exe
2015-10-31 16:32 - 2015-10-28 00:38 - 21871616 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2015-10-31 16:32 - 2015-10-28 00:16 - 18801664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2015-10-31 16:32 - 2015-10-21 13:45 - 00541024 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-10-31 16:32 - 2015-10-21 13:44 - 00459104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-10-31 16:32 - 2015-10-21 13:43 - 01392480 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2015-10-31 16:32 - 2015-10-21 13:39 - 03621248 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-10-31 16:32 - 2015-10-21 13:00 - 24595968 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-10-31 16:32 - 2015-10-21 13:00 - 03248128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2015-10-31 16:32 - 2015-10-21 12:59 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2015-10-31 16:32 - 2015-10-21 12:57 - 02418688 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2015-10-31 16:32 - 2015-10-21 12:52 - 02987520 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2015-10-31 16:32 - 2015-10-21 12:50 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2015-10-31 16:32 - 2015-10-21 12:48 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-10-31 16:32 - 2015-10-21 12:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll
2015-10-31 16:32 - 2015-10-21 12:46 - 02179584 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2015-10-31 16:32 - 2015-10-21 12:46 - 01602560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-10-31 16:32 - 2015-10-21 12:44 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll
2015-10-31 16:32 - 2015-10-21 12:44 - 00579072 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2015-10-31 16:32 - 2015-10-21 12:43 - 02675200 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
2015-10-31 16:32 - 2015-10-21 12:42 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2015-10-31 16:32 - 2015-10-21 12:41 - 01795072 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2015-10-31 16:32 - 2015-10-21 12:40 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\dssvc.dll
2015-10-31 16:32 - 2015-10-21 12:38 - 00502272 _____ (Microsoft Corporation) C:\Windows\system32\dlnashext.dll
2015-10-31 16:32 - 2015-10-21 06:53 - 00961376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2015-10-31 16:32 - 2015-10-21 06:49 - 02878512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-10-31 16:32 - 2015-10-21 06:13 - 19326464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-10-31 16:32 - 2015-10-21 06:11 - 02647040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2015-10-31 16:32 - 2015-10-21 06:08 - 01918976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2015-10-31 16:32 - 2015-10-21 06:05 - 02639872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2015-10-31 16:32 - 2015-10-21 06:03 - 01380864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-10-31 16:32 - 2015-10-21 06:03 - 00311296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll
2015-10-31 16:32 - 2015-10-21 05:58 - 02049536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll
2015-10-31 16:32 - 2015-10-21 05:58 - 00464896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2015-10-31 16:32 - 2015-10-21 05:55 - 00441344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dlnashext.dll
2015-10-25 12:58 - 2015-10-25 12:58 - 00000000 ____D C:\ProgramData\ATI
2015-10-24 21:52 - 2015-10-24 21:52 - 00000000 ____D C:\Users\Claudio\AppData\Local\AMD
2015-10-24 19:18 - 2015-10-24 19:18 - 00062253 _____ C:\Windows\SysWOW64\CCCInstall_201510242018564393.log
2015-10-24 19:18 - 2015-10-24 19:18 - 00052907 _____ C:\Windows\SysWOW64\CCCInstall_201510242018116911.log
2015-10-24 19:18 - 2015-10-24 19:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-10-24 19:18 - 2015-10-24 19:18 - 00000000 ____D C:\Program Files\ATI Technologies
2015-10-24 19:17 - 2015-10-24 19:17 - 00000000 ____D C:\Users\Default\AppData\Roaming\ATI
2015-10-24 19:17 - 2015-10-24 19:17 - 00000000 ____D C:\Users\Default\AppData\Local\ATI
2015-10-24 19:17 - 2015-10-24 19:17 - 00000000 ____D C:\Users\Default User\AppData\Roaming\ATI
2015-10-24 19:17 - 2015-10-24 19:17 - 00000000 ____D C:\Users\Default User\AppData\Local\ATI
2015-10-24 19:16 - 2015-10-24 19:16 - 00243696 _____ C:\Windows\system32\clinfo.exe
2015-10-24 19:16 - 2015-10-24 19:16 - 00136176 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2015-10-24 19:16 - 2015-10-24 19:16 - 00122352 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2015-10-24 19:16 - 2015-10-24 19:16 - 00111600 _____ C:\Windows\system32\hsa-thunk64.dll
2015-10-24 19:16 - 2015-10-24 19:16 - 00111088 _____ C:\Windows\SysWOW64\hsa-thunk.dll
2015-10-24 19:16 - 2015-10-24 19:16 - 00103408 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2015-10-24 19:16 - 2015-10-24 19:16 - 00096752 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2015-10-24 19:16 - 2015-10-24 19:16 - 00047664 _____ C:\Windows\system32\kapp_ci.sbin
2015-10-24 19:16 - 2015-10-24 19:16 - 00043536 _____ C:\Windows\system32\kapp_si.sbin
2015-10-24 19:16 - 2015-10-24 19:16 - 00012784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\detoured.dll
2015-10-24 19:16 - 2015-10-24 19:16 - 00012784 _____ (Microsoft Corporation) C:\Windows\system32\detoured.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 47794160 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 30776304 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 25320432 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 15725552 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 14310896 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 09355016 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdxc64.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 07683096 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdxc32.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 03471376 _____ C:\Windows\SysWOW64\atiumdva.cap
2015-10-24 19:15 - 2015-10-24 19:15 - 03437632 _____ C:\Windows\system32\atiumd6a.cap
2015-10-24 19:15 - 2015-10-24 19:15 - 01196032 _____ C:\Windows\system32\amdocl_as64.exe
2015-10-24 19:15 - 2015-10-24 19:15 - 01070592 _____ C:\Windows\system32\amdocl_ld64.exe
2015-10-24 19:15 - 2015-10-24 19:15 - 01004032 _____ C:\Windows\SysWOW64\amdocl_as32.exe
2015-10-24 19:15 - 2015-10-24 19:15 - 00935408 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00935408 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00807424 _____ C:\Windows\SysWOW64\amdocl_ld32.exe
2015-10-24 19:15 - 2015-10-24 19:15 - 00662392 _____ C:\Windows\SysWOW64\atiapfxx.blb
2015-10-24 19:15 - 2015-10-24 19:15 - 00662392 _____ C:\Windows\system32\atiapfxx.blb
2015-10-24 19:15 - 2015-10-24 19:15 - 00375792 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2015-10-24 19:15 - 2015-10-24 19:15 - 00341488 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIODE.exe
2015-10-24 19:15 - 2015-10-24 19:15 - 00199664 _____ (AMD) C:\Windows\system32\atitmm64.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00177344 _____ C:\Windows\system32\ativce03.dat
2015-10-24 19:15 - 2015-10-24 19:15 - 00168944 _____ C:\Windows\system32\atieah64.exe
2015-10-24 19:15 - 2015-10-24 19:15 - 00165360 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00152560 _____ C:\Windows\SysWOW64\atieah32.exe
2015-10-24 19:15 - 2015-10-24 19:15 - 00150512 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00100816 _____ C:\Windows\system32\ativce02.dat
2015-10-24 19:15 - 2015-10-24 19:15 - 00097776 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00089584 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00088000 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00087992 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00083952 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00081168 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00081160 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00078320 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00078320 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00073712 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00071152 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00068080 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00064496 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00060912 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00059888 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ATIODCLI.exe
2015-10-24 19:15 - 2015-10-24 19:15 - 00057840 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00052208 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2015-10-24 19:15 - 2015-10-24 19:15 - 00038384 _____ (AMD) C:\Windows\system32\atimuixx.dll
2015-10-24 19:14 - 2015-10-24 19:15 - 27544560 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl12cl64.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 39712768 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 22327280 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl12cl.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 06686192 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 05216240 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00833800 _____ C:\Windows\system32\amdicdxx.dat
2015-10-24 19:14 - 2015-10-24 19:14 - 00631280 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr64.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00524272 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdlvr32.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00471312 _____ C:\Windows\system32\amdmiracast.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00213488 _____ C:\Windows\system32\amdgfxinfo64.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00198640 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00175648 _____ C:\Windows\system32\amde31a.dat
2015-10-24 19:14 - 2015-10-24 19:14 - 00151936 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00143344 _____ C:\Windows\system32\amdhdl64.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00138376 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00132080 _____ C:\Windows\SysWOW64\amdhdl32.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00117600 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00110312 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00059376 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2015-10-24 19:14 - 2015-10-24 19:14 - 00048112 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll
2015-10-17 16:50 - 2015-11-10 22:50 - 05286088 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-10-13 22:10 - 2015-10-10 08:12 - 00078528 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-10-13 22:10 - 2015-10-06 04:03 - 16708608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2015-10-13 22:10 - 2015-10-06 03:46 - 13027840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-10-13 22:10 - 2015-10-01 05:01 - 01294352 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-10-13 22:10 - 2015-10-01 05:01 - 01123400 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-10-13 22:10 - 2015-10-01 05:01 - 01018568 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-10-13 22:10 - 2015-10-01 05:01 - 00858408 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-10-13 22:10 - 2015-10-01 05:00 - 08020320 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-10-13 22:10 - 2015-10-01 04:03 - 00757760 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2015-10-13 22:10 - 2015-09-25 05:01 - 02573768 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-10-13 22:10 - 2015-09-25 05:01 - 00498016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-10-13 22:10 - 2015-09-25 04:56 - 22322624 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-10-13 22:10 - 2015-09-25 04:52 - 00980832 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2015-10-13 22:10 - 2015-09-25 04:33 - 01997336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-10-13 22:10 - 2015-09-25 04:26 - 20858360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-10-13 22:10 - 2015-09-25 04:11 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccountApis.dll
2015-10-13 22:10 - 2015-09-25 04:11 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\PhoneCallHistoryApis.dll
2015-10-13 22:10 - 2015-09-25 04:09 - 12504064 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-10-13 22:10 - 2015-09-25 04:07 - 01276416 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2015-10-13 22:10 - 2015-09-25 04:04 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-10-13 22:10 - 2015-09-25 04:04 - 00771072 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2015-10-13 22:10 - 2015-09-25 04:03 - 00796160 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2015-10-13 22:10 - 2015-09-25 04:03 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-10-13 22:10 - 2015-09-25 04:02 - 07523840 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2015-10-13 22:10 - 2015-09-25 04:02 - 00949248 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-10-13 22:10 - 2015-09-25 04:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-13 22:10 - 2015-09-25 04:01 - 04792320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-10-13 22:10 - 2015-09-25 04:01 - 03586560 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2015-10-13 22:10 - 2015-09-25 04:00 - 01423872 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll
2015-10-13 22:10 - 2015-09-25 04:00 - 01382400 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2015-10-13 22:10 - 2015-09-25 04:00 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll
2015-10-13 22:10 - 2015-09-25 04:00 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll
2015-10-13 22:10 - 2015-09-25 03:59 - 01205248 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll
2015-10-13 22:10 - 2015-09-25 03:59 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
2015-10-13 22:10 - 2015-09-25 03:59 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll
2015-10-13 22:10 - 2015-09-25 03:59 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll
2015-10-13 22:10 - 2015-09-25 03:59 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenance.dll
2015-10-13 22:10 - 2015-09-25 03:59 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\CallHistoryClient.dll
2015-10-13 22:10 - 2015-09-25 03:58 - 01871360 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-10-13 22:10 - 2015-09-25 03:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll
2015-10-13 22:10 - 2015-09-25 03:47 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhoneCallHistoryApis.dll
2015-10-13 22:10 - 2015-09-25 03:38 - 03580416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-10-13 22:10 - 2015-09-25 03:38 - 00650240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-10-13 22:10 - 2015-09-25 03:38 - 00574464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2015-10-13 22:10 - 2015-09-25 03:38 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-10-13 22:10 - 2015-09-25 03:37 - 00766976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-10-13 22:10 - 2015-09-25 03:37 - 00613376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2015-10-13 22:10 - 2015-09-25 03:37 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2015-10-13 22:10 - 2015-09-25 03:36 - 11262976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-10-13 22:10 - 2015-09-25 03:36 - 05454848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2015-10-13 22:10 - 2015-09-25 03:34 - 00928256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll
2015-10-13 22:10 - 2015-09-25 03:34 - 00625152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactApis.dll
2015-10-13 22:10 - 2015-09-25 03:34 - 00579584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentApis.dll
2015-10-13 22:10 - 2015-09-25 03:34 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ChatApis.dll
2015-10-13 22:10 - 2015-09-25 03:34 - 00525312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EmailApis.dll
2015-10-13 22:10 - 2015-09-25 03:33 - 00131072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CallHistoryClient.dll
2015-10-13 22:10 - 2015-09-25 03:32 - 01594368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-10-13 22:10 - 2015-09-25 03:32 - 00466432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll
2015-10-13 21:50 - 2015-11-11 22:26 - 00000000 ____D C:\Users\Claudio\Documents\Virtual Machines

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-11-11 22:38 - 2015-09-02 14:17 - 00000000 ____D C:\FRST
2015-11-11 22:35 - 2015-08-24 23:25 - 00000000 ____D C:\Users\Claudio\AppData\Local\VMware
2015-11-11 22:26 - 2015-08-24 23:18 - 00000000 ____D C:\Users\Claudio\AppData\Roaming\VMware
2015-11-11 22:12 - 2015-08-21 13:19 - 00000000 ____D C:\Program Files (x86)\Steam
2015-11-11 22:05 - 2015-08-21 03:28 - 00000000 ____D C:\Windows\system32\sru
2015-11-11 21:50 - 2015-08-21 13:14 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-11-11 21:49 - 2015-08-21 13:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-11-11 19:52 - 2015-08-21 03:28 - 00000000 ____D C:\Windows\AppReadiness
2015-11-11 19:51 - 2015-08-21 14:58 - 01801664 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-11 19:51 - 2015-08-21 03:32 - 00774822 _____ C:\Windows\system32\perfh007.dat
2015-11-11 19:51 - 2015-08-21 03:32 - 00155710 _____ C:\Windows\system32\perfc007.dat
2015-11-11 00:48 - 2015-08-21 21:30 - 00000000 ____D C:\Users\Claudio
2015-11-10 23:03 - 2015-08-21 03:24 - 00000000 ____D C:\Windows\CbsTemp
2015-11-10 22:57 - 2015-08-21 21:29 - 00000275 _____ C:\Windows\WindowsUpdate.log
2015-11-10 22:54 - 2015-08-21 14:54 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-10 22:54 - 2015-08-21 14:51 - 00000000 ____D C:\ProgramData\Package Cache
2015-11-10 22:54 - 2015-08-21 14:49 - 00012562 _____ C:\Windows\setupact.log
2015-11-10 22:53 - 2015-08-21 13:03 - 00280498 _____ C:\Windows\PFRO.log
2015-11-10 22:53 - 2015-08-21 12:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-11-10 22:51 - 2015-08-21 13:09 - 00001211 _____ C:\Users\Public\Desktop\Avira Launcher.lnk
2015-11-10 22:50 - 2015-08-21 13:14 - 00003870 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-11-08 21:09 - 2015-09-19 14:02 - 00000000 ____D C:\Users\Claudio\Desktop\Tor Browser
2015-11-06 22:55 - 2015-08-21 13:13 - 00000000 ____D C:\Users\Claudio\AppData\Local\Adobe
2015-11-02 21:34 - 2015-08-21 21:32 - 00002364 _____ C:\Users\Claudio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-11-02 21:34 - 2015-08-21 21:32 - 00000000 ___RD C:\Users\Claudio\OneDrive
2015-11-01 17:57 - 2015-08-21 21:30 - 00000000 ____D C:\Users\Claudio\AppData\Roaming\Adobe
2015-11-01 17:57 - 2015-08-21 13:18 - 00000000 ____D C:\ProgramData\Adobe
2015-11-01 17:43 - 2015-08-21 13:18 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-10-31 17:21 - 2015-08-21 03:28 - 00000000 ____D C:\Windows\rescache
2015-10-31 16:37 - 2015-08-21 03:22 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-10-31 16:36 - 2015-08-21 03:28 - 00000000 ____D C:\Windows\system32\appraiser
2015-10-30 21:47 - 2015-08-21 13:18 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-10-30 21:46 - 2015-08-21 13:18 - 00003972 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-10-28 20:55 - 2015-10-02 21:18 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-10-24 19:18 - 2015-08-21 15:00 - 00000000 ____D C:\Program Files (x86)\AMD
2015-10-24 19:18 - 2015-08-21 14:51 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2015-10-24 19:17 - 2015-08-21 14:51 - 00000000 ____D C:\AMD
2015-10-24 19:16 - 2015-08-09 06:10 - 00874480 _____ (AMD) C:\Windows\system32\coinst_15.20.dll
2015-10-24 19:15 - 2015-08-21 02:13 - 21648880 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2015-10-24 19:15 - 2015-08-21 02:13 - 12088000 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2015-10-24 19:15 - 2015-08-21 02:13 - 08009360 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2015-10-24 19:15 - 2015-08-21 02:13 - 07482552 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2015-10-24 19:15 - 2015-08-21 02:13 - 01479808 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2015-10-24 19:15 - 2015-08-21 02:13 - 01223552 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2015-10-24 19:15 - 2015-08-21 02:13 - 00674288 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2015-10-24 19:15 - 2015-08-21 02:13 - 00162232 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2015-10-24 19:15 - 2015-08-21 02:13 - 00112360 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2015-10-24 19:15 - 2015-08-09 06:13 - 10211008 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2015-10-24 19:15 - 2015-08-09 06:13 - 00143048 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2015-10-24 19:15 - 2015-08-09 06:10 - 00683504 _____ (AMD) C:\Windows\system32\atieclxx.exe
2015-10-24 19:15 - 2015-08-09 06:10 - 00255472 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2015-10-24 19:15 - 2014-04-18 03:42 - 08982440 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2015-10-24 19:15 - 2014-04-18 03:42 - 08864920 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2015-10-24 19:15 - 2014-04-18 03:42 - 00130072 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2015-10-24 19:15 - 2014-04-18 02:30 - 00451056 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2015-10-24 19:15 - 2014-04-18 02:09 - 01256432 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2015-10-22 23:32 - 2015-08-21 21:30 - 00000000 ____D C:\Users\Claudio\AppData\Local\Packages
2015-10-22 19:47 - 2015-08-21 13:15 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-10-22 19:47 - 2015-08-21 13:15 - 00000000 ____D C:\Users\Claudio\.oracle_jre_usage
2015-10-22 19:47 - 2015-08-21 13:15 - 00000000 ____D C:\ProgramData\Oracle
2015-10-22 19:47 - 2015-08-21 13:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-10-22 19:46 - 2015-08-21 13:14 - 00000000 ____D C:\Program Files (x86)\Java
2015-10-16 04:10 - 2015-08-21 03:29 - 00810488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-10-16 04:10 - 2015-08-21 03:29 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-14 20:34 - 2015-09-04 16:48 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-10-14 20:04 - 2015-08-21 12:42 - 00000000 ____D C:\Windows\system32\MRT
2015-10-14 20:02 - 2015-08-21 12:42 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-11-08 22:16 - 2015-11-08 22:16 - 0007600 _____ () C:\Users\Claudio\AppData\Local\Resmon.ResmonCfg
2015-08-21 14:51 - 2015-08-21 14:51 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\Claudio\AppData\Local\Temp\AutoDetectUtilApp.exe
C:\Users\Claudio\AppData\Local\Temp\avgnt.exe
C:\Users\Claudio\AppData\Local\Temp\jre-8u65-windows-au.exe
C:\Users\Claudio\AppData\Local\Temp\raptrpatch.exe
C:\Users\Claudio\AppData\Local\Temp\raptr_stub.exe
C:\Users\Claudio\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\Claudio\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-11-02 19:40

==================== Ende von FRST.txt ============================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:07-11-2015
durchgeführt von Claudio (2015-11-11 22:39:25)
Gestartet von C:\Users\Claudio\Downloads
Windows 10 Pro (X64) (2015-08-21 20:29:31)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-4061816720-3657876876-2457947277-500 - Administrator - Disabled)
Claudio (S-1-5-21-4061816720-3657876876-2457947277-1002 - Administrator - Enabled) => C:\Users\Claudio
DefaultAccount (S-1-5-21-4061816720-3657876876-2457947277-503 - Limited - Disabled)
Gast (S-1-5-21-4061816720-3657876876-2457947277-501 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.009.20077 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.3.0.151 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.245 - Adobe Systems Incorporated)
Adobe Lightroom (HKLM-x32\...\{8048A5DF-8A70-5BE1-954B-E0FDE1BD0D0D}) (Version: 6.2.1 - Adobe Systems Incorporated)
Age of Empires® III: Complete Collection (HKLM-x32\...\Steam App 105450) (Version:  - Ensemble Studios)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AMD Catalyst Install Manager (HKLM\...\{66AFB595-BC05-2913-7696-6D58F9B733E1}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Audacity 2.1.1 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.1 - Audacity Team)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.14.259 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM-x32\...\{59c4462d-a177-4d44-a95b-deda1be79844}) (Version: 1.1.49.18939 - Avira Operations GmbH & Co. KG)
Avira Launcher (x32 Version: 1.1.49.18939 - Avira Operations GmbH & Co. KG) Hidden
Call of Pripyat Complete v1.0.2 (HKLM-x32\...\Call of Pripyat Complete_is1) (Version:  - )
Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version:  - Colossal Order Ltd.)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
How to Survive (HKLM-x32\...\Steam App 250400) (Version:  - EKO Software)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{4F4D1244-12E7-4D6C-803D-3B16C13E8912}) (Version: 4.2.41.2633 - Intel Corporation)
Java 8 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218065F0}) (Version: 8.0.650.17 - Oracle Corporation)
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version:  - Valve)
METAL GEAR SOLID V: THE PHANTOM PAIN (HKLM-x32\...\Steam App 287700) (Version:  - Konami Digital Entertainment)
Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 15.0.4763.1003 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mozilla Firefox 42.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 de)) (Version: 42.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.3 - Notepad++ Team)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4763.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4763.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4763.1003 - Microsoft Corporation) Hidden
Prison Architect (HKLM-x32\...\Steam App 233450) (Version:  - Introversion Software)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.25.108.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7209 - Realtek Semiconductor Corp.)
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.5.0.9082 - Microsoft Corporation)
Skype™ 7.9 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.9.103 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
VMware Player (HKLM-x32\...\VMware_Player) (Version: 7.1.0 - VMware, Inc)
VMware Player (Version: 7.1.0 - VMware, Inc.) Hidden
Wolfenstein: The New Order (HKLM-x32\...\Steam App 201810) (Version:  - Machine Games)
Wolfenstein: The Old Blood  (HKLM-x32\...\Steam App 350080) (Version:  - MachineGames)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-4061816720-3657876876-2457947277-1002_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-A2C44E59D520}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4061816720-3657876876-2457947277-1002_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Claudio\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4061816720-3657876876-2457947277-1002_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)

==================== Wiederherstellungspunkte =========================

09-11-2015 23:27:36 Geplanter Prüfpunkt

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-08-21 03:28 - 2015-08-21 03:27 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {08992DCA-7970-45C3-AA70-50953CB43AA4} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-07] (Microsoft Corporation)
Task: {36EBE873-58D6-4729-BB48-544EFB3199FD} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-28] (Microsoft Corporation)
Task: {396494D1-EC57-42FA-BED4-B27385109EC1} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-07] (Microsoft Corporation)
Task: {70EEB769-103B-4FC5-B975-B9641E3AE4A4} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-10-14] (Microsoft Corporation)
Task: {86BEC575-F1E8-450F-8851-A1259E777ADE} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-10-28] (Microsoft Corporation)
Task: {98BF5B48-BB26-4D9B-87A9-9B8FC07D4FA2} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-28] (Microsoft Corporation)
Task: {CE61A708-7C96-4F8C-8D15-37C1CE7ABC0D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-10] (Adobe Systems Incorporated)
Task: {FF3EC3B3-D645-4FAE-B8F7-D77429E26065} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-08-21 12:41 - 2015-07-15 03:04 - 00032768 _____ () C:\Windows\SYSTEM32\licensemanagerapi.dll
2015-08-21 12:41 - 2015-08-11 10:14 - 00404480 _____ () C:\Windows\System32\diagtrack_wininternal.dll
2015-10-02 21:18 - 2015-10-07 19:28 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2013-11-07 16:12 - 2013-11-07 16:12 - 00198120 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
2013-11-07 16:12 - 2013-11-07 16:12 - 00054760 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
2013-11-07 16:12 - 2013-11-07 16:12 - 00034792 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetMon.dll
2015-09-30 22:33 - 2015-09-17 07:48 - 02494712 _____ () C:\Windows\system32\CoreUIComponents.dll
2015-09-30 22:33 - 2015-09-17 07:48 - 02494712 _____ () C:\Windows\System32\CoreUIComponents.dll
2015-09-11 19:02 - 2015-09-11 19:02 - 00803488 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2015-09-30 22:32 - 2015-09-17 06:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-07-10 11:59 - 2015-07-10 11:59 - 00143360 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll
2015-09-30 22:33 - 2015-09-17 06:44 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-09-30 22:32 - 2015-09-17 06:42 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-09-30 22:32 - 2015-09-17 06:42 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-09-30 22:33 - 2015-09-17 06:43 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-07-10 12:00 - 2015-07-10 17:43 - 00210432 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll
2015-10-28 20:44 - 2015-10-28 20:44 - 00012800 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1026.13580.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2015-10-28 20:44 - 2015-10-28 20:44 - 10958848 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1026.13580.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2015-10-28 20:43 - 2015-10-28 20:44 - 00245760 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1026.13580.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2015-02-06 17:40 - 2015-02-06 17:40 - 01301696 _____ () C:\Program Files (x86)\VMware\VMware Player\libxml2.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-4061816720-3657876876-2457947277-1002\...\sharepoint.com -> hxxps://tbzedu.sharepoint.com

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-4061816720-3657876876-2457947277-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Claudio\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKU\S-1-5-21-4061816720-3657876876-2457947277-1002\...\StartupApproved\Run: => "Skype"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{B658B8A6-AD5C-45CB-8BF5-FDD153214D68}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8892B68F-A037-4134-BB3A-0CE97CC0A76D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5E6023F6-409A-47A9-B1D7-4F50330614EB}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B53028A6-47C4-4417-81E3-0EB666994FED}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{DF5CC82A-E212-49DE-BE0A-36AAE068B542}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{38F3328E-1838-43FE-A6AC-A7AB2322DBDF}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{DD42890A-B1FE-4857-A416-3A2FF9B11965}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{C79D0CE4-8889-4EDF-BE66-72621AEA504B}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{F1688804-A61A-45A9-A2FD-B1A439CF6A8E}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{E9B1B6EE-168A-486F-B5FE-5B47EB42CDE7}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{1763A03F-7DC8-4C73-A0EC-221F20C22688}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{D8464153-4B51-423F-B4BD-B09BA002CB0F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{329C56D9-51BE-4CE0-B9E3-68139DEECA24}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{E853DBFE-B010-4ABA-BD3F-D087E0FF87A9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{D0ABC83B-03A5-4507-B74A-7929067F9ECD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{B796F4C6-C8FE-4826-B6ED-62BCEB4BCEA7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{A2700F51-E207-459F-A4A2-107F5116796F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{AE1837BB-6550-4783-BD5F-3879DBDE49F0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{47569AC1-9DC4-4D9F-A353-FE5094A2A35A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{567229FD-BCD7-4AA3-99EC-0612CB3E9999}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{7FB8E5EC-0225-41B4-B36F-C914BA3DC2DC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{D5E2F8D7-096B-4404-9561-B931A96B91BC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{B497F51A-EC7F-41EE-924D-AC6999A88E31}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\How to Survive\HowToSurvive.exe
FirewallRules: [{23245119-4D0A-432B-8E4C-83500BACCB09}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\How to Survive\HowToSurvive.exe
FirewallRules: [{90B97F47-FF7F-48AB-A05D-3639F7C0AA7B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\How to Survive\Detect.exe
FirewallRules: [{641E733C-9456-48F4-8F96-F244D2597458}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\How to Survive\Detect.exe
FirewallRules: [{D078B213-0DE4-45CB-AEDB-4A85D6E81EC1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{4AFB9AE3-6487-45A9-BE15-01AEBD3A31E4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{84AC50B6-A352-49EF-9C2B-AC73BF0D848B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{E7110C9B-2542-43AE-B0E8-1ECDA7CD4509}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{BBCC6C41-94F8-487C-B42E-151D2964E23C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{29EA9823-CB74-400B-940C-DB5E2CC997C8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{E329F17E-7CFA-41A9-BA40-9E93F2DB9BE9}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
FirewallRules: [{AE12E3D2-C5E2-405B-8C39-4F90E3419A55}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
FirewallRules: [TCP Query User{FD60053B-5EDD-4BFD-BCBB-18EEF3504459}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe
FirewallRules: [UDP Query User{4B9DE888-9F17-4074-83D0-1E92735C0A7E}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe
FirewallRules: [{9FAC1267-133F-44E9-88D6-8355AE7D1EF1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{7D9CCDD3-0BCE-434A-8BA3-349B2FF18787}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{CA8525DE-40FF-43BA-B6D9-7984A0B023CE}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{95B909C7-F2D9-4583-A149-1975E02984D6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MGS_TPP\mgsvtpp.exe
FirewallRules: [{F082D2AA-BB08-4CF6-9B80-D7E680750261}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MGS_TPP\mgsvtpp.exe
FirewallRules: [{4F2A624E-3AD1-431C-B891-824E0D1BC75D}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{7EEEE0E9-20C2-408A-907B-0A8CB2C6A724}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{63777E6D-90A7-4AF7-8B78-D5205836B187}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{6DED0556-92D7-4F66-AA0A-A5AE49C1D966}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{DFE3B2A9-8119-4C43-A4AF-961B8E491D43}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{51B8856C-2F60-471C-9084-3AF3FD9458A1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{1E731C62-A908-41E9-8182-8A8DFF2E2C08}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E727AD0A-1A60-4373-B133-70134ADE0116}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Wolfenstein.The.New.Order\WolfNewOrder_x64.exe
FirewallRules: [{AC90C3B7-1734-4782-8C74-E6AE3DE71D12}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Wolfenstein.The.New.Order\WolfNewOrder_x64.exe
FirewallRules: [{9FC60C9C-0A2D-41F5-8CDE-6E5330AF1DC5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Wolfenstein The Old Blood\WolfOldBlood_x64.exe
FirewallRules: [{86A164DA-2370-4BF6-B092-DAE86BB3C89F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Wolfenstein The Old Blood\WolfOldBlood_x64.exe

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/10/2015 01:40:14 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CLAUDIO)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/09/2015 11:27:40 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (11/07/2015 02:19:14 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CLAUDIO)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/04/2015 09:13:37 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CLAUDIO)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/04/2015 01:13:48 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CLAUDIO)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/03/2015 04:36:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CLAUDIO)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/03/2015 02:04:45 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CLAUDIO)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/02/2015 12:29:26 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: CLAUDIO)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/01/2015 05:44:00 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (10/31/2015 04:32:37 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.


Systemfehler:
=============
Error: (11/11/2015 12:48:31 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/10/2015 11:09:06 PM) (Source: DCOM) (EventID: 10016) (User: CLAUDIO)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}CLAUDIOClaudioS-1-5-21-4061816720-3657876876-2457947277-1002LocalHost (unter Verwendung von LRPC)Microsoft.WindowsStore_2015.21.12.0_x64__8wekyb3d8bbweS-1-15-2-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157

Error: (11/10/2015 10:54:01 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎10.‎11.‎2015 um 15:35:42 unerwartet heruntergefahren.

Error: (11/10/2015 04:03:43 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session9" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/10/2015 02:35:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (11/10/2015 02:35:03 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (11/10/2015 01:40:14 AM) (Source: DCOM) (EventID: 10010) (User: CLAUDIO)
Description: CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca

Error: (11/10/2015 01:40:10 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session8" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/08/2015 11:59:35 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session7" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/07/2015 09:59:38 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session6" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.


CodeIntegrity:
===================================
  Date: 2015-09-19 23:06:46.913
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Claudio\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2015-09-19 23:06:46.783
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-4460 CPU @ 3.20GHz
Prozentuale Nutzung des RAM: 29%
Installierter physikalischer RAM: 8131.86 MB
Verfügbarer physikalischer RAM: 5758.24 MB
Summe virtueller Speicher: 9859.86 MB
Verfügbarer virtueller Speicher: 6973.28 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:930.58 GB) (Free:728.79 GB) NTFS
Drive f: (GIBBIX2015M) (Fixed) (Total:232.89 GB) (Free:83.08 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: FF4BC7EE)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=930.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 1 (Size: 232.9 GB) (Disk ID: 512D4A1C)
Partition 1: (Not Active) - (Size=232.9 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================