Hallo,

ich habe schon wieder ein Problem, diesmal von mir selbst verursacht. Ich habe einen alten Memory stick eingesteckt und dann hat Bitdefender Alarm geschlagen Gefunden hat er Gen:Trojan.Heur.AutoIT.3 und Trojan.AutorunINF.Gen. Ich habe beides löschen lassen und den Stick weggeschmissen .

Ich habe zur Sicherheit mal ein FRST Protokoll erstelen lassen, vielleicht könnte sich das jemand mal anschauen und mir sagen ob ich noch ein Problem habe:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:30-11-2015
durchgeführt von *** (Administrator) auf ***-PC (01-12-2015 07:30:45)
Gestartet von C:\Users\***\Desktop
Geladene Profile: *** &  (Verfügbare Profile: ***)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\SA3\CxUtilSvc.exe
(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe
() C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\SA3\SmartAudio3.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
(CyberLink Corp.) C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe
(cyberlink) C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDGesture.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\odscanui.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2894640 2012-03-14] (ELAN Microelectronics Corp.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SA3\SACpl.exe [1654400 2012-02-21] (Conexant Systems, Inc.)
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [178960 2012-03-15] (Intel Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [DellStage] => C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe [2195824 2012-02-01] ()
HKLM\...\Run: [Stage Remote] => C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe [2022976 2011-06-28] ()
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [497648 2010-07-29] (Adobe Systems Incorporated)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe [1603544 2015-11-16] (Bitdefender)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [636032 2012-03-26] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation)
HKLM-x32\...\Run: [Dell Webcam Central] => C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [577024 2012-03-06] (Creative Technology Ltd)
HKLM-x32\...\Run: [Dell DataSafe Online] => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe [1117528 2010-08-26] (Dell, Inc.)
HKLM-x32\...\Run: [RemoteControl9] => C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2010-10-01] (CyberLink Corp.)
HKLM-x32\...\Run: [PDVD9LanguageShortcut] => C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe [50472 2010-09-18] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared Files\brs.exe [76872 2012-03-27] (cyberlink)
HKLM-x32\...\Run: [NeroLauncher] => C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe [66872 2012-03-10] ()
HKLM-x32\...\Run: [AccuWeatherWidget] => C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe [968048 2012-02-01] ()
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2012-11-13] ()
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1263512 2012-11-30] ()
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139264 2013-05-14] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4522496 2012-12-27] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrHelp] => C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe [2009088 2013-01-18] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-11-28] (Geek Software GmbH)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [36713096 2015-11-05] (Dropbox, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\Run: [Bitdefender-Geldbörse-Agent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe [790880 2015-11-16] (Bitdefender)
HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\RunOnce: [Adobe Speed Launcher] => 1448838176
HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Bitdefender-Geldbörse-Agent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe [790880 2015-11-16] (Bitdefender)
HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [Adobe Speed Launcher] => 1448838176
HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2015-01-07]
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{74EF4DF4-F545-4B24-97D4-53AEC75D7B98}: [DhcpNameServer] 192.168.177.1 192.168.177.2
Tcpip\..\Interfaces\{7AC580F9-788B-43B5-9282-B1715F577528}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{BAF2DFBA-5D02-4D65-B321-5EA1F317205E}: [DhcpNameServer] 192.168.2.1 192.168.2.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1476551734-19124195-2179231302-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1476551734-19124195-2179231302-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> {295B9C87-9E71-4AEB-8860-AAB046CDF146} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDR&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {295B9C87-9E71-4AEB-8860-AAB046CDF146} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDR&src=IE-SearchBox
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1476551734-19124195-2179231302-1000 -> {295B9C87-9E71-4AEB-8860-AAB046CDF146} URL = 
SearchScopes: HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {295B9C87-9E71-4AEB-8860-AAB046CDF146} URL = 
BHO: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2015-11-16] (Bitdefender)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll [2015-11-16] (Bitdefender)
BHO-x32: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12] (DivX, LLC)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-19] (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-19] (Oracle Corporation)
Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2015-11-16] (Bitdefender)
Toolbar: HKLM-x32 - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll [2015-11-16] (Bitdefender)
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/121022/CTPID.cab

FireFox:
========
FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\6vaho56e.default-1444080391990
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll [2015-11-11] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-11] ()
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2011-12-13] (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-19] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-19] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Extension: uBlock Origin - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\6vaho56e.default-1444080391990\Extensions\uBlock0@raymondhill.net.xpi [2015-11-25]
FF HKLM\...\Firefox\Extensions: [bdwteffv19@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\\antispam32\bdwteff
FF Extension: Bitdefender Wallet - C:\Program Files\Bitdefender\Bitdefender 2015\\antispam32\bdwteff [2015-11-18] [ist nicht signiert]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext
FF Extension: Bitdefender Antispam Toolbar - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext [2015-06-10] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &video& - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013-01-05] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [bdwteffv19@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\\antispam32\bdwteff
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext
FF HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\v3y2x47w.default\extensions\cliqz@cliqz.com => nicht gefunden
FF HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\v3y2x47w.default\extensions\cliqz@cliqz.com => nicht gefunden

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [fabcmochhfpldjekobfaaggijgohadih] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-12-12]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe [78144 2015-11-16] (Bitdefender)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2012-10-26] (Brother Industries, Ltd.) [Datei ist nicht signiert]
S2 CLKMSVC10_9EC60124; C:\Program Files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe [242448 2012-03-27] (CyberLink)
R2 CxUtilSvc; C:\Program Files\Conexant\SA3\CxUtilSvc.exe [109184 2012-05-18] (Conexant Systems, Inc.)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-22] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-22] (Dropbox, Inc.)
S2 DellDigitalDelivery; c:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe [166912 2012-04-10] (Dell Products, LP.) [Datei ist nicht signiert]
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [382312 2015-10-29] (Digital Wave Ltd.)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2011-12-08] ()
S2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1363160 2014-11-28] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [765144 2014-11-28] (Secunia)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe [100816 2015-11-16] (Bitdefender)
R2 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [248736 2015-05-11] ()
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe [1561344 2015-11-16] (Bitdefender)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [594704 2011-12-08] (Intel® Corporation)
S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [32896 2012-03-20] (Advanced Micro Devices, Inc.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1600512 2015-11-16] (BitDefender)
R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [282000 2015-11-16] (BitDefender)
R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [775424 2015-11-16] (BitDefender)
R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2014-12-15] (BitDefender LLC)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107080 2012-10-29] (BitDefender LLC)
S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [76944 2012-04-17] (BitDefender)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [160032 2015-11-16] (BitDefender LLC)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2015-12-01] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2014-11-28] (Secunia)
R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [477272 2015-11-16] (BitDefender S.R.L.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-01 07:25 - 2015-12-01 07:30 - 00049996 _____ C:\Users\***\Desktop\Addition.txt
2015-12-01 07:25 - 2015-12-01 07:25 - 00380416 _____ C:\Users\***\Desktop\Gmer-19357.exe
2015-12-01 07:23 - 2015-12-01 07:30 - 00029566 _____ C:\Users\***\Desktop\FRST.txt
2015-12-01 07:23 - 2015-12-01 07:30 - 00000000 ____D C:\FRST
2015-12-01 07:20 - 2015-12-01 07:21 - 02350080 _____ (Farbar) C:\Users\***\Desktop\FRST64.exe
2015-12-01 07:18 - 2015-12-01 07:18 - 00000000 _____ C:\Users\***\defogger_reenable
2015-12-01 07:17 - 2015-12-01 07:17 - 00050477 _____ C:\Users\***\Desktop\Defogger.exe
2015-11-27 18:33 - 2015-11-27 18:33 - 00000000 ____D C:\Users\***\Desktop\GAMP 5 Buch
2015-11-27 12:43 - 2015-11-27 12:43 - 00001648 _____ C:\Users\***\Desktop\GesammelteWerke.lnk
2015-11-26 06:54 - 2015-11-27 12:11 - 00000000 ____D C:\Users\***\Desktop\Word
2015-11-17 20:20 - 2015-11-17 20:44 - 187432960 _____ C:\Users\***\Downloads\DSM_DS214play_5644.pat
2015-11-17 19:45 - 2015-11-17 20:13 - 170137600 _____ C:\Users\***\Downloads\DSM_DS115_5644.pat
2015-11-17 19:39 - 2015-11-17 19:39 - 00001162 _____ C:\Users\Public\Desktop\Synology Assistant.lnk
2015-11-17 19:39 - 2015-11-17 19:39 - 00000000 ____D C:\ProgramData\Synology
2015-11-17 19:39 - 2015-11-17 19:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Synology
2015-11-17 19:39 - 2015-11-17 19:39 - 00000000 ____D C:\Program Files (x86)\Synology
2015-11-17 19:38 - 2015-11-17 19:39 - 08801552 _____ C:\Users\***\Downloads\SynologyAssistantSetup-5.2-5566.exe
2015-11-16 17:26 - 2015-11-16 17:26 - 00282000 _____ (BitDefender) C:\Windows\system32\Drivers\avchv.sys
2015-11-16 17:26 - 2015-11-16 17:26 - 00160032 _____ (BitDefender LLC) C:\Windows\system32\Drivers\gzflt.sys
2015-11-16 17:17 - 2015-11-16 17:19 - 81413837 _____ C:\Users\***\Downloads\BDBAD5A9-93D4-4763-9EEA-3CD5EA3C20C4_945AF37E-8CE3-40A2-9359-2A9AA8CF0AFE.zip
2015-11-12 15:52 - 2015-11-03 18:55 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-11-11 18:34 - 2015-11-03 23:10 - 00390344 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-11-11 18:34 - 2015-11-03 22:51 - 00342728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-11-11 18:34 - 2015-10-31 00:46 - 25818624 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-11-11 18:34 - 2015-10-31 00:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-11-11 18:34 - 2015-10-31 00:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-11-11 18:34 - 2015-10-31 00:25 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-11-11 18:34 - 2015-10-31 00:25 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-11-11 18:34 - 2015-10-31 00:25 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-11-11 18:34 - 2015-10-31 00:25 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-11-11 18:34 - 2015-10-31 00:24 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-11-11 18:34 - 2015-10-31 00:24 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-11-11 18:34 - 2015-10-31 00:17 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-11-11 18:34 - 2015-10-31 00:16 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-11-11 18:34 - 2015-10-31 00:13 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-11-11 18:34 - 2015-10-31 00:12 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-11-11 18:34 - 2015-10-31 00:12 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-11-11 18:34 - 2015-10-31 00:11 - 05990912 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-11-11 18:34 - 2015-10-31 00:11 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-11-11 18:34 - 2015-10-31 00:11 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-11-11 18:34 - 2015-10-31 00:04 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-11-11 18:34 - 2015-10-31 00:01 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-11-11 18:34 - 2015-10-30 23:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-11-11 18:34 - 2015-10-30 23:53 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-11-11 18:34 - 2015-10-30 23:52 - 20331520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-11-11 18:34 - 2015-10-30 23:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-11-11 18:34 - 2015-10-30 23:49 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-11-11 18:34 - 2015-10-30 23:47 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-11-11 18:34 - 2015-10-30 23:46 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-11-11 18:34 - 2015-10-30 23:46 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-11-11 18:34 - 2015-10-30 23:45 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-11-11 18:34 - 2015-10-30 23:45 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-11-11 18:34 - 2015-10-30 23:44 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-11-11 18:34 - 2015-10-30 23:44 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-11-11 18:34 - 2015-10-30 23:42 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-11-11 18:34 - 2015-10-30 23:39 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-11-11 18:34 - 2015-10-30 23:39 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-11-11 18:34 - 2015-10-30 23:37 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-11-11 18:34 - 2015-10-30 23:36 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-11-11 18:34 - 2015-10-30 23:36 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-11-11 18:34 - 2015-10-30 23:36 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-11-11 18:34 - 2015-10-30 23:34 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-11-11 18:34 - 2015-10-30 23:32 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-11-11 18:34 - 2015-10-30 23:31 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-11-11 18:34 - 2015-10-30 23:29 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-11-11 18:34 - 2015-10-30 23:29 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-11-11 18:34 - 2015-10-30 23:28 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-11-11 18:34 - 2015-10-30 23:23 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-11-11 18:34 - 2015-10-30 23:22 - 14457856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-11-11 18:34 - 2015-10-30 23:21 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-11-11 18:34 - 2015-10-30 23:19 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-11-11 18:34 - 2015-10-30 23:18 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-11-11 18:34 - 2015-10-30 23:17 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-11-11 18:34 - 2015-10-30 23:17 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-11-11 18:34 - 2015-10-30 23:16 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-11-11 18:34 - 2015-10-30 23:11 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-11-11 18:34 - 2015-10-30 23:10 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-11-11 18:34 - 2015-10-30 23:09 - 12854272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-11-11 18:34 - 2015-10-30 23:09 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-11-11 18:34 - 2015-10-30 23:09 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-11-11 18:34 - 2015-10-30 23:04 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-11-11 18:34 - 2015-10-30 22:53 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-11-11 18:34 - 2015-10-30 22:51 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-11-11 18:34 - 2015-10-30 22:48 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-11-11 18:34 - 2015-10-30 22:46 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-11-11 18:34 - 2015-10-20 19:42 - 03168768 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-11-11 18:34 - 2015-10-20 19:42 - 02608128 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-11-11 18:34 - 2015-10-20 19:42 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-11-11 18:34 - 2015-10-20 19:42 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-11-11 18:34 - 2015-10-20 19:42 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-11-11 18:34 - 2015-10-20 19:42 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-11-11 18:34 - 2015-10-20 19:42 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-11-11 18:34 - 2015-10-20 19:41 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-11-11 18:34 - 2015-10-20 19:41 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-11-11 18:34 - 2015-10-20 19:41 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-11-11 18:34 - 2015-10-20 19:41 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-11-11 18:34 - 2015-10-20 18:46 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-11-11 18:34 - 2015-10-20 18:46 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-11-11 18:34 - 2015-10-20 18:46 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-11-11 18:34 - 2015-10-20 18:46 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-11-11 18:34 - 2015-10-20 18:45 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-11-11 18:33 - 2015-10-20 02:12 - 05570496 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-11-11 18:33 - 2015-10-20 02:12 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-11-11 18:33 - 2015-10-20 02:12 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-11-11 18:33 - 2015-10-20 02:09 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-11-11 18:33 - 2015-10-20 02:06 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-11-11 18:33 - 2015-10-20 02:06 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-11-11 18:33 - 2015-10-20 02:06 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-11-11 18:33 - 2015-10-20 02:06 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-11-11 18:33 - 2015-10-20 02:05 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-11-11 18:33 - 2015-10-20 02:05 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-11-11 18:33 - 2015-10-20 02:05 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-11-11 18:33 - 2015-10-20 02:05 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-11-11 18:33 - 2015-10-20 02:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-11-11 18:33 - 2015-10-20 02:05 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-11-11 18:33 - 2015-10-20 02:05 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-11-11 18:33 - 2015-10-20 02:05 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-11-11 18:33 - 2015-10-20 02:05 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-11-11 18:33 - 2015-10-20 02:05 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-11-11 18:33 - 2015-10-20 02:05 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-11-11 18:33 - 2015-10-20 02:05 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-11-11 18:33 - 2015-10-20 02:05 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-11-11 18:33 - 2015-10-20 02:05 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-11-11 18:33 - 2015-10-20 02:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-11-11 18:33 - 2015-10-20 02:05 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-11-11 18:33 - 2015-10-20 02:05 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-11-11 18:33 - 2015-10-20 02:05 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-11-11 18:33 - 2015-10-20 02:05 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-11-11 18:33 - 2015-10-20 02:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-11-11 18:33 - 2015-10-20 02:05 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-11-11 18:33 - 2015-10-20 02:04 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-11-11 18:33 - 2015-10-20 02:04 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-11-11 18:33 - 2015-10-20 02:04 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-11-11 18:33 - 2015-10-20 02:00 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-11-11 18:33 - 2015-10-20 01:59 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:52 - 03991488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-11-11 18:33 - 2015-10-20 01:52 - 03935680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-11-11 18:33 - 2015-10-20 01:48 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-11-11 18:33 - 2015-10-20 01:45 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-11-11 18:33 - 2015-10-20 01:45 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-11-11 18:33 - 2015-10-20 01:45 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-11-11 18:33 - 2015-10-20 01:45 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-11-11 18:33 - 2015-10-20 01:45 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-11-11 18:33 - 2015-10-20 01:45 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-11-11 18:33 - 2015-10-20 01:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-11-11 18:33 - 2015-10-20 01:45 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-11-11 18:33 - 2015-10-20 01:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-11-11 18:33 - 2015-10-20 01:45 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-11-11 18:33 - 2015-10-20 01:45 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-11-11 18:33 - 2015-10-20 01:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-11-11 18:33 - 2015-10-20 01:44 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-11-11 18:33 - 2015-10-20 01:44 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-11-11 18:33 - 2015-10-20 01:44 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-11-11 18:33 - 2015-10-20 01:44 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-11-11 18:33 - 2015-10-20 01:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-11-11 18:33 - 2015-10-20 01:44 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-11-11 18:33 - 2015-10-20 01:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-11-11 18:33 - 2015-10-20 01:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 00:41 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-11-11 18:33 - 2015-10-20 00:40 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-11-11 18:33 - 2015-10-20 00:40 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-11-11 18:33 - 2015-10-20 00:29 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-11-11 18:33 - 2015-10-20 00:29 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-11-11 18:33 - 2015-10-20 00:27 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 00:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 00:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-11-11 18:33 - 2015-10-20 00:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-11-11 18:33 - 2015-09-23 14:15 - 00460776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-11-11 18:33 - 2015-09-23 14:15 - 00299632 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2015-11-11 18:33 - 2015-09-23 14:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2015-11-11 18:32 - 2015-10-29 18:50 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-11-11 18:32 - 2015-10-29 18:50 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-11-11 18:32 - 2015-10-29 18:50 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-11-11 18:32 - 2015-10-29 18:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-11-11 18:32 - 2015-10-29 18:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2015-11-11 18:32 - 2015-10-29 18:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2015-11-11 18:32 - 2015-10-29 18:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-11-11 18:32 - 2015-10-13 17:41 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-11-11 18:32 - 2015-10-13 17:40 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-11-11 18:32 - 2015-10-13 05:57 - 00950720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-11-11 18:32 - 2015-10-01 19:00 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-11-11 18:32 - 2015-10-01 19:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-11-11 18:32 - 2015-10-01 18:50 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-11-09 22:09 - 2015-11-09 22:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-11-06 22:54 - 2015-11-06 22:54 - 00001072 _____ C:\Users\Public\Desktop\Exact Audio Copy.lnk
2015-11-06 22:54 - 2015-11-06 22:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Exact Audio Copy
2015-11-06 22:54 - 2015-11-06 22:54 - 00000000 ____D C:\Program Files (x86)\Exact Audio Copy
2015-11-05 07:38 - 2015-11-05 07:38 - 00011473 _____ C:\Users\***\Downloads\Ihre Retourenmarke(1).pdf
2015-11-05 06:44 - 2015-11-08 14:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-01 07:31 - 2012-09-12 11:07 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-12-01 07:29 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2015-12-01 07:24 - 2009-07-14 05:45 - 00028128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-01 07:24 - 2009-07-14 05:45 - 00028128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-01 07:18 - 2012-09-19 11:49 - 00000000 ____D C:\Users\***
2015-12-01 07:14 - 2010-11-21 07:50 - 00699666 _____ C:\Windows\system32\perfh007.dat
2015-12-01 07:14 - 2010-11-21 07:50 - 00149774 _____ C:\Windows\system32\perfc007.dat
2015-12-01 07:14 - 2009-07-14 06:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-01 07:14 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2015-12-01 07:11 - 2014-12-24 08:42 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-01 07:10 - 2014-12-24 08:42 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-01 07:08 - 2015-06-22 20:57 - 00001214 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2015-12-01 07:04 - 2014-05-26 21:40 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-11-30 20:08 - 2015-06-22 20:57 - 00001210 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2015-11-30 00:03 - 2015-06-22 21:30 - 00000000 ___RD C:\Users\***\Dropbox
2015-11-30 00:03 - 2015-06-22 20:57 - 00000000 ____D C:\Users\***\AppData\Local\Dropbox
2015-11-30 00:03 - 2012-09-12 11:43 - 00000000 ____D C:\Users\Default\AppData\Local\SoftThinks
2015-11-30 00:03 - 2012-09-12 11:43 - 00000000 ____D C:\Users\Default User\AppData\Local\SoftThinks
2015-11-30 00:02 - 2012-09-12 11:35 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup
2015-11-29 23:14 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-29 12:21 - 2012-09-20 02:41 - 00294441 _____ C:\bdlog.txt
2015-11-18 17:16 - 2012-11-24 02:59 - 00000000 ____D C:\Users\***\AppData\Roaming\vlc
2015-11-16 17:25 - 2015-08-27 20:21 - 01600512 _____ (BitDefender) C:\Windows\system32\Drivers\avc3.sys
2015-11-16 17:25 - 2015-08-27 20:21 - 00775424 _____ (BitDefender) C:\Windows\system32\Drivers\avckf.sys
2015-11-16 17:23 - 2015-09-09 20:08 - 00477272 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys
2015-11-12 20:17 - 2009-07-14 05:45 - 00415752 _____ C:\Windows\system32\FNTCACHE.DAT
2015-11-11 21:19 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2015-11-11 20:42 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-11-11 20:23 - 2013-08-10 16:15 - 00000000 ____D C:\Windows\system32\MRT
2015-11-11 20:17 - 2012-09-27 16:56 - 145617392 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-11-11 20:16 - 2012-09-29 14:06 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-11-11 20:10 - 2011-02-11 11:22 - 01594892 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2015-11-11 20:06 - 2010-11-21 08:00 - 00000000 ____D C:\Program Files\Windows Journal
2015-11-11 17:58 - 2012-09-12 11:07 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-11-11 17:58 - 2012-09-12 11:07 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-11-11 17:58 - 2012-09-12 11:07 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-11-09 22:09 - 2015-06-22 20:57 - 00000000 ____D C:\Program Files (x86)\Dropbox
2015-11-08 14:26 - 2012-09-19 12:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-11-07 23:25 - 2014-06-15 11:32 - 00000000 ____D C:\Users\***\Documents\Outlook-Dateien

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2006-12-11 19:13 - 2006-12-11 19:13 - 0097336 _____ (Un4seen Developments) C:\Users\***\AppData\Local\bass.dll
2006-12-11 19:13 - 2006-12-11 19:13 - 0013872 _____ (Un4seen Developments) C:\Users\***\AppData\Local\basscd.dll
2007-08-13 17:46 - 2007-08-13 17:46 - 0102912 _____ (Albert L Faber) C:\Users\***\AppData\Local\CDRip.dll
2012-09-22 21:49 - 2014-04-06 14:19 - 0035328 _____ () C:\Users\***\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2007-01-18 21:09 - 2007-01-18 21:09 - 0623616 _____ (Ivan Bischof ©2003 - 2005) C:\Users\***\AppData\Local\No23 Recorder.exe
2013-02-14 19:29 - 2015-01-31 08:52 - 0001473 _____ () C:\Users\***\AppData\Local\RecConfig.xml
2015-09-09 20:26 - 2015-09-09 20:26 - 0600679 _____ () C:\ProgramData\1441825712.bdinstall.bin

Einige Dateien in TEMP:
====================
C:\Users\***\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpkmkrmn.dll
C:\Users\***\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-11-24 17:31

==================== Ende von FRST.txt ============================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:30-11-2015
durchgeführt von *** (2015-12-01 07:31:28)
Gestartet von C:\Users\***\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2012-09-19 10:49:07)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1476551734-19124195-2179231302-500 - Administrator - Disabled)
*** (S-1-5-21-1476551734-19124195-2179231302-1000 - Administrator - Enabled) => C:\Users\***
Gast (S-1-5-21-1476551734-19124195-2179231302-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1476551734-19124195-2179231302-1004 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Bitdefender Antivirus (Enabled - Up to date) {9A0813D8-CED6-F86B-072E-28D2AF25A83D}
AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {2169F23C-E8EC-F7E5-3D9E-13A0D4A2E280}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Enabled) {A23392FD-84B9-F933-2C71-81E751F6EF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 17.0.0.144 - Adobe Systems Incorporated)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.2.1.650 - Adobe Systems Incorporated)
Adobe Flash Player 19 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 19.0.0.245 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.245 - Adobe Systems Incorporated)
Adobe Photoshop Elements 9 (HKLM-x32\...\Adobe Photoshop Elements 9) (Version: 9.0 - Adobe Systems Incorporated)
Adobe Premiere Elements 9 (HKLM-x32\...\PremElem90) (Version: 9.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
AFPL Ghostscript 8.54 (HKLM-x32\...\AFPL Ghostscript 8.54) (Version:  - )
AFPL Ghostscript Fonts (HKLM-x32\...\AFPL Ghostscript Fonts) (Version:  - )
AMD Catalyst Install Manager (HKLM\...\{D219E54B-AC0F-E3E8-AA62-DF563A20696E}) (Version: 3.0.868.0 - Advanced Micro Devices, Inc.)
Bitdefender Total Security 2015 (HKLM\...\Bitdefender) (Version: 19.1.0.115 - Bitdefender)
Brother MFL-Pro Suite DCP-J132W (HKLM-x32\...\{B742757A-7658-4E09-A51A-085CF0F7F4D3}) (Version: 1.0.0.0 - Brother Industries, Ltd.)
Conexant SmartAudio HD (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.37.0 - Conexant)
CyberLink PowerDVD 9.6 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.6.1.5127 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.67 - Dell Inc.)
Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.67 - Dell Inc.)
Dell DataSafe Online (HKLM-x32\...\{7EC66A95-AC2D-4127-940B-0445A526AB2F}) (Version: 2.1.19634 - Dell)
Dell Digital Delivery (HKLM-x32\...\{9DDFE322-6BA0-4F90-8689-D98382492371}) (Version: 2.1.1002.0 - Dell Products, LP)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
Dell MusicStage (HKLM-x32\...\{3E90B7F4-1817-4405-B4A5-E4EA5EC0E2B3}) (Version: 1.6.225.0 - Fingertapps)
Dell PhotoStage (HKLM-x32\...\{E4335E82-17B3-460F-9E70-39D9BC269DB3}) (Version: 1.5.0.130 - ArcSoft)
Dell Stage (HKLM-x32\...\{E2F57269-065E-4B19-8CDA-AB6C401FAF1A}) (Version: 1.7.209.0 - Fingertapps)
Dell Stage Remote (HKLM-x32\...\{AF4D3C63-009B-4A17-B02E-D395065DD3F0}) (Version: 2.0.0.43 - ArcSoft)
Dell Support Center (HKLM\...\Dell Support Center) (Version: 3.1.5907.16 - Dell Inc.)
Dell Support Center (Version: 3.1.5907.16 - PC-Doctor, Inc.) Hidden
Dell Touchpad (HKLM\...\Elantech) (Version: 10.3.2.2 - ELAN Microelectronic Corp.)
Dell VideoStage  (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.3.0.2513 - CyberLink Corp.)
Dell VideoStage  (x32 Version: 1.3.0.2513 - CyberLink Corp.) Hidden
Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.01.15 - Creative Technology Ltd)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.22 - DivX, LLC)
Dropbox (HKLM-x32\...\Dropbox) (Version: 3.10.11 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.27.33 - Dropbox, Inc.) Hidden
eBay (HKLM-x32\...\{A8B88634-7F90-402F-B66A-86429755F6A5}) (Version: 1.4.0 - eBay Inc.)
Elements 9 Organizer (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Exact Audio Copy 1.1 (HKLM-x32\...\Exact Audio Copy) (Version: 1.1 - Andre Wiethoff)
Free Audio Converter (HKLM-x32\...\Free Audio Converter_is1) (Version: 5.0.65.1029 - DVDVideoSoft Ltd.)
Freemake Video Converter Version 4.1.4 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.4 - Ellora Assets Corporation)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
High-Definition Video Playback (x32 Version: 7.3.10000.0.0 - Nero AG) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Display Audio Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 6.14.00.3090 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.1.1399 - Intel Corporation)
Intel(R) PROSet/Wireless for Bluetooth(R) 3.0 + High Speed (HKLM\...\{2C0E6BD4-65B1-4E82-B2AC-43EFFC8F100C}) (Version: 15.0.0.0059 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{3015F546-6C3E-4E6A-B564-BCDF88C0BA2A}) (Version: 2.1.1.0191 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.1.0.1006 - Intel Corporation)
Intel® PROSet/Wireless WiFi-Software (HKLM\...\{DF7756DD-656A-45C3-BA71-74673E8259A9}) (Version: 15.00.0000.0642 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{538B98C3-773F-4F20-9C66-802D104DCBE2}) (Version: 1.23.219.2 - Intel Corporation)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 42.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 de)) (Version: 42.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla)
Mozilla Thunderbird 38.3.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 38.3.0 (x86 de)) (Version: 38.3.0 - Mozilla)
Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0018 - Nero AG)
No23 Recorder (HKLM-x32\...\{22B0E143-2B0B-435B-9F56-136A3D16065F}) (Version: 2.1.0.3 - No23)
PDF Blender (HKLM-x32\...\PDF Blender) (Version:  - )
PDF24 Creator 6.9.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PowerXpressHybrid (x32 Version: 1.00.0000 - Ihr Firmenname) Hidden
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 10.15.005 - Dell Inc.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7601.39019 - Realtek Semiconductor Corp.)
Secunia PSI (3.0.0.10004) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.10004 - Secunia)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
SmartSound Quicktracks for Premiere Elements 9.0 (HKLM-x32\...\InstallShield_{6748E773-5DA0-4D19-8AA5-273B4133A09B}) (Version: 3.12.3090 - SmartSound Software Inc)
SmartSound Quicktracks for Premiere Elements 9.0 (x32 Version: 3.12.3090 - SmartSound Software Inc) Hidden
Steuer 2014 (HKLM-x32\...\{2EE860C7-4551-479F-AF01-328B8AA46051}) (Version: 22.00.8811 - Buhl Data Service GmbH)
SyncUP (HKLM-x32\...\{D92C9CCE-E5F0-4125-977A-0590F3225B74}) (Version: 10.2.16500 - Nero AG)
SyncUP (x32 Version: 1.12.11500.11.105 - Nero AG) Hidden
Synology Assistant (remove only) (HKLM-x32\...\Synology Assistant) (Version:  - )
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Wiederherstellungspunkte =========================

12-11-2015 20:00:12 Windows Update
17-11-2015 19:40:24 Gerätetreiber-Paketinstallation: Synology USB-Controller
25-11-2015 01:25:58 Geplanter Prüfpunkt

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2015-08-31 16:52 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {1D718F57-FE18-41E6-BC2F-E8814DDA2914} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-11] (Adobe Systems Incorporated)
Task: {1F7C9C29-66DE-4140-9C68-B9F0A37E8C52} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {2E7BF561-8C3E-4FF1-8413-D186B476CA64} - System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8 => C:\Program Files\Bitdefender\Bitdefender 2015\bdproductdata.exe
Task: {35D58EAC-E363-49B5-8E3F-246205DEFF46} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-06-22] (Dropbox, Inc.)
Task: {370CB867-98CB-4AA9-86B4-59E4B22A2CF0} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-06-22] (Dropbox, Inc.)
Task: {65CFED4D-DE2C-40B0-B513-0A8B548A452E} - System32\Tasks\AdobeAAMUpdater-1.0-***-PC-*** => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-07-29] (Adobe Systems Incorporated)
Task: {C8E2C2D9-5956-435E-9F56-5BB6F57FFC59} - System32\Tasks\{CF90EA32-093A-4FC5-BABA-F673ECFBD693} => Firefox.exe hxxp://ui.skype.com/ui/0/6.1.0.129.272/de/abandoninstall?page=tsProgressBar
Task: {CB7B6331-F6ED-4CB0-8F92-5A6E3BB78389} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-08-27 20:21 - 2015-11-16 17:23 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\txmlutil.dll
2015-08-27 20:21 - 2013-09-03 13:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdmetrics.dll
2015-08-27 20:21 - 2015-06-10 17:41 - 00003072 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\UI\accessl.ui
2015-08-27 20:21 - 2012-10-29 13:22 - 00152816 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\bdfwcore.dll
2015-09-09 20:26 - 2015-09-09 20:26 - 00875352 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_01150_003\ashttpbr.mdl
2015-09-09 20:26 - 2015-09-09 20:26 - 00741952 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_01150_003\ashttpdsp.mdl
2015-09-09 20:26 - 2015-09-09 20:26 - 02800952 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_01150_003\ashttpph.mdl
2015-09-09 20:26 - 2015-09-09 20:26 - 01413024 _____ () C:\Program Files\Bitdefender\Bitdefender 2015\otengines_01150_003\ashttprbl.mdl
2015-05-11 08:12 - 2015-05-11 08:12 - 00248736 _____ () C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe
2012-09-12 12:41 - 2012-03-19 11:09 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-06-28 01:26 - 2011-06-28 01:26 - 02022976 _____ () C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
2012-09-12 11:22 - 2012-04-05 20:55 - 00164992 _____ () C:\Program Files\Conexant\SA3\MaxxAudioWrapper.dll
2011-06-29 14:52 - 2011-06-29 14:52 - 00474176 _____ () C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
2012-11-30 03:06 - 2012-11-30 03:06 - 01263512 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2012-09-12 11:36 - 2012-01-27 03:49 - 02751808 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
2012-03-26 09:03 - 2012-03-26 09:03 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2012-04-06 16:17 - 2012-04-06 16:17 - 00016384 _____ () c:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2015-02-13 21:05 - 2015-10-29 18:10 - 00110952 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll
2015-02-13 21:05 - 2015-10-29 18:10 - 00104296 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll
2015-02-13 21:05 - 2015-10-29 18:10 - 00020328 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll
2015-02-13 21:05 - 2015-10-29 18:10 - 00253800 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\collector.dll
2015-02-13 21:05 - 2015-10-29 18:10 - 00295272 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\stat.dll
2015-02-13 21:05 - 2015-10-29 18:10 - 00044392 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll
2014-10-18 21:10 - 2014-10-18 21:10 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\1eeea3ab8d69ec722bdcb28b8eb8dd75\IsdiInterop.ni.dll
2012-09-12 11:24 - 2012-02-01 22:25 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-09-12 11:23 - 2012-01-21 12:23 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2010-03-17 02:28 - 2010-03-17 02:28 - 01926144 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtCore4.dll
2010-03-22 21:52 - 2010-03-22 21:52 - 06776832 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtGui4.dll
2010-03-17 02:28 - 2010-03-17 02:28 - 00635904 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtNetwork4.dll
2010-03-17 02:28 - 2010-03-17 02:28 - 00326144 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtXml4.dll
2011-06-25 05:20 - 2011-06-25 05:20 - 00565968 _____ () C:\Program Files (x86)\Dell\Stage Remote\sqlite3.dll
2011-06-28 01:25 - 2011-06-28 01:25 - 00058944 _____ () C:\Program Files (x86)\Dell\Stage Remote\DataService.dll
2011-06-25 05:32 - 2011-06-25 05:32 - 00323136 _____ () C:\Program Files (x86)\Dell\Stage Remote\de-DE\UI\ManagerUI.dll
2010-03-12 01:52 - 2010-03-12 01:52 - 00028160 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qgif4.dll
2010-03-05 21:07 - 2010-03-05 21:07 - 00031744 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qico4.dll
2010-03-05 21:07 - 2010-03-05 21:07 - 00125952 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qjpeg4.dll
2010-03-12 01:52 - 2010-03-12 01:52 - 00225280 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qmng4.dll
2012-11-30 03:07 - 2012-11-30 03:07 - 00100248 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2015-01-07 23:14 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2015-11-30 00:03 - 2015-11-30 00:03 - 00071168 _____ () c:\users\***\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpkmkrmn.dll
2015-06-22 21:01 - 2015-09-03 01:11 - 00012800 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick.2\qtquick2plugin.dll
2015-06-22 21:01 - 2015-09-03 01:11 - 00779776 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-08-01 03:11 - 2015-09-03 01:11 - 00056320 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-06-22 21:01 - 2015-09-03 01:11 - 00012288 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Window.2\windowplugin.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\Temp:5C321E34
AlternateDataStreams: C:\Users\***\Desktop\Defogger.exe:BDU
AlternateDataStreams: C:\Users\***\Desktop\FRST64.exe:BDU
AlternateDataStreams: C:\Users\***\Desktop\Gmer-19357.exe:BDU
AlternateDataStreams: C:\Users\***\Desktop\spywareblastersetup50.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\7z920.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\BearShareV10.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\bitdefender_tsecurity.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\Citavi4Setup(1).exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\Citavi4Setup.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\DivXInstaller.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\download-audiograbber.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\Dropbox - CHIP-Installer.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\DropboxInstaller.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\dxwebsetup.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\Exact Audio Copy - CHIP-Installer.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\FreeAudioConverter.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\FW_DE_Installer_v201.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\gmer_2.1.19163.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\GoogleEarthPluginSetup.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\jxpiinstall(1).exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\jxpiinstall(2).exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\jxpiinstall.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\mbam-setup-1.75.0.1300.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\mbam-setup-2.0.4.1028.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\No23Recorder2103.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\onlineTV - CHIP-Installer.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\PDF24 Creator - CHIP-Installer.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\PSISetup10004.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\PSISetup711.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\readerdc_de_ha_install.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\RealPlayer_de.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\RunesOfMagic_GameforgeLiveSetup.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\SynologyAssistantSetup-5.2-5566.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\TeamSpeak3-Client-win32-3.0.8.1.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\Thunderbird_Setup_15.0.1.exe:BDU
AlternateDataStreams: C:\Users\***\Downloads\vlc-2.0.4-win32.exe:BDU

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\0411dd.com -> 0411dd.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000\...\1001movie.com -> 1001movie.com

Da befinden sich 6091 mehr Seiten.

IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\0411dd.com -> 0411dd.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1001movie.com -> 1001movie.com

Da befinden sich 6091 mehr Seiten.


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1476551734-19124195-2179231302-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\***\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-1476551734-19124195-2179231302-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\***\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{D478956E-9F1A-4843-8198-214FBDD60F01}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{E111D6CA-2A56-4E7E-BB38-BED52D41E193}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F1600D2E-84D9-48EE-8B86-8890CFCD2793}] => (Allow) c:\Program Files (x86)\Dell\VideoStage\VideoStage.exe
FirewallRules: [{8832DF3D-C7E8-4FC7-B767-4F79DEF26F06}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5AF899B2-A668-406E-9903-AAEEA8C3A867}] => (Allow) LPort=2869
FirewallRules: [{D94D9DD8-5218-4EC2-AEE8-7210FB4AE942}] => (Allow) LPort=1900
FirewallRules: [{BBD5EDAB-1F35-4420-B9B0-B890E883D850}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{E854F3AB-AA91-47A5-8A5A-2FD016D65F0F}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{0DBBA71A-1201-47C7-93CE-0E8F6B3F8A55}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD Cinema\PowerDVDCinema.exe
FirewallRules: [{0298C4F4-9F4D-4242-81E2-BBD86B481759}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD9.EXE
FirewallRules: [{8289FDF6-CB9C-4C6B-889D-87CA95ED27C9}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{59FB75E3-764B-4FA4-AA9D-E9337397C6BF}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{DCD9B3EE-7B9B-479F-840C-7650FFEBBC8C}] => (Allow) LPort=9700
FirewallRules: [{3B8BACD5-919B-40B7-B5C6-1C1A4025EF81}] => (Allow) LPort=9701
FirewallRules: [{A8979E2D-D62A-4400-83E8-CBD1D0F7306E}] => (Allow) LPort=9702
FirewallRules: [{CA04C3DF-A0D3-4677-8CB2-8422FEA7D592}] => (Allow) LPort=9700
FirewallRules: [{E4C83A27-6FF3-4810-9422-FE431D0E5014}] => (Allow) C:\Program Files\dell stage\dell stage\accuweather\accuweather.exe
FirewallRules: [{F1617678-1CFD-4B4D-BB2F-DBB3518A38F0}] => (Allow) C:\Program Files\dell stage\musicstage\musicstageengine.exe
FirewallRules: [{2E3B0022-8282-4904-A53B-1D15F5FF2FA3}] => (Allow) C:\Program Files\dell stage\dell stage\stage_primary.exe
FirewallRules: [TCP Query User{EF295B6F-E9AD-4204-A5EA-247DB990AA42}C:\program files (x86)\dell\stage remote\stageremoteservice.exe] => (Block) C:\program files (x86)\dell\stage remote\stageremoteservice.exe
FirewallRules: [UDP Query User{435EA1F9-B244-4D42-96C9-88DFDD77302F}C:\program files (x86)\dell\stage remote\stageremoteservice.exe] => (Block) C:\program files (x86)\dell\stage remote\stageremoteservice.exe
FirewallRules: [TCP Query User{AC7AAC94-B653-4271-B872-29A02A9D8686}C:\program files (x86)\dell\stage remote\stageremoteservice.exe] => (Block) C:\program files (x86)\dell\stage remote\stageremoteservice.exe
FirewallRules: [UDP Query User{832FF03F-C34E-4F7B-A5CA-50F9BC4FC101}C:\program files (x86)\dell\stage remote\stageremoteservice.exe] => (Block) C:\program files (x86)\dell\stage remote\stageremoteservice.exe
FirewallRules: [{31457A3B-0F9A-46D7-A637-1B87A5E5C786}] => (Allow) C:\Program Files (x86)\GameforgeLive\GameforgeLive.exe
FirewallRules: [{DE26C2E2-CF4B-4126-BD5F-F4E02E0EACCC}] => (Allow) C:\Program Files (x86)\GameforgeLive\GameforgeLive.exe
FirewallRules: [{E74BB90D-403F-4E44-A744-94DF0D0C7035}] => (Allow) C:\Program Files (x86)\GameforgeLive\GameforgeLive.exe
FirewallRules: [{11463C82-3D6A-40D3-90D1-A6866495F5BB}] => (Allow) C:\Program Files (x86)\GameforgeLive\GameforgeLive.exe
FirewallRules: [{9862596C-0DE8-44F0-BECE-8DFCDB5FAA74}] => (Allow) %ProgramFiles% (x86)\GameforgeLive\Games\DEU_deu\Runes Of Magic\ClientUpdate.exe
FirewallRules: [{4905B771-0BB4-4A3F-B2AF-C5280B36633F}] => (Allow) C:\Program Files (x86)\GameforgeLive\Games\DEU_deu\Runes Of Magic\launcher.exe
FirewallRules: [{A133FC0F-B74A-48BF-AC56-9790C1657D4D}] => (Allow) C:\Program Files (x86)\GameforgeLive\Games\DEU_deu\Runes Of Magic\launcher.exe
FirewallRules: [{879BE998-A62F-49B2-B70D-BFC10E540760}] => (Allow) C:\Program Files (x86)\GameforgeLive\Games\DEU_deu\Runes Of Magic\launcher.exe
FirewallRules: [{07269FC0-ACBF-4C00-8973-D7C3D8184E9C}] => (Allow) C:\Program Files (x86)\GameforgeLive\Games\DEU_deu\Runes Of Magic\launcher.exe
FirewallRules: [{D55592EF-C9B8-4DF9-B4E1-033848B77889}] => (Allow) C:\Program Files (x86)\GameforgeLive\Games\DEU_deu\Runes Of Magic\Client.exe
FirewallRules: [{972BCAA5-87C4-4F33-B8CF-8386B15B9F44}] => (Allow) C:\Program Files (x86)\GameforgeLive\Games\DEU_deu\Runes Of Magic\Client.exe
FirewallRules: [{19A3BCD2-5064-43BE-9E39-4FE971CE7FD5}] => (Allow) C:\Program Files (x86)\GameforgeLive\Games\DEU_deu\Runes Of Magic\Client.exe
FirewallRules: [{325D43B9-8B1C-419F-884E-CCE243AF160A}] => (Allow) C:\Program Files (x86)\GameforgeLive\Games\DEU_deu\Runes Of Magic\Client.exe
FirewallRules: [{645152C5-029E-4524-8B1C-A972B23551EC}] => (Allow) LPort=54925
FirewallRules: [{2D74E98D-4D8F-41FE-B382-897971824746}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{11AD927C-16E4-4AC6-922D-22477B94C125}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{51C69C5E-D79B-4B2D-B9F0-B3BBE9B8E77C}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{72622B5C-AA7E-4B41-A73A-8CAD87410A77}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{977747F6-0ACB-496D-8534-8AE35AF7594D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{15E9B08C-FA54-4AE5-BF84-28F7B813FD3A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{13D3C5E7-1C16-4F86-AEBB-FDB69D0ED21E}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [TCP Query User{6EE53473-1BBC-48DD-AF4C-6443B4166593}C:\program files (x86)\synology\assistant\dsassistant.exe] => (Allow) C:\program files (x86)\synology\assistant\dsassistant.exe
FirewallRules: [UDP Query User{1C0CC144-811B-4E79-B875-92200E265543}C:\program files (x86)\synology\assistant\dsassistant.exe] => (Allow) C:\program files (x86)\synology\assistant\dsassistant.exe
FirewallRules: [{C4C017F7-1A28-421E-81CE-DFEB3642ACC9}] => (Block) C:\program files (x86)\synology\assistant\dsassistant.exe
FirewallRules: [{7681FBD6-F9FB-4749-BC98-C7256991601D}] => (Block) C:\program files (x86)\synology\assistant\dsassistant.exe

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/29/2015 11:19:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: PSIA.exe, Version: 3.0.0.10004, Zeitstempel: 0x54784a82
Name des fehlerhaften Moduls: PSIA.exe, Version: 3.0.0.10004, Zeitstempel: 0x54784a82
Ausnahmecode: 0x40000015
Fehleroffset: 0x00093534
ID des fehlerhaften Prozesses: 0xcdc
Startzeit der fehlerhaften Anwendung: 0xPSIA.exe0
Pfad der fehlerhaften Anwendung: PSIA.exe1
Pfad des fehlerhaften Moduls: PSIA.exe2
Berichtskennung: PSIA.exe3

Error: (11/29/2015 11:14:16 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/28/2015 00:14:37 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: PSIA.exe, Version: 3.0.0.10004, Zeitstempel: 0x54784a82
Name des fehlerhaften Moduls: PSIA.exe, Version: 3.0.0.10004, Zeitstempel: 0x54784a82
Ausnahmecode: 0x40000015
Fehleroffset: 0x00093534
ID des fehlerhaften Prozesses: 0xc48
Startzeit der fehlerhaften Anwendung: 0xPSIA.exe0
Pfad der fehlerhaften Anwendung: PSIA.exe1
Pfad des fehlerhaften Moduls: PSIA.exe2
Berichtskennung: PSIA.exe3

Error: (11/28/2015 00:09:26 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2015 05:54:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: PSIA.exe, Version: 3.0.0.10004, Zeitstempel: 0x54784a82
Name des fehlerhaften Moduls: PSIA.exe, Version: 3.0.0.10004, Zeitstempel: 0x54784a82
Ausnahmecode: 0x40000015
Fehleroffset: 0x00093534
ID des fehlerhaften Prozesses: 0xc98
Startzeit der fehlerhaften Anwendung: 0xPSIA.exe0
Pfad der fehlerhaften Anwendung: PSIA.exe1
Pfad des fehlerhaften Moduls: PSIA.exe2
Berichtskennung: PSIA.exe3

Error: (11/27/2015 05:49:24 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2015 02:10:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2015 00:09:28 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2015 07:23:00 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 42.0.0.5780, Zeitstempel: 0x5632d0a4
Name des fehlerhaften Moduls: mozglue.dll, Version: 42.0.0.5780, Zeitstempel: 0x5632ba58
Ausnahmecode: 0x80000003
Fehleroffset: 0x0000ed50
ID des fehlerhaften Prozesses: 0x2b78
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (11/24/2015 06:36:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: PSIA.exe, Version: 3.0.0.10004, Zeitstempel: 0x54784a82
Name des fehlerhaften Moduls: PSIA.exe, Version: 3.0.0.10004, Zeitstempel: 0x54784a82
Ausnahmecode: 0x40000015
Fehleroffset: 0x00093534
ID des fehlerhaften Prozesses: 0xd40
Startzeit der fehlerhaften Anwendung: 0xPSIA.exe0
Pfad der fehlerhaften Anwendung: PSIA.exe1
Pfad des fehlerhaften Moduls: PSIA.exe2
Berichtskennung: PSIA.exe3


Systemfehler:
=============
Error: (11/29/2015 11:19:49 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Secunia PSI Agent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/29/2015 11:16:36 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Dell Digital Delivery Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/29/2015 11:15:17 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (11/29/2015 11:15:10 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)

Error: (11/29/2015 00:21:37 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (11/29/2015 00:19:29 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{BAF2DFBA-5D02-4D65-B321-5EA1F317205E}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (11/29/2015 00:07:28 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{BAF2DFBA-5D02-4D65-B321-5EA1F317205E}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (11/29/2015 11:55:27 AM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{BAF2DFBA-5D02-4D65-B321-5EA1F317205E}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (11/29/2015 11:40:26 AM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{BAF2DFBA-5D02-4D65-B321-5EA1F317205E}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (11/29/2015 11:28:24 AM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{BAF2DFBA-5D02-4D65-B321-5EA1F317205E}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.


CodeIntegrity:
===================================
  Date: 2015-08-31 17:50:58.911
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-08-31 17:50:58.864
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-08-31 17:50:58.818
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-08-31 17:50:58.771
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-01-30 20:45:54.148
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\MaxxAudioAPOShell64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-01-30 20:45:44.360
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\MaxxAudioAPOShell64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-01-30 20:43:07.989
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\MaxxAudioAPOShell64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-01-04 20:18:01.476
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-01-04 20:18:01.413
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-11-12 13:55:14.983
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\MaxxAudioAPOShell64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-3612QM CPU @ 2.10GHz
Prozentuale Nutzung des RAM: 38%
Installierter physikalischer RAM: 8053.85 MB
Verfügbarer physikalischer RAM: 4987.29 MB
Summe virtueller Speicher: 16105.91 MB
Verfügbarer virtueller Speicher: 11951.57 MB

==================== Laufwerke ================================

Drive c: (OS) (Fixed) (Total:911.66 GB) (Free:215.73 GB) NTFS
Drive e: () (Removable) (Total:0.96 GB) (Free:0.84 GB) FAT

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 931.5 GB) (Disk ID: 4D916A00)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Active) - (Size=19.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=911.7 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 984 MB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt ============================
         

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-12-01 19:12:16
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD10 rev.01.0 931,51GB
Running: Gmer-19357.exe; Driver: C:\Users\***\AppData\Local\Temp\kwdiipow.sys


---- User code sections - GMER 2.1 ----

.text    C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[3120] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                    0000000075a21401 2 bytes JMP 7712b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[3120] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                      0000000075a21419 2 bytes JMP 7712b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[3120] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                    0000000075a21431 2 bytes JMP 771a8fd1 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[3120] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                    0000000075a2144a 2 bytes CALL 7710489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                              * 9
.text    C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[3120] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                       0000000075a214dd 2 bytes JMP 771a88c4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[3120] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                0000000075a214f5 2 bytes JMP 771a8aa0 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[3120] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                       0000000075a2150d 2 bytes JMP 771a87ba C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[3120] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                0000000075a21525 2 bytes JMP 771a8b8a C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[3120] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                      0000000075a2153d 2 bytes JMP 7711fca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[3120] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                           0000000075a21555 2 bytes JMP 771268ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[3120] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                    0000000075a2156d 2 bytes JMP 771a9089 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[3120] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                      0000000075a21585 2 bytes JMP 771a8bea C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[3120] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                         0000000075a2159d 2 bytes JMP 771a877e C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[3120] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                      0000000075a215b5 2 bytes JMP 7711fd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[3120] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                    0000000075a215cd 2 bytes JMP 7712b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[3120] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                0000000075a216b2 2 bytes JMP 771a8f4c C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\psi_tray.exe[3120] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                0000000075a216bd 2 bytes JMP 771a8713 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                     0000000075a21401 2 bytes JMP 7712b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[3300] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                       0000000075a21419 2 bytes JMP 7712b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                     0000000075a21431 2 bytes JMP 771a8fd1 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                     0000000075a2144a 2 bytes CALL 7710489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                              * 9
.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[3300] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                        0000000075a214dd 2 bytes JMP 771a88c4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                 0000000075a214f5 2 bytes JMP 771a8aa0 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[3300] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                        0000000075a2150d 2 bytes JMP 771a87ba C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                 0000000075a21525 2 bytes JMP 771a8b8a C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                       0000000075a2153d 2 bytes JMP 7711fca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[3300] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                            0000000075a21555 2 bytes JMP 771268ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                     0000000075a2156d 2 bytes JMP 771a9089 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                       0000000075a21585 2 bytes JMP 771a8bea C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[3300] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                          0000000075a2159d 2 bytes JMP 771a877e C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                       0000000075a215b5 2 bytes JMP 7711fd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                     0000000075a215cd 2 bytes JMP 7712b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                 0000000075a216b2 2 bytes JMP 771a8f4c C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                 0000000075a216bd 2 bytes JMP 771a8713 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[3324] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                             0000000075a21401 2 bytes JMP 7712b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[3324] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                               0000000075a21419 2 bytes JMP 7712b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[3324] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                             0000000075a21431 2 bytes JMP 771a8fd1 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[3324] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                             0000000075a2144a 2 bytes CALL 7710489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                              * 9
.text    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[3324] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                0000000075a214dd 2 bytes JMP 771a88c4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[3324] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                         0000000075a214f5 2 bytes JMP 771a8aa0 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[3324] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                0000000075a2150d 2 bytes JMP 771a87ba C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[3324] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                         0000000075a21525 2 bytes JMP 771a8b8a C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[3324] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                               0000000075a2153d 2 bytes JMP 7711fca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[3324] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                    0000000075a21555 2 bytes JMP 771268ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[3324] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                             0000000075a2156d 2 bytes JMP 771a9089 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[3324] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                               0000000075a21585 2 bytes JMP 771a8bea C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[3324] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                  0000000075a2159d 2 bytes JMP 771a877e C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[3324] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                               0000000075a215b5 2 bytes JMP 7711fd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[3324] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                             0000000075a215cd 2 bytes JMP 7712b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[3324] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                         0000000075a216b2 2 bytes JMP 771a8f4c C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe[3324] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                         0000000075a216bd 2 bytes JMP 771a8713 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[3588] C:\Windows\syswow64\Psapi.dll!GetModuleFileNameExW + 17                                                                                                  0000000075a21401 2 bytes JMP 7712b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[3588] C:\Windows\syswow64\Psapi.dll!EnumProcessModules + 17                                                                                                    0000000075a21419 2 bytes JMP 7712b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[3588] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 17                                                                                                  0000000075a21431 2 bytes JMP 771a8fd1 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[3588] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 42                                                                                                  0000000075a2144a 2 bytes CALL 7710489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                              * 9
.text    C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[3588] C:\Windows\syswow64\Psapi.dll!EnumDeviceDrivers + 17                                                                                                     0000000075a214dd 2 bytes JMP 771a88c4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[3588] C:\Windows\syswow64\Psapi.dll!GetDeviceDriverBaseNameA + 17                                                                                              0000000075a214f5 2 bytes JMP 771a8aa0 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[3588] C:\Windows\syswow64\Psapi.dll!QueryWorkingSetEx + 17                                                                                                     0000000075a2150d 2 bytes JMP 771a87ba C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[3588] C:\Windows\syswow64\Psapi.dll!GetDeviceDriverBaseNameW + 17                                                                                              0000000075a21525 2 bytes JMP 771a8b8a C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[3588] C:\Windows\syswow64\Psapi.dll!GetModuleBaseNameW + 17                                                                                                    0000000075a2153d 2 bytes JMP 7711fca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[3588] C:\Windows\syswow64\Psapi.dll!EnumProcesses + 17                                                                                                         0000000075a21555 2 bytes JMP 771268ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[3588] C:\Windows\syswow64\Psapi.dll!GetProcessMemoryInfo + 17                                                                                                  0000000075a2156d 2 bytes JMP 771a9089 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[3588] C:\Windows\syswow64\Psapi.dll!GetPerformanceInfo + 17                                                                                                    0000000075a21585 2 bytes JMP 771a8bea C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[3588] C:\Windows\syswow64\Psapi.dll!QueryWorkingSet + 17                                                                                                       0000000075a2159d 2 bytes JMP 771a877e C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[3588] C:\Windows\syswow64\Psapi.dll!GetModuleBaseNameA + 17                                                                                                    0000000075a215b5 2 bytes JMP 7711fd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[3588] C:\Windows\syswow64\Psapi.dll!GetModuleFileNameExA + 17                                                                                                  0000000075a215cd 2 bytes JMP 7712b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[3588] C:\Windows\syswow64\Psapi.dll!GetProcessImageFileNameW + 20                                                                                              0000000075a216b2 2 bytes JMP 771a8f4c C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[3588] C:\Windows\syswow64\Psapi.dll!GetProcessImageFileNameW + 31                                                                                              0000000075a216bd 2 bytes JMP 771a8713 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe[3952] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                 0000000075a21401 2 bytes JMP 7712b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe[3952] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                   0000000075a21419 2 bytes JMP 7712b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe[3952] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                 0000000075a21431 2 bytes JMP 771a8fd1 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe[3952] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                 0000000075a2144a 2 bytes CALL 7710489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                              * 9
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe[3952] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                    0000000075a214dd 2 bytes JMP 771a88c4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe[3952] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                             0000000075a214f5 2 bytes JMP 771a8aa0 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe[3952] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                    0000000075a2150d 2 bytes JMP 771a87ba C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe[3952] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                             0000000075a21525 2 bytes JMP 771a8b8a C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe[3952] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                   0000000075a2153d 2 bytes JMP 7711fca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe[3952] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                        0000000075a21555 2 bytes JMP 771268ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe[3952] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                 0000000075a2156d 2 bytes JMP 771a9089 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe[3952] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                   0000000075a21585 2 bytes JMP 771a8bea C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe[3952] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                      0000000075a2159d 2 bytes JMP 771a877e C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe[3952] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                   0000000075a215b5 2 bytes JMP 7711fd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe[3952] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                 0000000075a215cd 2 bytes JMP 7712b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe[3952] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                             0000000075a216b2 2 bytes JMP 771a8f4c C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe[3952] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                             0000000075a216bd 2 bytes JMP 771a8713 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe[4080] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                   0000000075a21401 2 bytes JMP 7712b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe[4080] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                     0000000075a21419 2 bytes JMP 7712b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe[4080] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                   0000000075a21431 2 bytes JMP 771a8fd1 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe[4080] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                   0000000075a2144a 2 bytes CALL 7710489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                              * 9
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe[4080] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                      0000000075a214dd 2 bytes JMP 771a88c4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe[4080] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                               0000000075a214f5 2 bytes JMP 771a8aa0 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe[4080] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                      0000000075a2150d 2 bytes JMP 771a87ba C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe[4080] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                               0000000075a21525 2 bytes JMP 771a8b8a C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe[4080] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                     0000000075a2153d 2 bytes JMP 7711fca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe[4080] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                          0000000075a21555 2 bytes JMP 771268ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe[4080] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                   0000000075a2156d 2 bytes JMP 771a9089 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe[4080] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                     0000000075a21585 2 bytes JMP 771a8bea C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe[4080] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                        0000000075a2159d 2 bytes JMP 771a877e C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe[4080] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                     0000000075a215b5 2 bytes JMP 7711fd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe[4080] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                   0000000075a215cd 2 bytes JMP 7712b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe[4080] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                               0000000075a216b2 2 bytes JMP 771a8f4c C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe[4080] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                               0000000075a216bd 2 bytes JMP 771a8713 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe[2608] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                          0000000075a21401 2 bytes JMP 7712b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe[2608] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                            0000000075a21419 2 bytes JMP 7712b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe[2608] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                          0000000075a21431 2 bytes JMP 771a8fd1 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe[2608] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                          0000000075a2144a 2 bytes CALL 7710489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                              * 9
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe[2608] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                             0000000075a214dd 2 bytes JMP 771a88c4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe[2608] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                      0000000075a214f5 2 bytes JMP 771a8aa0 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe[2608] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                             0000000075a2150d 2 bytes JMP 771a87ba C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe[2608] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                      0000000075a21525 2 bytes JMP 771a8b8a C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe[2608] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                            0000000075a2153d 2 bytes JMP 7711fca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe[2608] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                 0000000075a21555 2 bytes JMP 771268ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe[2608] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                          0000000075a2156d 2 bytes JMP 771a9089 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe[2608] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                            0000000075a21585 2 bytes JMP 771a8bea C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe[2608] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                               0000000075a2159d 2 bytes JMP 771a877e C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe[2608] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                            0000000075a215b5 2 bytes JMP 7711fd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe[2608] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                          0000000075a215cd 2 bytes JMP 7712b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe[2608] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                      0000000075a216b2 2 bytes JMP 771a8f4c C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe[2608] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                      0000000075a216bd 2 bytes JMP 771a8713 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE[500] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                    0000000075a21401 2 bytes JMP 7712b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE[500] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                      0000000075a21419 2 bytes JMP 7712b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE[500] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                    0000000075a21431 2 bytes JMP 771a8fd1 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE[500] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                    0000000075a2144a 2 bytes CALL 7710489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                              * 9
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE[500] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                       0000000075a214dd 2 bytes JMP 771a88c4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE[500] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                0000000075a214f5 2 bytes JMP 771a8aa0 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE[500] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                       0000000075a2150d 2 bytes JMP 771a87ba C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE[500] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                0000000075a21525 2 bytes JMP 771a8b8a C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE[500] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                      0000000075a2153d 2 bytes JMP 7711fca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE[500] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                           0000000075a21555 2 bytes JMP 771268ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE[500] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                    0000000075a2156d 2 bytes JMP 771a9089 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE[500] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                      0000000075a21585 2 bytes JMP 771a8bea C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE[500] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                         0000000075a2159d 2 bytes JMP 771a877e C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE[500] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                      0000000075a215b5 2 bytes JMP 7711fd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE[500] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                    0000000075a215cd 2 bytes JMP 7712b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE[500] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                0000000075a216b2 2 bytes JMP 771a8f4c C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE[500] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                0000000075a216bd 2 bytes JMP 771a8713 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                     0000000075a21401 2 bytes JMP 7712b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe[4192] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                       0000000075a21419 2 bytes JMP 7712b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                     0000000075a21431 2 bytes JMP 771a8fd1 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                     0000000075a2144a 2 bytes CALL 7710489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                              * 9
.text    C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe[4192] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                        0000000075a214dd 2 bytes JMP 771a88c4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                 0000000075a214f5 2 bytes JMP 771a8aa0 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe[4192] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                        0000000075a2150d 2 bytes JMP 771a87ba C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                 0000000075a21525 2 bytes JMP 771a8b8a C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                       0000000075a2153d 2 bytes JMP 7711fca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe[4192] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                            0000000075a21555 2 bytes JMP 771268ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                     0000000075a2156d 2 bytes JMP 771a9089 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                       0000000075a21585 2 bytes JMP 771a8bea C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe[4192] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                          0000000075a2159d 2 bytes JMP 771a877e C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                       0000000075a215b5 2 bytes JMP 7711fd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                     0000000075a215cd 2 bytes JMP 7712b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                 0000000075a216b2 2 bytes JMP 771a8f4c C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe[4192] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                 0000000075a216bd 2 bytes JMP 771a8713 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[4372] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                      0000000075a21401 2 bytes JMP 7712b21b C:\Windows\syswow64\KERNEL32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[4372] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                        0000000075a21419 2 bytes JMP 7712b346 C:\Windows\syswow64\KERNEL32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[4372] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                      0000000075a21431 2 bytes JMP 771a8fd1 C:\Windows\syswow64\KERNEL32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[4372] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                      0000000075a2144a 2 bytes CALL 7710489d C:\Windows\syswow64\KERNEL32.dll
.text    ...                                                                                                                                                                                                              * 9
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[4372] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                         0000000075a214dd 2 bytes JMP 771a88c4 C:\Windows\syswow64\KERNEL32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[4372] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                  0000000075a214f5 2 bytes JMP 771a8aa0 C:\Windows\syswow64\KERNEL32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[4372] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                         0000000075a2150d 2 bytes JMP 771a87ba C:\Windows\syswow64\KERNEL32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[4372] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                  0000000075a21525 2 bytes JMP 771a8b8a C:\Windows\syswow64\KERNEL32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[4372] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                        0000000075a2153d 2 bytes JMP 7711fca8 C:\Windows\syswow64\KERNEL32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[4372] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                             0000000075a21555 2 bytes JMP 771268ef C:\Windows\syswow64\KERNEL32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[4372] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                      0000000075a2156d 2 bytes JMP 771a9089 C:\Windows\syswow64\KERNEL32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[4372] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                        0000000075a21585 2 bytes JMP 771a8bea C:\Windows\syswow64\KERNEL32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[4372] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                           0000000075a2159d 2 bytes JMP 771a877e C:\Windows\syswow64\KERNEL32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[4372] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                        0000000075a215b5 2 bytes JMP 7711fd41 C:\Windows\syswow64\KERNEL32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[4372] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                      0000000075a215cd 2 bytes JMP 7712b2dc C:\Windows\syswow64\KERNEL32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[4372] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                  0000000075a216b2 2 bytes JMP 771a8f4c C:\Windows\syswow64\KERNEL32.dll
.text    C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE[4372] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                  0000000075a216bd 2 bytes JMP 771a8713 C:\Windows\syswow64\KERNEL32.dll
.text    C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[5016] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                0000000075a21401 2 bytes JMP 7712b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[5016] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                  0000000075a21419 2 bytes JMP 7712b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[5016] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                0000000075a21431 2 bytes JMP 771a8fd1 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[5016] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                0000000075a2144a 2 bytes CALL 7710489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                              * 9
.text    C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[5016] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                   0000000075a214dd 2 bytes JMP 771a88c4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[5016] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                            0000000075a214f5 2 bytes JMP 771a8aa0 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[5016] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                   0000000075a2150d 2 bytes JMP 771a87ba C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[5016] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                            0000000075a21525 2 bytes JMP 771a8b8a C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[5016] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                  0000000075a2153d 2 bytes JMP 7711fca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[5016] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                       0000000075a21555 2 bytes JMP 771268ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[5016] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                0000000075a2156d 2 bytes JMP 771a9089 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[5016] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                  0000000075a21585 2 bytes JMP 771a8bea C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[5016] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                     0000000075a2159d 2 bytes JMP 771a877e C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[5016] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                  0000000075a215b5 2 bytes JMP 7711fd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[5016] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                0000000075a215cd 2 bytes JMP 7712b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[5016] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                            0000000075a216b2 2 bytes JMP 771a8f4c C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[5016] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                            0000000075a216bd 2 bytes JMP 771a8713 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\sua.exe[7556] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                         0000000075a21401 2 bytes JMP 7712b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\sua.exe[7556] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                           0000000075a21419 2 bytes JMP 7712b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\sua.exe[7556] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                         0000000075a21431 2 bytes JMP 771a8fd1 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\sua.exe[7556] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                         0000000075a2144a 2 bytes CALL 7710489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                              * 9
.text    C:\Program Files (x86)\Secunia\PSI\sua.exe[7556] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                            0000000075a214dd 2 bytes JMP 771a88c4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\sua.exe[7556] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                     0000000075a214f5 2 bytes JMP 771a8aa0 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\sua.exe[7556] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                            0000000075a2150d 2 bytes JMP 771a87ba C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\sua.exe[7556] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                     0000000075a21525 2 bytes JMP 771a8b8a C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\sua.exe[7556] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                           0000000075a2153d 2 bytes JMP 7711fca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\sua.exe[7556] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                                0000000075a21555 2 bytes JMP 771268ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\sua.exe[7556] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                         0000000075a2156d 2 bytes JMP 771a9089 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\sua.exe[7556] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                           0000000075a21585 2 bytes JMP 771a8bea C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\sua.exe[7556] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                              0000000075a2159d 2 bytes JMP 771a877e C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\sua.exe[7556] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                           0000000075a215b5 2 bytes JMP 7711fd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\sua.exe[7556] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                         0000000075a215cd 2 bytes JMP 7712b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\sua.exe[7556] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                     0000000075a216b2 2 bytes JMP 771a8f4c C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Secunia\PSI\sua.exe[7556] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                     0000000075a216bd 2 bytes JMP 771a8713 C:\Windows\syswow64\kernel32.dll
---- Processes - GMER 2.1 ----

Library  c:\users\***\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmprf_y8x.dll (*** suspicious ***) @ C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3588](2015-12-01 17:58:45)  0000000071120000

---- Registry - GMER 2.1 ----

Reg      HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\685d43e3102e                                                                                                                                      
Reg      HKLM\SYSTEM\CurrentControlSet\services\WinUsb\Parameters\Wdf@TimeOfLastSqmLog                                                                                                                                    0xE2 0x64 0x55 0xFB ...
Reg      HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\685d43e3102e (not active ControlSet)                                                                                                                  

---- EOF - GMER 2.1 ----
         

Ich danke euch vielmals.
Sandra

hi,

sieht gut aus.

Lade Dir bitte von hier Emsisoft Emergency Kit herunter.

• Bitte installiere das Programm in den vorgegebenen Pfad.
• Starte das Programm durch Doppelklick der Desktopverknüpfung.
• Das EEK ist nach dem Laden der Malwaresignaturen für den Scan bereit.
• Folge nun bitte der bebilderten Bildanleitung zu Emergency Kit, entferne alle Funde und poste am Ende des Scans bzw. der Bereinigung das Log.
  

Hallo,

hier der Log:

Emsisoft Emergency Kit - Version 10.0
Letztes Update: 03.12.2015 22:05:19
Benutzerkonto: ****-PC\****

Scan-Einstellungen:

Scan-Methode: Malware-Scan
Objekte: Rootkits, Speicher, Traces, Dateien

PUPs-Erkennung: An
Archiv-Scan: Aus
ADS Scan: An
Dateitypen-Filter: Aus
Erweitertes Caching: An
Direkter Festplattenzugriff: Aus

Scan-Beginn:	03.12.2015 22:05:58
Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS 	Gefunden: Setting.DisableRegistryTools (A)
Value: HKEY_USERS\S-1-5-21-1476551734-19124195-2179231302-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS 	Gefunden: Setting.DisableRegistryTools (A)

Gescannt:	84262
Gefunden	2

Scan-Ende:	03.12.2015 22:13:31
Scan-Zeit:	0:07:33

Value: HKEY_USERS\S-1-5-21-1476551734-19124195-2179231302-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS	Quarantäne Setting.DisableRegistryTools (A)
Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS	Quarantäne Setting.DisableRegistryTools (A)

Quarantäne	2
         

sieht immer noch gut aus

Hallo schrauber,

super, dann bin ich erleichtert Vielen Dank!

LG
Sandra

Gern Geschehen