Bei einer Mail habe ich auf den Anhang versehentlich einen Doppelklick gemacht, anstatt über Rechtsklick zu löschen.
Da war es dann wohl schon zu spät. Nun sehe ich im Taskmanager die folgenden .exe ohne Benutzernamen:
atiedxx
csrss
winlogon
Dann habe ich mich hier regiestrieren lassen und FRST64 heruntergeladen und ohne Veränderung laufen lassen.

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:01-12-2015
durchgeführt von helmut (Administrator) auf HELMUT-PC (04-12-2015 09:55:33)
Gestartet von C:\Users\helmut\Downloads\Sicherheit
Geladene Profile: helmut (Verfügbare Profile: helmut & HLpostgres)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchService.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Emsi Software GmbH) C:\Program Files (x86)\a-squared Free\a2service.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Apache Software Foundation) C:\Program Files (x86)\PostgreSQL\EnterpriseDB-ApachePHP\apache\bin\httpd.exe
(GfK) C:\Program Files (x86)\GfK-NetworkMeter\GfK-NetworkMeter64.exe
() C:\Program Files (x86)\GfK Internet-Monitor\GfK-Reporting.exe
() C:\Program Files (x86)\GfK Internet-Monitor\GfK-Updater.exe
() C:\Users\helmut\AppData\Roaming\Host System\host.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
(Apache Software Foundation) C:\Program Files (x86)\PostgreSQL\EnterpriseDB-ApachePHP\apache\bin\httpd.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
(Oki Data Corporation) C:\Windows\System32\spool\drivers\x64\3\OPHMLDCS.EXE
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
(Panda Security) C:\ProgramData\Panda Security URL Filtering\Panda_URL_Filteringb.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
(Paramount Software UK Ltd) C:\Program Files\Macrium\Reflect\ReflectService.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Sonix) C:\Windows\vsnp2uvc.exe
() C:\Program Files\Rainlendar2\Rainlendar2.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Ashampoo Media GmbH & Co. KG) C:\Program Files (x86)\Ashampoo\Ashampoo Snap 7\ashsnap.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
() C:\Users\helmut\AppData\Local\BMToolbox-c3f5093c\BMToolbox.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
() C:\Windows\SysWOW64\C2MP\TrayMenu.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(TeamDrive Systems GmbH) C:\Program Files (x86)\TeamDrive\TeamDrive.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\Evernote.exe
(Sonix Technology Co., Ltd.) C:\Windows\tsnp2uvc.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe
(VIA Technologies, Inc.) C:\VIA_XHCI\usb3Monitor.exe
() C:\Windows\SysWOW64\UMonit.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\redirector.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\Receiver\Receiver.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\SelfServicePlugin\SelfServicePlugin.exe
() C:\Program Files (x86)\TeamDrive\QtWebProcess.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(GfK SE) C:\Program Files (x86)\GfK Internet-Monitor\GfK-LoginInterface.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Samsung Electronics.) C:\Program Files (x86)\Samsung Magician\Samsung Magician.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe InDesign CS5\InDesign.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [snp2uvc] => C:\Windows\vsnp2uvc.exe [675840 2015-03-11] (Sonix)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5120144 2012-05-23] (VIA)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-20] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-09-11] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [tsnp2uvc] => C:\Windows\tsnp2uvc.exe
HKLM-x32\...\Run: [LexwareInfoService] => C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe [196648 2014-09-26] (Haufe-Lexware GmbH & Co. KG)
HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [40184 2015-02-17] (Panda Security, S.L.)
HKLM-x32\...\Run: [VIAxHCUtl] => C:\VIA_XHCI\usb3Monitor.exe [331776 2015-03-11] (VIA Technologies, Inc.)
HKLM-x32\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2015-03-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Codec Settings UAC Manager] => C:\Windows\SysWOW64\C2MP\CodecUACManager.exe [60432 2015-03-05] ()
HKLM-x32\...\Run: [snp2uvc] => C:\Windows\vsnp2uvc.exe
HKLM-x32\...\Run: [UMonit] => C:\Windows\SysWOW64\UMonit.exe [49152 2015-03-11] ()
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [CitrixReceiver] => "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citrix\Receiver Updater.lnk"
HKLM-x32\...\Run: [ConnectionCenter] => C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [395656 2013-10-01] (Citrix Systems, Inc.)
HKLM-x32\...\Run: [Redirector] => C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [153992 2013-10-01] (Citrix Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation)
HKU\S-1-5-21-338742899-1140788568-2099717303-1000\...\Run: [Rainlendar2] => C:\Program Files\Rainlendar2\Rainlendar2.exe [4411488 2014-03-16] ()
HKU\S-1-5-21-338742899-1140788568-2099717303-1000\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22790776 2015-11-04] (Google)
HKU\S-1-5-21-338742899-1140788568-2099717303-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-338742899-1140788568-2099717303-1000\...\Run: [Codec Pack Update Checker] => "C:\Windows\system32\C2MP\UpdateChecker.exe"
HKU\S-1-5-21-338742899-1140788568-2099717303-1000\...\Run: [AshSnap] => C:\Program Files (x86)\Ashampoo\Ashampoo Snap 7\ashsnap.exe [5846360 2015-06-05] (Ashampoo Media GmbH & Co. KG)
HKU\S-1-5-21-338742899-1140788568-2099717303-1000\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2015-03-11] (Hewlett-Packard Company)
HKU\S-1-5-21-338742899-1140788568-2099717303-1000\...\Run: [BMToolBox-c3f5093c] => C:\Users\helmut\AppData\Local\BMToolbox-c3f5093c\BMToolbox.exe [595456 2014-04-03] ()
HKU\S-1-5-21-338742899-1140788568-2099717303-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler
HKU\S-1-5-21-338742899-1140788568-2099717303-1000\...\Run: [] => [X]
HKU\S-1-5-21-338742899-1140788568-2099717303-1000\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-338742899-1140788568-2099717303-1000\...\MountPoints2: {baa76944-5129-11e4-9fda-902b345771ea} - N:\pushinst.exe
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-11-04] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-11-04] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-11-04] (Google)
ShellIconOverlayIdentifiers: [""teamdrive_1_Sync] -> {E94EFFA4-DBD6-40EF-92FC-460FDEB3684A} => C:\Program Files (x86)\TeamDrive\TeamDriveShellExt64.dll [2015-07-01] (TeamDrive Systems GmbH)
ShellIconOverlayIdentifiers: [""teamdrive_2_Warning] -> {E94EFFA5-DBD6-40EF-92FC-460FDEB3684A} => C:\Program Files (x86)\TeamDrive\TeamDriveShellExt64.dll [2015-07-01] (TeamDrive Systems GmbH)
ShellIconOverlayIdentifiers: [""teamdrive_3_Folder] -> {E94EFFA6-DBD6-40EF-92FC-460FDEB3684A} => C:\Program Files (x86)\TeamDrive\TeamDriveShellExt64.dll [2015-07-01] (TeamDrive Systems GmbH)
ShellIconOverlayIdentifiers: [HiDriveOverlayIcon1] -> {dcda8604-4820-3d3b-a147-01b46438873f} => C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [HiDriveOverlayIcon2] -> {34a70481-a098-3c2c-aea8-5291cb468991} => C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [""teamdrive_1_Sync] -> {E94EFFA4-DBD6-40EF-92FC-460FDEB3684A} => C:\Program Files (x86)\TeamDrive\TeamDriveShellExt32.dll [2015-07-01] (TeamDrive Systems GmbH)
ShellIconOverlayIdentifiers-x32: [""teamdrive_2_Warning] -> {E94EFFA5-DBD6-40EF-92FC-460FDEB3684A} => C:\Program Files (x86)\TeamDrive\TeamDriveShellExt32.dll [2015-07-01] (TeamDrive Systems GmbH)
ShellIconOverlayIdentifiers-x32: [""teamdrive_3_Folder] -> {E94EFFA6-DBD6-40EF-92FC-460FDEB3684A} => C:\Program Files (x86)\TeamDrive\TeamDriveShellExt32.dll [2015-07-01] (TeamDrive Systems GmbH)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackTrayMenu.lnk [2015-03-11]
ShortcutTarget: CodecPackTrayMenu.lnk -> C:\Windows\SysWOW64\C2MP\TrayMenu.exe ()
Startup: C:\Users\helmut\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2015-03-11]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\helmut\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteTray.lnk [2015-03-11]
ShortcutTarget: EvernoteTray.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\helmut\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HiDrive.lnk [2015-10-03]
ShortcutTarget: HiDrive.lnk -> C:\Program Files (x86)\Strato\HiDrive\HiDrive.App.exe ()
Startup: C:\Users\helmut\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TeamDrive starten.lnk [2015-07-03]
ShortcutTarget: TeamDrive starten.lnk -> C:\Program Files (x86)\TeamDrive\TeamDrive.exe (TeamDrive Systems GmbH)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\..\Interfaces\{F273B107-26CD-4760-B6CD-2F200FCD5B05}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: GfK Internet-Monitor -> {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} -> C:\Program Files (x86)\GfK Internet-Monitor\x64\Gacela2.dll [2015-09-17] (GfK)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-12-01] (Oracle Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Panda Security Toolbar -> {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} -> C:\Program Files (x86)\pandasecuritytb\pandasecurityDx64.dll [2015-02-10] ()
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-01] (Oracle Corporation)
BHO-x32: Kein Name -> {269D0B18-45D0-46D0-A644-2D60D928BC7F} -> C:\Users\helmut\AppData\LocalLow\Internet Explorer BHO\bho.dll [2014-07-23] ()
BHO-x32: GfK Internet-Monitor -> {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} -> C:\Program Files (x86)\GfK Internet-Monitor\Gacela2.dll [2015-09-17] (GfK)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-12-01] (Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-09-03] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Panda Security Toolbar -> {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} -> C:\Program Files (x86)\pandasecuritytb\pandasecurityDx.dll [2015-02-10] ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-01] (Oracle Corporation)
Toolbar: HKLM - Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files (x86)\pandasecuritytb\pandasecurityDx64.dll [2015-02-10] ()
Toolbar: HKLM-x32 - Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files (x86)\pandasecuritytb\pandasecurityDx.dll [2015-02-10] ()
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)
Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc.)

FireFox:
========
FF ProfilePath: C:\Users\helmut\AppData\Roaming\Mozilla\Firefox\Profiles\jg3pmphw.default-1399798277356
FF Homepage: hxxp://www.spiegel.de/
FF Keyword.URL: 
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll [2015-11-11] ()
FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-01] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-01] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-11] ()
FF Plugin-x32: @Citrix.com/npican -> C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll [2013-10-01] (Citrix Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-01] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-01] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-03] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.10 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll [2011-04-20] (Wacom, Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.0.0.4 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2011-12-24] (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-338742899-1140788568-2099717303-1000: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2011-12-24] (Wacom)
FF SearchPlugin: C:\Users\helmut\AppData\Roaming\Mozilla\Firefox\Profiles\jg3pmphw.default-1399798277356\searchplugins\11-suche.xml [2014-10-15]
FF SearchPlugin: C:\Users\helmut\AppData\Roaming\Mozilla\Firefox\Profiles\jg3pmphw.default-1399798277356\searchplugins\englische-ergebnisse.xml [2014-10-15]
FF SearchPlugin: C:\Users\helmut\AppData\Roaming\Mozilla\Firefox\Profiles\jg3pmphw.default-1399798277356\searchplugins\gmx-suche.xml [2014-10-15]
FF SearchPlugin: C:\Users\helmut\AppData\Roaming\Mozilla\Firefox\Profiles\jg3pmphw.default-1399798277356\searchplugins\lastminute.xml [2014-10-15]
FF SearchPlugin: C:\Users\helmut\AppData\Roaming\Mozilla\Firefox\Profiles\jg3pmphw.default-1399798277356\searchplugins\webde-suche.xml [2014-10-15]
FF Extension: Panda Security Toolbar - C:\Users\helmut\AppData\Roaming\Mozilla\Firefox\Profiles\jg3pmphw.default-1399798277356\extensions\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} [2015-03-05] [ist nicht signiert]
FF Extension: SQLite Manager - C:\Users\helmut\AppData\Roaming\Mozilla\Firefox\Profiles\jg3pmphw.default-1399798277356\extensions\SQLiteManager@mrinalkant.blogspot.com.xpi [2015-05-31]
FF Extension: WOT - C:\Users\helmut\AppData\Roaming\Mozilla\Firefox\Profiles\jg3pmphw.default-1399798277356\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-11-30]
FF Extension: Shumway - C:\Users\helmut\AppData\Roaming\Mozilla\Firefox\Profiles\jg3pmphw.default-1399798277356\Extensions\shumway@research.mozilla.org [2015-10-15] [ist nicht signiert]
FF Extension: MPEG4Notifier - C:\Users\helmut\AppData\Roaming\Mozilla\Firefox\Profiles\jg3pmphw.default-1399798277356\Extensions\{11a02f95-f24e-45d8-ac22-a692ce7fccda}.xpi [2015-08-25] [ist nicht signiert]
FF Extension: Download Updater - C:\Users\helmut\AppData\Roaming\Mozilla\Firefox\Profiles\jg3pmphw.default-1399798277356\Extensions\{6c479f39-ef91-433b-895d-1ff702c36eca}.xpi [2015-12-03] [ist nicht signiert]
FF Extension: Adblock Plus - C:\Users\helmut\AppData\Roaming\Mozilla\Firefox\Profiles\jg3pmphw.default-1399798277356\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-11-28]
FF Extension: Kein Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [gacela2@nurago.com] - C:\Program Files (x86)\GfK Internet-Monitor\FirefoxAddon.xpi
FF Extension: Kein Name - C:\Program Files (x86)\GfK Internet-Monitor\FirefoxAddon.xpi [2015-04-12] [ist nicht signiert]
FF HKU\S-1-5-21-338742899-1140788568-2099717303-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-05-11] [ist nicht signiert]

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [caeaobpemokdfnidgaebncaooofnbfha] - C:\Users\helmut\ChromeExtensions\caeaobpemokdfnidgaebncaooofnbfha\amazon-icon-fwde.crx [2014-10-15]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 a2free; C:\Program Files (x86)\a-squared Free\a2service.exe [1858144 2009-10-01] (Emsi Software GmbH) [Datei ist nicht signiert]
S4 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
S4 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer Free\Dfsdks.exe [544768 2009-08-24] (mst software GmbH, Germany) [Datei ist nicht signiert]
R2 EnterpriseDBApachePHP; C:\Program Files (x86)\PostgreSQL\EnterpriseDB-ApachePHP\apache\bin\httpd.exe [22016 2014-08-19] (Apache Software Foundation) [Datei ist nicht signiert]
R2 GfK-NetworkMeter; C:\Program Files (x86)\GfK-NetworkMeter\GfK-NetworkMeter64.exe [1223904 2015-09-17] (GfK)
R2 GfK-Reporting-Service; C:\Program Files (x86)\GfK Internet-Monitor\GfK-Reporting.exe [1938632 2015-09-17] ()
R2 GfK-Update-Service; C:\Program Files (x86)\GfK Internet-Monitor\GfK-Updater.exe [1356264 2014-08-13] ()
R2 HostService; C:\Users\helmut\AppData\Roaming\Host System\host.exe [536576 2014-07-23] () [Datei ist nicht signiert]
S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [Datei ist nicht signiert]
S4 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Datei ist nicht signiert]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165144 2012-05-10] (Intel Corporation)
R2 Lexware_Update_Service; C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe [64552 2014-08-14] (Haufe-Lexware GmbH & Co. KG)
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2013-01-16] (Hewlett-Packard Company) [Datei ist nicht signiert]
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [142584 2015-02-17] (Panda Security, S.L.)
S4 Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [853288 2007-09-20] (Nero AG)
S4 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [382248 2007-10-15] (Nero AG)
R2 OKI OPHM DCS Loader; C:\Windows\system32\spool\DRIVERS\x64\3\OPHMLDCS.EXE [20480 2014-05-24] (Oki Data Corporation) [Datei ist nicht signiert]
R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [66808 2014-10-09] (Panda Security, S.L.)
R2 panda_url_filtering; C:\ProgramData\Panda Security URL Filtering\Panda_URL_Filteringb.exe [296760 2014-09-19] (Panda Security)
R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [38136 2015-02-17] (Panda Security, S.L.)
R2 ReflectService.exe; C:\Program Files\Macrium\Reflect\ReflectService.exe [3446224 2015-02-23] (Paramount Software UK Ltd)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2012-05-04] (VIA Technologies, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 AAV UpdateService; L:\Steuern\Lexware\AAVUpdateManager\aavus.exe [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21616 2011-11-02] ()
R1 cbfs5; C:\Windows\system32\drivers\cbfs5.sys [421056 2015-07-23] (EldoS Corporation)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 GPCIDrv; C:\Program Files (x86)\GIGABYTE\EasyBoost\GPCIDrv64.sys [14376 2008-07-15] ()
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2014-04-30] ()
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [129224 2013-07-18] (Qualcomm Atheros Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2015-12-04] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
S3 MWAC; \??\C:\Windows\SysWOW64\drivers\ [0 ] () <==== ACHTUNG (Null Byte Datei/Ordner)
R1 NNSALPC; C:\Windows\System32\DRIVERS\NNSAlpc.sys [93968 2015-02-09] (Panda Security, S.L.)
R1 NNSHTTP; C:\Windows\System32\DRIVERS\NNSHttp.sys [202000 2015-02-09] (Panda Security, S.L.)
R1 NNSHTTPS; C:\Windows\System32\DRIVERS\NNSHttps.sys [110864 2015-02-09] (Panda Security, S.L.)
R1 NNSIDS; C:\Windows\System32\DRIVERS\NNSIds.sys [116496 2015-02-09] (Panda Security, S.L.)
R1 NNSNAHSL; C:\Windows\System32\DRIVERS\NNSNAHSL.sys [48400 2014-12-31] (Panda Security, S.L.)
R1 NNSPICC; C:\Windows\System32\DRIVERS\NNSPicc.sys [99600 2015-02-09] (Panda Security, S.L.)
R1 NNSPIHSW; C:\Windows\System32\DRIVERS\NNSPihsw.sys [69904 2015-02-09] (Panda Security, S.L.)
R1 NNSPOP3; C:\Windows\System32\DRIVERS\NNSPop3.sys [124176 2015-02-09] (Panda Security, S.L.)
R1 NNSPROT; C:\Windows\System32\DRIVERS\NNSProt.sys [299792 2015-02-09] (Panda Security, S.L.)
R1 NNSPRV; C:\Windows\System32\DRIVERS\NNSPrv.sys [166160 2015-02-09] (Panda Security, S.L.)
R1 NNSSMTP; C:\Windows\System32\DRIVERS\NNSSmtp.sys [113424 2015-02-09] (Panda Security, S.L.)
R1 NNSSTRM; C:\Windows\System32\DRIVERS\NNSStrm.sys [257296 2015-02-09] (Panda Security, S.L.)
R1 NNSTLSC; C:\Windows\System32\DRIVERS\NNSTlsc.sys [106256 2015-02-09] (Panda Security, S.L.)
S3 OV550I; C:\Windows\System32\Drivers\ov550ivx.sys [196992 2008-02-21] (Omnivision Technologies, Inc.)
R3 panda_url_filteringd; C:\ProgramData\Panda Security URL Filtering\panda_url_filteringd.sys [51288 2014-03-19] (Visicom Media Inc.)
R2 PSINAflt; C:\Windows\System32\DRIVERS\PSINAflt.sys [163088 2015-02-11] (Panda Security, S.L.)
R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [121616 2015-02-11] (Panda Security, S.L.)
R1 PSINKNC; C:\Windows\System32\DRIVERS\psinknc.sys [197392 2015-02-10] (Panda Security, S.L.)
R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [124176 2015-02-11] (Panda Security, S.L.)
R2 PSINProt; C:\Windows\System32\DRIVERS\PSINProt.sys [133904 2015-02-11] (Panda Security, S.L.)
R2 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [107792 2015-02-11] (Panda Security, S.L.)
R3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [61712 2015-01-29] (Panda Security, S.L.)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3552512 2010-06-29] ()
S3 ST50220; C:\Windows\System32\Drivers\ST50220.sys [44544 2007-08-30] (Sonix)
S3 TVICHW32; C:\Program Files (x86)\GIGABYTE\EasyBoost\TVicHW64.sys [21200 2006-10-13] (EnTech Taiwan)
R3 VUSB3HUB; C:\Windows\System32\DRIVERS\ViaHub3.sys [137728 2014-05-20] (VIA Technologies, Inc.)
R3 xhcdrv; C:\Windows\System32\DRIVERS\xhcdrv.sys [195584 2014-05-20] (VIA Technologies, Inc.)
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-04 09:55 - 2015-12-04 09:55 - 00000000 ____D C:\FRST
2015-12-04 09:54 - 2015-12-04 09:55 - 00000000 ____D C:\Users\helmut\Downloads\Sicherheit
2015-12-03 19:53 - 2015-12-04 08:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2015-12-03 11:19 - 2015-12-03 11:19 - 00142212 _____ C:\Users\helmut\Documents\DB_Beschwerde_Lohkamp_001.pdf
2015-12-03 11:17 - 2015-12-03 11:17 - 00130873 _____ C:\Users\helmut\Documents\DB_Beschwerde_Lohkamp_002.pdf
2015-12-02 12:04 - 2015-12-02 12:04 - 00000000 ____D C:\Users\helmut\AppData\Roaming\dvdcss
2015-11-23 19:01 - 2015-11-23 19:01 - 04314366 _____ C:\Users\helmut\Documents\Brasilien26 001.psd
2015-11-23 13:51 - 2015-11-23 13:51 - 26990992 _____ (pdfforge GmbH) C:\Users\helmut\Downloads\PDFCreator-2_2_1-setup.exe
2015-11-23 09:22 - 2015-11-23 09:23 - 142126796 _____ (XMind Ltd. ) C:\Users\helmut\Downloads\xmind7-windows-3.6.0.R-201511090408.exe
2015-11-16 16:26 - 2015-11-16 16:26 - 00000000 ____D C:\Users\helmut\AppData\Roaming\com.adobe.DC3Module.AdobeADC
2015-11-12 21:50 - 2015-11-03 18:55 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-11-11 14:35 - 2015-11-11 14:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Phase One
2015-11-11 14:24 - 2015-11-11 14:26 - 126508688 _____ (Phase One A/S) C:\Users\helmut\Downloads\MediaPro-1.5-906b.exe
2015-11-11 09:22 - 2015-11-03 23:10 - 00390344 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-11-11 09:22 - 2015-11-03 22:51 - 00342728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-11-11 09:22 - 2015-10-31 00:46 - 25818624 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-11-11 09:22 - 2015-10-31 00:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-11-11 09:22 - 2015-10-31 00:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-11-11 09:22 - 2015-10-31 00:25 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-11-11 09:22 - 2015-10-31 00:25 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-11-11 09:22 - 2015-10-31 00:25 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-11-11 09:22 - 2015-10-31 00:25 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-11-11 09:22 - 2015-10-31 00:24 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-11-11 09:22 - 2015-10-31 00:24 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-11-11 09:22 - 2015-10-31 00:17 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-11-11 09:22 - 2015-10-31 00:16 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-11-11 09:22 - 2015-10-31 00:13 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-11-11 09:22 - 2015-10-31 00:12 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-11-11 09:22 - 2015-10-31 00:12 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-11-11 09:22 - 2015-10-31 00:11 - 05990912 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-11-11 09:22 - 2015-10-31 00:11 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-11-11 09:22 - 2015-10-31 00:11 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-11-11 09:22 - 2015-10-31 00:04 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-11-11 09:22 - 2015-10-31 00:01 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-11-11 09:22 - 2015-10-30 23:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-11-11 09:22 - 2015-10-30 23:53 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-11-11 09:22 - 2015-10-30 23:52 - 20331520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-11-11 09:22 - 2015-10-30 23:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-11-11 09:22 - 2015-10-30 23:49 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-11-11 09:22 - 2015-10-30 23:47 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-11-11 09:22 - 2015-10-30 23:46 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-11-11 09:22 - 2015-10-30 23:46 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-11-11 09:22 - 2015-10-30 23:45 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-11-11 09:22 - 2015-10-30 23:45 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-11-11 09:22 - 2015-10-30 23:44 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-11-11 09:22 - 2015-10-30 23:44 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-11-11 09:22 - 2015-10-30 23:42 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-11-11 09:22 - 2015-10-30 23:39 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-11-11 09:22 - 2015-10-30 23:39 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-11-11 09:22 - 2015-10-30 23:37 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-11-11 09:22 - 2015-10-30 23:36 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-11-11 09:22 - 2015-10-30 23:36 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-11-11 09:22 - 2015-10-30 23:36 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-11-11 09:22 - 2015-10-30 23:34 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-11-11 09:22 - 2015-10-30 23:32 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-11-11 09:22 - 2015-10-30 23:31 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-11-11 09:22 - 2015-10-30 23:29 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-11-11 09:22 - 2015-10-30 23:29 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-11-11 09:22 - 2015-10-30 23:28 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-11-11 09:22 - 2015-10-30 23:23 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-11-11 09:22 - 2015-10-30 23:22 - 14457856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-11-11 09:22 - 2015-10-30 23:21 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-11-11 09:22 - 2015-10-30 23:19 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-11-11 09:22 - 2015-10-30 23:18 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-11-11 09:22 - 2015-10-30 23:17 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-11-11 09:22 - 2015-10-30 23:17 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-11-11 09:22 - 2015-10-30 23:16 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-11-11 09:22 - 2015-10-30 23:11 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-11-11 09:22 - 2015-10-30 23:10 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-11-11 09:22 - 2015-10-30 23:09 - 12854272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-11-11 09:22 - 2015-10-30 23:09 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-11-11 09:22 - 2015-10-30 23:09 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-11-11 09:22 - 2015-10-30 23:04 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-11-11 09:22 - 2015-10-30 22:53 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-11-11 09:22 - 2015-10-30 22:51 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-11-11 09:22 - 2015-10-30 22:48 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-11-11 09:22 - 2015-10-30 22:46 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-11-11 09:22 - 2015-10-20 19:42 - 03168768 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-11-11 09:22 - 2015-10-20 19:42 - 02608128 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-11-11 09:22 - 2015-10-20 19:42 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-11-11 09:22 - 2015-10-20 19:42 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-11-11 09:22 - 2015-10-20 19:42 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-11-11 09:22 - 2015-10-20 19:42 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-11-11 09:22 - 2015-10-20 19:42 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-11-11 09:22 - 2015-10-20 19:41 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-11-11 09:22 - 2015-10-20 19:41 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-11-11 09:22 - 2015-10-20 19:41 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-11-11 09:22 - 2015-10-20 19:41 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-11-11 09:22 - 2015-10-20 18:46 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-11-11 09:22 - 2015-10-20 18:46 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-11-11 09:22 - 2015-10-20 18:46 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-11-11 09:22 - 2015-10-20 18:46 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-11-11 09:22 - 2015-10-20 18:45 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-11-11 09:21 - 2015-10-29 18:50 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-11-11 09:21 - 2015-10-29 18:50 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-11-11 09:21 - 2015-10-29 18:50 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-11-11 09:21 - 2015-10-29 18:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-11-11 09:21 - 2015-10-29 18:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2015-11-11 09:21 - 2015-10-29 18:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2015-11-11 09:21 - 2015-10-29 18:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-11-11 09:21 - 2015-10-20 02:12 - 05570496 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-11-11 09:21 - 2015-10-20 02:12 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-11-11 09:21 - 2015-10-20 02:12 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-11-11 09:21 - 2015-10-20 02:09 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-11-11 09:21 - 2015-10-20 02:06 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-11-11 09:21 - 2015-10-20 02:06 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-11-11 09:21 - 2015-10-20 02:06 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-11-11 09:21 - 2015-10-20 02:06 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-11-11 09:21 - 2015-10-20 02:05 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-11-11 09:21 - 2015-10-20 02:05 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-11-11 09:21 - 2015-10-20 02:05 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-11-11 09:21 - 2015-10-20 02:05 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-11-11 09:21 - 2015-10-20 02:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-11-11 09:21 - 2015-10-20 02:05 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-11-11 09:21 - 2015-10-20 02:05 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-11-11 09:21 - 2015-10-20 02:05 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-11-11 09:21 - 2015-10-20 02:05 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-11-11 09:21 - 2015-10-20 02:05 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-11-11 09:21 - 2015-10-20 02:05 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-11-11 09:21 - 2015-10-20 02:05 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-11-11 09:21 - 2015-10-20 02:05 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-11-11 09:21 - 2015-10-20 02:05 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-11-11 09:21 - 2015-10-20 02:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-11-11 09:21 - 2015-10-20 02:05 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-11-11 09:21 - 2015-10-20 02:05 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-11-11 09:21 - 2015-10-20 02:05 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-11-11 09:21 - 2015-10-20 02:05 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-11-11 09:21 - 2015-10-20 02:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-11-11 09:21 - 2015-10-20 02:05 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-11-11 09:21 - 2015-10-20 02:04 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-11-11 09:21 - 2015-10-20 02:04 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-11-11 09:21 - 2015-10-20 02:04 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-11-11 09:21 - 2015-10-20 02:00 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-11-11 09:21 - 2015-10-20 01:59 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:52 - 03991488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-11-11 09:21 - 2015-10-20 01:52 - 03935680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-11-11 09:21 - 2015-10-20 01:48 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-11-11 09:21 - 2015-10-20 01:45 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-11-11 09:21 - 2015-10-20 01:45 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-11-11 09:21 - 2015-10-20 01:45 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-11-11 09:21 - 2015-10-20 01:45 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-11-11 09:21 - 2015-10-20 01:45 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-11-11 09:21 - 2015-10-20 01:45 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-11-11 09:21 - 2015-10-20 01:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-11-11 09:21 - 2015-10-20 01:45 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-11-11 09:21 - 2015-10-20 01:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-11-11 09:21 - 2015-10-20 01:45 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-11-11 09:21 - 2015-10-20 01:45 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-11-11 09:21 - 2015-10-20 01:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-11-11 09:21 - 2015-10-20 01:44 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-11-11 09:21 - 2015-10-20 01:44 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-11-11 09:21 - 2015-10-20 01:44 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-11-11 09:21 - 2015-10-20 01:44 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-11-11 09:21 - 2015-10-20 01:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-11-11 09:21 - 2015-10-20 01:44 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-11-11 09:21 - 2015-10-20 01:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-11-11 09:21 - 2015-10-20 01:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 00:41 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-11-11 09:21 - 2015-10-20 00:40 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-11-11 09:21 - 2015-10-20 00:40 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-11-11 09:21 - 2015-10-20 00:29 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-11-11 09:21 - 2015-10-20 00:29 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-11-11 09:21 - 2015-10-20 00:27 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 00:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 00:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-11-11 09:21 - 2015-10-20 00:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-11-11 09:21 - 2015-10-13 17:41 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-11-11 09:21 - 2015-10-13 17:40 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-11-11 09:21 - 2015-10-13 05:57 - 00950720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-11-11 09:21 - 2015-10-01 19:00 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-11-11 09:21 - 2015-10-01 18:50 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-11-11 09:21 - 2015-09-23 14:15 - 00460776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-11-11 09:21 - 2015-09-23 14:15 - 00299632 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2015-11-11 09:21 - 2015-09-23 14:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2015-11-07 12:18 - 2015-11-07 12:18 - 00000000 ____D C:\Users\helmut\.MCTranscodingSDK
2015-11-07 12:17 - 2015-11-07 13:50 - 00000000 ____D C:\Users\Public\Documents\Lightworks
2015-11-07 12:17 - 2015-11-07 12:17 - 00000000 ____D C:\ProgramData\Geevs
2015-11-07 12:16 - 2015-11-07 12:17 - 00000000 ____D C:\Program Files\Lightworks
2015-11-07 12:08 - 2015-11-07 12:08 - 06052705 _____ C:\Users\helmut\Downloads\Lightworks_v12.5.0_User_Guide.pdf
2015-11-07 12:08 - 2015-11-07 12:08 - 02245241 _____ C:\Users\helmut\Downloads\lw_hintstips_deutsch.pdf
2015-11-07 11:48 - 2015-11-07 11:48 - 67203112 _____ (Lightworks) C:\Users\helmut\Downloads\lightworks_v12.5.0_full_64bit_setup.exe
2015-11-07 09:55 - 2015-11-07 09:55 - 00000000 ____D C:\Users\helmut\AppData\Local\CEF
2015-11-07 09:52 - 2015-11-25 19:27 - 00002471 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-11-06 08:45 - 2015-11-06 08:45 - 00000000 _____ C:\autoexec.bat
2015-11-06 08:40 - 2015-11-07 12:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video
2015-11-06 08:40 - 2015-11-06 08:40 - 00000000 ____D C:\Users\helmut\Documents\Any Video Converter
2015-11-06 08:39 - 2015-11-06 09:00 - 00000000 ____D C:\Users\helmut\AppData\Roaming\Anvsoft
2015-11-06 08:39 - 2015-11-06 08:39 - 00000000 ____D C:\Program Files (x86)\Anvsoft
2015-11-06 08:38 - 2015-11-06 08:38 - 39601976 _____ (Any-Video-Converter.com ) C:\Users\helmut\Downloads\avc-free.exe
2015-11-06 08:27 - 2015-11-06 08:27 - 00000000 ____D C:\Users\helmut\Downloads\VirtualDub-1.10.4-AMD64
2015-11-06 08:26 - 2015-11-06 08:26 - 02209528 _____ C:\Users\helmut\Downloads\VirtualDub-1.10.4-AMD64.zip

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-04 09:55 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2015-12-04 09:52 - 2014-05-06 10:52 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-04 09:09 - 2014-09-05 09:49 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-12-04 08:57 - 2014-05-01 09:14 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-12-04 08:37 - 2009-07-14 05:45 - 00026000 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-04 08:37 - 2009-07-14 05:45 - 00026000 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-04 08:27 - 2009-07-14 18:58 - 00699092 _____ C:\Windows\system32\perfh007.dat
2015-12-04 08:27 - 2009-07-14 18:58 - 00149232 _____ C:\Windows\system32\perfc007.dat
2015-12-04 08:27 - 2009-07-14 06:13 - 01619284 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-04 08:27 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2015-12-04 08:22 - 2015-07-03 18:17 - 00000000 ____D C:\Users\helmut\AppData\Roaming\teamdrive-Overlays
2015-12-04 08:22 - 2014-09-05 18:58 - 00000000 ____D C:\Program Files (x86)\GfK Internet-Monitor
2015-12-04 08:22 - 2014-05-06 10:55 - 00000000 ___RD C:\Users\helmut\Google Drive
2015-12-04 08:22 - 2014-05-06 10:52 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-04 08:22 - 2014-05-06 10:10 - 00000000 ____D C:\Users\helmut\.rainlendar2
2015-12-04 08:22 - 2014-05-02 14:39 - 00000000 ____D C:\Users\helmut\AppData\Roaming\TeamDrive3
2015-12-04 08:22 - 2014-04-30 13:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-04 08:22 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-03 21:53 - 2015-03-05 13:29 - 00000000 ____D C:\ProgramData\panda_url_filtering
2015-12-03 21:47 - 2015-03-11 20:10 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-03 21:47 - 2015-03-11 20:10 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-03 21:35 - 2014-05-02 14:58 - 00000000 ____D C:\Users\helmut\AppData\Roaming\FreeDoko
2015-12-03 15:25 - 2014-05-15 13:20 - 00001456 _____ C:\Users\helmut\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2015-12-03 09:01 - 2015-03-29 16:25 - 00000496 _____ C:\Windows\Tasks\Macrium-Backup-{3F87B4A3-0E99-4363-ADCA-736C07F844F3}.job
2015-12-02 12:07 - 2014-05-01 12:52 - 00000000 ____D C:\Users\helmut\AppData\Roaming\vlc
2015-12-02 11:25 - 2014-05-05 09:40 - 00032768 _____ C:\Users\helmut\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-12-02 09:55 - 2015-06-26 07:28 - 00000000 ____D C:\Users\helmut\AppData\Local\BMToolbox-c3f5093c
2015-12-02 09:31 - 2014-04-30 13:38 - 00000000 ____D C:\Windows\Panther
2015-12-01 12:00 - 2015-03-30 14:25 - 00000498 _____ C:\Windows\Tasks\Macrium-Backup-{B0224255-BBC0-48B9-BF51-77244E55453D}.job
2015-12-01 12:00 - 2015-03-30 10:58 - 00000484 _____ C:\Windows\Tasks\Macrium-Backup-{243198AD-A6CF-499A-873B-AF17936C55E2}.job
2015-12-01 10:05 - 2014-05-02 18:20 - 00000000 ____D C:\ProgramData\Oracle
2015-12-01 09:23 - 2014-05-02 18:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-12-01 09:23 - 2014-05-02 18:20 - 00000000 ____D C:\Program Files (x86)\Java
2015-12-01 09:22 - 2015-09-01 16:31 - 00000000 ____D C:\Users\helmut\.oracle_jre_usage
2015-12-01 09:22 - 2015-05-21 08:43 - 00000000 ____D C:\Program Files\Java
2015-12-01 09:22 - 2014-10-17 09:52 - 00110176 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-11-28 18:26 - 2015-10-30 20:28 - 00000000 ___HD C:\$WINDOWS.~BT
2015-11-25 19:20 - 2009-07-14 05:45 - 05219256 _____ C:\Windows\system32\FNTCACHE.DAT
2015-11-24 15:49 - 2014-05-06 10:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-11-23 19:02 - 2015-01-18 09:30 - 00372224 ___SH C:\Users\helmut\Documents\Thumbs.db
2015-11-23 09:31 - 2014-04-30 13:38 - 00187312 _____ C:\Users\helmut\AppData\Local\GDIPFONTCACHEV1.DAT
2015-11-23 09:27 - 2014-05-02 09:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XMind
2015-11-23 09:27 - 2014-05-02 09:42 - 00000000 ____D C:\Program Files (x86)\XMind
2015-11-22 12:28 - 2015-06-05 08:55 - 00000000 ____D C:\Users\helmut\Documents\DxO OpticsPro 10 logs
2015-11-16 16:13 - 2014-06-19 08:04 - 00000000 ____D C:\Users\helmut\AppData\Local\Adobe
2015-11-16 10:21 - 2014-07-24 11:48 - 00246105 _____ C:\Users\helmut\Documents\Readiris.DUS
2015-11-16 09:03 - 2014-05-29 12:17 - 18508288 _____ C:\Users\Public\Documents\Helmut_Tst
2015-11-12 16:01 - 2014-05-05 09:56 - 00000000 ____D C:\Users\helmut\Desktop\Internet
2015-11-12 15:55 - 2015-09-07 12:54 - 00000000 __SHD C:\Users\helmut\wc
2015-11-12 09:41 - 2015-03-05 17:39 - 00000000 ____D C:\Users\helmut\AppData\Local\CrashDumps
2015-11-12 03:10 - 2014-04-30 13:42 - 00000000 ____D C:\Windows\system32\MRT
2015-11-12 03:07 - 2015-05-13 21:46 - 145617392 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-11-12 03:06 - 2014-04-30 18:33 - 01592628 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2015-11-12 03:05 - 2014-05-02 11:26 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-11-11 14:28 - 2014-09-03 12:41 - 00000000 ____D C:\Windows\system32\appmgmt
2015-11-11 00:57 - 2014-05-01 09:14 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-11-11 00:57 - 2014-05-01 09:14 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-11-11 00:57 - 2014-05-01 09:14 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-11-07 12:18 - 2014-04-30 12:53 - 00000000 ____D C:\Users\helmut
2015-11-07 12:17 - 2014-05-02 10:34 - 00000000 ____D C:\Users\helmut\Desktop\Foto
2015-11-07 12:16 - 2014-04-30 18:01 - 00000000 ____D C:\ProgramData\Package Cache
2015-11-07 10:14 - 2014-05-02 12:10 - 00000000 ____D C:\Users\helmut\Desktop\Office
2015-11-07 09:53 - 2014-12-25 09:50 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-11-07 09:52 - 2014-05-01 11:04 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-11-07 09:52 - 2014-05-01 11:02 - 00000000 ____D C:\ProgramData\Adobe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-05-16 19:32 - 2015-05-16 19:32 - 0000132 _____ () C:\Users\helmut\AppData\Roaming\Adobe PNG Format CS5 Prefs
2014-08-18 15:39 - 2014-08-18 15:39 - 0000514 _____ () C:\Users\helmut\AppData\Roaming\GFXMark.lic
2014-05-05 11:16 - 2014-06-27 19:11 - 0000025 _____ () C:\Users\helmut\AppData\Roaming\Opusbext.dat
2014-05-06 11:20 - 2014-10-29 10:27 - 0001078 _____ () C:\Users\helmut\AppData\Local\297ee9cad53a5fc00aaa2013a9c17a85
2014-05-15 13:20 - 2015-12-03 15:25 - 0001456 _____ () C:\Users\helmut\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2014-08-18 15:29 - 2014-08-18 15:40 - 0000272 _____ () C:\Users\helmut\AppData\Local\custom_colors.cfg
2014-05-05 09:40 - 2015-12-02 11:25 - 0032768 _____ () C:\Users\helmut\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-04-21 14:18 - 2015-07-05 10:37 - 0000600 _____ () C:\Users\helmut\AppData\Local\PUTTY.RND
2015-10-15 08:50 - 2015-10-15 08:50 - 0001517 _____ () C:\Users\helmut\AppData\Local\recently-used.xbel
2014-10-12 15:51 - 2014-10-12 15:51 - 0000017 _____ () C:\Users\helmut\AppData\Local\resmon.resmoncfg
2014-05-18 20:46 - 2014-05-18 20:48 - 0000128 ____H () C:\ProgramData\V93GE

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\helmut\edb_apachephp.exe
C:\Users\helmut\edb_npgsql.exe
C:\Users\helmut\edb_pgagent.exe
C:\Users\helmut\edb_pgbouncer.exe
C:\Users\helmut\edb_pgjdbc.exe
C:\Users\helmut\edb_phppgadmin.exe
C:\Users\helmut\edb_psqlodbc.exe


Einige Dateien in TEMP:
====================
C:\Users\helmut\AppData\Local\Temp\amazonicon_fwde.exe
C:\Users\helmut\AppData\Local\Temp\amazoninstallernircmdc.exe
C:\Users\helmut\AppData\Local\Temp\avgnt.exe
C:\Users\helmut\AppData\Local\Temp\DPInstx64.exe
C:\Users\helmut\AppData\Local\Temp\DPInstx86.exe
C:\Users\helmut\AppData\Local\Temp\DPInst_Monx64.exe
C:\Users\helmut\AppData\Local\Temp\DPInst_Monx86.exe
C:\Users\helmut\AppData\Local\Temp\InstallAX.exe
C:\Users\helmut\AppData\Local\Temp\InstallPlugin.exe
C:\Users\helmut\AppData\Local\Temp\jre-8u11-windows-au.exe
C:\Users\helmut\AppData\Local\Temp\jre-8u20-windows-au.exe
C:\Users\helmut\AppData\Local\Temp\jre-8u45-windows-au.exe
C:\Users\helmut\AppData\Local\Temp\jre-8u51-windows-au.exe
C:\Users\helmut\AppData\Local\Temp\jre-8u60-windows-au.exe
C:\Users\helmut\AppData\Local\Temp\jre-8u65-windows-au.exe
C:\Users\helmut\AppData\Local\Temp\jre-8u66-windows-au.exe
C:\Users\helmut\AppData\Local\Temp\msvbvm60.dll
C:\Users\helmut\AppData\Local\Temp\npp.6.6.3.Installer.exe
C:\Users\helmut\AppData\Local\Temp\npp.6.6.9.Installer.exe
C:\Users\helmut\AppData\Local\Temp\ose00000.exe
C:\Users\helmut\AppData\Local\Temp\ose00001.exe
C:\Users\helmut\AppData\Local\Temp\ose00002.exe
C:\Users\helmut\AppData\Local\Temp\OS_Detect.exe
C:\Users\helmut\AppData\Local\Temp\PrefJsonCpp.exe
C:\Users\helmut\AppData\Local\Temp\Quarantine.exe
C:\Users\helmut\AppData\Local\Temp\Samsung_Magician_Setup_v45.exe
C:\Users\helmut\AppData\Local\Temp\sdan.exe
C:\Users\helmut\AppData\Local\Temp\sdapk.exe
C:\Users\helmut\AppData\Local\Temp\sdaspwn.exe
C:\Users\helmut\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\helmut\AppData\Local\Temp\sqlite3.exe
C:\Users\helmut\AppData\Local\Temp\swfo.exe
C:\Users\helmut\AppData\Local\Temp\vcredist_x86.exe
C:\Users\helmut\AppData\Local\Temp\vlc-2.1.5-win32.exe
C:\Users\helmut\AppData\Local\Temp\vlc-2.2.1-win32.exe
C:\Users\helmut\AppData\Local\Temp\WEB.DE_MailCheck_FF_Setup_2.10.1.1735.exe
C:\Users\helmut\AppData\Local\Temp\xmlUpdater.exe
C:\Users\helmut\AppData\Local\Temp\xReflect.exe
C:\Users\helmut\AppData\Local\Temp\_is11A3.exe
C:\Users\helmut\AppData\Local\Temp\_is21F8.exe
C:\Users\helmut\AppData\Local\Temp\_is4691.exe
C:\Users\helmut\AppData\Local\Temp\_is71BD.exe
C:\Users\helmut\AppData\Local\Temp\_is7400.exe
C:\Users\helmut\AppData\Local\Temp\_isCB12.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2014-05-11 11:38

==================== Ende von FRST.txt ============================
         

Zitat von helmutlohkam

... und FRST64 heruntergeladen und ohne Veränderung laufen lassen.

Die Logs musst du dann auch posten, wenn man dir helfen soll...

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Ach, da ist ja schon das erste Log. Bitte auch die Addition.txt von FRST posten.

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:01-12-2015
durchgeführt von helmut (2015-12-04 09:56:01)
Gestartet von C:\Users\helmut\Downloads\Sicherheit
Windows 7 Professional Service Pack 1 (X64) (2014-04-30 11:53:41)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-338742899-1140788568-2099717303-500 - Administrator - Disabled)
Gast (S-1-5-21-338742899-1140788568-2099717303-501 - Limited - Enabled)
helmut (S-1-5-21-338742899-1140788568-2099717303-1000 - Administrator - Enabled) => C:\Users\helmut
HLpostgres (S-1-5-21-338742899-1140788568-2099717303-1005 - Limited - Enabled) => C:\Users\HLpostgres
HomeGroupUser$ (S-1-5-21-338742899-1140788568-2099717303-1010 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Panda Free Antivirus (Enabled - Up to date) {AAF74A68-8713-CDF1-004F-30003398BE9E}
AS: Panda Free Antivirus (Enabled - Up to date) {1196AB8C-A129-C27F-3AFF-0B72481FF423}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Panda Firewall (Disabled) {92CCCB4D-CD7C-CCA9-2B10-9935CD4BF9E5}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

@BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.25 - GIGABYTE)
µTorrent (HKU\S-1-5-21-338742899-1140788568-2099717303-1000\...\uTorrent) (Version: 3.4.5.41202 - BitTorrent Inc.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
AAVUpdateManager (HKLM-x32\...\{AFA42FE1-A5C3-485F-9180-BFCF5BF1F1C3}) (Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 18.0.0.180 - Adobe Systems Incorporated)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Creative Suite 5 Design Premium (HKLM-x32\...\{02698606-3A21-489D-9D2A-75C9E8D3E5BD}) (Version: 5.0 - Adobe Systems Incorporated)
Adobe Flash Player 19 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 19.0.0.245 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.245 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{00957033-C081-5235-665A-A014A6E2FF7B}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
Any Video Converter 5.8.5 (HKLM-x32\...\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)
Apache/PHP 2.4.10-5.5.15 (HKLM-x32\...\Apache/PHP 2.4.10-5.5.15-1) (Version: 2.4.10-5.5.15-1 - EnterpriseDB)
ArcSoft PhotoImpression 6 (HKLM-x32\...\{063E409E-3D7C-4A4A-95AB-2F124B9224B3}) (Version:  - ArcSoft)
ARIA Engine v1.0.9.8 (HKLM\...\ARIA Engine_is1) (Version: v1.0.9.8 - Plogue Art et Technologie, Inc)
Artisteer 4 (HKLM-x32\...\Artisteer 4) (Version: 4.1 - Extensoft)
Ashampoo Burning Studio 12 v.12.0.5 (HKLM-x32\...\{91B33C97-93EB-244C-F687-71D85E45A206}_is1) (Version: 12.0.5 - Ashampoo GmbH & Co. KG)
Ashampoo HDD Control 1.12 (HKLM-x32\...\Ashampoo HDD Control_is1) (Version: 3.1.1 - ashampoo GmbH & Co. KG)
Ashampoo Photo Commander Free v.1.0.0 (HKLM-x32\...\{C92AB6F1-CD60-73B5-2FF0-9FCC1502CD64}_is1) (Version: 1.0.0 - Ashampoo GmbH & Co. KG)
Ashampoo Snap 5 v.5.1.5 (HKLM-x32\...\{C92AB6F1-DF43-1F74-81AF-9BE56BF1D67F}_is1) (Version: 5.1.5 - Ashampoo GmbH & Co. KG)
Ashampoo Snap 7 (HKLM-x32\...\{C92AB6F1-9C93-0F51-ED50-15ABBCBDD142}_is1) (Version: 7.0.11 - Ashampoo GmbH & Co. KG)
Ashampoo WinOptimizer Free v.1.0.0 (HKLM-x32\...\{4209F371-8668-980C-19C9-F8698AB75135}_is1) (Version: 1.0.0 - Ashampoo GmbH & Co. KG)
a-squared Free 4.5 (HKLM-x32\...\a-squared Free_is1) (Version: 4.5 - Emsi Software GmbH)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.21 - Atheros Communications Inc.)
Audacity 1.2.3 (HKLM-x32\...\Audacity_is1) (Version:  - )
AutoGreen B12.0206.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE)
AutoGreen B12.0206.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
AVM FRITZ!Box Druckeranschluss (HKLM-x32\...\AVMFBoxPrinter) (Version:  - AVM Berlin)
AVS Audio Converter 7.2 (HKLM-x32\...\AVS Audio Converter_is1) (Version: 7.2.2.529 - Online Media Technologies Ltd.)
AVS Audio Editor 7.2 (HKLM-x32\...\AVS Audio Editor_is1) (Version: 7.2.2.488 - Online Media Technologies Ltd.)
AVS Cover Editor 2.0.1.3 (HKLM-x32\...\AVSCoverEditor2_is1) (Version: 2.0.1.3 - Online Media Technologies Ltd.)
AVS Document Converter 2.3.1 (HKLM-x32\...\AVS Document Converter_is1) (Version: 2.3.1.232 - Online Media Technologies Ltd.)
AVS DVD Copy 4.1.2.283 (HKLM-x32\...\AVS DVD Copy_is1) (Version: 4.1.2.283 - Online Media Technologies Ltd.)
AVS Image Converter 3.1.1.275 (HKLM-x32\...\AVS Image Converter_is1) (Version: 3.1.1.275 - Online Media Technologies Ltd.)
AVS Video Converter 8.5 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: 8.5.1.551 - Online Media Technologies Ltd.)
AVS Video Editor 6.5 (HKLM-x32\...\AVS Video Editor_is1) (Version: 6.5.1.246 - Online Media Technologies Ltd.)
CDex - Open Source Digital Audio CD Extractor (HKLM-x32\...\CDex) (Version: 1.70.4.2009 - Georgy Berdyshev)
Citrix Receiver (HKLM-x32\...\CitrixOnlinePluginPackWeb) (Version: 14.1.0.0 - Citrix Systems, Inc.)
COLOR projects professional (64-Bit) (HKLM\...\COLOR_PROJECTS_1_3_C935FDA1_is1) (Version: 1.14 - Franzis Verlag GmbH)
Corel Graphics Suite 11 (x32 Version: 11 - Corel Corporation) Hidden
Corel PaintShop Pro X7  (HKLM-x32\...\_{176F50D6-6857-49CE-B731-65F757EE3F0D}) (Version: 17.1.0.72 - Corel Corporation)
CorelDRAW Graphics Suite 11 (HKLM-x32\...\InstallShield_{1C63DD23-6554-4A1F-8D0D-B5A6B49D8015}) (Version: 11 - Corel Corporation)
Creative Content (x32 Version: 1.0.0.114 - Corel Corporation) Hidden
Creative Content (x32 Version: 1.0.0.114 - Ihr Firmenname) Hidden
DesignPro 5 (HKLM-x32\...\InstallShield_{F82C6574-AD88-4B40-A432-970BC77F1BD2}) (Version: 5.5.708 - Avery)
DesignPro 5 (x32 Version: 5.5.708 - Avery) Hidden
dm-Fotowelt (HKLM-x32\...\dm-Fotowelt) (Version: 6.0.5 - CEWE Stiftung u Co. KGaA)
DxO Optics Pro 9 (HKLM\...\{B6815DAB-F4BB-4859-84B3-1E86E5F85DAC}) (Version: 9.5.2 - DxO Labs)
DxO OpticsPro 10 (HKLM\...\{DFA5F825-C1BF-4C49-A72F-BBF0E05E6D4F}) (Version: 10.5.1 - DxO)
DxO ViewPoint (HKLM\...\{A0A7372A-C28E-48BE-B88C-3C3C3EEFC2EA}) (Version: 1.2.17.0 - DxO Labs)
Easy Tune 6 B12.0626.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE)
Easy Tune 6 B12.0626.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
EasyBoost (HKLM-x32\...\InstallShield_{41910260-4532-4734-8181-3E8AFDBB05D7}) (Version: 1.0.7.1 - GIGABYTE)
EasyBoost (x32 Version: 1.0.7.1 - GIGABYTE) Hidden
eclipso Toolbox (HKU\S-1-5-21-338742899-1140788568-2099717303-1000\...\BMToolbox-c3f5093c) (Version:  - )
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.1.20150424 - Landesfinanzdirektion Thüringen)
Epson Copy Utility 3.5 (HKLM-x32\...\{AA72FB28-73B4-49E5-B6B4-E78F44BBD0AD}) (Version: 3.5.0.0 - )
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - )
EtikettenAssistent 4.2 (HKLM-x32\...\{9AEF64B1-79A5-4E2F-8FBC-4CA89ECD3595}) (Version: 4.2.1 - HERMA)
Evernote v. 5.9.1 (HKLM-x32\...\{5EA1DED0-5285-11E5-8AA1-0050569584E9}) (Version: 5.9.1.8742 - Evernote Corp.)
Extended Asian Language font pack for Adobe Reader XI (HKLM-x32\...\{AC76BA86-7AD7-2530-0000-A00000000049}) (Version: 11.0.09 - Adobe Systems Incorporated)
FileZilla Client 3.10.1.1 (HKLM-x32\...\FileZilla Client) (Version: 3.10.1.1 - Tim Kosse)
Finale 2011 (HKLM-x32\...\Finale 2011) (Version: 2011.b.r2.0 - MakeMusic)
Free FLV Converter V 7.6.2 (HKLM-x32\...\Free FLV Converter_is1) (Version: 7.6.2.0 - Koyote Lab Inc.)
Free YouTube Download version 3.2.33.424 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.33.424 - DVDVideoSoft Ltd.)
FreeCommander XE (HKLM-x32\...\FreeCommander XE_is1) (Version:  - Marek Jasinski)
FreeDoko 0.7.12 (HKLM-x32\...\FreeDoko) (Version: 0.7.12 - Borg Enders und Diether Knof)
Garritan ARIA Player v1.03 (HKLM\...\__ARIA_1012___is1) (Version: v1.0.3.2 - Garritan)
Garritan-Instrumente für Finale (HKLM\...\__ARIA_1013___is1) (Version: v1.0.2.2 - Garritan)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.0.2.1 - Genesys Logic)
GfK Internet-Monitor (HKLM-x32\...\39992AD7-103F-4308-8BB7-3F65F543604D) (Version: 14.1.93 - GfK)
GFXMark (HKLM-x32\...\GFXMark) (Version: 2.00 - Ultimate Systems)
GFXMark (Version: 2.00 - Ultimate Systems) Hidden
GFXMark Pro (HKLM-x32\...\GFXMark Pro) (Version: 1.10 - Ultimate Systems)
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Drive (HKLM-x32\...\{1C3D2F92-D25E-4D98-B810-3F3B0857BF26}) (Version: 1.26.0707.2863 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.15) (Version: 9.15 - Artifex Software Inc.)
HDR Projects platin (64-Bit) (HKLM\...\HDR Projects platin_is1) (Version: 1.23 - Franzis Verlag GmbH)
HERMA Label Designer plus 1.1 (HKLM-x32\...\{7DA64485-2CEE-4F7B-84AB-B287236703B6}) (Version: 1.00.0000 - HERMA GmbH)
HiDrive (HKLM-x32\...\{CB5C1D1E-9B9A-4D92-8178-8F5BA386F2B4}) (Version: 3.2.1.0 - STRATO AG)
ICA (x32 Version: 17.0.0.199 - Corel Corporation) Hidden
Inkscape 0.48.4 (HKLM-x32\...\Inkscape) (Version: 0.48.4 - )
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.12.1498 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.1.0.1006 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.5.235 - Intel Corporation)
Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version:  - Intel Corporation)
IPM_PSP_COM64 (Version: 17.0.0.199 - Corel Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
IRISCompressor (HKLM\...\{D0F62DAC-D210-40E3-B2BC-C19198919713}) (Version: 1.03.0000 - I.R.I.S.)
Java 8 Update 66 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Java SE Development Kit 8 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation)
K-Lite Codec Pack 9.9.9 (64-bit) (HKLM\...\KLiteCodecPack64_is1) (Version: 9.9.9 - )
Langmeier Backup (HKLM-x32\...\{3D4F9339-F910-4700-AA62-BF9C8B251927}) (Version: 8.6 - Langmeier Software GmbH)
Lexware buchhalter 2015 (x32 Version: 20.52.00.0294 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware Einnahmen-Überschuss-Rechner 2015 (HKLM-x32\...\{be12ca5f-1232-4753-9803-4dc68585a1ea}) (Version: 20.2.0.144 - Haufe-Lexware GmbH & Co.KG)
Lexware Elster (x32 Version: 15.00.00.0056 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware Info Service (x32 Version: 5.00.00.0044 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware Installations Dienst (x32 Version: 4.00.00.0005 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware online banking (x32 Version: 22.00.00.0035 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware PDF-Export 5 (x32 Version: 5.00.00.0005 - Haufe-Lexware GmbH & Co.KG) Hidden
LibreOffice 4.3 Help Pack (German) (HKLM-x32\...\{F2C505D0-1A4B-43B4-887E-D9E517A362B8}) (Version: 4.3.5.2 - The Document Foundation)
LibreOffice 4.3.5.2 (HKLM-x32\...\{1D4E90DA-C33C-40ED-BA00-75F6E6DF9CB0}) (Version: 4.3.5.2 - The Document Foundation)
LifeScan USB Device Driver vSL3.0 (Driver Removal) (HKLM-x32\...\LFSVCOMM&10C4&85A7) (Version:  - LifeScan Inc)
LightScribe Applications (HKLM-x32\...\{16F5ADDD-6EFD-411A-9013-8DD2C629FE53}) (Version: 1.18.27.10 - LightScribe)
LightScribe System Software (HKLM-x32\...\{F132000C-1CBA-458F-BF2F-FD43D59410F9}) (Version: 1.18.27.10 - LightScribe)
LightScribe Template Labeler (HKLM-x32\...\{8A03241E-7A3C-401D-B0CE-B3096F50AE6F}) (Version: 1.18.27.10 - LightScribe)
Lightworks (HKLM-x32\...\{E94DD4E4-7746-472c-AA7B-1242FED0CFC8}) (Version: 12.5.0.0 - Lightworks)
Macrium Reflect Home Edition (HKLM\...\MacriumReflect) (Version: 6.0 - Paramount Software (UK) Ltd.)
Macrium Reflect Home Edition (Version: 6.0.516 - Paramount Software (UK) Ltd.) Hidden
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
marvell 91xx driver (HKLM-x32\...\MagniDriver) (Version: 1.2.0.1010 - Marvell)
Media Pro (HKLM\...\{16518B9A-EC88-4F52-8060-1E82F369FFD3}) (Version: 1.5.134.0 - Phase One)
Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version: 5.1.7 - CEWE Stiftung u Co. KGaA)
Messgerätetreiber für die OneTouch® Software v1.17.0.0 (HKLM-x32\...\InstallShield_{71E8CC0B-3EE3-4816-9366-44FCBBCD6B3E}) (Version: 1.17.0.0 - LifeScan)
Meter Drivers for OneTouch(R) Software (x32 Version: 1.17.0.0 - LifeScan) Hidden
Meter Drivers for OneTouch(R) Software (x32 Version: 1.96.7.0 - LifeScan) Hidden
MFC RunTime files (x32 Version: 1.0.0 - Extensoft) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.6 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{D285FC5F-3021-32E9-9C59-24CA325BDC5C}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version:  - Pavel Cvrcek)
Mozilla Firefox 41.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 41.0.1 (x86 de)) (Version: 41.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0.1 - Mozilla)
Mozilla Thunderbird 38.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 38.4.0 (x86 de)) (Version: 38.4.0 - Mozilla)
MPC-HC 1.7.6 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.6 - MPC-HC Team)
MPEG4E VFW - H.264/MPEG-4 AVC codec (remove only) (HKLM-x32\...\MPEG4E) (Version:  - )
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MultiCommander (Win32) (HKLM-x32\...\MultiCommander Win32) (Version: 4.5.0.1768 - Mathias Svensson)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.6 - F.J. Wechselberger)
MySQL Connector J (HKLM-x32\...\{FFDEEDC1-B845-45AD-A5EF-906F044925DA}) (Version: 5.1.34 - Oracle Corporation)
MySQL Connector/ODBC 5.3 (HKLM\...\{FFCA28DE-1F19-44D0-B975-84FC8A37F552}) (Version: 5.3.4 - Oracle Corporation)
MySQL Utilities (HKLM-x32\...\{0B18AA75-6A44-4950-A0A2-A486C2D839A0}) (Version: 1.4.4 - Oracle Corporation)
MySQL Workbench 6.1 CE (HKLM-x32\...\{AD95295B-0279-43B6-A873-F12A1D1CD146}) (Version: 6.1.7 - Oracle Corporation)
Nero 8 Essentials (HKLM-x32\...\{50BC0FF8-F19C-42C3-AB28-55280DA21031}) (Version: 8.10.209 - Nero AG)
NirSoft DownTester (HKLM-x32\...\NirSoft DownTester) (Version:  - )
NirSoft Wireless Network Watcher (HKLM-x32\...\NirSoft Wireless Network Watcher) (Version:  - )
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
OKI Color Swatch-Dienstprogramm (HKLM-x32\...\{A344F95E-E51A-450C-8F84-C940BF61903E}) (Version: 2.15.0000 - Okidata)
Omron Health Management Software (HKLM-x32\...\{5441F067-5AF8-4284-9A8C-FD98DF05C981}) (Version: 1.60.0004 - Omron Healthcare)
ON_OFF Charge B11.1102.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
OneTouch-Software (HKLM-x32\...\{82FEBE5D-61EC-4365-A213-2B278780945E}) (Version:  - )
Online Plug-in (x32 Version: 14.1.0.0 - Citrix Systems, Inc.) Hidden
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
OpenOffice 4.1.1 Language Pack (German) (HKLM-x32\...\{68AF7AB8-E018-40D9-B703-0129274FDBAE}) (Version: 4.11.9775 - Apache Software Foundation)
Opticon USB Drivers Installer (HKLM-x32\...\Opticon USB Installer) (Version:  - )
OVTScanner_Vista64 (HKLM-x32\...\{AE09704D-9051-4C25-B940-77F889F0C93F}) (Version: 1.00.0000 - OVT)
Panda Devices Agent (HKLM-x32\...\Panda Devices Agent) (Version: 1.03.04 - Panda Security)
Panda Devices Agent (x32 Version: 1.05.00 - Panda Security) Hidden
Panda Free Antivirus (HKLM-x32\...\Panda Universal Agent Endpoint) (Version: 15.01.00.0000 - Panda Security)
Panda Free Antivirus (Version: 7.81.00.0000 - Panda Security) Hidden
Panda Security Toolbar (HKLM-x32\...\pandasecuritytb) (Version: 4.2.3.1 - Panda Security)
Panda Security URL Filtering (HKLM-x32\...\Panda Security URL Filtering) (Version: 2.0.2.0 - Panda Security)
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
PL-2303 USB-to-Serial (HKLM-x32\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.6.0 - Prolific Technology INC)
Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden
PSPPContent (x32 Version: 17.0.0.199 - Corel Corporation) Hidden
PSPPHelp (x32 Version: 17.0.0.199 - Corel Corporation) Hidden
PSPPro64 (Version: 17.0.0.199 - Corel Corporation) Hidden
PuTTY version 0.63 (HKLM-x32\...\PuTTY_is1) (Version: 0.63 - Simon Tatham)
Rainlendar2 (remove only) (HKLM-x32\...\Rainlendar2) (Version:  - )
Readiris Pro 12 (HKLM-x32\...\{B6214EA9-7BE8-4A91-B8B3-45F42F90188F}) (Version: 12.00.6209 - I.R.I.S.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Samsung Data Migration (HKLM-x32\...\{D4DE3DB4-7734-47E5-8D92-B80146311406}) (Version: 2.6 - Samsung)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.5.1 - Samsung Electronics)
ScanEasy-Client 3.4 (HKLM-x32\...\ScanEasy-Client_is1) (Version:  - GfK SE)
Scribus 1.4.3 (64bit) (HKLM\...\Scribus 1.4.3) (Version: 1.4.3 - The Scribus Team)
Scribus 1.4.5 (64bit) (HKLM\...\Scribus 1.4.5) (Version: 1.4.5 - The Scribus Team)
SDFormatter (HKLM-x32\...\{179324FF-7B16-4BA8-9836-055CAAEE4F08}) (Version: 4.0.0 - SD Association)
Self-Service Plug-in (x32 Version: 4.1.0.41738 - Citrix Systems, Inc.) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Setup (x32 Version: 17.0.0.199 - Ihr Firmenname) Hidden
SilverFast 8.0.1r46 (32bit) (HKLM-x32\...\SilverFast 8 x86) (Version: 8.0.1r46 - LaserSoft Imaging AG)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.5.0.9082 - Microsoft Corporation)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
SSD Fresh (HKLM-x32\...\SSD Fresh_is1) (Version: 2014 - Abelssoft)
TAXMAN 2015 (HKLM-x32\...\{5613CAD3-71ED-4207-95A0-1BA0BF465E38}) (Version: 20.35.162 - Haufe-Lexware GmbH & Co.KG)
TeamDrive (HKLM-x32\...\TeamDrive) (Version: 4.0.10.1276 - TeamDrive Systems GmbH)
UFRaw 0.19.2 (HKLM-x32\...\UFRaw_is1) (Version:  - Udi Fuchs)
Uninstall JL2005A Toy Camera (HKLM-x32\...\JL2005A Toy Camera_is1) (Version:  - )
USB Video Device (HKLM-x32\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 5.8.48205.104 - Sonix)
VCRedistSetup (x32 Version: 1.0.0 - Nero AG) Hidden
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
ViewSonic Windows 7 x64 Signed Files (HKLM-x32\...\{FC47C7A5-BE63-11D5-B7C9-005004566E4D}) (Version:  - )
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Wacom Tablett (HKLM\...\Wacom Tablet Driver) (Version: 6.2.0w5 - Wacom Technology Corp.)
WEB.DE MailCheck für Mozilla Firefox (HKLM-x32\...\1&1 Mail & Media GmbH Toolbar FF) (Version: 2.10.1.1735 - 1&1 Mail & Media GmbH)
WebTablet FB Plugin (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.0.0.4 - Wacom Technology Corp.)
WebTablet IE Plugin (HKLM-x32\...\Wacom WebTabletPlugin for IE) (Version: 1.1.0.12 - Wacom Technology Corp.)
WebTablet Netscape Plugin (HKLM-x32\...\Wacom WebTabletPlugin for Netscape) (Version: 1.1.0.10 - Wacom Technology Corp.)
Win32DiskImager version 0.9.5 (HKLM-x32\...\{D074CE74-912A-4AD3-A0BF-3937D9D01F17}_is1) (Version: 0.9.5 - ImageWriter Developers)
Windows 7 Codec Pack 4.1.1 (HKLM-x32\...\Windows 7 - Codec Pack) (Version: 4.1.1 - Windows 7 Codec Pack)
XMind 7 (v3.6.0) (HKLM-x32\...\XMind_is1) (Version: 3.6.0.R-201511090408 - XMind Ltd.)
XML Doctor 1.3 (HKLM-x32\...\XML Doctor_is1) (Version:  - XML Doctor Developers)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Wiederherstellungspunkte =========================


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0071F7D8-CF25-4A05-A35B-012058A134A1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-11] (Adobe Systems Incorporated)
Task: {03CA95DA-CCA8-4DC6-BB21-86584D530614} - System32\Tasks\{A7B84B79-1DD6-4DA5-8539-A671CD8A10E3} => pcalua.exe -a E:\SETUP.EXE -d E:\
Task: {14197366-5518-44A3-B65E-D4D404A9DAEF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {2E802D89-5BE6-4233-B6A2-945993E846A2} - System32\Tasks\Games\UpdateCheck_S-1-5-21-338742899-1140788568-2099717303-1000
Task: {2F6FBB65-BAD8-4862-80EE-D58C935EC05A} - System32\Tasks\{34943FE8-38BB-4692-B5D8-BC71CBC1759D} => pcalua.exe -a F:\SETUP32.EXE -d F:\
Task: {3780228B-C5CD-4C72-A3E1-9E259223CEB7} - System32\Tasks\Macrium-Backup-{243198AD-A6CF-499A-873B-AF17936C55E2} => C:\Program Files\Macrium\Reflect\Reflect.exe [2015-03-12] (Paramount Software UK Ltd)
Task: {4CF9CFBA-6FF7-4168-8E30-3ED8ADDD06A8} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung Magician\Samsung Magician.exe [2014-09-28] (Samsung Electronics.)
Task: {70B7FBD7-1F47-4D77-9EA2-F61725A123C3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {88012B72-6506-447B-952D-852F94999AE5} - System32\Tasks\{E56879CF-4558-4B54-926F-B770E26EF951} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{D4DE3DB4-7734-47E5-8D92-B80146311406}\setup.exe" -c -runfromtemp -l0x0007 -removeonly /z "UNINSTALL"
Task: {BB242EBE-B04F-46A9-B80E-4CF8C58BB064} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {EE11B7D1-5720-47A9-9378-523F1A93DCE3} - System32\Tasks\Macrium-Backup-{B0224255-BBC0-48B9-BF51-77244E55453D} => C:\Program Files\Macrium\Reflect\Reflect.exe [2015-03-12] (Paramount Software UK Ltd)
Task: {F80D0EBD-6071-475A-BE8F-EE90FC9AF460} - System32\Tasks\AdobeAAMUpdater-1.0-helmut-PC-helmut => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-03-11] (Adobe Systems Incorporated)
Task: {FAE70C3C-FB43-4735-B1F5-39703B4B6293} - System32\Tasks\Macrium-Backup-{3F87B4A3-0E99-4363-ADCA-736C07F844F3} => C:\Program Files\Macrium\Reflect\Reflect.exe [2015-03-12] (Paramount Software UK Ltd)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Macrium-Backup-{243198AD-A6CF-499A-873B-AF17936C55E2}.job => C:\Program Files\Macrium\Reflect\Reflect.exeg-e -w C:\Users\helmut\Documents\Reflect\BU_E_Disk.xml
Task: C:\Windows\Tasks\Macrium-Backup-{3F87B4A3-0E99-4363-ADCA-736C07F844F3}.job => C:\Program Files\Macrium\Reflect\Reflect.exem-e -w C:\Users\helmut\Documents\Reflect\HL_WIN764_BU_in.xml
Task: C:\Windows\Tasks\Macrium-Backup-{B0224255-BBC0-48B9-BF51-77244E55453D}.job => C:\Program Files\Macrium\Reflect\Reflect.exen-e -w C:\Users\helmut\Documents\Reflect\BU_E-Disk_201503.xml

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-06-26 07:29 - 2014-04-03 08:40 - 00010240 _____ () C:\Windows\System32\bmfaxmon64.dll
2015-10-01 08:08 - 2015-09-17 11:22 - 01938632 _____ () C:\Program Files (x86)\GfK Internet-Monitor\GfK-Reporting.exe
2014-09-05 18:58 - 2014-08-13 10:06 - 01356264 _____ () C:\Program Files (x86)\GfK Internet-Monitor\GfK-Updater.exe
2014-10-15 08:29 - 2014-07-23 13:16 - 00536576 _____ () C:\Users\helmut\AppData\Roaming\Host System\host.exe
2014-05-02 13:13 - 2012-01-23 07:38 - 01184632 _____ () C:\Program Files\Tablet\Wacom\libxml2.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2014-12-08 11:10 - 2014-12-08 11:10 - 00102176 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2014-03-16 18:42 - 2014-03-16 18:42 - 04411488 _____ () C:\Program Files\Rainlendar2\Rainlendar2.exe
2012-05-16 20:12 - 2012-05-16 20:12 - 00179200 _____ () C:\Program Files\Rainlendar2\lua52.dll
2014-03-14 11:24 - 2014-03-14 11:24 - 00324608 _____ () C:\Program Files\Rainlendar2\libical.dll
2014-03-16 18:44 - 2014-03-16 18:44 - 00346208 _____ () C:\Program Files\Rainlendar2\plugins\GoogleCalendarPlugin.dll
2014-03-14 11:24 - 2014-03-14 11:24 - 00080384 _____ () C:\Program Files\Rainlendar2\libicalss.dll
2012-06-17 14:21 - 2012-06-17 14:21 - 00015360 _____ () C:\Program Files\Rainlendar2\lfs.dll
2014-04-03 08:40 - 2014-04-03 08:40 - 00595456 _____ () C:\Users\helmut\AppData\Local\BMToolbox-c3f5093c\BMToolbox.exe
2015-03-11 20:10 - 2015-03-11 20:10 - 00208415 _____ () C:\Windows\SysWOW64\C2MP\TrayMenu.exe
2014-04-30 13:11 - 2012-05-23 08:01 - 00078480 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll
2014-04-30 13:11 - 2012-05-23 08:01 - 00386192 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll
2015-03-11 20:10 - 2015-03-11 20:10 - 00049152 _____ () C:\Windows\SysWOW64\UMonit.exe
2015-07-03 18:17 - 2015-07-01 20:02 - 00019968 _____ () C:\Program Files (x86)\TeamDrive\QtWebProcess.exe
2014-09-08 13:04 - 2014-07-21 07:49 - 00122368 _____ () C:\Program Files (x86)\PostgreSQL\EnterpriseDB-ApachePHP\apache\bin\pcre.dll
2014-09-08 13:04 - 2014-08-19 07:24 - 00140288 _____ () C:\Program Files (x86)\PostgreSQL\EnterpriseDB-ApachePHP\php\LIBPQ.dll
2014-09-05 18:58 - 2014-08-13 10:06 - 03059176 _____ () C:\Program Files (x86)\GfK Internet-Monitor\UpdateHelper.dll
2015-03-11 20:10 - 2015-03-11 20:10 - 00374272 _____ () C:\Users\helmut\AppData\Roaming\Host System\sub\default.dll
2013-04-12 18:23 - 2013-04-12 18:23 - 00612664 _____ () C:\Program Files (x86)\Panda Security\Panda Security Protection\SQLite3.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2014-05-05 09:32 - 2015-06-05 09:54 - 00271224 _____ () C:\Program Files (x86)\Ashampoo\Ashampoo Snap 7\CrashRpt1402.dll
2014-05-05 09:32 - 2014-06-24 07:30 - 00040824 _____ () C:\Program Files (x86)\Ashampoo\Ashampoo Snap 7\MouseHook.dll
2013-01-16 11:58 - 2013-01-16 11:58 - 02408448 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll
2013-01-16 11:58 - 2013-01-16 11:58 - 08626176 _____ () C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll
2013-01-16 11:58 - 2013-01-16 11:58 - 00212992 _____ () C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
2014-04-03 08:40 - 2014-04-03 08:40 - 00030208 _____ () C:\Users\helmut\AppData\Local\BMToolbox-c3f5093c\QtSingleApplication.dll
2015-12-04 08:22 - 2015-12-04 08:22 - 00098816 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\win32api.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00110080 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\pywintypes27.dll
2015-12-04 08:22 - 2015-12-04 08:22 - 00364544 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\pythoncom27.dll
2015-12-04 08:22 - 2015-12-04 08:22 - 00046080 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\_socket.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 01208320 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\_ssl.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00320512 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\win32com.shell.shell.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00776704 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\_hashlib.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 01176576 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\wx._core_.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00806400 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\wx._gdi_.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00816128 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\wx._windows_.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 01067008 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\wx._controls_.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00733184 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\wx._misc_.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00682496 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\pysqlite2._sqlite.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00088064 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\_ctypes.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00119808 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\win32file.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00108544 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\win32security.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00007168 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\hashobjs_ext.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00017920 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\thumbnails_ext.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00079360 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\usb_ext.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00167936 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\win32gui.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00018432 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\win32event.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00128512 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\_elementtree.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00127488 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\pyexpat.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00013824 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\common.time34.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00036864 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\_psutil_windows.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00038912 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\win32inet.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00525640 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\windows._lib_cacheinvalidation.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00011264 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\win32crypt.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00077312 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\wx._html2.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00027136 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\_multiprocessing.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00020480 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\_yappi.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00035840 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\win32process.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00686080 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\unicodedata.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00123392 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\wx._wizard.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00024064 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\win32pipe.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00010240 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\select.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00025600 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\win32pdh.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00017408 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\win32profile.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00022528 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\win32ts.pyd
2015-12-04 08:22 - 2015-12-04 08:22 - 00078848 _____ () C:\Users\helmut\AppData\Local\Temp\_MEI42402\wx._animate.pyd
2015-09-03 14:45 - 2015-09-03 14:45 - 00439304 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
2015-09-03 14:45 - 2015-09-03 14:45 - 00321032 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2015-07-03 18:17 - 2015-07-01 20:02 - 00018944 _____ () C:\Program Files (x86)\TeamDrive\QtQuick.2\qtquick2plugin.dll
2015-07-03 18:17 - 2015-07-01 20:02 - 00018944 _____ () C:\Program Files (x86)\TeamDrive\QtQuick\Window.2\windowplugin.dll
2015-07-03 18:17 - 2015-07-01 20:02 - 00789504 _____ () C:\Program Files (x86)\TeamDrive\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-07-03 18:17 - 2015-07-01 20:02 - 00178688 _____ () C:\Program Files (x86)\TeamDrive\QtQuick\Dialogs\dialogplugin.dll
2015-07-03 18:17 - 2015-07-01 20:02 - 00062976 _____ () C:\Program Files (x86)\TeamDrive\libEGL.dll
2015-07-03 18:17 - 2015-07-01 20:02 - 01432576 _____ () C:\Program Files (x86)\TeamDrive\libGLESv2.dll
2015-09-03 14:45 - 2015-09-03 14:45 - 21120008 _____ () C:\Program Files (x86)\Evernote\Evernote\libcef.dll
2015-09-03 14:45 - 2015-09-03 14:45 - 00212488 _____ () C:\Program Files (x86)\Evernote\Evernote\websockets.dll
2015-09-03 14:45 - 2015-09-03 14:45 - 00988696 _____ () C:\Program Files (x86)\Evernote\Evernote\avcodec-54.dll
2015-09-03 14:45 - 2015-09-03 14:45 - 00138776 _____ () C:\Program Files (x86)\Evernote\Evernote\avutil-51.dll
2015-09-03 14:45 - 2015-09-03 14:45 - 00195096 _____ () C:\Program Files (x86)\Evernote\Evernote\avformat-54.dll
2014-09-11 14:09 - 2014-09-11 14:09 - 00176168 _____ () C:\Program Files (x86)\Lexware\Update Manager\Haufe.Core.Diagnostics.Logging.Targets.Etw.dll
2014-09-11 14:09 - 2014-09-11 14:09 - 00043048 _____ () C:\Program Files (x86)\Lexware\Update Manager\Haufe.Core.Diagnostics.Etw.dll
2015-02-01 12:17 - 2015-02-01 12:17 - 00039200 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-05-24 17:41 - 2014-05-24 17:41 - 00091648 _____ () C:\Program Files (x86)\FileZilla FTP Client\libgcc_s_sjlj-1.dll
2014-05-24 17:41 - 2014-05-24 17:41 - 00892416 _____ () C:\Program Files (x86)\FileZilla FTP Client\libstdc++-6.dll
2015-12-03 19:53 - 2015-12-03 19:53 - 00153768 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2015-12-03 19:53 - 2015-12-03 19:53 - 00023208 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2014-08-03 11:58 - 2014-09-28 17:59 - 00019872 _____ () C:\Program Files (x86)\Samsung Magician\SAMSUNG_SSD.dll
2014-10-16 10:41 - 2014-10-16 10:41 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\1eeea3ab8d69ec722bdcb28b8eb8dd75\IsdiInterop.ni.dll
2014-04-30 13:12 - 2012-02-01 15:25 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-04-30 13:10 - 2012-05-10 14:03 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2010-03-26 20:04 - 2010-03-26 20:04 - 00040896 _____ () C:\Program Files (x86)\Adobe\Adobe InDesign CS5\boost_threads.dll
2010-03-26 20:03 - 2010-03-26 20:03 - 00072128 _____ () C:\Program Files (x86)\Adobe\Adobe InDesign CS5\boost_filesystem.dll
2010-03-26 20:04 - 2010-03-26 20:04 - 00018368 _____ () C:\Program Files (x86)\Adobe\Adobe InDesign CS5\boost_system.dll
2010-03-26 20:03 - 2010-03-26 20:03 - 00654784 _____ () C:\Program Files (x86)\Adobe\Adobe InDesign CS5\boost_regex.dll
2010-03-26 20:02 - 2010-03-26 20:02 - 00061888 _____ () C:\Program Files (x86)\Adobe\Adobe InDesign CS5\ASLSupport.dll
2008-12-13 08:47 - 2008-12-13 08:47 - 00026112 _____ () C:\Program Files (x86)\Adobe\Adobe InDesign CS5\tbbmalloc.dll
2010-02-04 02:00 - 2010-02-04 02:00 - 00378848 _____ () C:\Program Files (x86)\Adobe\Adobe InDesign CS5\Plug-ins\Filters\Sangam Readers\Reader For PageMaker.smrd
2010-03-26 20:07 - 2010-03-26 20:07 - 00121792 _____ () C:\Program Files (x86)\Adobe\Adobe InDesign CS5\PMFileReader.dll
2010-03-26 20:02 - 2010-03-26 20:02 - 00051136 _____ () C:\Program Files (x86)\Adobe\Adobe InDesign CS5\ALDFS32CJK.dll
2010-03-26 20:02 - 2010-03-26 20:02 - 00046016 _____ () C:\Program Files (x86)\Adobe\Adobe InDesign CS5\ALDVM32CJK.dll
2010-03-26 20:09 - 2010-03-26 20:09 - 00095680 _____ () C:\Program Files (x86)\Adobe\Adobe InDesign CS5\unihan.dll
2010-02-22 03:50 - 2010-02-22 03:50 - 00060416 _____ () C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\zlib1.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NanoServiceMain => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSUAService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NanoServiceMain => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PSUAService => ""="Service"

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-338742899-1140788568-2099717303-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\helmut\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\Services: ACDaemon => 2
MSCONFIG\Services: BrYNSvc => 3
MSCONFIG\Services: DfSdkS => 3
MSCONFIG\Services: IDriverT => 3
MSCONFIG\Services: Nero BackItUp Scheduler 3 => 2
MSCONFIG\Services: NMIndexingService => 3
MSCONFIG\Services: pgAgent => 2
MSCONFIG\Services: pgbouncer => 2
MSCONFIG\Services: postgresql-x64-9.3 => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\startupfolder: C:^Users^helmut^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup
MSCONFIG\startupreg: ArcSoft Connection Service => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
MSCONFIG\startupreg: Ashampoo HDD Control Guard => "C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control\HDDControlGuard.exe"
MSCONFIG\startupreg: BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} => "C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe"
MSCONFIG\startupreg: CorelDRAW Graphics Suite 11b => C:\Program Files (x86)\Corel\Corel Graphics 11\Register\registration.exe /title="CorelDRAW Graphics Suite 11" /date=051814 serial=DR11WBL-2155586-LXG
MSCONFIG\startupreg: PDF5 Registry Controller => C:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe
MSCONFIG\startupreg: PDFHook => C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfpro5hook.exe

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [TCP Query User{BF6AEF74-52C2-4FAF-94D4-6D78CE321282}C:\program files (x86)\java\jre8\bin\java.exe] => (Allow) C:\program files (x86)\java\jre8\bin\java.exe
FirewallRules: [UDP Query User{BD92BE24-16EC-4E9D-9F9D-EE36FE2981BF}C:\program files (x86)\java\jre8\bin\java.exe] => (Allow) C:\program files (x86)\java\jre8\bin\java.exe
FirewallRules: [TCP Query User{C999B45F-F9F8-4CC9-BC43-1722DE8F4687}L:\xampp\apache\bin\httpd.exe] => (Allow) L:\xampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{DE51835F-340C-4D69-AF1A-404986E1A6BE}L:\xampp\apache\bin\httpd.exe] => (Allow) L:\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{A15435F8-6099-4ECA-90B7-EBF2994E4162}L:\xampp\mysql\bin\mysqld.exe] => (Allow) L:\xampp\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{F5A8B87D-F3CF-4BC7-8A9A-F967BD459600}L:\xampp\mysql\bin\mysqld.exe] => (Allow) L:\xampp\mysql\bin\mysqld.exe
FirewallRules: [{28E5E2AC-6D30-4B8A-9919-E3FCDE97DF88}] => (Allow) C:\Program Files (x86)\Artisteer 4\bin\Artisteer.exe
FirewallRules: [{1F7D2CA5-7A5C-4756-8357-5358E9E2779A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{40CCD1BC-E302-49A2-89D9-15E4599B1FDA}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [UDP Query User{5EDA7DBA-5A38-4416-8689-64EEC658B8D1}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [{1FBF138E-8CC6-4A23-9164-C95DF9CA0ECB}] => (Allow) C:\Program Files (x86)\Advanced Driver Updater\adu.exe
FirewallRules: [TCP Query User{75D4CFC1-07E4-45E1-97F1-E5168DEC30C5}C:\program files (x86)\libreoffice 4\program\soffice.bin] => (Allow) C:\program files (x86)\libreoffice 4\program\soffice.bin
FirewallRules: [UDP Query User{5E6AE7EA-F183-4DE2-97DF-9B11801D02E5}C:\program files (x86)\libreoffice 4\program\soffice.bin] => (Allow) C:\program files (x86)\libreoffice 4\program\soffice.bin
FirewallRules: [TCP Query User{7779DCC4-5883-4D95-850E-C23C85BACE15}C:\program files (x86)\java\jre8\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre8\bin\jp2launcher.exe
FirewallRules: [UDP Query User{94138EAF-3949-44A0-A360-CDEBBD253616}C:\program files (x86)\java\jre8\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre8\bin\jp2launcher.exe
FirewallRules: [TCP Query User{CF809FA8-C8DB-490E-83AF-BC43A3582A88}C:\program files (x86)\java\jre1.8.0_20\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_20\bin\jp2launcher.exe
FirewallRules: [UDP Query User{293DE055-A0F4-4D58-9CD0-4D20FFC0A3E8}C:\program files (x86)\java\jre1.8.0_20\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_20\bin\jp2launcher.exe
FirewallRules: [TCP Query User{EE3C12C7-2897-4C6E-893D-B32E773E2C2E}C:\program files (x86)\postgresql\enterprisedb-apachephp\apache\bin\httpd.exe] => (Allow) C:\program files (x86)\postgresql\enterprisedb-apachephp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{B9A9BF48-1911-4227-9DB7-98DE651A12FF}C:\program files (x86)\postgresql\enterprisedb-apachephp\apache\bin\httpd.exe] => (Allow) C:\program files (x86)\postgresql\enterprisedb-apachephp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{B3519276-0FF2-43B9-B6FE-C7598C874285}D:3\xampp\mysql\bin\mysqld.exe] => (Allow) D:3\xampp\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{D4BF0B81-34DD-43B1-8F45-A74D653F7104}D:3\xampp\mysql\bin\mysqld.exe] => (Allow) D:3\xampp\mysql\bin\mysqld.exe
FirewallRules: [TCP Query User{C86CAD3C-BDE7-4C63-8279-3D82393574D2}D:3\xampp\apache\bin\httpd.exe] => (Allow) D:3\xampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{CC9B5B24-DA3A-4025-B457-B8F82A1FC6F3}D:3\xampp\apache\bin\httpd.exe] => (Allow) D:3\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{5109BCEB-59B0-4F44-9AA9-A8EAFC10BB6D}C:\program files\xdev software\xdev 4\xdev 4.exe] => (Allow) C:\program files\xdev software\xdev 4\xdev 4.exe
FirewallRules: [UDP Query User{CE05AAA5-849F-488B-A087-95D2214F78BA}C:\program files\xdev software\xdev 4\xdev 4.exe] => (Allow) C:\program files\xdev software\xdev 4\xdev 4.exe
FirewallRules: [TCP Query User{D3CCE2B0-6078-4891-8EFC-4FB005085655}C:\program files\xdev software\xdev 3\xdev 3.exe] => (Allow) C:\program files\xdev software\xdev 3\xdev 3.exe
FirewallRules: [UDP Query User{185D84FE-8BA3-48E2-84B5-DDB88CB14A70}C:\program files\xdev software\xdev 3\xdev 3.exe] => (Allow) C:\program files\xdev software\xdev 3\xdev 3.exe
FirewallRules: [TCP Query User{AB96A3A5-C988-481A-A79D-5EEE013D4281}C:\program files (x86)\libreoffice 4\program\soffice.bin] => (Allow) C:\program files (x86)\libreoffice 4\program\soffice.bin
FirewallRules: [UDP Query User{6096F19D-833A-4875-BB80-142609073A74}C:\program files (x86)\libreoffice 4\program\soffice.bin] => (Allow) C:\program files (x86)\libreoffice 4\program\soffice.bin
FirewallRules: [TCP Query User{4710625F-A8CE-44EA-855E-6CB944A18F97}C:\program files\java\jdk1.8.0_25\bin\jmc.exe] => (Allow) C:\program files\java\jdk1.8.0_25\bin\jmc.exe
FirewallRules: [UDP Query User{5C8A5318-115F-4634-879B-0C316A5EFC6B}C:\program files\java\jdk1.8.0_25\bin\jmc.exe] => (Allow) C:\program files\java\jdk1.8.0_25\bin\jmc.exe
FirewallRules: [TCP Query User{C77378D8-3B7D-4FFD-A4A8-04298EB857A3}C:\program files (x86)\java\jre1.8.0_25\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_25\bin\jp2launcher.exe
FirewallRules: [UDP Query User{6AC6F121-5948-417F-BEC7-D91542752B8F}C:\program files (x86)\java\jre1.8.0_25\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_25\bin\jp2launcher.exe
FirewallRules: [TCP Query User{80EA5B97-CB35-4E76-A5B6-A08F7F4B9AA0}D:3\java\bin\jmc.exe] => (Allow) D:3\java\bin\jmc.exe
FirewallRules: [UDP Query User{3855221E-FFF3-4139-ACCF-2CA36FB0EF51}D:3\java\bin\jmc.exe] => (Allow) D:3\java\bin\jmc.exe
FirewallRules: [{E39B4D74-B7E6-44B5-9BC8-01F5E5F75D24}] => (Allow) C:\Users\helmut\AppData\Local\Temp\nsmEF90.tmp\CnetInstaller-10971725.exe
FirewallRules: [{84D689C3-8986-4A83-8441-8FB0185D010C}] => (Allow) C:\Users\helmut\AppData\Local\Temp\nsmEF90.tmp\CnetInstaller-10971725.exe
FirewallRules: [{8E203436-6315-4367-AFF1-AD62AEFFC0A3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{EC34F1B3-74FD-4693-AC44-02B79912B4A6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DAA58E50-46E6-43CE-AB11-6F96FAEB98C1}] => (Allow) C:\Users\helmut\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{30604AD6-EE8D-4887-9621-8C20E0A07860}] => (Allow) C:\Users\helmut\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{041E4ACF-C4BB-4958-B079-8816C28E6E99}] => (Allow) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
FirewallRules: [{70BD30ED-F91E-4216-ABEE-A0F82CA8409A}] => (Allow) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
FirewallRules: [TCP Query User{CF6426EA-68E2-4D0F-BE71-F28E41888015}D:\programme\xampp\apache\bin\httpd.exe] => (Allow) D:\programme\xampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{4EA51B31-8AD2-4743-B1C6-03F8ECDBC3BF}D:\programme\xampp\apache\bin\httpd.exe] => (Allow) D:\programme\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{4D8634E7-1F0E-401E-B8AB-56DDFBF41458}D:\programme\xampp\mysql\bin\mysqld.exe] => (Allow) D:\programme\xampp\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{F931CE37-F62C-4618-9F33-21C6191724A8}D:\programme\xampp\mysql\bin\mysqld.exe] => (Allow) D:\programme\xampp\mysql\bin\mysqld.exe
FirewallRules: [{7CC9304E-6A2A-4329-8AAB-3A90E62E0985}] => (Allow) C:\Program Files (x86)\pandasecuritytb\dtUser.exe
FirewallRules: [{3B0DE39C-EB4C-402C-9D62-6CB520F6A6E4}] => (Allow) C:\Program Files (x86)\pandasecuritytb\dtUser.exe
FirewallRules: [{D0E4B1D4-2ADF-4054-B751-8F5FA229B6EF}] => (Allow) C:\Program Files (x86)\pandasecuritytb\ToolbarCleaner.exe
FirewallRules: [{DAEE8BA5-9322-44FE-A5B4-67E8E981E8F8}] => (Allow) C:\Program Files (x86)\pandasecuritytb\ToolbarCleaner.exe
FirewallRules: [TCP Query User{B2E59E39-1F30-46DD-878C-639CAFB8E1AD}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{294772F4-3925-407C-8636-B7B0F5D5A6A7}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{D3B20BE4-2042-4129-A8E4-2665439B84DB}C:\program files (x86)\java\jre1.8.0_45\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_45\bin\jp2launcher.exe
FirewallRules: [UDP Query User{97DA8216-5303-44BC-B044-8C196CB67A82}C:\program files (x86)\java\jre1.8.0_45\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_45\bin\jp2launcher.exe
FirewallRules: [TCP Query User{139D2A66-FFF8-415C-889D-6D379635E8D1}C:\program files (x86)\java\jre1.8.0_51\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_51\bin\jp2launcher.exe
FirewallRules: [UDP Query User{6C840765-193F-4DA6-A9F7-3599A52D3505}C:\program files (x86)\java\jre1.8.0_51\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_51\bin\jp2launcher.exe
FirewallRules: [TCP Query User{68B18B82-DC35-449D-8598-A32B38F6030A}C:\program files (x86)\java\jre1.8.0_60\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\jp2launcher.exe
FirewallRules: [UDP Query User{AAE16D81-54B6-4CA1-BF2D-CAF50F3DC924}C:\program files (x86)\java\jre1.8.0_60\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\jp2launcher.exe
FirewallRules: [TCP Query User{CE1F17F1-4F44-4E7A-86E8-22BB9471BA79}C:\program files (x86)\java\jre1.8.0_65\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_65\bin\jp2launcher.exe
FirewallRules: [UDP Query User{DE9BF99B-2E20-4A1D-A638-2332C9C382BD}C:\program files (x86)\java\jre1.8.0_65\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_65\bin\jp2launcher.exe
FirewallRules: [TCP Query User{60055EAC-2876-49A0-B472-C8FBCDB66D3C}C:\program files (x86)\java\jre1.8.0_66\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_66\bin\jp2launcher.exe
FirewallRules: [UDP Query User{CC5507E9-CAE8-40DD-996F-B343A0CD2F33}C:\program files (x86)\java\jre1.8.0_66\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_66\bin\jp2launcher.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/04/2015 08:26:39 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x80070422).

Error: (12/02/2015 09:31:55 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x80070422).

Error: (12/01/2015 09:18:59 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x80070422).

Error: (11/28/2015 08:19:11 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x80070422).

Error: (11/28/2015 06:29:30 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x80070422).

Error: (11/28/2015 06:21:57 PM) (Source: MsiInstaller) (EventID: 11606) (User: NT-AUTORITÄT)
Description: Product: Adobe AIR -- Error 1606. Could not access network location (computed).

Error: (11/28/2015 06:21:57 PM) (Source: MsiInstaller) (EventID: 11606) (User: NT-AUTORITÄT)
Description: Product: Adobe AIR -- Error 1606. Could not access network location (computed).

Error: (11/28/2015 06:14:57 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x80070422).

Error: (11/28/2015 06:05:56 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x80070422).

Error: (11/25/2015 07:27:07 PM) (Source: MsiInstaller) (EventID: 1024) (User: helmut-PC)
Description: Produkt: Adobe Acrobat Reader DC - Deutsch - Update "{AC76BA86-7AD7-0000-2550-AC0F094E6F00}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127


Systemfehler:
=============
Error: (12/04/2015 08:22:04 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (12/02/2015 09:32:35 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80240055 fehlgeschlagen: Upgrade auf Windows 10 Pro, Version 1511, 10586

Error: (12/02/2015 09:24:23 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (12/01/2015 09:14:41 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (11/30/2015 08:24:14 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (11/28/2015 06:02:55 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (11/25/2015 07:20:29 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (11/23/2015 01:29:02 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (11/23/2015 01:28:54 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (11/23/2015 08:48:52 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-3450 CPU @ 3.10GHz
Prozentuale Nutzung des RAM: 23%
Installierter physikalischer RAM: 16344.1 MB
Verfügbarer physikalischer RAM: 12444.47 MB
Summe virtueller Speicher: 17142.3 MB
Verfügbarer virtueller Speicher: 13156.39 MB

==================== Laufwerke ================================

Drive b: (exSystem) (Fixed) (Total:238.25 GB) (Free:237.64 GB) NTFS
Drive c: (System) (Fixed) (Total:238.24 GB) (Free:142.19 GB) NTFS
Drive d: (Data 01) (Fixed) (Total:931.51 GB) (Free:803.99 GB) NTFS
Drive e: (Data 02) (Fixed) (Total:931.5 GB) (Free:217.11 GB) NTFS
Drive g: (Quadro5u) (CDROM) (Total:0.65 GB) (Free:0 GB) CDFS
Drive i: (ext Disk1) (Fixed) (Total:465.75 GB) (Free:464.3 GB) NTFS
Drive k: (ext Disk3) (Fixed) (Total:229.49 GB) (Free:228.2 GB) NTFS
Drive l: (ext Disk7) (Fixed) (Total:1862.79 GB) (Free:1125.97 GB) NTFS
Drive o: (USB DISK) (Removable) (Total:58.88 GB) (Free:50.49 GB) FAT32
Drive r: (HL_1GBA) (Removable) (Total:0.95 GB) (Free:0.26 GB) FAT32
Drive s: (HL_1GBB) (Removable) (Total:0.98 GB) (Free:0.95 GB) FAT
Drive x: (Data 03) (Fixed) (Total:465.75 GB) (Free:211.06 GB) NTFS
Drive y: (ext Disk4) (Fixed) (Total:1863.01 GB) (Free:717.95 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 449BE4ED)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 238.5 GB) (Disk ID: BE47F516)

Partition: GPT.

========================================================
Disk: 2 (Size: 238.5 GB) (Disk ID: BE47F516)

Partition: GPT.

========================================================
Disk: 3 (MBR Code: Windows XP) (Size: 465.8 GB) (Disk ID: CA11DE2F)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=42)

========================================================
Disk: 4 (Size: 1863 GB) (Disk ID: CE5B010A)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

========================================================
Disk: 5 (Size: 1863 GB) (Disk ID: BE47F516)

Partition: GPT.

========================================================
Disk: 6 (MBR Code: Windows XP) (Size: 465.8 GB) (Disk ID: EBCECF6C)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=OF Extended)

========================================================
Disk: 7 (MBR Code: Windows XP) (Size: 58.9 GB) (Disk ID: F7525C1E)
Partition 1: (Not Active) - (Size=58.9 GB) - (Type=0C)

========================================================
Disk: 8 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 5CC97DE9)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=OF Extended)

========================================================
Disk: 10 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: B9BFF61C)
Partition 1: (Not Active) - (Size=229.5 GB) - (Type=07 NTFS)

========================================================
Disk: 12 (Size: 973.5 MB) (Disk ID: 6F20736B)
No partition Table on disk 12.
Disk 12 is a removable device.

========================================================
Disk: 13 (Size: 1008 MB) (Disk ID: 003B9E92)
Partition 1: (Active) - (Size=1008 MB) - (Type=06)

==================== Ende von Addition.txt ============================
         

Ist das ein gewerblich genutztes System?

Nein, ich benutze es allerdings, um für unsere Gemeinde, das Dekanat und die Propstei zu schreiben und layouten.
Außerdem bin ich ambitionierter Hobbyfotograf und habe zigtausend Bilder

Die von dir angesprochenden Prozessnamen sind jedenfalls legitim. Und ohne Benutzername geht das nicht, ein Prozess läuft immer unter irgendeiner Benutzerkennung und sei es sowas wie 'SYSTEM' oder 'LOKALER DIENST'

Warum schreibst du bei sowas nicht gleich, mit was du das gesehen hast? Und ob es Meldungen deines Virenscanners gab, wenn ja, gleich die Logs posten.

Ich verstehe den Hinweis nicht. Zuvor hatte ich geschrieben, dass ich versehentlich doppelt geklickt habe. Das ist mir sofort als Fehler bewusst geworden.
Darum hab ich im Taskmanager nachgeschaut und die 3 Prozesse entdeckt, die ohne Benutzername laufen: atiedoxx, csrss und winlogon.
Der fehlende Benutzername kam mir verdächtig vor. Darum habe ich die Anfrage gestartet, bevor ich den PC runterfahre und damit vielleicht was ingang setze.
War das falsch?
Mein Virenscanner (panda) hat keine Meldung gebracht.

Was ist denn an den Hinweis nicht zu verstehen, dass die Prozesse legitim sind?
Dass die Prozesse ohne Nutzername laufen kann so nicht sein. Entweder hast du dich da verguckt oder dein Taskmanager hat nen Bug.

Dein Panda hat nix gefunden. Was ist mit Malwarebytes? Logs dazu? Oder gab es da auch nie Funde?

Um was für eine Mail mit welchem Anhang genau geht es eigentlich? Es muss ja nen Grund geben, dass du die für Spam mit virulentem Anhang hielst.

Die Mail ging an einige Menschen, die ich kenne von einem Absender: hnlie <hnlie@o2.co.uk>,
der mir vollkommen unbekannt ist und wo die Antwort als unzustellbar zurückkam.
Das zwar der 2. Verdachtsmoment.
Dass die Prozesse legitim sind, ist gut zu hören. Dass kein Benutzer ausgewiesen ist, irritierte mich zusätzlich.
Ich kann dir versichern, dass ich niemandem auf den Nerv gehen will, dass mich halt das Zusammentreffen der o.g. Sachen beunruhigt hat. Zumal ich entgegen meiner sonstigen Gepflogenheiten einen Doppelklick auf den Anhang " doc_iC6Hby (7,62 KB) " gemacht hatte.
Zwar bin ich kein Fachmann hier wie du, habe ansonsten schon etliche Jahre mit Computern zu tun. Sollte ich hier ungewollt zu einem Störfaktor geworden sein, so bitte ich das zu entschuldigen.

Warum wird man bei Rückfragen als Störfaktor gleich interpretiert?
Wenn die Sachlage unklar ist, du aber aber Antworten lesen möchtest, dann kann ich diese nur poste wenn ich weiß was Sache ist. Anders geht das nicht, das hat auch nix mit Störfaktor zu tun. Ich hab nur nicht verstanden, warum der erste Hinweis nicht zu verstehen sein soll...

Vllt schaust du jetzt nochmal im Taaskmanager nach und machst ein Screenshot von dem, was du meinst. Dass Prozesse angeblich ohne Benutzerkontxt laufen hab ich nämlich noch nicht gesehen.

Und bitte auch die Frage zu Malwarebytes beantworten.

Da ich neu hier bin, sind mir einige Abläufe noch nicht so klar (gewesen).
Meiner Meinung nach hatte ich die mir bekannten Infos gleich anfangs gegeben.
Ich habe weder von Panda noch von Malwarebytes Meldungen bekommen.
Den Screenshot vom TaskManager habe ich hochgeladen.
Ich habe auch nicht geschrieben, dass die Rückfragen ein Störfaktor sind, sondern dass ich mich fast wie einer fühle. Ich hatte auch keine Ahnung, was aus den Posts ersichtlich ist oder nicht.
Sorry, ich wollte niemanden ans Bein pinkeln.

Nein, wie gesagt das sind nur Rückfragen. Deswegen muss man sich nicht als Störfaktor fühlen.

Also, für ein Befall spricht so erstmal nix. Weder Panda noch MBAM haben was gefunden und deine FRST-Logs sind auch unauffällig. Die Prozesse ohne Benutzer können eine andere Ursache haben.

Wie sieht denn der Taskmanager nach einem reboot aus? Genau so?

Das werde ich gleich mal testen.
5 Minuten später: Es ist genauso wie vorher.
Außer den drei genannten Prozessen ist dann noch der für mein Wacom-Tablett ohne Benutzer.
Bei allen anderen Prozessen steht mein Name als Benutzer.
Nachsatz: Es lassen sich bei allen vier Prozessen weder der Dateipfad noch die Eigenschaften öffnen.

Mach mal ein Screenshot vom kompletten Taskmanager.
Und mach den Gegencheck mit https://technet.microsoft.com/de-de/...sexplorer.aspx