| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Unregelmaessige Weiterleitungen im FF BrowserWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
06.12.2015, 10:36
| #1 |
 |  Unregelmaessige Weiterleitungen im FF Browser Hallo Spezialisten, ich habe da ein Problem was ich allein nicht gelöst bekomme. Ich habe mir letzte diese Woche irgend etwas in meinem FFBrowser eingefangen. Es wird öfter auf eine andere Seite weitergeleitet. Folgendes habe ich bereits gemacht: - Alle Programme deinstalliert die an dem Tag von dem Trojaner installiert wurden deinstalliert. z.B. Oursurfing, Google? usw. Insgesamt waren es wohl 5 Programme. - FF und internetexplorer unter Eigenschaften überprüft. Dort stand unter Ziel kein zusätslicher Eintrag drin. - Dann nach euren Vorgaben Malwarebytes Anti-Malware ausgeführt. Dort wurden einige Pup gefunden. Habe ich alle entfernen lassen. - PC Reboot Problem bestand immer noch - Nocheinmal Malwarebytes Anti-Malware ausgeführt. Keine Fehler - AdWCleaner von eure Seite (filepony) heruntergeladen und ausgeführt. Keine Fehler gefunden. - Junkware Removal Tool geladen und ausgeführt. - Firefox deinstalliert. inkl der Ordner, auch unter AppData - Firfox neuinstalliert. Ich werde immer noch auf irgend welche Seiten umgelenkt. - AD Blocker installiert. Dann waren die weiterleitungen nicht mehr sichtbar. Muss aber manchmal 2 x auf einen Link drücken um weiter zu kommen. In der "Neue Tab" Ansicht sind da immer Seiten hinterlegt, wo ich nie drauf war - MalewareBytes heruntergeladen und ausgeführt. Keine Fehler. - Junkware Removal Tool heruntergeladen und ausgeführt. Keine Fehler. Jetzt weiß ich nicht mehr weiter. Vielleicht könnt ihr mir noch helfen. Gruß Klaus Aktueller FRST von Heute Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-12-2015
durchgeführt von Klaus (Administrator) auf PC-KLAUS (06-12-2015 10:32:26)
Gestartet von C:\Users\Klaus\Downloads\_FRST
Geladene Profile: Klaus (Verfügbare Profile: Klaus)
Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(FUJITSU LIMITED) C:\Program Files\FUJITSU\FUJ02E3\FUJ02E3.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Program Files\Windows Server\Bin\SharedServiceHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
(AxoNet Software GmbH) C:\Program Files\AxoNet Software GmbH\LightsOutClient\LightsOutClientService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(FUJITSU LIMITED) C:\Program Files\FUJITSU\Plugfree NETWORK\PFNService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files\Windows Server\Bin\WSConnectorUpdate.exe
(Microsoft Corporation) C:\Program Files\Windows Server\Bin\LANConfigSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Server\Bin\ProviderRegistryService.exe
(Microsoft Corporation) C:\Program Files\Windows Server\Bin\SharedServiceHost.exe
(Microsoft Corporation) C:\Program Files\Windows Server\Bin\SharedServiceHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(FUJITSU LIMITED) C:\Program Files\FUJITSU\Plugfree NETWORK\PFNetDm.exe
(FUJITSU LIMITED) C:\Program Files\FUJITSU\Plugfree NETWORK\PFNTray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_245.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_245.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1215632 2012-08-17] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-24] (Synaptics Incorporated)
HKLM\...\Run: [Launchpad] => C:\Program Files\Windows Server\Bin\Launchpad.exe [1099360 2013-02-08] (Microsoft Corporation)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [571192 2014-08-14] (Acronis)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-04-09] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508240 2015-08-05] (Adobe Systems Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-10-16] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2015-12-04] (AVAST Software)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [FJ Camera_Monitor] => C:\Program Files (x86)\FJ Camera\monitor_Metro.exe [1724280 2013-10-23] (SunplusIT, Inc.)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5380368 2015-07-20] (Acronis)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [693336 2015-07-19] (Acronis International GmbH)
HKLM-x32\...\Run: [LexwareInfoService] => C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe [196648 2014-09-26] (Haufe-Lexware GmbH & Co. KG)
HKLM-x32\...\Run: [New Value] => C:\Program Files\Division-M\Drive Bender Client\DriveBenderTray.exe [7106160 2015-06-04] (Division-M)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\Run: [RoboForm] => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [110160 2015-10-01] (Siber Systems)
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1403304 2015-10-29] (Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\MountPoints2: {15a2a7ed-4c01-11e4-bedd-c01885ac5883} - "H:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\MountPoints2: {15a2a87e-4c01-11e4-bedd-c01885ac5883} - "H:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\Winlogon: [Shell] C:\WINDOWS\Explorer.exe [2501368 2015-01-28] (Microsoft Corporation) <==== ACHTUNG
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1403304 2015-10-29] (Garmin Ltd. or its subsidiaries)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-12-04] (AVAST Software)
ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis)
ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis)
ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
AutoConfigURL: [S-1-5-21-2032405694-3072891623-2312475013-1005] => hxxp://unstopp.me/wpad.dat?d64b029a1372c370b518de42bc424f152110607
Tcpip\Parameters: [DhcpNameServer] 192.168.115.254
Tcpip\..\Interfaces\{38053D6A-BF08-4FAA-9952-81D119C8A6E8}: [DhcpNameServer] 192.168.115.254
Tcpip\..\Interfaces\{627AC899-19AE-474B-A2FB-3949C461ED7E}: [DhcpNameServer] 192.168.115.254
Tcpip\..\Interfaces\{BEE4684A-FB88-48C2-BBFC-16F09E5DDE02}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=hp-avast&type=avastbcl
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://de.yahoo.com/?fr=hp-avast&type=avastbcl
SearchScopes: HKLM-x32 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2032405694-3072891623-2312475013-1005 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2032405694-3072891623-2312475013-1005 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2015-10-01] (Siber Systems Inc.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-11-25] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-11-26] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-25] (Oracle Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
BHO-x32: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2015-10-01] (Siber Systems Inc.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-11-25] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-26] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-25] (Oracle Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2015-10-01] (Siber Systems Inc.)
Toolbar: HKLM - Kein Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - Keine Datei
Toolbar: HKLM - Kein Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - Keine Datei
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2015-10-01] (Siber Systems Inc.)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
Toolbar: HKU\S-1-5-21-2032405694-3072891623-2312475013-1005 -> &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2015-10-01] (Siber Systems Inc.)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF ProfilePath: C:\Users\Klaus\AppData\Roaming\Mozilla\Firefox\Profiles\1ordtzn4.default
FF Homepage: google.de
FF Session Restore: -> ist aktiviert.
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll [2015-12-02] ()
FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-25] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-25] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-12-02] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Extension: FireSSH - C:\Users\Klaus\AppData\Roaming\Mozilla\Firefox\Profiles\1ordtzn4.default\extensions\firessh@nightlight.ws [2015-12-02]
FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi
FF Extension: RoboForm Toolbar - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi [2015-10-01]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-04]
FF HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-11-26]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2016448 2015-11-25] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2015-12-04] (AVAST Software)
S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252504 2013-09-04] (Broadcom Corporation.)
R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [233328 2012-01-23] (DTS, Inc)
R2 FUJ02E3Service; C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe [80752 2012-07-18] (FUJITSU LIMITED)
S3 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [777744 2015-10-29] (Garmin Ltd. or its subsidiaries)
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2011-08-18] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.) [Datei ist nicht signiert]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-08-27] (Intel Corporation)
S2 initMonitor; C:\Program Files\Windows Server\Bin\SharedServiceHost.exe [30592 2011-03-02] (Microsoft Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 Lexware_Update_Service; C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe [64552 2014-11-06] (Haufe-Lexware GmbH & Co. KG)
R2 LoClntService; C:\Program Files\AxoNet Software GmbH\LightsOutClient\LightsOutClientService.exe [25520 2015-10-16] (AxoNet Software GmbH)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2014-01-08] ()
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 NotificationsProviderSvc; C:\Program Files\Windows Server\Bin\SharedServiceHost.exe [30592 2011-03-02] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-04-09] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-04-09] (NVIDIA Corporation)
R2 PFNService; C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe [2219520 2012-07-11] (FUJITSU LIMITED) [Datei ist nicht signiert]
S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 providers_system; C:\Program Files\Windows Server\Bin\SharedServiceHost.exe [30592 2011-03-02] (Microsoft Corporation)
R2 ServiceProviderRegistry; C:\Program Files\Windows Server\Bin\ProviderRegistryService.exe [41568 2012-11-02] (Microsoft Corporation)
S4 SqmProviderSvc; C:\Program Files\Windows Server\Bin\SharedServiceHost.exe [30592 2011-03-02] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
R2 WSS_ComputerBackupProviderSvc; C:\Program Files\Windows Server\Bin\SharedServiceHost.exe [30592 2011-03-02] (Microsoft Corporation)
S2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3674864 2014-01-08] (Intel® Corporation)
U4 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-12-04] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2015-12-04] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-12-04] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-12-04] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1055560 2015-12-04] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [450504 2015-12-04] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [155304 2015-12-04] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2015-12-04] (AVAST Software)
R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2013-09-04] (Broadcom Corporation.)
R3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [132608 2015-01-30] (Microsoft Corporation)
R3 BthHFAud; C:\Windows\System32\drivers\BthHfAud.sys [32768 2014-10-08] (Microsoft Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-12-02] ()
R0 FBIOSDRV; C:\Windows\System32\Drivers\FBIOSDRV.sys [20848 2012-08-01] (FUJITSU LIMITED)
R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [296736 2015-05-16] (Acronis International GmbH)
R3 FUJ02B1; C:\Windows\System32\drivers\FUJ02B1.sys [15696 2013-08-12] (FUJITSU LIMITED)
R3 FUJ02E3; C:\Windows\System32\drivers\FUJ02E3.sys [21200 2013-08-12] (FUJITSU LIMITED)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3349984 2014-02-25] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-04-09] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2015-04-09] (NVIDIA Corporation)
S3 pwdrvio; C:\WINDOWS\system32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2013-09-30] ()
R1 RrNetCapFilterDriver; C:\Windows\system32\DRIVERS\RrNetCapFilterDriver.sys [24744 2013-10-07] (Audials AG)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-24] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-24] (Synaptics Incorporated)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [1510392 2013-10-22] (Sunplus)
R2 tib; C:\Windows\system32\DRIVERS\tib.sys [1058632 2015-07-29] (Acronis International GmbH)
R2 tib_mounter; C:\Windows\system32\DRIVERS\tib_mounter.sys [248648 2015-07-29] (Acronis International GmbH)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [116232 2015-03-16] (Oracle Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
U4 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-12-04 19:59 - 2015-12-04 19:59 - 00017388 _____ C:\Users\Klaus\Dokuments\cc_20151204_195919.reg
2015-12-04 18:45 - 2015-12-04 18:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-04 18:45 - 2015-12-04 18:45 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-04 18:45 - 2015-12-04 18:45 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-04 18:32 - 2015-12-04 18:32 - 13155552 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\Silverlight_x64(1).exe
2015-12-04 17:38 - 2015-12-04 17:38 - 00386096 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-12-04 17:38 - 2015-12-04 17:38 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2015-12-04 15:29 - 2015-12-05 22:55 - 00000543 _____ C:\Users\Klaus\Desktop\JRT.txt
2015-12-04 14:28 - 2015-12-05 23:50 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-12-04 14:26 - 2015-12-05 23:50 - 00000000 ____D C:\Users\Klaus\Desktop\mbar
2015-12-04 14:11 - 2015-12-06 10:32 - 00000000 ____D C:\Users\Klaus\Downloads\_FRST
2015-12-04 14:03 - 2015-12-06 10:32 - 00000000 ____D C:\FRST
2015-12-03 14:24 - 2015-12-03 14:24 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2015-12-03 14:24 - 2015-12-03 14:24 - 00000000 ____D C:\Program Files\Common Files\AV
2015-12-02 18:23 - 2015-12-02 18:31 - 00000000 ____D C:\Users\Klaus\AppData\Local\Mozilla
2015-12-02 18:23 - 2015-12-02 18:23 - 00001182 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-02 18:23 - 2015-12-02 18:23 - 00001170 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-12-02 18:23 - 2015-12-02 18:23 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Mozilla
2015-12-02 18:23 - 2015-12-02 18:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-02 18:23 - 2015-12-02 18:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-12-02 17:31 - 2015-12-02 17:31 - 00001197 _____ C:\Users\Klaus\Desktop\mbam.txt
2015-12-02 15:26 - 2015-12-02 15:26 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-12-02 15:26 - 2015-12-02 15:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-02 15:24 - 2015-12-02 15:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2015-12-02 15:24 - 2015-12-02 15:24 - 00000000 ____D C:\Program Files\7-Zip
2015-12-02 14:37 - 2015-12-02 14:37 - 00243976 _____ C:\Users\Klaus\Downloads\Firefox Setup Stub 42.0.exe
2015-12-02 14:35 - 2015-12-04 21:24 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2032405694-3072891623-2312475013-1005
2015-12-02 11:27 - 2015-12-02 11:27 - 00000000 _____ C:\autoexec.bat
2015-12-02 11:26 - 2015-12-02 11:26 - 00022704 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys
2015-12-02 10:21 - 2015-12-02 10:21 - 00288007 _____ C:\Users\Klaus\Dokuments\Visio-Zeichnung1_3.pdf
2015-12-01 21:48 - 2015-12-04 21:38 - 00000000 ____D C:\AdwCleaner
2015-12-01 21:34 - 2015-12-01 21:34 - 00021000 _____ C:\Users\Klaus\Dokuments\cc_20151201_213431.reg
2015-12-01 21:00 - 2015-12-05 22:59 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-12-01 20:59 - 2015-12-05 22:59 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-12-01 20:59 - 2015-12-01 21:57 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-12-01 20:59 - 2015-12-01 20:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-12-01 20:59 - 2015-12-01 20:59 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-12-01 20:59 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-12-01 20:59 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2015-12-01 11:27 - 2014-11-24 22:09 - 00020872 _____ (Phoenix Technologies) C:\WINDOWS\SysWOW64\Drivers\DrvAgent64.SYS
2015-11-29 21:16 - 2015-11-29 21:16 - 01202911 _____ C:\Users\Klaus\Downloads\phpsysinfo-3.2.3.zip
2015-11-29 20:38 - 2015-11-29 21:12 - 01274789 _____ C:\Users\Klaus\Downloads\RDPWrap-v1.6.rar
2015-11-29 11:23 - 2015-11-29 11:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2015-11-26 11:56 - 2015-12-01 21:57 - 00002116 _____ C:\Users\Public\Desktop\WISO steuer Sparbuch 2016.lnk
2015-11-26 11:54 - 2015-11-26 11:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WISO steuer Sparbuch 2016
2015-11-25 11:51 - 2015-12-01 21:57 - 00002074 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2015-11-25 11:51 - 2015-11-25 11:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer
2015-11-25 11:51 - 2015-11-25 11:51 - 00000000 ____D C:\Program Files (x86)\MyPhoneExplorer
2015-11-25 11:39 - 2015-11-25 11:39 - 00063775 _____ C:\Users\Klaus\Dokuments\Backup Motorola Klaus 2015-11-25.mpb
2015-11-23 14:55 - 2015-11-23 14:55 - 00066336 _____ C:\Users\Klaus\Downloads\CHIP_Windows10UpdateStopper.exe
2015-11-23 10:28 - 2015-11-23 10:28 - 22859232 _____ (Splashtop Inc.) C:\Users\Klaus\Downloads\Splashtop_Streamer_WIN_v3.0.2.1.EXE
2015-11-22 17:53 - 2015-11-22 17:53 - 00016176 _____ C:\Users\Klaus\AppData\Local\recently-used.xbel
2015-11-18 23:27 - 2015-11-18 23:27 - 00039402 _____ C:\Users\Klaus\Dokuments\cc_20151118_232705.reg
2015-11-16 20:02 - 2015-11-16 20:03 - 00000000 ____D C:\Users\Klaus\Downloads\Adobe Dokumente
2015-11-16 20:00 - 2015-11-24 16:49 - 00000000 ____D C:\Users\Klaus\Downloads\Solarlog Sicherung
2015-11-15 18:58 - 2015-11-15 18:58 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Autodesk
2015-11-12 11:02 - 2015-11-12 11:02 - 00000000 ____D C:\Users\Klaus\Downloads\SolarLog-Toolkit-v1.0b
2015-11-11 11:10 - 2015-11-03 01:23 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-11-11 11:10 - 2015-11-03 01:23 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-11-11 09:47 - 2015-10-13 16:59 - 00397224 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2015-11-11 09:47 - 2015-10-13 16:59 - 00340872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2015-11-11 09:47 - 2015-10-13 16:59 - 00137960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncrypt.dll
2015-11-11 09:47 - 2015-10-13 16:59 - 00120376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncrypt.dll
2015-11-11 09:47 - 2015-10-13 16:59 - 00106952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2015-11-11 09:47 - 2015-10-13 16:59 - 00091416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2015-11-11 09:47 - 2015-10-11 07:36 - 00561952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-11-11 09:47 - 2015-10-11 07:36 - 00177496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-11-11 09:47 - 2015-10-10 19:40 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2015-11-11 09:47 - 2015-10-10 19:39 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2015-11-11 09:47 - 2015-10-10 19:07 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-11-11 09:47 - 2015-10-10 18:33 - 01441280 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-11-11 09:47 - 2015-10-10 18:27 - 00432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-11-11 09:47 - 2015-10-10 18:11 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-11-11 09:47 - 2015-10-10 17:45 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-11-11 09:47 - 2015-09-29 13:24 - 00155480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2015-11-11 09:46 - 2015-10-31 00:46 - 25818624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-11-11 09:46 - 2015-10-30 23:52 - 20331520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-11-11 09:46 - 2015-10-30 23:22 - 14457856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-11-11 09:46 - 2015-10-15 17:08 - 00990208 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-11-11 09:46 - 2015-10-15 16:46 - 00803328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-11-11 09:46 - 2015-10-13 18:10 - 00559616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-11-11 09:46 - 2015-10-13 18:10 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-11-11 09:46 - 2015-09-12 14:47 - 00414559 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-11-11 09:46 - 2015-09-07 17:22 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2015-11-11 09:46 - 2015-09-07 16:54 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2015-11-11 09:46 - 2015-09-07 16:30 - 01091584 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-11-11 09:46 - 2015-09-04 20:24 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys
2015-11-11 09:46 - 2015-08-28 23:20 - 00183368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe
2015-11-11 09:46 - 2015-08-20 21:45 - 01380048 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-11-11 09:46 - 2015-08-20 18:48 - 01096704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-11-11 09:45 - 2015-10-31 00:25 - 02886656 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-11-11 09:45 - 2015-10-31 00:24 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-11-11 09:45 - 2015-10-31 00:11 - 05990912 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-11-11 09:45 - 2015-10-31 00:11 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-11-11 09:45 - 2015-10-30 23:47 - 00504832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-11-11 09:45 - 2015-10-30 23:42 - 02279936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-11-11 09:45 - 2015-10-30 23:39 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-11-11 09:45 - 2015-10-30 23:36 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-11-11 09:45 - 2015-10-30 23:32 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-11-11 09:45 - 2015-10-30 23:31 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-11-11 09:45 - 2015-10-30 23:17 - 02487808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-11-11 09:45 - 2015-10-30 23:16 - 04527616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-11-11 09:45 - 2015-10-30 23:14 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-11-11 09:45 - 2015-10-30 23:10 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-11-11 09:45 - 2015-10-30 23:09 - 12854272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-11-11 09:45 - 2015-10-30 23:04 - 01547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-11-11 09:45 - 2015-10-30 22:53 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-11-11 09:45 - 2015-10-30 22:51 - 02011136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-11-11 09:45 - 2015-10-30 22:48 - 01311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-11-11 09:45 - 2015-10-30 22:46 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-11-11 09:45 - 2015-10-20 22:54 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-11-11 09:45 - 2015-10-20 15:53 - 03705856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-11-11 09:45 - 2015-10-20 15:36 - 02243072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-11-11 09:45 - 2015-10-20 15:35 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-11-11 09:45 - 2015-10-20 15:34 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-11-11 09:45 - 2015-10-20 15:34 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-11-11 09:45 - 2015-10-20 15:34 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-11-11 09:45 - 2015-10-20 15:33 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-11-11 09:45 - 2015-10-20 15:14 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-11-11 09:45 - 2015-10-20 15:13 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-11-11 09:45 - 2015-10-20 15:13 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-11-11 09:45 - 2015-10-20 15:13 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-11-11 09:45 - 2015-10-15 00:02 - 07455064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-11-11 09:45 - 2015-10-15 00:02 - 01659560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2015-11-11 09:45 - 2015-10-15 00:02 - 01519592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2015-11-11 09:45 - 2015-10-15 00:02 - 01487008 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2015-11-11 09:45 - 2015-10-15 00:02 - 01355848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2015-11-11 09:44 - 2015-10-17 15:19 - 04176384 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-11-11 09:43 - 2015-10-08 17:08 - 01083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2015-11-08 11:03 - 2015-11-08 11:03 - 00056786 _____ C:\Users\Klaus\Dokuments\Visio-Heizung Montage.pdf
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-12-06 09:38 - 2015-10-14 09:59 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-12-06 09:32 - 2013-11-21 16:15 - 00003930 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{1EDCF81F-5A5E-402C-8B3A-DBF578C7E2D0}
2015-12-06 09:29 - 2014-06-13 10:49 - 00000000 __SHD C:\Users\Klaus\IntelGraphicsProfiles
2015-12-06 09:29 - 2013-11-21 09:22 - 00000000 ____D C:\ProgramData\LightsOut
2015-12-05 23:56 - 2013-11-21 18:13 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\ClassicShell
2015-12-05 23:56 - 2013-11-20 23:33 - 00000000 ____D C:\Users\Klaus
2015-12-05 22:43 - 2014-12-25 12:46 - 00002282 ____H C:\Users\Klaus\Dokuments\Default.rdp
2015-12-05 21:40 - 2014-12-25 10:29 - 00000000 ____D C:\Users\Klaus\Dokuments\Outlook-Dateien
2015-12-05 19:48 - 2013-11-21 00:16 - 00000000 ____D C:\ProgramData\NVIDIA
2015-12-05 19:48 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-04 20:22 - 2014-12-27 13:54 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Kodi
2015-12-04 20:04 - 2014-02-25 22:49 - 00003702 _____ C:\WINDOWS\System32\Tasks\Launch HTC Sync Loader
2015-12-04 19:59 - 2014-12-25 13:12 - 00000000 ___RD C:\Users\Klaus\Dokuments
2015-12-04 18:40 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-12-04 18:38 - 2015-05-16 14:59 - 00000000 ____D C:\Users\Klaus\AppData\Local\ElevatedDiagnostics
2015-12-04 18:17 - 2013-08-22 14:36 - 00000000 ____D C:\Windows
2015-12-04 17:40 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\Inf
2015-12-04 17:38 - 2014-04-22 09:51 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-12-04 17:38 - 2013-12-25 18:00 - 00155304 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-12-04 17:38 - 2013-11-21 14:48 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-12-04 17:38 - 2013-11-21 14:47 - 01055560 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-12-04 17:38 - 2013-11-21 14:47 - 00450504 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-12-04 17:38 - 2013-11-21 14:47 - 00273784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-12-04 17:38 - 2013-11-21 14:47 - 00097648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-12-04 17:38 - 2013-11-21 14:47 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-12-04 17:38 - 2013-11-21 14:47 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-12-03 10:43 - 2015-07-27 13:41 - 00001910 _____ C:\Users\Klaus\Desktop\Pfarrer-Ferstl.txt
2015-12-02 23:55 - 2015-10-14 09:59 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-12-02 23:55 - 2015-05-18 22:59 - 00000000 ____D C:\Users\Klaus\AppData\Local\Adobe
2015-12-02 21:44 - 2014-12-25 15:55 - 00000000 ____D C:\Users\Klaus\Dokuments\_Photovoltaik
2015-12-02 15:27 - 2013-11-21 21:16 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Skype
2015-12-02 15:26 - 2013-11-21 21:15 - 00000000 ____D C:\ProgramData\Skype
2015-12-02 15:24 - 2014-10-05 16:52 - 00004108 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-02 15:24 - 2014-10-05 16:52 - 00003872 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-02 15:24 - 2014-10-05 16:52 - 00001136 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-02 15:24 - 2014-10-05 16:52 - 00001132 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-02 14:59 - 2013-09-30 05:14 - 01789004 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-02 14:59 - 2013-09-30 04:56 - 00770130 _____ C:\WINDOWS\system32\perfh007.dat
2015-12-02 14:59 - 2013-09-30 04:56 - 00160912 _____ C:\WINDOWS\system32\perfc007.dat
2015-12-01 21:57 - 2015-11-01 20:02 - 00002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-12-01 21:57 - 2015-10-26 18:24 - 00001726 _____ C:\Users\Public\Desktop\iTunes.lnk
2015-12-01 21:57 - 2015-10-22 16:13 - 00001293 _____ C:\Users\Public\Desktop\TA-Designer.lnk
2015-12-01 21:57 - 2015-10-22 15:26 - 00001257 _____ C:\Users\Public\Desktop\F-Editor.lnk
2015-12-01 21:57 - 2015-10-18 10:17 - 00001229 _____ C:\Users\Public\Desktop\Winsol.lnk
2015-12-01 21:57 - 2015-09-05 18:28 - 00001419 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
2015-12-01 21:57 - 2015-08-29 21:56 - 00001144 _____ C:\Users\Public\Desktop\Drive Bender Manager.lnk
2015-12-01 21:57 - 2015-08-22 11:54 - 00002136 _____ C:\Users\Public\Desktop\WISO Hausverwalter 2016.lnk
2015-12-01 21:57 - 2015-07-14 17:43 - 00002781 _____ C:\Users\Public\Desktop\Finanzmanager 2016.lnk
2015-12-01 21:57 - 2015-06-14 15:11 - 00000945 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealtimeSync.lnk
2015-12-01 21:57 - 2015-05-18 23:48 - 00000999 _____ C:\Users\Klaus\Desktop\Adobe Lightroom.lnk
2015-12-01 21:57 - 2015-05-18 23:48 - 00000999 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom.lnk
2015-12-01 21:57 - 2015-05-16 15:32 - 00001224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis True Image 2015.lnk
2015-12-01 21:57 - 2015-05-16 15:32 - 00001218 _____ C:\Users\Public\Desktop\Acronis True Image 2015.lnk
2015-12-01 21:57 - 2015-04-13 19:59 - 00001053 _____ C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
2015-12-01 21:57 - 2015-03-30 21:33 - 00000716 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) HD Graphics Control Panel.lnk
2015-12-01 21:57 - 2015-03-30 21:33 - 00000710 _____ C:\Users\Public\Desktop\Intel(R) HD Graphics Control Panel.lnk
2015-12-01 21:57 - 2015-03-30 21:28 - 00001183 _____ C:\Users\Public\Desktop\Intel(R) Driver Update Utility 2.0.lnk
2015-12-01 21:57 - 2015-03-05 21:03 - 00001305 _____ C:\Users\Public\Desktop\X2-Simulator.lnk
2015-12-01 21:57 - 2015-02-05 23:28 - 00000303 _____ C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Heimnetzgruppe.lnk
2015-12-01 21:57 - 2015-01-25 15:17 - 00001244 _____ C:\Users\Klaus\Desktop\Kodineu.lnk
2015-12-01 21:57 - 2015-01-15 18:45 - 00000996 _____ C:\Users\Public\Desktop\Mp3tag.lnk
2015-12-01 21:57 - 2015-01-12 14:43 - 00001114 _____ C:\Users\Klaus\Desktop\Kodi Verzeichnis.lnk
2015-12-01 21:57 - 2015-01-02 14:39 - 00001197 _____ C:\Users\Klaus\Desktop\Kodi Start.lnk
2015-12-01 21:57 - 2014-12-27 14:09 - 00001860 _____ C:\Users\Klaus\Desktop\Kodi.lnk
2015-12-01 21:57 - 2014-12-20 22:17 - 00002208 _____ C:\Users\Klaus\Desktop\TV Movie ClickFinder.lnk
2015-12-01 21:57 - 2014-12-13 11:24 - 00000839 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-12-01 21:57 - 2014-11-24 20:53 - 00000938 _____ C:\Users\Klaus\Desktop\X-Plane.lnk
2015-12-01 21:57 - 2014-09-22 10:26 - 00002261 _____ C:\Users\Klaus\Desktop\iDevice Manager.lnk
2015-12-01 21:57 - 2014-09-10 09:42 - 00002169 _____ C:\Users\Klaus\Desktop\MPTagThat.lnk
2015-12-01 21:57 - 2014-09-03 11:16 - 00001412 _____ C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Windows herunterladen.lnk
2015-12-01 21:57 - 2014-06-21 10:49 - 00001153 _____ C:\Users\Public\Desktop\Digital Photo Professional.lnk
2015-12-01 21:57 - 2014-06-02 17:44 - 00001888 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk
2015-12-01 21:57 - 2014-04-19 14:23 - 00000949 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2015-12-01 21:57 - 2014-02-07 13:48 - 00001291 _____ C:\Users\Klaus\Desktop\Revo Uninstaller.lnk
2015-12-01 21:57 - 2014-01-15 20:58 - 00001262 _____ C:\Users\Public\Desktop\ElsterFormular.lnk
2015-12-01 21:57 - 2013-12-29 21:10 - 00000955 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeFileSync.lnk
2015-12-01 21:57 - 2013-12-29 21:10 - 00000949 _____ C:\Users\Public\Desktop\FreeFileSync.lnk
2015-12-01 21:57 - 2013-12-13 20:22 - 00002523 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-12-01 21:57 - 2013-12-11 18:01 - 00001229 _____ C:\Users\Public\Desktop\Tapps2.lnk
2015-12-01 21:57 - 2013-12-09 17:27 - 00001960 _____ C:\Users\Public\Desktop\Sonos.lnk
2015-12-01 21:57 - 2013-12-07 18:48 - 00001058 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Family Tree Maker World Express.lnk
2015-12-01 21:57 - 2013-12-07 18:48 - 00001046 _____ C:\Users\Public\Desktop\Family Tree Maker World Express.lnk
2015-12-01 21:57 - 2013-11-23 21:38 - 00001502 _____ C:\Users\Klaus\Desktop\Win32DiskImager.lnk
2015-12-01 21:57 - 2013-11-21 18:37 - 00001896 _____ C:\Users\Public\Desktop\ELOoffice.lnk
2015-12-01 21:57 - 2013-11-21 17:08 - 00001072 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR-Registrierung.lnk
2015-12-01 21:57 - 2013-11-21 17:07 - 00001384 _____ C:\ProgramData\Microsoft\Windows\Start Menu\HP Solution Center.lnk
2015-12-01 21:57 - 2013-11-21 13:42 - 00000655 _____ C:\Users\Public\Desktop\Total Commander 64 bit.lnk
2015-12-01 21:57 - 2013-11-21 12:24 - 00001683 _____ C:\Users\Klaus\Desktop\SolarAnalyzer.lnk
2015-12-01 21:57 - 2013-11-20 23:33 - 00001461 _____ C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-01 21:57 - 2013-11-20 23:06 - 00001511 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-12-01 12:27 - 2014-03-04 21:24 - 00000000 ___RD C:\Users\Klaus\SkyDrive
2015-12-01 11:11 - 2013-12-10 17:28 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MyPhoneExplorer
2015-11-29 21:49 - 2013-12-09 17:26 - 00000000 ____D C:\ProgramData\Sonos,_Inc
2015-11-29 20:23 - 2013-12-29 21:10 - 00000000 ____D C:\Program Files\FreeFileSync
2015-11-29 11:24 - 2014-01-15 20:58 - 00000000 ____D C:\Program Files (x86)\ElsterFormular
2015-11-29 11:24 - 2013-11-21 18:20 - 00000000 ____D C:\ProgramData\elsterformular
2015-11-29 00:20 - 2014-12-25 15:55 - 00000000 ____D C:\Users\Klaus\Dokuments\_Eprimo Strom
2015-11-28 14:26 - 2013-12-13 11:42 - 00000000 ____D C:\Users\Klaus\AppData\Local\MPTagThat
2015-11-27 22:33 - 2013-11-21 12:24 - 00000000 ___RD C:\Users\Klaus\Desktop\Programme
2015-11-27 22:32 - 2015-03-11 10:47 - 00000000 ____D C:\Users\Klaus\AppData\Local\CDex
2015-11-27 22:28 - 2014-03-02 11:18 - 00000000 ____D C:\Program Files (x86)\WISO
2015-11-27 22:28 - 2013-03-29 17:53 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-11-27 16:29 - 2014-11-12 16:13 - 00000000 ____D C:\WINDOWS\SysWOW64\vbox
2015-11-27 16:29 - 2014-11-12 16:13 - 00000000 ____D C:\WINDOWS\system32\vbox
2015-11-26 16:04 - 2014-12-25 10:29 - 00000000 ____D C:\Users\Klaus\Dokuments\Steuer-Sparbuch
2015-11-26 11:56 - 2013-11-21 18:06 - 00000000 ____D C:\Users\Klaus\AppData\Local\Buhl
2015-11-25 14:57 - 2013-11-21 15:36 - 00000000 ____D C:\ProgramData\Oracle
2015-11-25 14:54 - 2014-07-18 18:26 - 00000000 ____D C:\Program Files\Java
2015-11-25 14:54 - 2014-07-18 14:16 - 00000000 ____D C:\Program Files (x86)\Java
2015-11-25 14:54 - 2014-01-15 15:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-11-25 14:53 - 2015-08-27 16:04 - 00000000 ____D C:\Users\Klaus\.oracle_jre_usage
2015-11-25 14:53 - 2014-07-18 18:27 - 00110176 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2015-11-25 11:02 - 2013-11-21 17:56 - 00000000 ____D C:\ProgramData\Lexware
2015-11-25 10:27 - 2013-11-21 18:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Technische Alternative
2015-11-22 21:19 - 2013-11-21 18:20 - 00000000 ____D C:\Technische Alternative
2015-11-22 17:54 - 2014-04-19 14:32 - 00000000 ____D C:\Users\Klaus\.gimp-2.8
2015-11-22 17:53 - 2014-04-19 14:36 - 00000000 ____D C:\Users\Klaus\AppData\Local\gtk-2.0
2015-11-22 15:46 - 2015-10-31 20:01 - 00000000 ____D C:\Users\Klaus\Downloads\CMI_WE_mit_Wartungsfunktion
2015-11-22 15:29 - 2015-08-15 20:48 - 00000212 _____ C:\Users\Klaus\Desktop\Lightsout win10.txt
2015-11-19 21:21 - 2013-12-09 17:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sonos
2015-11-19 21:21 - 2013-12-09 17:27 - 00000000 ____D C:\Program Files (x86)\Sonos
2015-11-19 21:21 - 2013-12-09 17:26 - 00000000 ____D C:\Users\Klaus\AppData\Local\Downloaded Installations
2015-11-17 09:57 - 2013-11-21 18:41 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Notepad++
2015-11-17 09:57 - 2013-11-21 18:41 - 00000000 ____D C:\Program Files (x86)\Notepad++
2015-11-16 15:28 - 2015-04-28 17:10 - 00000632 _____ C:\Users\Klaus\Desktop\Mercer.txt
2015-11-13 20:08 - 2014-11-20 23:38 - 00000028 _____ C:\Users\Klaus\AppData\Local\X-Plane Installer.prf
2015-11-13 20:03 - 2014-11-20 23:38 - 00000073 _____ C:\Users\Klaus\AppData\Local\X-Plane_drm.prf
2015-11-12 11:32 - 2013-12-06 15:48 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\TeamViewer
2015-11-11 11:23 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2015-11-11 11:08 - 2013-08-22 15:44 - 00498216 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-11-11 11:05 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-11-11 09:56 - 2012-07-26 08:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-11-11 09:54 - 2013-11-20 18:19 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-11-11 09:48 - 2013-11-20 18:19 - 145617392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-11-11 09:32 - 2013-11-21 13:41 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-11-11 09:31 - 2013-11-21 19:14 - 00000039 _____ C:\WINDOWS\vbaddin.ini
2015-11-07 12:01 - 2013-11-21 22:27 - 00000000 ____D C:\Users\Klaus\.VirtualBox
2015-11-07 10:35 - 2014-12-25 15:45 - 00000000 ____D C:\Users\Klaus\Downloads\Virtual Box
2015-11-06 09:39 - 2014-04-15 14:37 - 00000000 ____D C:\ProgramData\Package Cache
2015-11-06 09:38 - 2014-06-09 08:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2015-11-06 09:38 - 2014-04-15 15:02 - 00003554 _____ C:\WINDOWS\System32\Tasks\GarminUpdaterTask
2015-11-06 09:38 - 2014-04-06 20:34 - 00000000 ____D C:\Program Files (x86)\Garmin
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-11-02 22:13 - 2015-11-02 22:18 - 1359736205 _____ () C:\Users\Klaus\AppData\Roaming\Kodi_15.2.rar
2014-03-20 18:33 - 2014-03-20 18:33 - 0012955 _____ () C:\Users\Klaus\AppData\Roaming\Kommagetrennte Werte (DOS).CAL
2015-05-01 13:05 - 2015-05-01 14:09 - 0000261 _____ () C:\Users\Klaus\AppData\Roaming\OpenSceneryX Installationsprogramm.plist
2014-09-08 11:16 - 2014-09-08 11:34 - 0000600 _____ () C:\Users\Klaus\AppData\Roaming\winscp.rnd
2013-11-22 15:51 - 2015-08-29 22:27 - 0000600 _____ () C:\Users\Klaus\AppData\Local\PUTTY.RND
2015-11-22 17:53 - 2015-11-22 17:53 - 0016176 _____ () C:\Users\Klaus\AppData\Local\recently-used.xbel
2015-05-03 15:42 - 2015-09-12 21:20 - 0007604 _____ () C:\Users\Klaus\AppData\Local\Resmon.ResmonCfg
2014-11-20 23:38 - 2015-11-13 20:08 - 0000028 _____ () C:\Users\Klaus\AppData\Local\X-Plane Installer.prf
2014-11-20 23:38 - 2015-11-13 20:03 - 0000073 _____ () C:\Users\Klaus\AppData\Local\X-Plane_drm.prf
2014-11-20 19:44 - 2015-07-24 14:17 - 0000088 _____ () C:\Users\Klaus\AppData\Local\x-plane_install_10.txt
2013-11-21 17:03 - 2013-11-21 17:14 - 0000821 _____ () C:\ProgramData\hpzinstall.log
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2015-11-27 17:29
==================== Ende von FRST.txt ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-12-2015
durchgeführt von Klaus (2015-12-06 10:33:35)
Gestartet von C:\Users\Klaus\Downloads\_FRST
Windows 8.1 (X64) (2013-11-20 22:16:46)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2032405694-3072891623-2312475013-500 - Administrator - Disabled)
Gast (S-1-5-21-2032405694-3072891623-2312475013-501 - Limited - Disabled)
Klaus (S-1-5-21-2032405694-3072891623-2312475013-1005 - Administrator - Enabled) => C:\Users\Klaus
Sonos (S-1-5-21-2032405694-3072891623-2312475013-1006 - Limited - Enabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
4500_G510nz_Help (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
4500G510nz (x32 Version: 140.0.001.000 - Hewlett-Packard) Hidden
4500G510nz_Software_Min (x32 Version: 140.0.001.000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
7-Zip 15.12 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1512-000001000000}) (Version: 15.12.00.0 - Igor Pavlov)
Acronis True Image 2015 (HKLM-x32\...\{2F70A6E6-2F71-4907-8441-BDC5D300310B}Visible) (Version: 18.0.6613 - Acronis)
Acronis True Image 2015 (x32 Version: 18.0.6613 - Acronis) Hidden
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.245 - Adobe Systems Incorporated)
Adobe Lightroom (HKLM-x32\...\{8048A5DF-8A70-5BE1-954B-E0FDE1BD0D0D}) (Version: 6.2.1 - Adobe Systems Incorporated)
Airport Amsterdam (HKLM-x32\...\Airport Amsterdam) (Version: 1.0.0.0 - Aerosoft GmbH)
ANT Drivers Installer x64 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Anytime USB Charge Utility (HKLM-x32\...\InstallShield_{A794229E-401E-44D4-A8B5-B21E975676DE}) (Version: 2.01.00.001 - FUJITSU LIMITED)
Anytime USB Charge Utility (Version: 2.01.00.001 - FUJITSU LIMITED) Hidden
Apple Application Support (32-Bit) (HKLM-x32\...\{649A1FD9-5892-46AD-8DF0-C4A43FF61CB7}) (Version: 4.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{0DE0A178-AC7B-4650-806C-CF226DE03766}) (Version: 4.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2245 - AVAST Software)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
Canon Utilities Digital Photo Professional (HKLM-x32\...\Digital Photo Professional) (Version: 3.14.0.0 - Canon Inc.)
Canon Utilities EOS Utility 2 (HKLM-x32\...\EOS Utility 2) (Version: 2.14.0.0 - Canon Inc.)
Canon Utilities ImageBrowser EX (HKLM-x32\...\ImageBrowser EX) (Version: 1.4.0.5 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.23.47 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.14.0.0 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.12 - Piriform)
Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft)
CyberLink YouCam 5 (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.2931.0 - CyberLink Corp.)
DDBAC (HKLM-x32\...\{40B12E76-C97D-45D8-BD85-008FE8C860EF}) (Version: 5.3.37.0 - DataDesign)
DeskUpdate (HKLM-x32\...\DeskUpdate_is1) (Version: 4.15.0144 - Fujitsu Technology Solutions)
Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden
doPDF 7.3 printer (HKLM\...\doPDF 7 printer_is1) (Version: 7.3.393 - Softland)
Drive Bender Client (HKLM\...\{1963E50F-7C00-4BF8-A68C-DF4AB67B07AB}) (Version: 2.3.9.0 - Division-M)
Elevated Installer (x32 Version: 4.1.10.0 - Garmin Ltd or its subsidiaries) Hidden
ELO Pdf Drucker (HKLM-x32\...\{C7ACA1FD-E1A7-42D1-93C2-6EBD868584E9}) (Version: 6.0 - ELO Digital Office GmbH)
ELOoffice (HKLM-x32\...\{C08EF2EB-27C6-4E99-B5C3-15AE8210B614}) (Version: 9.0 - ELO Digital Office GmbH)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.3.17800 - Landesfinanzdirektion Thüringen)
Family Tree Maker World Express (HKLM-x32\...\Family Tree Maker World Express) (Version: 21.1.865 - Ancestry.com, Inc.)
Family Tree Maker World Express (x32 Version: 21.1.865 - Ancestry.com, Inc.) Hidden
Fax (x32 Version: 140.0.307.000 - Hewlett-Packard) Hidden
F-Editor Version 1.10 (HKLM-x32\...\{2A8AEFF7-E7DA-4440-979A-2AB137BE185C}_is1) (Version: 1.10 - Technische Alternative GmbH)
Finanzmanager 2016 (x32 Version: 23.36.00.0179 - Haufe-Lexware GmbH & Co.KG) Hidden
Finanzmanager Import Export Server 2016 (x32 Version: 23.33.00.0106 - Haufe-Lexware GmbH & Co.KG) Hidden
FJ Camera (HKLM-x32\...\Sunplus SPUVCb) (Version: 3.4.9.19 - SunplusIT)
FreeFileSync 7.6 (HKLM-x32\...\FreeFileSync_is1) (Version: 7.6 - www.FreeFileSync.org)
Fujitsu BIOS Driver (HKLM-x32\...\InstallShield_{7292FFCF-FA9A-4585-AB80-A71961F931AF}) (Version: 1.1.0.0 - FUJITSU LIMITED)
Fujitsu BIOS Driver (Version: 1.1.0.0 - FUJITSU LIMITED) Hidden
Fujitsu MobilityCenter Extension Utility (HKLM-x32\...\InstallShield_{EC314CDF-3521-482B-A21C-65AC95664814}) (Version: 4.01.00.000 - FUJITSU LIMITED)
Fujitsu MobilityCenter Extension Utility (Version: 4.01.00.000 - FUJITSU LIMITED) Hidden
Fujitsu System Extension Utility (HKLM-x32\...\InstallShield_{E8A5B78F-4456-4511-AB3D-E7BFFB974A7A}) (Version: 3.5.0.0 - FUJITSU LIMITED)
Fujitsu System Extension Utility (Version: 3.5.0.0 - FUJITSU LIMITED) Hidden
Garmin BaseCamp (HKLM-x32\...\{36A0D446-B8E9-4753-BDFE-335F6F4DE59C}) (Version: 4.5.2 - Garmin Ltd or its subsidiaries)
Garmin City Navigator Europe NTU 2016.20 (HKLM-x32\...\{7F485A74-C557-4EF4-B934-97DA9A74E74B}) (Version: 2.0.0.0 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{b292f4e5-60ca-4bb8-8810-e5f908c3c1ff}) (Version: 4.1.10.0 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 4.1.10.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 4.1.10.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin MapSource (HKLM-x32\...\{AFBAB9A0-DDE8-49AE-8C17-A01B61BEE64B}) (Version: 6.16.3 - Garmin Ltd or its subsidiaries)
Garmin POI Loader (HKLM-x32\...\{3213ED5E-7BBE-4613-BE69-8B1E4FE520DD}) (Version: 2.7.3 - Garmin Ltd or its subsidiaries)
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
GeoSetter 3.4.16 (HKLM-x32\...\GeoSetter_is1) (Version: - Friedemann Schmidt)
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version: - )
Harmony Desktop 2.0.14 (HKLM-x32\...\{44A829C9-EC11-4612-A977-37D19114D739}) (Version: 2.0.1400 - Fallbrook Technologies)
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Officejet 4500 G510n-z 14.0 Rel. 6 (HKLM\...\{6B9B2E57-D988-4258-8A2C-6F3657A600BD}) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}) (Version: 5.002.006.003 - Hewlett-Packard)
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) Driver Update Utility 2.0 (x32 Version: 2.0.0.29 - Intel) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® Driver Update Utility (HKLM-x32\...\{8409c4f7-2340-4933-a304-5d37db4fb48b}) (Version: 2.0.0.29 - Intel)
Intel® PROSet/Wireless Software (HKLM-x32\...\{eddf4201-b72e-4e94-9e7b-ac1ba97c029f}) (Version: 16.11.0 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.40 - Irfan Skiljan)
iTunes (HKLM\...\{E690A491-702F-4DEC-9977-C015D1DBB57C}) (Version: 12.3.1.23 - Apple Inc.)
Java 8 Update 66 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Kodi (HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\Kodi) (Version: - XBMC-Foundation)
LAV Filters 0.62.0 (HKLM-x32\...\lavfilters_is1) (Version: 0.62.0 - Hendrik Leppkes)
Lexware Finanzmanager 2016 (HKLM-x32\...\{f8af6484-cb0b-426f-b8de-dd70753f69fc}) (Version: 23.33.0.114 - Haufe-Lexware GmbH & Co.KG)
Lexware Info Service (x32 Version: 5.00.00.0044 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware Installations Dienst (x32 Version: 4.01.00.0009 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware online banking (HKLM-x32\...\{BDED7C2D-BAC0-40CA-90AA-E3D23FDAC87D}) (Version: 22.02.00.0040 - Haufe-Lexware GmbH & Co.KG)
LIFEBOOK Application Panel (HKLM-x32\...\InstallShield_{6226477E-444F-4DFE-BA19-9F4F7D4565BC}) (Version: 8.5.0.0 - FUJITSU LIMITED)
LIFEBOOK Application Panel (Version: 8.5.0.0 - FUJITSU LIMITED) Hidden
Lights-Out Client x64 (HKLM\...\{DA0D6B4B-EED6-4EE8-9ECF-0F7D83F5E0CE}) (Version: 1.6.1.2408 - AxoNet Software GmbH)
Logitech Harmony Remote Software 7 (HKLM-x32\...\{5C6F884D-680C-448B-B4C9-22296EE1B206}) (Version: 7.7.0.0 - Logitech)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
MarketResearch (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft Visio Premium 2010 (HKLM-x32\...\Office14.VISIOR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
MOBackup - Datensicherung für Outlook (Vollversion) (HKLM-x32\...\MOBackup-DatensicherungfürOutlook) (Version: 8.0 - Heiko Schröder)
Mozilla Firefox 42.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 de)) (Version: 42.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0 - Mozilla)
Mp3tag v2.70 (HKLM-x32\...\Mp3tag) (Version: v2.70 - Florian Heidenreich)
MPTagThat (HKLM-x32\...\MPTagThat) (Version: 3.0.0 - Helmut Wahrmann)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.6 - F.J. Wechselberger)
Network64 (Version: 140.0.306.000 - Hewlett-Packard) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.6 - Notepad++ Team)
NVIDIA 3D Vision Treiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 350.12 - NVIDIA Corporation)
NVIDIA Grafiktreiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
Oracle VM VirtualBox 4.3.26 (HKLM\...\{5771F59A-BFC9-4FAF-A883-7642EF4BA3C3}) (Version: 4.3.26 - Oracle Corporation)
Plugfree NETWORK (HKLM\...\{7BA64D21-EE46-4a9a-8145-52B0175C3F86}) (Version: 7.0.0.1 - FUJITSU LIMITED)
Plugfree NETWORK (Version: 7.0.001 - FUJITSU LIMITED) Hidden
Pointing Device Utility (HKLM-x32\...\InstallShield_{DDC49774-40B9-47AE-9C63-5569C08C4082}) (Version: 2.0.0.0 - FUJITSU LIMITED)
Pointing Device Utility (Version: 2.0.0.0 - FUJITSU LIMITED) Hidden
Power Saving Utility (Version: 33.01.00.000 - FUJITSU LIMITED) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6714 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.2.8400.30137 - Realtek Semiconductor Corp.)
Remote Control USB Driver (HKLM-x32\...\{8471021C-F529-43DE-84DF-3612E10F58C4}) (Version: 2.3.2.317 - )
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
RoboForm 7-9-16-7 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 7-9-16-7 - Siber Systems)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.)
Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{359ADBEC-068A-4CC9-9174-77AB8EDB867A}) (Version: - Microsoft)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype™ 7.15 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.15.103 - Skype Technologies S.A.)
SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Sonos Controller (HKLM-x32\...\{7BBA9BF8-05DF-47D8-8880-82A9B99505B9}) (Version: 31.3.22220 - Sonos, Inc.)
Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.10.12 - Synaptics Incorporated)
System Requirements Lab for Intel (HKLM-x32\...\{04C4B49D-45D9-4A28-9ED1-B45CBD99B8C7}) (Version: 4.5.24.0 - Husdawg, LLC)
TA-Designer 1.13 (HKLM-x32\...\TA-Designer_is1) (Version: 1.13 - Technische Alternative GmbH)
Tapps2 1.04 (HKLM-x32\...\Tapps2_is1) (Version: 1.04 - Technische Alternative GmbH)
Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51 beta 2 - Ghisler Software GmbH)
TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
TV Movie ClickFinder (HKLM-x32\...\{A1A2ACDC-0C22-4EB1-B958-1898A93DAF28}) (Version: 1.00.0000 - TV Movie)
UltraISO Premium V9.36 (HKLM-x32\...\UltraISO_is1) (Version: - )
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden
WIDCOMM Bluetooth Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.8030 - Broadcom Corporation)
Windows Driver Package - FUJITSU LIMITED (FUJ02B1) System (06/09/2012 1.23) (HKLM\...\7D737DCFBBA92B6A4335FA93E0B846D9D2DE908E) (Version: 06/09/2012 1.23 - FUJITSU LIMITED)
Windows Driver Package - FUJITSU LIMITED (FUJ02E3) System (06/22/2012 1.30.0.0) (HKLM\...\3DCA6835C7741E181396F76FD94C05C19F4124A9) (Version: 06/22/2012 1.30.0.0 - FUJITSU LIMITED)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Home Server 2011 Connector (HKLM\...\{C1E4D639-4A33-4314-809E-89BD0EF48522}) (Version: 6.1.8800.16402 - Microsoft Corporation)
Windows Media Encoder 9 Series (HKLM-x32\...\Windows Media Encoder 9) (Version: - )
Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
WinMerge 2.14.0 (HKLM-x32\...\WinMerge_is1) (Version: 2.14.0 - Thingamahoochie Software)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Winsol 2.05 (HKLM-x32\...\Winsol_is1) (Version: 2.05 - Technische Alternative GmbH)
Wireless Radio Switch Driver (HKLM-x32\...\InstallShield_{13031CDF-00D2-4FCE-AB13-8430D8733574}) (Version: 1.0.0.0 - FUJITSU LIMITED)
Wireless Radio Switch Driver (Version: 1.0.0.0 - FUJITSU LIMITED) Hidden
WISO Hausverwalter 2016 (HKLM-x32\...\{FF698809-CD68-4A77-BAD9-C1D5DD9AEF5B}) (Version: 10.00.8837 - Buhl Data Service GmbH)
WISO steuer:Sparbuch 2016 (HKLM-x32\...\{C14E44A8-325E-4E95-84A4-C4EC43BF0325}) (Version: 23.00.1146 - Buhl Data Service GmbH)
X2-Simulator 1.10 (HKLM-x32\...\X2-Simulator_is1) (Version: 1.10 - Technische Alternative GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2032405694-3072891623-2312475013-1005_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
==================== Wiederherstellungspunkte =========================
04-12-2015 19:53:40 JRT Pre-Junkware Removal
05-12-2015 22:52:16 JRT Pre-Junkware Removal
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0CA7350B-C3D1-4116-BBD3-7C3D4033C160} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {0D5337D3-6619-4ABE-A3D5-0FA28ABC6EFF} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN2S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {118A429D-03C2-42F7-A498-7935091AE125} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN4S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {12850010-BCC3-4405-A8C2-94D82B6CF46D} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe
Task: {129FED17-8CC6-4729-8573-74B0D779D406} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndOnABN3S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {1594F58A-7C43-4A0C-BA56-5C5F742384A0} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndSetWakeupSetting => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {1BF9C2BD-5511-4BBC-9A63-ED2B17348BC2} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN1S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {25680AE4-43AA-4EEA-8E9D-52FDCD7803A4} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndCheckOnWakeupBySwitch => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {299C396D-FFE9-42BE-82E6-572B5032A378} - System32\Tasks\Synaptics TouchPad Enhancements => Program Files\Synaptics\SynTP\SynTPEnh.exe
Task: {2B0A6054-69F0-43DF-B15F-3153C1263EBF} - System32\Tasks\Microsoft\Windows\Windows Server\UploadCEIPData => C:\Program Files\Windows Server\Bin\RunTask.exe [2012-11-02] (Microsoft Corporation)
Task: {2F890F2B-8AD9-44E9-A845-1775C67B9BD1} - System32\Tasks\Fujitsu\PointingDeviceUtility\SetDriverIfFuj02b1DisableOnLogon => C:\Program Files\Fujitsu\PointingDeviceUtility\FJPDAutoSet.exe [2012-08-04] (FUJITSU LIMITED)
Task: {38AB1C2E-BC82-4619-B82F-D8B13564434D} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndOnABN2S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {4D71A68C-9EAE-4267-94B6-E922A6B2465B} - System32\Tasks\Microsoft\Windows\Windows Server\SaveCEIPData => C:\Program Files\Windows Server\Bin\RunTask.exe [2012-11-02] (Microsoft Corporation)
Task: {4F4EA827-004D-4616-864B-5F1A09FF38C6} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN5S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {55272939-E147-41ED-98A6-E93CC5181E00} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2015-10-01] (Siber Systems)
Task: {69F2794C-A710-41F0-AF35-95A5B95448D7} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMJJMJMJLMJJNJPMPMCNPMKJIMOJCNLMKMOMNMCNNJGMHMOJCNOMNMKMLJKJMMMMPMJJJMKJMMJNJICMIMCNGMCNOMJMFMOMOMCNPMCNGMJMPMPMFMJMCNMMCNGMJMPMPMCNNMJNPICMOMFMEKMICNJJCKFMOMIMLMLMJNHICMMJBJKJLIMJJNBJCMELDJOJKIMIJNKJCMJNNICMJNDJCMLJKJJNMJCMOMFMNMLMOMFMMMHMJNFICMGJLJKJBJLIGJLIGJKJMIBNKJHIKJ"
Task: {6D1F98FD-8A2C-4751-9EA2-2921E75EBF5E} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndCheckOnWakeup => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {7007E703-1CA8-431F-97FB-64F49CE9CE42} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-26] (Apple Inc.)
Task: {74480064-61E1-4C1A-9116-CE965B7EC27C} - System32\Tasks\Microsoft\Windows\Windows Server\InstallAddIns => C:\Program Files\Windows Server\Bin\RunTask.exe [2012-11-02] (Microsoft Corporation)
Task: {7BA9DF59-5443-4F34-8022-3EC8B6D456C2} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2015-12-03] (AVAST Software)
Task: {816385D1-8A26-42F1-96A3-AC23FBDDC31D} - System32\Tasks\Microsoft\Windows\Windows Server\Alert Evaluations => C:\Program Files\Windows Server\Bin\RunTask.exe [2012-11-02] (Microsoft Corporation)
Task: {8E8E4554-C13A-4190-92F8-A3AE75FF4470} - System32\Tasks\Microsoft\Windows\Windows Server\RenewClientCertificate => C:\Program Files\Windows Server\Bin\RunTask.exe [2012-11-02] (Microsoft Corporation)
Task: {914CBA6E-9C73-4339-AD83-BCBCC6B81D54} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnWakeupNow => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {94B7CB14-E9C0-4C15-AE22-CE1743582718} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2015-10-29] ()
Task: {9EAD94C4-20AE-4605-BB3C-8CDAC9D41982} - System32\Tasks\Microsoft\Windows\Windows Server\Health Definition Updates => C:\Program Files\Windows Server\Bin\RunTask.exe [2012-11-02] (Microsoft Corporation)
Task: {AB42AB79-9402-45DD-BA90-ACB993436CBC} - System32\Tasks\Fujitsu\PointingDeviceUtility\ToggleIPD => C:\Program Files\Fujitsu\PointingDeviceUtility\FJPDAutoSet.exe [2012-08-04] (FUJITSU LIMITED)
Task: {B51B808B-E894-4E03-A63E-9E980723CFCD} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartBtnHndHKB => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {BC7B808C-4F96-4E26-B46D-7C32556E49F9} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnWakeupAtLogon => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {C21774D0-2255-4A7E-8BAB-C77239A00EE0} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndOnABN5S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {C9D4E068-773E-45E5-9539-732CE066125C} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN6S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {CF43D3B7-35DC-4BAC-A7FF-BD8CC6493435} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-12-04] (AVAST Software)
Task: {D26FF231-43EF-440C-B422-804AE6973B44} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-11-16] (Piriform Ltd)
Task: {D4128710-27B7-4B37-84C8-2077ABA3BD94} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndOnABN6S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {D48F23C5-98BC-4FB9-86A8-6764C9504846} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {D5704809-1587-4E2A-BB2B-24582EC27A63} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndOnABN4S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {D5BB8465-B5AF-4E1D-977F-B842B6D4862E} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-02] (Adobe Systems Incorporated)
Task: {D5BBB570-C823-4F0D-8D43-B49B2049ED38} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN3S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {DCE64EF3-04F5-4F10-91AD-866F351C4E2F} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndOnABN1S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {E1259FD2-35FA-47BF-8ADA-B08BFC912A95} - System32\Tasks\Outlook Sicherung => C:\Program Files (x86)\MOBackup\mobackup.exe [2015-07-22] (Heiko Schröder)
Task: {EEEC24C8-8CEF-4198-B04E-7EE527BC98EE} - System32\Tasks\Fujitsu\ApplicationPanel\DisableBtnHndStartQuickTouchOnWakeupAtLogon => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {FC3CEF65-4ED6-4BAD-BC95-CD8E98A12346} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {FCCF636B-01A4-46E9-AE7D-83ACF596EFD5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\Users\Klaus\Desktop\Kodi Start.lnk -> D:\Kodi Dateien\Kodi Startup Skript\Kodi.bat () <==== ACHTUNG
Shortcut: C:\Users\Klaus\Desktop\Kodineu.lnk -> D:\Kodi Dateien\Kodi Startup Skript\Kodineu.bat () <==== ACHTUNG
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-02-13 04:20 - 2015-02-13 04:20 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-09-25 14:20 - 2013-09-25 14:20 - 00049368 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btwleapi.dll
2013-10-27 09:03 - 2015-04-09 01:58 - 00012104 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2015-07-20 08:08 - 2015-07-20 08:08 - 00034624 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\thread_pool.dll
2015-07-20 08:15 - 2015-07-20 08:15 - 00420160 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\ulxmlrpcpp.dll
2014-11-27 09:44 - 2014-11-27 09:44 - 00129344 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\EXPAT.dll
2013-03-29 17:47 - 2012-06-25 02:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-05-16 18:33 - 2015-04-09 01:58 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-12-04 17:38 - 2015-12-04 17:38 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-12-04 17:38 - 2015-12-04 17:38 - 00103888 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-12-04 17:38 - 2015-12-04 17:38 - 00125512 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-12-04 17:38 - 2015-12-04 17:38 - 00469008 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2015-05-16 18:30 - 2015-04-09 01:58 - 00012104 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2015-12-05 20:30 - 2015-12-05 20:30 - 02803200 _____ () C:\Program Files\AVAST Software\Avast\defs\15120504\algo.dll
2015-12-06 10:25 - 2015-12-06 10:25 - 02803200 _____ () C:\Program Files\AVAST Software\Avast\defs\15120600\algo.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.115.254 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\...\StartupApproved\StartupFolder: => "Bluetooth.lnk"
HKLM\...\StartupApproved\StartupFolder: => "HP Digital Imaging Monitor.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Quicken 2014 Zahlungserinnerung.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Winsol_Autostart.lnk"
HKLM\...\StartupApproved\StartupFolder: => "ImageBrowser EX Agent.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Quicken 2015 Zahlungserinnerung.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Finanzmanager 2016 Zahlungserinnerung.lnk"
HKLM\...\StartupApproved\Run: => "Launchpad"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run: => "Acronis Scheduler2 Service"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "DeskUpdateNotifier"
HKLM\...\StartupApproved\Run32: => "FJ Camera_Monitor"
HKLM\...\StartupApproved\Run32: => "YouCam Service"
HKLM\...\StartupApproved\Run32: => "BCSSync"
HKLM\...\StartupApproved\Run32: => "HP Software Update"
HKLM\...\StartupApproved\Run32: => "LexwareInfoService"
HKLM\...\StartupApproved\Run32: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "New Value"
HKLM\...\StartupApproved\Run32: => "AcronisTibMounterMonitor"
HKLM\...\StartupApproved\Run32: => "TrueImageMonitor.exe"
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\StartupApproved\StartupFolder: => "EOS Utility.lnk"
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\StartupApproved\Run: => "GarminExpressTrayApp"
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\StartupApproved\Run: => "iDevice Manager Launcher"
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\StartupApproved\Run: => "CCleaner Monitoring"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{F4A9D810-C459-4358-88CA-8A63720597B7}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{D5B647B3-C146-4CF4-8871-877E79415E4D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{69346E45-C28B-4790-AAB0-D60CE7FA6E1E}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{6CAE0CBE-15C6-4323-8FCB-949D852F127D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{DC5CE5AE-2441-4ABD-87BF-542B7A412D40}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{9F8DBE80-86BB-49D1-BC91-5D321EFEA8AF}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{4B307344-DD0B-4D52-8354-E6D06DF5D303}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{5BB1E69A-E4A3-4ABD-B750-CC67BD2F1C29}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{D6BCDCA8-70EF-4891-AE73-235C964422E3}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{4F6D4854-2A79-42B1-9A3C-759D8E6EA5B1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{0823F6A0-5F62-4C2B-A1CA-E602485F3348}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{4E507199-0E83-4C5B-AA12-6FE4A2491809}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{B408FDA0-D8B1-4CE3-9CBC-E7DEBBFE41CE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{D6BEB72C-11BF-41A2-9BF5-9852C6D88889}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{F7B07158-4431-44DF-AEA2-1D5622907BA0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{6CC74370-41C0-4F46-BFE3-E6EECF9B3710}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{B42F2DC0-6339-4417-B714-CE9BAAB9B918}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [TCP Query User{71AF4574-C332-465B-9257-2706D0723950}C:\programdata\elo digital office\volltext\bin\eloocr_fr.exe] => (Allow) C:\programdata\elo digital office\volltext\bin\eloocr_fr.exe
FirewallRules: [UDP Query User{C1C1C993-923E-41C1-BAB5-89C45A3A4043}C:\programdata\elo digital office\volltext\bin\eloocr_fr.exe] => (Allow) C:\programdata\elo digital office\volltext\bin\eloocr_fr.exe
FirewallRules: [TCP Query User{B05E7C62-10D8-4DC5-9DBD-754A366538FF}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{70808B14-050F-4AD3-940E-805A2A5B5E19}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{EE30F330-EA6E-4607-AEA9-FB0859CA607D}] => (Allow) C:\Program Files (x86)\Sonos\Sonos.exe
FirewallRules: [{4BA447A4-3DBA-44DA-827B-936DB31327C9}] => (Allow) C:\Program Files (x86)\Sonos\Sonos.exe
FirewallRules: [{98EE9E56-C170-4FA7-9556-13007A87C3AD}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{8C38F049-C376-4CA1-AE66-34BB99EA91C4}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{13966F86-5F95-4FFB-98A4-16266121BB68}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{F90BE7AC-521B-46E4-9F60-348E412124FA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{F6A6C742-566D-4F50-8D14-B9D85220BBBD}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{BD4C3C56-E396-4438-853F-FAEB7968CA3F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{5CE20C4F-2645-40CD-9364-1CC28A696E44}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{C996CFF0-F36A-4086-A589-26994BB01AA5}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{5E666F93-32AC-4F0D-89CA-C6BD0DD3B412}] => (Allow) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
FirewallRules: [{C488373F-2C06-459C-86ED-8DFDB6FDEF08}] => (Allow) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
FirewallRules: [{32993ACF-E887-4F36-8C07-35513A132768}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [TCP Query User{7CEB7CDF-C42D-4ED1-B125-88D2AE5AEFAA}C:\program files (x86)\xbmc\wake.exe] => (Allow) C:\program files (x86)\xbmc\wake.exe
FirewallRules: [UDP Query User{7E71E0E6-59CF-46FA-9C1D-6142F8D758CA}C:\program files (x86)\xbmc\wake.exe] => (Allow) C:\program files (x86)\xbmc\wake.exe
FirewallRules: [{D1EB2436-E81C-44B9-9878-E85363D88374}] => (Block) C:\program files (x86)\xbmc\wake.exe
FirewallRules: [{5967A1FD-6942-4CF5-A04A-F30F6E35BD4E}] => (Block) C:\program files (x86)\xbmc\wake.exe
FirewallRules: [TCP Query User{89597B40-4BC0-4842-B4AD-A19D2BD18DED}D:\x-plane 10\x-plane.exe] => (Allow) D:\x-plane 10\x-plane.exe
FirewallRules: [UDP Query User{189E8A20-2EB0-4887-9EE5-2A4E59433320}D:\x-plane 10\x-plane.exe] => (Allow) D:\x-plane 10\x-plane.exe
FirewallRules: [{0BEF704C-EF9E-4AF4-A761-4BF90398F21B}] => (Block) D:\x-plane 10\x-plane.exe
FirewallRules: [{594CB74C-CB4B-4A51-8E2E-B0AE60209F09}] => (Block) D:\x-plane 10\x-plane.exe
FirewallRules: [TCP Query User{AA5959E7-C5EE-4DB6-9113-65850382F693}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe
FirewallRules: [UDP Query User{DFBDDE3D-B1B0-4815-9A1B-18399E3BB5C9}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe
FirewallRules: [{14997928-6522-4DC3-AFC8-CE83486583C5}] => (Block) C:\program files (x86)\kodi\kodi.exe
FirewallRules: [{C05930D8-7A52-4311-B1D4-3107D10D136D}] => (Block) C:\program files (x86)\kodi\kodi.exe
FirewallRules: [TCP Query User{367DBBCA-0D21-4E02-ABB4-A3D77C330951}D:\kodi dateien\kodi startup skript\wake.exe] => (Allow) D:\kodi dateien\kodi startup skript\wake.exe
FirewallRules: [UDP Query User{0FA04778-563A-4496-8104-96E489161E0B}D:\kodi dateien\kodi startup skript\wake.exe] => (Allow) D:\kodi dateien\kodi startup skript\wake.exe
FirewallRules: [{61478CCD-4C11-4B07-A5F4-7DDD821CA87E}] => (Block) D:\kodi dateien\kodi startup skript\wake.exe
FirewallRules: [{DAD70CAD-6490-4268-84D8-CF5CFDF87593}] => (Block) D:\kodi dateien\kodi startup skript\wake.exe
FirewallRules: [{CB9B33B2-0FFA-41D1-A0B3-F8934A9F30B8}] => (Allow) C:\Program Files (x86)\Canon\EOS Utility\EOSUPNPSV.exe
FirewallRules: [{A8119655-F1B9-42B9-8783-E39F51927836}] => (Allow) C:\Program Files (x86)\Canon\EOS Utility\EOSUPNPSV.exe
FirewallRules: [{A768239C-AC66-47BD-8E7E-D958DE10C832}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{95E3D279-EBC6-40D8-8854-E2B7B92B0CC4}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{6BF698D1-F228-4465-B027-2C9CAFBDB558}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{15E0FEA9-69D5-42F4-9AC3-A4ADEFC59A98}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{ADF98F16-2F31-4819-A8BF-084F5FBEEF8F}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{211330CD-AF03-4BA7-A8FF-A6411E42E957}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{3FC131AB-CA9B-442F-89C1-B3987686878C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{B3F23426-AAEC-4355-83B2-ACBD914B0E36}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{94CCE881-6BFF-46BE-8269-BD756B50EB9C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{12835AF7-DB49-433A-AFB8-EAED640436CD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{17316687-6E0C-431E-AF5B-CAFC6DF67CB1}] => (Allow) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
FirewallRules: [{9591D6BB-8852-4FD0-BE1A-DD0A38472E86}] => (Allow) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
FirewallRules: [TCP Query User{5F7699DA-4672-48B7-9F70-E570D1E95F5F}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{9975F651-A28D-4894-8080-88F1B3368C18}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [{284B7C92-1AFC-4EE4-B002-472E03F967E3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2FF862E2-84F4-4651-9B14-2BACF281A5CC}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{51C68FA0-2E8F-4B1E-BFF6-58C7BCD86B26}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{7EECBABA-F89F-4E56-A9A4-F63BDBCEC5A8}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C12DE224-510D-4862-92F4-EFAA4D0531DB}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [TCP Query User{22E71012-F3ED-4281-8B09-629F97520B92}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [UDP Query User{6CDD5378-96E9-4FCB-B3A8-8D427BCFF81C}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [{3A515EDF-8EDF-4924-A311-A05F7D980722}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7468C166-0E10-47E9-A95A-EE1E707F70A8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
DomainProfile\AuthorizedApplications: [C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe] => Enabled:Logitech Harmony Remote Software 7
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe] => Enabled:Logitech Harmony Remote Software 7
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: Officejet 4500 G510n-z
Description: Officejet 4500 G510n-z
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Controller der Familie Realtek PCIe GBE
Description: Controller der Familie Realtek PCIe GBE
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: RTL8168
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Officejet 4500 G510n-z
Description: Officejet 4500 G510n-z
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (12/05/2015 07:51:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ZeroConfigService.exe, Version: 16.10.0.0, Zeitstempel: 0x52cda7eb
Name des fehlerhaften Moduls: MurocApi.dll, Version: 16.10.0.0, Zeitstempel: 0x52cda6c5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000002bcd8
ID des fehlerhaften Prozesses: 0x1178
Startzeit der fehlerhaften Anwendung: 0xZeroConfigService.exe0
Pfad der fehlerhaften Anwendung: ZeroConfigService.exe1
Pfad des fehlerhaften Moduls: ZeroConfigService.exe2
Berichtskennung: ZeroConfigService.exe3
Vollständiger Name des fehlerhaften Pakets: ZeroConfigService.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ZeroConfigService.exe5
Error: (12/05/2015 06:42:43 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (12/04/2015 07:53:29 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
Error: (12/04/2015 03:30:55 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3516
Error: (12/04/2015 03:30:55 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3516
Error: (12/04/2015 03:30:55 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (12/04/2015 03:30:54 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2360
Error: (12/04/2015 03:30:54 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2360
Error: (12/04/2015 03:30:54 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (12/04/2015 03:30:53 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1204
Systemfehler:
=============
Error: (12/06/2015 10:25:11 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avast Antivirus" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (12/05/2015 10:52:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Streamer Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (12/05/2015 10:52:51 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (12/05/2015 08:33:22 PM) (Source: DCOM) (EventID: 10010) (User: PC-KLAUS)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (12/05/2015 07:52:22 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) PROSet/Wireless Zero Configuration Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (12/05/2015 07:51:06 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {DDCFD26B-FEED-44CD-B71D-79487D2E5E5A}
Error: (12/05/2015 07:48:31 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 05.12.2015 um 19:33:22 unerwartet heruntergefahren.
Error: (12/04/2015 07:54:37 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Streamer Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (12/04/2015 07:54:31 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (12/04/2015 05:48:07 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Acronis Sync Agent Service" wurde nicht richtig gestartet.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-3230M CPU @ 2.60GHz
Prozentuale Nutzung des RAM: 30%
Installierter physikalischer RAM: 8074.79 MB
Verfügbarer physikalischer RAM: 5620.38 MB
Summe virtueller Speicher: 9354.79 MB
Verfügbarer virtueller Speicher: 6450.24 MB
==================== Laufwerke ================================
Drive c: (Windows) (Fixed) (Total:133.34 GB) (Free:61.54 GB) NTFS
Drive d: (Volume) (Fixed) (Total:781.05 GB) (Free:587.95 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 5895590F)
Partition: GPT.
==================== Ende von Addition.txt ============================
|
| Themen zu Unregelmaessige Weiterleitungen im FF Browser |
| antivirus, bonjour, browser, desktop, device driver, dnsapi.dll, entfernen, esgscanner.sys, firefox, flash player, google, homepage, iexplore.exe, lightning, mozilla, mp3, officejet, problem, realtek, rundll, scan, security, server, software, sparbuch, system, total commander, trojaner, usb, windows, wiso |
Baum-Darstellung