PUP.Optional.Yontoo - nicht zu beseitigen?

irina97 · 07.12.2015, 21:29

Hallo!!

Unzwar habe ich mir einen Virus oder eine Adware eingefangen. Ich habe schon jegliche Programme ausprobiert um es zu löschen, aber es wurde nur in Quarantäne verschoben, macht aber immernoch Probleme. Mein PC ist langsam und bei Google tauchen oberhalb der Suchergebnisse Werbelinks auf von Results Hub.
Und wenn ich einen neuen Tab öffne und in die Suchzeile etwas eingebe kommt die Yahoo Suchmaschine und auch beim Browser Start ist Yahoo die Suchmaschine, obwohl ich das in den Einstellungen geändert habe.

Adwcleaner
ChromeCleanup Tool
Malewarebytes
(IObit Uninstaller)
OTH
JRT
SC-Cleaner
Eusing Free Registry Cleaner
CCleaner

All diese Programme hab ich schon ausprobiert, aber nichts hilft.

Das Problem ist wohl PUP.Optional.Yontoo.. ??

Ich benutze Windows 10 Home 64-bit!

Und ich hoffe um Hilfe!!!!!

schrauber · 07.12.2015, 21:49

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

irina97 · 08.12.2015, 09:06

Zitat:

Zitat von schrauber

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Danke fürs Antworten!
FRST Logfile:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-12-2015
durchgeführt von Irina (ACHTUNG: der Benutzer ist kein Administrator) auf SAVA (07-12-2015 22:03:49)
Gestartet von C:\Users\Irina\Downloads
Geladene Profile: Laptop & Irina (Verfügbare Profile: Laptop & Irina)
Platform: Windows 10 Home (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

konnte nicht auf den Prozess zugreifen -> smss.exe
konnte nicht auf den Prozess zugreifen -> csrss.exe
konnte nicht auf den Prozess zugreifen -> wininit.exe
konnte nicht auf den Prozess zugreifen -> services.exe
konnte nicht auf den Prozess zugreifen -> lsass.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> dasHost.exe
konnte nicht auf den Prozess zugreifen -> igfxCUIService.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> AvastSvc.exe
konnte nicht auf den Prozess zugreifen -> spoolsv.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> mDNSResponder.exe
konnte nicht auf den Prozess zugreifen -> AppleMobileDeviceService.exe
konnte nicht auf den Prozess zugreifen -> HeciServer.exe
konnte nicht auf den Prozess zugreifen -> Jhi_service.exe
konnte nicht auf den Prozess zugreifen -> mbamscheduler.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> mbamservice.exe
konnte nicht auf den Prozess zugreifen -> PMBDeviceInfoProvider.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> VESMgr.exe
konnte nicht auf den Prozess zugreifen -> Ath_CoexAgent.exe
konnte nicht auf den Prozess zugreifen -> PresentationFontCache.exe
konnte nicht auf den Prozess zugreifen -> taskeng.exe
konnte nicht auf den Prozess zugreifen -> GoogleUpdate.exe
konnte nicht auf den Prozess zugreifen -> iPodService.exe
konnte nicht auf den Prozess zugreifen -> WmiPrvSE.exe
konnte nicht auf den Prozess zugreifen -> PCCService.exe
konnte nicht auf den Prozess zugreifen -> RIconMan.exe
konnte nicht auf den Prozess zugreifen -> IntelMeFWService.exe
konnte nicht auf den Prozess zugreifen -> LMS.exe
konnte nicht auf den Prozess zugreifen -> VCPerfService.exe
konnte nicht auf den Prozess zugreifen -> VUAgent.exe
konnte nicht auf den Prozess zugreifen -> UNS.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> VCService.exe
konnte nicht auf den Prozess zugreifen -> VCAgent.exe
konnte nicht auf den Prozess zugreifen -> vds.exe
konnte nicht auf den Prozess zugreifen -> SearchIndexer.exe
konnte nicht auf den Prozess zugreifen -> csrss.exe
konnte nicht auf den Prozess zugreifen -> winlogon.exe
konnte nicht auf den Prozess zugreifen -> dwm.exe
konnte nicht auf den Prozess zugreifen -> VESMgrSub.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.exe
konnte nicht auf den Prozess zugreifen -> dllhost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
() C:\Program Files\Sony\VAIO Care\listener.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.3.0.0\Lightshot.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
konnte nicht auf den Prozess zugreifen -> fontdrvhost.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
konnte nicht auf den Prozess zugreifen -> WmiPrvSE.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
konnte nicht auf den Prozess zugreifen -> SearchProtocolHost.exe
konnte nicht auf den Prozess zugreifen -> SearchFilterHost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1403136 2015-08-11] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3928264 2015-05-27] (Synaptics Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-10-16] (Apple Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [68776 2012-08-18] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [724576 2012-07-27] (Sony Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => c:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2010-11-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [932288 2010-11-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [152896 2012-06-25] (Intel Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-06-30] (Avast Software s.r.o.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-11-18] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] => C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe [54072 2015-10-05] (Malwarebytes)
HKU\S-1-5-21-3702976893-725985698-900371594-1004\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony)
HKU\S-1-5-21-3702976893-725985698-900371594-1004\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd)
HKU\S-1-5-21-3702976893-725985698-900371594-1004\...\Run: [GoogleChromeAutoLaunch_7DBF8F1D6DD5F67753D3A112420791D3] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [799560 2015-11-24] (Google Inc.)
HKU\S-1-5-18\...\Run: [ooVoo.exe] => C:\Program Files (x86)\ooVoo\oovoo.exe [36592672 2015-11-05] (ooVoo LLC)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Irina\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64\FileSyncShell64.dll [2015-11-08] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Irina\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64\FileSyncShell64.dll [2015-11-08] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Irina\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64\FileSyncShell64.dll [2015-11-08] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-06-25] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  Keine Datei
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  Keine Datei
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  Keine Datei
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Irina\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncShell.dll [2015-11-08] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Irina\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncShell.dll [2015-11-08] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Irina\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncShell.dll [2015-11-08] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  Keine Datei
Startup: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2014-10-12]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2014-12-16]
ShortcutTarget: Dropbox.lnk -> C:\Users\Irina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Keine Datei)
Startup: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PdaNet Desktop.lnk [2015-05-22]
ShortcutTarget: PdaNet Desktop.lnk -> C:\Program Files (x86)\PdaNet for Android\PdaNetPC.exe ()
Startup: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk [2015-11-25]
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk -> C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{3b3db353-91fa-4aca-9fdf-a3a7337e29ea}: [DhcpNameServer] 62.24.0.88
Tcpip\..\Interfaces\{b8708675-665a-4c35-b978-d30f8072384e}: [DhcpNameServer] 192.168.2.1 192.168.2.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-3702976893-725985698-900371594-1004\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3702976893-725985698-900371594-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKU\S-1-5-21-3702976893-725985698-900371594-1004\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://vaioportal.sony.eu
HKU\S-1-5-21-3702976893-725985698-900371594-1004\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006
URLSearchHook: [S-1-5-21-3702976893-725985698-900371594-1001] ACHTUNG => Standard URLSearchHook fehlt
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3702976893-725985698-900371594-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3702976893-725985698-900371594-1001 -> OldSearch URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3702976893-725985698-900371594-1004 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3702976893-725985698-900371594-1004 -> {5FE367D3-0932-4B0C-BF13-1F0B58C117C3} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q312&_nkw={searchTerms}
SearchScopes: HKU\S-1-5-21-3702976893-725985698-900371594-1004 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-08-13] (Qualcomm Atheros Commnucations)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-06-25] (Avast Software s.r.o.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-11-15] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-07-02] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-06-25] (Avast Software s.r.o.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-02] (Oracle Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Irina\AppData\Roaming\Mozilla\Firefox\Profiles\6runl822.default
FF NewTab: about:newtab
FF DefaultSearchEngine: Google (avast)
FF DefaultSearchUrl: hxxps://www.google.com/search?trackid=sp-006
FF SearchEngineOrder.1: Google (avast)
FF SelectedSearchEngine: Google (avast)
FF Homepage: hxxps://www.google.com/?trackid=sp-006
FF Keyword.URL: hxxps://www.google.com/search?trackid=sp-006
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll [2015-11-11] ()
FF Plugin: @java.com/DTPlugin,version=10.5.0 -> C:\WINDOWS\system32\npDeployJava1.dll [2012-11-22] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-11] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-08] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-02-13] (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-08-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-08-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.5.0 -> C:\WINDOWS\SysWOW64\npDeployJava1.dll [2012-11-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-02] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-05-12] ()
FF SearchPlugin: C:\Users\Irina\AppData\Roaming\Mozilla\Firefox\Profiles\6runl822.default\searchplugins\google-avast.xml [2015-12-04]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-06-25] [ist nicht signiert]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => nicht gefunden

Chrome: 
=======
CHR Profile: C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-06]
CHR Extension: (Google Docs) - C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-06]
CHR Extension: (Google Drive) - C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-06]
CHR Extension: (YouTube) - C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-06]
CHR Extension: (Adblock Plus) - C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-12-06]
CHR Extension: (Google Search) - C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-06]
CHR Extension: (Google Sheets) - C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-06]
CHR Extension: (Google Docs Offline) - C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-06]
CHR Extension: (Avast Online Security) - C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-12-06]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-06]
CHR Extension: (Gmail) - C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-06]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-18]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2014-10-12] (Adobe Systems) [Datei ist nicht signiert]
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-06-25] (Avast Software s.r.o.)
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\MAGIX\Common\Database\bin\fbserver.exe [1527900 2005-11-17] (MAGIX®) [Datei ist nicht signiert]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-10-26] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-08-06] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-08-06] (Intel Corporation)
R3 lmhosts; C:\Windows\System32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
R3 lmhosts; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [623784 2012-08-18] (Sony Corporation)
R2 NlaSvc; C:\Windows\System32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
R2 NlaSvc; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
R2 nsi; C:\WINDOWS\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2057736 2015-09-13] (Electronic Arts)
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [474208 2012-07-27] (Sony Corporation)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] () [Datei ist nicht signiert]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2012-08-08] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1653272 2015-07-31] (Sony Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-13] (Atheros) [Datei ist nicht signiert]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-06-25] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-06-25] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-06-25] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-06-25] ()
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-06-25] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-30] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-06-25] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-06-25] ()
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2015-12-07] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek                                            )
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-05-27] (Synaptics Incorporated)
R3 SOWS; C:\Windows\System32\drivers\sows.sys [24280 2012-06-11] (Sony Corporation)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
R3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 WUDFWpdComp; C:\Windows\system32\DRIVERS\WUDFRd.sys [214016 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-07 22:03 - 2015-12-07 22:04 - 00027202 _____ C:\Users\Irina\Downloads\FRST.txt
2015-12-07 22:03 - 2015-12-07 22:03 - 02369024 _____ (Farbar) C:\Users\Irina\Downloads\FRST64.exe
2015-12-07 22:03 - 2015-12-07 22:03 - 00000000 ____D C:\FRST
2015-12-07 21:54 - 2015-12-07 21:54 - 00016148 _____ C:\WINDOWS\system32\SAVA_Irina_HistoryPrediction.bin
2015-12-07 21:23 - 2015-12-07 21:23 - 00001122 _____ C:\Users\Laptop\Desktop\Eusing Free Registry Cleaner.lnk
2015-12-07 21:23 - 2015-12-07 21:23 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner
2015-12-07 21:23 - 2015-12-07 21:23 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Eusing
2015-12-07 21:23 - 2015-12-07 21:23 - 00000000 ____D C:\Program Files (x86)\Eusing Free Registry Cleaner
2015-12-07 21:13 - 2015-12-07 21:15 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Systweak
2015-12-07 21:12 - 2015-12-07 21:12 - 00000000 ____D C:\Users\Laptop\AppData\Local\Systweak
2015-12-07 21:11 - 2015-12-07 21:12 - 05822720 _____ (Advanced System Protector ) C:\Users\Irina\Downloads\aspsetup.exe
2015-12-07 21:09 - 2015-12-07 21:09 - 01466656 _____ C:\Users\Irina\Downloads\Eusing Free Registry Cleaner - CHIP-Installer.exe
2015-12-07 09:04 - 2015-12-07 09:04 - 00001726 _____ C:\Users\Laptop\Desktop\MMB.txt
2015-12-07 07:53 - 2015-12-07 07:53 - 00259584 _____ (OldTimer Tools) C:\Users\Irina\Downloads\OTH.scr
2015-12-06 22:30 - 2015-12-06 22:30 - 00000000 ____D C:\Program Files (x86)\ESET
2015-12-06 22:29 - 2015-12-06 22:29 - 02870984 _____ (ESET) C:\Users\Irina\Downloads\esetsmartinstaller_deu.exe
2015-12-06 22:27 - 2015-12-06 22:28 - 00001838 _____ C:\Users\Laptop\Desktop\sc-cleaner.txt
2015-12-06 22:27 - 2015-12-06 22:27 - 01599336 _____ (Malwarebytes) C:\Users\Irina\Downloads\JRT (1).exe
2015-12-06 22:27 - 2015-12-06 22:27 - 00463688 _____ (Bleeping Computer, LLC) C:\Users\Irina\Downloads\sc-cleaner.exe
2015-12-06 22:25 - 2015-12-06 22:25 - 00000697 _____ C:\Users\Laptop\Desktop\JRT.txt
2015-12-06 22:20 - 2015-12-06 22:21 - 01599336 _____ (Malwarebytes) C:\Users\Irina\Downloads\JRT.exe
2015-12-06 22:19 - 2015-12-06 22:19 - 00006166 _____ C:\Users\Irina\Desktop\mbam.txt
2015-12-06 21:29 - 2015-12-07 08:31 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-12-06 21:29 - 2015-12-06 21:29 - 00001171 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-12-06 21:29 - 2015-12-06 21:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-12-06 21:29 - 2015-12-06 21:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-12-06 21:29 - 2015-12-06 21:29 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-12-06 21:29 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-12-06 21:29 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-12-06 21:29 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2015-12-06 21:24 - 2015-12-06 21:25 - 22908888 _____ (Malwarebytes ) C:\Users\Irina\Downloads\mbam-setup-2.2.0.1024.exe
2015-12-06 21:15 - 2015-12-06 21:17 - 00000000 ____D C:\AdwCleaner
2015-12-06 21:13 - 2015-12-06 21:13 - 01736704 _____ C:\Users\Irina\Downloads\adwcleaner_5.023.exe
2015-12-04 19:03 - 2015-12-04 19:03 - 00058346 _____ C:\Users\Irina\Downloads\Unbenannt 1.pdf
2015-12-04 19:03 - 2015-12-04 19:03 - 00058346 _____ C:\Users\Irina\Downloads\Unbenannt 1 (1).pdf
2015-12-02 23:19 - 2015-12-06 21:17 - 00000008 __RSH C:\ProgramData\ntuser.pol
2015-12-02 23:12 - 2015-12-02 23:12 - 00042564 _____ C:\Users\Irina\Desktop\AiXemjL9sVNjZJfipg39q9n9x2qYpSDyR-NxNguKVnmR.aac
2015-12-01 23:34 - 2015-12-01 23:34 - 00000000 ____D C:\Users\Irina\Documents\Lightshot
2015-12-01 22:54 - 2015-12-01 22:54 - 00000086 ____H C:\Users\Irina\Downloads\.~lock.KursMedPsy5-31.10.Stress.ppt#
2015-12-01 22:52 - 2015-12-01 22:52 - 00920064 _____ C:\Users\Irina\Downloads\KursMedPsy5-31.10.Stress.ppt
2015-12-01 20:33 - 2015-12-01 20:33 - 00001112 _____ C:\Users\Public\Desktop\SmartDeblur.lnk
2015-12-01 20:33 - 2015-12-01 20:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmartDeblur
2015-12-01 20:33 - 2015-12-01 20:33 - 00000000 ____D C:\Program Files (x86)\SmartDeblur
2015-12-01 20:19 - 2015-12-01 20:25 - 00000000 ____D C:\Users\Irina\Desktop\bsu
2015-11-30 11:25 - 2015-11-30 11:25 - 00448317 _____ C:\Users\Laptop\Downloads\bio-dvd013.zip
2015-11-30 00:19 - 2015-11-30 00:19 - 00016148 _____ C:\WINDOWS\system32\SAVA_Laptop_HistoryPrediction.bin
2015-11-29 15:05 - 2015-11-29 15:05 - 00058346 _____ C:\Users\Laptop\Desktop\Unbenannt 1.pdf
2015-11-28 23:08 - 2015-11-28 23:08 - 00000000 ____D C:\Users\Laptop\Documents\MAGIX Downloads
2015-11-28 23:08 - 2015-11-28 23:08 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\MAGIX
2015-11-27 06:54 - 2015-11-27 06:55 - 00000000 ___HD C:\$WINDOWS.~BT
2015-11-25 19:48 - 2015-11-25 19:49 - 00104012 _____ C:\Users\Laptop\Downloads\Ihr_Voucher_131983.pdf
2015-11-25 19:16 - 2015-11-25 19:16 - 00000000 ____D C:\Users\Laptop\AppData\LocalLow\Temp
2015-11-25 19:15 - 2015-11-25 19:15 - 00002099 _____ C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2015-11-25 12:47 - 2015-11-25 12:47 - 00104012 _____ C:\Users\Irina\Downloads\Ihr_Voucher_131983 (2).pdf
2015-11-25 12:47 - 2015-11-25 12:47 - 00104012 _____ C:\Users\Irina\Downloads\Ihr_Voucher_131983 (1).pdf
2015-11-25 11:33 - 2015-11-25 11:33 - 00104012 _____ C:\Users\Irina\Downloads\Ihr_Voucher_131983.pdf
2015-11-24 14:07 - 2015-11-24 14:07 - 00016359 _____ C:\Users\Irina\Downloads\Facharbeit.odt
2015-11-24 14:07 - 2015-11-24 14:07 - 00012521 _____ C:\Users\Irina\Downloads\Titelblatt Facharbeit.odt
2015-11-23 20:25 - 2015-11-23 20:25 - 00000086 ____H C:\Users\Irina\Downloads\.~lock.Facharbeit_Magersucht.doc#
2015-11-21 16:12 - 2015-11-21 16:12 - 18707793 _____ C:\Users\Irina\Desktop\DSC_0173.psd
2015-11-18 18:38 - 2015-11-18 18:38 - 00869600 _____ (Opera Software) C:\Users\Laptop\Documents\Opera_NI_stable.exe
2015-11-18 18:38 - 2015-11-18 18:38 - 00001926 _____ C:\Users\Public\Desktop\ooVoo.lnk
2015-11-18 18:38 - 2015-11-18 18:38 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\ooVoo Details
2015-11-18 18:38 - 2015-11-18 18:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ooVoo
2015-11-18 18:38 - 2015-11-18 18:38 - 00000000 ____D C:\Program Files (x86)\ooVoo
2015-11-18 18:36 - 2015-11-18 18:36 - 02388000 _____ (ooVoo LLC) C:\Users\Irina\Downloads\ooVooSetup.exe
2015-11-17 20:19 - 2015-11-17 20:19 - 09920137 _____ C:\Users\Irina\Downloads\Свадебные голуби Поздравления с Днем Свадьбы.mp4
2015-11-17 12:36 - 2015-11-18 18:30 - 00000000 ____D C:\Users\Irina\Desktop\Facharbeit Anorexia
2015-11-17 08:49 - 2015-11-17 08:49 - 00000000 ___HD C:\Users\Irina\Desktop\.picasaoriginals
2015-11-17 08:30 - 2015-11-25 11:45 - 00000000 ____D C:\Users\Irina\AppData\Local\Mozilla
2015-11-17 08:30 - 2015-11-17 08:31 - 00000000 ____D C:\Users\Irina\AppData\Roaming\Mozilla
2015-11-16 19:55 - 2015-11-16 19:55 - 00146183 _____ C:\Users\Irina\Downloads\YouTube-Unblocker-056.crx
2015-11-16 18:23 - 2015-11-16 18:23 - 00906450 _____ C:\Users\Irina\Downloads\Mais-Tofu Patties (1).odt
2015-11-16 18:23 - 2015-11-12 18:52 - 01390076 _____ C:\Users\Irina\Documents\Referat%20Pflege.pptx_1.odp
2015-11-16 14:44 - 2015-11-16 14:44 - 02163806 _____ C:\Users\Irina\Downloads\Icons-of-sketchy-food.zip
2015-11-16 14:29 - 2015-11-16 14:29 - 04440488 _____ C:\Users\Irina\Downloads\Abstract-geometric-pattern.zip
2015-11-16 14:29 - 2015-11-16 14:29 - 04440488 _____ C:\Users\Irina\Downloads\Abstract-geometric-pattern (1).zip
2015-11-16 12:05 - 2015-12-04 19:03 - 00000000 ____D C:\Users\Irina\AppData\LocalLow\Adobe
2015-11-16 11:59 - 2015-11-16 11:59 - 00001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk
2015-11-16 11:59 - 2015-11-16 11:59 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-11-16 11:58 - 2015-11-16 11:58 - 00001280 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6.lnk
2015-11-16 11:57 - 2015-11-16 11:59 - 00000000 ____D C:\Program Files\Adobe
2015-11-16 11:57 - 2015-11-16 11:57 - 00001082 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
2015-11-16 11:56 - 2015-11-16 11:56 - 00001242 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk
2015-11-16 11:53 - 2015-11-16 11:53 - 00001596 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2015-11-16 11:50 - 2015-11-16 11:59 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-11-16 11:41 - 2015-11-17 12:16 - 00000000 ____D C:\Users\Irina\Desktop\Adobe CS6
2015-11-16 11:33 - 2015-11-16 11:40 - 1207595878 _____ C:\Users\Irina\Downloads\Photoshop_13_LS16.7z
2015-11-16 11:33 - 2015-11-16 11:33 - 01228608 _____ (Adobe Systems Incorporated) C:\Users\Irina\Downloads\Photoshop_13_LS16.exe
2015-11-16 11:31 - 2015-11-16 11:31 - 01288198 _____ C:\Users\Irina\Downloads\Adobe Photoshop CS6 Extended Crack .DLL Files.rar
2015-11-15 20:36 - 2015-11-15 20:36 - 00000000 ____D C:\Users\Irina\AppData\Roaming\Opera
2015-11-15 19:15 - 2015-11-15 19:15 - 00232872 _____ (Spotify Ltd) C:\Users\Irina\Downloads\SpotifySetup.exe
2015-11-13 22:03 - 2015-11-18 18:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-11-12 22:06 - 2015-11-12 22:06 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Apple Computer
2015-11-12 21:03 - 2015-11-12 21:03 - 00000000 ____D C:\Users\Irina\AppData\Roaming\Macromedia
2015-11-12 19:10 - 2015-11-15 19:03 - 00906450 _____ C:\Users\Irina\Downloads\Mais-Tofu Patties.odt
2015-11-12 17:52 - 2015-11-12 17:52 - 00017129 _____ C:\Users\Irina\Downloads\Unbenannt 2.odt
2015-11-12 17:52 - 2015-11-12 17:52 - 00000086 ____H C:\Users\Irina\Downloads\.~lock.Unbenannt 2.odt#
2015-11-12 17:46 - 2015-11-12 17:46 - 00000086 ____H C:\Users\Irina\Downloads\.~lock.Referat Pflege.pptx#
2015-11-12 17:46 - 2015-11-10 14:23 - 00010995 _____ C:\Users\Irina\Documents\untitled_0.odt
2015-11-12 17:45 - 2015-11-12 17:45 - 01447418 _____ C:\Users\Irina\Downloads\Referat Pflege.pptx
2015-11-12 17:40 - 2015-11-12 17:40 - 00000000 ____D C:\Users\Irina\Tracing
2015-11-12 17:38 - 2015-12-06 03:41 - 00000000 ____D C:\Users\Irina\AppData\Roaming\Skype
2015-11-12 17:38 - 2015-11-12 17:38 - 00000000 ____D C:\Users\Irina\AppData\Local\Skype
2015-11-11 19:14 - 2015-11-11 19:14 - 00017129 _____ C:\Users\Irina\Desktop\Unbenannt 2.odt
2015-11-11 14:13 - 2015-11-05 06:15 - 08020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-11-11 14:13 - 2015-11-05 06:15 - 00541024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2015-11-11 14:13 - 2015-11-05 06:14 - 00459104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2015-11-11 14:13 - 2015-11-05 06:13 - 00577888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-11-11 14:13 - 2015-11-05 06:11 - 01392480 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-11-11 14:13 - 2015-11-05 06:06 - 03621248 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-11-11 14:13 - 2015-11-05 06:06 - 00966416 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2015-11-11 14:13 - 2015-11-05 06:01 - 00607408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-11-11 14:13 - 2015-11-05 05:56 - 01083072 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-11-11 14:13 - 2015-11-05 05:56 - 00116064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-11-11 14:13 - 2015-11-05 05:56 - 00025280 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2015-11-11 14:13 - 2015-11-05 05:30 - 00961376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-11-11 14:13 - 2015-11-05 05:24 - 02878512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-11-11 14:13 - 2015-11-05 05:23 - 00762888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2015-11-11 14:13 - 2015-11-05 05:23 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2015-11-11 14:13 - 2015-11-05 05:20 - 21873664 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-11-11 14:13 - 2015-11-05 05:18 - 24597504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-11-11 14:13 - 2015-11-05 05:18 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-11-11 14:13 - 2015-11-05 05:18 - 00539728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-11-11 14:13 - 2015-11-05 05:17 - 02418688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-11-11 14:13 - 2015-11-05 05:12 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\internetmail.dll
2015-11-11 14:13 - 2015-11-05 05:11 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-11-11 14:13 - 2015-11-05 05:10 - 12504064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-11-11 14:13 - 2015-11-05 05:10 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2015-11-11 14:13 - 2015-11-05 05:07 - 01068032 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-11-11 14:13 - 2015-11-05 05:06 - 00453120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2015-11-11 14:13 - 2015-11-05 05:05 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-11-11 14:13 - 2015-11-05 05:05 - 00826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-11-11 14:13 - 2015-11-05 05:03 - 02180608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-11-11 14:13 - 2015-11-05 05:03 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2015-11-11 14:13 - 2015-11-05 05:01 - 00949760 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-11-11 14:13 - 2015-11-05 05:01 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-11-11 14:13 - 2015-11-05 05:01 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2015-11-11 14:13 - 2015-11-05 04:59 - 03587072 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-11-11 14:13 - 2015-11-05 04:59 - 02675200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2015-11-11 14:13 - 2015-11-05 04:58 - 01383936 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-11-11 14:13 - 2015-11-05 04:58 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-11-11 14:13 - 2015-11-05 04:56 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-11-11 14:13 - 2015-11-05 04:55 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2015-11-11 14:13 - 2015-11-05 04:54 - 00502272 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll
2015-11-11 14:13 - 2015-11-05 04:47 - 19326464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-11-11 14:13 - 2015-11-05 04:42 - 02647040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-11-11 14:13 - 2015-11-05 04:40 - 01918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-11-11 14:13 - 2015-11-05 04:35 - 18803712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-11-11 14:13 - 2015-11-05 04:35 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2015-11-11 14:13 - 2015-11-05 04:34 - 00311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2015-11-11 14:13 - 2015-11-05 04:33 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-11-11 14:13 - 2015-11-05 04:33 - 00650240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-11-11 14:13 - 2015-11-05 04:30 - 00767488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-11-11 14:13 - 2015-11-05 04:28 - 11262976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-11-11 14:13 - 2015-11-05 04:27 - 02049536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2015-11-11 14:13 - 2015-11-05 04:27 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-11-11 14:13 - 2015-11-05 04:23 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll
2015-11-10 20:36 - 2015-11-10 20:36 - 01233638 _____ C:\Users\Irina\Downloads\cat_meow.zip
2015-11-10 20:36 - 2015-11-10 20:36 - 00118736 _____ C:\Users\Irina\Downloads\charcoal_script.zip
2015-11-10 20:36 - 2015-11-10 20:36 - 00067677 _____ C:\Users\Irina\Downloads\tafelschrift.zip
2015-11-10 20:35 - 2015-11-10 20:35 - 00504209 _____ C:\Users\Irina\Downloads\sinister_black.zip
2015-11-10 20:35 - 2015-11-10 20:35 - 00374275 _____ C:\Users\Irina\Downloads\coal_hand_luke.zip
2015-11-10 20:33 - 2015-11-30 20:33 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\FileAdvisor
2015-11-10 20:15 - 2015-11-10 20:15 - 01598780 _____ C:\Users\Irina\Downloads\sketchydoodles.zip
2015-11-10 20:15 - 2015-11-10 20:15 - 00000000 ____D C:\Users\Irina\AppData\Roaming\WinRAR
2015-11-10 20:14 - 2015-11-10 20:19 - 16180615 _____ C:\Users\Irina\Downloads\brickinthewall_BuburuResources.zip
2015-11-10 20:10 - 2015-11-10 20:10 - 05935165 _____ C:\Users\Irina\Downloads\539-grunge_brushes_digitalrevolutions.zip
2015-11-10 20:10 - 2015-11-10 20:10 - 04037788 _____ C:\Users\Irina\Downloads\350-solid-ink-splatter-1250-pixels.zip
2015-11-10 20:10 - 2015-11-10 20:10 - 00168724 _____ C:\Users\Irina\Downloads\210-xpinksoda_abstractbrushs2.zip
2015-11-10 19:59 - 2015-11-10 19:59 - 00000000 ____D C:\Users\Irina\Documents\AdobeStockPhotos
2015-11-10 18:18 - 2015-11-10 18:18 - 00052711 _____ C:\Users\Laptop\Downloads\stellenausschreibung pflege e-klinik.pdf
2015-11-10 12:34 - 2015-11-10 12:34 - 00000000 ____D C:\Users\Irina\AppData\Roaming\OpenOffice
2015-11-10 09:18 - 2015-11-17 12:16 - 00000000 ____D C:\Users\Irina\Desktop\Pausenbrot mal anders
2015-11-10 09:03 - 2015-12-07 02:00 - 00000000 ____D C:\Users\Irina\AppData\Local\Adobe
2015-11-10 09:00 - 2015-11-10 09:01 - 00000000 ____D C:\Users\Irina\AppData\Local\MicrosoftEdge
2015-11-09 20:23 - 2015-11-09 20:29 - 00000000 ____D C:\Users\Irina\AppData\Roaming\Apple Computer
2015-11-09 20:23 - 2015-11-09 20:23 - 00001822 _____ C:\Users\Public\Desktop\iTunes.lnk
2015-11-09 20:23 - 2015-11-09 20:23 - 00000000 ____D C:\Users\Irina\AppData\Local\Apple Computer
2015-11-09 20:23 - 2015-11-09 20:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-11-09 20:22 - 2015-11-09 20:23 - 00000000 ____D C:\Program Files\iTunes
2015-11-09 20:22 - 2015-11-09 20:22 - 00000000 ____D C:\ProgramData\Apple Computer
2015-11-09 20:22 - 2015-11-09 20:22 - 00000000 ____D C:\Program Files\iPod
2015-11-09 20:22 - 2015-11-09 20:22 - 00000000 ____D C:\Program Files (x86)\iTunes
2015-11-09 20:20 - 2015-11-09 20:20 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-11-09 20:20 - 2015-11-09 20:20 - 00000000 ____D C:\Users\Laptop\AppData\Local\Apple
2015-11-09 20:20 - 2015-11-09 20:20 - 00000000 ____D C:\Program Files\Bonjour
2015-11-09 20:20 - 2015-11-09 20:20 - 00000000 ____D C:\Program Files (x86)\Bonjour
2015-11-09 20:20 - 2015-11-09 20:20 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2015-11-09 20:19 - 2015-11-09 20:22 - 00000000 ____D C:\Program Files\Common Files\Apple
2015-11-09 20:19 - 2015-11-09 20:20 - 00000000 ____D C:\ProgramData\Apple
2015-11-09 20:18 - 2015-11-09 20:18 - 167839512 _____ (Apple Inc.) C:\Users\Irina\Downloads\iTunes6464Setup.exe
2015-11-09 19:55 - 2015-11-09 22:08 - 00000000 ____D C:\Users\Irina\Desktop\Jeskla
2015-11-09 19:52 - 2015-11-28 23:08 - 00000000 ____D C:\Users\Laptop\Documents\MAGIX_MusicMaker15_for_MySpace
2015-11-09 19:52 - 2015-11-09 19:52 - 00001308 _____ C:\Users\Public\Desktop\MAGIX Music Maker for MySpace.lnk
2015-11-09 19:52 - 2015-11-09 19:52 - 00000000 ____D C:\Users\Irina\Documents\MAGIX_MusicMaker15_for_MySpace
2015-11-09 19:52 - 2015-11-09 19:52 - 00000000 ____D C:\Users\Irina\Documents\MAGIX Downloads
2015-11-09 19:52 - 2015-11-09 19:52 - 00000000 ____D C:\Users\Irina\AppData\Roaming\MAGIX
2015-11-09 19:52 - 2015-11-09 19:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2015-11-09 19:52 - 2015-11-09 19:52 - 00000000 ____D C:\ProgramData\MAGIX
2015-11-09 19:52 - 2007-04-18 22:07 - 00053248 _____ C:\WINDOWS\SysWOW64\mgxasio2.dll
2015-11-09 19:52 - 2006-10-02 17:24 - 00487424 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLAV32.dll
2015-11-09 19:52 - 2006-10-02 17:24 - 00188416 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLRES32.dll
2015-11-09 19:52 - 2006-10-02 17:24 - 00163840 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLDEV32.dll
2015-11-09 19:52 - 2006-10-02 17:24 - 00151552 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLDRV32.dll
2015-11-09 19:52 - 2006-10-02 17:24 - 00094208 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLCPY32.dll
2015-11-09 19:52 - 2006-10-02 17:24 - 00053248 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLIO32.dll
2015-11-09 19:52 - 2006-10-02 17:24 - 00036864 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLPNT32.dll
2015-11-09 19:52 - 2006-10-02 17:24 - 00032768 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\STRING32.dll
2015-11-09 19:52 - 2006-07-21 16:16 - 00430080 _____ (MAGIX AG) C:\WINDOWS\SysWOW64\MXRestore.exe
2015-11-09 19:52 - 2005-04-09 21:05 - 00027807 _____ C:\WINDOWS\SysWOW64\mgxcdr.txt
2015-11-09 19:52 - 2004-03-11 15:49 - 00014182 _____ C:\WINDOWS\SysWOW64\DLLAV32.lib
2015-11-09 19:52 - 2003-04-18 15:46 - 01233920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml4.dll
2015-11-09 19:52 - 2003-04-18 15:29 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml4r.dll
2015-11-09 19:52 - 2003-04-18 15:29 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml4a.dll
2015-11-09 19:52 - 2003-03-14 10:35 - 00040960 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLRD32.dll
2015-11-09 19:52 - 2003-03-14 10:33 - 00114688 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLCDA32.dll
2015-11-09 19:52 - 2003-03-14 10:33 - 00061440 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLCDF32.dll
2015-11-09 19:52 - 2003-03-14 10:33 - 00053248 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLPRJ32.dll
2015-11-09 19:52 - 2003-03-14 10:33 - 00045056 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLIMG32.dll
2015-11-09 19:52 - 2003-03-14 10:32 - 00065536 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLPTL32.dll
2015-11-09 19:52 - 2003-03-14 10:32 - 00057344 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLTPO32.dll
2015-11-09 19:52 - 2003-03-14 10:32 - 00049152 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLPRF32.dll
2015-11-09 19:52 - 2003-03-14 10:32 - 00032768 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLMSC32.dll
2015-11-09 19:52 - 2003-03-14 10:32 - 00032768 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLISO32.dll
2015-11-09 19:52 - 2003-03-14 10:32 - 00032768 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLDIR32.dll
2015-11-09 19:52 - 2003-03-14 10:32 - 00024576 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\TTIC32.dll
2015-11-09 19:52 - 2003-03-14 10:32 - 00024576 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\TTI32.dll
2015-11-09 19:52 - 2003-03-14 10:32 - 00024576 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLIX.dll
2015-11-09 19:51 - 2015-11-09 19:52 - 00007119 _____ C:\WINDOWS\mgxoschk.ini
2015-11-09 19:51 - 2015-11-09 19:52 - 00000000 ____D C:\WINDOWS\SysWOW64\MAGIX
2015-11-09 19:51 - 2015-11-09 19:52 - 00000000 ____D C:\Program Files (x86)\MAGIX
2015-11-09 19:51 - 2008-04-15 15:14 - 00700416 _____ (MAGIX AG) C:\WINDOWS\SysWOW64\mgxoschk.dll
2015-11-09 19:51 - 2007-04-27 09:43 - 00120200 _____ () C:\WINDOWS\SysWOW64\DLLDEV32i.dll
2015-11-09 19:30 - 2015-11-09 19:49 - 111335968 _____ (MAGIX AG) C:\Users\Irina\Downloads\music_maker_4_myspace_106mb_d_en.exe
2015-11-09 14:43 - 2015-11-09 14:43 - 00000000 ____D C:\Users\Irina\AppData\Local\NetworkTiles
2015-11-08 11:25 - 2015-11-08 11:25 - 00100040 _____ C:\WINDOWS\system32\s000001.dat
2015-11-08 11:08 - 2015-11-08 11:08 - 00000000 ___RD C:\Users\Irina\OneDrive
2015-11-08 11:05 - 2015-11-08 11:05 - 00000000 ____D C:\Users\Irina\AppData\Local\Publishers
2015-11-08 11:04 - 2015-11-08 11:06 - 00000000 ____D C:\Users\Irina\AppData\Local\Comms
2015-11-08 11:02 - 2015-11-08 11:02 - 00000000 ____D C:\Users\Irina\AppData\Local\TileDataLayer
2015-11-08 10:58 - 2015-11-08 10:58 - 00000020 ___SH C:\Users\Irina\ntuser.ini

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-07 21:17 - 2015-07-01 19:22 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-12-07 21:05 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-12-07 20:50 - 2015-07-23 10:30 - 00000000 __SHD C:\Users\Irina\IntelGraphicsProfiles
2015-12-07 20:50 - 2015-07-16 11:08 - 00001124 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-06 22:08 - 2015-07-10 13:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-06 22:08 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\Resources
2015-12-06 21:37 - 2015-07-23 10:31 - 00000000 ____D C:\Users\Irina\AppData\Local\Google
2015-12-06 21:18 - 2015-08-06 13:15 - 00000000 ____D C:\Users\Irina
2015-12-06 21:17 - 2015-02-18 22:00 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-06 21:17 - 2015-02-18 22:00 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps
2015-12-06 21:14 - 2015-08-06 13:15 - 00000000 ____D C:\Users\Laptop
2015-12-06 20:14 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-04 19:03 - 2015-07-23 10:30 - 00000000 ____D C:\Users\Irina\AppData\Roaming\Adobe
2015-12-04 16:09 - 2015-07-10 12:04 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-04 09:20 - 2015-06-01 11:26 - 00001107 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-12-04 09:20 - 2015-06-01 11:26 - 00001107 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-04 05:30 - 2015-07-16 11:08 - 00001128 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-01 18:51 - 2015-07-10 10:05 - 00000000 ____D C:\Windows
2015-12-01 18:47 - 2015-07-10 12:02 - 00000000 ____D C:\WINDOWS\INF
2015-12-01 12:34 - 2015-08-06 13:37 - 01790124 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-01 12:34 - 2015-07-10 17:34 - 00772342 _____ C:\WINDOWS\system32\perfh007.dat
2015-12-01 12:34 - 2015-07-10 17:34 - 00154170 _____ C:\WINDOWS\system32\perfc007.dat
2015-11-30 00:14 - 2014-07-31 21:00 - 00000000 ____D C:\Users\Laptop\AppData\Local\Adobe
2015-11-29 21:21 - 2014-07-30 13:28 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Adobe
2015-11-27 06:58 - 2015-08-06 14:03 - 00000000 ___DC C:\WINDOWS\Panther
2015-11-25 19:15 - 2015-05-22 07:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-11-25 19:15 - 2015-03-15 16:01 - 00000000 __SHD C:\Users\Laptop\IntelGraphicsProfiles
2015-11-25 19:14 - 2012-11-22 09:00 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-11-23 12:40 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-11-18 18:48 - 2015-07-10 13:20 - 05023552 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-11-18 18:47 - 2015-06-01 11:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-11-17 04:59 - 2012-11-22 09:33 - 00000000 ____D C:\ProgramData\Adobe
2015-11-16 11:57 - 2012-11-22 09:33 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-11-15 20:36 - 2015-07-23 10:30 - 00000000 ____D C:\Users\Irina\AppData\Local\VirtualStore
2015-11-15 11:36 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\rescache
2015-11-12 17:38 - 2015-08-31 08:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-11-12 17:38 - 2014-07-30 21:47 - 00002642 _____ C:\Users\Public\Desktop\Skype.lnk
2015-11-12 17:38 - 2014-07-30 21:47 - 00000000 ____D C:\ProgramData\Skype
2015-11-12 03:47 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-11-11 16:16 - 2015-07-10 11:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-11-11 16:14 - 2014-07-31 08:17 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-11-11 15:50 - 2014-07-31 08:17 - 145617392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-11-10 15:19 - 2015-03-01 12:59 - 00000000 ___RD C:\Users\Laptop\OneDrive
2015-11-09 09:30 - 2015-07-23 10:30 - 00000000 ____D C:\Users\Irina\AppData\Local\Packages
2015-11-09 09:29 - 2014-07-30 21:48 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Skype
2015-11-08 15:08 - 2015-08-14 15:01 - 00000000 ____D C:\WINDOWS\Minidump
2015-11-08 11:08 - 2015-07-23 10:29 - 00002388 _____ C:\Users\Irina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-11-08 11:05 - 2015-08-14 16:08 - 00000102 _____ C:\WINDOWS\system32\sstates.sdt
2015-11-08 11:05 - 2015-08-14 16:08 - 00000040 _____ C:\WINDOWS\system32\sstate_prev.sdt
2015-11-08 11:03 - 2014-07-30 11:38 - 00000000 __RHD C:\Users\Public\AccountPictures
2015-11-08 00:01 - 2015-03-19 10:44 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Spotify
2015-11-08 00:01 - 2015-03-19 10:44 - 00000000 ____D C:\Users\Laptop\AppData\Local\Spotify

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-07-30 14:10 - 2014-07-30 14:10 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-08-06 13:11 - 2015-08-06 13:11 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\Laptop\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


ACHTUNG: ==> Auf den BCD konnte nicht zugegriffen werden. der Benutzer ist kein Administrator

==================== Ende von FRST.txt ============================

--- --- ---FRST Additions Logfile:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-12-2015
durchgeführt von Irina (2015-12-07 22:06:44)
Gestartet von C:\Users\Irina\Downloads
Windows 10 Home (X64) (2015-08-06 12:50:26)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3702976893-725985698-900371594-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3702976893-725985698-900371594-503 - Limited - Disabled)
Gast (S-1-5-21-3702976893-725985698-900371594-501 - Limited - Disabled)
Irina (S-1-5-21-3702976893-725985698-900371594-1004 - Limited - Enabled) => C:\Users\Irina
Laptop (S-1-5-21-3702976893-725985698-900371594-1001 - Administrator - Enabled) => C:\Users\Laptop

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.245 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Reader X MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.0.0 - Adobe Systems Incorporated)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden
Apple Application Support (32-Bit) (HKLM-x32\...\{649A1FD9-5892-46AD-8DF0-C4A43FF61CB7}) (Version: 4.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{0DE0A178-AC7B-4650-806C-CF226DE03766}) (Version: 4.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Build-a-lot: On Vacation (x32 Version: 2.2.0.110 - WildTangent) Hidden
calibre (HKLM-x32\...\{4A7785E7-924F-4938-98C6-B08F2DAA0961}) (Version: 2.16.0 - Kovid Goyal)
CCleaner (HKLM\...\CCleaner) (Version: 5.07 - Piriform)
Chronicles of Albian (x32 Version: 2.2.0.110 - WildTangent) Hidden
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Cradle Of Egypt Collector's Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.1923 - CyberLink Corp.)
Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.10.63.1020 - Electronic Arts Inc.)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Eusing Free Registry Cleaner (HKLM-x32\...\Eusing Free Registry Cleaner) (Version:  - Eusing Software)
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
FDUx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\Firebird SQL Server D) (Version: 2.0.1.13 - MAGIX AG)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.73 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
Heroes of Hellas 3: Athens (x32 Version: 2.2.0.110 - WildTangent) Hidden
HP Deskjet 3520 series - Grundlegende Software für das Gerät (HKLM\...\{15B2F0E3-3FAC-4495-B0FD-398EECFA4100}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Deskjet 3520 series Setup Guide (HKLM-x32\...\{AEEDCEB7-00B8-4BE1-B492-AB04803D5F1E}) (Version: 27.0.0 - Hewlett Packard)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 38645) (Version: 03.05.11 - Intel)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.3.1004 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
iTunes (HKLM\...\{E690A491-702F-4DEC-9977-C015D1DBB57C}) (Version: 12.3.1.23 - Apple Inc.)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
KUx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
Lightshot-5.3.0.0 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.3.0.0 - Skillbrains)
Luxor HD (x32 Version: 2.2.0.110 - WildTangent) Hidden
MAGIX Music Maker for MySpace 15.0.1.8 (D) (HKLM-x32\...\MAGIX Music Maker for MySpace D) (Version: 15.0.1.8 - MAGIX AG)
Mahjongg Artifacts (x32 Version: 2.2.0.110 - WildTangent) Hidden
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version: 6.0.4 - CEWE Stiftung u Co. KGaA)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 42.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 de)) (Version: 42.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98 - WildTangent) Hidden
Mystery P.I. - The London Caper (x32 Version: 2.2.0.95 - WildTangent) Hidden
ooVoo (HKLM-x32\...\{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}) (Version: 3.6.9001 - ooVoo LLC.)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.5.11.2855 - Electronic Arts, Inc.)
PdaNet+ for Android 4.18 (HKLM-x32\...\PdaNet_is1) (Version:  - June Fabrics Technology Inc)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
PlayMemories Home (HKLM-x32\...\{10DD6128-A810-4A90-9523-475D573FBB37}) (Version: 6.3.02.07270 - Sony Corporation)
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.206 - Ihr Firmenname)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7564 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.8400.28121 - Realtek Semiconductor Corp.)
Restore (x32 Version: 1.0.0 - Sony Corporation) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
SmartDeblur (HKLM-x32\...\SmartDeblur_is1) (Version: 2.2 - )
Sony PC Companion 2.10.297 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.297 - Sony)
SSLx64 (Version: 1.0.0 - Sony Corporation ) Hidden
SSLx86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.5.0 - Synaptics Incorporated)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
VAIO - Xperia Link (HKLM-x32\...\{D91558BF-D1F3-411F-AEFE-8774CB406512}) (Version: 1.0.0.08170 - Sony Corporation)
VAIO Care (HKLM\...\{E0F928B4-2BB2-4D7E-B16E-2B202CB58EDE}) (Version: 8.0.0.08150 - Sony Corporation)
VAIO Control Center (HKLM-x32\...\{8E797841-A110-41FD-B17A-3ABC0641187A}) (Version: 6.0.0.08200 - Sony Corporation)
VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.10.0.07270 - Sony Corporation)
VAIO Easy Connect (x32 Version: 1.2.0.08150 - Sony Corporation) Hidden
VAIO Gate (HKLM-x32\...\{14AC95A2-7675-4988-A5BD-3F5B943AED08}) (Version: 3.0.0.08140 - Sony Corporation)
VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 3.0.0.08060 - Sony Corporation)
VAIO Gesture Control (HKLM-x32\...\{692955F2-DE9F-4078-8FAA-858D6F3A1776}) (Version: 2.0.0.08240 - Sony Corporation)
VAIO Gesture Control (x32 Version: 2.0.0.08240 - Sony Corporation) Hidden
VAIO Image Optimizer (HKLM-x32\...\InstallShield_{5597C927-029A-46A7-A0C0-8DABD9891A50}) (Version: 3.0.00.08170 - Sony Corporation)
VAIO Image Optimizer (x32 Version: 3.0.00.08170 - Sony Corporation) Hidden
VAIO Improvement (HKLM-x32\...\{3A26D9BD-0F73-432D-B522-2BA18138F7EF}) (Version: 2.0.0.08090 - Sony Corporation)
VAIO Media Server Settings (HKLM\...\{62A172B2-550E-499D-9A82-5190D18390AA}) (Version: 1.0.0.08240 - Sony Corporation)
VAIO Movie Creator Template Data (HKLM-x32\...\InstallShield_{00A663F1-6C03-48CA-8E85-55806AAE2615}) (Version: 4.0.00.08170 - Sony Corporation)
VAIO Movie Creator Template Data (x32 Version: 4.0.00.08170 - Sony Corporation) Hidden
VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 7.1.0.08060 - Sony Corporation)
VAIO*CPU-Lüfterdiagnose (HKLM-x32\...\{BCE6E3D7-B565-4E1B-AC77-F780666A35FB}) (Version: 1.1.0.09200 - Sony Corporation)
VAIO-Handbuch (HKLM-x32\...\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}) (Version: 3.0.0.08100 - Sony Corporation)
VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.8.0.08212 - Sony Corporation)
VCCx64 (Version: 1.0.0 - Sony Corporation) Hidden
VCCx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VGClientX64 (Version: 1.0.0 - Sony Corporation) Hidden
VHD (x32 Version: 1.0.0 - Sony Corporation) Hidden
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98 - WildTangent) Hidden
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VIx64 (Version: 1.0.0 - Sony Corporation) Hidden
VIx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VMLx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VPMx64 (Version: 1.0.0 - Sony Corporation ) Hidden
VSSTx64 (Version: 1.0.0 - Sony Corporation ) Hidden
VSSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden
VWSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
WildTangent Games App (x32 Version: 4.0.8.7 - WildTangent) Hidden
WildTangent-Spiele (HKLM-x32\...\WildTangent sony Master Uninstall) (Version: 1.0.3.0 - WildTangent)
WinRAR 5.10 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
XperiaLinkx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Wiederherstellungspunkte =========================

ACHTUNG: Systemwiederherstellung ist deaktiviert
Überprüfen Sie den "winmgmt" Dienst oder reparieren Sie den WMI.


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => 
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => 
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => 
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => 

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-10-01 19:48 - 2015-09-17 07:48 - 02494712 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-06 13:58 - 2015-08-06 13:58 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
2015-10-01 19:48 - 2015-09-17 07:48 - 02494712 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-10-01 19:48 - 2015-09-17 06:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 00085800 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-05-22 07:52 - 2015-06-10 10:13 - 00113024 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
2012-08-06 10:29 - 2012-08-06 10:29 - 00062464 _____ () C:\Program Files\Sony\VAIO Care\listener.exe
2015-12-02 23:19 - 2015-12-02 23:19 - 00014336 _____ () C:\Program Files (x86)\Google\Chrome\Application\WTSAPI32.dll
2015-12-04 05:36 - 2015-11-24 19:12 - 01971528 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.73\libglesv2.dll
2015-12-04 05:36 - 2015-11-24 19:12 - 00093512 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.73\libegl.dll
2015-10-01 19:48 - 2015-09-17 06:44 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-10-01 19:47 - 2015-09-17 06:42 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-10-01 19:48 - 2015-09-17 06:42 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-10-01 19:48 - 2015-09-17 06:43 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-07-10 12:00 - 2015-07-10 17:45 - 00210432 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3702976893-725985698-900371594-1004\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\Run32: => "Adobe ARM"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{2E61E2E7-8ADD-4B34-A4AB-4394D4552F9F}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{6420D0B2-F91B-44F5-A9D0-424928874773}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{0963363A-65E3-4683-AE60-A628116C560E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B53D31F4-23BF-4D0F-AB54-4910A99C7051}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [UDP Query User{B9D15DC6-B934-4831-BD7E-B28CBDA4F613}C:\users\laptop\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\laptop\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{B83E51F4-3E47-456F-BF0A-ACC2559DBF6D}C:\users\laptop\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\laptop\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{8E7ECED5-3E11-404E-816E-E5F14D5479B4}C:\users\laptop\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\laptop\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{2816776A-3CD2-4B0C-80A1-B95FDC8341F8}C:\users\laptop\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\laptop\appdata\roaming\spotify\spotify.exe
FirewallRules: [{2316CADD-C0F7-4D6E-913C-CD89D0FCDAFD}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{F73BF5A0-135D-4DBC-B770-5E59DF0A74F0}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{F8762D5A-F23A-4263-8A45-268497A399CE}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{F6FE2ACF-A11E-4A1B-8A00-23BAC6B860F4}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{79B56632-2F78-4834-84EF-6C6CE55DB708}] => (Allow) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{8EEED0CC-A2E6-465D-88A0-AD7FF2A86E20}] => (Allow) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{2BAD79FC-BA32-4C89-ADCA-1BF353549512}] => (Allow) C:\Users\Laptop\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{06A52A83-35A3-43DC-AE42-BDDAE1B00F0E}] => (Allow) C:\Users\Laptop\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{C621732D-06DB-41FC-9726-7F5AAA91115F}] => (Allow) C:\Program Files\HP\HP Deskjet 3520 series\Bin\DeviceSetup.exe
FirewallRules: [{D580D8E7-9151-4CD7-9692-B55CEE609357}] => (Allow) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{3DD3813A-3C05-48DA-9B22-B38D25C6911A}] => (Allow) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [TCP Query User{7E4B6C9E-B3EB-4CF4-881C-8ABF2F26C476}C:\users\laptop\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\laptop\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{C82B29E9-8FCD-47D1-8EFC-1C56575055CC}C:\users\laptop\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\laptop\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{F7637B2B-A6BB-4E9C-B4D0-4AB3084B8AB8}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{034401F3-E7DE-4B46-A6C2-61ECF9F6A3B6}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{4C2E230D-A81C-4AA6-8398-C5F06AB03304}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [UDP Query User{5F6ABBF7-347F-4158-8FA7-A9C7F2D7A85C}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [TCP Query User{B9D5E086-D389-4343-B1E5-DC3FC0C754E9}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{3E845074-4EAA-49BF-90F3-95FECC370A74}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{4293B0A3-2742-42D1-B429-1E631A21C361}] => (Allow) C:\Users\Laptop\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{680D7C50-8E1C-4A6A-8F53-108939D651B0}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{56A6FA08-B35A-4061-9127-613A29FB964A}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{17D27FE1-85A1-4FAB-856E-84EAAA61B431}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{F9DAD02D-0209-44F1-B4D3-375A1D06EF44}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{54619533-0228-47CC-A315-AC97E72C0328}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{FD6C2430-2768-4735-A6E2-971632BF70C5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{0B0E86F7-C64A-40BD-A869-50EAA5016BA6}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{16DBC67A-76DA-4704-BEB1-A50BB28FF2D8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D5FACF70-E729-4DE3-BF69-6357B2B8E01A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7B5E516D-79E6-4FD9-9DD5-3E63EF50C5EF}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/07/2015 09:05:25 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 14140

Error: (12/07/2015 09:05:25 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 14140

Error: (12/07/2015 09:05:25 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/07/2015 09:04:55 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Sava)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/07/2015 08:49:40 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Sava)
Description: Bei der Aktivierung der App „Microsoft.Windows.Photos_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/07/2015 08:49:33 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Microsoft.Photos.exe, Version 15.1201.10020.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1c5c

Startzeit: 01d130c3bf208d53

Beendigungszeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1201.10020.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe

Berichts-ID: 06c34d2b-9cb7-11e5-bec9-a41731d2acde

Vollständiger Name des fehlerhaften Pakets: Microsoft.Windows.Photos_15.1201.10020.0_x64__8wekyb3d8bbwe

Auf das fehlerhafte Paket bezogene Anwendungs-ID: App

Error: (12/07/2015 08:30:51 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (12/06/2015 10:30:17 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.

Error: (12/06/2015 10:30:07 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.

Error: (12/06/2015 10:29:19 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.


Systemfehler:
=============
Error: (12/07/2015 08:53:08 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {784E29F4-5EBE-4279-9948-1E8FE941646D}

Error: (12/07/2015 09:05:03 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Synchronisierungshost_Session1 erreicht.

Error: (12/07/2015 09:04:55 AM) (Source: DCOM) (EventID: 10010) (User: Sava)
Description: CortanaUI.AppXtpp90jhw9p0njjb85kvhxpppgrqfp117.mca

Error: (12/07/2015 09:04:53 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/07/2015 08:31:49 AM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056

Error: (12/07/2015 08:31:26 AM) (Source: DCOM) (EventID: 10016) (User: Sava)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}SavaLaptopS-1-5-21-3702976893-725985698-900371594-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/07/2015 08:31:19 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/07/2015 12:45:58 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x8024200b fehlgeschlagen: Hewlett-Packard  - Imaging - Null Print - HP Deskjet 3520 series

Error: (12/07/2015 12:44:54 AM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {F3B4E234-7A68-4E43-B813-E4BA55A065F6}

Error: (12/07/2015 12:42:13 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz
Prozentuale Nutzung des RAM: 62%
Installierter physikalischer RAM: 3975.27 MB
Verfügbarer physikalischer RAM: 1487.41 MB
Summe virtueller Speicher: 7559.27 MB
Verfügbarer virtueller Speicher: 4576.82 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:434.99 GB) (Free:257.6 GB) NTFS

==================== MBR & Partitionstabelle ==================

==================== Ende von Addition.txt ============================

--- --- ---

Helfen die Dateien oder muss ich mich als Administrator anmelden und das nochmal machen?

kann mir niemand helfen?

schrauber · 09.12.2015, 07:40

Unsere Tools brauchen immer Adminrechte, also bitte nochmal.

irina97 · 09.12.2015, 19:24

Zitat:

Zitat von schrauber

Unsere Tools brauchen immer Adminrechte, also bitte nochmal.

okay! hier bitteschön:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-12-2015
durchgeführt von Laptop (Administrator) auf SAVA (09-12-2015 19:19:19)
Gestartet von C:\Users\Irina\Downloads
Geladene Profile: Laptop & Irina (Verfügbare Profile: Laptop & Irina)
Platform: Windows 10 Home (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
() C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.3.0.0\Lightshot.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avanquest Software) C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1201.10020.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.23.23.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\Sony\VAIO Care\listener.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10240.16565_none_1162030161f5c19b\TiWorker.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicatorCom.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1403136 2015-08-11] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3928264 2015-05-27] (Synaptics Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-10-16] (Apple Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [68776 2012-08-18] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [724576 2012-07-27] (Sony Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => c:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2010-11-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [932288 2010-11-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [152896 2012-06-25] (Intel Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-06-30] (Avast Software s.r.o.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-11-18] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] => C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe [54072 2015-10-05] (Malwarebytes)
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\Run: [HP Deskjet 3520 series (NET)] => C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\Run: [Spotify Web Helper] => C:\Users\Laptop\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2030912 2015-11-08] (Spotify Ltd)
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony)
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd)
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53735968 2015-08-07] (Skype Technologies S.A.)
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\Run: [Spotify] => C:\Users\Laptop\AppData\Roaming\Spotify\Spotify.exe [7736128 2015-11-08] (Spotify Ltd)
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\RunOnce: [Uninstall C:\Users\Laptop\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Laptop\AppData\Local\Microsoft\OneDrive\17.3.5907.0716_1\amd64"
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\RunOnce: [Report] => \AdwCleaner\AdwCleaner[C1].txt
HKU\S-1-5-21-3702976893-725985698-900371594-1004\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony)
HKU\S-1-5-21-3702976893-725985698-900371594-1004\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd)
HKU\S-1-5-21-3702976893-725985698-900371594-1004\...\Run: [GoogleChromeAutoLaunch_7DBF8F1D6DD5F67753D3A112420791D3] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [799560 2015-12-04] (Google Inc.)
HKU\S-1-5-18\...\Run: [ooVoo.exe] => C:\Program Files (x86)\ooVoo\oovoo.exe [36592672 2015-11-05] (ooVoo LLC)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Laptop\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64\FileSyncShell64.dll [2015-10-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Laptop\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64\FileSyncShell64.dll [2015-10-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Laptop\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64\FileSyncShell64.dll [2015-10-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-06-25] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Laptop\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncShell.dll [2015-10-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Laptop\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncShell.dll [2015-10-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Laptop\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncShell.dll [2015-10-27] (Microsoft Corporation)
Startup: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2014-10-12]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2014-12-16]
ShortcutTarget: Dropbox.lnk -> C:\Users\Laptop\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PdaNet Desktop.lnk [2015-05-22]
ShortcutTarget: PdaNet Desktop.lnk -> C:\Program Files (x86)\PdaNet for Android\PdaNetPC.exe ()
Startup: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk [2015-11-25]
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk -> C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{3b3db353-91fa-4aca-9fdf-a3a7337e29ea}: [DhcpNameServer] 62.24.0.88
Tcpip\..\Interfaces\{b8708675-665a-4c35-b978-d30f8072384e}: [DhcpNameServer] 192.168.2.1 192.168.2.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-3702976893-725985698-900371594-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3702976893-725985698-900371594-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://vaioportal.sony.eu
HKU\S-1-5-21-3702976893-725985698-900371594-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006
HKU\S-1-5-21-3702976893-725985698-900371594-1004\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3702976893-725985698-900371594-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKU\S-1-5-21-3702976893-725985698-900371594-1004\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://vaioportal.sony.eu
HKU\S-1-5-21-3702976893-725985698-900371594-1004\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3702976893-725985698-900371594-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3702976893-725985698-900371594-1001 -> OldSearch URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3702976893-725985698-900371594-1004 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3702976893-725985698-900371594-1004 -> {5FE367D3-0932-4B0C-BF13-1F0B58C117C3} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q312&_nkw={searchTerms}
SearchScopes: HKU\S-1-5-21-3702976893-725985698-900371594-1004 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-08-13] (Qualcomm Atheros Commnucations)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-06-25] (Avast Software s.r.o.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-11-15] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-07-02] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-06-25] (Avast Software s.r.o.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-02] (Oracle Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\56sq1vfo.default
FF SelectedSearchEngine: Default
FF DefaultSearchEngine: Default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-09] ()
FF Plugin: @java.com/DTPlugin,version=10.5.0 -> C:\WINDOWS\system32\npDeployJava1.dll [2012-11-22] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-09] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-08] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-02-13] (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-08-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-08-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.5.0 -> C:\WINDOWS\SysWOW64\npDeployJava1.dll [2012-11-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-02] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-05-12] ()
FF Extension: FoxyProxy Standard - C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\56sq1vfo.default\extensions\foxyproxy@eric.h.jung [2015-07-12]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-06-25] [ist nicht signiert]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => nicht gefunden

Chrome: 
=======
CHR Profile: C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-06]
CHR Extension: (Google Präsentationen) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-06]
CHR Extension: (Google Drive) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-06]
CHR Extension: (YouTube) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-06]
CHR Extension: (Google-Suche) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-06]
CHR Extension: (Google Präsentationen) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-06]
CHR Extension: (Google Präsentationen) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-06]
CHR Extension: (Google Präsentationen) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-12-06]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-06]
CHR Extension: (Google Mail) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-06]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-18]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2014-10-12] (Adobe Systems) [Datei ist nicht signiert]
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-06-25] (Avast Software s.r.o.)
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\MAGIX\Common\Database\bin\fbserver.exe [1527900 2005-11-17] (MAGIX®) [Datei ist nicht signiert]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-10-26] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-08-06] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-08-06] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [623784 2012-08-18] (Sony Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2057736 2015-09-13] (Electronic Arts)
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [474208 2012-07-27] (Sony Corporation)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] () [Datei ist nicht signiert]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2012-08-08] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1653272 2015-07-31] (Sony Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-13] (Atheros) [Datei ist nicht signiert]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-06-25] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-06-25] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-06-25] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-06-25] ()
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-06-25] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-30] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-06-25] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-06-25] ()
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2015-12-07] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek                                            )
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-05-27] (Synaptics Incorporated)
R3 SOWS; C:\Windows\System32\drivers\sows.sys [24280 2012-06-11] (Sony Corporation)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
R3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 WUDFWpdComp; C:\Windows\system32\DRIVERS\WUDFRd.sys [214016 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-09 19:15 - 2015-12-09 19:15 - 00016148 _____ C:\WINDOWS\system32\SAVA_Irina_HistoryPrediction.bin
2015-12-07 22:06 - 2015-12-07 22:07 - 00033377 _____ C:\Users\Irina\Downloads\Addition.txt
2015-12-07 22:03 - 2015-12-09 19:19 - 00027239 _____ C:\Users\Irina\Downloads\FRST.txt
2015-12-07 22:03 - 2015-12-09 19:19 - 00000000 ____D C:\FRST
2015-12-07 22:03 - 2015-12-07 22:03 - 02369024 _____ (Farbar) C:\Users\Irina\Downloads\FRST64.exe
2015-12-07 21:23 - 2015-12-07 21:23 - 00001122 _____ C:\Users\Laptop\Desktop\Eusing Free Registry Cleaner.lnk
2015-12-07 21:23 - 2015-12-07 21:23 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner
2015-12-07 21:23 - 2015-12-07 21:23 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Eusing
2015-12-07 21:23 - 2015-12-07 21:23 - 00000000 ____D C:\Program Files (x86)\Eusing Free Registry Cleaner
2015-12-07 21:13 - 2015-12-07 21:15 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Systweak
2015-12-07 21:12 - 2015-12-07 21:12 - 00000000 ____D C:\Users\Laptop\AppData\Local\Systweak
2015-12-07 21:11 - 2015-12-07 21:12 - 05822720 _____ (Advanced System Protector ) C:\Users\Irina\Downloads\aspsetup.exe
2015-12-07 21:09 - 2015-12-07 21:09 - 01466656 _____ C:\Users\Irina\Downloads\Eusing Free Registry Cleaner - CHIP-Installer.exe
2015-12-07 09:04 - 2015-12-07 09:04 - 00001726 _____ C:\Users\Laptop\Desktop\MMB.txt
2015-12-07 07:53 - 2015-12-07 07:53 - 00259584 _____ (OldTimer Tools) C:\Users\Irina\Downloads\OTH.scr
2015-12-06 22:30 - 2015-12-06 22:30 - 00000000 ____D C:\Program Files (x86)\ESET
2015-12-06 22:29 - 2015-12-06 22:29 - 02870984 _____ (ESET) C:\Users\Irina\Downloads\esetsmartinstaller_deu.exe
2015-12-06 22:27 - 2015-12-06 22:28 - 00001838 _____ C:\Users\Laptop\Desktop\sc-cleaner.txt
2015-12-06 22:27 - 2015-12-06 22:27 - 01599336 _____ (Malwarebytes) C:\Users\Irina\Downloads\JRT (1).exe
2015-12-06 22:27 - 2015-12-06 22:27 - 00463688 _____ (Bleeping Computer, LLC) C:\Users\Irina\Downloads\sc-cleaner.exe
2015-12-06 22:25 - 2015-12-06 22:25 - 00000697 _____ C:\Users\Laptop\Desktop\JRT.txt
2015-12-06 22:20 - 2015-12-06 22:21 - 01599336 _____ (Malwarebytes) C:\Users\Irina\Downloads\JRT.exe
2015-12-06 22:19 - 2015-12-06 22:19 - 00006166 _____ C:\Users\Irina\Desktop\mbam.txt
2015-12-06 21:29 - 2015-12-07 08:31 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-12-06 21:29 - 2015-12-06 21:29 - 00001171 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-12-06 21:29 - 2015-12-06 21:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-12-06 21:29 - 2015-12-06 21:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-12-06 21:29 - 2015-12-06 21:29 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-12-06 21:29 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-12-06 21:29 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-12-06 21:29 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2015-12-06 21:24 - 2015-12-06 21:25 - 22908888 _____ (Malwarebytes ) C:\Users\Irina\Downloads\mbam-setup-2.2.0.1024.exe
2015-12-06 21:15 - 2015-12-06 21:17 - 00000000 ____D C:\AdwCleaner
2015-12-06 21:13 - 2015-12-06 21:13 - 01736704 _____ C:\Users\Irina\Downloads\adwcleaner_5.023.exe
2015-12-04 19:03 - 2015-12-04 19:03 - 00058346 _____ C:\Users\Irina\Downloads\Unbenannt 1.pdf
2015-12-04 19:03 - 2015-12-04 19:03 - 00058346 _____ C:\Users\Irina\Downloads\Unbenannt 1 (1).pdf
2015-12-02 23:19 - 2015-12-06 21:17 - 00000008 __RSH C:\ProgramData\ntuser.pol
2015-12-02 23:12 - 2015-12-02 23:12 - 00042564 _____ C:\Users\Irina\Desktop\AiXemjL9sVNjZJfipg39q9n9x2qYpSDyR-NxNguKVnmR.aac
2015-12-01 23:34 - 2015-12-01 23:34 - 00000000 ____D C:\Users\Irina\Documents\Lightshot
2015-12-01 22:54 - 2015-12-01 22:54 - 00000086 ____H C:\Users\Irina\Downloads\.~lock.KursMedPsy5-31.10.Stress.ppt#
2015-12-01 22:52 - 2015-12-01 22:52 - 00920064 _____ C:\Users\Irina\Downloads\KursMedPsy5-31.10.Stress.ppt
2015-12-01 20:33 - 2015-12-01 20:33 - 00001112 _____ C:\Users\Public\Desktop\SmartDeblur.lnk
2015-12-01 20:33 - 2015-12-01 20:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmartDeblur
2015-12-01 20:33 - 2015-12-01 20:33 - 00000000 ____D C:\Program Files (x86)\SmartDeblur
2015-12-01 20:19 - 2015-12-01 20:25 - 00000000 ____D C:\Users\Irina\Desktop\bsu
2015-11-30 11:25 - 2015-11-30 11:25 - 00448317 _____ C:\Users\Laptop\Downloads\bio-dvd013.zip
2015-11-30 00:19 - 2015-11-30 00:19 - 00016148 _____ C:\WINDOWS\system32\SAVA_Laptop_HistoryPrediction.bin
2015-11-29 21:22 - 2015-11-29 21:22 - 00003652 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-irinapotapow@outlook.de
2015-11-29 15:05 - 2015-11-29 15:05 - 00058346 _____ C:\Users\Laptop\Desktop\Unbenannt 1.pdf
2015-11-28 23:08 - 2015-11-28 23:08 - 00000000 ____D C:\Users\Laptop\Documents\MAGIX Downloads
2015-11-28 23:08 - 2015-11-28 23:08 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\MAGIX
2015-11-27 06:54 - 2015-11-27 06:55 - 00000000 ___HD C:\$WINDOWS.~BT
2015-11-25 19:48 - 2015-11-25 19:49 - 00104012 _____ C:\Users\Laptop\Downloads\Ihr_Voucher_131983.pdf
2015-11-25 19:16 - 2015-11-25 19:16 - 00000000 ____D C:\Users\Laptop\AppData\LocalLow\Temp
2015-11-25 19:15 - 2015-11-25 19:15 - 00002099 _____ C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2015-11-25 12:47 - 2015-11-25 12:47 - 00104012 _____ C:\Users\Irina\Downloads\Ihr_Voucher_131983 (2).pdf
2015-11-25 12:47 - 2015-11-25 12:47 - 00104012 _____ C:\Users\Irina\Downloads\Ihr_Voucher_131983 (1).pdf
2015-11-25 11:33 - 2015-11-25 11:33 - 00104012 _____ C:\Users\Irina\Downloads\Ihr_Voucher_131983.pdf
2015-11-24 14:07 - 2015-11-24 14:07 - 00016359 _____ C:\Users\Irina\Downloads\Facharbeit.odt
2015-11-24 14:07 - 2015-11-24 14:07 - 00012521 _____ C:\Users\Irina\Downloads\Titelblatt Facharbeit.odt
2015-11-23 20:25 - 2015-11-23 20:25 - 00000086 ____H C:\Users\Irina\Downloads\.~lock.Facharbeit_Magersucht.doc#
2015-11-21 16:12 - 2015-11-21 16:12 - 18707793 _____ C:\Users\Irina\Desktop\DSC_0173.psd
2015-11-18 18:38 - 2015-11-18 18:38 - 00869600 _____ (Opera Software) C:\Users\Laptop\Documents\Opera_NI_stable.exe
2015-11-18 18:38 - 2015-11-18 18:38 - 00001926 _____ C:\Users\Public\Desktop\ooVoo.lnk
2015-11-18 18:38 - 2015-11-18 18:38 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\ooVoo Details
2015-11-18 18:38 - 2015-11-18 18:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ooVoo
2015-11-18 18:38 - 2015-11-18 18:38 - 00000000 ____D C:\Program Files (x86)\ooVoo
2015-11-18 18:36 - 2015-11-18 18:36 - 02388000 _____ (ooVoo LLC) C:\Users\Irina\Downloads\ooVooSetup.exe
2015-11-17 20:19 - 2015-11-17 20:19 - 09920137 _____ C:\Users\Irina\Downloads\Свадебные голуби Поздравления с Днем Свадьбы.mp4
2015-11-17 12:36 - 2015-11-18 18:30 - 00000000 ____D C:\Users\Irina\Desktop\Facharbeit Anorexia
2015-11-17 08:49 - 2015-11-17 08:49 - 00000000 ___HD C:\Users\Irina\Desktop\.picasaoriginals
2015-11-17 08:30 - 2015-11-25 11:45 - 00000000 ____D C:\Users\Irina\AppData\Local\Mozilla
2015-11-17 08:30 - 2015-11-17 08:31 - 00000000 ____D C:\Users\Irina\AppData\Roaming\Mozilla
2015-11-16 19:55 - 2015-11-16 19:55 - 00146183 _____ C:\Users\Irina\Downloads\YouTube-Unblocker-056.crx
2015-11-16 18:23 - 2015-11-16 18:23 - 00906450 _____ C:\Users\Irina\Downloads\Mais-Tofu Patties (1).odt
2015-11-16 18:23 - 2015-11-12 18:52 - 01390076 _____ C:\Users\Irina\Documents\Referat%20Pflege.pptx_1.odp
2015-11-16 14:44 - 2015-11-16 14:44 - 02163806 _____ C:\Users\Irina\Downloads\Icons-of-sketchy-food.zip
2015-11-16 14:29 - 2015-11-16 14:29 - 04440488 _____ C:\Users\Irina\Downloads\Abstract-geometric-pattern.zip
2015-11-16 14:29 - 2015-11-16 14:29 - 04440488 _____ C:\Users\Irina\Downloads\Abstract-geometric-pattern (1).zip
2015-11-16 12:05 - 2015-12-04 19:03 - 00000000 ____D C:\Users\Irina\AppData\LocalLow\Adobe
2015-11-16 12:04 - 2015-11-16 12:04 - 00003590 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-Sava-Irina
2015-11-16 11:59 - 2015-11-16 11:59 - 00001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk
2015-11-16 11:59 - 2015-11-16 11:59 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-11-16 11:58 - 2015-11-16 11:58 - 00001280 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6.lnk
2015-11-16 11:57 - 2015-11-16 11:59 - 00000000 ____D C:\Program Files\Adobe
2015-11-16 11:57 - 2015-11-16 11:57 - 00001082 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
2015-11-16 11:56 - 2015-11-16 11:56 - 00001242 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk
2015-11-16 11:53 - 2015-11-16 11:53 - 00001596 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2015-11-16 11:50 - 2015-11-16 11:59 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-11-16 11:41 - 2015-11-17 12:16 - 00000000 ____D C:\Users\Irina\Desktop\Adobe CS6
2015-11-16 11:33 - 2015-11-16 11:40 - 1207595878 _____ C:\Users\Irina\Downloads\Photoshop_13_LS16.7z
2015-11-16 11:33 - 2015-11-16 11:33 - 01228608 _____ (Adobe Systems Incorporated) C:\Users\Irina\Downloads\Photoshop_13_LS16.exe
2015-11-16 11:31 - 2015-11-16 11:31 - 01288198 _____ C:\Users\Irina\Downloads\Adobe Photoshop CS6 Extended Crack .DLL Files.rar
2015-11-15 20:36 - 2015-11-15 20:36 - 00000000 ____D C:\Users\Irina\AppData\Roaming\Opera
2015-11-15 19:15 - 2015-11-15 19:15 - 00232872 _____ (Spotify Ltd) C:\Users\Irina\Downloads\SpotifySetup.exe
2015-11-13 22:03 - 2015-11-18 18:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-11-12 22:06 - 2015-11-12 22:06 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Apple Computer
2015-11-12 21:03 - 2015-11-12 21:03 - 00000000 ____D C:\Users\Irina\AppData\Roaming\Macromedia
2015-11-12 19:10 - 2015-11-15 19:03 - 00906450 _____ C:\Users\Irina\Downloads\Mais-Tofu Patties.odt
2015-11-12 17:52 - 2015-11-12 17:52 - 00017129 _____ C:\Users\Irina\Downloads\Unbenannt 2.odt
2015-11-12 17:52 - 2015-11-12 17:52 - 00000086 ____H C:\Users\Irina\Downloads\.~lock.Unbenannt 2.odt#
2015-11-12 17:46 - 2015-11-12 17:46 - 00000086 ____H C:\Users\Irina\Downloads\.~lock.Referat Pflege.pptx#
2015-11-12 17:46 - 2015-11-10 14:23 - 00010995 _____ C:\Users\Irina\Documents\untitled_0.odt
2015-11-12 17:45 - 2015-11-12 17:45 - 01447418 _____ C:\Users\Irina\Downloads\Referat Pflege.pptx
2015-11-12 17:40 - 2015-11-12 17:40 - 00000000 ____D C:\Users\Irina\Tracing
2015-11-12 17:38 - 2015-12-06 03:41 - 00000000 ____D C:\Users\Irina\AppData\Roaming\Skype
2015-11-12 17:38 - 2015-11-12 17:38 - 00000000 ____D C:\Users\Irina\AppData\Local\Skype
2015-11-11 19:14 - 2015-11-11 19:14 - 00017129 _____ C:\Users\Irina\Desktop\Unbenannt 2.odt
2015-11-11 14:13 - 2015-11-05 06:15 - 08020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-11-11 14:13 - 2015-11-05 06:15 - 00541024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2015-11-11 14:13 - 2015-11-05 06:14 - 00459104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2015-11-11 14:13 - 2015-11-05 06:13 - 00577888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-11-11 14:13 - 2015-11-05 06:11 - 01392480 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-11-11 14:13 - 2015-11-05 06:06 - 03621248 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-11-11 14:13 - 2015-11-05 06:06 - 00966416 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2015-11-11 14:13 - 2015-11-05 06:01 - 00607408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-11-11 14:13 - 2015-11-05 05:56 - 01083072 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-11-11 14:13 - 2015-11-05 05:56 - 00116064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-11-11 14:13 - 2015-11-05 05:56 - 00025280 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2015-11-11 14:13 - 2015-11-05 05:30 - 00961376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-11-11 14:13 - 2015-11-05 05:24 - 02878512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-11-11 14:13 - 2015-11-05 05:23 - 00762888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2015-11-11 14:13 - 2015-11-05 05:23 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2015-11-11 14:13 - 2015-11-05 05:20 - 21873664 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-11-11 14:13 - 2015-11-05 05:18 - 24597504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-11-11 14:13 - 2015-11-05 05:18 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-11-11 14:13 - 2015-11-05 05:18 - 00539728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-11-11 14:13 - 2015-11-05 05:17 - 02418688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-11-11 14:13 - 2015-11-05 05:12 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\internetmail.dll
2015-11-11 14:13 - 2015-11-05 05:11 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-11-11 14:13 - 2015-11-05 05:10 - 12504064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-11-11 14:13 - 2015-11-05 05:10 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2015-11-11 14:13 - 2015-11-05 05:07 - 01068032 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-11-11 14:13 - 2015-11-05 05:06 - 00453120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2015-11-11 14:13 - 2015-11-05 05:05 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-11-11 14:13 - 2015-11-05 05:05 - 00826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-11-11 14:13 - 2015-11-05 05:03 - 02180608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-11-11 14:13 - 2015-11-05 05:03 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2015-11-11 14:13 - 2015-11-05 05:01 - 00949760 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-11-11 14:13 - 2015-11-05 05:01 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-11-11 14:13 - 2015-11-05 05:01 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2015-11-11 14:13 - 2015-11-05 04:59 - 03587072 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-11-11 14:13 - 2015-11-05 04:59 - 02675200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2015-11-11 14:13 - 2015-11-05 04:58 - 01383936 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-11-11 14:13 - 2015-11-05 04:58 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-11-11 14:13 - 2015-11-05 04:56 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-11-11 14:13 - 2015-11-05 04:55 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2015-11-11 14:13 - 2015-11-05 04:54 - 00502272 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll
2015-11-11 14:13 - 2015-11-05 04:47 - 19326464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-11-11 14:13 - 2015-11-05 04:42 - 02647040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-11-11 14:13 - 2015-11-05 04:40 - 01918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-11-11 14:13 - 2015-11-05 04:35 - 18803712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-11-11 14:13 - 2015-11-05 04:35 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2015-11-11 14:13 - 2015-11-05 04:34 - 00311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2015-11-11 14:13 - 2015-11-05 04:33 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-11-11 14:13 - 2015-11-05 04:33 - 00650240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-11-11 14:13 - 2015-11-05 04:30 - 00767488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-11-11 14:13 - 2015-11-05 04:28 - 11262976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-11-11 14:13 - 2015-11-05 04:27 - 02049536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2015-11-11 14:13 - 2015-11-05 04:27 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-11-11 14:13 - 2015-11-05 04:23 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll
2015-11-10 20:36 - 2015-11-10 20:36 - 01233638 _____ C:\Users\Irina\Downloads\cat_meow.zip
2015-11-10 20:36 - 2015-11-10 20:36 - 00118736 _____ C:\Users\Irina\Downloads\charcoal_script.zip
2015-11-10 20:36 - 2015-11-10 20:36 - 00067677 _____ C:\Users\Irina\Downloads\tafelschrift.zip
2015-11-10 20:35 - 2015-11-10 20:35 - 00504209 _____ C:\Users\Irina\Downloads\sinister_black.zip
2015-11-10 20:35 - 2015-11-10 20:35 - 00374275 _____ C:\Users\Irina\Downloads\coal_hand_luke.zip
2015-11-10 20:33 - 2015-11-30 20:33 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\FileAdvisor
2015-11-10 20:15 - 2015-11-10 20:15 - 01598780 _____ C:\Users\Irina\Downloads\sketchydoodles.zip
2015-11-10 20:15 - 2015-11-10 20:15 - 00000000 ____D C:\Users\Irina\AppData\Roaming\WinRAR
2015-11-10 20:14 - 2015-11-10 20:19 - 16180615 _____ C:\Users\Irina\Downloads\brickinthewall_BuburuResources.zip
2015-11-10 20:10 - 2015-11-10 20:10 - 05935165 _____ C:\Users\Irina\Downloads\539-grunge_brushes_digitalrevolutions.zip
2015-11-10 20:10 - 2015-11-10 20:10 - 04037788 _____ C:\Users\Irina\Downloads\350-solid-ink-splatter-1250-pixels.zip
2015-11-10 20:10 - 2015-11-10 20:10 - 00168724 _____ C:\Users\Irina\Downloads\210-xpinksoda_abstractbrushs2.zip
2015-11-10 19:59 - 2015-11-10 19:59 - 00000000 ____D C:\Users\Irina\Documents\AdobeStockPhotos
2015-11-10 18:18 - 2015-11-10 18:18 - 00052711 _____ C:\Users\Laptop\Downloads\stellenausschreibung pflege e-klinik.pdf
2015-11-10 12:34 - 2015-11-10 12:34 - 00000000 ____D C:\Users\Irina\AppData\Roaming\OpenOffice
2015-11-10 09:18 - 2015-11-17 12:16 - 00000000 ____D C:\Users\Irina\Desktop\Pausenbrot mal anders
2015-11-10 09:03 - 2015-12-09 02:00 - 00000000 ____D C:\Users\Irina\AppData\Local\Adobe
2015-11-10 09:00 - 2015-11-10 09:01 - 00000000 ____D C:\Users\Irina\AppData\Local\MicrosoftEdge
2015-11-09 20:23 - 2015-11-09 20:29 - 00000000 ____D C:\Users\Irina\AppData\Roaming\Apple Computer
2015-11-09 20:23 - 2015-11-09 20:23 - 00001822 _____ C:\Users\Public\Desktop\iTunes.lnk
2015-11-09 20:23 - 2015-11-09 20:23 - 00000000 ____D C:\Users\Irina\AppData\Local\Apple Computer
2015-11-09 20:23 - 2015-11-09 20:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-11-09 20:22 - 2015-11-09 20:23 - 00000000 ____D C:\Program Files\iTunes
2015-11-09 20:22 - 2015-11-09 20:22 - 00000000 ____D C:\ProgramData\Apple Computer
2015-11-09 20:22 - 2015-11-09 20:22 - 00000000 ____D C:\Program Files\iPod
2015-11-09 20:22 - 2015-11-09 20:22 - 00000000 ____D C:\Program Files (x86)\iTunes
2015-11-09 20:20 - 2015-11-09 20:20 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-11-09 20:20 - 2015-11-09 20:20 - 00000000 ____D C:\Users\Laptop\AppData\Local\Apple
2015-11-09 20:20 - 2015-11-09 20:20 - 00000000 ____D C:\Program Files\Bonjour
2015-11-09 20:20 - 2015-11-09 20:20 - 00000000 ____D C:\Program Files (x86)\Bonjour
2015-11-09 20:20 - 2015-11-09 20:20 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2015-11-09 20:19 - 2015-11-09 20:22 - 00000000 ____D C:\Program Files\Common Files\Apple
2015-11-09 20:19 - 2015-11-09 20:20 - 00000000 ____D C:\ProgramData\Apple
2015-11-09 20:18 - 2015-11-09 20:18 - 167839512 _____ (Apple Inc.) C:\Users\Irina\Downloads\iTunes6464Setup.exe
2015-11-09 19:55 - 2015-11-09 22:08 - 00000000 ____D C:\Users\Irina\Desktop\Jeskla
2015-11-09 19:52 - 2015-11-28 23:08 - 00000000 ____D C:\Users\Laptop\Documents\MAGIX_MusicMaker15_for_MySpace
2015-11-09 19:52 - 2015-11-09 19:52 - 00001308 _____ C:\Users\Public\Desktop\MAGIX Music Maker for MySpace.lnk
2015-11-09 19:52 - 2015-11-09 19:52 - 00000000 ____D C:\Users\Irina\Documents\MAGIX_MusicMaker15_for_MySpace
2015-11-09 19:52 - 2015-11-09 19:52 - 00000000 ____D C:\Users\Irina\Documents\MAGIX Downloads
2015-11-09 19:52 - 2015-11-09 19:52 - 00000000 ____D C:\Users\Irina\AppData\Roaming\MAGIX
2015-11-09 19:52 - 2015-11-09 19:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2015-11-09 19:52 - 2015-11-09 19:52 - 00000000 ____D C:\ProgramData\MAGIX
2015-11-09 19:52 - 2007-04-18 22:07 - 00053248 _____ C:\WINDOWS\SysWOW64\mgxasio2.dll
2015-11-09 19:52 - 2006-10-02 17:24 - 00487424 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLAV32.dll
2015-11-09 19:52 - 2006-10-02 17:24 - 00188416 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLRES32.dll
2015-11-09 19:52 - 2006-10-02 17:24 - 00163840 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLDEV32.dll
2015-11-09 19:52 - 2006-10-02 17:24 - 00151552 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLDRV32.dll
2015-11-09 19:52 - 2006-10-02 17:24 - 00094208 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLCPY32.dll
2015-11-09 19:52 - 2006-10-02 17:24 - 00053248 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLIO32.dll
2015-11-09 19:52 - 2006-10-02 17:24 - 00036864 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLPNT32.dll
2015-11-09 19:52 - 2006-10-02 17:24 - 00032768 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\STRING32.dll
2015-11-09 19:52 - 2006-07-21 16:16 - 00430080 _____ (MAGIX AG) C:\WINDOWS\SysWOW64\MXRestore.exe
2015-11-09 19:52 - 2005-04-09 21:05 - 00027807 _____ C:\WINDOWS\SysWOW64\mgxcdr.txt
2015-11-09 19:52 - 2004-03-11 15:49 - 00014182 _____ C:\WINDOWS\SysWOW64\DLLAV32.lib
2015-11-09 19:52 - 2003-04-18 15:46 - 01233920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml4.dll
2015-11-09 19:52 - 2003-04-18 15:29 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml4r.dll
2015-11-09 19:52 - 2003-04-18 15:29 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml4a.dll
2015-11-09 19:52 - 2003-03-14 10:35 - 00040960 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLRD32.dll
2015-11-09 19:52 - 2003-03-14 10:33 - 00114688 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLCDA32.dll
2015-11-09 19:52 - 2003-03-14 10:33 - 00061440 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLCDF32.dll
2015-11-09 19:52 - 2003-03-14 10:33 - 00053248 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLPRJ32.dll
2015-11-09 19:52 - 2003-03-14 10:33 - 00045056 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLIMG32.dll
2015-11-09 19:52 - 2003-03-14 10:32 - 00065536 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLPTL32.dll
2015-11-09 19:52 - 2003-03-14 10:32 - 00057344 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLTPO32.dll
2015-11-09 19:52 - 2003-03-14 10:32 - 00049152 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLPRF32.dll
2015-11-09 19:52 - 2003-03-14 10:32 - 00032768 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLMSC32.dll
2015-11-09 19:52 - 2003-03-14 10:32 - 00032768 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLISO32.dll
2015-11-09 19:52 - 2003-03-14 10:32 - 00032768 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLDIR32.dll
2015-11-09 19:52 - 2003-03-14 10:32 - 00024576 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\TTIC32.dll
2015-11-09 19:52 - 2003-03-14 10:32 - 00024576 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\TTI32.dll
2015-11-09 19:52 - 2003-03-14 10:32 - 00024576 _____ (PoINT Software & Systems GmbH) C:\WINDOWS\SysWOW64\DLLIX.dll
2015-11-09 19:51 - 2015-11-09 19:52 - 00007119 _____ C:\WINDOWS\mgxoschk.ini
2015-11-09 19:51 - 2015-11-09 19:52 - 00000000 ____D C:\WINDOWS\SysWOW64\MAGIX
2015-11-09 19:51 - 2015-11-09 19:52 - 00000000 ____D C:\Program Files (x86)\MAGIX
2015-11-09 19:51 - 2008-04-15 15:14 - 00700416 _____ (MAGIX AG) C:\WINDOWS\SysWOW64\mgxoschk.dll
2015-11-09 19:51 - 2007-04-27 09:43 - 00120200 _____ () C:\WINDOWS\SysWOW64\DLLDEV32i.dll
2015-11-09 19:30 - 2015-11-09 19:49 - 111335968 _____ (MAGIX AG) C:\Users\Irina\Downloads\music_maker_4_myspace_106mb_d_en.exe
2015-11-09 14:43 - 2015-11-09 14:43 - 00000000 ____D C:\Users\Irina\AppData\Local\NetworkTiles

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-09 19:17 - 2015-07-01 19:22 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-12-09 19:16 - 2015-08-06 13:15 - 00000000 ____D C:\Users\Laptop
2015-12-09 19:16 - 2015-07-10 10:05 - 00000000 ____D C:\Windows
2015-12-09 05:35 - 2015-07-16 11:08 - 00001124 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-08 18:35 - 2015-07-10 12:04 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-08 18:35 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-08 15:18 - 2015-07-23 10:30 - 00000000 __SHD C:\Users\Irina\IntelGraphicsProfiles
2015-12-08 15:17 - 2015-08-06 13:15 - 00000000 ____D C:\Users\Irina
2015-12-08 15:16 - 2015-07-10 13:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-07 21:05 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-12-06 22:08 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\Resources
2015-12-06 22:07 - 2015-07-10 10:05 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2015-12-06 21:37 - 2015-07-23 10:31 - 00000000 ____D C:\Users\Irina\AppData\Local\Google
2015-12-06 21:17 - 2015-02-18 22:00 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-06 21:17 - 2015-02-18 22:00 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps
2015-12-06 20:13 - 2014-07-30 13:52 - 00004280 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-12-04 19:03 - 2015-07-23 10:30 - 00000000 ____D C:\Users\Irina\AppData\Roaming\Adobe
2015-12-04 09:20 - 2015-06-01 11:26 - 00001107 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-12-04 09:20 - 2015-06-01 11:26 - 00001107 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-04 05:30 - 2015-07-16 11:08 - 00004186 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-04 05:30 - 2015-07-16 11:08 - 00003954 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-04 05:30 - 2015-07-16 11:08 - 00001128 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-01 18:47 - 2015-07-10 12:02 - 00000000 ____D C:\WINDOWS\INF
2015-12-01 12:34 - 2015-08-06 13:37 - 01790124 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-01 12:34 - 2015-07-10 17:34 - 00772342 _____ C:\WINDOWS\system32\perfh007.dat
2015-12-01 12:34 - 2015-07-10 17:34 - 00154170 _____ C:\WINDOWS\system32\perfc007.dat
2015-12-01 12:08 - 2015-04-02 22:40 - 00004148 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{46A01A98-C308-4F93-A8E8-4DE0B4AF94A1}
2015-11-30 00:14 - 2014-07-31 21:00 - 00000000 ____D C:\Users\Laptop\AppData\Local\Adobe
2015-11-29 21:21 - 2014-07-30 13:28 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Adobe
2015-11-27 06:58 - 2015-08-06 14:03 - 00000000 ___DC C:\WINDOWS\Panther
2015-11-25 19:15 - 2015-05-22 07:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-11-25 19:15 - 2015-03-15 16:01 - 00000000 __SHD C:\Users\Laptop\IntelGraphicsProfiles
2015-11-25 19:14 - 2012-11-22 09:00 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-11-23 12:40 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-11-18 18:48 - 2015-07-10 13:20 - 05023552 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-11-18 18:47 - 2015-06-01 11:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-11-17 04:59 - 2012-11-22 09:33 - 00000000 ____D C:\ProgramData\Adobe
2015-11-16 11:57 - 2012-11-22 09:33 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-11-15 20:36 - 2015-07-23 10:30 - 00000000 ____D C:\Users\Irina\AppData\Local\VirtualStore
2015-11-15 11:36 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\rescache
2015-11-12 17:38 - 2015-08-31 08:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-11-12 17:38 - 2014-07-30 21:47 - 00002642 _____ C:\Users\Public\Desktop\Skype.lnk
2015-11-12 17:38 - 2014-07-30 21:47 - 00000000 ____D C:\ProgramData\Skype
2015-11-12 03:47 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-11-11 19:17 - 2015-07-01 19:22 - 00003870 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-11-11 16:16 - 2015-07-10 11:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-11-11 16:14 - 2014-07-31 08:17 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-11-11 15:50 - 2014-07-31 08:17 - 145617392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-11-10 15:19 - 2015-03-01 12:59 - 00000000 ___RD C:\Users\Laptop\OneDrive
2015-11-09 09:30 - 2015-07-23 10:30 - 00000000 ____D C:\Users\Irina\AppData\Local\Packages
2015-11-09 09:29 - 2014-07-30 21:48 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Skype

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-08-25 08:33 - 2014-10-17 18:33 - 0000122 _____ () C:\Users\Laptop\AppData\Roaming\WB.CFG
2015-05-13 10:13 - 2015-05-13 10:13 - 0000847 _____ () C:\Users\Laptop\AppData\Local\recently-used.xbel
2014-07-30 18:42 - 2014-07-30 18:42 - 0000003 _____ () C:\Users\Laptop\AppData\Local\updater.log
2014-07-30 18:42 - 2015-10-02 10:12 - 0000424 _____ () C:\Users\Laptop\AppData\Local\UserProducts.xml
2014-07-30 14:10 - 2014-07-30 14:10 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-08-06 13:11 - 2015-08-06 13:11 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\Laptop\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-12-02 21:34

==================== Ende von FRST.txt ============================

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-12-2015
durchgeführt von Laptop (2015-12-09 19:20:46)
Gestartet von C:\Users\Irina\Downloads
Windows 10 Home (X64) (2015-08-06 12:50:26)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3702976893-725985698-900371594-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3702976893-725985698-900371594-503 - Limited - Disabled)
Gast (S-1-5-21-3702976893-725985698-900371594-501 - Limited - Disabled)
Irina (S-1-5-21-3702976893-725985698-900371594-1004 - Limited - Enabled) => C:\Users\Irina
Laptop (S-1-5-21-3702976893-725985698-900371594-1001 - Administrator - Enabled) => C:\Users\Laptop

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.235 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Reader X MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.0.0 - Adobe Systems Incorporated)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden
Apple Application Support (32-Bit) (HKLM-x32\...\{649A1FD9-5892-46AD-8DF0-C4A43FF61CB7}) (Version: 4.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{0DE0A178-AC7B-4650-806C-CF226DE03766}) (Version: 4.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Build-a-lot: On Vacation (x32 Version: 2.2.0.110 - WildTangent) Hidden
calibre (HKLM-x32\...\{4A7785E7-924F-4938-98C6-B08F2DAA0961}) (Version: 2.16.0 - Kovid Goyal)
CCleaner (HKLM\...\CCleaner) (Version: 5.07 - Piriform)
Chronicles of Albian (x32 Version: 2.2.0.110 - WildTangent) Hidden
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Cradle Of Egypt Collector's Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.1923 - CyberLink Corp.)
Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.10.63.1020 - Electronic Arts Inc.)
Dropbox (HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Eusing Free Registry Cleaner (HKLM-x32\...\Eusing Free Registry Cleaner) (Version:  - Eusing Software)
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
FDUx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\Firebird SQL Server D) (Version: 2.0.1.13 - MAGIX AG)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.80 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
Heroes of Hellas 3: Athens (x32 Version: 2.2.0.110 - WildTangent) Hidden
HP Deskjet 3520 series - Grundlegende Software für das Gerät (HKLM\...\{15B2F0E3-3FAC-4495-B0FD-398EECFA4100}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Deskjet 3520 series Setup Guide (HKLM-x32\...\{AEEDCEB7-00B8-4BE1-B492-AB04803D5F1E}) (Version: 27.0.0 - Hewlett Packard)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 38645) (Version: 03.05.11 - Intel)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.3.1004 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
iTunes (HKLM\...\{E690A491-702F-4DEC-9977-C015D1DBB57C}) (Version: 12.3.1.23 - Apple Inc.)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
KUx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
Lightshot-5.3.0.0 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.3.0.0 - Skillbrains)
Luxor HD (x32 Version: 2.2.0.110 - WildTangent) Hidden
MAGIX Music Maker for MySpace 15.0.1.8 (D) (HKLM-x32\...\MAGIX Music Maker for MySpace D) (Version: 15.0.1.8 - MAGIX AG)
Mahjongg Artifacts (x32 Version: 2.2.0.110 - WildTangent) Hidden
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version: 6.0.4 - CEWE Stiftung u Co. KGaA)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 42.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 de)) (Version: 42.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98 - WildTangent) Hidden
Mystery P.I. - The London Caper (x32 Version: 2.2.0.95 - WildTangent) Hidden
ooVoo (HKLM-x32\...\{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}) (Version: 3.6.9001 - ooVoo LLC.)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.5.11.2855 - Electronic Arts, Inc.)
PdaNet+ for Android 4.18 (HKLM-x32\...\PdaNet_is1) (Version:  - June Fabrics Technology Inc)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
PlayMemories Home (HKLM-x32\...\{10DD6128-A810-4A90-9523-475D573FBB37}) (Version: 6.3.02.07270 - Sony Corporation)
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.206 - Ihr Firmenname)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7564 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.8400.28121 - Realtek Semiconductor Corp.)
Restore (x32 Version: 1.0.0 - Sony Corporation) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
SmartDeblur (HKLM-x32\...\SmartDeblur_is1) (Version: 2.2 - )
Sony PC Companion 2.10.297 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.297 - Sony)
Spotify (HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\Spotify) (Version: 1.0.16.104.g3b776c9e - Spotify AB)
SSLx64 (Version: 1.0.0 - Sony Corporation ) Hidden
SSLx86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.5.0 - Synaptics Incorporated)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
VAIO - Xperia Link (HKLM-x32\...\{D91558BF-D1F3-411F-AEFE-8774CB406512}) (Version: 1.0.0.08170 - Sony Corporation)
VAIO Care (HKLM\...\{E0F928B4-2BB2-4D7E-B16E-2B202CB58EDE}) (Version: 8.0.0.08150 - Sony Corporation)
VAIO Control Center (HKLM-x32\...\{8E797841-A110-41FD-B17A-3ABC0641187A}) (Version: 6.0.0.08200 - Sony Corporation)
VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.10.0.07270 - Sony Corporation)
VAIO Easy Connect (x32 Version: 1.2.0.08150 - Sony Corporation) Hidden
VAIO Gate (HKLM-x32\...\{14AC95A2-7675-4988-A5BD-3F5B943AED08}) (Version: 3.0.0.08140 - Sony Corporation)
VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 3.0.0.08060 - Sony Corporation)
VAIO Gesture Control (HKLM-x32\...\{692955F2-DE9F-4078-8FAA-858D6F3A1776}) (Version: 2.0.0.08240 - Sony Corporation)
VAIO Gesture Control (x32 Version: 2.0.0.08240 - Sony Corporation) Hidden
VAIO Image Optimizer (HKLM-x32\...\InstallShield_{5597C927-029A-46A7-A0C0-8DABD9891A50}) (Version: 3.0.00.08170 - Sony Corporation)
VAIO Image Optimizer (x32 Version: 3.0.00.08170 - Sony Corporation) Hidden
VAIO Improvement (HKLM-x32\...\{3A26D9BD-0F73-432D-B522-2BA18138F7EF}) (Version: 2.0.0.08090 - Sony Corporation)
VAIO Media Server Settings (HKLM\...\{62A172B2-550E-499D-9A82-5190D18390AA}) (Version: 1.0.0.08240 - Sony Corporation)
VAIO Movie Creator Template Data (HKLM-x32\...\InstallShield_{00A663F1-6C03-48CA-8E85-55806AAE2615}) (Version: 4.0.00.08170 - Sony Corporation)
VAIO Movie Creator Template Data (x32 Version: 4.0.00.08170 - Sony Corporation) Hidden
VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 7.1.0.08060 - Sony Corporation)
VAIO*CPU-Lüfterdiagnose (HKLM-x32\...\{BCE6E3D7-B565-4E1B-AC77-F780666A35FB}) (Version: 1.1.0.09200 - Sony Corporation)
VAIO-Handbuch (HKLM-x32\...\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}) (Version: 3.0.0.08100 - Sony Corporation)
VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.8.0.08212 - Sony Corporation)
VCCx64 (Version: 1.0.0 - Sony Corporation) Hidden
VCCx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VGClientX64 (Version: 1.0.0 - Sony Corporation) Hidden
VHD (x32 Version: 1.0.0 - Sony Corporation) Hidden
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98 - WildTangent) Hidden
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VIx64 (Version: 1.0.0 - Sony Corporation) Hidden
VIx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VMLx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VPMx64 (Version: 1.0.0 - Sony Corporation ) Hidden
VSSTx64 (Version: 1.0.0 - Sony Corporation ) Hidden
VSSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden
VWSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
WildTangent Games App (x32 Version: 4.0.8.7 - WildTangent) Hidden
WildTangent-Spiele (HKLM-x32\...\WildTangent sony Master Uninstall) (Version: 1.0.3.0 - WildTangent)
WinRAR 5.10 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
XperiaLinkx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3702976893-725985698-900371594-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Laptop\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3702976893-725985698-900371594-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Laptop\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3702976893-725985698-900371594-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-3702976893-725985698-900371594-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Laptop\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3702976893-725985698-900371594-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Laptop\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3702976893-725985698-900371594-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Laptop\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3702976893-725985698-900371594-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Laptop\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3702976893-725985698-900371594-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Laptop\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3702976893-725985698-900371594-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Laptop\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3702976893-725985698-900371594-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Laptop\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3702976893-725985698-900371594-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Laptop\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3702976893-725985698-900371594-1004_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Irina\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileCoAuth.exe (Microsoft Corporation)

==================== Wiederherstellungspunkte =========================

23-11-2015 19:37:41 Windows Update
27-11-2015 06:58:11 Windows Update
30-11-2015 18:31:27 Windows Update
04-12-2015 05:00:31 Windows Update
06-12-2015 22:22:22 JRT Pre-Junkware Removal
07-12-2015 08:30:32 JRT Pre-Junkware Removal

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {02D4447B-AB33-473E-88F4-7C63047B2CB7} - System32\Tasks\AdobeAAMUpdater-1.0-Sava-Irina => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {12B38F9C-194B-4B63-A9A2-149AF704C4E2} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {176AAA64-4370-4E93-ADE0-8180D1C0AF74} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-06-01] (Piriform Ltd)
Task: {21744D8F-EDA0-4E53-90D3-42A1A831E455} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2012-06-08] (CyberLink)
Task: {23124CDB-B5F7-4E5A-859E-05DDBEFE056F} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Daily => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-08-18] (Sony Corporation)
Task: {28370AFC-8684-4A93-B6B6-BF18E8984A94} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-08-15] (Sony Corporation)
Task: {304F811F-BBAF-458F-8925-9321BD885AD9} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {366D45C2-849E-4A99-8336-269F6B89362D} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {36E5C9E6-3491-4B62-8634-0AEC5CDFFC70} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-08-14] (Sony Corporation)
Task: {384EB560-4C7C-4504-A426-C92F26D7E297} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2015-07-31] (Sony Corporation)
Task: {39DC2016-2F40-470D-BC85-229E87D7E562} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {43721D61-CE5D-4551-BAEC-28B4A91BC61F} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-irinapotapow@outlook.de => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {4C440ABE-D05C-40D1-B6BF-0DEC9B0953DA} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-08-15] (Sony Corporation)
Task: {679EAF22-FB00-4F65-8DA1-0F1A2BA4FA1E} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2015-08-06] (Sony Corporation)
Task: {702163BA-52AB-4E51-A56E-1799AE96866F} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-11-11] (Microsoft Corporation)
Task: {7E7368FB-7A0B-4C8A-9A14-D0C7F768E3A1} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {82E5EA0C-940D-49F3-89B5-A95763291D64} - System32\Tasks\Sony Corporation\VAIO Care\VCSelfHeal => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-08-15] (Sony Corporation)
Task: {84D12FF4-5E3E-48EA-9B66-218E3E13739A} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {91BB1F2C-C5EF-415E-BC89-8B9635D9E447} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-08-15] (Sony Corporation)
Task: {930794B2-3ACD-494D-A42C-FD202CFC5C40} - System32\Tasks\Sony Corporation\VAIO Control Center\NetworkSetting\NetworkSetting Logon Start => C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient
Task: {9CC3AE19-DA8F-408D-AA31-2AC99D9770B5} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementMonitorUser => C:\Program Files\Sony\VAIO Improvement\vim.exe [2012-08-09] (Sony Corporation)
Task: {9EA6F86A-FA48-41F0-8BCC-B22454E7307C} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementMonitorSystem => C:\Program Files\Sony\VAIO Improvement\vim.exe [2012-08-09] (Sony Corporation)
Task: {A0156288-59EE-46D2-A806-79848F2D5E92} - System32\Tasks\avastBCLRestartS-1-5-21-3702976893-725985698-900371594-1001 => Chrome.exe 
Task: {B1C2C07A-FD55-40D0-A253-0DCFEA22661E} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {B4DED31B-935E-4CEA-A0A4-00BCC61934AD} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Month => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-08-18] (Sony Corporation)
Task: {BC248111-69F3-4928-A889-2CDE643DAB7A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {BF28FA8E-F7D1-488E-BEA3-2767BCE1C57A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-16] (Google Inc.)
Task: {BF2D2952-197B-403D-AEBE-0DEDBCFF596B} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {BF638720-C695-4990-8DE6-52BBDB40BCDA} - System32\Tasks\Sony Corporation\VAIO Gesture Control\VCGULogonTask => C:\Program Files (x86)\Sony\VAIO Camera Gesture Utility\VCGU.exe [2012-08-04] (Sony Corporation)
Task: {C462FA9B-BEC7-4D57-8404-2CCB9F276550} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2012-08-09] (Sony Corporation)
Task: {C699869B-0DFF-4ED6-982A-F873FD32F5E6} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-09] (Adobe Systems Incorporated)
Task: {C828E71D-B421-4859-B415-94C208238596} - System32\Tasks\Sony Corporation\VAIO Care\CRMReminder => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-08-15] (Sony Corporation)
Task: {CD00CE87-5E47-43ED-858C-A4922EA9782C} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-08-15] (Sony Corporation)
Task: {CDAD900A-0E28-44CD-B83F-428CE0544E06} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2012-07-24] (CyberLink Corp.)
Task: {D28061EE-ABF8-444F-BE8A-CB28229DEC37} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-25] (Avast Software s.r.o.)
Task: {F3522EF2-4A0E-4D6B-A16B-71510B410BFA} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {F4B7C6A8-F851-438F-9E62-F13035C769A9} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {F7555D5A-83FA-4A3F-BD39-BE9AD2512BF4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-16] (Google Inc.)
Task: {F790CA96-7323-4A12-9B84-E1E30BEC3540} - System32\Tasks\VHDInformationCheck => C:\Program Files (x86)\Sony\VAIO Recovery\plugins\InformationCheck.exe [2012-07-31] (Sony Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-07-10 12:00 - 2015-07-10 12:00 - 00028160 _____ () C:\WINDOWS\SYSTEM32\efsext.dll
2015-08-06 13:58 - 2015-08-06 13:58 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
2015-08-18 23:22 - 2015-08-11 10:14 - 00404480 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 00085800 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-10-01 19:48 - 2015-09-17 07:48 - 02494712 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-01 19:48 - 2015-09-17 07:48 - 02494712 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-10-01 19:48 - 2015-09-17 06:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-10-01 19:48 - 2015-09-17 06:44 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-10-01 19:47 - 2015-09-17 06:42 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-10-01 19:48 - 2015-09-17 06:42 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-10-01 19:48 - 2015-09-17 06:43 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-05-22 07:52 - 2015-06-10 10:13 - 00113024 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
2012-08-06 10:28 - 2012-08-06 10:28 - 00156672 _____ () C:\Program Files\Sony\VAIO Care\VCPerfService.exe
2015-12-04 16:09 - 2015-12-04 16:09 - 00012800 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1201.10020.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2015-12-04 16:09 - 2015-12-04 16:09 - 11526656 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1201.10020.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2015-11-20 08:30 - 2015-11-20 08:41 - 00258560 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1201.10020.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2015-11-20 08:41 - 2015-11-20 08:42 - 09074176 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.23.23.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2015-11-20 08:41 - 2015-11-20 08:42 - 02416640 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.23.23.0_x64__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll
2015-12-02 23:19 - 2015-12-02 23:19 - 00014336 _____ () C:\Program Files (x86)\Google\Chrome\Application\WTSAPI32.dll
2015-12-09 01:37 - 2015-12-04 23:17 - 01971528 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.80\libglesv2.dll
2015-12-09 01:37 - 2015-12-04 23:17 - 00093512 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.80\libegl.dll
2015-12-09 01:37 - 2015-12-04 23:17 - 28952392 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.80\PepperFlash\pepflashplayer.dll
2012-08-06 10:29 - 2012-08-06 10:29 - 00062464 _____ () C:\Program Files\Sony\VAIO Care\listener.exe
2015-06-25 12:20 - 2015-06-25 12:20 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-06-25 12:20 - 2015-06-25 12:20 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-12-07 21:53 - 2015-12-07 21:53 - 02803200 _____ () C:\Program Files\AVAST Software\Avast\defs\15120702\algo.dll
2015-12-09 19:18 - 2015-12-09 19:18 - 02803200 _____ () C:\Program Files\AVAST Software\Avast\defs\15120900\algo.dll
2012-11-22 09:44 - 2012-06-08 04:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2012-06-08 11:34 - 2012-06-08 11:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2015-05-22 07:52 - 2012-04-30 10:57 - 00039936 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\TMonitorAPI.dll
2015-05-22 07:52 - 2015-10-20 17:44 - 00242176 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\MExplorer.dll
2011-07-07 13:54 - 2011-07-07 13:54 - 00233984 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\Report.dll
2015-05-22 07:52 - 2013-05-20 11:58 - 00620718 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\sqlite3.dll
2015-05-22 07:52 - 2015-04-21 12:22 - 00053248 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\VObject.dll
2015-03-23 18:19 - 2015-03-23 18:19 - 02620416 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\libxt.dll
2015-04-10 10:26 - 2015-04-10 10:26 - 00669696 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\PhoneUpdate.dll
2015-03-18 12:17 - 2015-03-18 12:17 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2012-11-22 09:08 - 2012-08-06 18:54 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3702976893-725985698-900371594-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img3.jpg
HKU\S-1-5-21-3702976893-725985698-900371594-1004\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\Run32: => "Adobe ARM"
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\StartupApproved\StartupFolder: => "Dropbox.lnk"
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\StartupApproved\Run: => "Sony PC Companion"
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\StartupApproved\Run: => "Spotify Web Helper"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{2E61E2E7-8ADD-4B34-A4AB-4394D4552F9F}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{6420D0B2-F91B-44F5-A9D0-424928874773}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{0963363A-65E3-4683-AE60-A628116C560E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B53D31F4-23BF-4D0F-AB54-4910A99C7051}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [UDP Query User{B9D15DC6-B934-4831-BD7E-B28CBDA4F613}C:\users\laptop\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\laptop\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{B83E51F4-3E47-456F-BF0A-ACC2559DBF6D}C:\users\laptop\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\laptop\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{8E7ECED5-3E11-404E-816E-E5F14D5479B4}C:\users\laptop\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\laptop\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{2816776A-3CD2-4B0C-80A1-B95FDC8341F8}C:\users\laptop\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\laptop\appdata\roaming\spotify\spotify.exe
FirewallRules: [{2316CADD-C0F7-4D6E-913C-CD89D0FCDAFD}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{F73BF5A0-135D-4DBC-B770-5E59DF0A74F0}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{F8762D5A-F23A-4263-8A45-268497A399CE}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{F6FE2ACF-A11E-4A1B-8A00-23BAC6B860F4}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{79B56632-2F78-4834-84EF-6C6CE55DB708}] => (Allow) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{8EEED0CC-A2E6-465D-88A0-AD7FF2A86E20}] => (Allow) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{2BAD79FC-BA32-4C89-ADCA-1BF353549512}] => (Allow) C:\Users\Laptop\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{06A52A83-35A3-43DC-AE42-BDDAE1B00F0E}] => (Allow) C:\Users\Laptop\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{C621732D-06DB-41FC-9726-7F5AAA91115F}] => (Allow) C:\Program Files\HP\HP Deskjet 3520 series\Bin\DeviceSetup.exe
FirewallRules: [{D580D8E7-9151-4CD7-9692-B55CEE609357}] => (Allow) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{3DD3813A-3C05-48DA-9B22-B38D25C6911A}] => (Allow) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [TCP Query User{7E4B6C9E-B3EB-4CF4-881C-8ABF2F26C476}C:\users\laptop\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\laptop\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{C82B29E9-8FCD-47D1-8EFC-1C56575055CC}C:\users\laptop\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\laptop\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{F7637B2B-A6BB-4E9C-B4D0-4AB3084B8AB8}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{034401F3-E7DE-4B46-A6C2-61ECF9F6A3B6}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{4C2E230D-A81C-4AA6-8398-C5F06AB03304}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [UDP Query User{5F6ABBF7-347F-4158-8FA7-A9C7F2D7A85C}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [TCP Query User{B9D5E086-D389-4343-B1E5-DC3FC0C754E9}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{3E845074-4EAA-49BF-90F3-95FECC370A74}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{4293B0A3-2742-42D1-B429-1E631A21C361}] => (Allow) C:\Users\Laptop\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{680D7C50-8E1C-4A6A-8F53-108939D651B0}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{56A6FA08-B35A-4061-9127-613A29FB964A}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{17D27FE1-85A1-4FAB-856E-84EAAA61B431}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{F9DAD02D-0209-44F1-B4D3-375A1D06EF44}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{54619533-0228-47CC-A315-AC97E72C0328}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{FD6C2430-2768-4735-A6E2-971632BF70C5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{0B0E86F7-C64A-40BD-A869-50EAA5016BA6}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{16DBC67A-76DA-4704-BEB1-A50BB28FF2D8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D5FACF70-E729-4DE3-BF69-6357B2B8E01A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{82BF736F-FD42-4E0A-80EA-FC0704E972B1}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/09/2015 07:15:49 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.

Error: (12/09/2015 07:15:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   14 0.F.C.B.D.F.F.2.1.C.C.3.B.2.1.B.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR Sava-2.local.

Error: (12/09/2015 07:15:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.2.102:5353   12 0.F.C.B.D.F.F.2.1.C.C.3.B.2.1.B.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR Sava.local.

Error: (12/09/2015 07:15:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   14 102.2.168.192.in-addr.arpa. PTR Sava-2.local.

Error: (12/09/2015 07:15:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.2.102:5353   12 102.2.168.192.in-addr.arpa. PTR Sava.local.

Error: (12/09/2015 07:15:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname Sava.local already in use; will try Sava-2.local instead

Error: (12/09/2015 07:15:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister    4 Sava.local. Addr 192.168.2.102

Error: (12/09/2015 07:15:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.2.102:5353   16 Sava.local. AAAA 2003:0056:CB5F:E6A0:B12B:3CC1:2FFD:BCF0

Error: (12/09/2015 12:02:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname Sava.local already in use; will try Sava-2.local instead

Error: (12/09/2015 12:02:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister    4 Sava.local. Addr 192.168.2.102


Systemfehler:
=============
Error: (12/08/2015 06:45:50 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {F3B4E234-7A68-4E43-B813-E4BA55A065F6}

Error: (12/08/2015 06:44:50 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x8024200b fehlgeschlagen: Hewlett-Packard  - Imaging - Null Print - HP Deskjet 3520 series

Error: (12/08/2015 06:33:17 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/08/2015 06:33:17 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/08/2015 06:33:16 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/08/2015 06:33:15 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/08/2015 06:33:15 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/08/2015 06:33:14 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/08/2015 06:33:13 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/08/2015 06:33:13 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz
Prozentuale Nutzung des RAM: 72%
Installierter physikalischer RAM: 3975.27 MB
Verfügbarer physikalischer RAM: 1113 MB
Summe virtueller Speicher: 7559.27 MB
Verfügbarer virtueller Speicher: 4006.43 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:434.99 GB) (Free:257.65 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 7E33E634)

Partition: GPT.

==================== Ende von Addition.txt ============================

M-K-D-B · 10.12.2015, 21:10

Servus,

ich übernehme für schrauber, er hat gerade viel um die Ohren.

Alle Tools als Administrator ausführen (das hasst du bestimmt beim letzten Mal nicht gemacht, wie ich bei FRST gesehen habe):

Schritt 1
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2
Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 4

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Bitte poste mit deiner nächsten Antwort

die Logdatei von AdwCleaner,
die Logdatei von MBAM,
die Logdatei von JRT,
die beiden neuen Logdateien von FRST.

M-K-D-B · 14.12.2015, 21:11

Fehlende Rückmeldung
Dieses Thema wurde aus den Abos gelöscht. Somit bekomme ich keine Benachrichtigung über neue Antworten.
PM an mich falls Du denoch weiter machen willst.

Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen!

irina97 · 15.12.2015, 20:30

Code:

ATTFilter

# AdwCleaner v5.025 - Bericht erstellt am 15/12/2015 um 20:16:49
# Aktualisiert am 13/12/2015 von Xplode
# Datenbank : 2015-12-13.2 [Server]
# Betriebssystem : Windows 10 Home  (x64)
# Benutzername : Laptop - SAVA
# Gestartet von : C:\Users\Irina\Downloads\AdwCleaner_5.025.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****

[-] Ordner Gelöscht : C:\Users\Laptop\AppData\Local\Systweak
[-] Ordner Gelöscht : C:\Users\Laptop\AppData\Roaming\Systweak
[-] Ordner Gelöscht : C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner

***** [ Dateien ] *****


***** [ DLLs ] *****


***** [ Verknüpfungen ] *****


***** [ Aufgabenplanung ] *****


***** [ Registrierungsdatenbank ] *****

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\CLASSES\APPID\DPBHO.DLL
[-] Schlüssel Gelöscht : HKCU\Software\OCS
[-] Schlüssel Gelöscht : HKU\S-1-5-21-3702976893-725985698-900371594-1004\Software\OCS

***** [ Internetbrowser ] *****


*************************

:: "Tracing" Schlüssel gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Chrome Richtlinien gelöscht

########## EOF - \AdwCleaner\AdwCleaner[C2].txt - [1243 Bytes] ##########

Code:

ATTFilter

# AdwCleaner v5.025 - Bericht erstellt am 15/12/2015 um 20:14:49
# Aktualisiert am 13/12/2015 von Xplode
# Datenbank : 2015-12-13.2 [Server]
# Betriebssystem : Windows 10 Home  (x64)
# Benutzername : Laptop - SAVA
# Gestartet von : C:\Users\Irina\Downloads\AdwCleaner_5.025.exe
# Option : Suchlauf
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****

Ordner Gefunden : C:\Users\Laptop\AppData\Local\Systweak
Ordner Gefunden : C:\Users\Laptop\AppData\Roaming\Systweak
Ordner Gefunden : C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner

***** [ Dateien ] *****


***** [ DLL ] *****


***** [ Verknüpfungen ] *****


***** [ Aufgabenplanung ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKLM\SOFTWARE\CLASSES\APPID\DPBHO.DLL
Schlüssel Gefunden : HKCU\Software\OCS
Schlüssel Gefunden : HKU\S-1-5-21-3702976893-725985698-900371594-1004\Software\OCS

***** [ Internetbrowser ] *****

Quarantine

Code:

ATTFilter

C:\Program Files\{111F3E75-9396-47A4-B9FC-7FEDBD8B4BB3}\config.json->\AdwCleaner\Quarantine\C\Program Files\{111F3E75-9396-47A4-B9FC-7FEDBD8B4BB3}\config.json.vir
C:\Program Files\{111F3E75-9396-47A4-B9FC-7FEDBD8B4BB3}\def.bin->\AdwCleaner\Quarantine\C\Program Files\{111F3E75-9396-47A4-B9FC-7FEDBD8B4BB3}\def.bin.vir
C:\Program Files\{111F3E75-9396-47A4-B9FC-7FEDBD8B4BB3}\{72E2374D-87A9-4371-B96F-5879A6459AE8}.bin->\AdwCleaner\Quarantine\C\Program Files\{111F3E75-9396-47A4-B9FC-7FEDBD8B4BB3}\{72E2374D-87A9-4371-B96F-5879A6459AE8}.bin.vir
C:\Program Files (x86)\More Results Hub\7za.exe->\AdwCleaner\Quarantine\C\Program Files (x86)\More Results Hub\7za.exe.vir
C:\Program Files (x86)\More Results Hub\Uninstaller.exe->\AdwCleaner\Quarantine\C\Program Files (x86)\More Results Hub\Uninstaller.exe.vir
C:\Program Files (x86)\More Results Hub\Extensions\a8345a32-3b31-410a-bfbf-f2fdb81ba019.dll->\AdwCleaner\Quarantine\C\Program Files (x86)\More Results Hub\Extensions\a8345a32-3b31-410a-bfbf-f2fdb81ba019.dll.vir
C:\Program Files (x86)\More Results Hub\Extensions\khdgnjepckoinjdlnoflbncnldbbmiie.crx->\AdwCleaner\Quarantine\C\Program Files (x86)\More Results Hub\Extensions\khdgnjepckoinjdlnoflbncnldbbmiie.crx.vir
C:\Program Files (x86)\More Results Hub\Extensions\{15871684-fd7f-4505-a902-3e406bbb2a7d}.xpi->\AdwCleaner\Quarantine\C\Program Files (x86)\More Results Hub\Extensions\{15871684-fd7f-4505-a902-3e406bbb2a7d}.xpi.vir
C:\Program Files (x86)\{8C9F5987-5B73-48A8-B424-204D654BAE42}\config.json->\AdwCleaner\Quarantine\C\Program Files (x86)\{8C9F5987-5B73-48A8-B424-204D654BAE42}\config.json.vir
C:\Program Files (x86)\{8C9F5987-5B73-48A8-B424-204D654BAE42}\def.bin->\AdwCleaner\Quarantine\C\Program Files (x86)\{8C9F5987-5B73-48A8-B424-204D654BAE42}\def.bin.vir
C:\Program Files (x86)\{8C9F5987-5B73-48A8-B424-204D654BAE42}\{D2F7D2D8-AE6D-42A5-BF71-B25DD26BCD3A}.bin->\AdwCleaner\Quarantine\C\Program Files (x86)\{8C9F5987-5B73-48A8-B424-204D654BAE42}\{D2F7D2D8-AE6D-42A5-BF71-B25DD26BCD3A}.bin.vir
C:\Program Files (x86)\Common Files\421f63af-3585-4410-b9ef-1ec5abd70f34\updater.exe->\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\421f63af-3585-4410-b9ef-1ec5abd70f34\updater.exe.vir
C:\ProgramData\IePluginServices\trzB6BF.tmp->\AdwCleaner\Quarantine\C\ProgramData\IePluginServices\trzB6BF.tmp.vir
C:\ProgramData\IePluginServices\update\conf->\AdwCleaner\Quarantine\C\ProgramData\IePluginServices\update\conf.vir
C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_1\config.json->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_1\config.json.vir
C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_1\def.bin->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_1\def.bin.vir
C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_1\dpl.js->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_1\dpl.js.vir
C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_1\g.js->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_1\g.js.vir
C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_1\icon128.png->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_1\icon128.png.vir
C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_1\icon48.png->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_1\icon48.png.vir
C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_1\jquery.min.js->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_1\jquery.min.js.vir
C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_1\manifest.json->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_1\manifest.json.vir
C:\Users\Irina\AppData\Roaming\AdvertismentImages\15.gif->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Roaming\AdvertismentImages\15.gif.vir
C:\Users\Irina\AppData\Roaming\AdvertismentImages\27.gif->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Roaming\AdvertismentImages\27.gif.vir
C:\Users\Irina\AppData\Roaming\AdvertismentImages\30.gif->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Roaming\AdvertismentImages\30.gif.vir
C:\Users\Irina\AppData\Roaming\AdvertismentImages\33.gif->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Roaming\AdvertismentImages\33.gif.vir
C:\Users\Irina\AppData\Roaming\AdvertismentImages\6.gif->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Roaming\AdvertismentImages\6.gif.vir
C:\Users\Irina\AppData\Roaming\AdvertismentImages\close.bmp->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Roaming\AdvertismentImages\close.bmp.vir
C:\Users\Irina\AppData\Roaming\AdvertismentImages\html\02EE8CC.html->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Roaming\AdvertismentImages\html\02EE8CC.html.vir
C:\Users\Irina\AppData\Roaming\AdvertismentImages\html\39E970A.html->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Roaming\AdvertismentImages\html\39E970A.html.vir
C:\Users\Irina\AppData\Roaming\AdvertismentImages\html\7420765.html->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Roaming\AdvertismentImages\html\7420765.html.vir
C:\Users\Irina\AppData\Roaming\AdvertismentImages\html\AE840D4.html->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Roaming\AdvertismentImages\html\AE840D4.html.vir
C:\Users\Irina\AppData\Roaming\AdvertismentImages\html\C42BA4A.html->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Roaming\AdvertismentImages\html\C42BA4A.html.vir
C:\Users\Irina\AppData\Roaming\AdvertismentImages\html\CEBC87F.html->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Roaming\AdvertismentImages\html\CEBC87F.html.vir
C:\Users\Irina\AppData\Roaming\AdvertismentImages\html\E09DE6C.html->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Roaming\AdvertismentImages\html\E09DE6C.html.vir
C:\Users\Irina\AppData\Roaming\AdvertismentImages\html\EC0233C.html->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Roaming\AdvertismentImages\html\EC0233C.html.vir
C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_0\config.json->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_0\config.json.vir
C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_0\def.bin->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_0\def.bin.vir
C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_0\dpl.js->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_0\dpl.js.vir
C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_0\g.js->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_0\g.js.vir
C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_0\icon128.png->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_0\icon128.png.vir
C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_0\icon48.png->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_0\icon48.png.vir
C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_0\jquery.min.js->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_0\jquery.min.js.vir
C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_0\manifest.json->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\imihaomkljoeobkmmladonhojoloicef\2.2.15_0\manifest.json.vir
C:\Users\Laptop\AppData\Roaming\Astromenda\UpdateProc\config.dat->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\Astromenda\UpdateProc\config.dat.vir
C:\Users\Laptop\AppData\Roaming\Astromenda\UpdateProc\info.dat->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\Astromenda\UpdateProc\info.dat.vir
C:\Users\Laptop\AppData\Roaming\Astromenda\UpdateProc\STTL.DAT->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\Astromenda\UpdateProc\STTL.DAT.vir
C:\Users\Laptop\AppData\Roaming\Astromenda\UpdateProc\TTL.DAT->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\Astromenda\UpdateProc\TTL.DAT.vir
C:\Users\Laptop\AppData\Roaming\Systweak\ssd\SSDPTstub.exe->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\Systweak\ssd\SSDPTstub.exe.vir
C:\Users\Laptop\AppData\Roaming\AdvertismentImages\13.gif->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\AdvertismentImages\13.gif.vir
C:\Users\Laptop\AppData\Roaming\AdvertismentImages\19.gif->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\AdvertismentImages\19.gif.vir
C:\Users\Laptop\AppData\Roaming\AdvertismentImages\22.gif->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\AdvertismentImages\22.gif.vir
C:\Users\Laptop\AppData\Roaming\AdvertismentImages\25.gif->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\AdvertismentImages\25.gif.vir
C:\Users\Laptop\AppData\Roaming\AdvertismentImages\33.gif->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\AdvertismentImages\33.gif.vir
C:\Users\Laptop\AppData\Roaming\AdvertismentImages\close.bmp->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\AdvertismentImages\close.bmp.vir
C:\Users\Laptop\AppData\Roaming\AdvertismentImages\html\16115EE.html->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\AdvertismentImages\html\16115EE.html.vir
C:\Users\Laptop\AppData\Roaming\AdvertismentImages\html\83A7856.html->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\AdvertismentImages\html\83A7856.html.vir
C:\Users\Laptop\AppData\Roaming\AdvertismentImages\html\AFDCFA8.html->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\AdvertismentImages\html\AFDCFA8.html.vir
C:\Users\Laptop\AppData\Roaming\AdvertismentImages\html\BB64EA8.html->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\AdvertismentImages\html\BB64EA8.html.vir
C:\Users\Laptop\AppData\Roaming\AdvertismentImages\html\FD3BE7E.html->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\AdvertismentImages\html\FD3BE7E.html.vir
C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_imihaomkljoeobkmmladonhojoloicef_0.localstorage->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_imihaomkljoeobkmmladonhojoloicef_0.localstorage.vir
C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_imihaomkljoeobkmmladonhojoloicef_0.localstorage-journal->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_imihaomkljoeobkmmladonhojoloicef_0.localstorage-journal.vir
C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_imihaomkljoeobkmmladonhojoloicef_0.localstorage->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_imihaomkljoeobkmmladonhojoloicef_0.localstorage.vir
C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_imihaomkljoeobkmmladonhojoloicef_0.localstorage-journal->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_imihaomkljoeobkmmladonhojoloicef_0.localstorage-journal.vir
C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_st.chatango.com_0.localstorage->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_st.chatango.com_0.localstorage.vir
C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_st.chatango.com_0.localstorage-journal->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_st.chatango.com_0.localstorage-journal.vir
C:\Users\Irina\AppData\Roaming\Mozilla\Firefox\Profiles\6runl822.default\searchplugins\yahoo.xml->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Roaming\Mozilla\Firefox\Profiles\6runl822.default\searchplugins\yahoo.xml.vir
C:\Users\Irina\AppData\Roaming\Mozilla\Firefox\Profiles\6runl822.default\searchplugins\yahoo.xml->\AdwCleaner\Quarantine\C\Users\Irina\AppData\Roaming\Mozilla\Firefox\Profiles\6runl822.default\searchplugins\yahoo.xml.vir
C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_imihaomkljoeobkmmladonhojoloicef_0.localstorage->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_imihaomkljoeobkmmladonhojoloicef_0.localstorage.vir
C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_imihaomkljoeobkmmladonhojoloicef_0.localstorage-journal->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_imihaomkljoeobkmmladonhojoloicef_0.localstorage-journal.vir
C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_imihaomkljoeobkmmladonhojoloicef_0.localstorage->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_imihaomkljoeobkmmladonhojoloicef_0.localstorage.vir
C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_imihaomkljoeobkmmladonhojoloicef_0.localstorage-journal->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_imihaomkljoeobkmmladonhojoloicef_0.localstorage-journal.vir
C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\56sq1vfo.default\user.js->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\56sq1vfo.default\user.js.vir
C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\56sq1vfo.default\searchplugins\yahoo.xml->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\56sq1vfo.default\searchplugins\yahoo.xml.vir
C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\56sq1vfo.default\searchplugins\yahoo.xml->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\56sq1vfo.default\searchplugins\yahoo.xml.vir
C:\WINDOWS\SysNative\roboot64.exe->\AdwCleaner\Quarantine\C\WINDOWS\SysNative\roboot64.exe.vir
C:\WINDOWS\SysNative\DnsBlockUpdateSvc.exe->\AdwCleaner\Quarantine\C\WINDOWS\SysNative\DnsBlockUpdateSvc.exe.vir
C:\WINDOWS\SysNative\dns.block->\AdwCleaner\Quarantine\C\WINDOWS\SysNative\dns.block.vir
C:\WINDOWS\SysNative\GroupPolicy\Machine\Registry.pol->\AdwCleaner\Quarantine\C\WINDOWS\SysNative\GroupPolicy\Machine\Registry.pol.vir
C:\WINDOWS\SysNative\GroupPolicy\GPT.ini->\AdwCleaner\Quarantine\C\WINDOWS\SysNative\GroupPolicy\GPT.ini.vir
C:\WINDOWS\SysWOW64\dns.block->\AdwCleaner\Quarantine\C\WINDOWS\SysWOW64\dns.block.vir
C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Chrome App Launcher.lnk->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Chrome App Launcher.lnk.vir
C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\WhatsApp™ Web.lnk->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\WhatsApp™ Web.lnk.vir
C:\Users\Laptop\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk.vir
C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner\Eusing Free Registry Cleaner on the Web.lnk->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner\Eusing Free Registry Cleaner on the Web.lnk.vir
C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner\Eusing Free Registry Cleaner.lnk->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner\Eusing Free Registry Cleaner.lnk.vir
C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner\Help.lnk->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner\Help.lnk.vir
C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner\Uninstall Eusing Free Registry Cleaner.lnk->\AdwCleaner\Quarantine\C\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner\Uninstall Eusing Free Registry Cleaner.lnk.vir

M-K-D-B · 15.12.2015, 20:53

Servus,

dann weiter mit den anderen Schritten.

irina97 · 15.12.2015, 21:48

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org


Update, 15.12.2015 02:13, SYSTEM, SAVA, Scheduler, Domain Database, 2015.12.14.1, 2015.12.15.1, 
Protection, 15.12.2015 02:13, SYSTEM, SAVA, Protection, Refresh, Starting, 
Protection, 15.12.2015 02:13, SYSTEM, SAVA, Protection, Malicious Website Protection, Stopping, 
Protection, 15.12.2015 02:13, SYSTEM, SAVA, Protection, Malicious Website Protection, Stopped, 
Protection, 15.12.2015 02:13, SYSTEM, SAVA, Protection, Refresh, Success, 
Protection, 15.12.2015 02:13, SYSTEM, SAVA, Protection, Malicious Website Protection, Starting, 
Protection, 15.12.2015 02:13, SYSTEM, SAVA, Protection, Malicious Website Protection, Started, 
Protection, 15.12.2015 05:19, SYSTEM, SAVA, Protection, Malware Protection, Starting, 
Protection, 15.12.2015 05:19, SYSTEM, SAVA, Protection, Malware Protection, Started, 
Protection, 15.12.2015 05:19, SYSTEM, SAVA, Protection, Malicious Website Protection, Starting, 
Protection, 15.12.2015 05:19, SYSTEM, SAVA, Protection, Malicious Website Protection, Started, 
Update, 15.12.2015 09:03, SYSTEM, SAVA, Scheduler, Malware Database, 2015.12.14.6, 2015.12.15.2, 
Protection, 15.12.2015 09:03, SYSTEM, SAVA, Protection, Refresh, Starting, 
Protection, 15.12.2015 09:03, SYSTEM, SAVA, Protection, Malicious Website Protection, Stopping, 
Protection, 15.12.2015 09:03, SYSTEM, SAVA, Protection, Malicious Website Protection, Stopped, 
Protection, 15.12.2015 09:03, SYSTEM, SAVA, Protection, Refresh, Success, 
Protection, 15.12.2015 09:03, SYSTEM, SAVA, Protection, Malicious Website Protection, Starting, 
Protection, 15.12.2015 09:03, SYSTEM, SAVA, Protection, Malicious Website Protection, Started, 
Update, 15.12.2015 12:50, SYSTEM, SAVA, Scheduler, Malware Database, 2015.12.15.2, 2015.12.15.3, 
Protection, 15.12.2015 12:50, SYSTEM, SAVA, Protection, Refresh, Starting, 
Protection, 15.12.2015 12:50, SYSTEM, SAVA, Protection, Malicious Website Protection, Stopping, 
Protection, 15.12.2015 12:50, SYSTEM, SAVA, Protection, Malicious Website Protection, Stopped, 
Protection, 15.12.2015 12:50, SYSTEM, SAVA, Protection, Refresh, Success, 
Protection, 15.12.2015 12:50, SYSTEM, SAVA, Protection, Malicious Website Protection, Starting, 
Protection, 15.12.2015 12:50, SYSTEM, SAVA, Protection, Malicious Website Protection, Started, 
Update, 15.12.2015 15:12, SYSTEM, SAVA, Scheduler, Domain Database, 2015.12.15.1, 2015.12.15.2, 
Protection, 15.12.2015 15:12, SYSTEM, SAVA, Protection, Refresh, Starting, 
Protection, 15.12.2015 15:12, SYSTEM, SAVA, Protection, Malicious Website Protection, Stopping, 
Protection, 15.12.2015 15:12, SYSTEM, SAVA, Protection, Malicious Website Protection, Stopped, 
Protection, 15.12.2015 15:12, SYSTEM, SAVA, Protection, Refresh, Success, 
Protection, 15.12.2015 15:12, SYSTEM, SAVA, Protection, Malicious Website Protection, Starting, 
Protection, 15.12.2015 15:12, SYSTEM, SAVA, Protection, Malicious Website Protection, Started, 
Update, 15.12.2015 16:17, SYSTEM, SAVA, Scheduler, Domain Database, 2015.12.15.2, 2015.12.15.3, 
Protection, 15.12.2015 16:17, SYSTEM, SAVA, Protection, Refresh, Starting, 
Protection, 15.12.2015 16:17, SYSTEM, SAVA, Protection, Malicious Website Protection, Stopping, 
Protection, 15.12.2015 16:17, SYSTEM, SAVA, Protection, Malicious Website Protection, Stopped, 
Protection, 15.12.2015 16:17, SYSTEM, SAVA, Protection, Refresh, Success, 
Protection, 15.12.2015 16:17, SYSTEM, SAVA, Protection, Malicious Website Protection, Starting, 
Protection, 15.12.2015 16:17, SYSTEM, SAVA, Protection, Malicious Website Protection, Started, 
Update, 15.12.2015 17:08, SYSTEM, SAVA, Scheduler, Malware Database, 2015.12.15.3, 2015.12.15.4, 
Protection, 15.12.2015 17:08, SYSTEM, SAVA, Protection, Refresh, Starting, 
Protection, 15.12.2015 17:08, SYSTEM, SAVA, Protection, Malicious Website Protection, Stopping, 
Protection, 15.12.2015 17:08, SYSTEM, SAVA, Protection, Malicious Website Protection, Stopped, 
Protection, 15.12.2015 17:08, SYSTEM, SAVA, Protection, Refresh, Success, 
Protection, 15.12.2015 17:08, SYSTEM, SAVA, Protection, Malicious Website Protection, Starting, 
Protection, 15.12.2015 17:08, SYSTEM, SAVA, Protection, Malicious Website Protection, Started, 
Update, 15.12.2015 17:49, SYSTEM, SAVA, Scheduler, Domain Database, 2015.12.15.3, 2015.12.15.4, 
Protection, 15.12.2015 17:49, SYSTEM, SAVA, Protection, Refresh, Starting, 
Protection, 15.12.2015 17:49, SYSTEM, SAVA, Protection, Malicious Website Protection, Stopping, 
Protection, 15.12.2015 17:49, SYSTEM, SAVA, Protection, Malicious Website Protection, Stopped, 
Protection, 15.12.2015 17:49, SYSTEM, SAVA, Protection, Refresh, Success, 
Protection, 15.12.2015 17:49, SYSTEM, SAVA, Protection, Malicious Website Protection, Starting, 
Protection, 15.12.2015 17:49, SYSTEM, SAVA, Protection, Malicious Website Protection, Started, 
Update, 15.12.2015 18:49, SYSTEM, SAVA, Scheduler, IP Database, 2015.12.14.4, 2015.12.15.1, 
Protection, 15.12.2015 18:49, SYSTEM, SAVA, Protection, Refresh, Starting, 
Protection, 15.12.2015 18:49, SYSTEM, SAVA, Protection, Malicious Website Protection, Stopping, 
Protection, 15.12.2015 18:49, SYSTEM, SAVA, Protection, Malicious Website Protection, Stopped, 
Protection, 15.12.2015 18:49, SYSTEM, SAVA, Protection, Refresh, Success, 
Protection, 15.12.2015 18:49, SYSTEM, SAVA, Protection, Malicious Website Protection, Starting, 
Protection, 15.12.2015 18:49, SYSTEM, SAVA, Protection, Malicious Website Protection, Started, 
Update, 15.12.2015 19:56, SYSTEM, SAVA, Scheduler, Malware Database, 2015.12.15.4, 2015.12.15.5, 
Protection, 15.12.2015 19:56, SYSTEM, SAVA, Protection, Refresh, Starting, 
Protection, 15.12.2015 19:56, SYSTEM, SAVA, Protection, Malicious Website Protection, Stopping, 
Protection, 15.12.2015 19:56, SYSTEM, SAVA, Protection, Malicious Website Protection, Stopped, 
Protection, 15.12.2015 19:56, SYSTEM, SAVA, Protection, Refresh, Success, 
Protection, 15.12.2015 19:56, SYSTEM, SAVA, Protection, Malicious Website Protection, Starting, 
Protection, 15.12.2015 19:56, SYSTEM, SAVA, Protection, Malicious Website Protection, Started, 
Protection, 15.12.2015 20:19, SYSTEM, SAVA, Protection, Malware Protection, Starting, 
Protection, 15.12.2015 20:19, SYSTEM, SAVA, Protection, Malware Protection, Started, 
Protection, 15.12.2015 20:19, SYSTEM, SAVA, Protection, Malicious Website Protection, Starting, 
Protection, 15.12.2015 20:19, SYSTEM, SAVA, Protection, Malicious Website Protection, Started, 

(end)

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.1 (11.24.2015)
Operating System: Windows 10 Home x64 
Ran by Laptop (Administrator) on 15.12.2015 at 21:24:29,23
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 1 

Successfully deleted: C:\Program Files (x86)\eusing free registry cleaner (Folder) 



Registry: 0 





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 15.12.2015 at 21:28:02,96
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:14-12-2015
durchgeführt von Laptop (Administrator) auf SAVA (15-12-2015 21:31:43)
Gestartet von C:\Users\Irina\Downloads
Geladene Profile: Laptop & Irina (Verfügbare Profile: Laptop & Irina)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
() C:\Program Files\Sony\VAIO Care\listener.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Irina\Downloads\FRST64 (1).exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1403136 2015-08-11] (Realtek Semiconductor)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-10-16] (Apple Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3928264 2015-05-27] (Synaptics Incorporated)
HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [68776 2012-08-18] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [724576 2012-07-27] (Sony Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => c:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2010-11-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [932288 2010-11-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [152896 2012-06-25] (Intel Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-06-30] (Avast Software s.r.o.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-11-18] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\Run: [HP Deskjet 3520 series (NET)] => C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\Run: [Spotify Web Helper] => C:\Users\Laptop\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2030912 2015-11-08] (Spotify Ltd)
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony)
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53735968 2015-08-07] (Skype Technologies S.A.)
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\Run: [Spotify] => C:\Users\Laptop\AppData\Roaming\Spotify\Spotify.exe [7736128 2015-11-08] (Spotify Ltd)
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [517632 2015-10-30] (Microsoft Corporation)
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\RunOnce: [Report] => \AdwCleaner\AdwCleaner[C2].txt
HKU\S-1-5-21-3702976893-725985698-900371594-1004\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony)
HKU\S-1-5-21-3702976893-725985698-900371594-1004\...\Run: [GoogleChromeAutoLaunch_7DBF8F1D6DD5F67753D3A112420791D3] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [799560 2015-12-04] (Google Inc.)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Laptop\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64\FileSyncShell64.dll [2015-10-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Laptop\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64\FileSyncShell64.dll [2015-10-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Laptop\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64\FileSyncShell64.dll [2015-10-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-06-25] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Laptop\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncShell.dll [2015-10-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Laptop\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncShell.dll [2015-10-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Laptop\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncShell.dll [2015-10-27] (Microsoft Corporation)
Startup: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2014-10-12]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2014-12-16]
ShortcutTarget: Dropbox.lnk -> C:\Users\Laptop\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PdaNet Desktop.lnk [2015-05-22]
ShortcutTarget: PdaNet Desktop.lnk -> C:\Program Files (x86)\PdaNet for Android\PdaNetPC.exe ()
Startup: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk [2015-11-25]
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk -> C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{3b3db353-91fa-4aca-9fdf-a3a7337e29ea}: [DhcpNameServer] 62.24.0.88
Tcpip\..\Interfaces\{b8708675-665a-4c35-b978-d30f8072384e}: [DhcpNameServer] 192.168.2.1 192.168.2.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-3702976893-725985698-900371594-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3702976893-725985698-900371594-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://vaioportal.sony.eu
HKU\S-1-5-21-3702976893-725985698-900371594-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006
HKU\S-1-5-21-3702976893-725985698-900371594-1004\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3702976893-725985698-900371594-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKU\S-1-5-21-3702976893-725985698-900371594-1004\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://vaioportal.sony.eu
HKU\S-1-5-21-3702976893-725985698-900371594-1004\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006
HKU\S-1-5-21-3702976893-725985698-900371594-1004\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://vaioportal.sony.eu
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3702976893-725985698-900371594-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3702976893-725985698-900371594-1001 -> OldSearch URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3702976893-725985698-900371594-1004 -> {5FE367D3-0932-4B0C-BF13-1F0B58C117C3} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q312&_nkw={searchTerms}
SearchScopes: HKU\S-1-5-21-3702976893-725985698-900371594-1004 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-08-13] (Qualcomm Atheros Commnucations)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-06-25] (Avast Software s.r.o.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-11-15] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-07-02] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-06-25] (Avast Software s.r.o.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-02] (Oracle Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\56sq1vfo.default
FF SelectedSearchEngine: Default
FF DefaultSearchEngine: Default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-09] ()
FF Plugin: @java.com/DTPlugin,version=10.5.0 -> C:\WINDOWS\system32\npDeployJava1.dll [2012-11-22] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-09] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-08] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-02-13] (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-08-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-08-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.5.0 -> C:\WINDOWS\SysWOW64\npDeployJava1.dll [2012-11-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-02] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-05-12] ()
FF Extension: FoxyProxy Standard - C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\56sq1vfo.default\extensions\foxyproxy@eric.h.jung [2015-07-12]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-12]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => nicht gefunden

Chrome: 
=======
CHR Profile: C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-06]
CHR Extension: (Google Präsentationen) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-06]
CHR Extension: (Google Drive) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-06]
CHR Extension: (YouTube) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-06]
CHR Extension: (Google-Suche) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-06]
CHR Extension: (Google Präsentationen) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-06]
CHR Extension: (Google Präsentationen) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-06]
CHR Extension: (Google Präsentationen) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-12-06]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-06]
CHR Extension: (Google Mail) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-06]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-18]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2014-10-12] (Adobe Systems) [Datei ist nicht signiert]
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-06-25] (Avast Software s.r.o.)
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\MAGIX\Common\Database\bin\fbserver.exe [1527900 2005-11-17] (MAGIX®) [Datei ist nicht signiert]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-10-26] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-08-06] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-08-06] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [623784 2012-08-18] (Sony Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2057736 2015-09-13] (Electronic Arts)
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [474208 2012-07-27] (Sony Corporation)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] () [Datei ist nicht signiert]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2012-08-08] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1653272 2015-07-31] (Sony Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-13] (Atheros) [Datei ist nicht signiert]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-06-25] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-06-25] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-06-25] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-06-25] ()
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-06-25] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-30] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-06-25] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-06-25] ()
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2015-12-07] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek                                            )
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-05-27] (Synaptics Incorporated)
R3 SOWS; C:\Windows\System32\drivers\sows.sys [24280 2012-06-11] (Sony Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-15 21:30 - 2015-12-15 21:30 - 02369536 _____ (Farbar) C:\Users\Irina\Downloads\FRST64 (1).exe
2015-12-15 21:21 - 2015-12-15 21:23 - 01599336 _____ (Malwarebytes) C:\Users\Irina\Downloads\JRT (2).exe
2015-12-15 20:27 - 2015-12-15 21:16 - 00000000 ____D C:\Users\Irina\Desktop\Neuer Ordner
2015-12-15 20:12 - 2015-12-15 20:12 - 01740288 _____ C:\Users\Irina\Downloads\AdwCleaner_5.025.exe
2015-12-15 20:12 - 2015-12-15 20:12 - 00000020 ___SH C:\Users\Laptop\ntuser.ini
2015-12-15 15:31 - 2015-12-15 15:31 - 00047616 _____ C:\Users\Irina\Downloads\vvl_ru__26_10_2015 (1).xls
2015-12-15 15:30 - 2015-12-15 15:30 - 00022528 _____ C:\Users\Irina\Downloads\MVL_russkiy_spec_pitanie_04.12.2015_0 (1).xls
2015-12-15 09:31 - 2015-12-15 09:31 - 00022528 _____ C:\Users\Irina\Downloads\MVL_russkiy_spec_pitanie_04.12.2015_0.xls
2015-12-15 09:30 - 2015-12-15 09:30 - 00047616 _____ C:\Users\Irina\Downloads\vvl_ru__26_10_2015.xls
2015-12-15 08:28 - 2015-12-15 08:28 - 00000000 ____D C:\Users\Irina\AppData\Local\ActiveSync
2015-12-15 08:26 - 2015-12-15 08:26 - 00000020 ___SH C:\Users\Irina\ntuser.ini
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\Vorlagen
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\Startmenü
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-12-15 05:25 - 2015-12-15 20:18 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-15 05:13 - 2015-12-15 05:13 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-12-15 05:13 - 2015-12-15 05:13 - 00000000 ____D C:\Users\Default\AppData\Local\Google
2015-12-15 05:13 - 2015-12-15 05:13 - 00000000 ____D C:\Users\Default User\AppData\Local\Google
2015-12-15 05:06 - 2015-12-15 05:16 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-12-15 05:02 - 2015-12-15 20:17 - 00000000 ____D C:\Users\Irina
2015-12-15 05:02 - 2015-12-15 20:12 - 00000000 ____D C:\Users\Laptop
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\Vorlagen
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\Startmenü
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\Netzwerkumgebung
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\Lokale Einstellungen
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\Eigene Dateien
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\Druckumgebung
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\Documents\Eigene Videos
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\Documents\Eigene Musik
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\Documents\Eigene Bilder
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\AppData\Local\Verlauf
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\AppData\Local\Anwendungsdaten
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\Anwendungsdaten
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\Vorlagen
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\Startmenü
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\Netzwerkumgebung
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\Lokale Einstellungen
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\Eigene Dateien
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\Druckumgebung
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\Documents\Eigene Videos
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\Documents\Eigene Musik
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\Documents\Eigene Bilder
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\AppData\Local\Verlauf
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\AppData\Local\Anwendungsdaten
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\Anwendungsdaten
2015-12-15 04:58 - 2015-12-15 05:07 - 00000000 ____D C:\ProgramData\Synaptics
2015-12-15 04:58 - 2015-12-15 04:58 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2015-12-15 04:58 - 2015-12-15 04:58 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2015-12-15 04:58 - 2015-12-15 04:58 - 00000000 ____D C:\Program Files\Common Files\Atheros
2015-12-15 04:57 - 2015-12-15 05:06 - 00000000 ____D C:\Program Files\Intel
2015-12-15 04:57 - 2015-12-15 04:57 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2015-12-15 04:57 - 2015-12-15 04:57 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-12-15 04:57 - 2015-12-15 04:57 - 00000000 ____D C:\WINDOWS\system32\DAX2
2015-12-15 04:57 - 2015-12-15 04:57 - 00000000 ____D C:\Program Files\Realtek
2015-12-15 04:57 - 2015-10-26 05:33 - 00072704 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2015-12-15 04:57 - 2015-10-26 05:33 - 00069120 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2015-12-15 04:56 - 2015-12-15 04:56 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-12-15 04:56 - 2015-12-15 04:56 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2015-12-15 04:56 - 2015-12-15 04:56 - 00000000 ____D C:\Program Files\Synaptics
2015-12-15 04:54 - 2015-10-30 08:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-12-15 04:50 - 2015-12-15 20:18 - 05011248 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-15 04:49 - 2015-12-15 06:00 - 00000000 ___DC C:\WINDOWS\Panther
2015-12-15 04:44 - 2015-12-15 04:44 - 00000000 ____D C:\Windows.old
2015-12-15 04:43 - 2015-12-15 04:43 - 24601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 22572632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 21125408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 19338240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 13381120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 13017600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 07476576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 03671896 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02918808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2015-12-15 04:43 - 2015-12-15 04:43 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2015-12-15 04:43 - 2015-12-15 04:43 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02587136 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02179584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 02126848 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-12-15 04:43 - 2015-12-15 04:43 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02064384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-12-15 04:43 - 2015-12-15 04:43 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01995264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01817160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01540768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01505280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01284960 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00975200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00809312 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00795840 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2015-12-15 04:43 - 2015-12-15 04:43 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00440160 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00408128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00405048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2015-12-15 04:43 - 2015-12-15 04:43 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2015-12-15 04:40 - 2015-10-29 19:43 - 08629248 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0019.dll
2015-12-15 04:40 - 2015-10-29 19:43 - 05739520 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2015-12-15 04:40 - 2015-10-29 19:43 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2015-12-15 04:40 - 2015-10-29 19:41 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2015-12-15 04:40 - 2015-10-29 19:25 - 06359040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2015-12-15 04:40 - 2015-10-29 19:24 - 04847616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2015-12-15 04:39 - 2015-12-15 04:39 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-12-15 04:35 - 2015-12-15 04:35 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2015-12-15 04:35 - 2015-12-15 04:35 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-12-15 04:35 - 2015-12-15 04:35 - 00000000 ____D C:\Program Files\MSBuild
2015-12-15 04:35 - 2015-12-15 04:35 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-12-15 04:35 - 2015-12-15 04:35 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-12-15 04:35 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-12-15 04:35 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-12-15 04:35 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-12-15 04:35 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-12-15 04:35 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-12-15 04:35 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-12-15 02:56 - 2015-12-15 02:56 - 00136192 _____ C:\Users\Irina\Downloads\schuldown100.ppt
2015-12-15 02:56 - 2015-12-15 02:56 - 00000086 ____H C:\Users\Irina\Downloads\.~lock.Essstörungen Svenja.ppt.pps#
2015-12-15 02:54 - 2015-12-15 02:54 - 03977728 _____ C:\Users\Irina\Downloads\Essstörungen Svenja.ppt.pps
2015-12-15 00:28 - 2015-12-15 02:29 - 00025065 _____ C:\Users\Irina\Downloads\Marc2.odt
2015-12-13 15:35 - 2015-12-13 15:35 - 59549947 _____ C:\Users\Irina\Desktop\_SAM2444.psd
2015-12-12 20:28 - 2015-12-12 20:29 - 00000000 ____D C:\Users\Irina\Desktop\18. Geburtstag
2015-12-12 17:12 - 2015-12-12 17:12 - 00022366 _____ C:\Users\Irina\Downloads\Marc.odt
2015-12-11 03:27 - 2015-05-27 10:13 - 00042696 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel.sys
2015-12-07 22:06 - 2015-12-09 19:23 - 00045010 _____ C:\Users\Irina\Downloads\Addition.txt
2015-12-07 22:03 - 2015-12-15 21:32 - 00023069 _____ C:\Users\Irina\Downloads\FRST.txt
2015-12-07 22:03 - 2015-12-15 21:31 - 00000000 ____D C:\FRST
2015-12-07 22:03 - 2015-12-07 22:03 - 02369024 _____ (Farbar) C:\Users\Irina\Downloads\FRST64.exe
2015-12-07 21:23 - 2015-12-07 21:23 - 00001122 _____ C:\Users\Laptop\Desktop\Eusing Free Registry Cleaner.lnk
2015-12-07 21:23 - 2015-12-07 21:23 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Eusing
2015-12-07 21:11 - 2015-12-07 21:12 - 05822720 _____ (Advanced System Protector ) C:\Users\Irina\Downloads\aspsetup.exe
2015-12-07 21:09 - 2015-12-07 21:09 - 01466656 _____ C:\Users\Irina\Downloads\Eusing Free Registry Cleaner - CHIP-Installer.exe
2015-12-07 09:04 - 2015-12-07 09:04 - 00001726 _____ C:\Users\Laptop\Desktop\MMB.txt
2015-12-07 07:53 - 2015-12-07 07:53 - 00259584 _____ (OldTimer Tools) C:\Users\Irina\Downloads\OTH.scr
2015-12-06 22:30 - 2015-12-06 22:30 - 00000000 ____D C:\Program Files (x86)\ESET
2015-12-06 22:29 - 2015-12-06 22:29 - 02870984 _____ (ESET) C:\Users\Irina\Downloads\esetsmartinstaller_deu.exe
2015-12-06 22:27 - 2015-12-06 22:28 - 00001838 _____ C:\Users\Laptop\Desktop\sc-cleaner.txt
2015-12-06 22:27 - 2015-12-06 22:27 - 01599336 _____ (Malwarebytes) C:\Users\Irina\Downloads\JRT (1).exe
2015-12-06 22:27 - 2015-12-06 22:27 - 00463688 _____ (Bleeping Computer, LLC) C:\Users\Irina\Downloads\sc-cleaner.exe
2015-12-06 22:25 - 2015-12-15 21:28 - 00000633 _____ C:\Users\Laptop\Desktop\JRT.txt
2015-12-06 22:20 - 2015-12-06 22:21 - 01599336 _____ (Malwarebytes) C:\Users\Irina\Downloads\JRT.exe
2015-12-06 22:19 - 2015-12-06 22:19 - 00006166 _____ C:\Users\Irina\Desktop\mbam.txt
2015-12-06 21:29 - 2015-12-15 05:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-12-06 21:29 - 2015-12-07 08:31 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-12-06 21:29 - 2015-12-06 21:29 - 00001171 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-12-06 21:29 - 2015-12-06 21:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-12-06 21:29 - 2015-12-06 21:29 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-12-06 21:29 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-12-06 21:29 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-12-06 21:29 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2015-12-06 21:24 - 2015-12-06 21:25 - 22908888 _____ (Malwarebytes ) C:\Users\Irina\Downloads\mbam-setup-2.2.0.1024.exe
2015-12-06 21:15 - 2015-12-15 20:27 - 00000000 ____D C:\AdwCleaner
2015-12-06 21:13 - 2015-12-06 21:13 - 01736704 _____ C:\Users\Irina\Downloads\adwcleaner_5.023.exe
2015-12-04 19:03 - 2015-12-04 19:03 - 00058346 _____ C:\Users\Irina\Downloads\Unbenannt 1.pdf
2015-12-04 19:03 - 2015-12-04 19:03 - 00058346 _____ C:\Users\Irina\Downloads\Unbenannt 1 (1).pdf
2015-12-02 23:19 - 2015-12-06 21:17 - 00000008 __RSH C:\ProgramData\ntuser.pol
2015-12-02 23:12 - 2015-12-02 23:12 - 00042564 _____ C:\Users\Irina\Desktop\AiXemjL9sVNjZJfipg39q9n9x2qYpSDyR-NxNguKVnmR.aac
2015-12-01 23:34 - 2015-12-01 23:34 - 00000000 ____D C:\Users\Irina\Documents\Lightshot
2015-12-01 22:52 - 2015-12-01 22:52 - 00920064 _____ C:\Users\Irina\Downloads\KursMedPsy5-31.10.Stress.ppt
2015-12-01 20:33 - 2015-12-15 05:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmartDeblur
2015-12-01 20:33 - 2015-12-01 20:33 - 00001112 _____ C:\Users\Public\Desktop\SmartDeblur.lnk
2015-12-01 20:33 - 2015-12-01 20:33 - 00000000 ____D C:\Program Files (x86)\SmartDeblur
2015-12-01 20:19 - 2015-12-01 20:25 - 00000000 ____D C:\Users\Irina\Desktop\bsu
2015-11-30 11:25 - 2015-11-30 11:25 - 00448317 _____ C:\Users\Laptop\Downloads\bio-dvd013.zip
2015-11-30 00:19 - 2015-11-30 00:19 - 00016148 _____ C:\WINDOWS\system32\SAVA_Laptop_HistoryPrediction.bin
2015-11-29 21:22 - 2015-12-15 05:26 - 00002808 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-irinapotapow@outlook.de
2015-11-29 15:05 - 2015-11-29 15:05 - 00058346 _____ C:\Users\Laptop\Desktop\Unbenannt 1.pdf
2015-11-28 23:08 - 2015-11-28 23:08 - 00000000 ____D C:\Users\Laptop\Documents\MAGIX Downloads
2015-11-28 23:08 - 2015-11-28 23:08 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\MAGIX
2015-11-25 19:48 - 2015-11-25 19:49 - 00104012 _____ C:\Users\Laptop\Downloads\Ihr_Voucher_131983.pdf
2015-11-25 19:16 - 2015-11-25 19:16 - 00000000 ____D C:\Users\Laptop\AppData\LocalLow\Temp
2015-11-25 19:15 - 2015-11-25 19:15 - 00002099 _____ C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2015-11-25 12:47 - 2015-11-25 12:47 - 00104012 _____ C:\Users\Irina\Downloads\Ihr_Voucher_131983 (2).pdf
2015-11-25 12:47 - 2015-11-25 12:47 - 00104012 _____ C:\Users\Irina\Downloads\Ihr_Voucher_131983 (1).pdf
2015-11-25 11:33 - 2015-11-25 11:33 - 00104012 _____ C:\Users\Irina\Downloads\Ihr_Voucher_131983.pdf
2015-11-24 14:07 - 2015-11-24 14:07 - 00016359 _____ C:\Users\Irina\Downloads\Facharbeit.odt
2015-11-24 14:07 - 2015-11-24 14:07 - 00012521 _____ C:\Users\Irina\Downloads\Titelblatt Facharbeit.odt
2015-11-23 20:25 - 2015-11-23 20:25 - 00000086 ____H C:\Users\Irina\Downloads\.~lock.Facharbeit_Magersucht.doc#
2015-11-21 16:12 - 2015-11-21 16:12 - 18707793 _____ C:\Users\Irina\Desktop\DSC_0173.psd
2015-11-18 18:38 - 2015-12-15 05:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ooVoo
2015-11-18 18:38 - 2015-11-18 18:38 - 00869600 _____ (Opera Software) C:\Users\Laptop\Documents\Opera_NI_stable.exe
2015-11-18 18:38 - 2015-11-18 18:38 - 00001926 _____ C:\Users\Public\Desktop\ooVoo.lnk
2015-11-18 18:38 - 2015-11-18 18:38 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\ooVoo Details
2015-11-18 18:38 - 2015-11-18 18:38 - 00000000 ____D C:\Program Files (x86)\ooVoo
2015-11-18 18:36 - 2015-11-18 18:36 - 02388000 _____ (ooVoo LLC) C:\Users\Irina\Downloads\ooVooSetup.exe
2015-11-17 20:19 - 2015-11-17 20:19 - 09920137 _____ C:\Users\Irina\Downloads\Свадебные голуби Поздравления с Днем Свадьбы.mp4
2015-11-17 12:36 - 2015-12-13 15:36 - 00000000 ____D C:\Users\Irina\Desktop\Facharbeit Anorexia
2015-11-17 08:49 - 2015-11-17 08:49 - 00000000 ___HD C:\Users\Irina\Desktop\.picasaoriginals
2015-11-17 08:30 - 2015-11-25 11:45 - 00000000 ____D C:\Users\Irina\AppData\Local\Mozilla
2015-11-17 08:30 - 2015-11-17 08:31 - 00000000 ____D C:\Users\Irina\AppData\Roaming\Mozilla
2015-11-16 19:55 - 2015-11-16 19:55 - 00146183 _____ C:\Users\Irina\Downloads\YouTube-Unblocker-056.crx
2015-11-16 18:23 - 2015-11-16 18:23 - 00906450 _____ C:\Users\Irina\Downloads\Mais-Tofu Patties (1).odt
2015-11-16 18:23 - 2015-11-12 18:52 - 01390076 _____ C:\Users\Irina\Documents\Referat%20Pflege.pptx_1.odp
2015-11-16 14:44 - 2015-11-16 14:44 - 02163806 _____ C:\Users\Irina\Downloads\Icons-of-sketchy-food.zip
2015-11-16 14:29 - 2015-11-16 14:29 - 04440488 _____ C:\Users\Irina\Downloads\Abstract-geometric-pattern.zip
2015-11-16 14:29 - 2015-11-16 14:29 - 04440488 _____ C:\Users\Irina\Downloads\Abstract-geometric-pattern (1).zip
2015-11-16 12:05 - 2015-12-04 19:03 - 00000000 ____D C:\Users\Irina\AppData\LocalLow\Adobe
2015-11-16 12:04 - 2015-12-15 05:25 - 00002748 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-Sava-Irina
2015-11-16 11:59 - 2015-12-15 05:16 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-11-16 11:59 - 2015-11-16 11:59 - 00001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk
2015-11-16 11:58 - 2015-11-16 11:58 - 00001280 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6.lnk
2015-11-16 11:57 - 2015-11-16 11:59 - 00000000 ____D C:\Program Files\Adobe
2015-11-16 11:57 - 2015-11-16 11:57 - 00001082 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
2015-11-16 11:56 - 2015-11-16 11:56 - 00001242 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk
2015-11-16 11:53 - 2015-11-16 11:53 - 00001596 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2015-11-16 11:50 - 2015-11-16 11:59 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-11-16 11:41 - 2015-11-17 12:16 - 00000000 ____D C:\Users\Irina\Desktop\Adobe CS6
2015-11-16 11:33 - 2015-11-16 11:40 - 1207595878 _____ C:\Users\Irina\Downloads\Photoshop_13_LS16.7z
2015-11-16 11:33 - 2015-11-16 11:33 - 01228608 _____ (Adobe Systems Incorporated) C:\Users\Irina\Downloads\Photoshop_13_LS16.exe
2015-11-16 11:31 - 2015-11-16 11:31 - 01288198 _____ C:\Users\Irina\Downloads\Adobe Photoshop CS6 Extended Crack .DLL Files.rar
2015-11-15 20:36 - 2015-11-15 20:36 - 00000000 ____D C:\Users\Irina\AppData\Roaming\Opera
2015-11-15 19:15 - 2015-11-15 19:15 - 00232872 _____ (Spotify Ltd) C:\Users\Irina\Downloads\SpotifySetup.exe

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-15 21:17 - 2015-07-01 19:22 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-12-15 20:42 - 2015-10-30 19:35 - 00776766 _____ C:\WINDOWS\system32\perfh007.dat
2015-12-15 20:42 - 2015-10-30 19:35 - 00155544 _____ C:\WINDOWS\system32\perfc007.dat
2015-12-15 20:42 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2015-12-15 20:42 - 2015-08-06 13:37 - 01799166 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-15 20:20 - 2015-07-23 10:30 - 00000000 __SHD C:\Users\Irina\IntelGraphicsProfiles
2015-12-15 20:20 - 2015-07-16 11:08 - 00001124 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-15 20:18 - 2015-10-30 07:28 - 00000000 ____D C:\Windows
2015-12-15 20:17 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration
2015-12-15 20:17 - 2015-10-30 07:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2015-12-15 10:29 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-15 09:11 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-15 09:11 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-15 08:50 - 2015-07-23 10:30 - 00000000 ____D C:\Users\Irina\AppData\Local\Packages
2015-12-15 08:47 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2015-12-15 08:35 - 2015-11-08 11:08 - 00000000 ___RD C:\Users\Irina\OneDrive
2015-12-15 08:35 - 2015-07-23 10:29 - 00002417 _____ C:\Users\Irina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-12-15 08:28 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-12-15 08:28 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-12-15 08:28 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-12-15 08:27 - 2015-03-15 16:01 - 00000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-12-15 08:27 - 2014-07-30 11:38 - 00000000 __RHD C:\Users\Public\AccountPictures
2015-12-15 05:40 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache
2015-12-15 05:40 - 2015-10-30 07:28 - 00065536 ___SH C:\WINDOWS\system32\config\ELAM
2015-12-15 05:38 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows NT
2015-12-15 05:37 - 2015-03-15 14:55 - 00047628 _____ C:\WINDOWS\diagwrn.xml
2015-12-15 05:37 - 2015-03-15 14:55 - 00047628 _____ C:\WINDOWS\diagerr.xml
2015-12-15 05:33 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-12-15 05:26 - 2015-07-23 10:37 - 00002876 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3702976893-725985698-900371594-1004
2015-12-15 05:26 - 2015-07-16 11:08 - 00003640 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-15 05:26 - 2015-07-01 19:22 - 00003098 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-12-15 05:26 - 2015-04-15 19:22 - 00002552 _____ C:\WINDOWS\System32\Tasks\avastBCLRestartS-1-5-21-3702976893-725985698-900371594-1001
2015-12-15 05:26 - 2015-04-02 22:40 - 00003290 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{46A01A98-C308-4F93-A8E8-4DE0B4AF94A1}
2015-12-15 05:26 - 2015-03-15 15:20 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-12-15 05:26 - 2014-07-30 13:34 - 00002936 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3702976893-725985698-900371594-1001
2015-12-15 05:26 - 2012-11-22 09:24 - 00003176 _____ C:\WINDOWS\System32\Tasks\VHDInformationCheck
2015-12-15 05:25 - 2015-07-16 11:08 - 00003416 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-15 05:25 - 2014-07-30 13:52 - 00003160 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-12-15 05:25 - 2012-11-22 09:44 - 00002350 _____ C:\WINDOWS\System32\Tasks\CLVDLauncher
2015-12-15 05:25 - 2012-11-22 09:44 - 00002350 _____ C:\WINDOWS\System32\Tasks\CLMLSvc_P2G8
2015-12-15 05:24 - 2015-10-30 08:24 - 00000000 __RHD C:\Users\Public\Libraries
2015-12-15 05:16 - 2015-11-09 20:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-12-15 05:16 - 2015-11-09 19:51 - 00000000 ____D C:\WINDOWS\SysWOW64\MAGIX
2015-12-15 05:16 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-12-15 05:16 - 2015-10-02 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightshot
2015-12-15 05:16 - 2015-07-20 20:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape
2015-12-15 05:16 - 2015-07-20 19:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mein CEWE FOTOBUCH
2015-12-15 05:16 - 2015-07-16 11:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-15 05:16 - 2015-07-02 08:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-12-15 05:16 - 2015-05-22 08:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PdaNet for Android
2015-12-15 05:16 - 2015-05-13 10:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
2015-12-15 05:16 - 2015-03-18 12:30 - 00000000 ____D C:\WINDOWS\SysWOW64\vbox
2015-12-15 05:16 - 2015-03-18 12:30 - 00000000 ____D C:\WINDOWS\system32\vbox
2015-12-15 05:16 - 2015-03-18 12:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-12-15 05:16 - 2015-02-18 22:00 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-15 05:16 - 2015-02-18 22:00 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps
2015-12-15 05:16 - 2015-01-13 20:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management
2015-12-15 05:16 - 2014-10-12 09:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2015-12-15 05:16 - 2014-10-05 19:03 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
2015-12-15 05:16 - 2014-09-23 21:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Die Sims 4
2015-12-15 05:16 - 2014-09-01 15:28 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-12-15 05:16 - 2014-09-01 15:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-12-15 05:16 - 2014-07-30 14:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-12-15 05:16 - 2014-07-30 14:00 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-12-15 05:16 - 2014-07-30 13:27 - 00000000 ____D C:\WINDOWS\SysWOW64\VAIO Startup Setting Tool
2015-12-15 05:16 - 2012-11-22 10:33 - 00000000 __RHD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Care
2015-12-15 05:16 - 2012-11-22 09:50 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-12-15 05:16 - 2012-11-22 09:44 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Power2Go 8
2015-12-15 05:16 - 2012-11-22 09:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center
2015-12-15 05:16 - 2012-11-22 09:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMemories Home
2015-12-15 05:13 - 2015-07-10 10:05 - 00000000 ____D C:\Users\Default.migrated
2015-12-15 05:10 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2015-12-15 05:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-12-15 05:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2015-12-15 05:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2015-12-15 05:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-12-15 05:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE
2015-12-15 05:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2015-12-15 05:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-12-15 05:10 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2015-12-15 05:10 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2015-12-15 05:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool
2015-12-15 05:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-12-15 05:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-12-15 05:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2015-12-15 05:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2015-12-15 05:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2015-12-15 05:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\IME
2015-12-15 05:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\et-EE
2015-12-15 05:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\en-GB
2015-12-15 05:07 - 2015-10-30 19:36 - 00000000 ____D C:\WINDOWS\OCR
2015-12-15 05:07 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\DigitalLocker
2015-12-15 05:07 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-12-15 05:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Resources
2015-12-15 05:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\InputMethod
2015-12-15 05:07 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\USOPrivate
2015-12-15 05:07 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\ADFS
2015-12-15 05:07 - 2012-11-22 10:37 - 00000000 ____D C:\WINDOWS\system32\%AppData%
2015-12-15 05:06 - 2015-11-09 19:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2015-12-15 05:06 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-12-15 05:06 - 2015-08-31 08:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-15 05:06 - 2015-05-22 07:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-12-15 05:05 - 2014-07-30 13:26 - 00000000 ____D C:\Users\Laptop\AppData\Local\Packages
2015-12-15 05:01 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-12-15 04:51 - 2015-10-30 19:55 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2015-12-15 04:49 - 2015-10-30 08:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-12-15 04:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-12-15 04:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-12-15 04:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2015-12-15 04:44 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-12-15 04:44 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-12-15 04:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-12-15 04:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-12-15 04:02 - 2015-10-30 20:27 - 00000000 ___HD C:\$WINDOWS.~BT
2015-12-15 02:00 - 2015-11-10 09:03 - 00000000 ____D C:\Users\Irina\AppData\Local\Adobe
2015-12-13 15:37 - 2015-11-12 17:38 - 00000000 ____D C:\Users\Irina\AppData\Roaming\Skype
2015-12-11 04:08 - 2014-07-31 08:17 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-12-11 04:00 - 2014-07-31 08:17 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-12-09 04:39 - 2015-03-19 09:15 - 00301728 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-12-06 21:37 - 2015-07-23 10:31 - 00000000 ____D C:\Users\Irina\AppData\Local\Google
2015-12-04 19:03 - 2015-07-23 10:30 - 00000000 ____D C:\Users\Irina\AppData\Roaming\Adobe
2015-12-04 09:20 - 2015-06-01 11:26 - 00001107 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-12-04 09:20 - 2015-06-01 11:26 - 00001107 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-04 05:30 - 2015-07-16 11:08 - 00001128 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-30 20:33 - 2015-11-10 20:33 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\FileAdvisor
2015-11-30 00:14 - 2014-07-31 21:00 - 00000000 ____D C:\Users\Laptop\AppData\Local\Adobe
2015-11-29 21:21 - 2014-07-30 13:28 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Adobe
2015-11-28 23:08 - 2015-11-09 19:52 - 00000000 ____D C:\Users\Laptop\Documents\MAGIX_MusicMaker15_for_MySpace
2015-11-25 19:15 - 2015-03-15 16:01 - 00000000 __SHD C:\Users\Laptop\IntelGraphicsProfiles
2015-11-25 19:14 - 2012-11-22 09:00 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-11-18 18:47 - 2015-11-13 22:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-11-18 18:47 - 2015-06-01 11:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-11-17 12:16 - 2015-11-10 09:18 - 00000000 ____D C:\Users\Irina\Desktop\Pausenbrot mal anders
2015-11-17 04:59 - 2012-11-22 09:33 - 00000000 ____D C:\ProgramData\Adobe
2015-11-16 11:57 - 2012-11-22 09:33 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-11-15 20:36 - 2015-07-23 10:30 - 00000000 ____D C:\Users\Irina\AppData\Local\VirtualStore
2015-11-15 19:03 - 2015-11-12 19:10 - 00906450 _____ C:\Users\Irina\Downloads\Mais-Tofu Patties.odt

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-08-25 08:33 - 2014-10-17 18:33 - 0000122 _____ () C:\Users\Laptop\AppData\Roaming\WB.CFG
2015-05-13 10:13 - 2015-05-13 10:13 - 0000847 _____ () C:\Users\Laptop\AppData\Local\recently-used.xbel
2014-07-30 18:42 - 2014-07-30 18:42 - 0000003 _____ () C:\Users\Laptop\AppData\Local\updater.log
2014-07-30 18:42 - 2015-10-02 10:12 - 0000424 _____ () C:\Users\Laptop\AppData\Local\UserProducts.xml
2014-07-30 14:10 - 2014-07-30 14:10 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-12-15 04:57 - 2015-12-15 04:57 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\Laptop\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-12-15 04:50

==================== Ende von FRST.txt ============================

irina97 · 15.12.2015, 21:50

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:14-12-2015
durchgeführt von Laptop (Administrator) auf SAVA (15-12-2015 21:31:43)
Gestartet von C:\Users\Irina\Downloads
Geladene Profile: Laptop & Irina (Verfügbare Profile: Laptop & Irina)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
() C:\Program Files\Sony\VAIO Care\listener.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Irina\Downloads\FRST64 (1).exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1403136 2015-08-11] (Realtek Semiconductor)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-10-16] (Apple Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3928264 2015-05-27] (Synaptics Incorporated)
HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [68776 2012-08-18] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [724576 2012-07-27] (Sony Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => c:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2010-11-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [932288 2010-11-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [152896 2012-06-25] (Intel Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-06-30] (Avast Software s.r.o.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-11-18] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\Run: [HP Deskjet 3520 series (NET)] => C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\Run: [Spotify Web Helper] => C:\Users\Laptop\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2030912 2015-11-08] (Spotify Ltd)
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony)
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53735968 2015-08-07] (Skype Technologies S.A.)
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\Run: [Spotify] => C:\Users\Laptop\AppData\Roaming\Spotify\Spotify.exe [7736128 2015-11-08] (Spotify Ltd)
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [517632 2015-10-30] (Microsoft Corporation)
HKU\S-1-5-21-3702976893-725985698-900371594-1001\...\RunOnce: [Report] => \AdwCleaner\AdwCleaner[C2].txt
HKU\S-1-5-21-3702976893-725985698-900371594-1004\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony)
HKU\S-1-5-21-3702976893-725985698-900371594-1004\...\Run: [GoogleChromeAutoLaunch_7DBF8F1D6DD5F67753D3A112420791D3] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [799560 2015-12-04] (Google Inc.)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Laptop\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64\FileSyncShell64.dll [2015-10-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Laptop\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64\FileSyncShell64.dll [2015-10-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Laptop\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64\FileSyncShell64.dll [2015-10-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-06-25] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Laptop\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncShell.dll [2015-10-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Laptop\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncShell.dll [2015-10-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Laptop\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncShell.dll [2015-10-27] (Microsoft Corporation)
Startup: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2014-10-12]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2014-12-16]
ShortcutTarget: Dropbox.lnk -> C:\Users\Laptop\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PdaNet Desktop.lnk [2015-05-22]
ShortcutTarget: PdaNet Desktop.lnk -> C:\Program Files (x86)\PdaNet for Android\PdaNetPC.exe ()
Startup: C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk [2015-11-25]
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk -> C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{3b3db353-91fa-4aca-9fdf-a3a7337e29ea}: [DhcpNameServer] 62.24.0.88
Tcpip\..\Interfaces\{b8708675-665a-4c35-b978-d30f8072384e}: [DhcpNameServer] 192.168.2.1 192.168.2.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-3702976893-725985698-900371594-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3702976893-725985698-900371594-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://vaioportal.sony.eu
HKU\S-1-5-21-3702976893-725985698-900371594-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006
HKU\S-1-5-21-3702976893-725985698-900371594-1004\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3702976893-725985698-900371594-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKU\S-1-5-21-3702976893-725985698-900371594-1004\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://vaioportal.sony.eu
HKU\S-1-5-21-3702976893-725985698-900371594-1004\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006
HKU\S-1-5-21-3702976893-725985698-900371594-1004\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://vaioportal.sony.eu
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3702976893-725985698-900371594-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3702976893-725985698-900371594-1001 -> OldSearch URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3702976893-725985698-900371594-1004 -> {5FE367D3-0932-4B0C-BF13-1F0B58C117C3} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q312&_nkw={searchTerms}
SearchScopes: HKU\S-1-5-21-3702976893-725985698-900371594-1004 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-08-13] (Qualcomm Atheros Commnucations)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-06-25] (Avast Software s.r.o.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-11-15] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-07-02] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-06-25] (Avast Software s.r.o.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-02] (Oracle Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\56sq1vfo.default
FF SelectedSearchEngine: Default
FF DefaultSearchEngine: Default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-09] ()
FF Plugin: @java.com/DTPlugin,version=10.5.0 -> C:\WINDOWS\system32\npDeployJava1.dll [2012-11-22] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-09] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-08] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-02-13] (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-08-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-08-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.5.0 -> C:\WINDOWS\SysWOW64\npDeployJava1.dll [2012-11-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-02] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-05-12] ()
FF Extension: FoxyProxy Standard - C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\56sq1vfo.default\extensions\foxyproxy@eric.h.jung [2015-07-12]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-12]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => nicht gefunden

Chrome: 
=======
CHR Profile: C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-06]
CHR Extension: (Google Präsentationen) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-06]
CHR Extension: (Google Drive) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-06]
CHR Extension: (YouTube) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-06]
CHR Extension: (Google-Suche) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-06]
CHR Extension: (Google Präsentationen) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-06]
CHR Extension: (Google Präsentationen) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-06]
CHR Extension: (Google Präsentationen) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-12-06]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-06]
CHR Extension: (Google Mail) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-06]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-18]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2014-10-12] (Adobe Systems) [Datei ist nicht signiert]
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-06-25] (Avast Software s.r.o.)
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\MAGIX\Common\Database\bin\fbserver.exe [1527900 2005-11-17] (MAGIX®) [Datei ist nicht signiert]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-10-26] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-08-06] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-08-06] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [623784 2012-08-18] (Sony Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2057736 2015-09-13] (Electronic Arts)
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [474208 2012-07-27] (Sony Corporation)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] () [Datei ist nicht signiert]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2012-08-08] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1653272 2015-07-31] (Sony Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-08-13] (Atheros) [Datei ist nicht signiert]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-06-25] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-06-25] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-06-25] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-06-25] ()
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-06-25] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-30] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-06-25] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-06-25] ()
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2015-12-07] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek                                            )
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-05-27] (Synaptics Incorporated)
R3 SOWS; C:\Windows\System32\drivers\sows.sys [24280 2012-06-11] (Sony Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-15 21:30 - 2015-12-15 21:30 - 02369536 _____ (Farbar) C:\Users\Irina\Downloads\FRST64 (1).exe
2015-12-15 21:21 - 2015-12-15 21:23 - 01599336 _____ (Malwarebytes) C:\Users\Irina\Downloads\JRT (2).exe
2015-12-15 20:27 - 2015-12-15 21:16 - 00000000 ____D C:\Users\Irina\Desktop\Neuer Ordner
2015-12-15 20:12 - 2015-12-15 20:12 - 01740288 _____ C:\Users\Irina\Downloads\AdwCleaner_5.025.exe
2015-12-15 20:12 - 2015-12-15 20:12 - 00000020 ___SH C:\Users\Laptop\ntuser.ini
2015-12-15 15:31 - 2015-12-15 15:31 - 00047616 _____ C:\Users\Irina\Downloads\vvl_ru__26_10_2015 (1).xls
2015-12-15 15:30 - 2015-12-15 15:30 - 00022528 _____ C:\Users\Irina\Downloads\MVL_russkiy_spec_pitanie_04.12.2015_0 (1).xls
2015-12-15 09:31 - 2015-12-15 09:31 - 00022528 _____ C:\Users\Irina\Downloads\MVL_russkiy_spec_pitanie_04.12.2015_0.xls
2015-12-15 09:30 - 2015-12-15 09:30 - 00047616 _____ C:\Users\Irina\Downloads\vvl_ru__26_10_2015.xls
2015-12-15 08:28 - 2015-12-15 08:28 - 00000000 ____D C:\Users\Irina\AppData\Local\ActiveSync
2015-12-15 08:26 - 2015-12-15 08:26 - 00000020 ___SH C:\Users\Irina\ntuser.ini
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\Vorlagen
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\Startmenü
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2015-12-15 05:38 - 2015-12-15 05:38 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-12-15 05:25 - 2015-12-15 20:18 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-15 05:13 - 2015-12-15 05:13 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-12-15 05:13 - 2015-12-15 05:13 - 00000000 ____D C:\Users\Default\AppData\Local\Google
2015-12-15 05:13 - 2015-12-15 05:13 - 00000000 ____D C:\Users\Default User\AppData\Local\Google
2015-12-15 05:06 - 2015-12-15 05:16 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-12-15 05:02 - 2015-12-15 20:17 - 00000000 ____D C:\Users\Irina
2015-12-15 05:02 - 2015-12-15 20:12 - 00000000 ____D C:\Users\Laptop
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\Vorlagen
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\Startmenü
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\Netzwerkumgebung
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\Lokale Einstellungen
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\Eigene Dateien
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\Druckumgebung
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\Documents\Eigene Videos
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\Documents\Eigene Musik
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\Documents\Eigene Bilder
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\AppData\Local\Verlauf
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\AppData\Local\Anwendungsdaten
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Laptop\Anwendungsdaten
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\Vorlagen
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\Startmenü
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\Netzwerkumgebung
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\Lokale Einstellungen
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\Eigene Dateien
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\Druckumgebung
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\Documents\Eigene Videos
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\Documents\Eigene Musik
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\Documents\Eigene Bilder
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\AppData\Local\Verlauf
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\AppData\Local\Anwendungsdaten
2015-12-15 05:02 - 2015-12-15 05:02 - 00000000 _SHDL C:\Users\Irina\Anwendungsdaten
2015-12-15 04:58 - 2015-12-15 05:07 - 00000000 ____D C:\ProgramData\Synaptics
2015-12-15 04:58 - 2015-12-15 04:58 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2015-12-15 04:58 - 2015-12-15 04:58 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2015-12-15 04:58 - 2015-12-15 04:58 - 00000000 ____D C:\Program Files\Common Files\Atheros
2015-12-15 04:57 - 2015-12-15 05:06 - 00000000 ____D C:\Program Files\Intel
2015-12-15 04:57 - 2015-12-15 04:57 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2015-12-15 04:57 - 2015-12-15 04:57 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-12-15 04:57 - 2015-12-15 04:57 - 00000000 ____D C:\WINDOWS\system32\DAX2
2015-12-15 04:57 - 2015-12-15 04:57 - 00000000 ____D C:\Program Files\Realtek
2015-12-15 04:57 - 2015-10-26 05:33 - 00072704 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2015-12-15 04:57 - 2015-10-26 05:33 - 00069120 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2015-12-15 04:56 - 2015-12-15 04:56 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-12-15 04:56 - 2015-12-15 04:56 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2015-12-15 04:56 - 2015-12-15 04:56 - 00000000 ____D C:\Program Files\Synaptics
2015-12-15 04:54 - 2015-10-30 08:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-12-15 04:50 - 2015-12-15 20:18 - 05011248 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-15 04:49 - 2015-12-15 06:00 - 00000000 ___DC C:\WINDOWS\Panther
2015-12-15 04:44 - 2015-12-15 04:44 - 00000000 ____D C:\Windows.old
2015-12-15 04:43 - 2015-12-15 04:43 - 24601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 22572632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 21125408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 19338240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 13381120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 13017600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 07476576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 03671896 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02918808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2015-12-15 04:43 - 2015-12-15 04:43 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2015-12-15 04:43 - 2015-12-15 04:43 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02587136 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02179584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 02126848 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-12-15 04:43 - 2015-12-15 04:43 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02064384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-12-15 04:43 - 2015-12-15 04:43 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01995264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01817160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01540768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01505280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01284960 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00975200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00809312 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00795840 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2015-12-15 04:43 - 2015-12-15 04:43 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00440160 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00408128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00405048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2015-12-15 04:43 - 2015-12-15 04:43 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2015-12-15 04:43 - 2015-12-15 04:43 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-12-15 04:43 - 2015-12-15 04:43 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2015-12-15 04:43 - 2015-12-15 04:43 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2015-12-15 04:40 - 2015-10-29 19:43 - 08629248 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0019.dll
2015-12-15 04:40 - 2015-10-29 19:43 - 05739520 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2015-12-15 04:40 - 2015-10-29 19:43 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2015-12-15 04:40 - 2015-10-29 19:41 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2015-12-15 04:40 - 2015-10-29 19:25 - 06359040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2015-12-15 04:40 - 2015-10-29 19:24 - 04847616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2015-12-15 04:39 - 2015-12-15 04:39 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-12-15 04:35 - 2015-12-15 04:35 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2015-12-15 04:35 - 2015-12-15 04:35 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-12-15 04:35 - 2015-12-15 04:35 - 00000000 ____D C:\Program Files\MSBuild
2015-12-15 04:35 - 2015-12-15 04:35 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-12-15 04:35 - 2015-12-15 04:35 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-12-15 04:35 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-12-15 04:35 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-12-15 04:35 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-12-15 04:35 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-12-15 04:35 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-12-15 04:35 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-12-15 02:56 - 2015-12-15 02:56 - 00136192 _____ C:\Users\Irina\Downloads\schuldown100.ppt
2015-12-15 02:56 - 2015-12-15 02:56 - 00000086 ____H C:\Users\Irina\Downloads\.~lock.Essstörungen Svenja.ppt.pps#
2015-12-15 02:54 - 2015-12-15 02:54 - 03977728 _____ C:\Users\Irina\Downloads\Essstörungen Svenja.ppt.pps
2015-12-15 00:28 - 2015-12-15 02:29 - 00025065 _____ C:\Users\Irina\Downloads\Marc2.odt
2015-12-13 15:35 - 2015-12-13 15:35 - 59549947 _____ C:\Users\Irina\Desktop\_SAM2444.psd
2015-12-12 20:28 - 2015-12-12 20:29 - 00000000 ____D C:\Users\Irina\Desktop\18. Geburtstag
2015-12-12 17:12 - 2015-12-12 17:12 - 00022366 _____ C:\Users\Irina\Downloads\Marc.odt
2015-12-11 03:27 - 2015-05-27 10:13 - 00042696 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel.sys
2015-12-07 22:06 - 2015-12-09 19:23 - 00045010 _____ C:\Users\Irina\Downloads\Addition.txt
2015-12-07 22:03 - 2015-12-15 21:32 - 00023069 _____ C:\Users\Irina\Downloads\FRST.txt
2015-12-07 22:03 - 2015-12-15 21:31 - 00000000 ____D C:\FRST
2015-12-07 22:03 - 2015-12-07 22:03 - 02369024 _____ (Farbar) C:\Users\Irina\Downloads\FRST64.exe
2015-12-07 21:23 - 2015-12-07 21:23 - 00001122 _____ C:\Users\Laptop\Desktop\Eusing Free Registry Cleaner.lnk
2015-12-07 21:23 - 2015-12-07 21:23 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Eusing
2015-12-07 21:11 - 2015-12-07 21:12 - 05822720 _____ (Advanced System Protector ) C:\Users\Irina\Downloads\aspsetup.exe
2015-12-07 21:09 - 2015-12-07 21:09 - 01466656 _____ C:\Users\Irina\Downloads\Eusing Free Registry Cleaner - CHIP-Installer.exe
2015-12-07 09:04 - 2015-12-07 09:04 - 00001726 _____ C:\Users\Laptop\Desktop\MMB.txt
2015-12-07 07:53 - 2015-12-07 07:53 - 00259584 _____ (OldTimer Tools) C:\Users\Irina\Downloads\OTH.scr
2015-12-06 22:30 - 2015-12-06 22:30 - 00000000 ____D C:\Program Files (x86)\ESET
2015-12-06 22:29 - 2015-12-06 22:29 - 02870984 _____ (ESET) C:\Users\Irina\Downloads\esetsmartinstaller_deu.exe
2015-12-06 22:27 - 2015-12-06 22:28 - 00001838 _____ C:\Users\Laptop\Desktop\sc-cleaner.txt
2015-12-06 22:27 - 2015-12-06 22:27 - 01599336 _____ (Malwarebytes) C:\Users\Irina\Downloads\JRT (1).exe
2015-12-06 22:27 - 2015-12-06 22:27 - 00463688 _____ (Bleeping Computer, LLC) C:\Users\Irina\Downloads\sc-cleaner.exe
2015-12-06 22:25 - 2015-12-15 21:28 - 00000633 _____ C:\Users\Laptop\Desktop\JRT.txt
2015-12-06 22:20 - 2015-12-06 22:21 - 01599336 _____ (Malwarebytes) C:\Users\Irina\Downloads\JRT.exe
2015-12-06 22:19 - 2015-12-06 22:19 - 00006166 _____ C:\Users\Irina\Desktop\mbam.txt
2015-12-06 21:29 - 2015-12-15 05:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-12-06 21:29 - 2015-12-07 08:31 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-12-06 21:29 - 2015-12-06 21:29 - 00001171 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-12-06 21:29 - 2015-12-06 21:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-12-06 21:29 - 2015-12-06 21:29 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-12-06 21:29 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-12-06 21:29 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-12-06 21:29 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2015-12-06 21:24 - 2015-12-06 21:25 - 22908888 _____ (Malwarebytes ) C:\Users\Irina\Downloads\mbam-setup-2.2.0.1024.exe
2015-12-06 21:15 - 2015-12-15 20:27 - 00000000 ____D C:\AdwCleaner
2015-12-06 21:13 - 2015-12-06 21:13 - 01736704 _____ C:\Users\Irina\Downloads\adwcleaner_5.023.exe
2015-12-04 19:03 - 2015-12-04 19:03 - 00058346 _____ C:\Users\Irina\Downloads\Unbenannt 1.pdf
2015-12-04 19:03 - 2015-12-04 19:03 - 00058346 _____ C:\Users\Irina\Downloads\Unbenannt 1 (1).pdf
2015-12-02 23:19 - 2015-12-06 21:17 - 00000008 __RSH C:\ProgramData\ntuser.pol
2015-12-02 23:12 - 2015-12-02 23:12 - 00042564 _____ C:\Users\Irina\Desktop\AiXemjL9sVNjZJfipg39q9n9x2qYpSDyR-NxNguKVnmR.aac
2015-12-01 23:34 - 2015-12-01 23:34 - 00000000 ____D C:\Users\Irina\Documents\Lightshot
2015-12-01 22:52 - 2015-12-01 22:52 - 00920064 _____ C:\Users\Irina\Downloads\KursMedPsy5-31.10.Stress.ppt
2015-12-01 20:33 - 2015-12-15 05:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmartDeblur
2015-12-01 20:33 - 2015-12-01 20:33 - 00001112 _____ C:\Users\Public\Desktop\SmartDeblur.lnk
2015-12-01 20:33 - 2015-12-01 20:33 - 00000000 ____D C:\Program Files (x86)\SmartDeblur
2015-12-01 20:19 - 2015-12-01 20:25 - 00000000 ____D C:\Users\Irina\Desktop\bsu
2015-11-30 11:25 - 2015-11-30 11:25 - 00448317 _____ C:\Users\Laptop\Downloads\bio-dvd013.zip
2015-11-30 00:19 - 2015-11-30 00:19 - 00016148 _____ C:\WINDOWS\system32\SAVA_Laptop_HistoryPrediction.bin
2015-11-29 21:22 - 2015-12-15 05:26 - 00002808 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-irinapotapow@outlook.de
2015-11-29 15:05 - 2015-11-29 15:05 - 00058346 _____ C:\Users\Laptop\Desktop\Unbenannt 1.pdf
2015-11-28 23:08 - 2015-11-28 23:08 - 00000000 ____D C:\Users\Laptop\Documents\MAGIX Downloads
2015-11-28 23:08 - 2015-11-28 23:08 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\MAGIX
2015-11-25 19:48 - 2015-11-25 19:49 - 00104012 _____ C:\Users\Laptop\Downloads\Ihr_Voucher_131983.pdf
2015-11-25 19:16 - 2015-11-25 19:16 - 00000000 ____D C:\Users\Laptop\AppData\LocalLow\Temp
2015-11-25 19:15 - 2015-11-25 19:15 - 00002099 _____ C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2015-11-25 12:47 - 2015-11-25 12:47 - 00104012 _____ C:\Users\Irina\Downloads\Ihr_Voucher_131983 (2).pdf
2015-11-25 12:47 - 2015-11-25 12:47 - 00104012 _____ C:\Users\Irina\Downloads\Ihr_Voucher_131983 (1).pdf
2015-11-25 11:33 - 2015-11-25 11:33 - 00104012 _____ C:\Users\Irina\Downloads\Ihr_Voucher_131983.pdf
2015-11-24 14:07 - 2015-11-24 14:07 - 00016359 _____ C:\Users\Irina\Downloads\Facharbeit.odt
2015-11-24 14:07 - 2015-11-24 14:07 - 00012521 _____ C:\Users\Irina\Downloads\Titelblatt Facharbeit.odt
2015-11-23 20:25 - 2015-11-23 20:25 - 00000086 ____H C:\Users\Irina\Downloads\.~lock.Facharbeit_Magersucht.doc#
2015-11-21 16:12 - 2015-11-21 16:12 - 18707793 _____ C:\Users\Irina\Desktop\DSC_0173.psd
2015-11-18 18:38 - 2015-12-15 05:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ooVoo
2015-11-18 18:38 - 2015-11-18 18:38 - 00869600 _____ (Opera Software) C:\Users\Laptop\Documents\Opera_NI_stable.exe
2015-11-18 18:38 - 2015-11-18 18:38 - 00001926 _____ C:\Users\Public\Desktop\ooVoo.lnk
2015-11-18 18:38 - 2015-11-18 18:38 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\ooVoo Details
2015-11-18 18:38 - 2015-11-18 18:38 - 00000000 ____D C:\Program Files (x86)\ooVoo
2015-11-18 18:36 - 2015-11-18 18:36 - 02388000 _____ (ooVoo LLC) C:\Users\Irina\Downloads\ooVooSetup.exe
2015-11-17 20:19 - 2015-11-17 20:19 - 09920137 _____ C:\Users\Irina\Downloads\Свадебные голуби Поздравления с Днем Свадьбы.mp4
2015-11-17 12:36 - 2015-12-13 15:36 - 00000000 ____D C:\Users\Irina\Desktop\Facharbeit Anorexia
2015-11-17 08:49 - 2015-11-17 08:49 - 00000000 ___HD C:\Users\Irina\Desktop\.picasaoriginals
2015-11-17 08:30 - 2015-11-25 11:45 - 00000000 ____D C:\Users\Irina\AppData\Local\Mozilla
2015-11-17 08:30 - 2015-11-17 08:31 - 00000000 ____D C:\Users\Irina\AppData\Roaming\Mozilla
2015-11-16 19:55 - 2015-11-16 19:55 - 00146183 _____ C:\Users\Irina\Downloads\YouTube-Unblocker-056.crx
2015-11-16 18:23 - 2015-11-16 18:23 - 00906450 _____ C:\Users\Irina\Downloads\Mais-Tofu Patties (1).odt
2015-11-16 18:23 - 2015-11-12 18:52 - 01390076 _____ C:\Users\Irina\Documents\Referat%20Pflege.pptx_1.odp
2015-11-16 14:44 - 2015-11-16 14:44 - 02163806 _____ C:\Users\Irina\Downloads\Icons-of-sketchy-food.zip
2015-11-16 14:29 - 2015-11-16 14:29 - 04440488 _____ C:\Users\Irina\Downloads\Abstract-geometric-pattern.zip
2015-11-16 14:29 - 2015-11-16 14:29 - 04440488 _____ C:\Users\Irina\Downloads\Abstract-geometric-pattern (1).zip
2015-11-16 12:05 - 2015-12-04 19:03 - 00000000 ____D C:\Users\Irina\AppData\LocalLow\Adobe
2015-11-16 12:04 - 2015-12-15 05:25 - 00002748 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-Sava-Irina
2015-11-16 11:59 - 2015-12-15 05:16 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-11-16 11:59 - 2015-11-16 11:59 - 00001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk
2015-11-16 11:58 - 2015-11-16 11:58 - 00001280 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6.lnk
2015-11-16 11:57 - 2015-11-16 11:59 - 00000000 ____D C:\Program Files\Adobe
2015-11-16 11:57 - 2015-11-16 11:57 - 00001082 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
2015-11-16 11:56 - 2015-11-16 11:56 - 00001242 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk
2015-11-16 11:53 - 2015-11-16 11:53 - 00001596 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2015-11-16 11:50 - 2015-11-16 11:59 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-11-16 11:41 - 2015-11-17 12:16 - 00000000 ____D C:\Users\Irina\Desktop\Adobe CS6
2015-11-16 11:33 - 2015-11-16 11:40 - 1207595878 _____ C:\Users\Irina\Downloads\Photoshop_13_LS16.7z
2015-11-16 11:33 - 2015-11-16 11:33 - 01228608 _____ (Adobe Systems Incorporated) C:\Users\Irina\Downloads\Photoshop_13_LS16.exe
2015-11-16 11:31 - 2015-11-16 11:31 - 01288198 _____ C:\Users\Irina\Downloads\Adobe Photoshop CS6 Extended Crack .DLL Files.rar
2015-11-15 20:36 - 2015-11-15 20:36 - 00000000 ____D C:\Users\Irina\AppData\Roaming\Opera
2015-11-15 19:15 - 2015-11-15 19:15 - 00232872 _____ (Spotify Ltd) C:\Users\Irina\Downloads\SpotifySetup.exe

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-15 21:17 - 2015-07-01 19:22 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-12-15 20:42 - 2015-10-30 19:35 - 00776766 _____ C:\WINDOWS\system32\perfh007.dat
2015-12-15 20:42 - 2015-10-30 19:35 - 00155544 _____ C:\WINDOWS\system32\perfc007.dat
2015-12-15 20:42 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2015-12-15 20:42 - 2015-08-06 13:37 - 01799166 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-15 20:20 - 2015-07-23 10:30 - 00000000 __SHD C:\Users\Irina\IntelGraphicsProfiles
2015-12-15 20:20 - 2015-07-16 11:08 - 00001124 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-15 20:18 - 2015-10-30 07:28 - 00000000 ____D C:\Windows
2015-12-15 20:17 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration
2015-12-15 20:17 - 2015-10-30 07:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2015-12-15 10:29 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-15 09:11 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-15 09:11 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-15 08:50 - 2015-07-23 10:30 - 00000000 ____D C:\Users\Irina\AppData\Local\Packages
2015-12-15 08:47 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2015-12-15 08:35 - 2015-11-08 11:08 - 00000000 ___RD C:\Users\Irina\OneDrive
2015-12-15 08:35 - 2015-07-23 10:29 - 00002417 _____ C:\Users\Irina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-12-15 08:28 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-12-15 08:28 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-12-15 08:28 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-12-15 08:27 - 2015-03-15 16:01 - 00000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-12-15 08:27 - 2014-07-30 11:38 - 00000000 __RHD C:\Users\Public\AccountPictures
2015-12-15 05:40 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache
2015-12-15 05:40 - 2015-10-30 07:28 - 00065536 ___SH C:\WINDOWS\system32\config\ELAM
2015-12-15 05:38 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows NT
2015-12-15 05:37 - 2015-03-15 14:55 - 00047628 _____ C:\WINDOWS\diagwrn.xml
2015-12-15 05:37 - 2015-03-15 14:55 - 00047628 _____ C:\WINDOWS\diagerr.xml
2015-12-15 05:33 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-12-15 05:26 - 2015-07-23 10:37 - 00002876 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3702976893-725985698-900371594-1004
2015-12-15 05:26 - 2015-07-16 11:08 - 00003640 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-15 05:26 - 2015-07-01 19:22 - 00003098 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-12-15 05:26 - 2015-04-15 19:22 - 00002552 _____ C:\WINDOWS\System32\Tasks\avastBCLRestartS-1-5-21-3702976893-725985698-900371594-1001
2015-12-15 05:26 - 2015-04-02 22:40 - 00003290 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{46A01A98-C308-4F93-A8E8-4DE0B4AF94A1}
2015-12-15 05:26 - 2015-03-15 15:20 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-12-15 05:26 - 2014-07-30 13:34 - 00002936 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3702976893-725985698-900371594-1001
2015-12-15 05:26 - 2012-11-22 09:24 - 00003176 _____ C:\WINDOWS\System32\Tasks\VHDInformationCheck
2015-12-15 05:25 - 2015-07-16 11:08 - 00003416 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-15 05:25 - 2014-07-30 13:52 - 00003160 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-12-15 05:25 - 2012-11-22 09:44 - 00002350 _____ C:\WINDOWS\System32\Tasks\CLVDLauncher
2015-12-15 05:25 - 2012-11-22 09:44 - 00002350 _____ C:\WINDOWS\System32\Tasks\CLMLSvc_P2G8
2015-12-15 05:24 - 2015-10-30 08:24 - 00000000 __RHD C:\Users\Public\Libraries
2015-12-15 05:16 - 2015-11-09 20:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-12-15 05:16 - 2015-11-09 19:51 - 00000000 ____D C:\WINDOWS\SysWOW64\MAGIX
2015-12-15 05:16 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-12-15 05:16 - 2015-10-02 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightshot
2015-12-15 05:16 - 2015-07-20 20:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape
2015-12-15 05:16 - 2015-07-20 19:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mein CEWE FOTOBUCH
2015-12-15 05:16 - 2015-07-16 11:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-15 05:16 - 2015-07-02 08:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-12-15 05:16 - 2015-05-22 08:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PdaNet for Android
2015-12-15 05:16 - 2015-05-13 10:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
2015-12-15 05:16 - 2015-03-18 12:30 - 00000000 ____D C:\WINDOWS\SysWOW64\vbox
2015-12-15 05:16 - 2015-03-18 12:30 - 00000000 ____D C:\WINDOWS\system32\vbox
2015-12-15 05:16 - 2015-03-18 12:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-12-15 05:16 - 2015-02-18 22:00 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-15 05:16 - 2015-02-18 22:00 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps
2015-12-15 05:16 - 2015-01-13 20:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management
2015-12-15 05:16 - 2014-10-12 09:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2015-12-15 05:16 - 2014-10-05 19:03 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
2015-12-15 05:16 - 2014-09-23 21:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Die Sims 4
2015-12-15 05:16 - 2014-09-01 15:28 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-12-15 05:16 - 2014-09-01 15:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-12-15 05:16 - 2014-07-30 14:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-12-15 05:16 - 2014-07-30 14:00 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-12-15 05:16 - 2014-07-30 13:27 - 00000000 ____D C:\WINDOWS\SysWOW64\VAIO Startup Setting Tool
2015-12-15 05:16 - 2012-11-22 10:33 - 00000000 __RHD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Care
2015-12-15 05:16 - 2012-11-22 09:50 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-12-15 05:16 - 2012-11-22 09:44 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Power2Go 8
2015-12-15 05:16 - 2012-11-22 09:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center
2015-12-15 05:16 - 2012-11-22 09:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMemories Home
2015-12-15 05:13 - 2015-07-10 10:05 - 00000000 ____D C:\Users\Default.migrated
2015-12-15 05:10 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2015-12-15 05:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-12-15 05:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2015-12-15 05:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2015-12-15 05:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-12-15 05:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE
2015-12-15 05:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2015-12-15 05:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-12-15 05:10 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2015-12-15 05:10 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2015-12-15 05:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool
2015-12-15 05:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-12-15 05:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-12-15 05:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2015-12-15 05:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2015-12-15 05:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2015-12-15 05:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\IME
2015-12-15 05:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\et-EE
2015-12-15 05:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\en-GB
2015-12-15 05:07 - 2015-10-30 19:36 - 00000000 ____D C:\WINDOWS\OCR
2015-12-15 05:07 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\DigitalLocker
2015-12-15 05:07 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-12-15 05:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Resources
2015-12-15 05:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\InputMethod
2015-12-15 05:07 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\USOPrivate
2015-12-15 05:07 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\ADFS
2015-12-15 05:07 - 2012-11-22 10:37 - 00000000 ____D C:\WINDOWS\system32\%AppData%
2015-12-15 05:06 - 2015-11-09 19:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2015-12-15 05:06 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-12-15 05:06 - 2015-08-31 08:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-15 05:06 - 2015-05-22 07:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-12-15 05:05 - 2014-07-30 13:26 - 00000000 ____D C:\Users\Laptop\AppData\Local\Packages
2015-12-15 05:01 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-12-15 04:51 - 2015-10-30 19:55 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2015-12-15 04:49 - 2015-10-30 08:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-12-15 04:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-12-15 04:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-12-15 04:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2015-12-15 04:44 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-12-15 04:44 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-12-15 04:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-12-15 04:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-12-15 04:02 - 2015-10-30 20:27 - 00000000 ___HD C:\$WINDOWS.~BT
2015-12-15 02:00 - 2015-11-10 09:03 - 00000000 ____D C:\Users\Irina\AppData\Local\Adobe
2015-12-13 15:37 - 2015-11-12 17:38 - 00000000 ____D C:\Users\Irina\AppData\Roaming\Skype
2015-12-11 04:08 - 2014-07-31 08:17 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-12-11 04:00 - 2014-07-31 08:17 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-12-09 04:39 - 2015-03-19 09:15 - 00301728 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-12-06 21:37 - 2015-07-23 10:31 - 00000000 ____D C:\Users\Irina\AppData\Local\Google
2015-12-04 19:03 - 2015-07-23 10:30 - 00000000 ____D C:\Users\Irina\AppData\Roaming\Adobe
2015-12-04 09:20 - 2015-06-01 11:26 - 00001107 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-12-04 09:20 - 2015-06-01 11:26 - 00001107 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-04 05:30 - 2015-07-16 11:08 - 00001128 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-30 20:33 - 2015-11-10 20:33 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\FileAdvisor
2015-11-30 00:14 - 2014-07-31 21:00 - 00000000 ____D C:\Users\Laptop\AppData\Local\Adobe
2015-11-29 21:21 - 2014-07-30 13:28 - 00000000 ____D C:\Users\Laptop\AppData\Roaming\Adobe
2015-11-28 23:08 - 2015-11-09 19:52 - 00000000 ____D C:\Users\Laptop\Documents\MAGIX_MusicMaker15_for_MySpace
2015-11-25 19:15 - 2015-03-15 16:01 - 00000000 __SHD C:\Users\Laptop\IntelGraphicsProfiles
2015-11-25 19:14 - 2012-11-22 09:00 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-11-18 18:47 - 2015-11-13 22:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-11-18 18:47 - 2015-06-01 11:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-11-17 12:16 - 2015-11-10 09:18 - 00000000 ____D C:\Users\Irina\Desktop\Pausenbrot mal anders
2015-11-17 04:59 - 2012-11-22 09:33 - 00000000 ____D C:\ProgramData\Adobe
2015-11-16 11:57 - 2012-11-22 09:33 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-11-15 20:36 - 2015-07-23 10:30 - 00000000 ____D C:\Users\Irina\AppData\Local\VirtualStore
2015-11-15 19:03 - 2015-11-12 19:10 - 00906450 _____ C:\Users\Irina\Downloads\Mais-Tofu Patties.odt

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-08-25 08:33 - 2014-10-17 18:33 - 0000122 _____ () C:\Users\Laptop\AppData\Roaming\WB.CFG
2015-05-13 10:13 - 2015-05-13 10:13 - 0000847 _____ () C:\Users\Laptop\AppData\Local\recently-used.xbel
2014-07-30 18:42 - 2014-07-30 18:42 - 0000003 _____ () C:\Users\Laptop\AppData\Local\updater.log
2014-07-30 18:42 - 2015-10-02 10:12 - 0000424 _____ () C:\Users\Laptop\AppData\Local\UserProducts.xml
2014-07-30 14:10 - 2014-07-30 14:10 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-12-15 04:57 - 2015-12-15 04:57 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\Laptop\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-12-15 04:50

==================== Ende von FRST.txt ============================

M-K-D-B · 16.12.2015, 21:21

Servus,

bitte die Logdatei des letzten Scans von MBAM posten:

Lesestoff
MBAM-Funde posten: So gehts...
Manchmal ist es wichtig zu wissen, welche Schadprogramme im Vorfeld ohne Anweisung der Helfer schon gelöscht wurden.
Daher benötige ich den Inhalt der Logdatei, in welcher der Suchlauf protokolliert wurde.

Starte MBAM.
Klicke auf Verlauf.
Klicke auf Anwendungsprotokolle.
Klicke auf das letzte Scan-Protokoll mit Funden.
Klicke auf Export und dann auf "In Zwischenablage kopieren".
Poste den Inhalt in Code-Tags [CODE] [/CODE] durch Einfügen mit Strg+V als Antwort in Deinen Thread.

irina97 · 16.12.2015, 22:18

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 07.12.2015
Suchlaufzeit: 08:32
Protokolldatei: 
Administrator: Ja

Version: 2.2.0.1024
Malware-Datenbank: v2015.12.07.01
Rootkit-Datenbank: v2015.11.26.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: Laptop

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 422847
Abgelaufene Zeit: 29 Min., 51 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 3
CrackTool.Agent, C:\Users\Irina\Downloads\Adobe Photoshop CS6 Extended Crack .DLL Files.rar, Keine Aktion durch Benutzer, [c17c2f734249b482b33fa56a788adf21], 
PUP.Optional.ResultsHub, C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_moreresultshub-a.akamaihd.net_0.localstorage, In Quarantäne, [1d20e4bebad191a521dcaef71ee5f10f], 
PUP.Optional.ResultsHub, C:\Users\Irina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_moreresultshub-a.akamaihd.net_0.localstorage-journal, In Quarantäne, [79c47230cfbcea4ca05decb95ba8738d], 

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)

Zu dem Crack Tool Agent muss ich sagen, der hat mir keine Probleme gemacht, ich hatte die im obersten Thema verfassten Probleme, spätere Zeit danach, als ich mir irgendetwas (ich weiß nicht mehr was) runtergeladen habe..

M-K-D-B · 17.12.2015, 14:25

Servus,

kann schon sein, dass du keine Probleme durch den Crack hast, aber wir bereinigen bei illegaler Software nicht:

Lesestoff:
Illegale Software: Cracks, Keygens und Co

Bitte lesen => http://www.trojaner-board.de/95393-c...-software.html

Es geht weiter, wenn du alles Illegale entfernt hast.

Bei wiederholten Crack/Keygen Verstößen behalte ich es mir vor, den Support einzustellen, d.h. Hilfe nur noch bei der Datensicherung und Neuinstallation des Betriebssystems.

irina97 · 17.12.2015, 16:00

Schade!!!!!!!!!!! Danke trotzdem.

Könntest du bitte dieses Thema hier löschen, möchte nicht das jeder in meinen PC gucken kann

09.12.2015, 07:40	#4
schrauber /// the machine /// TB-Ausbilder	PUP.Optional.Yontoo - nicht zu beseitigen? Unsere Tools brauchen immer Adminrechte, also bitte nochmal. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

14.12.2015, 21:11	#7
M-K-D-B /// TB-Ausbilder	PUP.Optional.Yontoo - nicht zu beseitigen? Fehlende Rückmeldung Dieses Thema wurde aus den Abos gelöscht. Somit bekomme ich keine Benachrichtigung über neue Antworten. PM an mich falls Du denoch weiter machen willst. Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist. Jeder andere bitte hier klicken und einen eigenen Thread erstellen!

15.12.2015, 20:53	#9
M-K-D-B /// TB-Ausbilder	PUP.Optional.Yontoo - nicht zu beseitigen? Servus, dann weiter mit den anderen Schritten.

PUP.Optional.Yontoo - nicht zu beseitigen?

Log-Analyse und Auswertung: PUP.Optional.Yontoo - nicht zu beseitigen?