| |
| |||||||
Log-Analyse und Auswertung: Windows 10: Malwarebytes meldet infizierte Dateien, teilweise funktioniert das Internet nicht, generell PC langsamWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
23.12.2015, 13:38
| #9 |
| |  Windows 10: Malwarebytes meldet infizierte Dateien, teilweise funktioniert das Internet nicht, generell PC langsam Mahlzeit Dennis, zuerst einmal vielen Dank. Der Rechner ist wieder schnell  ..anbei die Logs, danach folgen die "weiteren Probleme" FixLog.txt Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:20-12-2015
durchgeführt von Daniel (2015-12-22 19:23:33) Run:1
Gestartet von C:\Users\Daniel\Desktop
Geladene Profile: Daniel & postgres (Verfügbare Profile: Daniel & postgres & Gl0ba_000)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
HKU\S-1-5-21-2676936528-1030403693-891089861-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
FF DefaultSearchEngine: MyStart
C:\WINDOWS\system32\Drivers\etc\hosts_bkup
Hosts:
EmptyTemp:
*****************
"HKU\S-1-5-21-2676936528-1030403693-891089861-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => Schlüssel erfolgreich entfernt
Firefox DefaultSearchEngine erfolgreich entfernt
C:\WINDOWS\system32\Drivers\etc\hosts_bkup => erfolgreich verschoben
C:\Windows\System32\Drivers\etc\hosts => erfolgreich verschoben
Hosts erfolgreich wiederhergestellt.
EmptyTemp: => 2.5 GB temporäre Dateien entfernt.
Das System musste neu gestartet werden.
==== Ende von Fixlog 19:25:02 ====
Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=eb7ff69065a4c243aaf5381b93264e08
# end=init
# utc_time=2015-12-22 06:29:53
# local_time=2015-12-22 07:29:53 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 27318
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=eb7ff69065a4c243aaf5381b93264e08
# end=updated
# utc_time=2015-12-22 06:31:34
# local_time=2015-12-22 07:31:34 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=eb7ff69065a4c243aaf5381b93264e08
# end=init
# utc_time=2015-12-23 06:41:20
# local_time=2015-12-23 07:41:20 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 27327
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=eb7ff69065a4c243aaf5381b93264e08
# end=updated
# utc_time=2015-12-23 06:41:49
# local_time=2015-12-23 07:41:49 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=eb7ff69065a4c243aaf5381b93264e08
# engine=27327
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-12-23 10:19:51
# local_time=2015-12-23 11:19:51 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 65640 14340003 0 0
# scanned=753786
# found=31
# cleaned=0
# scan_time=13082
sh=8B2D47430C9FD3F74947798E27795D62B6E6A2D2 ft=1 fh=7c25938210c7dad1 vn="Variante von Win32/Adware.ConvertAd.AEL Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\03000200-1450173802-0500-0006-000700080009\rnse2F2B.exe.vir"
sh=099B373E85EBF932283A50E8C646308D062A74ED ft=1 fh=69a5a546e2ddf66b vn="Win32/Adware.ConvertAd.AEP Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\03000200-1450173802-0500-0006-000700080009\Uninstall.exe.vir"
sh=8D92C8072C6A4C670D953D74FD7456C16D3DC3F6 ft=1 fh=8ee61ef52a422d8a vn="Variante von Win32/Adware.Coupons.AA Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Coupons\uninstall.exe.vir"
sh=96C0C8FA2B59DEF911E3C5E4845955478BBC9C50 ft=1 fh=70b69c28e7f6585c vn="Variante von Win32/Packed.Komodia.E verdächtige Datei" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\QuickSearch\AZDLL.dll.vir"
sh=9AADD3E826818FB0C9C5CCBA6D82AD31DBAF3720 ft=1 fh=a26ce6deec6c8691 vn="Variante von Win64/Packed.Komodia.F verdächtige Datei" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\QuickSearch\AZDLL64.dll.vir"
sh=E7F3436241D282B508DC11A6AB86CD5A5D8AC2C3 ft=1 fh=31c116d8fb6527c0 vn="Variante von Win64/Packed.Komodia.D verdächtige Datei" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\QuickSearch\AZDLL64.exe.vir"
sh=0CEDF45C3F5B1E824B405D43EA9732D6D4886F18 ft=1 fh=72a04e2614ea61e4 vn="Mehrere Bedrohungen" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\QuickSearch\setupfa_1123.exe.vir"
sh=91A7ED671D6E759290CCB3FD935C9C92BE8E144C ft=1 fh=c933aebbd376884b vn="Variante von Win32/Packed.Komodia.E verdächtige Datei" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\QuickSearch\zcenginecert.dll.vir"
sh=0113E5BFA2456495AA6C62475BDBB200AAC3F65A ft=1 fh=4f5468d640ecf4f1 vn="Variante von Win64/Packed.Komodia.D verdächtige Datei" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\QuickSearch\zengine64.exe.vir"
sh=16E2E4E68F197DF16CBB4A3C15337F000573B115 ft=0 fh=0000000000000000 vn="Variante von Android/Exploit.Lotoor.EW Trojaner" ac=I fn="C:\Flashtool\custom\root\run_root_shell\run_root_shell"
sh=74FACDDF0E4BDB1BDDD53B66488B29C568EF836A ft=0 fh=0000000000000000 vn="Android/Exploit.Lotoor.EP Trojaner" ac=I fn="C:\MtkDroidTools\files\pwn"
sh=3E219BC7B689208301845C582162208DDBD1A3B7 ft=0 fh=0000000000000000 vn="Android/Exploit.Lotoor.DH Trojaner" ac=I fn="C:\MtkDroidTools\files\zR"
sh=74FACDDF0E4BDB1BDDD53B66488B29C568EF836A ft=0 fh=0000000000000000 vn="Android/Exploit.Lotoor.EP Trojaner" ac=I fn="C:\Poker\files\pwn"
sh=3E219BC7B689208301845C582162208DDBD1A3B7 ft=0 fh=0000000000000000 vn="Android/Exploit.Lotoor.DH Trojaner" ac=I fn="C:\Poker\files\zR"
sh=74FACDDF0E4BDB1BDDD53B66488B29C568EF836A ft=0 fh=0000000000000000 vn="Android/Exploit.Lotoor.EP Trojaner" ac=I fn="C:\Poker\MtkDroidTools\files\pwn"
sh=3E219BC7B689208301845C582162208DDBD1A3B7 ft=0 fh=0000000000000000 vn="Android/Exploit.Lotoor.DH Trojaner" ac=I fn="C:\Poker\MtkDroidTools\files\zR"
sh=98BB61409B2A3729A81A418627847CA34750CDA1 ft=1 fh=c4a70072425fc364 vn="Variante von Win32/Adware.Coupons.AA Anwendung" ac=I fn="C:\Program Files (x86)\Google\Chrome\Application\plugins\npMozCouponPrinter.dll"
sh=98BB61409B2A3729A81A418627847CA34750CDA1 ft=1 fh=c4a70072425fc364 vn="Variante von Win32/Adware.Coupons.AA Anwendung" ac=I fn="C:\Program Files (x86)\Mozilla Firefox\browser\plugins\npMozCouponPrinter.dll"
sh=52DF752F17C4ADDD949469C5142041A96E5B5BE3 ft=0 fh=0000000000000000 vn="Variante von Android/Exploit.Lotoor.EW Trojaner" ac=I fn="C:\rooten\files\run_root_shell"
sh=2702A910AE0CE7F23568FB678D73A5FE91E159D2 ft=1 fh=3c9335911940df13 vn="Win32/Somoto.G evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\File System\005\t\00\00000000"
sh=C80717236B7C20671EAE67C1D622AB8053C595EE ft=1 fh=88d434eed201afcf vn="Win32/Somoto.G evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\File System\005\t\00\00000001"
sh=74FACDDF0E4BDB1BDDD53B66488B29C568EF836A ft=0 fh=0000000000000000 vn="Android/Exploit.Lotoor.EP Trojaner" ac=I fn="C:\Users\Daniel\AppData\Local\Skype\MtkDroidTools\files\pwn"
sh=CF5D65078EBC5E303843D37C1B49A4842CCAA6F8 ft=1 fh=88e77bea98981ff2 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Daniel\Downloads\ALNO_KPLSetup14a - CHIP-Installer.exe"
sh=297CC52598F94D3E4B110EB5267696842DDEF30A ft=1 fh=0dc4742c19b0f665 vn="Variante von Win32/Adware.Coupons.AA Anwendung" ac=I fn="C:\Users\Daniel\Downloads\CouponPrinter.exe"
sh=BE50478C5560ADEC236C14984D885E2221970E7B ft=0 fh=0000000000000000 vn="Variante von Android/Exploit.Lotoor.EW Trojaner" ac=I fn="C:\Users\Daniel\Downloads\DooMLoRD_Easy-Rooting-Toolkit_v19a_perf-event-exploit.zip"
sh=EE72A87BCF456F46BD376EF2060159DC38F90093 ft=1 fh=fd655e07d8cf3557 vn="Variante von Win32/InstallCore.ADX.gen evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Daniel\Downloads\ipadian.exe"
sh=C63E2FCF9DC6AB0EAAA67FA307C60FCC97E88CDA ft=1 fh=0c44a5bf20b49c22 vn="Variante von Win32/OutBrowse.CB evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Daniel\Downloads\setup.exe"
sh=7409EB1DEB8CFD42D98587492C38BEB47E805B68 ft=0 fh=0000000000000000 vn="Variante von Android/Exploit.Towel.A Trojaner" ac=I fn="C:\Users\Daniel\Downloads\tr.apk"
sh=9E48452F0BEB077875ECD5E625D888D9DBCB1B6E ft=1 fh=efa5a4c56e1322a3 vn="Variante von Win32/Adware.Coupons.AA Anwendung" ac=I fn="C:\Windows\CouponPrinter.ocx"
sh=AA0CDB3E32CF279719D0325A92B04214C48A447C ft=0 fh=0000000000000000 vn="LNK/Agent.CH Trojaner" ac=I fn="D:\sicherung\Dale Carnegie - Besser miteinander reden\Kostenloser Usenet Zugang.url"
sh=4E4B2F16C43FCFBFE3210DEBC006E0B45C6DE9DA ft=1 fh=ad40834f0d83a4c3 vn="Variante von Win32/Bundlore.B evtl. unerwünschte Anwendung" ac=I fn="D:\unsortiert\setup.exe"
FRST Logfile: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:20-12-2015 durchgeführt von Daniel (Administrator) auf GLOBALITY (23-12-2015 13:29:12) Gestartet von C:\Users\Daniel\Desktop Geladene Profile: Daniel & postgres (Verfügbare Profile: Daniel & postgres & Gl0ba_000) Platform: Windows 10 Pro (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: "C:\Program Files (x86)\Sirrix AG\BitBox\bin\BitBoxClient.exe" start "%1") Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Sirrix AG) C:\Program Files (x86)\Sirrix AG\BitBox\bin\BitBoxService.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe (IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe (PacketVideo) C:\Program Files (x86)\Twonky\TwonkyServer\twonkystarter.exe () C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (PostgreSQL Global Development Group) C:\postgreSQL\bin\pg_ctl.exe () C:\Program Files (x86)\Twonky\TwonkyServer\twonkyserver.exe (PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe (PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe (PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe (PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe (PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe () C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe (LINE Corporation) C:\Program Files (x86)\Naver\LINE\Line.exe (Internet Monitor) C:\Users\Daniel\AppData\Roaming\BandwidthStat\bandwidthstat.exe (Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (PacketVideo) C:\Program Files (x86)\Twonky\TwonkyServer\twonkytray.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe () C:\Program Files\Rainmeter\Rainmeter.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\System32\InstallAgent.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508240 2015-08-05] (Adobe Systems Incorporated) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [191016 2014-05-14] (Geek Software GmbH) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Andy] => C:\Program Files\Andy\HandyAndy.exe HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [883280 2015-12-10] (BlueStack Systems, Inc.) HKU\S-1-5-21-2676936528-1030403693-891089861-1001\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony) HKU\S-1-5-21-2676936528-1030403693-891089861-1001\...\Run: [Line] => C:\Program Files (x86)\Naver\LINE\Line.exe [15664152 2015-08-18] (LINE Corporation) HKU\S-1-5-21-2676936528-1030403693-891089861-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50755200 2015-12-08] (Skype Technologies S.A.) HKU\S-1-5-21-2676936528-1030403693-891089861-1001\...\Run: [BandwidthStat] => C:\Users\Daniel\AppData\Roaming\BandwidthStat\bandwidthstat.exe [569344 2015-12-15] (Internet Monitor) HKU\S-1-5-21-2676936528-1030403693-891089861-1006\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50755200 2015-12-08] (Skype Technologies S.A.) HKU\S-1-5-21-2676936528-1030403693-891089861-1006\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [517632 2015-07-10] (Microsoft Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Twonky Server.lnk [2015-12-15] ShortcutTarget: Twonky Server.lnk -> C:\Program Files (x86)\Twonky\TwonkyServer\twonkytray.exe (PacketVideo) Startup: C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2015-12-15] ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation) Startup: C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk [2015-12-15] ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe () ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{c3d2b33a-5f1a-4bce-8c16-a5ea94bc6a72}: [DhcpNameServer] 192.168.2.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-2676936528-1030403693-891089861-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/ HKU\S-1-5-21-2676936528-1030403693-891089861-1006\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-2676936528-1030403693-891089861-1006\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/ BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-11-18] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll [2014-12-24] (Oracle Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-11-10] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-12-24] (Oracle Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-11-18] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2015-05-09] (Oracle Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-11-10] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2015-05-09] (Oracle Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-03-12] (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) FireFox: ======== FF ProfilePath: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\v7rfplju.default FF NewTab: about:newtab FF Keyword.URL: FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-12] () FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2014-12-24] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2014-12-24] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-02-28] (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Keine Datei] FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-12] () FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-05-09] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2015-05-09] (Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-03-31] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-03-31] (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\browser\plugins\npMozCouponPrinter.dll [2014-10-02] (Coupons, Inc.) FF Extension: Flash and Video Download - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\v7rfplju.default\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2015-12-12] FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\v7rfplju.default\extensions\artur.dubovoy@gmail.com [2015-12-12] FF Extension: FireFTP - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\v7rfplju.default\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f} [2015-12-12] Chrome: ======= CHR HomePage: Default -> hxxp://www.google.de/ CHR Profile: C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google*Übersetzer) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2015-11-17] CHR Extension: (Google Docs) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04] CHR Extension: (Google Drive) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-25] CHR Extension: (YouTube) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (Google-Suche) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-30] CHR Extension: (FTP Free) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehdgcfaoankkonoiichmblcfijkomfbn [2014-09-27] CHR Extension: (Video Downloader professional) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2015-12-22] CHR Extension: (ZenMate Security, Privacy & Unblock VPN) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdcgdnkidjaadafnichfpabhfomcebme [2015-11-16] CHR Extension: (Google Docs Offline) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-17] CHR Extension: (qipu Cashbackmelder open beta) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mloigoojndlehdjiemdfpiikieonngel [2015-01-16] CHR Extension: (Codeanywhere) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndcfkjjcjfpmmhdedhnbkknbehiadgjg [2014-05-13] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-01] CHR Extension: (Google Mail) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2016448 2015-11-25] (Adobe Systems, Incorporated) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-07-15] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert] R2 BitBoxService; C:\Program Files (x86)\Sirrix AG\BitBox\bin\BitBoxService.exe [738304 2015-11-13] (Sirrix AG) [Datei ist nicht signiert] S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [432720 2015-12-10] (BlueStack Systems, Inc.) R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [412240 2015-12-10] (BlueStack Systems, Inc.) R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [854608 2015-12-10] (BlueStack Systems, Inc.) R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3645432 2014-07-18] (devolo AG) R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2934048 2015-11-10] (IObit) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes) R2 postgresql-8.4; c:\postgreSQL\bin\pg_ctl.exe [66048 2014-02-18] (PostgreSQL Global Development Group) [Datei ist nicht signiert] R2 StarMoney 9.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert] R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH) R2 TwonkyProxy; C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe [885576 2013-05-23] () R2 TwonkyServer; C:\Program Files (x86)\Twonky\TwonkyServer\twonkystarter.exe [586568 2013-05-23] (PacketVideo) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.) R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices) R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-05-28] (Advanced Micro Devices) R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [146040 2015-12-10] (BlueStack Systems) R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-12-15] (REALiX(tm)) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2015-12-23] (Malwarebytes) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation) R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2013-03-04] (CACE Technologies) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek ) S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] () R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [194816 2015-11-11] (Oracle Corporation) S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation) R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation) S3 VBoxNetFlt; \SystemRoot\system32\DRIVERS\VBoxNetFlt.sys [X] S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-12-23 13:24 - 2015-12-23 13:24 - 00016148 _____ C:\WINDOWS\system32\GLOBALITY_Daniel_HistoryPrediction.bin 2015-12-23 07:39 - 2015-12-23 07:39 - 00280168 _____ C:\WINDOWS\Minidump\122315-10015-01.dmp 2015-12-22 19:29 - 2015-12-22 19:29 - 02870984 _____ (ESET) C:\Users\Daniel\Downloads\esetsmartinstaller_deu.exe 2015-12-22 19:23 - 2015-12-22 19:25 - 00001115 _____ C:\Users\Daniel\Desktop\Fixlog.txt 2015-12-22 18:45 - 2015-12-23 07:41 - 00003808 _____ C:\WINDOWS\System32\Tasks\AutoKMS 2015-12-22 18:36 - 2015-12-22 18:43 - 00000000 ____D C:\AdwCleaner 2015-12-22 18:32 - 2015-12-22 18:32 - 01743360 _____ C:\Users\Daniel\Desktop\AdwCleaner_5.026.exe 2015-12-22 18:22 - 2015-12-22 18:23 - 00050521 _____ C:\Users\Daniel\Desktop\Addition.txt 2015-12-22 18:21 - 2015-12-23 13:29 - 00019946 _____ C:\Users\Daniel\Desktop\FRST.txt 2015-12-22 18:15 - 2015-12-22 18:15 - 06708416 _____ (Adobe System Incorporated.) C:\Users\Daniel\Downloads\AdobeCreativeCloudCleanerTool.exe 2015-12-22 12:01 - 2015-12-22 12:01 - 00007493 _____ C:\Users\Daniel\Desktop\Malwarebyte.txt 2015-12-22 11:49 - 2015-12-22 11:50 - 00000532 _____ C:\Users\Daniel\Desktop\Neues Textdokument.txt 2015-12-22 11:37 - 2015-12-23 13:29 - 00000000 ____D C:\FRST 2015-12-22 11:36 - 2015-12-22 11:37 - 02370560 _____ (Farbar) C:\Users\Daniel\Desktop\FRST64.exe 2015-12-21 14:28 - 2015-12-21 14:28 - 00514327 _____ C:\Users\Daniel\Desktop\20151221.pdf 2015-12-21 14:24 - 2015-12-21 14:24 - 00000000 ____D C:\ProgramData\ATI 2015-12-21 11:16 - 2015-12-21 11:16 - 00036520 _____ C:\Users\Daniel\Documents\arena.mrf 2015-12-21 10:28 - 2015-12-21 10:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center 2015-12-21 10:26 - 2015-12-21 10:27 - 00000000 ____D C:\WINDOWS\LastGood.Tmp 2015-12-21 10:25 - 2015-12-21 10:25 - 47794160 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 39720944 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 30775792 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 27544560 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl12cl64.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 25320432 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 22327280 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl12cl.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 15725552 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 14310896 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 09355016 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 08982432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 08864920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 07683096 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 06686192 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmantle64.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 05216240 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmantle32.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 03471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap 2015-12-21 10:25 - 2015-12-21 10:25 - 03437632 _____ C:\WINDOWS\system32\atiumd6a.cap 2015-12-21 10:25 - 2015-12-21 10:25 - 01256432 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 01196032 _____ C:\WINDOWS\system32\amdocl_as64.exe 2015-12-21 10:25 - 2015-12-21 10:25 - 01070592 _____ C:\WINDOWS\system32\amdocl_ld64.exe 2015-12-21 10:25 - 2015-12-21 10:25 - 01004032 _____ C:\WINDOWS\SysWOW64\amdocl_as32.exe 2015-12-21 10:25 - 2015-12-21 10:25 - 00935408 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00935408 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00807424 _____ C:\WINDOWS\SysWOW64\amdocl_ld32.exe 2015-12-21 10:25 - 2015-12-21 10:25 - 00662400 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb 2015-12-21 10:25 - 2015-12-21 10:25 - 00662400 _____ C:\WINDOWS\system32\atiapfxx.blb 2015-12-21 10:25 - 2015-12-21 10:25 - 00631792 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00524272 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00471320 _____ C:\WINDOWS\system32\amdmiracast.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00451056 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00375792 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe 2015-12-21 10:25 - 2015-12-21 10:25 - 00341488 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODE.exe 2015-12-21 10:25 - 2015-12-21 10:25 - 00243696 _____ C:\WINDOWS\system32\clinfo.exe 2015-12-21 10:25 - 2015-12-21 10:25 - 00213488 _____ C:\WINDOWS\system32\amdgfxinfo64.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00199664 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00198640 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00168944 _____ C:\WINDOWS\system32\atieah64.exe 2015-12-21 10:25 - 2015-12-21 10:25 - 00165360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00152560 _____ C:\WINDOWS\SysWOW64\atieah32.exe 2015-12-21 10:25 - 2015-12-21 10:25 - 00151936 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00150512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00143344 _____ C:\WINDOWS\system32\amdhdl64.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00138384 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00136176 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00132080 _____ C:\WINDOWS\SysWOW64\amdhdl32.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00130064 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00122352 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00117600 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00111600 _____ C:\WINDOWS\system32\hsa-thunk64.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00111088 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00110320 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00103408 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00097776 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00096752 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00089584 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00088000 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00088000 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00083952 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00081160 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00081160 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00078320 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00078320 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00073712 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00071152 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00068080 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00064496 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00060912 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00059888 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODCLI.exe 2015-12-21 10:25 - 2015-12-21 10:25 - 00059376 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00057840 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00052208 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00048112 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmmcl.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00038384 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00012784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll 2015-12-21 10:25 - 2015-12-21 10:25 - 00012784 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll 2015-12-20 20:56 - 2015-12-20 20:56 - 00478062 _____ C:\Users\Daniel\Desktop\20151220.pdf 2015-12-20 17:19 - 2015-12-22 11:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-12-20 13:28 - 2015-12-21 14:29 - 00283623 _____ C:\Users\Daniel\Desktop\Dienstplan_TV_Cannstatt.xlsm 2015-12-20 10:36 - 2015-12-20 10:36 - 00255478 _____ C:\Users\Daniel\Downloads\Dienstplan_Änderung2_NEU (1).xlsm 2015-12-20 10:36 - 2015-12-20 10:36 - 00255478 _____ C:\Users\Daniel\Desktop\Dienstplan_Änderung2_NEU (1).xlsm 2015-12-18 10:57 - 2015-12-18 11:03 - 606692048 _____ (Sirrix AG) C:\Users\Daniel\Downloads\Browser_In_The_Box.4.1.4-r150.chrome.Archive.exe 2015-12-18 10:41 - 2015-12-19 19:28 - 00000222 _____ C:\Users\Daniel\Desktop\nicht angreiffen.txt 2015-12-18 10:36 - 2015-12-18 10:36 - 00617444 _____ C:\Users\Daniel\Downloads\Browser-in-the-Box_Benutzerhandbuch.pdf 2015-12-16 15:10 - 2015-12-16 15:10 - 00025360 _____ C:\Users\Daniel\Documents\far-Flung Prairie.mrf 2015-12-15 21:23 - 2015-12-15 21:23 - 00034360 _____ C:\Users\Daniel\Documents\nightfall swamp.mrf 2015-12-15 18:10 - 2015-12-15 18:11 - 21852240 _____ C:\Users\Daniel\Downloads\Smoothies.rar 2015-12-15 17:33 - 2015-12-15 17:33 - 00280112 _____ C:\WINDOWS\Minidump\121515-9359-01.dmp 2015-12-15 15:47 - 2015-12-15 15:47 - 00006660 _____ C:\Users\Daniel\Downloads\Rechnung Nr. 15005998.pdf 2015-12-15 13:56 - 2015-12-15 13:56 - 00023026 _____ C:\Users\Daniel\Downloads\Vodafone-Internet--Telefon-Kuendigung (1) (1).pdf 2015-12-15 13:53 - 2015-12-15 13:53 - 00023026 _____ C:\Users\Daniel\Downloads\Vodafone-Internet--Telefon-Kuendigung (1).pdf 2015-12-15 13:52 - 2015-12-15 13:53 - 00023026 _____ C:\Users\Daniel\Downloads\Vodafone-Internet--Telefon-Kuendigung.pdf 2015-12-15 13:36 - 2015-12-15 13:36 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Sirrix AG 2015-12-15 13:35 - 2015-12-15 13:35 - 00211398 _____ C:\Users\Daniel\Desktop\kündigung strom.pdf 2015-12-15 13:26 - 2015-12-18 11:04 - 00001332 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Browser in the Box.lnk 2015-12-15 13:26 - 2015-12-18 11:04 - 00001320 _____ C:\Users\Public\Desktop\Browser in the Box.lnk 2015-12-15 13:26 - 2015-12-15 13:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Browser in the Box 2015-12-15 13:25 - 2015-12-15 13:25 - 00000000 ____D C:\ProgramData\Sirrix AG 2015-12-15 13:25 - 2015-12-15 13:25 - 00000000 ____D C:\Program Files (x86)\Sirrix AG 2015-12-15 13:21 - 2015-12-15 13:21 - 00000000 ____D C:\Program Files\Oracle 2015-12-15 13:14 - 2015-12-15 13:19 - 565717248 _____ (Sirrix AG) C:\Users\Daniel\Downloads\Browser_In_The_Box.4.1.4-r150.firefox.Archive.exe 2015-12-15 13:12 - 2015-12-17 19:43 - 00002252 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-12-15 13:11 - 2015-12-15 13:11 - 00927824 _____ (Google Inc.) C:\Users\Daniel\Downloads\ChromeSetup (1).exe 2015-12-15 12:47 - 2015-12-15 12:47 - 00436869 _____ C:\Users\Daniel\Downloads\Kündigung-strom-umzug-form (1).pdf 2015-12-15 12:44 - 2015-12-15 12:45 - 00436869 _____ C:\Users\Daniel\Downloads\Kündigung-strom-umzug-form.pdf 2015-12-15 12:28 - 2015-12-15 12:36 - 24149323 _____ C:\Users\Daniel\Downloads\Malwarebytes Anti-Malware Premium 2.2.0.1024.rar 2015-12-15 12:21 - 2015-12-23 12:14 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2015-12-15 12:20 - 2015-12-15 13:10 - 00001165 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-12-15 12:20 - 2015-12-15 12:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-12-15 12:20 - 2015-12-15 12:20 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-12-15 12:20 - 2015-12-15 12:20 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-12-15 12:20 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2015-12-15 12:20 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2015-12-15 12:20 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2015-12-15 12:17 - 2015-12-15 12:18 - 22908888 _____ (Malwarebytes ) C:\Users\Daniel\Downloads\mbam-setup-2.2.0.1024.exe 2015-12-15 12:09 - 2015-12-15 12:09 - 00003530 _____ C:\WINDOWS\System32\Tasks\Ahonaradra 2015-12-15 12:01 - 2015-12-15 12:01 - 00003774 _____ C:\WINDOWS\System32\Tasks\SoftUpgrade 2015-12-15 12:01 - 2015-12-15 12:01 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BandwidthStat 2015-12-15 12:01 - 2015-12-15 12:01 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\BandwidthStat 2015-12-15 12:01 - 2015-12-15 12:01 - 00000000 ____D C:\Program Files (x86)\SoftUpgrade 2015-12-15 11:57 - 2015-12-15 11:57 - 00275717 _____ C:\Users\Daniel\Documents\151210 Rechnung_Lingel.pdf 2015-12-15 11:35 - 2015-12-15 11:35 - 00000000 ____D C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98} 2015-12-15 11:34 - 2015-12-15 11:34 - 00026528 _____ (REALiX(tm)) C:\WINDOWS\SysWOW64\Drivers\HWiNFO64A.SYS 2015-12-15 11:34 - 2015-12-15 11:34 - 00000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled 2015-12-15 11:34 - 2015-01-10 15:32 - 00128288 _____ (IObit) C:\WINDOWS\system32\IObitSmartDefragExtension.dll 2015-12-15 11:34 - 2014-06-04 15:17 - 00034080 _____ (IObit) C:\WINDOWS\system32\SmartDefragBootTime.exe 2015-12-15 11:33 - 2015-12-22 11:52 - 00000000 ____D C:\ProgramData\ProductData 2015-12-15 11:33 - 2015-12-15 11:41 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\IObit 2015-12-15 11:33 - 2015-12-15 11:40 - 00000000 ____D C:\ProgramData\IObit 2015-12-15 11:33 - 2015-12-15 11:33 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\ProductData 2015-12-15 11:33 - 2015-12-15 11:33 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Apple Computer 2015-12-15 11:33 - 2015-12-15 11:33 - 00000000 ____D C:\Users\Daniel\AppData\LocalLow\IObit 2015-12-15 11:32 - 2015-12-15 11:41 - 00000000 ____D C:\Program Files (x86)\IObit 2015-12-15 11:32 - 2015-12-15 11:32 - 30003568 _____ (IObit ) C:\Users\Daniel\Downloads\IObit-Malware-Fighter-Setup3409.exe 2015-12-15 11:16 - 2015-12-15 11:16 - 17529025 _____ C:\Users\Daniel\Documents\151210 Rechnung Lingel.pdf 2015-12-15 11:05 - 2015-12-15 11:13 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Opera Software 2015-12-15 11:05 - 2015-12-15 11:13 - 00000000 ____D C:\Users\Daniel\AppData\Local\Opera Software 2015-12-15 11:04 - 2015-12-15 11:05 - 17231872 _____ C:\Users\Daniel\Downloads\epson374980eu.exe 2015-12-15 11:03 - 2015-12-15 11:02 - 00004182 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak 2015-12-15 11:02 - 2015-12-22 18:43 - 00000008 __RSH C:\Users\Daniel\ntuser.pol 2015-12-15 11:02 - 2015-12-22 18:43 - 00000008 __RSH C:\ProgramData\ntuser.pol 2015-12-15 11:01 - 2015-12-15 11:01 - 00003294 _____ C:\WINDOWS\System32\Tasks\{9049D845-5093-42F1-ABE4-823668FF2E6F} 2015-12-15 10:59 - 2015-12-15 10:59 - 12793856 _____ C:\Users\Daniel\Downloads\epson325480eu.exe 2015-12-15 10:57 - 2015-12-15 10:57 - 25198592 _____ C:\Users\Daniel\Downloads\epson324666eu.dmg 2015-12-14 20:52 - 2015-12-14 20:52 - 00030000 _____ C:\Users\Daniel\Documents\13.mrf 2015-12-14 14:28 - 2015-12-14 14:32 - 00027280 _____ C:\Users\Daniel\Documents\sunshine beach.mrf 2015-12-14 14:23 - 2015-12-14 14:23 - 31302583 _____ C:\Users\Daniel\Downloads\auv116.pdf 2015-12-14 14:23 - 2015-12-14 14:23 - 31302583 _____ C:\Users\Daniel\Downloads\auv116 (1).pdf 2015-12-14 14:22 - 2015-12-14 14:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-12-14 14:22 - 2015-12-14 14:22 - 00000000 ___RD C:\Program Files (x86)\Skype 2015-12-14 14:11 - 2015-12-14 14:15 - 11692510 _____ C:\Users\Daniel\Downloads\GLGzFAmSSuC(zA.rar 2015-12-14 14:05 - 2015-12-14 14:15 - 32280461 _____ C:\Users\Daniel\Downloads\Nicht bestätigt 522240.crdownload 2015-12-14 13:48 - 2015-12-14 13:48 - 00030280 _____ C:\Users\Daniel\Documents\Climbing Olympus.mrf 2015-12-14 13:20 - 2015-12-15 16:21 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Mouse Recorder 2015-12-14 13:20 - 2015-12-14 13:20 - 00000000 ____D C:\ProgramData\MouseRecorder 2015-12-14 13:20 - 2015-12-14 13:20 - 00000000 ____D C:\ProgramData\Mouse Recorder 2015-12-14 13:20 - 2015-12-14 13:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MouseRecorder 2015-12-14 13:20 - 2015-12-14 13:20 - 00000000 ____D C:\Program Files (x86)\MouseRecorder 2015-12-14 13:19 - 2015-12-14 13:21 - 02467080 _____ (Bartels Media GmbH ) C:\Users\Daniel\Downloads\MouseRecorderSetup1042.exe 2015-12-14 13:17 - 2015-12-14 13:17 - 02331531 _____ C:\Users\Daniel\Downloads\MRP276Setup.zip 2015-12-14 13:10 - 2015-12-14 13:10 - 00000000 ____D C:\Users\Daniel\Documents\My Recorded Scripts 2015-12-14 13:10 - 2015-12-14 13:10 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Mouse Recorder Pro 2015-12-14 13:10 - 2015-12-14 13:10 - 00000000 ____D C:\Users\Daniel\AppData\Local\Nemex 2015-12-14 13:09 - 2015-12-14 13:09 - 02332069 _____ C:\Users\Daniel\Downloads\mrp275setup.zip 2015-12-14 13:01 - 2015-12-14 13:01 - 00842440 _____ (ghost-mouse.com ) C:\Users\Daniel\Downloads\GhostMouse323-Setup (1).exe 2015-12-14 12:55 - 2015-12-15 13:10 - 00001682 _____ C:\Users\Public\Desktop\BlueStacks.lnk 2015-12-14 12:55 - 2015-12-15 13:08 - 00001742 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\BlueStacks.lnk 2015-12-14 12:55 - 2015-12-14 13:01 - 00842440 _____ (ghost-mouse.com ) C:\Users\Daniel\Downloads\GhostMouse323-Setup.exe 2015-12-14 12:55 - 2015-12-14 12:55 - 00000000 ____D C:\ProgramData\BlueStacksGameManager 2015-12-14 12:54 - 2015-12-14 12:54 - 00000000 ____D C:\Users\Daniel\AppData\Local\fabi.me 2015-12-14 12:53 - 2015-12-14 12:55 - 00000000 ____D C:\Program Files (x86)\BlueStacks 2015-12-14 12:53 - 2015-12-14 12:54 - 00000000 ____D C:\ProgramData\BlueStacks 2015-12-14 12:53 - 2015-12-14 12:53 - 00094899 _____ C:\Users\Daniel\Downloads\SpeedAutoClicker.zip 2015-12-14 12:46 - 2015-12-14 12:47 - 308301520 _____ (BlueStack Systems Inc.) C:\Users\Daniel\Downloads\BlueStacks2-Installer_native.exe 2015-12-12 19:59 - 2015-12-01 08:01 - 02115936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2015-12-12 19:59 - 2015-12-01 06:51 - 07523840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2015-12-12 19:59 - 2015-12-01 05:59 - 05455360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2015-12-12 19:59 - 2015-11-25 06:42 - 04532304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2015-12-12 19:59 - 2015-11-25 06:33 - 03622272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2015-12-12 19:59 - 2015-11-25 06:27 - 01366680 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2015-12-12 19:59 - 2015-11-25 06:12 - 04047288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2015-12-12 19:59 - 2015-11-25 06:09 - 01310880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2015-12-12 19:59 - 2015-11-25 06:01 - 02879024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2015-12-12 19:59 - 2015-11-25 05:49 - 01569280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll 2015-12-12 19:59 - 2015-11-25 05:44 - 21872640 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2015-12-12 19:59 - 2015-11-25 05:42 - 24592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2015-12-12 19:59 - 2015-11-25 05:36 - 01710592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll 2015-12-12 19:59 - 2015-11-25 05:35 - 00929792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2015-12-12 19:59 - 2015-11-25 05:35 - 00845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe 2015-12-12 19:59 - 2015-11-25 05:34 - 12504576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2015-12-12 19:59 - 2015-11-25 05:31 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMM.dll 2015-12-12 19:59 - 2015-11-25 05:30 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3mm.dll 2015-12-12 19:59 - 2015-11-25 05:29 - 01649152 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2015-12-12 19:59 - 2015-11-25 05:29 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ninput.dll 2015-12-12 19:59 - 2015-11-25 05:28 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll 2015-12-12 19:59 - 2015-11-25 05:27 - 02180608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2015-12-12 19:59 - 2015-11-25 05:23 - 19323392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2015-12-12 19:59 - 2015-11-25 05:23 - 03588096 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2015-12-12 19:59 - 2015-11-25 05:23 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll 2015-12-12 19:59 - 2015-11-25 05:22 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2015-12-12 19:59 - 2015-11-25 05:22 - 01383424 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2015-12-12 19:59 - 2015-11-25 05:22 - 00603648 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll 2015-12-12 19:59 - 2015-11-25 05:19 - 01795584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2015-12-12 19:59 - 2015-11-25 05:18 - 01233920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll 2015-12-12 19:59 - 2015-11-25 05:17 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll 2015-12-12 19:59 - 2015-11-25 05:16 - 01442816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll 2015-12-12 19:59 - 2015-11-25 05:16 - 00786432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe 2015-12-12 19:59 - 2015-11-25 05:11 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ninput.dll 2015-12-12 19:59 - 2015-11-25 05:10 - 18801664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2015-12-12 19:59 - 2015-11-25 05:10 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll 2015-12-12 19:59 - 2015-11-25 05:10 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll 2015-12-12 19:59 - 2015-11-25 05:05 - 11263488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2015-12-12 19:59 - 2015-11-25 05:04 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2015-12-12 19:59 - 2015-11-25 05:04 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\duser.dll 2015-12-12 19:59 - 2015-11-25 05:04 - 00474624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll 2015-12-12 19:58 - 2015-12-01 07:03 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\gpuenergydrv.sys 2015-12-12 19:58 - 2015-12-01 06:54 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2015-12-12 19:58 - 2015-12-01 06:49 - 04792320 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2015-12-12 19:58 - 2015-12-01 06:02 - 03580416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2015-12-12 19:58 - 2015-11-25 06:42 - 00168288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.exe 2015-12-12 19:58 - 2015-11-25 06:41 - 01822280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2015-12-12 19:58 - 2015-11-25 06:40 - 00516448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2015-12-12 19:58 - 2015-11-25 06:32 - 00113184 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll 2015-12-12 19:58 - 2015-11-25 06:11 - 01532984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2015-12-12 19:58 - 2015-11-25 05:59 - 00092992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll 2015-12-12 19:58 - 2015-11-25 05:49 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll 2015-12-12 19:58 - 2015-11-25 05:49 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll 2015-12-12 19:58 - 2015-11-25 05:49 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll 2015-12-12 19:58 - 2015-11-25 05:48 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EthernetMediaManager.dll 2015-12-12 19:58 - 2015-11-25 05:48 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMediaManager.dll 2015-12-12 19:58 - 2015-11-25 05:37 - 02350592 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2015-12-12 19:58 - 2015-11-25 05:36 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys 2015-12-12 19:58 - 2015-11-25 05:30 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys 2015-12-12 19:58 - 2015-11-25 05:30 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys 2015-12-12 19:58 - 2015-11-25 05:28 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2015-12-12 19:58 - 2015-11-25 05:26 - 00849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll 2015-12-12 19:58 - 2015-11-25 05:26 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll 2015-12-12 19:58 - 2015-11-25 05:25 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2015-12-12 19:58 - 2015-11-25 05:25 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll 2015-12-12 19:58 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdgeoqw.dll 2015-12-12 19:58 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZST.DLL 2015-12-12 19:58 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZEL.DLL 2015-12-12 19:58 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZE.DLL 2015-12-12 19:58 - 2015-11-25 05:19 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2015-12-12 19:58 - 2015-11-25 05:13 - 02153984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2015-12-12 19:58 - 2015-11-25 05:10 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2015-12-12 19:58 - 2015-11-25 05:08 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll 2015-12-12 19:58 - 2015-11-25 05:07 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll 2015-12-12 19:58 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdgeoqw.dll 2015-12-12 19:58 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZST.DLL 2015-12-12 19:58 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZEL.DLL 2015-12-12 19:58 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZE.DLL 2015-12-12 19:58 - 2015-11-25 03:52 - 00775312 _____ C:\WINDOWS\SysWOW64\locale.nls 2015-12-12 19:58 - 2015-11-25 03:52 - 00775312 _____ C:\WINDOWS\system32\locale.nls 2015-12-06 18:50 - 2015-12-06 18:50 - 01142543 _____ C:\Users\Daniel\Downloads\Bewerbung_Melanie_Schwab 1.zip 2015-12-06 18:50 - 2015-12-06 18:50 - 01142543 _____ C:\Users\Daniel\Downloads\Bewerbung_Melanie_Schwab 1 (1).zip 2015-12-06 18:49 - 2015-12-06 18:49 - 04397665 _____ C:\Users\Daniel\Downloads\Bewerbung_Melanie_Schwab (1).zip 2015-12-06 18:48 - 2015-12-06 18:48 - 01142560 _____ C:\Users\Daniel\Downloads\Bewerbung_Melanie_Schwab.zip 2015-12-06 18:19 - 2015-12-06 18:19 - 03984004 _____ C:\Users\Daniel\Downloads\Bewerbung_Erzieherin_Daniele_Maier.pdf 2015-12-06 18:06 - 2015-12-06 18:06 - 00291489 _____ C:\Users\Daniel\Downloads\20151127131614271.pdf 2015-12-06 17:50 - 2015-12-06 17:50 - 00109513 _____ C:\Users\Daniel\Desktop\Anmeldung.pdf 2015-12-03 18:29 - 2015-12-03 18:29 - 00169351 _____ C:\Users\Daniel\Downloads\WAZ.pdf 2015-11-30 21:32 - 2015-11-30 21:32 - 00064681 _____ C:\Users\Daniel\Downloads\Rückseite.pdf 2015-11-30 21:31 - 2015-11-30 21:31 - 00064681 _____ C:\Users\Daniel\Desktop\Rückseite.pdf 2015-11-30 21:29 - 2015-11-30 21:29 - 00032176 _____ C:\Users\Daniel\Desktop\Vorderseite.pdf 2015-11-30 21:25 - 2015-11-30 21:25 - 04889088 _____ C:\Users\Daniel\Downloads\Da Carlo Front Visit.zdl 2015-11-30 21:25 - 2015-11-30 21:25 - 01163776 _____ C:\Users\Daniel\Downloads\Da Carlo Back Visit.zdl 2015-11-29 20:16 - 2015-11-29 20:16 - 00457667 _____ C:\Users\Daniel\Downloads\maui.pdf 2015-11-26 16:19 - 2015-11-26 17:43 - 00000000 ____D C:\Users\Daniel\Desktop\Schwab Melli 2015-11-25 16:11 - 2015-11-25 16:11 - 00255478 _____ C:\Users\Daniel\Desktop\Dienstplan_Änderung2_NEU.xlsm 2015-11-25 16:00 - 2015-11-25 16:00 - 00273974 _____ C:\Users\Daniel\Downloads\Dienstplan_Änderung2_NEU.xlsm 2015-11-25 15:59 - 2015-11-25 15:59 - 00076125 _____ C:\Users\Daniel\Downloads\Kopie von Dienstplan_Änderung2 (1).xlsx ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-12-23 13:24 - 2014-05-05 05:06 - 00001138 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2015-12-23 13:22 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\AppReadiness 2015-12-23 13:02 - 2014-06-07 19:47 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2015-12-23 11:24 - 2014-05-05 05:06 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2015-12-23 08:17 - 2014-06-23 14:35 - 00000000 ____D C:\Users\Daniel\AppData\Local\Adobe 2015-12-23 08:16 - 2015-08-08 19:27 - 00004160 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{88EEB1D5-370C-4812-9418-EDF692A916C5} 2015-12-23 08:06 - 2015-02-13 17:03 - 00000000 ____D C:\ProgramData\TwonkyServer 2015-12-23 07:46 - 2015-08-01 19:33 - 01790124 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2015-12-23 07:46 - 2015-07-10 17:34 - 00771100 _____ C:\WINDOWS\system32\perfh007.dat 2015-12-23 07:46 - 2015-07-10 17:34 - 00153964 _____ C:\WINDOWS\system32\perfc007.dat 2015-12-23 07:46 - 2015-07-10 12:02 - 00000000 ____D C:\WINDOWS\INF 2015-12-23 07:44 - 2014-11-03 18:22 - 00000000 ____D C:\ProgramData\BlueStacksSetup 2015-12-23 07:42 - 2014-05-05 05:08 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Skype 2015-12-23 07:39 - 2015-08-15 18:33 - 00000000 ____D C:\WINDOWS\Minidump 2015-12-23 07:39 - 2015-08-01 19:21 - 00000000 ____D C:\Users\postgres 2015-12-23 07:39 - 2015-08-01 19:21 - 00000000 ____D C:\Users\Daniel 2015-12-23 07:39 - 2015-08-01 19:20 - 00000000 _____ C:\WINDOWS\system32\Drivers\lvuvc.hs 2015-12-23 07:39 - 2015-07-10 13:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2015-12-23 07:39 - 2015-07-10 10:05 - 00000000 ____D C:\Windows 2015-12-22 19:25 - 2015-07-10 10:05 - 00524288 ___SH C:\WINDOWS\system32\config\BBI 2015-12-22 19:25 - 2014-06-23 15:11 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin 2015-12-22 18:16 - 2014-08-16 20:56 - 00000000 ____D C:\Program Files\Common Files\Adobe 2015-12-22 18:16 - 2014-05-26 12:17 - 00000000 ____D C:\ProgramData\Adobe 2015-12-22 18:16 - 2014-05-05 05:03 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Adobe 2015-12-22 18:15 - 2014-05-26 12:17 - 00000000 ____D C:\Program Files (x86)\Adobe 2015-12-22 17:51 - 2014-05-13 20:10 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\Notepad++ 2015-12-22 17:45 - 2015-04-02 10:03 - 00000000 ____D C:\Users\Daniel\AppData\Roaming\uTorrent 2015-12-22 14:51 - 2015-07-10 12:04 - 00000000 ___HD C:\Program Files\WindowsApps 2015-12-22 11:28 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\Registration 2015-12-22 11:09 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\NDF 2015-12-22 11:07 - 2014-05-29 11:18 - 00000000 ____D C:\Users\Daniel\AppData\Local\CrashDumps 2015-12-22 11:07 - 2014-05-13 19:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-12-21 15:41 - 2015-08-16 17:58 - 00000000 ____D C:\Program Files (x86)\StarMoney 9.0 2015-12-21 11:06 - 2015-10-03 15:02 - 00010560 _____ C:\Users\Daniel\Desktop\Lego-Architecture.xlsx 2015-12-21 10:28 - 2015-08-01 19:20 - 00000000 ____D C:\ProgramData\AMD 2015-12-21 10:28 - 2015-08-01 19:20 - 00000000 ____D C:\Program Files (x86)\ATI Technologies 2015-12-21 10:27 - 2014-05-05 05:07 - 00000000 ____D C:\AMD 2015-12-21 10:25 - 2015-08-25 19:22 - 21648880 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys 2015-12-21 10:25 - 2015-08-25 19:22 - 00255472 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe 2015-12-21 10:25 - 2015-07-16 01:12 - 00162232 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll 2015-12-21 10:25 - 2015-07-16 01:11 - 12088000 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll 2015-12-21 10:25 - 2015-07-16 01:11 - 10211016 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll 2015-12-21 10:25 - 2015-07-16 01:11 - 08009360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll 2015-12-21 10:25 - 2015-07-16 01:11 - 07482560 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll 2015-12-21 10:25 - 2015-07-16 01:11 - 01479808 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll 2015-12-21 10:25 - 2015-07-16 01:11 - 01223544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll 2015-12-21 10:25 - 2015-07-16 01:11 - 00143056 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll 2015-12-21 10:25 - 2015-07-16 01:11 - 00112360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll 2015-12-21 10:25 - 2015-07-16 00:17 - 00683504 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe 2015-12-21 10:25 - 2015-07-16 00:13 - 00674288 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys 2015-12-21 10:25 - 2015-07-16 00:12 - 00874480 _____ (AMD) C:\WINDOWS\system32\coinst_15.20.dll 2015-12-20 10:37 - 2014-05-05 05:03 - 00000000 ____D C:\Users\Daniel\AppData\Local\Packages 2015-12-18 19:58 - 2015-09-19 10:01 - 00023600 _____ C:\Users\Daniel\Desktop\Kaufpreis Backnang.xlsx 2015-12-18 17:14 - 2015-07-10 17:44 - 00000000 ____D C:\WINDOWS\ShellNew 2015-12-17 18:52 - 2015-08-20 15:17 - 00002099 _____ C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk 2015-12-17 18:52 - 2014-07-10 16:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony 2015-12-17 18:52 - 2014-05-05 05:08 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2015-12-17 14:36 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2015-12-15 13:24 - 2014-11-03 18:30 - 00000000 ____D C:\Users\Daniel\.VirtualBox 2015-12-15 13:11 - 2015-08-01 19:25 - 00001540 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2015-12-15 13:11 - 2015-06-26 22:05 - 00001162 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk 2015-12-15 13:11 - 2014-12-29 16:10 - 00000971 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk 2015-12-15 13:11 - 2014-10-20 18:02 - 00000942 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk 2015-12-15 13:11 - 2014-08-16 20:58 - 00000890 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk 2015-12-15 13:11 - 2014-08-16 20:57 - 00001527 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk 2015-12-15 13:11 - 2014-08-16 17:13 - 00001750 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rainmeter.lnk 2015-12-15 13:11 - 2014-05-13 19:27 - 00001159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-12-15 13:10 - 2015-08-26 18:40 - 00001218 _____ C:\Users\Public\Desktop\CDBurnerXP.lnk 2015-12-15 13:10 - 2015-08-16 18:00 - 00002234 _____ C:\Users\Public\Desktop\StarMoney 9.0.lnk 2015-12-15 13:08 - 2015-08-01 20:21 - 00002425 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2015-12-15 13:08 - 2015-05-16 13:40 - 00002158 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\KÜCHEN QUELLE 3D.lnk 2015-12-15 13:08 - 2015-01-18 17:42 - 00001033 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iPadian.lnk 2015-12-15 13:08 - 2015-01-08 18:29 - 00001822 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Coral Poker.lnk 2015-12-15 13:08 - 2014-12-16 14:46 - 00001830 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Winner Poker.lnk 2015-12-15 13:08 - 2014-08-21 15:45 - 00001136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\LINE.lnk 2015-12-15 13:08 - 2014-07-25 19:12 - 00001792 _____ C:\ProgramData\Microsoft\Windows\Start Menu\24hPoker.lnk 2015-12-15 13:08 - 2014-07-02 16:36 - 00001102 _____ C:\ProgramData\Microsoft\Windows\Start Menu\PokerStars.eu.lnk 2015-12-15 13:08 - 2014-06-14 19:21 - 00001120 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\PokerStars.eu.lnk 2015-12-15 13:08 - 2014-05-18 20:21 - 00000295 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Papierkorb.lnk 2015-12-15 13:08 - 2014-05-17 11:36 - 00001079 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\PokerRanger.lnk 2015-12-15 13:08 - 2014-05-05 15:24 - 00000811 _____ C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Betfair.com Poker.lnk 2015-12-15 13:07 - 2015-10-12 19:18 - 00002180 _____ C:\Users\Daniel\Desktop\AusweisApp2.lnk 2015-12-15 12:04 - 2015-08-01 20:18 - 00000000 __RHD C:\Users\Public\AccountPictures 2015-12-15 11:12 - 2014-10-20 17:34 - 00000000 ____D C:\WINDOWS\system32\appmgmt 2015-12-14 22:26 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\rescache 2015-12-14 22:20 - 2015-09-06 12:11 - 00000000 ____D C:\WINDOWS\Panther 2015-12-14 22:15 - 2015-10-30 20:28 - 00000000 ___HD C:\$WINDOWS.~BT 2015-12-14 19:15 - 2015-07-10 13:20 - 04962496 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2015-12-14 14:22 - 2014-05-05 05:08 - 00000000 ____D C:\Users\Daniel\AppData\Local\Skype 2015-12-14 14:22 - 2014-05-05 05:07 - 00000000 ____D C:\ProgramData\Skype 2015-12-14 14:19 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\oobe 2015-12-14 14:19 - 2014-05-10 14:33 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2015-12-14 12:55 - 2015-07-10 12:04 - 00000000 __RHD C:\Users\Public\Libraries 2015-12-14 12:50 - 2014-11-03 18:25 - 00000000 ____D C:\Program Files\Andy 2015-12-14 11:44 - 2014-05-05 14:40 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2015-12-14 11:44 - 2014-05-05 14:38 - 00000000 ____D C:\ProgramData\Microsoft Help 2015-12-14 11:43 - 2013-08-22 14:25 - 00000167 _____ C:\WINDOWS\win.ini 2015-12-14 11:41 - 2014-05-10 14:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-12-14 11:40 - 2014-05-10 14:33 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2015-12-14 11:39 - 2015-07-10 11:55 - 00000000 ____D C:\WINDOWS\CbsTemp 2015-12-14 11:38 - 2014-05-07 16:59 - 00000000 ____D C:\WINDOWS\system32\MRT 2015-12-14 11:32 - 2014-05-07 16:59 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2015-12-14 09:46 - 2014-05-05 05:05 - 00000000 ___RD C:\Users\Daniel\OneDrive 2015-12-12 19:44 - 2014-06-14 19:21 - 00000000 ____D C:\Users\Daniel\AppData\Local\PokerStars.EU 2015-12-09 04:39 - 2014-05-07 18:25 - 00301728 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2015-12-06 11:19 - 2014-05-05 05:06 - 00004196 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2015-12-06 11:19 - 2014-05-05 05:06 - 00003964 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2015-12-06 11:04 - 2014-08-16 21:42 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe 2015-12-06 11:04 - 2014-05-05 14:37 - 00000000 ____D C:\Users\Daniel\AppData\Local\AMD 2015-12-01 01:32 - 2015-10-03 15:01 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2015-12-01 01:32 - 2015-10-03 15:01 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2014-11-27 21:25 - 2014-11-27 21:25 - 0004676 _____ () C:\Users\Daniel\AppData\Local\recently-used.xbel 2015-05-16 13:40 - 2015-05-16 13:40 - 0370070 _____ () C:\Users\Daniel\AppData\Local\SquareClock.Production_Home_KQ_WebIcon.ico 2015-02-13 17:03 - 2015-02-13 17:03 - 0000011 _____ () C:\ProgramData\.tv7 2014-05-05 15:24 - 2014-05-05 15:24 - 0558105 _____ () C:\ProgramData\1399299703.bdinstall.bin 2015-01-05 15:23 - 2015-01-05 15:23 - 0259192 _____ () C:\ProgramData\1420467746.bdinstall.bin 2015-02-08 16:01 - 2015-02-08 16:01 - 0740775 _____ () C:\ProgramData\AndyDrivers.zip 2015-08-01 19:19 - 2015-08-01 19:19 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2014-08-09 18:17 - 2014-08-09 18:17 - 0005044 _____ () C:\ProgramData\flwjycbm.bab ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-12-14 22:04 ==================== Ende von FRST.txt ============================ Ansonsten habe ich noch folgende Probleme (nach dem ESET-Scan wurde allerdings kein weiterer Neustart durchgeführt!) - Office Note versucht weiterhin nach jedem Neustart sich zu öffnen und was zu versenden - Nach jedem Neustart blinkt bei Malwarebyte verschiedene "Fehlermeldungen kurz auf"  |
| Themen zu Windows 10: Malwarebytes meldet infizierte Dateien, teilweise funktioniert das Internet nicht, generell PC langsam |
| bluestacks, bonjour, dnsapi.dll, downloader, ebay, flash player, freshworx, google, homepage, installation, internet, langsam, monitor, mozilla, programm, prozesse, realtek, registry, scan, security, senden, services.exe, starmoney, starten, super, svchost.exe, system, udp, warnung, windows, windows 10 pro |
Baum-Darstellung