| |
| |||||||
Log-Analyse und Auswertung: Windows 10: Rechner hängt sich immer wieder aufWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
10.01.2016, 22:07
| #1 |
 |  Windows 10: Rechner hängt sich immer wieder auf Hallo, ich habe seit einigen Tagen das Problem, dass sich mein Rechner immer wieder völlig unerwartet und auch in unterschiedlichen Programmen aufhängt. Der Bildschirm wird dann entweder ganz schwarz, weiß oder gemustert. Am Monitor liegt es nicht, dessen Aus- und Wiedereinschalten bringt nichts. Der PC lässt sich erst durch Steckerziehen wieder neu starten. In den Wochen davor hatte ich (und auch ein weiterer Benutzer des PC) das Problem, dass wir uns nicht mit unserem Account anmelden konnten. Statt dessen wurde uns ein temporärer Account zugewiesen. Ein Avira-scan erbrachte zwar einen Fund, der erschien mir aber eher harmlos. Trotzdem bin ich verunsichert, die geschilderten Probleme sind ja früher nicht aufgetreten. Anbei meine logfiles (malwarebytes und avira als Anlage), ich hoffe, Ihr könnt mir da weiterhelfen. FRST: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version:09-01-2015
durchgeführt von Admin (Administrator) auf ****-PC (10-01-2016 13:55:45)
Gestartet von C:\Users\Admin\Downloads
Geladene Profile: P*** & Admin & (Verfügbare Profile: P*** & A*** & Admin & H*** & L*** & DefaultAppPool)
Platform: Microsoft Windows 10 Home Version 1511 (X86) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Edge)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX86\officeclicktorun.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PaperPort\pptd40nt.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PDF Viewer Plus\pdfPro5Hook.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\BrYNSvc.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Users\P***\AppData\Local\Programs\Google\MusicManager\MusicManager.exe
() C:\Users\P***\AppData\Local\Amazon Music\Amazon Music Helper.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCcUxSys.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x86__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.15731.0_x86__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsDVDPlayer_3.6.13291.0_x86__8wekyb3d8bbwe\DvdPlayer.UI.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.25.15.0_x86__8wekyb3d8bbwe\WinStore.Mobile.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PaperPort\pptd40nt.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PDF Viewer Plus\pdfPro5Hook.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCcUxSys.exe
(Brother Industries, Ltd.) C:\Program Files\Brother\Brother Help\BrotherHelp.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.Systray.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Admin\Downloads\FRST (1).exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12214528 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\WINDOWS\KHALMNPR.EXE [76304 2008-02-29] (Logitech, Inc.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [803200 2015-12-01] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [IndexSearch] => C:\Program Files\Nuance\PaperPort\IndexSearch.exe [46952 2011-08-02] (Nuance Communications, Inc.)
HKLM\...\Run: [PaperPort PTD] => C:\Program Files\Nuance\PaperPort\pptd40nt.exe [30568 2011-08-02] (Nuance Communications, Inc.)
HKLM\...\Run: [PDFHook] => C:\Program Files\Nuance\PDF Viewer Plus\pdfpro5hook.exe [636192 2010-03-05] (Nuance Communications, Inc.)
HKLM\...\Run: [PDF5 Registry Controller] => C:\Program Files\Nuance\PDF Viewer Plus\RegistryController.exe [62752 2010-03-05] (Nuance Communications, Inc.)
HKLM\...\Run: [ControlCenter4] => C:\Program Files\ControlCenter4\BrCcBoot.exe [139264 2013-04-05] (Brother Industries, Ltd.)
HKLM\...\Run: [BrStsMon00] => C:\Program Files\Browny02\Brother\BrStMonW.exe [4522496 2012-12-27] (Brother Industries, Ltd.)
HKLM\...\Run: [BrHelp] => C:\Program Files\Brother\Brother Help\BrotherHelp.exe [2009088 2013-01-18] (Brother Industries, Ltd.)
HKLM\...\Run: [Avira SystrayStartTrigger] => C:\Program Files\Avira\Launcher\Avira.SystrayStartTrigger.exe [66320 2015-11-23] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157456 2015-12-17] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe [748744 2015-11-04] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-653066591-3386837451-177190309-1000\...\Run: [Google Update] => C:\Users\P***\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-01] (Google Inc.)
HKU\S-1-5-21-653066591-3386837451-177190309-1000\...\Run: [MusicManager] => C:\Users\P***\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [7643136 2015-11-17] (Google Inc.)
HKU\S-1-5-21-653066591-3386837451-177190309-1000\...\Run: [Amazon Music] => C:\Users\P***\AppData\Local\Amazon Music\Amazon Music Helper.exe [5890368 2015-11-18] ()
HKU\S-1-5-21-653066591-3386837451-177190309-1000\...\Run: [GoogleChromeAutoLaunch_5760F31D5B4387C1CCD75B272A389EB7] => C:\Program Files\Google\Chrome\Application\chrome.exe [741704 2015-12-11] (Google Inc.)
HKU\S-1-5-21-653066591-3386837451-177190309-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6490904 2015-08-20] (Piriform Ltd)
HKU\S-1-5-21-653066591-3386837451-177190309-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-653066591-3386837451-177190309-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-653066591-3386837451-177190309-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [204800 2015-10-30] (Microsoft Corporation)
HKU\S-1-5-21-653066591-3386837451-177190309-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Google Update] => C:\Users\P***\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-01] (Google Inc.)
HKU\S-1-5-21-653066591-3386837451-177190309-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [MusicManager] => C:\Users\P***\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [7643136 2015-11-17] (Google Inc.)
HKU\S-1-5-21-653066591-3386837451-177190309-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Amazon Music] => C:\Users\P***\AppData\Local\Amazon Music\Amazon Music Helper.exe [5890368 2015-11-18] ()
HKU\S-1-5-21-653066591-3386837451-177190309-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [GoogleChromeAutoLaunch_5760F31D5B4387C1CCD75B272A389EB7] => C:\Program Files\Google\Chrome\Application\chrome.exe [741704 2015-12-11] (Google Inc.)
HKU\S-1-5-21-653066591-3386837451-177190309-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6490904 2015-08-20] (Piriform Ltd)
HKU\S-1-5-21-653066591-3386837451-177190309-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-653066591-3386837451-177190309-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-653066591-3386837451-177190309-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [204800 2015-10-30] (Microsoft Corporation)
HKU\S-1-5-21-653066591-3386837451-177190309-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6490904 2015-08-20] (Piriform Ltd)
HKU\S-1-5-21-653066591-3386837451-177190309-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-653066591-3386837451-177190309-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-653066591-3386837451-177190309-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6490904 2015-08-20] (Piriform Ltd)
HKU\S-1-5-21-653066591-3386837451-177190309-1002\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-653066591-3386837451-177190309-1002\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-653066591-3386837451-177190309-1002\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-653066591-3386837451-177190309-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6490904 2015-08-20] (Piriform Ltd)
HKU\S-1-5-21-653066591-3386837451-177190309-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-653066591-3386837451-177190309-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-653066591-3386837451-177190309-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-653066591-3386837451-177190309-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [515072 2015-10-30] (Microsoft Corporation)
HKU\S-1-5-21-653066591-3386837451-177190309-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-653066591-3386837451-177190309-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-653066591-3386837451-177190309-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-653066591-3386837451-177190309-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-653066591-3386837451-177190309-1010-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-653066591-3386837451-177190309-1010-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-12-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-12-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-12-16] (Microsoft Corporation)
GroupPolicyUsers\S-1-5-21-653066591-3386837451-177190309-1006\User: Beschränkung <======= ACHTUNG
GroupPolicyUsers\S-1-5-21-653066591-3386837451-177190309-1005\User: Beschränkung <======= ACHTUNG
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{3c7e6cd9-bdfa-4788-aa0f-146de9693532}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{ef3f26a8-caa2-45c6-9b8b-7ac9d5b5a0ff}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKU\S-1-5-21-653066591-3386837451-177190309-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKU\S-1-5-21-653066591-3386837451-177190309-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
HKU\S-1-5-21-653066591-3386837451-177190309-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://medion.msn.com
HKU\S-1-5-21-653066591-3386837451-177190309-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKU\S-1-5-21-653066591-3386837451-177190309-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
HKU\S-1-5-21-653066591-3386837451-177190309-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://medion.msn.com
HKU\S-1-5-21-653066591-3386837451-177190309-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.aldi.com
HKU\S-1-5-21-653066591-3386837451-177190309-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
HKU\S-1-5-21-653066591-3386837451-177190309-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://medion.msn.com
HKU\S-1-5-21-653066591-3386837451-177190309-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://medion.msn.com
HKU\S-1-5-21-653066591-3386837451-177190309-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.aldi.com
HKU\S-1-5-21-653066591-3386837451-177190309-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
HKU\S-1-5-21-653066591-3386837451-177190309-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://medion.msn.com
HKU\S-1-5-21-653066591-3386837451-177190309-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://medion.msn.com
HKU\S-1-5-21-653066591-3386837451-177190309-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.aldi.com
HKU\S-1-5-21-653066591-3386837451-177190309-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
HKU\S-1-5-21-653066591-3386837451-177190309-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://medion.msn.com
HKU\S-1-5-21-653066591-3386837451-177190309-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://medion.msn.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-653066591-3386837451-177190309-1000 -> {BD2480BA-B701-4287-9BCB-2F914DE69BEE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MEDTDF&pc=MAMD&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-653066591-3386837451-177190309-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {BD2480BA-B701-4287-9BCB-2F914DE69BEE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MEDTDF&pc=MAMD&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-653066591-3386837451-177190309-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {B58807EB-8622-4BD5-B2EA-4D8DBFD96F64} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MEDTDF&pc=MAMD&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-653066591-3386837451-177190309-1002 -> DefaultScope {9D46119C-B30D-4197-A5E6-3DE552D91ECB} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MEDTDF&pc=MAMD&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-653066591-3386837451-177190309-1002 -> {9D46119C-B30D-4197-A5E6-3DE552D91ECB} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MEDTDF&pc=MAMD&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-653066591-3386837451-177190309-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {9D46119C-B30D-4197-A5E6-3DE552D91ECB} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MEDTDF&pc=MAMD&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-653066591-3386837451-177190309-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {9D46119C-B30D-4197-A5E6-3DE552D91ECB} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MEDTDF&pc=MAMD&src=IE-SearchBox
BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2010-05-28] (Hewlett-Packard Co.)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-12-16] (Microsoft Corporation)
BHO: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> C:\Program Files\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll [2009-02-06] (Zeon Corporation)
BHO: Kein Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> Keine Datei
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-12-29] (Oracle Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-12-16] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-29] (Oracle Corporation)
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2010-05-28] (Hewlett-Packard Co.)
Toolbar: HKU\S-1-5-21-653066591-3386837451-177190309-1000 -> Kein Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - Keine Datei
Toolbar: HKU\S-1-5-21-653066591-3386837451-177190309-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> Kein Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - Keine Datei
Toolbar: HKU\S-1-5-21-653066591-3386837451-177190309-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> Kein Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - Keine Datei
Toolbar: HKU\S-1-5-21-653066591-3386837451-177190309-1002 -> Kein Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - Keine Datei
Toolbar: HKU\S-1-5-21-653066591-3386837451-177190309-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> Kein Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - Keine Datei
DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\22x3649u.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_20_0_0_267.dll [2015-12-29] ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2015-10-14] ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-29] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-29] (Oracle Corporation)
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-11-03] (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-07-12] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-04-16] (Microsoft Corporation)
FF Plugin: @Nero.com/KM -> C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2012-08-02] (Nero AG)
FF Plugin: @SonyCreativeSoftware.com/Media Go,version=1.0 -> C:\Program Files\Sony\Media Go\npmediago.dll [Keine Datei]
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-653066591-3386837451-177190309-1000: @tools.google.com/Google Update;version=3 -> C:\Users\P***\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.)
FF Plugin HKU\S-1-5-21-653066591-3386837451-177190309-1000: @tools.google.com/Google Update;version=9 -> C:\Users\P***\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.)
FF Plugin HKU\S-1-5-21-653066591-3386837451-177190309-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @tools.google.com/Google Update;version=3 -> C:\Users\P***\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.)
FF Plugin HKU\S-1-5-21-653066591-3386837451-177190309-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @tools.google.com/Google Update;version=9 -> C:\Users\P***\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.)
FF Plugin HKU\S-1-5-21-653066591-3386837451-177190309-1002: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll [2012-12-07] (Amazon.com, Inc.)
FF Plugin HKU\S-1-5-21-653066591-3386837451-177190309-1002: sony.com/MediaGoDetector -> C:\Program Files\Sony\Media Go\npMediaGoDetector.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-653066591-3386837451-177190309-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll [2012-12-07] (Amazon.com, Inc.)
FF Plugin HKU\S-1-5-21-653066591-3386837451-177190309-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: sony.com/MediaGoDetector -> C:\Program Files\Sony\Media Go\npMediaGoDetector.dll [Keine Datei]
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-05-20] [ist nicht signiert]
FF HKU\S-1-5-21-653066591-3386837451-177190309-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Thunderbird\Extensions: [{0E810812-F4BB-4309-942A-755587587A5E}] - C:\Program Files\BullGuard Ltd\BullGuard\Spamfilter\TbSpamfilter => nicht gefunden
FF HKU\S-1-5-21-653066591-3386837451-177190309-1002\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-05-20] [ist nicht signiert]
FF HKU\S-1-5-21-653066591-3386837451-177190309-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-05-20] [ist nicht signiert]
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-02-09]
Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\47.0.2526.106\ppGoogleNaClPluginChrome.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\47.0.2526.106\pdf.dll => Keine Datei
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\47.0.2526.106\gcswf32.dll => Keine Datei
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_228.dll => Keine Datei
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll => Keine Datei
CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll => Keine Datei
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll => Keine Datei
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL => Keine Datei
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll => Keine Datei
CHR Plugin: (Bing Bar) - C:\Program Files\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll => Keine Datei
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll => Keine Datei
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll => Keine Datei
CHR Profile: C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avira Browserschutz) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-01-10]
CHR Extension: (DvdVideoSoft Free Youtube Download) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2016-01-10] [UpdateUrl: hxxp://www.dvdvideosoft.com/download/extensions/chrome/dvsYoutubeDownload_updates.xml] <==== ACHTUNG
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-10]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-653066591-3386837451-177190309-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Users\Admin\AppData\Roaming\DVDVideoSoft\dvsYoutubeDownload.crx [2012-09-21]
CHR HKU\S-1-5-21-653066591-3386837451-177190309-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Users\Admin\AppData\Roaming\DVDVideoSoft\dvsYoutubeDownload.crx [2012-09-21]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [948392 2015-12-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [466408 2015-12-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [466408 2015-12-01] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1418560 2015-12-01] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe [249624 2015-11-23] (Avira Operations GmbH & Co. KG)
R3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [282112 2012-10-26] (Brother Industries, Ltd.) [Datei ist nicht signiert]
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe [1898168 2015-11-24] (Microsoft Corporation)
S2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 PDFProFiltSrvPP; C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe [145256 2011-08-02] (Nuance Communications, Inc.)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [280376 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23256 2015-10-30] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [112184 2015-12-01] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [146144 2015-12-01] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [44208 2015-12-01] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [62736 2015-12-01] (Avira Operations GmbH & Co. KG)
R3 LUsbFilt; C:\WINDOWS\System32\Drivers\LUsbFilt.Sys [28944 2008-02-29] (Logitech, Inc.)
S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [51928 2015-10-05] (Malwarebytes Corporation)
R3 rt640x86; C:\WINDOWS\System32\drivers\rt640x86.sys [494080 2015-10-30] (Realtek )
R1 ssmdrv; C:\WINDOWS\System32\DRIVERS\ssmdrv.sys [31848 2015-06-16] (Avira Operations GmbH & Co. KG)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [37400 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [246104 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [98648 2015-10-30] (Microsoft Corporation)
R3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [163328 2015-10-30] (Microsoft Corporation)
U3 idsvc; kein ImagePath
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-01-10 13:55 - 2016-01-10 13:56 - 00034870 _____ C:\Users\Admin\Downloads\FRST.txt
2016-01-10 13:55 - 2016-01-10 13:55 - 00000000 ____D C:\FRST
2016-01-10 13:54 - 2016-01-10 13:55 - 01721856 _____ (Farbar) C:\Users\Admin\Downloads\FRST (1).exe
2016-01-10 13:53 - 2016-01-10 13:53 - 01721856 _____ (Farbar) C:\Users\Admin\Downloads\FRST.exe
2016-01-10 13:52 - 2016-01-10 13:52 - 00000000 ____D C:\Users\Admin\AppData\Local\MicrosoftEdge
2016-01-10 13:41 - 2016-01-10 13:41 - 00001198 _____ C:\Users\Admin\Desktop\20160110_log.txt
2016-01-10 12:51 - 2016-01-10 12:51 - 01721856 _____ (Farbar) C:\Users\P***\Downloads\FRST(1).exe
2016-01-10 12:49 - 2016-01-10 12:49 - 01721856 _____ (Farbar) C:\Users\P***\Downloads\FRST.exe
2016-01-10 12:42 - 2016-01-10 12:42 - 00001133 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-01-10 12:42 - 2016-01-10 12:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2016-01-10 12:42 - 2016-01-10 12:42 - 00000000 ____D C:\Program Files\ Malwarebytes Anti-Malware
2016-01-10 12:42 - 2015-10-05 09:50 - 00094936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-01-10 12:42 - 2015-10-05 09:50 - 00051928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-01-10 12:42 - 2015-10-05 09:50 - 00023256 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-01-10 12:41 - 2016-01-10 12:42 - 22908888 _____ (Malwarebytes ) C:\Users\P***\Downloads\mbam-setup-org-2.2.0.1024.exe
2016-01-08 22:11 - 2016-01-08 22:11 - 00000000 ____D C:\ProgramData\ATI
2016-01-08 22:05 - 2016-01-08 22:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2016-01-08 21:45 - 2016-01-08 21:45 - 00000000 ____D C:\Users\Admin\AppData\Local\ActiveSync
2016-01-08 21:43 - 2016-01-08 21:43 - 00000680 __RSH C:\Users\Admin\ntuser.pol
2016-01-08 19:59 - 2016-01-08 20:01 - 00000000 ____D C:\Users\TEMP.P***-PC.006
2016-01-08 19:59 - 2016-01-08 19:59 - 00000000 ____D C:\Users\TEMP.P***-PC.006\AppData\Local\TileDataLayer
2016-01-08 11:11 - 2016-01-08 20:02 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-01-01 13:01 - 2016-01-01 13:01 - 00000000 ____D C:\Users\A***\AppData\Local\Apple
2015-12-30 21:33 - 2015-12-30 21:33 - 00000000 ____D C:\Users\Admin2\AppData\Roaming\Avira
2015-12-30 21:29 - 2015-12-30 21:29 - 00000000 ____D C:\Users\Admin2\AppData\Local\MicrosoftEdge
2015-12-30 21:28 - 2015-12-30 21:29 - 00002430 _____ C:\Users\Admin2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-12-30 21:28 - 2015-12-30 21:29 - 00000000 ___RD C:\Users\Admin2\OneDrive
2015-12-30 21:28 - 2015-12-30 21:28 - 00000000 ____D C:\Users\Admin2\AppData\Roaming\Intel Corporation
2015-12-30 21:28 - 2015-12-30 21:28 - 00000000 ____D C:\Users\Admin2\AppData\Roaming\ControlCenter4
2015-12-30 21:28 - 2015-12-30 21:28 - 00000000 ____D C:\Users\Admin2\AppData\Roaming\Apple Computer
2015-12-30 21:28 - 2015-12-30 21:28 - 00000000 ____D C:\Users\Admin2\AppData\Local\ActiveSync
2015-12-30 21:27 - 2015-12-30 21:27 - 00000000 ____D C:\Users\Admin2\AppData\Local\Publishers
2015-12-30 21:26 - 2015-12-30 21:28 - 00000000 ____D C:\Users\Admin2
2015-12-30 21:26 - 2015-12-30 21:27 - 00000000 ____D C:\Users\Admin2\AppData\Local\Packages
2015-12-30 21:26 - 2015-12-30 21:26 - 00000680 __RSH C:\Users\Admin2\ntuser.pol
2015-12-30 21:26 - 2015-12-30 21:26 - 00000020 ___SH C:\Users\Admin2\ntuser.ini
2015-12-30 21:26 - 2015-12-30 21:26 - 00000000 _SHDL C:\Users\Admin2\Vorlagen
2015-12-30 21:26 - 2015-12-30 21:26 - 00000000 _SHDL C:\Users\Admin2\Startmenü
2015-12-30 21:26 - 2015-12-30 21:26 - 00000000 _SHDL C:\Users\Admin2\Netzwerkumgebung
2015-12-30 21:26 - 2015-12-30 21:26 - 00000000 _SHDL C:\Users\Admin2\Lokale Einstellungen
2015-12-30 21:26 - 2015-12-30 21:26 - 00000000 _SHDL C:\Users\Admin2\Eigene Dateien
2015-12-30 21:26 - 2015-12-30 21:26 - 00000000 _SHDL C:\Users\Admin2\Druckumgebung
2015-12-30 21:26 - 2015-12-30 21:26 - 00000000 _SHDL C:\Users\Admin2\Documents\Eigene Videos
2015-12-30 21:26 - 2015-12-30 21:26 - 00000000 _SHDL C:\Users\Admin2\Documents\Eigene Musik
2015-12-30 21:26 - 2015-12-30 21:26 - 00000000 _SHDL C:\Users\Admin2\Documents\Eigene Bilder
2015-12-30 21:26 - 2015-12-30 21:26 - 00000000 _SHDL C:\Users\Admin2\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-30 21:26 - 2015-12-30 21:26 - 00000000 _SHDL C:\Users\Admin2\AppData\Local\Verlauf
2015-12-30 21:26 - 2015-12-30 21:26 - 00000000 _SHDL C:\Users\Admin2\AppData\Local\Anwendungsdaten
2015-12-30 21:26 - 2015-12-30 21:26 - 00000000 _SHDL C:\Users\Admin2\Anwendungsdaten
2015-12-30 21:26 - 2015-12-30 21:26 - 00000000 ____D C:\Users\Admin2\AppData\Roaming\Adobe
2015-12-30 21:26 - 2015-12-30 21:26 - 00000000 ____D C:\Users\Admin2\AppData\Local\VirtualStore
2015-12-30 21:26 - 2015-12-30 21:26 - 00000000 ____D C:\Users\Admin2\AppData\Local\TileDataLayer
2015-12-30 21:26 - 2015-12-30 21:26 - 00000000 ____D C:\Users\Admin2\AppData\Local\Google
2015-12-30 21:26 - 2015-11-19 23:03 - 00000000 ____D C:\Users\Admin2\AppData\Roaming\Media Center Programs
2015-12-30 21:26 - 2015-11-19 23:03 - 00000000 ____D C:\Users\Admin2\AppData\Roaming\Macromedia
2015-12-30 21:26 - 2015-11-19 23:03 - 00000000 ____D C:\Users\Admin2\AppData\Roaming\ATI
2015-12-30 21:26 - 2015-11-19 23:03 - 00000000 ____D C:\Users\Admin2\AppData\Local\ATI
2015-12-30 21:24 - 2015-12-30 21:24 - 00001486 _____ C:\Users\P***\Documents\profilelist1002.reg
2015-12-30 21:11 - 2015-12-30 21:11 - 00000020 ___SH C:\Users\TEMP.P***-PC.005\ntuser.ini
2015-12-30 21:11 - 2015-12-30 21:11 - 00000000 _SHDL C:\Users\TEMP.P***-PC.005\Vorlagen
2015-12-30 21:11 - 2015-12-30 21:11 - 00000000 _SHDL C:\Users\TEMP.P***-PC.005\Startmenü
2015-12-30 21:11 - 2015-12-30 21:11 - 00000000 _SHDL C:\Users\TEMP.P***-PC.005\Netzwerkumgebung
2015-12-30 21:11 - 2015-12-30 21:11 - 00000000 _SHDL C:\Users\TEMP.P***-PC.005\Lokale Einstellungen
2015-12-30 21:11 - 2015-12-30 21:11 - 00000000 _SHDL C:\Users\TEMP.P***-PC.005\Eigene Dateien
2015-12-30 21:11 - 2015-12-30 21:11 - 00000000 _SHDL C:\Users\TEMP.P***-PC.005\Druckumgebung
2015-12-30 21:11 - 2015-12-30 21:11 - 00000000 _SHDL C:\Users\TEMP.P***-PC.005\Documents\Eigene Videos
2015-12-30 21:11 - 2015-12-30 21:11 - 00000000 _SHDL C:\Users\TEMP.P***-PC.005\Documents\Eigene Musik
2015-12-30 21:11 - 2015-12-30 21:11 - 00000000 _SHDL C:\Users\TEMP.P***-PC.005\Documents\Eigene Bilder
2015-12-30 21:11 - 2015-12-30 21:11 - 00000000 _SHDL C:\Users\TEMP.P***-PC.005\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-30 21:11 - 2015-12-30 21:11 - 00000000 _SHDL C:\Users\TEMP.P***-PC.005\AppData\Local\Verlauf
2015-12-30 21:11 - 2015-12-30 21:11 - 00000000 _SHDL C:\Users\TEMP.P***-PC.005\AppData\Local\Anwendungsdaten
2015-12-30 21:11 - 2015-12-30 21:11 - 00000000 _SHDL C:\Users\TEMP.P***-PC.005\Anwendungsdaten
2015-12-30 21:11 - 2015-12-30 21:11 - 00000000 ____D C:\Users\TEMP.P***-PC.005
2015-12-30 21:11 - 2015-11-19 23:03 - 00000000 ____D C:\Users\TEMP.P***-PC.005\AppData\Roaming\Media Center Programs
2015-12-30 21:11 - 2015-11-19 23:03 - 00000000 ____D C:\Users\TEMP.P***-PC.005\AppData\Roaming\Macromedia
2015-12-30 21:11 - 2015-11-19 23:03 - 00000000 ____D C:\Users\TEMP.P***-PC.005\AppData\Roaming\ATI
2015-12-30 21:11 - 2015-11-19 23:03 - 00000000 ____D C:\Users\TEMP.P***-PC.005\AppData\Local\ATI
2015-12-30 21:05 - 2015-12-30 21:07 - 00000000 ____D C:\Users\TEMP.P***-PC.004
2015-12-30 21:05 - 2015-12-30 21:05 - 00000000 ____D C:\Users\TEMP.P***-PC.004\AppData\Local\TileDataLayer
2015-12-30 18:00 - 2015-12-30 18:02 - 00000000 ____D C:\Users\TEMP.P***-PC.003
2015-12-30 18:00 - 2015-12-30 18:00 - 00000000 ____D C:\Users\TEMP.P***-PC.003\AppData\Local\TileDataLayer
2015-12-30 10:49 - 2015-12-30 10:49 - 00000000 ____D C:\Users\TEMP.P***-PC.002\AppData\Local\TileDataLayer
2015-12-30 10:48 - 2015-12-30 11:20 - 00000000 ____D C:\Users\TEMP.P***-PC.002
2015-12-29 22:46 - 2015-12-29 22:46 - 00000000 ____D C:\Users\P***\AppData\Roaming\Sun
2015-12-29 22:46 - 2015-12-29 22:46 - 00000000 ____D C:\Users\P***\.oracle_jre_usage
2015-12-29 22:46 - 2015-12-29 22:46 - 00000000 ____D C:\Program Files\Common Files\Java
2015-12-29 22:44 - 2015-12-29 22:44 - 00584288 _____ (Oracle Corporation) C:\Users\P***\Downloads\JavaSetup8u66.exe
2015-12-29 22:37 - 2015-12-29 23:20 - 00000000 ____D C:\Users\TEMP.P***-PC.001
2015-12-29 22:14 - 2015-12-29 22:14 - 00000000 ____D C:\Users\P***\AppData\Local\CEF
2015-12-29 21:20 - 2015-12-29 21:20 - 00001826 _____ C:\Users\Public\Desktop\iTunes.lnk
2015-12-29 21:20 - 2015-12-29 21:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-12-29 21:20 - 2015-12-29 21:20 - 00000000 ____D C:\Program Files\iTunes
2015-12-29 21:20 - 2015-12-29 21:20 - 00000000 ____D C:\Program Files\iPod
2015-12-29 21:19 - 2015-12-29 21:21 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Apple Computer
2015-12-29 21:19 - 2015-12-29 21:19 - 00000000 ____D C:\Users\Admin\AppData\Local\Apple Computer
2015-12-29 21:17 - 2015-12-29 21:17 - 00000000 ____D C:\Program Files\Bonjour
2015-12-29 21:17 - 2015-12-29 21:17 - 00000000 ____D C:\Program Files\Apple Software Update
2015-12-29 10:57 - 2015-12-29 11:03 - 00000000 ____D C:\Users\TEMP.P***-PC.000
2015-12-29 10:57 - 2015-12-29 10:57 - 00000000 ____D C:\Users\TEMP.P***-PC.000\AppData\Local\TileDataLayer
2015-12-27 17:22 - 2015-12-27 17:22 - 00000000 ____D C:\Users\Admin\AppData\Local\Sony
2015-12-27 17:21 - 2015-12-27 17:22 - 00000000 ____D C:\Program Files\Sony Media Go Install
2015-12-27 17:19 - 2015-12-27 17:27 - 00000000 ____D C:\Users\P***\AppData\Local\Sony
2015-12-27 17:19 - 2015-12-27 17:19 - 00000000 ____D C:\Users\P***\Podcasts
2015-12-27 17:19 - 2015-12-27 17:19 - 00000000 ____D C:\Users\P***\Documents\Media Go
2015-12-27 17:19 - 2015-12-27 17:19 - 00000000 ____D C:\Users\P***\AppData\Roaming\Sony Corporation
2015-12-27 17:18 - 2015-12-27 17:27 - 00000000 ____D C:\Program Files\Common Files\Sony Shared
2015-12-27 17:18 - 2015-12-27 17:26 - 00000000 ____D C:\Users\P***\AppData\Roaming\Sony
2015-12-27 17:17 - 2015-12-27 17:17 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Sony
2015-12-27 17:16 - 2015-12-27 17:17 - 00000000 ____D C:\Users\Admin\AppData\Local\Downloaded Installations
2015-12-27 17:16 - 2015-12-27 17:16 - 00002177 _____ C:\Users\Public\Desktop\NWZ-E380 WALKMAN Guide.lnk
2015-12-27 17:16 - 2015-12-27 17:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WALKMAN Guide
2015-12-27 17:14 - 2015-12-27 17:26 - 00000000 ____D C:\Program Files\Sony
2015-12-27 17:14 - 2015-12-27 17:22 - 00000000 ____D C:\ProgramData\Sony Corporation
2015-12-23 22:24 - 2015-12-23 22:25 - 00927824 _____ (Google Inc.) C:\Users\P***\Downloads\musicmanagerinstaller (1).exe
2015-12-23 22:06 - 2015-12-23 22:06 - 00001811 _____ C:\Users\P***\Desktop\Windows Media Player.lnk
2015-12-22 21:35 - 2015-12-22 21:35 - 00000000 ____D C:\Users\P***\AppData\Local\Apple
2015-12-20 11:33 - 2015-12-20 11:33 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-12-20 10:25 - 2015-12-07 05:57 - 00973664 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-12-20 10:25 - 2015-12-07 05:49 - 00309088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2015-12-20 10:25 - 2015-12-07 05:48 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-12-20 10:25 - 2015-12-07 05:48 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2015-12-20 10:25 - 2015-12-07 05:48 - 00983464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2015-12-20 10:25 - 2015-12-07 05:48 - 00884256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-12-20 10:25 - 2015-12-07 05:48 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2015-12-20 10:25 - 2015-12-07 05:48 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2015-12-20 10:25 - 2015-12-07 05:48 - 00462760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2015-12-20 10:25 - 2015-12-07 05:48 - 00450904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2015-12-20 10:25 - 2015-12-07 05:48 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2015-12-20 10:25 - 2015-12-07 05:48 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2015-12-20 10:25 - 2015-12-07 05:47 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2015-12-20 10:25 - 2015-12-07 05:47 - 00898184 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2015-12-20 10:25 - 2015-12-07 05:47 - 00716928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-12-20 10:25 - 2015-12-07 05:47 - 00116720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-12-20 10:25 - 2015-12-07 05:46 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-12-20 10:25 - 2015-12-07 05:45 - 00203104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-12-20 10:25 - 2015-12-07 05:12 - 00820224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll
2015-12-20 10:25 - 2015-12-07 05:11 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll
2015-12-20 10:25 - 2015-12-07 05:06 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2015-12-20 10:25 - 2015-12-07 05:05 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2015-12-20 10:25 - 2015-12-07 05:05 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2015-12-20 10:25 - 2015-12-07 05:05 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2015-12-20 10:25 - 2015-12-07 05:03 - 13017600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-12-20 10:25 - 2015-12-07 05:03 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-12-20 10:25 - 2015-12-07 05:03 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2015-12-20 10:25 - 2015-12-07 05:03 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2015-12-20 10:25 - 2015-12-07 05:02 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-12-20 10:25 - 2015-12-07 05:01 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-12-20 10:25 - 2015-12-07 05:01 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe
2015-12-20 10:25 - 2015-12-07 05:00 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2015-12-20 10:25 - 2015-12-07 05:00 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2015-12-20 10:25 - 2015-12-07 04:58 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2015-12-20 10:25 - 2015-12-07 04:57 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2015-12-20 10:25 - 2015-12-07 04:57 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-12-20 10:25 - 2015-12-07 04:57 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2015-12-20 10:25 - 2015-12-07 04:57 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-12-20 10:25 - 2015-12-07 04:57 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2015-12-20 10:25 - 2015-12-07 04:57 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2015-12-20 10:25 - 2015-12-07 04:56 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-12-20 10:25 - 2015-12-07 04:56 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-12-20 10:25 - 2015-12-07 04:56 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-12-20 10:25 - 2015-12-07 04:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-12-20 10:25 - 2015-12-07 04:55 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2015-12-20 10:25 - 2015-12-07 04:54 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2015-12-20 10:25 - 2015-12-07 04:53 - 19339264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-12-20 10:25 - 2015-12-07 04:53 - 00484864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-12-20 10:25 - 2015-12-07 04:53 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-12-20 10:25 - 2015-12-07 04:52 - 00607744 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-12-20 10:25 - 2015-12-07 04:49 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2015-12-20 10:25 - 2015-12-07 04:48 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-12-20 10:25 - 2015-12-07 04:48 - 01028608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2015-12-20 10:25 - 2015-12-07 04:48 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2015-12-20 10:25 - 2015-12-07 04:45 - 01793024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-12-20 10:25 - 2015-12-07 04:45 - 00683008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2015-12-20 10:25 - 2015-12-07 04:44 - 02977280 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-12-20 10:25 - 2015-12-07 04:44 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-12-20 10:25 - 2015-12-07 04:41 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-20 10:25 - 2015-12-07 04:40 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-20 10:25 - 2015-12-07 04:38 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2015-12-20 10:25 - 2015-12-07 04:37 - 00614912 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2015-12-20 10:25 - 2015-12-07 04:34 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2015-12-16 20:01 - 2015-12-16 20:01 - 39720944 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 25320432 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atioglxx.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 22327280 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl12cl.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 14310896 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 07683088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc32.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 05216240 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmantle32.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 01004032 _____ C:\WINDOWS\system32\amdocl_as32.exe
2015-12-16 20:01 - 2015-12-16 20:01 - 00807424 _____ C:\WINDOWS\system32\amdocl_ld32.exe
2015-12-16 20:01 - 2015-12-16 20:01 - 00524272 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr32.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 00390304 _____ C:\WINDOWS\system32\amdmiracast.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 00375792 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe
2015-12-16 20:01 - 2015-12-16 20:01 - 00303600 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODE.exe
2015-12-16 20:01 - 2015-12-16 20:01 - 00212464 _____ C:\WINDOWS\system32\clinfo.exe
2015-12-16 20:01 - 2015-12-16 20:01 - 00198640 _____ C:\WINDOWS\system32\amdgfxinfo32.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 00173040 _____ (AMD) C:\WINDOWS\system32\atitmmxx.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 00152560 _____ C:\WINDOWS\system32\atieah32.exe
2015-12-16 20:01 - 2015-12-16 20:01 - 00150512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atigktxx.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 00132080 _____ C:\WINDOWS\system32\amdhdl32.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 00122352 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle32.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 00111088 _____ C:\WINDOWS\system32\hsa-thunk.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 00096752 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl32.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 00081168 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc32.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 00081160 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom32.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 00078320 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 00068080 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 00060912 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 00057840 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 00053744 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODCLI.exe
2015-12-16 20:01 - 2015-12-16 20:01 - 00052208 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 00048112 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 00037872 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2015-12-16 20:01 - 2015-12-16 20:01 - 00012784 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll
2015-12-13 13:51 - 2015-12-13 13:51 - 00000000 ____D C:\Users\L***\AppData\Local\ActiveSync
2015-12-13 13:49 - 2015-12-13 13:49 - 00001328 __RSH C:\Users\L***\ntuser.pol
2015-12-13 13:48 - 2015-12-13 13:48 - 00000020 ___SH C:\Users\L***\ntuser.ini
2015-12-12 13:33 - 2015-12-29 11:03 - 00000000 ____D C:\Users\DefaultAppPool
2015-12-12 13:33 - 2015-12-12 13:33 - 00000020 ___SH C:\Users\DefaultAppPool\ntuser.ini
2015-12-12 13:33 - 2015-12-12 13:33 - 00000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2015-12-12 13:33 - 2015-12-12 13:33 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2015-12-12 13:33 - 2015-12-12 13:33 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2015-12-12 13:33 - 2015-12-12 13:33 - 00000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2015-12-12 13:33 - 2015-12-12 13:33 - 00000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2015-12-12 13:33 - 2015-12-12 13:33 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2015-12-12 13:33 - 2015-12-12 13:33 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Videos
2015-12-12 13:33 - 2015-12-12 13:33 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Musik
2015-12-12 13:33 - 2015-12-12 13:33 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Bilder
2015-12-12 13:33 - 2015-12-12 13:33 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-12 13:33 - 2015-12-12 13:33 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf
2015-12-12 13:33 - 2015-12-12 13:33 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten
2015-12-12 13:33 - 2015-12-12 13:33 - 00000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2015-12-12 13:33 - 2015-11-19 23:03 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Media Center Programs
2015-12-12 13:33 - 2015-11-19 23:03 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Macromedia
2015-12-12 13:33 - 2015-11-19 23:03 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\ATI
2015-12-12 13:33 - 2015-11-19 23:03 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Local\ATI
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-01-10 13:55 - 2015-10-30 06:13 - 00000000 ____D C:\Windows
2016-01-10 13:53 - 2012-02-11 12:31 - 00001128 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-10 13:52 - 2014-06-23 19:50 - 00001150 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-653066591-3386837451-177190309-1000UA.job
2016-01-10 13:52 - 2012-02-11 12:31 - 00001124 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-10 13:49 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-01-10 12:43 - 2014-04-14 21:13 - 00170200 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-01-10 12:42 - 2015-11-19 22:52 - 00000000 ____D C:\Users\Admin
2016-01-10 12:41 - 2010-10-01 20:44 - 00000437 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2016-01-10 12:39 - 2015-11-19 23:14 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-01-10 12:39 - 2015-11-19 22:52 - 00000000 ____D C:\Users\P***
2016-01-09 20:51 - 2014-06-23 19:50 - 00001098 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-653066591-3386837451-177190309-1000Core.job
2016-01-09 20:45 - 2015-10-30 06:48 - 00000000 ___HD C:\Program Files\WindowsApps
2016-01-09 16:17 - 2015-11-19 22:52 - 00000000 ____D C:\Users\A***
2016-01-08 22:13 - 2015-09-10 21:00 - 00000000 ____D C:\Users\Admin\AppData\Local\Packages
2016-01-08 22:08 - 2015-10-30 06:13 - 01048576 ___SH C:\WINDOWS\system32\config\BBI
2016-01-08 22:07 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-01-08 22:07 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\Provisioning
2016-01-08 22:07 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-01-08 22:06 - 2015-10-30 06:39 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-01-08 22:05 - 2015-11-19 22:49 - 00000000 ____D C:\Program Files\ATI Technologies
2016-01-08 22:01 - 2010-10-14 23:00 - 00000000 ____D C:\Users\Admin\AppData\Local\VirtualStore
2016-01-08 22:00 - 2015-09-09 20:57 - 00000000 ____D C:\AMD
2016-01-08 21:59 - 2015-10-30 06:47 - 00000000 ____D C:\WINDOWS\INF
2016-01-08 21:47 - 2015-10-30 15:38 - 00002427 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-01-08 21:47 - 2015-10-30 15:38 - 00000000 ___RD C:\Users\Admin\OneDrive
2016-01-08 21:43 - 2015-09-09 21:28 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-01-08 20:02 - 2012-06-04 20:04 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-01-07 21:23 - 2015-11-19 22:51 - 02039076 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-07 21:23 - 2015-10-30 16:07 - 00870322 _____ C:\WINDOWS\system32\perfh007.dat
2016-01-07 21:23 - 2015-10-30 16:07 - 00189546 _____ C:\WINDOWS\system32\perfc007.dat
2016-01-05 13:41 - 2015-05-02 20:11 - 00007990 _____ C:\WINDOWS\BRRBCOM.INI
2016-01-05 12:42 - 2015-09-10 20:51 - 00000000 ____D C:\Users\A***\AppData\Local\MicrosoftEdge
2016-01-05 12:25 - 2015-09-10 19:36 - 00000000 ____D C:\Users\A***\AppData\Local\Packages
2016-01-03 02:40 - 2015-10-30 06:49 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2016-01-03 02:40 - 2015-10-30 06:49 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2016-01-01 14:11 - 2015-11-19 22:45 - 00000000 ___DC C:\WINDOWS\Panther
2015-12-30 21:05 - 2015-11-19 22:48 - 00000000 ____D C:\ProgramData\Package Cache
2015-12-29 22:46 - 2013-10-20 19:25 - 00000000 ____D C:\ProgramData\Oracle
2015-12-29 22:46 - 2013-10-20 19:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-12-29 22:45 - 2014-08-06 20:08 - 00095840 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-12-29 22:45 - 2012-03-10 09:37 - 00000000 ____D C:\Program Files\Java
2015-12-29 22:42 - 2010-10-04 18:43 - 00000000 ____D C:\Users\P***\AppData\Local\Adobe
2015-12-29 22:37 - 2015-11-27 20:32 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-12-29 21:20 - 2015-04-07 20:05 - 00000000 ____D C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB
2015-12-29 21:20 - 2015-04-07 20:03 - 00000000 ____D C:\Program Files\Common Files\Apple
2015-12-29 21:17 - 2015-04-07 20:04 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-12-25 20:02 - 2014-11-14 22:39 - 00000000 ____D C:\Users\P***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps
2015-12-22 22:05 - 2013-01-14 11:13 - 00000000 ____D C:\Users\P***\AppData\Local\Nero
2015-12-22 21:38 - 2015-04-07 20:07 - 00000000 ____D C:\Users\P***\AppData\Roaming\Apple Computer
2015-12-20 10:27 - 2012-12-20 17:28 - 00000000 ____D C:\Users\P***\AppData\Roaming\dvdcss
2015-12-17 12:05 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\rescache
2015-12-17 11:54 - 2012-02-11 12:31 - 00002202 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-17 11:48 - 2012-11-19 13:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-12-17 08:17 - 2015-09-09 21:39 - 00002433 _____ C:\Users\P***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-12-17 08:17 - 2015-09-09 21:39 - 00000000 ___RD C:\Users\P***\OneDrive
2015-12-16 20:01 - 2015-10-21 20:01 - 19525104 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys
2015-12-16 20:01 - 2015-10-21 20:01 - 10211016 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx32.dll
2015-12-16 20:01 - 2015-10-21 20:01 - 08009360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumdva.dll
2015-12-16 20:01 - 2015-10-21 20:01 - 07482560 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumdag.dll
2015-12-16 20:01 - 2015-10-21 20:01 - 01223552 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx32.dll
2015-12-16 20:01 - 2015-10-21 20:01 - 00935400 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2015-12-16 20:01 - 2015-10-21 20:01 - 00678896 _____ (AMD) C:\WINDOWS\system32\coinst_15.20.dll
2015-12-16 20:01 - 2015-10-21 20:01 - 00553456 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2015-12-16 20:01 - 2015-10-21 20:01 - 00542192 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys
2015-12-16 20:01 - 2015-10-21 20:01 - 00451056 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2015-12-16 20:01 - 2015-10-21 20:01 - 00223216 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe
2015-12-16 20:01 - 2015-10-21 20:01 - 00143056 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxpag.dll
2015-12-16 20:01 - 2015-10-21 20:01 - 00112368 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9pag.dll
2015-12-16 11:21 - 2015-10-30 06:48 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2015-12-16 11:19 - 2013-04-04 17:55 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-12-14 20:39 - 2015-09-10 19:42 - 00002424 _____ C:\Users\A***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-12-14 20:39 - 2015-09-10 19:42 - 00000000 ___RD C:\Users\A***\OneDrive
2015-12-14 10:16 - 2015-11-19 22:52 - 00000000 ____D C:\Users\H***
2015-12-13 14:32 - 2015-11-19 22:52 - 00000000 ____D C:\Users\L***
2015-12-13 14:07 - 2015-10-29 17:44 - 00000000 ____D C:\Users\L***\AppData\Local\Packages
2015-12-13 13:53 - 2015-11-02 18:49 - 00000000 ____D C:\Users\L***\AppData\Local\MicrosoftEdge
2015-12-13 13:51 - 2015-10-29 17:46 - 00002398 _____ C:\Users\L***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-12-13 13:51 - 2015-10-29 17:46 - 00000000 ___RD C:\Users\L***\OneDrive
2015-12-12 13:17 - 2013-07-13 08:48 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-12-12 13:10 - 2010-06-30 09:36 - 137798368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-12-12 13:08 - 2015-09-09 21:28 - 00000000 ____D C:\Users\P***\AppData\Local\Packages
2015-12-12 13:00 - 2015-11-19 22:46 - 00344224 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-12 12:59 - 2010-06-30 09:35 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-11 12:59 - 2015-10-30 06:48 - 00000000 ____D C:\WINDOWS\system32\oobe
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2011-05-20 17:37 - 2011-05-20 17:37 - 0001106 _____ () C:\Users\Admin\AppData\Roaming\ConvAPIPlugin.log
2010-10-14 23:15 - 2015-08-24 20:28 - 0007602 _____ () C:\Users\Admin\AppData\Local\resmon.resmoncfg
2015-11-19 22:49 - 2015-11-19 22:49 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2011-05-20 17:31 - 2011-05-20 17:37 - 0000818 _____ () C:\ProgramData\hpzinstall.log
2010-11-28 21:26 - 2015-05-19 17:17 - 0000952 ___SH () C:\ProgramData\KGyGaAvL.sys
Einige Dateien in TEMP:
====================
C:\Users\Admin\AppData\Local\Temp\avgnt.exe
C:\Users\Admin2\AppData\Local\Temp\avgnt.exe
C:\Users\A***\AppData\Local\Temp\avgnt.exe
C:\Users\L***\AppData\Local\Temp\avgnt.exe
C:\Users\P***\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-01-03 20:50
==================== Ende vom FRST.txt ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:09-01-2015
durchgeführt von Admin (2016-01-10 13:56:37)
Gestartet von C:\Users\Admin\Downloads
Microsoft Windows 10 Home (X86) (2015-11-19 22:20:09)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Admin (S-1-5-21-653066591-3386837451-177190309-1002 - Administrator - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-653066591-3386837451-177190309-500 - Administrator - Disabled)
A*** (S-1-5-21-653066591-3386837451-177190309-1001 - Limited - Enabled) => C:\Users\A***
DefaultAccount (S-1-5-21-653066591-3386837451-177190309-503 - Limited - Disabled)
Gast (S-1-5-21-653066591-3386837451-177190309-501 - Limited - Disabled)
H*** (S-1-5-21-653066591-3386837451-177190309-1005 - Limited - Enabled) => C:\Users\H***
HomeGroupUser$ (S-1-5-21-653066591-3386837451-177190309-1004 - Limited - Enabled)
L*** (S-1-5-21-653066591-3386837451-177190309-1006 - Limited - Enabled) => C:\Users\L***
P*** (S-1-5-21-653066591-3386837451-177190309-1000 - Limited - Enabled) => C:\Users\P***
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Avira Antivirus (Enabled - Out of date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Out of date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden
6000E609_eDocs (Version: 1.00.0000 - Hewlett-Packard) Hidden
6000E609_Help (Version: 1.00.0000 - Hewlett-Packard) Hidden
6000E609a (Version: 140.0.000.000 - Hewlett-Packard) Hidden
7-Zip 9.20 (HKLM\...\7-Zip) (Version: - )
Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 2.0.2.12610 - Adobe Systems Inc.)
Adobe Flash Player 20 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated)
Amazon MP3-Downloader 1.0.17 (HKLM\...\Amazon MP3-Downloader) (Version: 1.0.17 - Amazon Services LLC)
Amazon Music (HKU\S-1-5-21-653066591-3386837451-177190309-1000\...\Amazon Amazon Music) (Version: 3.11.5.1140 - Amazon Services LLC)
Amazon Music (HKU\S-1-5-21-653066591-3386837451-177190309-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Amazon Amazon Music) (Version: 3.11.5.1140 - Amazon Services LLC)
AMD Catalyst Control Center (HKLM\...\WUCCCApp) (Version: 1.00.0000 - AMD)
Apple Application Support (32-Bit) (HKLM\...\{7FA9ECCF-A2DE-4DA1-BFF3-81260DBDA68F}) (Version: 4.1.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{9A629DCB-415D-4A50-85B9-5C2E4F8F74A8}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
ATI Catalyst Install Manager (HKLM\...\{BE4AE3A7-190D-BCB8-A953-A708C9E8E8AA}) (Version: 3.0.778.0 - ATI Technologies, Inc.)
Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.15.129 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM\...\{d0e166af-1634-4c0b-ae96-2180e61f9d38}) (Version: 1.1.52.15531 - Avira Operations GmbH & Co. KG)
Avira Launcher (Version: 1.1.52.15531 - Avira Operations GmbH & Co. KG) Hidden
Becksches Formularbuch Immobilienrecht (HKLM\...\Becksches Formularbuch Immobilienrecht) (Version: - )
Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.)
BPDSoftware (Version: 140.0.000.000 - Hewlett-Packard) Hidden
BPDSoftware_Ini (Version: 1.00.0000 - Hewlett-Packard) Hidden
Brother MFL-Pro Suite MFC-J870DW (HKLM\...\{7B4C83B6-17C1-4BFD-B86D-4D7AD4498CBB}) (Version: 1.0.4.0 - Brother Industries, Ltd.)
BufferChm (Version: 140.0.213.000 - Hewlett-Packard) Hidden
ccc-core-static (Version: 2010.0527.1242.20909 - ATI) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.09 - Piriform)
CorelDRAW Essentials 4 - Content (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Draw (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Filters (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - ICA (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - IPM - No VBA (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang BR (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang DE (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang EN (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang ES (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang FR (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang IT (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang NL (Version: 4.0 - Uw bedrijfsnaam) Hidden
CorelDRAW Essentials 4 - PHOTO-PAINT (Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Windows Shell Extension (HKLM\...\_{CF0ADC18-6D8F-4353-8EAA-DF45456B7853}) (Version: - Corel Corporation)
CorelDRAW Essentials 4 - Windows Shell Extension (Version: 1.1 - Corel Corporation) Hidden
CorelDRAW Essentials 4 (HKLM\...\_{C0237AA4-1BFB-46EA-860D-7B0EB365CA13}) (Version: - Corel Corporation)
CorelDRAW Essentials 4 (Version: 4.0 - Corel Corporation) Hidden
DeviceDiscovery (Version: 140.0.213.000 - Hewlett-Packard) Hidden
ElsterFormular (HKLM\...\ElsterFormular) (Version: 16.1.20150424 - Landesfinanzdirektion Thüringen)
FIFA 99 (HKLM\...\FIFA 99) (Version: - )
Free RAR Extract Frog (HKLM\...\Free RAR Extract Frog) (Version: 2.15 - P*** Winterberg)
Google Chrome (HKLM\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.29.1 - Google Inc.) Hidden
GPBaseService2 (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Heymanns - Kersten-Bühling Mustertexte (HKLM\...\Heymanns - Kersten-Bühling Mustertexte) (Version: - )
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Officejet 6000 E609 Series (HKLM\...\{7791308C-85FB-43B9-93F2-7DE9CB7D5C4A}) (Version: 14.0 - HP)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM\...\{74DC0593-6BC6-4001-AD5F-D810AFB68D86}) (Version: 5.002.002.002 - Hewlett-Packard)
HPDiagnosticAlert (Version: 1.00.0000 - Microsoft) Hidden
HPProductAssistant (Version: 140.0.213.000 - Hewlett-Packard) Hidden
HPSSupply (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)
iTunes (HKLM\...\{2C741651-87E0-4479-9703-6DD0D7988B84}) (Version: 12.3.2.35 - Apple Inc.)
Java 8 Update 66 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Junk Mail filter update (Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
MarketResearch (Version: 140.0.214.000 - Hewlett-Packard) Hidden
Microsoft Office Professional Plus 2013 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 15.0.4779.1002 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [DEU] (HKLM\...\{BAC80EF3-E106-4AEA-8C57-F217F9BC7358}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x86) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 43.0.4 (x86 de) (HKLM\...\Mozilla Firefox 43.0.4 (x86 de)) (Version: 43.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 43.0.4.5848 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Music Manager (HKU\S-1-5-21-653066591-3386837451-177190309-1000\...\MusicManager) (Version: - Google, Inc.)
Music Manager (HKU\S-1-5-21-653066591-3386837451-177190309-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MusicManager) (Version: - Google, Inc.)
Nero 12 (HKLM\...\{5019D24D-A627-4402-A393-A3AAAF13DE56}) (Version: 12.0.01600 - Nero AG)
Nero 12 Content Pack (HKLM\...\{B14F874A-79C7-4756-9826-69BAB8F60E6F}) (Version: 12.0.00100 - Nero AG)
Nero Prerequisite Installer 2.0 (HKLM\...\{0DBC021C-95D9-435A-A4B0-E6515AFD1A71}) (Version: 12.0.01000 - Nero AG)
Network (Version: 140.0.215.000 - Hewlett-Packard) Hidden
Nuance PaperPort 12 (HKLM\...\{869FCC6C-5669-4B0B-827E-2BBAACD88A87}) (Version: 12.1.0006 - Nuance Communications, Inc.)
Nuance PDF Viewer Plus (HKLM\...\{28656860-4728-433C-8AD4-D1A930437BC8}) (Version: 5.30.3290 - Nuance Communications, Inc)
NWZ-E380 WALKMAN Guide (HKLM\...\{D98ED583-338D-4425-B2EF-A4C7FB93CE88}) (Version: 2.2.0.05230 - Sony Corporation)
Office 15 Click-to-Run Extensibility Component (Version: 15.0.4779.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4779.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (Version: 15.0.4779.1002 - Microsoft Corporation) Hidden
PaperPort Image Printer (HKLM\...\{6EF2FDAB-7FBF-4AB9-92CD-594BDDB6A56B}) (Version: 14.00.0000 - Nuance Communications, Inc.)
PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
PlayStation(R)Store (HKLM\...\{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}) (Version: 4.18.0.15698 - Sony Computer Entertainment Inc.)
Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden
ProductContext (Version: 140.0.000.000 - Hewlett-Packard) Hidden
Pusteblume 2 (HKLM\...\Pusteblume 2) (Version: - Bildungshaus Schulbuchverlage Westermann Schroedel Diesterweg Schöningh Winklers GmbH)
Ravensburger tiptoi (HKLM\...\Ravensburger tiptoi) (Version: - )
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Scansoft PDF Professional (Version: - ) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
SmartWebPrinting (Version: 140.0.213.000 - Hewlett-Packard) Hidden
SolutionCenter (Version: 140.0.214.000 - Hewlett-Packard) Hidden
Spelling Dictionaries Support For Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)
Status (Version: 140.0.256.000 - Hewlett-Packard) Hidden
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Toolbox (Version: 140.0.428.000 - Hewlett-Packard) Hidden
TrayApp (Version: 140.0.213.000 - Hewlett-Packard) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WebReg (Version: 140.0.213.017 - Hewlett-Packard) Hidden
Welcome App (Start-up experience) (Version: 12.0.15000 - Nero AG) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Windows Live ID Sign-in Assistant (HKLM\...\{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Live Sync (HKLM\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live-Uploadtool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-653066591-3386837451-177190309-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\P***\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-653066591-3386837451-177190309-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\P***\AppData\Local\Google\Update\1.3.25.5\psuser.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-653066591-3386837451-177190309-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\P***\AppData\Local\Google\Update\1.3.27.5\psuser.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-653066591-3386837451-177190309-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\P***\AppData\Local\Google\Update\1.3.29.1\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-653066591-3386837451-177190309-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\P***\AppData\Local\Google\Update\1.3.29.1\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-653066591-3386837451-177190309-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\P***\AppData\Local\Google\Update\1.3.29.1\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-653066591-3386837451-177190309-1000_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\P***\AppData\Local\Google\Update\1.3.28.1\psuser.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-653066591-3386837451-177190309-1000_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\P***\AppData\Local\Google\Update\1.3.28.13\psuser.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-653066591-3386837451-177190309-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\P***\AppData\Local\Google\Update\1.3.24.15\psuser.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-653066591-3386837451-177190309-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\P***\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-653066591-3386837451-177190309-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\P***\AppData\Local\Google\Update\1.3.26.9\psuser.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-653066591-3386837451-177190309-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\P***\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-653066591-3386837451-177190309-1000_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\P***\AppData\Local\Google\Update\1.3.29.1\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-653066591-3386837451-177190309-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\P***\AppData\Local\Google\Update\1.3.25.11\psuser.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-653066591-3386837451-177190309-1000_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\P***\AppData\Local\Google\Update\1.3.28.15\psuser.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-653066591-3386837451-177190309-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\P***\AppData\Local\Google\Update\1.3.29.1\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-653066591-3386837451-177190309-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\P***\AppData\Local\Google\Update\1.3.29.1\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-653066591-3386837451-177190309-1002_Classes\CLSID\{3f04dadf-6ea4-44d1-a507-03cad176f443}\InprocServer32 -> C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll (Amazon.com, Inc.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {03F4054C-4A64-4AE7-BA08-7216D7B92C4D} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {11A3B5AD-E98F-4631-8E54-872DEB98208D} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {254ACB3F-2DBD-46E7-BD26-D1C626E8B5D2} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
Task: {26810026-BAFA-4C63-B7B6-D445F172B12D} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {27741F40-BFDE-4DC1-9D52-7D198279DC7F} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {374E21B1-BEF4-4FCE-B408-AB9EC709BB25} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {39A130B6-DE76-41AA-ABEC-511B2189AC89} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {50E0256B-DF33-4541-AB37-E32A0FB19BD1} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-653066591-3386837451-177190309-1000Core => C:\Users\P***\AppData\Local\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {517B7AEA-F5AE-4FBF-B31D-065A19246DA3} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {5244038F-4318-4F5C-A005-7F1508D70AFD} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {52EDD7C9-E910-4FC3-940B-84B78854F58D} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX86\OfficeC2RClient.exe [2015-10-13] (Microsoft Corporation)
Task: {52FC8A18-9375-4A00-B7A5-4C7F686567DD} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {5572F53A-640B-47E9-917A-524CEF6BED7C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-28] (Microsoft Corporation)
Task: {562BCF3D-031F-4764-B476-7724ED38AAFB} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {5B93D4FA-CAE7-4962-9074-950013C99EDD} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {609834EF-AA3E-4E7D-B2D9-3B6A6DF61D97} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {61A793E9-2724-4A88-A543-EE18C626211F} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {699FFD3F-D2A4-468A-AAF5-68409A92E639} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {6B067ED8-7484-46F2-BC57-0F39EA00F11F} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6C093772-A85F-4D20-B811-ED1E065466F9} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6EA399E0-9893-4270-AF74-1EF0913254C2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-653066591-3386837451-177190309-1000UA => C:\Users\P***\AppData\Local\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {78812867-7BF3-4104-9EA3-4D73CCF2A9D3} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7B66B104-45C3-4DF8-B811-265D2699B5A6} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {8798C7A0-8F79-41FB-8E6B-70F7B9461D21} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {8DDE920E-268B-42CC-95C4-F91CAAA28A48} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {8E9C1A13-CEC4-46D8-97D6-5E8B77F64EE5} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {929B9B59-1DAF-4A94-B3B8-3DFD01740F69} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-28] (Microsoft Corporation)
Task: {9975C68E-B610-48B0-B8DC-814D3E0CDAA3} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX86\OfficeC2RClient.exe [2015-10-13] (Microsoft Corporation)
Task: {9B903535-0AC0-4DC3-B099-64B269DCC517} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {9E7D4DAE-4380-4A9D-8CFC-091C0E8CF6E5} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {9F391F95-69AD-4F77-8E41-A6D2469B6745} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {A2F47A5D-4911-453B-9EE7-14A7A0EE9281} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A7189AC7-5247-4121-AC24-C0E42C0C262D} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {A789810C-B338-4E0E-BE98-7B2D0639E122} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {A9542C94-31F3-4121-ABB9-935FB4D2DAE6} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {A9906875-AAC0-4178-ABD0-94F1C2612915} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {AEBD9DED-FD10-451F-8934-8EDBA256D379} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {BBA1A71F-002E-4857-B722-2D5A794C621B} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {BD2F2625-212F-40CC-B00D-402648C0D08E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {CA7FECF9-B7A2-4BE6-83D1-9829FDF3AA81} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {CDE5157E-6C11-456A-8F24-DCE0511D243D} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {D1CB37A8-BBB5-4170-9DCA-828E11EA20CA} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {D6C45D0E-7EC1-4219-82C4-4375B304781D} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-12-12] (Microsoft Corporation)
Task: {D8250FB3-45F8-46D7-A516-4FAAEC48EB9E} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe
Task: {D9BD0AF3-2F7F-48CB-8DA9-8A4D1B5DBE6E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-08-20] (Piriform Ltd)
Task: {E12FD1B8-A33A-441B-B5F8-FD6C6B2B8489} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {F6F0D83D-BEA0-49B4-88F5-532EDA330BA5} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {FDAC0E32-E70A-4DD3-9532-B739514A6B43} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-653066591-3386837451-177190309-1000Core.job => C:\Users\P***\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-653066591-3386837451-177190309-1000UA.job => C:\Users\P***\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-10-30 06:44 - 2015-10-30 06:44 - 00149504 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2015-02-13 03:20 - 2015-02-13 03:20 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-12-17 18:39 - 2015-12-17 18:39 - 01040144 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-03-19 20:58 - 2015-10-13 02:43 - 00080040 _____ () C:\Program Files\Microsoft Office 15\ClientX86\ApiClient.dll
2015-05-02 20:09 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2015-12-03 10:32 - 2015-11-22 11:41 - 01859448 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-03 10:32 - 2015-11-22 11:41 - 01859448 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-12-20 10:25 - 2015-12-07 04:34 - 00471552 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-12-17 08:11 - 2015-12-17 08:12 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2015-12-17 08:11 - 2015-12-17 08:12 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2015-12-17 08:11 - 2015-12-17 08:12 - 21845504 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2015-12-20 10:25 - 2015-12-07 05:11 - 00070656 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2015-12-20 10:25 - 2015-12-07 04:57 - 00316416 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-12-20 10:25 - 2015-12-07 04:38 - 05340672 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-12-20 10:25 - 2015-12-07 04:34 - 02365952 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-12-20 10:25 - 2015-12-07 04:37 - 02656768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-11-17 18:44 - 2015-11-17 18:44 - 00117248 _____ () C:\Users\P***\AppData\Local\Programs\Google\MusicManager\libaacdec.dll
2015-11-17 18:45 - 2015-11-17 18:45 - 00234496 _____ () C:\Users\P***\AppData\Local\Programs\Google\MusicManager\libmpgdec.dll
2015-11-17 18:45 - 2015-11-17 18:45 - 00253440 _____ () C:\Users\P***\AppData\Local\Programs\Google\MusicManager\libid3tag.dll
2015-11-17 18:44 - 2015-11-17 18:44 - 00344064 _____ () C:\Users\P***\AppData\Local\Programs\Google\MusicManager\libaudioenc.dll
2014-06-23 19:56 - 2015-11-18 22:36 - 05890368 _____ () C:\Users\P***\AppData\Local\Amazon Music\Amazon Music Helper.exe
2015-08-24 19:28 - 2015-08-24 19:28 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2010-06-29 16:19 - 2010-03-04 04:08 - 00058880 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2015-12-10 13:55 - 2015-12-10 20:46 - 00013312 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x86__8wekyb3d8bbwe\Microsoft.Photos.exe
2015-12-10 13:55 - 2015-12-10 20:46 - 09366016 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x86__8wekyb3d8bbwe\Microsoft.Photos.dll
2015-11-19 21:27 - 2015-11-19 21:27 - 00169984 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x86__8wekyb3d8bbwe\StoreRatingPromotion.dll
2016-01-08 20:10 - 2016-01-08 20:10 - 06131712 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.25.15.0_x86__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2015-12-17 11:54 - 2015-12-11 04:54 - 01583432 _____ () C:\Program Files\Google\Chrome\Application\47.0.2526.106\libglesv2.dll
2015-12-17 11:54 - 2015-12-11 04:54 - 00081224 _____ () C:\Program Files\Google\Chrome\Application\47.0.2526.106\libegl.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-653066591-3386837451-177190309-1000\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-653066591-3386837451-177190309-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-653066591-3386837451-177190309-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-653066591-3386837451-177190309-1002\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-653066591-3386837451-177190309-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-653066591-3386837451-177190309-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-653066591-3386837451-177190309-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-653066591-3386837451-177190309-1010-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: HP Software Update => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-32bit] => (Allow) LPort=808
FirewallRules: [{E88B0DBA-9918-4833-8D97-B2AC6E4BE7EE}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{C411DD05-01B9-48C3-89E7-14D6A130F583}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{615BB86B-E3F1-4B43-900E-46198456313A}] => (Allow) C:\Program Files\Windows Live\Messenger\wlcsdk.exe
FirewallRules: [{5D1427F5-9A0E-4FE2-96E2-C8C3F3ED8CEF}] => (Allow) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{70FF9E4E-C48E-4932-9BAF-C3E3D1A687C5}] => (Allow) svchost.exe
FirewallRules: [{83FFF2FC-C00F-440C-BA4F-64A033A61BAC}] => (Allow) C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [TCP Query User{E8E3252A-75AB-4024-9541-C5A275B99606}C:\program files\heymanns\kerstenbuehling_mustertexte\lplocal.exe] => (Block) C:\program files\heymanns\kerstenbuehling_mustertexte\lplocal.exe
FirewallRules: [UDP Query User{4B6A9277-FAE9-40EF-9A6A-294D2EA24DA2}C:\program files\heymanns\kerstenbuehling_mustertexte\lplocal.exe] => (Block) C:\program files\heymanns\kerstenbuehling_mustertexte\lplocal.exe
FirewallRules: [{4A940264-1576-4D8C-B35A-B8E722C770A9}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{0B96AAAB-1FD9-42F1-8936-34F00B0B41F2}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{F45FE49C-4639-4285-A4FF-F3679DA84557}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{A31C8E2A-08EB-4A6B-837B-8B09D7952D1B}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{2FF54533-2F56-4BD0-BB72-F76899EF74A6}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{0D284B08-D93D-4F8B-A1DF-9D944E7782DC}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{714217E1-540A-47E5-B515-A66C04041A37}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{96286C59-3035-4EA4-A6D9-2AD5960FE47F}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{4A75D3D0-A612-4536-B850-2342DE2AB3CD}] => (Allow) C:\Program Files\HP\hp software update\hpwucli.exe
FirewallRules: [{E5408CFD-9DDC-4D5F-9C06-244B3BCF9819}] => (Allow) C:\Program Files\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{E3BD7DD9-FA0F-4BE8-B763-C14271BE6C84}] => (Allow) C:\Program Files\Nero\KM\KwikMedia.exe
FirewallRules: [{39EC8D25-C56F-4172-A304-7DCADF9B5C67}] => (Allow) C:\Program Files\Nero\KM\KwikMedia.exe
FirewallRules: [{429EB7B6-ABE1-46A6-8700-CD9DE276DE01}] => (Allow) C:\Program Files\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{F566DF08-3AC3-43BD-8D5A-2F23B923B35A}] => (Allow) C:\Program Files\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{E863C1AF-F4B1-44FF-AB17-A8C27946F649}] => (Allow) C:\Program Files\Nero\Nero Blu-ray Player\Blu-rayPlayer.exe
FirewallRules: [{8CDB1C53-5270-4245-A382-5856FA6D22C0}] => (Allow) C:\Program Files\Nero\Nero Blu-ray Player\Blu-rayPlayer.exe
FirewallRules: [{07ED4CB9-FD2A-4F69-8E13-B75B43396AC4}] => (Allow) E:\AliceCD.exe
FirewallRules: [{5B018C93-0C17-44D2-BB85-A1AA21031D4C}] => (Allow) E:\AliceCD.exe
FirewallRules: [{9C12985D-AFC0-4C7D-8563-F66DE89EE863}] => (Allow) C:\Program Files\Nero\KM\KwikMedia.exe
FirewallRules: [{A29D0BB2-3E05-45C8-983F-7E61085E55B9}] => (Allow) C:\Program Files\Nero\KM\KwikMedia.exe
FirewallRules: [{A61ECAB5-7DE3-4D60-A118-936852C3EA6B}] => (Allow) C:\Program Files\Nero\Nero Blu-ray Player\Blu-rayPlayer.exe
FirewallRules: [{BC967566-F895-4088-A99E-FEB6EAD6B7E9}] => (Allow) C:\Program Files\Nero\Nero Blu-ray Player\Blu-rayPlayer.exe
FirewallRules: [{AC04352E-79DD-4BC9-B684-D3F27311F166}] => (Allow) C:\Program Files\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{7DE930ED-A71E-454D-83B5-FD5E2D2A65C8}] => (Allow) C:\Program Files\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{B88FEF4A-A638-4251-A346-EFDE73690F56}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{D208044B-5689-4DAF-ADCD-440B9C576356}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{B6EA5B4C-ECA6-4B2F-9E33-DB95D2DA363D}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{934EE03B-51F2-4104-85B0-2BB6C93780DB}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{71F39B0B-D717-4907-A575-AD1263862FBA}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{C11C687E-D765-4F26-9BD5-BBF7E46DB266}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [{4E19646E-BCFD-49C2-8C0E-0C93654862B7}] => (Allow) C:\Program Files\Brother\Brmfl13b\FAXRX.EXE
FirewallRules: [{7E92D620-DA21-4719-BC67-BA01E1AC2A20}] => (Allow) LPort=54925
FirewallRules: [{13939EC6-00F5-4565-B3AF-4EAE3BDFCABE}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{2E8787E7-A811-40E3-AD33-5AD920645033}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{CB120923-83E9-429B-9B1E-273EB5C6983B}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{7ADA162A-CD2D-43BF-BE1C-22BD149C0330}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{4B4221ED-FF8A-4874-B7CB-81CF545CEBCD}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{49855DC6-AF2D-4DDE-84DE-B317E0F358C5}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{B7430D82-CF94-4D24-A3FE-A4B20C29398A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{7FFF1A6E-D914-4900-AE79-48A10BBC6D05}] => (Allow) C:\Program Files\iTunes\iTunes.exe
==================== Wiederherstellungspunkte =========================
24-12-2015 11:28:19 Geplanter Prüfpunkt
27-12-2015 17:21:29 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
27-12-2015 21:06:58 Windows-Sicherung
08-01-2016 22:04:30 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727
08-01-2016 22:05:14 Windows Update
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (01/10/2016 01:54:58 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: P***-PC)
Description: Bei der Aktivierung der App „Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App“ ist folgender Fehler aufgetreten: -2147024770. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (01/10/2016 01:52:00 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: P***-PC)
Description: Bei der Aktivierung der App „Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App“ ist folgender Fehler aufgetreten: -2147024770. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (01/10/2016 01:51:07 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: P***-PC)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (01/10/2016 01:51:07 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: P***-PC)
Description: Bei der Aktivierung der App „Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (01/10/2016 01:49:58 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: P***-PC)
Description: Bei der Aktivierung der App „Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App“ ist folgender Fehler aufgetreten: -2147024770. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (01/10/2016 01:39:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: P***-PC)
Description: Das Paket „microsoft.windowscommunicationsapps_17.6525.42271.0_x86__8wekyb3d8bbwe+microsoft.windowslive.mail“ wurde beendet, da das Anhalten zu lange dauerte.
Error: (01/09/2016 10:19:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15375
Error: (01/09/2016 10:19:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 15375
Error: (01/09/2016 10:19:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (01/09/2016 10:19:15 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: P***-PC)
Description: Bei der Aktivierung der App „Microsoft.Messaging_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Systemfehler:
=============
Error: (01/10/2016 01:51:07 PM) (Source: DCOM) (EventID: 10010) (User: P***-PC)
Description: CortanaUI.AppXr0dtzccx33hvam1xwfz3c1354p6222qd.mca
Error: (01/10/2016 01:51:07 PM) (Source: DCOM) (EventID: 10010) (User: P***-PC)
Description: App.AppXryc2qd338f5728r9gzzazav8206ba77s.mca
Error: (01/10/2016 12:39:09 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (01/10/2016 12:38:55 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.
Error: (01/09/2016 10:19:15 PM) (Source: DCOM) (EventID: 10010) (User: P***-PC)
Description: App.AppXck5aaxyarfx8gxrgfk6pvakmmxeqvepc.mca
Error: (01/09/2016 10:19:14 PM) (Source: DCOM) (EventID: 10010) (User: P***-PC)
Description: App.AppXck5aaxyarfx8gxrgfk6pvakmmxeqvepc.mca
Error: (01/09/2016 10:19:14 PM) (Source: DCOM) (EventID: 10010) (User: P***-PC)
Description: App.AppXck5aaxyarfx8gxrgfk6pvakmmxeqvepc.mca
Error: (01/09/2016 10:19:14 PM) (Source: DCOM) (EventID: 10010) (User: P***-PC)
Description: App.AppXck5aaxyarfx8gxrgfk6pvakmmxeqvepc.mca
Error: (01/09/2016 10:19:14 PM) (Source: DCOM) (EventID: 10010) (User: P***-PC)
Description: App.AppXck5aaxyarfx8gxrgfk6pvakmmxeqvepc.mca
Error: (01/09/2016 10:19:14 PM) (Source: DCOM) (EventID: 10010) (User: P***-PC)
Description: App.AppXck5aaxyarfx8gxrgfk6pvakmmxeqvepc.mca
CodeIntegrity:
===================================
Date: 2016-01-08 22:10:10.709
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-01-08 22:08:25.506
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-14 10:17:43.064
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-12 13:00:53.084
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-11 12:13:57.793
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-06 20:52:06.818
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-04 10:53:05.979
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-11-27 20:41:27.000
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-11-27 16:50:37.829
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-11-20 11:18:50.619
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
==================== Memory info ===========================
Processor: Pentium(R) Dual-Core CPU E5700 @ 3.00GHz
Prozentuale Nutzung des RAM: 58%
Installierter physikalischer RAM: 3071.24 MB
Verfügbarer physikalischer RAM: 1263.41 MB
Summe virtueller Speicher: 6143.24 MB
Verfügbarer virtueller Speicher: 3401.2 MB
==================== Laufwerke ================================
Drive c: (Boot) (Fixed) (Total:890.41 GB) (Free:725.83 GB) NTFS
Drive d: (Recover) (Fixed) (Total:40 GB) (Free:23.52 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=890.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=40 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)
==================== Ende vom Addition.txt ============================
Geändert von Vizenberger (10.01.2016 um 22:19 Uhr) |
|
12.01.2016, 11:31
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Windows 10: Rechner hängt sich immer wieder auf Hi,
__________________deinstalliere mal testweise Avira und berichte. Avira empfehlen wir hier schon seit Jahren nicht mehr und 2. hast du miot dem Windows Defender bereits ein vollwertiges AV in W10.
__________________ |
|
12.01.2016, 20:56
| #3 |
| | Windows 10: Rechner hängt sich immer wieder auf Hallo Cosinus,
__________________habe avira deinstalliert, bislang läuft der PC ohne Aussetzer. Ich werde daher einstweilen beim Defender bleiben. Wie sieht es mit meinen logs aus, ist da was Auffälliges oder gar Gefährliches zu erkennen? |
|
12.01.2016, 21:05
| #4 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Windows 10: Rechner hängt sich immer wieder auf Malwarebytes Anti-Rootkit (MBAR) Downloade dir bitte  Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
12.01.2016, 22:16
| #5 |
| | Windows 10: Rechner hängt sich immer wieder auf Hallo, der scan hat keinen Fund ergeben, heißt das Entwarnung? Hier das Logfile: Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org
Database version:
main: v2016.01.12.06
rootkit: v2016.01.09.01
Windows 10 x86 NTFS
Internet Explorer 11.20.10586.0
Admin :: P***-PC [administrator]
12.01.2016 21:30:17
mbar-log-2016-01-12 (21-30-17).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 730534
Time elapsed: 41 minute(s), 26 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
Physical Sectors Detected: 0
(No malicious items detected)
(end)
|
|
12.01.2016, 22:29
| #6 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Windows 10: Rechner hängt sich immer wieder aufZitat:
__________________ --> Windows 10: Rechner hängt sich immer wieder auf |
|
| Themen zu Windows 10: Rechner hängt sich immer wieder auf |
| anlage, antivir, antivirus, bildschirm, bonjour, cpu, defender, desktop, dnsapi.dll, explorer, firewall, flash player, google, home, hängt, monitor, mozilla, officejet, problem, prozesse, realtek, registry, services.exe, software, svchost.exe, system, windows, windowsapps, winlogon.exe |
Linear-Darstellung
