| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: smartnewtab und andere nervige Weiterleitungen im ChromeWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
05.02.2016, 17:16
| #1 |
| |  smartnewtab und andere nervige Weiterleitungen im Chrome Hi, Ich habe seit ca. 3 Wochen das Problem das Chrome mit aller 3 bis 5 Klicks auf irgendwelche Seiten verlinkt. Meistens ist smartnewtab oder irgendwelche Flirtseiten. Nun habe ich das ganze Forum schon durchgelesen und alles ausprobiert was hier so vorgeschlagen wurde. Ich bin mit meinem Latein am Ende. Vielleicht kann mir ja noch jemand einen Tipp geben. PS. Komischerweise betrifft es nur den Chrome. Revo Uninstaller brachte auch keine Lösung Viele Grüße David |
|
06.02.2016, 14:31
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | smartnewtab und andere nervige Weiterleitungen im Chrome Hallo und
__________________ Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden? Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520 Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten! Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht! Zudem bitte auch ein Log mit Farbars Tool machen: Scan mit Farbar's Recovery Scan Tool (FRST) Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
 Lesestoff:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
|
06.02.2016, 15:44
| #3 |
| | smartnewtab und andere nervige Weiterleitungen im Chrome Hi,
__________________Danke für deine Hilfe. hier der FRST.txt Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:27-01-2016 durchgeführt von Büro (Administrator) auf BUERO-PC (05-02-2016 16:24:40) Gestartet von E:\Downloads Geladene Profile: Büro (Verfügbare Profile: Büro & DefaultAppPool) Platform: Windows 10 Pro (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe (AgileBits) C:\Program Files (x86)\1Password\Agile1pService.exe (devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe (Dassault Systèmes) C:\Program Files\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Sanford, L.P.) C:\Program Files (x86)\DYMO\DYMO Label Software\DymoPnpService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe ( ) C:\Program Files\Autodesk\Inventor 2013\Moldflow\bin\mitsijm.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Microsoft Corporation) C:\Windows\System32\mqsvc.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe (VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe (VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (GN Netcom A/S) C:\Program Files (x86)\Jabra\Jabra PC Suite\JabraSkypeDriver.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [VIAxHCUtl] => C:\VIA_XHCI\usb3Monitor.exe [331776 2011-07-12] (VIA Technologies, Inc.) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [6868280 2012-05-21] (Logitech Inc.) HKLM\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [415680 2012-02-05] (Autodesk, Inc.) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-08-13] (Apple Inc.) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-27] (Intel Corporation) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139264 2011-04-20] (Brother Industries, Ltd.) HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2629632 2011-10-07] (Brother Industries, Ltd.) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-05-15] (Apple Inc.) HKLM-x32\...\Run: [Agile1pAgent] => C:\Program Files (x86)\1Password\Agile1pAgent.exe [2248976 2014-09-17] (AgileBits) HKLM-x32\...\Run: [WRSVC] => C:\Program Files (x86)\Webroot\WRSA.exe [840768 2016-01-04] (Webroot) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [919008 2012-07-27] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36800 2012-07-27] (Adobe Systems Incorporated) HKLM\...\Policies\Explorer: [NoViewOnDrive] 0 HKLM\...\Policies\Explorer: [DisableLocalMachineRun] 0 HKLM\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0 HKLM\...\Policies\Explorer: [DisableCurrentUserRun] 0 HKLM\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0 HKLM\...\Policies\Explorer: [NoViewContextMenu] 0 HKLM\...\Policies\Explorer: [NoShellSearchButton] 0 HKLM\...\Policies\Explorer: [NoFind] 0 HKLM\...\Policies\Explorer: [NoFile] 0 HKLM\...\Policies\Explorer: [HideClock] 0 HKLM\...\Policies\Explorer: [NoTrayContextMenu] 0 HKLM\...\Policies\Explorer: [NoTrayItemsDisplay] 0 HKLM\...\Policies\Explorer: [NoSetFolders] 0 HKLM\...\Policies\Explorer: [NoDevMgrUpdate] 0 HKLM\...\Policies\Explorer: [NoSetTaskbar] 0 HKLM\...\Policies\Explorer: [NoDeletePrinter] 0 HKLM\...\Policies\Explorer: [NoDFSTab] 0 HKLM\...\Policies\Explorer: [NoChangeStartMenu] 0 HKLM\...\Policies\Explorer: [NoLogoff] 0 HKLM\...\Policies\Explorer: [NoWindowsUpdate] 0 HKLM\...\Policies\Explorer: [NoEncryptOnMove] 0 HKLM\...\Policies\Explorer: [NoRunasInstallPrompt] 0 HKLM\...\Policies\Explorer: [NoResolveSearch] 0 HKLM\...\Policies\Explorer: [NoSaveSettings] 0 HKLM\...\Policies\Explorer: [NoHardwareTab] 0 HKLM\...\Policies\Explorer: [NoStartMenuSubFolders] 0 HKLM\...\Policies\Explorer: [NoDesktop] 0 HKU\S-1-5-19\...\Policies\system: [DisableCMD] 0 HKU\S-1-5-19\...\Policies\system: [NoDispAppearancePage] 0 HKU\S-1-5-19\...\Policies\system: [NoDispBackgroundPage] 0 HKU\S-1-5-19\...\Policies\system: [NoDispSettingsPage] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoViewOnDrive] 0 HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRun] 0 HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0 HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRun] 0 HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoViewContextMenu] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoFile] 0 HKU\S-1-5-19\...\Policies\Explorer: [HideClock] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoTrayContextMenu] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoSetFolders] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoDevMgrUpdate] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoSetTaskbar] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoDeletePrinter] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoDFSTab] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoChangeStartMenu] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoLogoff] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoWindowsUpdate] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoEncryptOnMove] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoRunasInstallPrompt] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoResolveSearch] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoSaveSettings] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoHardwareTab] 0 HKU\S-1-5-19\...\Policies\Explorer: [NoStartMenuSubFolders] 0 HKU\S-1-5-20\...\Policies\system: [DisableCMD] 0 HKU\S-1-5-20\...\Policies\system: [NoDispAppearancePage] 0 HKU\S-1-5-20\...\Policies\system: [NoDispBackgroundPage] 0 HKU\S-1-5-20\...\Policies\system: [NoDispSettingsPage] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoViewOnDrive] 0 HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRun] 0 HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0 HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRun] 0 HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoViewContextMenu] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoFile] 0 HKU\S-1-5-20\...\Policies\Explorer: [HideClock] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoTrayContextMenu] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoSetFolders] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoDevMgrUpdate] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoSetTaskbar] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoDeletePrinter] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoDFSTab] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoChangeStartMenu] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoLogoff] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoWindowsUpdate] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoEncryptOnMove] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoRunasInstallPrompt] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoResolveSearch] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoSaveSettings] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoHardwareTab] 0 HKU\S-1-5-20\...\Policies\Explorer: [NoStartMenuSubFolders] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Run: [TrueCrypt] => C:\Program Files\TrueCrypt\TrueCrypt.exe [1516496 2012-08-08] (TrueCrypt Foundation) HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Run: [NINJA.EXE] => C:\Program Files (x86)\Ninja\Ninja\Ninja.exe [10365440 2013-09-16] (Global IP Telecommunications Ltd.) HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Run: [DymoQuickPrint] => C:\Program Files (x86)\DYMO\DYMO Label Software\DymoQuickPrint.exe [1825360 2011-01-28] (Sanford, L.P.) HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50373248 2015-12-17] (Skype Technologies S.A.) HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe" HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\system: [DisableCMD] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\system: [NoDispAppearancePage] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\system: [NoDispBackgroundPage] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\system: [NoDispSettingsPage] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [] HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoViewOnDrive] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [DisableLocalMachineRun] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [DisableCurrentUserRun] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoViewContextMenu] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoFile] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [HideClock] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoTrayContextMenu] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoSetFolders] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoDevMgrUpdate] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoSetTaskbar] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoDeletePrinter] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoDFSTab] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoChangeStartMenu] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoLogoff] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoWindowsUpdate] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoEncryptOnMove] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoRunasInstallPrompt] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoResolveSearch] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoSaveSettings] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoHardwareTab] 0 HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoStartMenuSubFolders] 0 HKU\S-1-5-18\...\Policies\system: [DisableCMD] 0 HKU\S-1-5-18\...\Policies\system: [NoDispAppearancePage] 0 HKU\S-1-5-18\...\Policies\system: [NoDispBackgroundPage] 0 HKU\S-1-5-18\...\Policies\system: [NoDispSettingsPage] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoViewOnDrive] 0 HKU\S-1-5-18\...\Policies\Explorer: [DisableLocalMachineRun] 0 HKU\S-1-5-18\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0 HKU\S-1-5-18\...\Policies\Explorer: [DisableCurrentUserRun] 0 HKU\S-1-5-18\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoViewContextMenu] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoFile] 0 HKU\S-1-5-18\...\Policies\Explorer: [HideClock] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoTrayContextMenu] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoSetFolders] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoDevMgrUpdate] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoSetTaskbar] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoDeletePrinter] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoDFSTab] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoChangeStartMenu] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoLogoff] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoWindowsUpdate] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoEncryptOnMove] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoRunasInstallPrompt] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoResolveSearch] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoSaveSettings] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoHardwareTab] 0 HKU\S-1-5-18\...\Policies\Explorer: [NoStartMenuSubFolders] 0 SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation) SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation) ShellIconOverlayIdentifiers: [ ] -> {1914B27A-33C8-46F8-A1C2-F993268D4564} => C:\WINDOWS\system32\WRusr.dll [2016-01-04] (Webroot) ShellIconOverlayIdentifiers: [ ] -> {C14874EA-ACE4-4A47-8A81-18C4D1C40868} => C:\WINDOWS\system32\WRusr.dll [2016-01-04] (Webroot) ShellIconOverlayIdentifiers: [ ] -> {6DA1ED92-315E-4D0B-B354-9D5F519DBA95} => C:\WINDOWS\system32\WRusr.dll [2016-01-04] (Webroot) ShellIconOverlayIdentifiers: [ ] -> {8D7FC74C-E409-42DF-8EEE-69D45FAE2F30} => C:\WINDOWS\system32\WRusr.dll [2016-01-04] (Webroot) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2012-02-07] (Autodesk, Inc.) ShellIconOverlayIdentifiers: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\Windows\system32\CbFsMntNtf3.dll [2012-04-09] (EldoS Corporation) ShellIconOverlayIdentifiers-x32: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\Windows\SysWOW64\CbFsMntNtf3.dll [2012-04-09] (EldoS Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk [2015-12-18] ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\wruninstall.exe (Webroot Software, Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install Webroot FF RunOnce.lnk [2015-08-01] ShortcutTarget: Install Webroot FF RunOnce.lnk -> C:\Program Files (x86)\Common Files\wruninstall.exe (Webroot Software, Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install Webroot IE RunOnce.lnk [2015-08-01] ShortcutTarget: Install Webroot IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\wruninstall.exe (Webroot Software, Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Jabra Device Service.lnk [2014-04-18] ShortcutTarget: Jabra Device Service.lnk -> C:\Program Files (x86)\Jabra\Jabra PC Suite\JabraDeviceService.exe (GN Netcom A/S) Startup: C:\Users\Büro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk [2016-02-03] ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) Startup: C:\Users\Büro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RT-Updater.lnk [2016-02-03] ShortcutTarget: RT-Updater.lnk -> C:\Program Files\Ross-Tech\VCDS\VCDS.EXE (Ross-Tech, LLC) CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\..\Interfaces\{182ac41e-22b3-4a66-853e-1f1d1852da32}: [NameServer] 192.168.23.1 Tcpip\..\Interfaces\{c003528e-6fff-4c78-860a-15a2bfea1112}: [DhcpNameServer] 172.20.10.1 Internet Explorer: ================== HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> Backup.Old.DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} SearchScopes: HKU\S-1-5-21-3089249572-137260113-2558678779-1000 -> Backup.Old.DefaultScope {24AA9114-6803-4599-A228-77B94E430634} BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO: Webroot Vault -> {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} -> C:\ProgramData\WRData\pkg\LPBar64.dll [2015-12-18] (Webroot) BHO: Webroot Filtering Extension -> {C9C42510-9B41-42c1-9DCD-7282A2D07C61} -> C:\Program Files (x86)\Webroot\WRData\PKG\Vistax64\wrflt.dll [2015-12-18] (Webroot) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27] (Adobe Systems Incorporated) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation) BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-07-27] (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: Webroot Vault -> {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} -> C:\ProgramData\WRData\pkg\LPBar.dll [2015-12-18] (Webroot) BHO-x32: Webroot Filtering Extension -> {C9C42510-9B41-42c1-9DCD-7282A2D07C61} -> C:\Program Files (x86)\Webroot\WRData\PKG\Vistax86\wrflt.dll [2015-12-18] (Webroot) BHO-x32: 1Password -> {CB1A24DA-7416-4921-A0CF-5AA1160AAE2A} -> C:\Program Files (x86)\1Password\Agile1pIE.dll [2014-09-17] (AgileBits) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation) BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-07-27] (Adobe Systems Incorporated) Toolbar: HKLM - Webroot Toolbar - {97ab88ef-346b-4179-a0b1-7445896547a5} - C:\ProgramData\WRData\pkg\LPBar64.dll [2015-12-18] (Webroot) Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-07-27] (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Webroot Toolbar - {97ab88ef-346b-4179-a0b1-7445896547a5} - C:\ProgramData\WRData\pkg\LPBar.dll [2015-12-18] (Webroot) DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) FireFox: ======== FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2014-02-17] (Tracker Software Products (Canada) Ltd.) FF Plugin: @java.com/DTPlugin,version=10.5.0 -> C:\Windows\system32\npDeployJava1.dll [2012-08-09] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2014-02-17] (Tracker Software Products (Canada) Ltd.) FF Plugin: @videolan.org/vlc,version=2.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2012-06-28] (VideoLAN) FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1209149.dll [2014-01-29] (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-07-30] () FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-02-17] (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @dymo.com/DymoLabelFramework -> C:\Program Files (x86)\DYMO\DYMO Label Software\Framework\npDYMOLabelFramework.dll [2011-01-28] ( Sanford L.P.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2011-12-01] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2011-12-01] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\WINDOWS\SysWOW64\npdeployJava1.dll [2015-01-28] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\new_plugin\npjp2.dll [Keine Datei] FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2012-05-14] (Nero AG) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2016-01-20] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2016-01-20] (Google Inc.) FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-02-17] (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2012-07-27] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-3089249572-137260113-2558678779-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-02-17] (Tracker Software Products (Canada) Ltd.) FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2012-08-15] [ist nicht signiert] Chrome: ======= CHR StartupUrls: Default -> "hxxp://www.google.de/" CHR Profile: C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Präsentationen) - C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-01-20] CHR Extension: (Google Docs) - C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-20] CHR Extension: (Google Drive) - C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-20] CHR Extension: (YouTube) - C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-20] CHR Extension: (Google-Suche) - C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-20] CHR Extension: (Google Tabellen) - C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-01-20] CHR Extension: (Google Docs Offline) - C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-20] CHR Extension: (Webroot Filtering Extension) - C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjeghcllfecehndceplomkocgfbklffd [2016-01-20] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-20] CHR Extension: (Google Mail) - C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-20] CHR HKLM-x32\...\Chrome\Extension: [kjeghcllfecehndceplomkocgfbklffd] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [ngkhgikojglcgnckopipfdajaifmmnnc] - hxxp://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [okfhiodnpcnnnpgbjbhfebjnbagmfhab] - C:\ProgramData\WRData\pkg\lpchrome.crx [2015-08-01] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 Agile1Password; C:\Program Files (x86)\1Password\Agile1pService.exe [768784 2014-09-17] (AgileBits) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.) S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] () R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [19232 2012-01-31] (Autodesk, Inc.) R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [Datei ist nicht signiert] R2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [514128 2012-03-19] (REINER SCT) R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3755976 2015-07-01] (devolo AG) R2 DraftSight API Service; C:\Program Files\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe [123392 2013-08-30] (Dassault Systèmes) [Datei ist nicht signiert] R2 DymoPnpService; C:\Program Files (x86)\DYMO\DYMO Label Software\DymoPnpService.exe [32336 2011-01-28] (Sanford, L.P.) S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [Datei ist nicht signiert] S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Datei ist nicht signiert] R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-10-09] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes) R2 mitsijm2013; C:\Program Files\Autodesk\Inventor 2013\Moldflow\bin\mitsijm.exe [339776 2012-01-31] ( ) S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.) R2 StarMoney 9.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert] S4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6889232 2015-12-14] (TeamViewer GmbH) R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [36504 2015-06-22] (VIA Technologies, Inc.) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation) S2 WRSVC; C:\Program Files (x86)\Webroot\WRSA.exe [840768 2016-01-04] (Webroot) S2 Bonjour Service; "C:\Program Files\Bonjour\mDNSResponder.exe" [X] ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21616 2011-11-02] () R3 cbfs3; C:\Windows\System32\drivers\cbfs3.sys [352144 2012-04-09] (EldoS Corporation) R3 cjusb; C:\Windows\system32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT) R3 evcDrv; C:\Windows\system32\drivers\evcDrv.sys [298552 2015-08-13] (Jungo Connectivity) S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-08-15] () R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-02-05] (Malwarebytes) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation) R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.) R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2013-03-04] (CACE Technologies) S2 pardrv; C:\Windows\System32\Drivers\pardrv.sys [20184 2011-10-12] ( ) R3 Pg4uUSB; C:\Windows\system32\DRIVERS\pg4uusb.sys [138904 2015-09-07] () R3 RT-USB; C:\Windows\system32\drivers\RT-USB64.SYS [97152 2014-05-12] (Ross-Tech LLC) S3 tsusbhub; C:\Windows\System32\drivers\tsusbhub.sys [117248 2010-11-21] (Microsoft Corporation) [Datei ist nicht signiert] S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] () R0 vsock; C:\Windows\System32\drivers\vsock.sys [75512 2015-08-04] (VMware, Inc.) S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation) R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation) R3 WinDriver6; C:\Windows\system32\drivers\windrvr6.sys [276536 2014-08-05] (Jungo Connectivity) R0 WRkrn; C:\Windows\System32\drivers\WRkrn.sys [117728 2015-10-14] (Webroot) S3 wrUrlFlt; C:\Windows\system32\DRIVERS\wrUrlFlt.sys [45104 2015-12-18] (Webroot) S3 XilinxFirmwareLoader; C:\Windows\System32\Drivers\xusbdfwu.sys [19200 2011-02-03] (Xilinx, Inc.) R2 XilinxPC4Driver; C:\Windows\System32\drivers\xpc4drvr.sys [27384 2011-02-03] (Xilinx, Inc.) U3 idsvc; kein ImagePath U0 SR; kein ImagePath U2 srservice; kein ImagePath S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X] U3 wpcsvc; kein ImagePath ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-02-05 16:24 - 2016-02-05 16:24 - 00000000 ____D C:\FRST 2016-02-05 16:22 - 2016-02-05 16:22 - 00013129 _____ C:\Users\Büro\Desktop\JRT.txt 2016-02-05 16:14 - 2016-02-05 16:14 - 00016148 _____ C:\WINDOWS\system32\BUERO-PC_Büro_HistoryPrediction.bin 2016-02-05 06:50 - 2016-02-05 06:50 - 00002336 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-02-05 06:50 - 2016-02-05 06:50 - 00002324 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-02-05 06:44 - 2016-02-05 06:44 - 00001337 _____ C:\Users\Büro\Desktop\Revo Uninstaller.lnk 2016-02-05 06:44 - 2016-02-05 06:44 - 00000000 ____D C:\Users\Büro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller 2016-02-05 06:44 - 2016-02-05 06:44 - 00000000 ____D C:\Program Files (x86)\VS Revo Group 2016-02-04 06:46 - 2015-01-28 05:57 - 00897960 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\npdeployJava1.dll 2016-02-04 06:46 - 2015-01-28 05:57 - 00818088 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\deployJava1.dll 2016-02-04 06:44 - 2016-02-04 06:44 - 00852720 _____ C:\Users\Büro\Downloads\SecurityCheck.exe 2016-02-03 07:18 - 2016-02-03 07:48 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2016-02-03 07:17 - 2016-02-03 07:41 - 00000000 ____D C:\Users\Büro\Desktop\mbar 2016-02-03 07:15 - 2016-02-03 07:17 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Büro\Downloads\mbar-1.09.3.1001.exe 2016-02-03 06:37 - 2016-02-05 14:38 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2016-02-03 06:37 - 2016-02-03 07:47 - 00001171 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2016-02-03 06:37 - 2016-02-03 07:17 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2016-02-03 06:37 - 2016-02-03 06:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2016-02-03 06:37 - 2016-02-03 06:37 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-02-03 06:37 - 2016-02-03 06:37 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-02-03 06:37 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2016-02-03 06:37 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2016-02-03 06:35 - 2016-02-03 06:36 - 22908888 _____ (Malwarebytes ) C:\Users\Büro\Downloads\mbam-setup-2.2.0.1024.exe 2016-02-02 05:51 - 2016-02-02 05:51 - 00182320 _____ C:\Users\Büro\Downloads\DHL-Marke-X6CBKWK36P.pdf 2016-02-01 06:46 - 2016-02-01 06:46 - 00000228 _____ C:\Users\Büro\Downloads\antiskypewerbung.zip 2016-02-01 06:01 - 2016-02-01 06:01 - 02870984 _____ (ESET) C:\Users\Büro\Downloads\esetsmartinstaller_deu.exe 2016-01-28 06:17 - 2016-01-28 06:17 - 00187154 _____ C:\Users\Büro\Downloads\DHL-Marke-ECK3D6VMTW.pdf 2016-01-22 18:16 - 2016-01-22 18:16 - 01140355 _____ C:\Users\Büro\Downloads\rechnung.pdf 2016-01-22 10:03 - 2016-01-22 10:03 - 00075048 _____ C:\Users\Büro\Downloads\ufonts.com_interface-dama.ttf 2016-01-21 17:11 - 2016-01-21 17:12 - 04188505 _____ C:\Users\Büro\Downloads\Kondensataufbereitung-Aquamat.pdf 2016-01-20 17:58 - 2016-01-20 17:58 - 00001488 _____ C:\Users\Büro\Downloads\EMMSettings.rar 2016-01-20 17:57 - 2016-01-20 17:57 - 03588394 _____ C:\Users\Büro\Downloads\OscamEMMV14Spy.zip 2016-01-20 16:20 - 2016-01-20 16:58 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2016-01-20 16:20 - 2016-01-20 16:20 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking 2016-01-20 16:08 - 2016-01-20 16:12 - 00000000 ____D C:\AdwCleaner 2016-01-20 16:08 - 2016-01-20 16:08 - 01505280 _____ C:\Users\Büro\Downloads\adwcleaner_5.030.exe 2016-01-20 15:16 - 2016-02-05 16:21 - 00001124 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2016-01-20 15:16 - 2016-02-05 15:21 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2016-01-20 15:16 - 2016-01-20 17:59 - 00000000 ____D C:\Users\Büro\AppData\Local\Google 2016-01-20 15:16 - 2016-01-20 15:19 - 00000000 ____D C:\Program Files (x86)\Google 2016-01-20 15:16 - 2016-01-20 15:16 - 00004182 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2016-01-20 15:16 - 2016-01-20 15:16 - 00003950 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2016-01-13 08:47 - 2016-01-05 04:07 - 02463704 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2016-01-13 08:47 - 2016-01-05 04:07 - 00377592 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP4SDECD.DLL 2016-01-13 08:47 - 2016-01-05 04:06 - 08022368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-01-13 08:47 - 2016-01-05 04:06 - 01991120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVENCOD.DLL 2016-01-13 08:47 - 2016-01-05 04:06 - 01270104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2016-01-13 08:47 - 2016-01-05 04:06 - 01063504 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll 2016-01-13 08:47 - 2016-01-05 04:06 - 00119800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL 2016-01-13 08:47 - 2016-01-05 04:04 - 02824248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2016-01-13 08:47 - 2016-01-05 04:04 - 02641928 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL 2016-01-13 08:47 - 2016-01-05 04:04 - 01591848 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2016-01-13 08:47 - 2016-01-05 04:04 - 01150816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2016-01-13 08:47 - 2016-01-05 04:04 - 00862056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2016-01-13 08:47 - 2016-01-05 04:04 - 00787720 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL 2016-01-13 08:47 - 2016-01-05 04:04 - 00784136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2016-01-13 08:47 - 2016-01-05 04:04 - 00779928 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll 2016-01-13 08:47 - 2016-01-05 04:04 - 00772448 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2016-01-13 08:47 - 2016-01-05 04:04 - 00751992 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOE.DLL 2016-01-13 08:47 - 2016-01-05 04:04 - 00667856 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll 2016-01-13 08:47 - 2016-01-05 04:04 - 00250520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPG4DECD.DLL 2016-01-13 08:47 - 2016-01-05 04:04 - 00249464 _____ (Microsoft Corporation) C:\WINDOWS\system32\RESAMPLEDMO.DLL 2016-01-13 08:47 - 2016-01-05 04:04 - 00243248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2016-01-13 08:47 - 2016-01-05 04:04 - 00233992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll 2016-01-13 08:47 - 2016-01-05 04:04 - 00115704 _____ (Microsoft Corporation) C:\WINDOWS\system32\VIDRESZR.DLL 2016-01-13 08:47 - 2016-01-05 04:04 - 00090912 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll 2016-01-13 08:47 - 2016-01-05 04:04 - 00083704 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfvdsp.dll 2016-01-13 08:47 - 2016-01-05 03:59 - 00781976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll 2016-01-13 08:47 - 2016-01-05 03:52 - 00441696 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2016-01-13 08:47 - 2016-01-05 03:50 - 01817064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll 2016-01-13 08:47 - 2016-01-05 03:50 - 01083072 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2016-01-13 08:47 - 2016-01-05 03:50 - 00723648 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2016-01-13 08:47 - 2016-01-05 03:50 - 00345080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSDECD.DLL 2016-01-13 08:47 - 2016-01-05 03:50 - 00251544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP43DECD.DLL 2016-01-13 08:47 - 2016-01-05 03:50 - 00205072 _____ (Microsoft Corporation) C:\WINDOWS\system32\COLORCNV.DLL 2016-01-13 08:47 - 2016-01-05 03:31 - 01365576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2016-01-13 08:47 - 2016-01-05 03:30 - 02459096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL 2016-01-13 08:47 - 2016-01-05 03:30 - 02162064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVENCOD.DLL 2016-01-13 08:47 - 2016-01-05 03:30 - 02152744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2016-01-13 08:47 - 2016-01-05 03:30 - 01106872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2016-01-13 08:47 - 2016-01-05 03:30 - 00882208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll 2016-01-13 08:47 - 2016-01-05 03:30 - 00368776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP4SDECD.DLL 2016-01-13 08:47 - 2016-01-05 03:30 - 00232896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RESAMPLEDMO.DLL 2016-01-13 08:47 - 2016-01-05 03:30 - 00100712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL 2016-01-13 08:47 - 2016-01-05 03:29 - 00208688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll 2016-01-13 08:47 - 2016-01-05 03:28 - 02445128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2016-01-13 08:47 - 2016-01-05 03:28 - 00714808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2016-01-13 08:47 - 2016-01-05 03:28 - 00696192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOE.DLL 2016-01-13 08:47 - 2016-01-05 03:28 - 00695752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL 2016-01-13 08:47 - 2016-01-05 03:28 - 00645144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2016-01-13 08:47 - 2016-01-05 03:28 - 00635312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll 2016-01-13 08:47 - 2016-01-05 03:28 - 00497896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll 2016-01-13 08:47 - 2016-01-05 03:28 - 00277400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MPG4DECD.DLL 2016-01-13 08:47 - 2016-01-05 03:28 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2016-01-13 08:47 - 2016-01-05 03:28 - 00107952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VIDRESZR.DLL 2016-01-13 08:47 - 2016-01-05 03:28 - 00082096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll 2016-01-13 08:47 - 2016-01-05 03:28 - 00072808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfvdsp.dll 2016-01-13 08:47 - 2016-01-05 03:21 - 00658528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll 2016-01-13 08:47 - 2016-01-05 03:18 - 21873152 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-01-13 08:47 - 2016-01-05 03:15 - 24592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-01-13 08:47 - 2016-01-05 03:15 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL 2016-01-13 08:47 - 2016-01-05 03:15 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll 2016-01-13 08:47 - 2016-01-05 03:15 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll 2016-01-13 08:47 - 2016-01-05 03:10 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh264enc.dll 2016-01-13 08:47 - 2016-01-05 03:10 - 00305776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSDECD.DLL 2016-01-13 08:47 - 2016-01-05 03:10 - 00278424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP43DECD.DLL 2016-01-13 08:47 - 2016-01-05 03:10 - 00188032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COLORCNV.DLL 2016-01-13 08:47 - 2016-01-05 03:09 - 01234944 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2016-01-13 08:47 - 2016-01-05 03:09 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2016-01-13 08:47 - 2016-01-05 03:02 - 01672192 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll 2016-01-13 08:47 - 2016-01-05 03:02 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll 2016-01-13 08:47 - 2016-01-05 03:02 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll 2016-01-13 08:47 - 2016-01-05 03:01 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax 2016-01-13 08:47 - 2016-01-05 03:00 - 00826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2016-01-13 08:47 - 2016-01-05 03:00 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-01-13 08:47 - 2016-01-05 02:59 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2016-01-13 08:47 - 2016-01-05 02:57 - 00712704 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2016-01-13 08:47 - 2016-01-05 02:57 - 00578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2016-01-13 08:47 - 2016-01-05 02:57 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2016-01-13 08:47 - 2016-01-05 02:56 - 07523840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-01-13 08:47 - 2016-01-05 02:51 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL 2016-01-13 08:47 - 2016-01-05 02:51 - 01009664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL 2016-01-13 08:47 - 2016-01-05 02:51 - 00634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVXENCD.DLL 2016-01-13 08:47 - 2016-01-05 02:51 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFWMAAEC.DLL 2016-01-13 08:47 - 2016-01-05 02:51 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSENCD.DLL 2016-01-13 08:47 - 2016-01-05 02:44 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll 2016-01-13 08:47 - 2016-01-05 02:44 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll 2016-01-13 08:47 - 2016-01-05 02:43 - 19324928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-01-13 08:47 - 2016-01-05 02:42 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL 2016-01-13 08:47 - 2016-01-05 02:38 - 00556032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh264enc.dll 2016-01-13 08:47 - 2016-01-05 02:32 - 01541632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll 2016-01-13 08:47 - 2016-01-05 02:32 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll 2016-01-13 08:47 - 2016-01-05 02:31 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll 2016-01-13 08:47 - 2016-01-05 02:31 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax 2016-01-13 08:47 - 2016-01-05 02:30 - 18802176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-01-13 08:47 - 2016-01-05 02:29 - 00650240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2016-01-13 08:47 - 2016-01-05 02:29 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2016-01-13 08:47 - 2016-01-05 02:26 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2016-01-13 08:47 - 2016-01-05 02:24 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-01-13 08:47 - 2016-01-05 02:20 - 00890880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL 2016-01-13 08:47 - 2016-01-05 02:19 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL 2016-01-13 08:47 - 2016-01-05 02:19 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVXENCD.DLL 2016-01-13 08:47 - 2016-01-05 02:19 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSENCD.DLL 2016-01-13 08:47 - 2016-01-05 02:19 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFWMAAEC.DLL 2016-01-13 05:53 - 2016-01-13 05:53 - 00000000 ____D C:\Users\Büro\AppData\Roaming\Obsidium ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-02-05 16:20 - 2012-08-08 21:19 - 00000000 ____D C:\temp 2016-02-05 16:17 - 2012-08-08 19:51 - 00000000 ____D C:\Users\Büro\AppData\Roaming\Skype 2016-02-05 13:18 - 2013-06-13 13:48 - 00000000 ____D C:\ProgramData\WRData 2016-02-05 12:21 - 2015-11-20 05:41 - 00004154 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{1A68EF23-0DC5-4266-A433-600125A3DAFF} 2016-02-05 06:22 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-02-05 06:16 - 2015-07-10 12:04 - 00000000 ___HD C:\Program Files\WindowsApps 2016-02-05 06:16 - 2012-08-12 12:49 - 00001504 _____ C:\Users\Büro\ViewMateDLX.cfg 2016-02-05 06:16 - 2012-08-12 12:49 - 00000016 ____H C:\WINDOWS\SysWOW64\servdat.slm 2016-02-05 06:08 - 2012-08-12 13:02 - 00000219 _____ C:\WINDOWS\SysWOW64\lsprst7.tgz 2016-02-05 06:08 - 2012-08-12 13:02 - 00000205 _____ C:\WINDOWS\SysWOW64\lsprst7.dll 2016-02-05 06:04 - 2015-08-19 06:00 - 00000000 __SHD C:\Users\Büro\IntelGraphicsProfiles 2016-02-05 06:04 - 2015-08-19 05:47 - 00000000 _____ C:\WINDOWS\system32\Drivers\lvuvc.hs 2016-02-04 15:20 - 2015-11-05 15:43 - 00000000 ____D C:\VM-W7-Ultimate 2016-02-04 15:20 - 2012-08-09 17:54 - 00000000 ____D C:\Users\Büro\AppData\Local\VMware 2016-02-04 15:18 - 2012-08-09 17:54 - 00000000 ____D C:\Users\Büro\AppData\Roaming\VMware 2016-02-04 06:48 - 2012-08-08 16:25 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2016-02-04 06:47 - 2012-08-18 06:13 - 00000000 ____D C:\Program Files (x86)\Java 2016-02-03 10:44 - 2012-10-06 11:14 - 00000000 ____D C:\Users\Büro\AppData\Roaming\TeamViewer 2016-02-03 10:31 - 2012-10-26 16:08 - 00001028 _____ C:\WINDOWS\BRCALIB.INI 2016-02-03 07:48 - 2015-12-08 06:20 - 00001040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk 2016-02-03 07:48 - 2015-09-16 17:33 - 00000279 _____ C:\Users\Büro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Papierkorb.lnk 2016-02-03 07:48 - 2015-08-19 06:02 - 00002389 _____ C:\Users\Büro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-02-03 07:48 - 2015-08-19 05:54 - 00001552 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-02-03 07:48 - 2015-01-10 16:33 - 00001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nettalk.lnk 2016-02-03 07:48 - 2014-09-29 03:56 - 00001874 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark 2 Preview.lnk 2016-02-03 07:48 - 2014-09-29 03:56 - 00001585 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk 2016-02-03 07:48 - 2013-09-12 05:05 - 00001155 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ninja.lnk 2016-02-03 07:48 - 2012-08-12 13:55 - 00001262 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS5.lnk 2016-02-03 07:48 - 2012-08-12 13:55 - 00001169 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS5.lnk 2016-02-03 07:48 - 2012-08-12 13:54 - 00001353 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS5.exe.lnk 2016-02-03 07:48 - 2012-08-12 13:53 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS5.lnk 2016-02-03 07:48 - 2012-08-12 13:53 - 00000997 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk 2016-02-03 07:48 - 2012-08-12 11:21 - 00002465 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller X.lnk 2016-02-03 07:48 - 2012-08-12 11:21 - 00002453 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat X Pro.lnk 2016-02-03 07:48 - 2012-08-11 12:13 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2016-02-03 07:48 - 2012-08-09 15:52 - 00002184 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Deinstallationsprogramm.lnk 2016-02-03 07:48 - 2012-08-09 15:52 - 00002125 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk 2016-02-03 07:48 - 2012-08-08 16:28 - 00001214 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD VDeck.lnk 2016-02-03 07:47 - 2015-12-24 19:39 - 00001799 _____ C:\Users\Public\Desktop\Xilinx ISE Design Suite 12.1.lnk 2016-02-03 07:47 - 2015-12-08 06:20 - 00001028 _____ C:\Users\Public\Desktop\TeamViewer 11.lnk 2016-02-03 07:47 - 2015-11-16 04:47 - 00002180 _____ C:\Users\Public\Desktop\devolo Cockpit.lnk 2016-02-03 07:47 - 2015-10-10 15:55 - 00001261 _____ C:\Users\Public\Desktop\VMware Workstation 12 Player.lnk 2016-02-03 07:47 - 2015-09-08 14:32 - 00001822 _____ C:\Users\Public\Desktop\iTunes.lnk 2016-02-03 07:47 - 2015-08-31 16:54 - 00002712 _____ C:\Users\Public\Desktop\MPLAB IPE v3.05.lnk 2016-02-03 07:47 - 2015-08-31 16:54 - 00002625 _____ C:\Users\Public\Desktop\MPLAB driver switcher.lnk 2016-02-03 07:47 - 2015-08-31 16:54 - 00002561 _____ C:\Users\Public\Desktop\MPLAB X IDE v3.05.lnk 2016-02-03 07:47 - 2015-06-13 07:48 - 00001143 _____ C:\Users\Public\Desktop\Packet Sender.lnk 2016-02-03 07:47 - 2015-02-19 17:57 - 00001232 _____ C:\Users\Public\Desktop\Target 3001! V17 discover.lnk 2016-02-03 07:47 - 2015-01-10 16:33 - 00001000 _____ C:\Users\Public\Desktop\Nettalk.lnk 2016-02-03 07:47 - 2014-07-02 04:37 - 00000995 _____ C:\Users\Public\Desktop\DVDFab 9.lnk 2016-02-03 07:47 - 2014-03-19 11:20 - 00001062 _____ C:\Users\Public\Desktop\PDF-Viewer.lnk 2016-02-03 07:47 - 2014-03-14 05:58 - 00002642 _____ C:\Users\Public\Desktop\Skype.lnk 2016-02-03 07:47 - 2014-01-14 17:34 - 00000929 _____ C:\Users\Public\Desktop\FILOU-NC12.lnk 2016-02-03 07:47 - 2014-01-09 06:29 - 00000997 _____ C:\Users\Public\Desktop\Cut2D 1.5.lnk 2016-02-03 07:47 - 2014-01-08 15:42 - 00002076 _____ C:\Users\Public\Desktop\StarMoney 9.0.lnk 2016-02-03 07:47 - 2013-12-30 15:48 - 00000911 _____ C:\Users\Public\Desktop\Repetier-Host.lnk 2016-02-03 07:47 - 2013-11-19 09:06 - 00002753 _____ C:\Users\Public\Desktop\DraftSight x64.lnk 2016-02-03 07:47 - 2013-09-12 05:05 - 00001143 _____ C:\Users\Public\Desktop\Ninja.lnk 2016-02-03 07:47 - 2013-08-26 19:25 - 00001240 _____ C:\Users\Public\Desktop\Renee Undeleter.lnk 2016-02-03 07:47 - 2013-08-21 12:23 - 00002012 _____ C:\Users\Public\Desktop\PE-DESIGN NEXT.lnk 2016-02-03 07:47 - 2013-03-13 17:30 - 00002034 _____ C:\Users\Public\Desktop\AutoCAD 2013.lnk 2016-02-03 07:47 - 2013-02-07 14:31 - 00001019 _____ C:\Users\Public\Desktop\iExplorer.lnk 2016-02-03 07:47 - 2013-01-03 09:03 - 00000991 _____ C:\Users\Public\Desktop\FRITZ!fax.lnk 2016-02-03 07:47 - 2012-11-29 06:55 - 00002098 _____ C:\Users\Public\Desktop\Atmel Studio 6.0.lnk 2016-02-03 07:47 - 2012-11-19 10:16 - 00001055 _____ C:\Users\Public\Desktop\Biet-O-Matic.lnk 2016-02-03 07:47 - 2012-10-26 16:09 - 00002140 _____ C:\Users\Public\Desktop\Brother Creative Center.lnk 2016-02-03 07:47 - 2012-10-20 18:25 - 00001225 _____ C:\Users\Public\Desktop\Autodesk Vault Basic 2013.lnk 2016-02-03 07:47 - 2012-10-20 18:24 - 00002069 _____ C:\Users\Public\Desktop\Inventor Fusion 2013.lnk 2016-02-03 07:47 - 2012-10-20 18:22 - 00002227 _____ C:\Users\Public\Desktop\Autodesk Inventor.lnk 2016-02-03 07:47 - 2012-10-20 18:22 - 00002099 _____ C:\Users\Public\Desktop\DWG TrueView 2013.lnk 2016-02-03 07:47 - 2012-10-20 18:21 - 00002179 _____ C:\Users\Public\Desktop\Autodesk Design Review 2013.lnk 2016-02-03 07:47 - 2012-08-29 11:47 - 00001206 _____ C:\Users\Public\Desktop\OptiCut 5.16b.lnk 2016-02-03 07:47 - 2012-08-28 13:51 - 00001123 _____ C:\Users\Public\Desktop\WinOLS.lnk 2016-02-03 07:47 - 2012-08-12 11:21 - 00002026 _____ C:\Users\Public\Desktop\Adobe Acrobat X Pro.lnk 2016-02-03 07:47 - 2012-08-10 09:48 - 00001372 _____ C:\Users\Public\Desktop\Offa.lnk 2016-02-03 07:47 - 2012-08-09 18:37 - 00002843 _____ C:\Users\Public\Desktop\Nero Burning ROM 11.lnk 2016-02-03 07:47 - 2012-08-09 12:05 - 00001244 _____ C:\Users\Public\Desktop\Target 3001! V15 professional.lnk 2016-02-03 07:47 - 2012-08-08 22:45 - 00000919 _____ C:\Users\Public\Desktop\TrueCrypt.lnk 2016-02-03 07:47 - 2012-08-08 21:37 - 00001152 _____ C:\Users\Public\Desktop\DYMO Label v.8.lnk 2016-02-03 07:47 - 2012-08-08 20:05 - 00000915 _____ C:\Users\Public\Desktop\VLC media player.lnk 2016-02-03 07:47 - 2012-08-08 16:28 - 00001202 _____ C:\Users\Public\Desktop\HD VDeck.lnk 2016-02-03 07:46 - 2015-12-28 07:25 - 00001420 _____ C:\Users\Büro\Desktop\Elnec PG4UW.lnk 2016-02-03 07:46 - 2015-12-24 19:44 - 00002107 _____ C:\Users\Büro\Desktop\iMPACT.lnk 2016-02-03 07:46 - 2015-12-23 05:11 - 00000983 _____ C:\Users\Büro\Desktop\VCDS Release 15.7.lnk 2016-02-03 07:46 - 2015-09-03 17:26 - 00001009 _____ C:\Users\Büro\Desktop\PIC C Compiler.lnk 2016-02-03 07:46 - 2015-02-19 17:57 - 00001021 _____ C:\Users\Büro\Desktop\ELECTRA_250.lnk 2016-02-03 07:46 - 2014-01-17 16:55 - 00001169 _____ C:\Users\Büro\Desktop\pronterface.lnk 2016-02-03 07:46 - 2014-01-08 16:56 - 00001378 _____ C:\Users\Büro\Desktop\slic3r.lnk 2016-02-03 07:46 - 2013-05-02 06:03 - 00001478 _____ C:\Users\Büro\Desktop\LaserWorkV5.lnk 2016-02-03 07:46 - 2013-01-21 18:47 - 00001019 _____ C:\Users\Büro\Desktop\1Password.lnk 2016-02-03 07:46 - 2012-12-27 21:02 - 00001362 _____ C:\Users\Büro\Desktop\Free Video Flip and Rotate.lnk 2016-02-03 07:46 - 2012-12-27 14:49 - 00001198 _____ C:\Users\Büro\Desktop\Format Factory.lnk 2016-02-03 07:46 - 2012-12-07 17:52 - 00001409 _____ C:\Users\Büro\Desktop\Internet Explorer (2).lnk 2016-02-03 07:46 - 2012-09-04 07:08 - 00000963 _____ C:\Users\Büro\Desktop\HTerm.lnk 2016-02-03 07:46 - 2012-08-19 05:44 - 00001349 _____ C:\Users\Büro\Desktop\Remote Desktop Connection.lnk 2016-02-03 07:46 - 2012-08-15 17:32 - 00001053 _____ C:\Users\Büro\Desktop\Free M4a to MP3 Converter.lnk 2016-02-03 07:46 - 2012-08-12 13:56 - 00001107 _____ C:\Users\Büro\Desktop\Adobe Photoshop CS5 (64 Bit).lnk 2016-02-03 07:46 - 2012-08-12 13:01 - 00001772 _____ C:\Users\Büro\Desktop\ViewMateDLX.lnk 2016-02-03 07:46 - 2012-08-09 22:00 - 00002190 _____ C:\Users\Büro\Desktop\UltraEdit.lnk 2016-02-03 07:46 - 2012-08-09 17:53 - 00001994 _____ C:\Users\Büro\Desktop\CorelDRW.lnk 2016-02-03 07:46 - 2012-08-09 15:52 - 00002044 _____ C:\Users\Büro\Desktop\JDownloader.lnk 2016-02-03 07:46 - 2012-08-09 10:36 - 00001062 _____ C:\Users\Büro\Desktop\PDF-Viewer.lnk 2016-02-03 07:46 - 2012-08-08 19:56 - 00000770 _____ C:\Users\Büro\Desktop\Total Commander.lnk 2016-02-03 07:46 - 2012-08-08 17:06 - 00003213 _____ C:\Users\Büro\Desktop\Microsoft Outlook 2010.lnk 2016-02-03 07:46 - 2012-08-08 17:06 - 00003029 _____ C:\Users\Büro\Desktop\Microsoft Excel 2010.lnk 2016-02-03 07:46 - 2012-08-08 17:06 - 00003011 _____ C:\Users\Büro\Desktop\Microsoft Word 2010.lnk 2016-02-03 07:46 - 2012-08-08 16:21 - 00001375 _____ C:\Users\Büro\Desktop\Internet Explorer.lnk 2016-02-03 07:45 - 2015-08-19 05:47 - 02085408 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-02-03 07:45 - 2015-07-10 17:34 - 00886474 _____ C:\WINDOWS\system32\perfh007.dat 2016-02-03 07:45 - 2015-07-10 17:34 - 00197134 _____ C:\WINDOWS\system32\perfc007.dat 2016-02-03 07:45 - 2015-07-10 12:02 - 00000000 ____D C:\WINDOWS\INF 2016-02-03 07:42 - 2015-07-10 13:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-02-03 07:42 - 2015-07-10 10:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI 2016-02-03 07:42 - 2012-08-09 17:43 - 00000000 ____D C:\ProgramData\VMware 2016-02-03 06:48 - 2015-07-10 13:20 - 05042296 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-02-03 06:48 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\TAPI 2016-02-03 06:12 - 2014-01-17 15:33 - 00000715 _____ C:\Users\Büro\printrunconf.ini~bak 2016-02-03 06:12 - 2014-01-17 15:31 - 00000715 _____ C:\Users\Büro\printrunconf.ini 2016-02-02 11:30 - 2014-01-08 15:41 - 00000000 ____D C:\Program Files (x86)\StarMoney 9.0 2016-01-31 12:02 - 2012-10-06 11:11 - 00000000 ____D C:\Program Files (x86)\TeamViewer 2016-01-28 05:55 - 2012-08-10 09:43 - 00000000 ____D C:\Offa 2016-01-28 05:34 - 2015-07-10 11:55 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-01-26 06:19 - 2012-08-08 19:58 - 00000000 ____D C:\Users\Büro\AppData\Local\ElevatedDiagnostics 2016-01-21 11:36 - 2015-08-19 06:45 - 00000000 ___DC C:\WINDOWS\Panther 2016-01-21 11:35 - 2015-10-30 20:28 - 00000000 ___HD C:\$WINDOWS.~BT 2016-01-21 06:16 - 2012-08-08 22:47 - 00000000 ____D C:\Users\Büro\AppData\Local\GHISLER 2016-01-14 06:23 - 2012-08-08 20:37 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2016-01-14 06:23 - 2012-08-08 20:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2016-01-13 14:20 - 2012-08-08 20:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2016-01-13 14:18 - 2013-08-15 16:37 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-01-13 14:14 - 2012-08-08 20:00 - 143671360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-01-13 14:14 - 2009-07-14 03:34 - 00000503 _____ C:\WINDOWS\win.ini 2016-01-13 06:01 - 2014-01-14 17:45 - 00000000 ____D C:\ProgramData\TEMP 2016-01-13 05:52 - 2012-08-28 13:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinOLS 2016-01-11 08:24 - 2012-11-23 18:42 - 00000000 ____D C:\Program Files\Bonjour 2016-01-10 11:56 - 2012-08-08 19:51 - 00000000 ____D C:\ProgramData\Skype ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2012-08-08 21:37 - 2012-08-08 21:37 - 0035216 __RSH () C:\Program Files (x86)\DLS8Uninstall.log 2015-08-01 12:01 - 2015-12-18 12:54 - 12964920 _____ (Webroot Software, Inc.) C:\Program Files (x86)\Common Files\wruninstall.exe 2013-03-26 13:42 - 2015-08-31 14:50 - 0000132 _____ () C:\Users\Büro\AppData\Roaming\Adobe BMP Format CS5 Prefs 2013-05-10 05:10 - 2013-05-10 05:10 - 0000132 _____ () C:\Users\Büro\AppData\Roaming\Adobe GIF Format CS5 Prefs 2013-03-26 13:52 - 2015-05-27 18:22 - 0000132 _____ () C:\Users\Büro\AppData\Roaming\Adobe PNG Format CS5 Prefs 2013-06-17 16:23 - 2013-06-17 16:23 - 0000010 _____ () C:\Users\Büro\AppData\Roaming\r5.dll 2012-08-12 14:50 - 2015-11-06 09:29 - 0001456 _____ () C:\Users\Büro\AppData\Local\Adobe Für Web speichern 12.0 Prefs 2013-03-12 12:24 - 2013-03-12 12:24 - 0000337 _____ () C:\Users\Büro\AppData\Local\Perfmon.PerfmonCfg Einige Dateien in TEMP: ==================== C:\Users\Büro\AppData\Local\Temp\1Password-1.0.9.332.exe C:\Users\Büro\AppData\Local\Temp\1Password-1.0.9.333.exe C:\Users\Büro\AppData\Local\Temp\1Password-1.0.9.335.exe C:\Users\Büro\AppData\Local\Temp\1Password-1.0.9.337.exe C:\Users\Büro\AppData\Local\Temp\1Password-1.0.9.338.exe C:\Users\Büro\AppData\Local\Temp\1Password-1.0.9.342.exe C:\Users\Büro\AppData\Local\Temp\c37jYYf2bg.exe C:\Users\Büro\AppData\Local\Temp\FNP_ACT_InstallerCA.dll C:\Users\Büro\AppData\Local\Temp\i4jdel0.exe C:\Users\Büro\AppData\Local\Temp\irsetup.exe C:\Users\Büro\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\Büro\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\Büro\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe C:\Users\Büro\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe C:\Users\Büro\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe C:\Users\Büro\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe C:\Users\Büro\AppData\Local\Temp\jre-8u31-windows-au.exe C:\Users\Büro\AppData\Local\Temp\sEL1N63bzH.exe C:\Users\Büro\AppData\Local\Temp\Setup.exe C:\Users\Büro\AppData\Local\Temp\SkypeSetup.exe C:\Users\Büro\AppData\Local\Temp\vlc-2.0.7-win32.exe C:\Users\Büro\AppData\Local\Temp\vlc-2.1.1-win32.exe C:\Users\Büro\AppData\Local\Temp\wusetup.exE C:\Users\Büro\AppData\Local\Temp\xRfkNiSukp.exe C:\Users\Büro\AppData\Local\Temp\zvcgkkdl.dll ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-01-29 06:11 ==================== Ende von FRST.txt ============================ |
|
06.02.2016, 15:45
| #4 |
| | smartnewtab und andere nervige Weiterleitungen im Chrome und hier der addition.txt Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:27-01-2016
durchgeführt von Büro (2016-02-05 16:25:11)
Gestartet von E:\Downloads
Windows 10 Pro (X64) (2015-08-19 04:59:54)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-3089249572-137260113-2558678779-500 - Administrator - Disabled)
Büro (S-1-5-21-3089249572-137260113-2558678779-1000 - Administrator - Enabled) => C:\Users\Büro
DefaultAccount (S-1-5-21-3089249572-137260113-2558678779-503 - Limited - Disabled)
Gast (S-1-5-21-3089249572-137260113-2558678779-501 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Webroot SecureAnywhere (Disabled - Up to date) {66A6FE14-08CB-F415-3742-517201416109}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Webroot SecureAnywhere (Disabled - Up to date) {DDC71FF0-2EF1-FB9B-0DF2-6A007AC62BB4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
@BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.23 - GIGABYTE)
1Password 1.0.9.342 (HKLM-x32\...\1Password_is1) (Version: 1.0 - AgileBits)
Adobe Acrobat X Pro - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000005}) (Version: 10.1.4 - Adobe Systems)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.9.149 - Adobe Systems, Inc.)
Aficio BP20 Series PCL 6 (HKLM-x32\...\Aficio BP20 Series PCL 6) (Version: - )
Apple Application Support (32-Bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.4.4 - Atheros Communications Inc.)
Atmel Software Framework (HKLM-x32\...\{D9DD3CD8-A771-454C-A3AE-ABB29F4E59A2}) (Version: 3.5.205 - Atmel)
Atmel Studio 6.0 (HKLM-x32\...\{51CC3953-2D06-47FA-832A-B7FD24D01322}) (Version: 6.0.1996 - Atmel)
Atmel USB (HKLM-x32\...\{E8F8861D-98E0-43FF-9E48-AC236CC3BE4E}) (Version: 11.0 - Atmel)
AutoGreen B12.0206.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE)
AutoGreen B12.0206.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
AVM FRITZ!fax für FRITZ!Box (HKLM-x32\...\FRITZ! 2.0) (Version: - AVM Berlin)
bcTester 4.9 (de) (HKLM-x32\...\{B18D4784-45FF-4787-A81E-012873CA6515}) (Version: 4.9.2 - QS QualitySoft GmbH)
BdmToGo 1.81 (HKLM\...\{32272EF0-B263-4AB6-41BD-405820705243}_is1) (Version: 1.817 - EVC electronic)
Biet-O-Matic v2.14.10 (HKLM-x32\...\Biet-O-Matic v2.14.10) (Version: 2.14.10 - BOM Development Team)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Brother MFL-Pro Suite MFC-9460CDN (HKLM-x32\...\{979742CC-2CBB-49D8-9BEE-C2F7875F5393}) (Version: 1.0.30.0 - Brother Industries, Ltd.)
Cut2D 1.5 (HKLM-x32\...\Cut2D) (Version: 1.5 - Vectric)
cyberJack Base Components (HKLM-x32\...\{FC338210-F594-11D3-BA24-00001C3AB4DF}) (Version: 6.10.0 - REINER SCT)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Deep Exploration 6 CE (HKLM-x32\...\{E903CEC4-6822-47A4-9F6C-4A93C02119A3}) (Version: 6.3 - Right Hemisphere)
Deutsche Post E-Porto (HKLM-x32\...\{A51F5414-4A2B-45A0-8EF2-B4D29CFBCAE7}) (Version: 2.3.0 - Deutsche Post AG)
devolo Cockpit (HKLM-x32\...\dlancockpit) (Version: 4.3.1.0 - devolo AG)
DraftSight x64 (HKLM\...\{8EB86B18-38DB-4A2D-8559-35B6D1EC3A0A}) (Version: 11.0.1258 - Dassault Systemes)
DVDFab 9.1.5.6 (27/06/2014) (HKLM-x32\...\DVDFab 9_is1) (Version: - Fengtao Software Inc.)
DWG TrueView 2013 (HKLM\...\DWG TrueView 2013) (Version: 19.0.55.0 - Autodesk)
DWG TrueView 2013 (Version: 19.0.55.0 - Autodesk) Hidden
DYMO Label v.8 (HKLM-x32\...\DYMO Label v.8) (Version: 8.3.0.1242 - Sanford, L.P.)
DYMO LabelWriter Drivers (HKLM\...\{CE16D92B-50F3-4FC5-B29C-13FAFEE1A6C6}) (Version: 8.3.0.443 - Sanford L.P.)
EAGLE 7.2.0 (HKLM-x32\...\EAGLE 7.2.0) (Version: 7.2.0 - CadSoft Computer GmbH)
Easy Tune 6 B12.0309.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE)
Easy Tune 6 B12.0309.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
Eco Materials Adviser for Autodesk Inventor 2013 (HKLM\...\{792A9A32-718A-40D1-9867-A903F76AE2F8}) (Version: 3.9.12.0 - Granta Design Limited)
ELECTRA 2.9.5 (HKLM-x32\...\ELECTRA_is1) (Version: - KONEKT)
Elnec Pg4uw ver. 3.20 (HKLM\...\Elnec Pg4uw_is1) (Version: - )
FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production)
FILOU-NC12 (HKLM-x32\...\{8FFC21E2-74EE-441C-A172-2DA244863F0C}_is1) (Version: - FILOU Software GmbH)
FormatFactory 3.0.1 (HKLM-x32\...\FormatFactory) (Version: 3.0.1 - Free Time)
Free M4a to MP3 Converter 7.1 (HKLM-x32\...\Free M4a to MP3 Converter_is1) (Version: - ManiacTools.com)
Free Video Flip and Rotate version 2.1.5.1212 (HKLM-x32\...\Free Video Flip and Rotate_is1) (Version: 2.1.5.1212 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.103 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
GrauTec version 14.10.2012 (HKLM\...\{1D3AE49C-0835-50EB-C6D0-5491B6A5D714}_is1) (Version: 14.10.2012 - GrauTec)
High-Definition Video Playback (x32 Version: 11.1.11100.4.196 - Nero AG) Hidden
Hotfix für Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (HKLM-x32\...\{8E87B944-4815-3C5E-947F-5035C9F64362}.KB947789) (Version: 1 - Microsoft Corporation)
iExplorer 3.2.1.5 (HKLM-x32\...\{7FD8B0C1-CDDA-4B4D-A577-B2E3570EA3A3}_is1) (Version: - Macroplant LLC)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.3.214 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation)
IsoBuster 3.2 (HKLM-x32\...\IsoBuster_is1) (Version: 3.2 - Smart Projects)
iTunes (HKLM\...\{BFEAB774-C7DC-4032-B05A-DA5F7CB7B365}) (Version: 12.2.2.25 - Apple Inc.)
Jabra PC Suite 2.14.5888 (HKLM-x32\...\{6D22DD53-EC7D-45E7-A996-A18CB7C8DFE9}) (Version: 2.14.5888.0 - GN Netcom A/S)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
JDownloader 0.9 (HKLM-x32\...\jdownloader09) (Version: 0.9 - AppWork GmbH)
JLink OB CDC Driver Package (HKLM\...\{85153CE3-6356-407F-A672-C1FA085FB031}) (Version: 1.2.2 - SEGGER)
Logitech Gaming Software 8.30 (HKLM\...\Logitech Gaming Software) (Version: 8.30.86 - Logitech Inc.)
LogWorks3 (HKLM\...\LogWorks3) (Version: 3.08 - Innovate! Technologies)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
marvell 91xx driver (HKLM-x32\...\MagniDriver) (Version: 1.2.0.1010 - Marvell)
MC34063 Universal Calculator (HKLM-x32\...\{FFC12E35-0FF8-4E41-B703-0DB1487895DF}) (Version: 1.0.1 - ---)
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{77F1F8AD-51B8-4490-AEEC-BF480073E0FC}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{877B76B2-F83F-4F5A-B28D-3F398641ADB6}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Shell (Isolated) - ENU (HKLM-x32\...\{D64B6984-242F-32BC-B008-752806E5FC44}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU (HKLM-x32\...\{8E87B944-4815-3C5E-947F-5035C9F64362}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU (HKLM-x32\...\{76DAEC83-AF7B-333C-8A53-83D7C7D39199}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
MPLAB X IDE v3.05 (HKLM-x32\...\MPLAB X IDE v3.05 v3.05) (Version: v3.05 - Microchip)
MPLAB XC8 C Compiler (HKLM-x32\...\MPLAB XC8 C Compiler v1.35) (Version: v1.35 - Microchip)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MultiProg version 1.37.1.2 (HKLM-x32\...\{90F9C7B5-E80C-4D74-8E40-1AF3034B3951}_is1) (Version: 1.37.1.2 - Smok)
Nero 11 (HKLM-x32\...\{FC18AB8F-9BA3-423B-91F2-622990F57978}) (Version: 11.2.01000 - Nero AG)
Nero Backup Drivers (HKLM\...\{D600D357-5CB9-4DE9-8FD4-14E208BD1970}) (Version: 1.0.11100.8.0 - Nero AG)
Nettalk 6.7 (HKLM-x32\...\Nettalk_is1) (Version: - Nicolas Kruse)
Ninja 6.0.1 (HKLM-x32\...\{{BBA3D4C8-459A-4A26-8EB9-564846AB70AB}_is1) (Version: 4 - Global IP Telecommunications Ltd.)
ON_OFF Charge B11.1102.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
OptiCut 5.16b (HKLM-x32\...\OptiCoupe 5) (Version: 5.16.2.1 - Boole & Partners)
Packet Sender for Windows (HKLM-x32\...\{0CB04980-86BE-4CB4-8D74-F2EC5211B18C}}_is1) (Version: - Dan Nagle)
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.214.2 - Tracker Software Products Ltd)
PE-DESIGN NEXT (HKLM-x32\...\{041EDAC5-853E-4A10-A0C8-ED0CF7769306}) (Version: 9.01.0000 - Brother Industries, Ltd.)
PIC-C Compiler (HKLM-x32\...\PIC-C Compiler) (Version: 5 - Custom Computer Services, Inc.)
Pimp-My-Nav (HKLM-x32\...\{0CA82D20-95BC-4554-A61C-F4EA2FAA25D1}) (Version: 1.0.2.4 - hxxp://www.pimp-my-nav.com)
Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Renee Undeleter 2013.5.27.0 (HKLM-x32\...\{BECFEA3A-6E81-436B-9D2B-6B01185004A5}}_is1) (Version: 2013.5.27.0 - Rene.e Laboratory)
Repetier-Host Version 1.0.6 (HKLM\...\{1143F758-929B-4EEB-8784-46CCB622F037}_is1) (Version: 1.0.6 - repetier)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Schnell-Deinstallations-Tool für Autodesk Inventor 2013 (HKLM\...\{D25FF5C1-1764-469A-9794-69309387C193}) (Version: 17.0.13800.0000 - Autodesk)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Skype™ 7.17 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.17.105 - Skype Technologies S.A.)
StarMoney (x32 Version: 3.0.0.124 - StarFinanz) Hidden
StarMoney (x32 Version: 4.0.0.203 - StarFinanz) Hidden
StarMoney 9.0 (HKLM-x32\...\{48148E76-6BCA-4BDC-B889-860B385DCCC7}) (Version: 9.0 - Star Finanz GmbH)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Target 3001! V15 professional (HKLM-x32\...\Target 3001! V15 professional) (Version: - Ing. Buero FRIEDRICH)
Target 3001! V17 discover (HKLM-x32\...\Target 3001! V17 discover) (Version: - Ing. Buero FRIEDRICH)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.53254 - TeamViewer)
Total Commander (Remove or Repair) (HKLM-x32\...\Totalcmd) (Version: 8.01 - Ghisler Software GmbH)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.01 - Ghisler Software GmbH)
TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
UltraEdit (HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\InstallShield_{635A6AF2-63AF-4C1C-AF57-BDC8AF6D397D}) (Version: 18.20.1021 - IDM Computer Solutions, Inc.)
UltraEdit (x32 Version: 18.20.1021 - IDM Computer Solutions, Inc.) Hidden
Update 6 for Inventor 2013 SP2 (See readme for detail) (INV17260) (HKLM\...\Autodesk Inventor Professional 2013_17260) (Version: 1 - Autodesk)
USB to UART Bridge (Driver Removal) (HKLM-x32\...\SLABCOMM&10C4&EA60) (Version: - Team Orion)
VBA (2627.01) (x32 Version: 6.03.00.9402 - Microsoft Corporation) Hidden
VBA (2701.01) (x32 Version: 6.03.00.9402 - Microsoft Corporation) Hidden
VCDS Release 11.11.6 (HKLM-x32\...\VCDS Release 11.11) (Version: 11.11.6 - Ross-Tech)
VCDS Release 12.12.3 (HKLM-x32\...\VCDS Release 12.12) (Version: 12.12.3 - Ross-Tech)
VCDS Release 15.7.3 (HKLM-x32\...\VCDS Release) (Version: 15.7.3 - Ross-Tech)
Vectric Shell Extensions 1.2 (HKLM-x32\...\VectricThumbnailShellExt) (Version: - Vectric)
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
ViewMate Deluxe 11.4 (HKLM-x32\...\{42242DD8-CCEB-4D4A-AEEF-9B6D48B4F41F}) (Version: 11.4.15 - PentaLogix)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
Visual Studio-Tools für Office System 3.0 Runtime Language Pack - DEU (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime Language Pack - DEU) (Version: - Microsoft Corporation)
VLC media player 2.0.2 (HKLM\...\VLC media player) (Version: 2.0.2 - VideoLAN)
VMware Player (HKLM\...\{DCA4824C-42E8-4911-9C10-5BB43A315625}) (Version: 12.0.0 - VMware, Inc.)
Webroot SecureAnywhere (HKLM-x32\...\WRUNINST) (Version: 9.0.7.46 - Webroot)
Welcome App (Start-up experience) (x32 Version: 11.0.23500.0.0 - Nero AG) Hidden
Windows Driver Package - Arduino LLC (www.arduino.cc) Arduino USB Driver (01/04/2013 1.0.0.0) (HKLM\...\1E3EA5624DD04BEFECF3FFF6D3A21CCE9CD70A91) (Version: 01/04/2013 1.0.0.0 - Arduino LLC (www.arduino.cc))
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows-Treiberpaket - Ross-Tech HIDClass (02/13/2014 6.3.0.2) (HKLM\...\5E356C0921BECEC7743BAC21F6B7A5775044AFC0) (Version: 02/13/2014 6.3.0.2 - Ross-Tech)
Windows-Treiberpaket - Ross-Tech USB Driver Package (05/12/2014 2.10.00) (HKLM\...\88B02C4BD09AA7910C55C4E74BE8F036244B5CF9) (Version: 05/12/2014 2.10.00 - Ross-Tech)
Windows-Treiberpaket - Ross-Tech USB Driver Package (06/16/2010 2.06.02) (HKLM\...\F2D626F9A8E5C6126BED6EBD3E3504D0B2AB8443) (Version: 06/16/2010 2.06.02 - Ross-Tech)
Windows-Treiberpaket - Segger (jlink) USB (04/11/2012 2.6.8.2) (HKLM\...\419546AE8E4244C647A348987F769803F43B9C4F) (Version: 04/11/2012 2.6.8.2 - Segger)
Windows-Treiberpaket - SEGGER (usbser) Ports (01/25/2012 6.0.2600.4) (HKLM\...\BD6BF8BBF7BE0D0091163F649A1A423B7EB9D4F1) (Version: 01/25/2012 6.0.2600.4 - SEGGER)
Windows-Treiberpaket - Silicon Laboratories (silabenm) Ports (10/18/2013 6.6.1.0) (HKLM\...\F92C2D6CB4EA0EE558BDF5F8BDD69083DFC62179) (Version: 10/18/2013 6.6.1.0 - Silicon Laboratories)
WinOLS 3.48.00 (HKLM\...\{32EF2270-B623-4B6A-B41D-400524582073}_is1) (Version: 3.48.00 - EVC electronic)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Wireshark 1.12.1 (64-bit) (HKLM-x32\...\Wireshark) (Version: 1.12.1 - The Wireshark developer community, hxxp://www.wireshark.org)
Xilinx ISE 11 (HKLM-x32\...\Xilinx ISE 11.1) (Version: - )
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{00F064D8-FEC3-48ac-B07D-39C314D1727B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\TestServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{1029ABC3-2457-11D5-8E9D-0010B541CD80}\localserver32 -> C:\Program Files\Autodesk\Inventor 2013\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{12545889-6D32-4424-9967-1E1D7BD1F809}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{13009989-EFB5-48C9-8BD2-943E0392BD71}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\RxAppCtrl.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{18A21864-E37B-42b9-9612-2C1E8C450A29}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{1D625598-C876-4C51-8EF5-F9D8F96F62AA}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{1D6DFD6A-9E16-435A-9327-6FFEC6BA372F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{1E8A29BA-827D-4031-A4A3-AE7999B402F6}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{1EA072EE-57FD-495E-889C-8243C3BDBDBC}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{1FD7F53F-7ED5-439C-9A77-A3821CD09E98}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{20E47D5B-529A-45BD-8E77-BF1A3064A008}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{21DB88B0-BFBF-11D4-8DE6-0010B541CAA8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\iDrop.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{244298EC-E661-11d4-BC13-0010B5891E89}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\TI.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{2709544A-5B24-4F9F-A5DA-CEC7297D3A4E}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{2BCA857B-A18B-4AFA-B183-CC0E49C12058}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{2C74F89E-7421-46B4-BA54-F86F1BD9F237}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{2C7D1157-7D50-4A88-9777-5EBBA3189AB8}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{2F8377FC-50C1-44EF-AB7A-8FF1BB8EA277}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{33DDB83C-9959-4AC1-990C-00D28FFBB37F}\InprocServer32 -> C:\Users\Büro\AppData\Local\Microsoft\Internet Explorer\Downloaded Program Files\LogitechDeviceDetection64.ocx (Logitech, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{3497C2EC-5684-4B21-AF74-F6760E0221DC}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{3897B445-D5B8-410d-899A-9789B8ADB643}\localserver32 -> C:\Program Files\Autodesk\Inventor 2013\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{38C8B14E-7879-4DA9-8C3F-8CAAC359293A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{3C3F63EA-C7BA-11d4-8E60-0010B541CD80}\localserver32 -> C:\Program Files\Autodesk\Inventor 2013\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2013\en-US\dwgviewrficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{3FC94EB5-AEBD-4f3f-A2A4-B6CE57113C01}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\RxAppDocView.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{40770568-0D5E-49D4-BE47-BC47A4F0B0A4}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{44A52280-AE56-490D-890C-89FB7279ED6B}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{45122C53-8483-4b62-B15A-EAA9FE5FC3D5}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{4C80573A-9150-11d2-B772-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\RxAppDocView.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{4D29B490-49B2-11D0-93C3-7E0706000000}\localserver32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{59A224A2-BEF8-4C89-96E0-83A5411ABB6C}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{622F6193-E4DD-46E6-BC66-2ED88E9FD28D}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{62FBB030-24C7-11D3-B78D-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{644190AE-BD8F-493F-B63D-C79404AC5E07}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{6451051B-AD22-4C6A-ACCE-013A0E1DDBC3}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{64B99FDB-1D85-447F-98C7-569DBDA723DB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{6A221957-2D85-42A7-8E19-BE33950D1DEB}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2013\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{6BCE6F6E-C050-4F39-BD98-E2743949F724}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{6F56D7C9-18DD-4C15-9FA8-C54E3610EC40}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{6FDE7A70-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{6FDE7A71-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{6FDE7A72-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{6FDE7A73-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{6FDE7A74-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{6FDE7A77-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\DtCp.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{70DBCAE8-8C2B-450C-9E1D-43E4686C6512}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{713C0E8A-5AE8-4695-B442-5ED6C4FE5C42}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{72EC5CC5-88F3-45B1-A865-0A327DF58CC8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{72EFC580-D085-4B81-8C55-26A79E445338}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{750AEC19-2E4C-4ED9-9B9F-F9CAFCD060F3}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{76283A80-50DD-11D3-A7E3-00C04F79D7BC}\localserver32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{7BA16B3F-1AB3-4BD7-B959-52C4B8504EE9}\InprocServer32 -> AcInetUI.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{81D07C3D-0350-11D3-B7C2-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\RxAppCtrl.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{834CE679-2E47-49DE-9E41-FEC87E9192EB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{8421A29C-54B8-11D1-9837-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\SolidObject.Dll ()
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{846217D0-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\UCxTextBtn.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{846217D1-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\UCxTextBtn.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{849AFB5B-D6C9-4924-A712-F7118FF9611F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{85452F88-5071-492E-B850-2E3C586DCBD8}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{87F5CF8F-A06D-498F-A05F-E520E6B570DB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{89F0FC31-3B1D-494B-A75B-6BD4FA527B8A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{8AA16DFC-DFC6-4B51-8FA2-A5D812BE33BF}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{8B0E6BD9-610C-11D1-9842-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\SolidObject.Dll ()
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\TestServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{8ED07FEF-E1B0-4CC3-B2BA-D354828AB952}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{97E17F04-17DF-11d5-BC38-0010B5891E89}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\BodyReceiver.dll ()
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{988F4102-E6E3-4282-ACAC-55270827F2A8}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{9906CDFC-DB2C-4126-9422-13139B148495}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{9A21C6C5-27FC-4442-8590-575E7AFD73BB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{9ECF83FB-23C5-43B6-83DE-93CFBDD74D4A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{A58F47CC-FF65-4152-B0B1-666C643A5BFC}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{A6A3D586-44CF-44C2-A92C-620BB713B4F2}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{ABBE3F83-D585-4A50-9B69-198B0F566F2E}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{AC5CECFA-F03A-41D2-A89C-704C44935941}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{B1560245-190E-4BBD-81DF-9B642D0E5325}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{B2A579E0-A797-40B1-8AEE-A8F6404719F8}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{B47196BC-D4AB-41BB-A771-543D67CFC9F5}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{B53CEF4B-1A13-49DE-BBC5-A7100FB2F38C}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{B5EE2B68-9A23-4BCD-BB77-FEA6DFB24DD6}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{b5eedee0-c06e-11cf-8c56-444553540000}\InprocServer32 -> C:\Program Files (x86)\IDM Computer Solutions\UltraEdit\ue64ctmn.dll ()
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{B6B5DC40-96E3-11d2-B774-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{B80687F9-FA4C-4735-9DC4-E5715F2BC698}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{B8E7214B-25CA-4116-84CB-E86FB9625B36}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{BAE5802A-CF21-4F9C-AE04-D98F4036AC31}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{BBF6A206-CB04-479D-96AE-349E1E83319A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{BBF9FDF1-52DC-11D0-8C04-0800090BE8EC}\localserver32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{BC71DEA1-D6FB-48B8-AB06-D151C81BBCDD}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{BD0DEB94-63DB-4392-9420-6EEE05094B1F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2013\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{BE54741D-E02B-4572-93D6-105AF4EDE777}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{BF224DC3-B602-4EEE-BFE9-9E4E0AED6837}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{BF4CC07E-E9BB-40D6-873F-855B211033B9}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{C061C82C-D041-4214-BB07-B608107CEFCB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{C2D4ACCC-A3D1-4A0A-AD59-0DD8BA3D5EE1}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{C343ED84-A129-11d3-B799-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\RxApprenticeServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{C92F8F8C-8B2C-11d4-B872-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{CFEE2BAF-14F9-4D23-853D-B6E2BCC14263}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{D7A1987D-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\ColorButton.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{D7A1987E-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\ColorButton.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{DA1F437C-9BD9-11d4-B87C-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{DB5D476B-3FF4-4E9D-A606-1E2B473BE571}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\AcInetUI.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{DCA7356C-FF94-4b20-AE04-7AA6A8E14117}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{DDA9A20F-5B56-49F5-9465-CE82FC199352}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{DE6B563C-B074-4BF1-A8A0-B3FED8703E99}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{E1C85E9F-60B2-4007-80C3-2C5E09474C3B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\RxInventorUtilities.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2013\de-DE\acadficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\TestServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{E60F81E1-49B3-11D0-93C3-7E0706000000}\localserver32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{F13E75B9-6AF6-49CB-80B3-6D2FF6E09932}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{F14E5118-342E-45E8-B99F-B5786E4F4DCA}\InprocServer32 -> C:\Users\Büro\AppData\Local\Microsoft\Internet Explorer\Downloaded Program Files\LogitechDeviceDetection64.ocx (Logitech, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{F61064CC-DBFB-47ee-9BC8-CA5A1CBDF0DA}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\InvResc.dll (Autodesk)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{FA62F626-EBD5-4dc5-B970-D9E81E0E20E0}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{FB469644-3F14-4403-ACCA-6B13486FF7BD}\localserver32 -> C:\Program Files\Autodesk\Inventor 2013\Bin\InvTXTStack.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1}\InprocServer32 -> axdb.dll => Keine Datei
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {03DD5FF3-B8D3-47AF-A439-CC57F35C99B3} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {049D91C7-AAF7-4F9D-AA3F-2FE0D0BC993F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-20] (Google Inc.)
Task: {063C81C4-45B0-4D1E-B593-2D2C192565ED} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {2133FE1B-8AD1-42EF-A218-C7EAC8FC8E67} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {23A07DDB-0D69-4055-9D02-4E1BADE2AC50} - System32\Tasks\AdobeAAMUpdater-1.0-BUERO-PC-Büro => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-09-16] (Adobe Systems Incorporated)
Task: {29DDAD53-A692-46D1-946C-A9758C67D60D} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {2E8142E8-2377-47ED-8425-F21CB68AC86B} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {361E3EB0-3FF8-4150-9BBF-7D01F48303C5} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {43800D2C-A3B7-48BA-8B3E-7B78496B6102} - System32\Tasks\{A0B6AB9C-B638-4D31-BA5D-555730ABCE81} => pcalua.exe -a E:\8000er\FRITZ!fax_3.07.04.exe -d C:\Users\Büro\Desktop
Task: {44D8986D-C5A2-4396-BF22-43C5DF1DDED1} - System32\Tasks\{85ACD8CE-ACB6-42D9-9527-93EDBE21ABD9} => pcalua.exe -a E:\eagle-win-7.2.0.exe -d E:\
Task: {45774965-2103-48BD-9F7A-E187774982E3} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {4746D36A-CBC6-4F1E-93AE-5ABA931B820F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {4803FF7F-91DF-4184-836B-982E42A1EBC1} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {48CBCDE2-5AE5-43F8-9EF0-6D18525C4B82} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {4A2C2E50-D2C1-4C77-BA64-7303C1D66576} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {4DA79C2B-C5F2-4283-B459-54B231642A77} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {52E7A03F-829F-4E1A-BA5D-3A90B10389C6} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {5F91260E-99C4-48F3-87D3-007E82381DB1} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {60725D03-6821-46B4-8D84-22B13B6385B6} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe
Task: {65373BF8-BB81-43E9-BFB1-FF8D7EE8B428} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {6E129F1E-843B-4D2C-B53C-15769D65D47D} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {77472836-953E-44C2-990D-CDFCFB451503} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {7A336CD7-6A42-4AF1-9AAC-29E7BF5BD167} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-01-13] (Microsoft Corporation)
Task: {7BE61C0D-BF87-4004-9557-2E4A39D2F8D6} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {86FB8CD5-E50E-4C55-9551-73204DB9F81B} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {95C64EFB-9E0F-4951-8DB5-A8E61C409317} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {9AF3E889-F68C-4AE0-9730-AA14A79C5CD0} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {A0FF1C4C-B44D-432C-AFCB-8A38CAAB8ADC} - \Microsoft\Windows\File Classification Infrastructure\Property Definition Sync -> Keine Datei <==== ACHTUNG
Task: {A20B2CAE-96B0-4388-B8C9-A8AC43E1FEAA} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {A30F41AA-BC63-4FE7-8D7B-637E954C89A2} - \AutoKMS -> Keine Datei <==== ACHTUNG
Task: {A4DD4FB9-FE45-467C-B034-17187C39E411} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {A5FFDE7D-2495-4F05-91C5-6B9C1F28AA3F} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {A7974412-8058-43BB-9E49-D286FA5695D7} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {A86CBF6B-4246-44B7-A2B8-91872DE7F7CF} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {AF92098A-EFF3-4ED4-978A-7D20E023C310} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {B66B03DA-53B8-4648-B691-EAD45B65C0DD} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {C15279FB-BE1D-434D-BCF3-0E6E2F90C1EB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-20] (Google Inc.)
Task: {C357E8DC-6028-43D3-95F0-740146DB4CD2} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {CA044463-1333-4C39-8A80-FC515298EC45} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {D34906B1-24A7-48FB-842E-A23BC34B3A2D} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {DEDC1925-05C5-44BB-BD79-6D934426DB05} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {E4B1F69C-A8FC-4012-A90C-594E604BA81B} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {F56E9DA0-01F1-42ED-BF35-3B6B6680F37A} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\Users\Public\Desktop\Xilinx ISE Design Suite 12.1.lnk -> C:\Xilinx\12.1\ISE_DS\settings64.bat ()
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-08-19 06:21 - 2015-07-15 03:04 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
2012-08-08 21:19 - 2007-05-08 17:55 - 00022016 _____ () C:\WINDOWS\System32\bp20l6.dll
2013-01-03 09:03 - 2006-02-23 11:35 - 00020480 _____ () C:\WINDOWS\System32\FritzColorPort64.dll
2013-01-03 09:03 - 2006-02-22 10:39 - 00020480 _____ () C:\WINDOWS\System32\FritzPort64.dll
2015-03-20 17:12 - 2015-03-20 17:12 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-05-15 15:26 - 2015-05-15 15:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-08-19 06:21 - 2015-08-11 10:14 - 00404480 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll
2013-08-27 18:32 - 2013-08-27 18:32 - 03466240 _____ () C:\Program Files\Dassault Systemes\DraftSight\bin\QtCore4.dll
2013-08-27 18:30 - 2013-08-27 18:30 - 00548864 _____ () C:\Program Files\Dassault Systemes\DraftSight\bin\QtXml4.dll
2013-08-27 18:30 - 2013-08-27 18:30 - 01322496 _____ () C:\Program Files\Dassault Systemes\DraftSight\bin\QtNetwork4.dll
2012-10-26 16:08 - 2010-03-16 00:18 - 00143360 _____ () C:\WINDOWS\system32\BrSNMP64.dll
2015-10-01 05:13 - 2015-09-17 07:48 - 02494712 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-10-01 05:13 - 2015-09-17 07:48 - 02494712 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-01 05:13 - 2015-09-17 06:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-12-09 07:25 - 2015-11-25 05:20 - 06569472 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-12-09 07:24 - 2015-11-25 05:17 - 00471040 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-12-09 07:24 - 2015-11-25 05:17 - 01808384 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-10-01 05:13 - 2015-09-17 06:43 - 02274816 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2014-07-31 04:19 - 2011-01-13 10:44 - 00232800 _____ () C:\Program Files (x86)\StarMoney 9.0\ouservice\PATCHW32.dll
2015-08-14 13:03 - 2015-08-14 13:03 - 01301696 _____ () C:\Program Files (x86)\VMware\VMware Player\libxml2.dll
2012-10-26 16:08 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2015-11-05 14:30 - 2015-11-05 14:30 - 00172032 _____ () C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\IsdiInterop\4e35df91c2e6359b56939d1132a01c13\IsdiInterop.ni.dll
2012-08-08 16:28 - 2011-11-29 19:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-08-08 16:26 - 2011-12-16 09:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-12-05 10:21 - 2015-12-05 10:21 - 00933056 ____R () C:\Program Files (x86)\Skype\Phone\ssScreenVVS2.dll
2016-02-05 06:50 - 2016-02-03 08:27 - 01632584 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\libglesv2.dll
2016-02-05 06:50 - 2016-02-03 08:27 - 00087880 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\libegl.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData\TEMP:26DF9837
AlternateDataStreams: C:\ProgramData\TEMP:E8956AB5
AlternateDataStreams: C:\ProgramData\TEMP:EFB09287
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
HKU\.DEFAULT\Software\Classes\.exe: exefile => "%1" %* <===== ACHTUNG
HKU\.DEFAULT\Software\Classes\exefile: "%1" %* <===== ACHTUNG
HKU\S-1-5-19\Software\Classes\.exe: exefile => "%1" %* <===== ACHTUNG
HKU\S-1-5-19\Software\Classes\exefile: "%1" %* <===== ACHTUNG
HKU\S-1-5-20\Software\Classes\.exe: exefile => "%1" %* <===== ACHTUNG
HKU\S-1-5-20\Software\Classes\exefile: "%1" %* <===== ACHTUNG
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\Software\Classes\.exe: exefile => "%1" %* <===== ACHTUNG
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\Software\Classes\exefile: "%1" %* <===== ACHTUNG
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\juprowa.net -> hxxps://services.juprowa.net
IE trusted site: HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\meineschufa.de -> hxxps://meineschufa.de
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2016-02-01 06:49 - 00001119 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 activate.adobe.com
127.0.0.1 licensing.ultraedit.com
127.0.0.1 rad.msn.com
127.0.0.1 live.rads.msn.com
127.0.0.1 ads1.msn.com
127.0.0.1 g.msn.com
127.0.0.1 a.ads2.msads.net
127.0.0.1 b.ads2.msads.net
127.0.0.1 ac3.msn.com
127.0.0.1 apps.skype.com
127.0.0.1 static.2mdn.net
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Büro\AppData\Local\Microsoft\Windows\Themes\Infiniti\DesktopBackground\w02.jpg
DNS Servers: 192.168.23.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: ) (ConsentPromptBehaviorUser: ) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\Services: XblAuthManager => 3
MSCONFIG\Services: XblGameSave => 3
MSCONFIG\Services: XboxNetApiSvc => 3
MSCONFIG\startupfolder: C:^Users^Büro^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^RT-Updater.lnk => C:\Windows\pss\RT-Updater.lnk.Startup
MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
MSCONFIG\startupreg: Adobe Acrobat Speed Launcher => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: DLSService => "C:\Program Files (x86)\DYMO\DYMO Label Software\DLSService.exe"
MSCONFIG\startupreg: DymoQuickPrint => "C:\Program Files (x86)\DYMO\DYMO Label Software\DymoQuickPrint.exe" /startup
MSCONFIG\startupreg: HDAudDeck => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: NBAgent => "C:\Program Files (x86)\Nero\Nero 11\Nero BackItUp\NBAgent.exe" /WinStart
MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
HKLM\...\StartupApproved\Run32: => "Agile1pAgent"
HKLM\...\StartupApproved\Run32: => "USB3MON"
HKLM\...\StartupApproved\Run32: => "Adobe ARM"
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\StartupApproved\Run: => "DymoQuickPrint"
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\StartupApproved\Run: => "NINJA.EXE"
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\StartupApproved\Run: => "CrashService"
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\StartupApproved\Run: => "SpybotPostWindows10UpgradeReInstall"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [UDP Query User{21E98E8A-6EFF-4186-B4FA-F281F01DA301}C:\program files (x86)\tcpudpdbg\tcpudpdbg.exe] => (Block) C:\program files (x86)\tcpudpdbg\tcpudpdbg.exe
FirewallRules: [TCP Query User{246330E9-BEE2-483D-8AA5-2732F8B1D750}C:\program files (x86)\tcpudpdbg\tcpudpdbg.exe] => (Block) C:\program files (x86)\tcpudpdbg\tcpudpdbg.exe
FirewallRules: [{0679252E-2029-494E-A29C-8AF05F68B9C8}] => (Block) C:\program files (x86)\packetsender\packetsender.exe
FirewallRules: [{4578ADC6-2148-4B61-A9A9-AE0CB86F4380}] => (Block) C:\program files (x86)\packetsender\packetsender.exe
FirewallRules: [UDP Query User{6B68782D-3C48-4B57-95F2-10B04E0542CF}C:\program files (x86)\packetsender\packetsender.exe] => (Allow) C:\program files (x86)\packetsender\packetsender.exe
FirewallRules: [TCP Query User{CB6D25CF-454A-4021-82CB-0616962C87A1}C:\program files (x86)\packetsender\packetsender.exe] => (Allow) C:\program files (x86)\packetsender\packetsender.exe
FirewallRules: [{A0B4F3E0-F585-446D-B18F-447C70940D82}] => (Allow) C:\Program Files (x86)\StarMoney 9.0\app\StarMoney.exe
FirewallRules: [{83FEB2D8-F352-430A-BD7A-D4CE35E5C057}] => (Allow) C:\Program Files (x86)\StarMoney 9.0\app\StarMoney.exe
FirewallRules: [{730B5EFE-3FF3-4FB1-A633-16307DCBD537}] => (Allow) C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{73A4F52A-FD3B-495A-BC89-4C60E567D71F}] => (Allow) C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{609D624C-77EB-4700-9EC8-EB9431BE902C}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\CTI\xcti.exe
FirewallRules: [{B6D59BDA-A61E-4C59-A24D-F2DDD71640F9}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\CTI\xcti.exe
FirewallRules: [{02BFDB24-6ACB-41CD-99BD-75A325272CD8}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\USB\Jabra32.exe
FirewallRules: [{95CCAA31-B582-4DEF-AF58-CD5231C57A87}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\USB\Jabra32.exe
FirewallRules: [{60A43653-E1BF-4826-8093-B4C6559DB7CE}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\FV32.exe
FirewallRules: [{15BA25CF-503C-4C16-9E29-C9178308750D}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\FV32.exe
FirewallRules: [{CCE0C31E-DCCA-4D98-AA15-1819BCB6A98D}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\xproxy.exe
FirewallRules: [{2A837DBA-A1D1-4608-AC76-B00D569B4DE2}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\xproxy.exe
FirewallRules: [{C955D636-1B20-4F85-A33D-08D75A74B860}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\Ninja.exe
FirewallRules: [{C5E2F529-BFBA-4031-8669-7FC0713D029C}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\Ninja.exe
FirewallRules: [{A76A8D8B-811B-4AFC-B4D4-B616A85347EE}] => (Block) C:\program files\logworks3\logworks3.exe
FirewallRules: [{D768865D-2B49-4A46-9DF1-72D66F91AFBF}] => (Block) C:\program files\logworks3\logworks3.exe
FirewallRules: [UDP Query User{8B797520-2991-44B5-88A7-D267C5914F9F}C:\program files\logworks3\logworks3.exe] => (Allow) C:\program files\logworks3\logworks3.exe
FirewallRules: [TCP Query User{E5A8BD93-BE9C-4A62-8441-B01B5AEA14CB}C:\program files\logworks3\logworks3.exe] => (Allow) C:\program files\logworks3\logworks3.exe
FirewallRules: [{9E742219-4E48-4F48-A13C-016A652C4780}] => (Block) C:\program files\logworks3\lmconfig331.exe
FirewallRules: [{A48B3FFF-B394-42C2-97DB-BB82ED40D7CF}] => (Block) C:\program files\logworks3\lmconfig331.exe
FirewallRules: [UDP Query User{111DE63F-8A17-4C6B-BFAF-CC82A869E32A}C:\program files\logworks3\lmconfig331.exe] => (Allow) C:\program files\logworks3\lmconfig331.exe
FirewallRules: [TCP Query User{F644650D-4355-42F8-A165-10CA6BD5372C}C:\program files\logworks3\lmconfig331.exe] => (Allow) C:\program files\logworks3\lmconfig331.exe
FirewallRules: [{F982A6CB-B1C4-4BEB-9E78-4D97FB64F1C6}] => (Allow) LPort=50248
FirewallRules: [{A4EFC622-ECB3-4982-B218-C3AB3F4AFAA1}] => (Block) C:\program files (x86)\fritz!\frifax32.exe
FirewallRules: [{A6EE39CF-8413-44A3-B8E7-C8486BE4BDF0}] => (Block) C:\program files (x86)\fritz!\frifax32.exe
FirewallRules: [UDP Query User{122B80AF-D136-48F4-8DBF-E75B15A68CBA}C:\program files (x86)\fritz!\frifax32.exe] => (Allow) C:\program files (x86)\fritz!\frifax32.exe
FirewallRules: [TCP Query User{576B0D35-51B4-407D-B287-65E0E108F3CF}C:\program files (x86)\fritz!\frifax32.exe] => (Allow) C:\program files (x86)\fritz!\frifax32.exe
FirewallRules: [UDP Query User{A22FA895-96FA-453A-88A8-0E94B293712E}C:\temp\_istmp1.dir\_ins5576._mp] => (Block) C:\temp\_istmp1.dir\_ins5576._mp
FirewallRules: [TCP Query User{5D494054-C955-4159-AB87-246CBD4F69AB}C:\temp\_istmp1.dir\_ins5576._mp] => (Block) C:\temp\_istmp1.dir\_ins5576._mp
FirewallRules: [{E71ED175-8BA4-488E-B23A-BD6242DD0EDC}] => (Block) C:\program files (x86)\atmel\atmel studio 6.0\atmelstudio.exe
FirewallRules: [{1BBA72F3-236D-43D0-99BA-AE1E140C1A76}] => (Block) C:\program files (x86)\atmel\atmel studio 6.0\atmelstudio.exe
FirewallRules: [UDP Query User{F2C2A45B-7C28-4A3F-8A4D-AD6C78580921}C:\program files (x86)\atmel\atmel studio 6.0\atmelstudio.exe] => (Allow) C:\program files (x86)\atmel\atmel studio 6.0\atmelstudio.exe
FirewallRules: [TCP Query User{576EFB45-E1CB-4D45-8A28-717F42E0957F}C:\program files (x86)\atmel\atmel studio 6.0\atmelstudio.exe] => (Allow) C:\program files (x86)\atmel\atmel studio 6.0\atmelstudio.exe
FirewallRules: [{F45C30CD-46DF-405E-B460-282607F10FA5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{6CD567AB-20F0-40E7-9E71-578D5C9B4856}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{15C8772E-F9C2-4CD3-8217-DE85FC801BBC}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{48E6D8B6-132E-4EB2-8309-CEA0154BA2E9}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{AA610243-93AB-422C-9133-EE27FB9AB1A5}] => (Allow) LPort=54925
FirewallRules: [{154A30E4-C0B8-4170-A9B7-15818CECCBC5}] => (Allow) C:\Program Files (x86)\Brother\Brmfl10e\FAXRX.exe
FirewallRules: [{646E6CF0-54E2-431F-8F8C-C682D1AE5B82}] => (Allow) C:\Program Files (x86)\Brother\Brmfl10e\FAXRX.exe
FirewallRules: [{97E25129-5BBE-45A2-82D1-86B7C122F09F}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{F531E2D7-C7CF-4E56-8656-AF5519E4288C}] => (Allow) LPort=1900
FirewallRules: [{C2491CDE-B196-4BFF-B859-F944E702A735}] => (Allow) LPort=2869
FirewallRules: [{D1E97FC9-7D32-40C2-A3D6-C974B9965B72}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{D53839F0-86BD-461D-8784-2C6ABB5B47C8}] => (Block) C:\program files\totalcmd\totalcmd64.exe
FirewallRules: [{9F85E56B-C61B-4F64-A5B9-81D1729A8151}] => (Block) C:\program files\totalcmd\totalcmd64.exe
FirewallRules: [UDP Query User{706FFC69-B2E7-4439-968F-361BF1ABD81B}C:\program files\totalcmd\totalcmd64.exe] => (Allow) C:\program files\totalcmd\totalcmd64.exe
FirewallRules: [TCP Query User{9C8F64BE-8632-413B-8C00-CB63ED873AE3}C:\program files\totalcmd\totalcmd64.exe] => (Allow) C:\program files\totalcmd\totalcmd64.exe
FirewallRules: [{D1662C48-C272-4618-A29C-D7331EC4A8A9}] => (Block) C:\program files (x86)\gigabyte\@bios\gwflash.exe
FirewallRules: [{2C06A304-B5A2-4F75-A44F-119870668B40}] => (Block) C:\program files (x86)\gigabyte\@bios\gwflash.exe
FirewallRules: [UDP Query User{D316D5A5-981E-4731-85EC-00FD2B3064BD}C:\program files (x86)\gigabyte\@bios\gwflash.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\gwflash.exe
FirewallRules: [TCP Query User{1923C3CF-66FD-44CE-B1AD-FA3F3F1996A9}C:\program files (x86)\gigabyte\@bios\gwflash.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\gwflash.exe
FirewallRules: [{822A84BE-E1F8-4F1F-A4AB-01B3DE4968BE}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\CTI\xcti.exe
FirewallRules: [{A84C1D9E-A82C-4686-A9DE-F616FBE2DC3D}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\CTI\xcti.exe
FirewallRules: [{A5F3B4AC-2A2E-4BD6-8212-9D121BD84F5C}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\USB\Jabra32.exe
FirewallRules: [{D081090B-C3EF-4428-A323-4A4CD8A7C3DD}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\USB\Jabra32.exe
FirewallRules: [{9EF768C8-07A0-45F6-B6AB-0192D64A124A}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\FV32.exe
FirewallRules: [{DAFF3174-904F-4BDA-9481-EEA9443AABF3}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\FV32.exe
FirewallRules: [{88F288F8-05F3-42B2-9DFF-128E1A7BC8FD}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\xproxy.exe
FirewallRules: [{DFBB4ED5-F306-4CA3-B4CF-725B255A77E4}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\xproxy.exe
FirewallRules: [{BA4CCB4D-26C8-45A9-BE3D-74A42A0C995E}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\Ninja.exe
FirewallRules: [{32A4CC95-8BB4-409E-8C57-0EA5F84E1770}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\Ninja.exe
FirewallRules: [UDP Query User{C42CE4E3-909B-4078-BAF1-C16B444A7C4F}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{992ED9D7-FDF2-4A10-9AE4-E77E04776BEF}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{FDC3242B-1E5A-4A26-94BF-A6BBD5AA1D27}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [TCP Query User{B97A3F77-8FA4-4C2C-BED7-FBE715596251}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [{84E8EF62-9B62-423C-8EC7-304E497C65BC}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{86B4CE88-E2EA-46E3-878B-59313BD6063A}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{A4A740DF-1937-4F6C-A019-A8DBBD65E5F3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{54D142A1-A302-4FD8-932B-34E3684296E4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{3D22E0D5-C50D-4AC5-BD1B-99709F2E98A5}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{7D36C337-32CA-4DC9-A3C8-35C6BE87F698}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{23053DBE-1A44-41E7-B35E-F892F3A0BDCF}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
FirewallRules: [{39C0FE5E-5C47-47E8-8898-E8BB0B1C3940}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
FirewallRules: [{FAD590A7-5D24-40CE-A4D2-28FFD2271572}] => (Allow) LPort=4979
FirewallRules: [{7886DDD8-3BFD-42A1-9706-B131D2C4EADB}] => (Allow) LPort=4979
FirewallRules: [{62A14F7B-EB59-49CB-AA19-A8B398009C2C}] => (Allow) LPort=135
FirewallRules: [{689FD638-7EC3-47F2-BC07-9E07DC1C61AD}] => (Allow) C:\Program Files\Microsoft SQL Server\MSSQL10_50.SIPLACE_2008R2EX\MSSQL\Binn\sqlservr.exe
FirewallRules: [{49134DC7-5192-49C8-8250-A59EF4D5AF37}] => (Allow) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
FirewallRules: [{C452754C-D83A-40B1-9103-5A82918A821F}] => (Allow) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
FirewallRules: [{CDC04001-AACF-4EDD-AFB9-5AC6E853761B}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
FirewallRules: [{3C7EE7CA-9DC7-4116-8D2F-6CAB1E71812B}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
FirewallRules: [TCP Query User{F433835A-C4A0-44E8-995F-15548F4DF2CA}E:\fritz\fritz.box_fon_wlan_7390.annexb.06.30.recover-image.exe] => (Allow) E:\fritz\fritz.box_fon_wlan_7390.annexb.06.30.recover-image.exe
FirewallRules: [UDP Query User{04C1D453-B2EE-4206-A0DB-3F60B9414E54}E:\fritz\fritz.box_fon_wlan_7390.annexb.06.30.recover-image.exe] => (Allow) E:\fritz\fritz.box_fon_wlan_7390.annexb.06.30.recover-image.exe
FirewallRules: [{5DED0F48-53C2-4A02-8123-C9D84561760B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{FB146986-7526-4DEB-ACEA-3515A6D34967}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E14509F9-22BA-4AAC-98D5-8ECABC95D0A7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{282986B1-A3F8-4ED8-BB94-F9A9AAA99AFC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [TCP Query User{437C02ED-2DC5-46DA-B0F2-43084ACC58C4}C:\xilinx\11.1\ise\bin\nt\unwrapped\cableserver.exe] => (Allow) C:\xilinx\11.1\ise\bin\nt\unwrapped\cableserver.exe
FirewallRules: [UDP Query User{15BBA9F6-84A9-4C20-93F0-EF90D17B8284}C:\xilinx\11.1\ise\bin\nt\unwrapped\cableserver.exe] => (Allow) C:\xilinx\11.1\ise\bin\nt\unwrapped\cableserver.exe
FirewallRules: [TCP Query User{582A238B-9A38-4BCB-9200-5236906349FA}C:\program files (x86)\oscam\oscamemmv14spy.exe] => (Allow) C:\program files (x86)\oscam\oscamemmv14spy.exe
FirewallRules: [UDP Query User{BE3096FB-ED43-41ED-B61A-0F94720D1567}C:\program files (x86)\oscam\oscamemmv14spy.exe] => (Allow) C:\program files (x86)\oscam\oscamemmv14spy.exe
FirewallRules: [{9AFD3063-61DE-4795-9182-A61BC86C0505}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{F0811C62-FDFA-4F19-84CE-6664F9A148AB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Wiederherstellungspunkte =========================
25-01-2016 06:12:58 Windows Update
02-02-2016 06:17:01 Geplanter Prüfpunkt
03-02-2016 07:39:28 Malwarebytes Anti-Rootkit Restore Point
04-02-2016 06:48:45 Entfernt StarMoney
05-02-2016 06:46:20 Revo Uninstaller's restore point - Google Chrome
05-02-2016 16:20:35 JRT Pre-Junkware Removal
==================== Fehlerhafte Geräte im Gerätemanager =============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (02/05/2016 04:20:36 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (02/05/2016 06:46:21 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (02/04/2016 06:48:46 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (02/03/2016 07:39:29 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (02/02/2016 06:17:02 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (02/01/2016 06:02:01 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.
Error: (02/01/2016 06:01:59 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.
Error: (02/01/2016 06:01:57 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.
Error: (01/31/2016 02:45:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DbxBridge.exe, Version: 17.2.20000.0, Zeitstempel: 0x5171cc12
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10240.16603, Zeitstempel: 0x5655363f
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000ea2ec
ID des fehlerhaften Prozesses: 0x15d0
Startzeit der fehlerhaften Anwendung: 0xDbxBridge.exe0
Pfad der fehlerhaften Anwendung: DbxBridge.exe1
Pfad des fehlerhaften Moduls: DbxBridge.exe2
Berichtskennung: DbxBridge.exe3
Vollständiger Name des fehlerhaften Pakets: DbxBridge.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: DbxBridge.exe5
Error: (01/31/2016 02:42:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DbxBridge.exe, Version: 17.2.20000.0, Zeitstempel: 0x5171cc12
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10240.16603, Zeitstempel: 0x5655363f
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000ea2ec
ID des fehlerhaften Prozesses: 0x1dc0
Startzeit der fehlerhaften Anwendung: 0xDbxBridge.exe0
Pfad der fehlerhaften Anwendung: DbxBridge.exe1
Pfad des fehlerhaften Moduls: DbxBridge.exe2
Berichtskennung: DbxBridge.exe3
Vollständiger Name des fehlerhaften Pakets: DbxBridge.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: DbxBridge.exe5
Systemfehler:
=============
Error: (02/05/2016 02:41:41 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 10. Der Windows-SChannel-Fehlerstatus lautet: 10.
Error: (02/05/2016 02:41:41 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 10. Der Windows-SChannel-Fehlerstatus lautet: 10.
Error: (02/05/2016 02:35:51 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 10. Der Windows-SChannel-Fehlerstatus lautet: 10.
Error: (02/05/2016 02:35:51 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 10. Der Windows-SChannel-Fehlerstatus lautet: 10.
Error: (02/05/2016 06:04:50 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 10. Der Windows-SChannel-Fehlerstatus lautet: 10.
Error: (02/05/2016 06:04:50 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 10. Der Windows-SChannel-Fehlerstatus lautet: 10.
Error: (02/04/2016 06:07:32 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (02/04/2016 07:54:11 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 10. Der Windows-SChannel-Fehlerstatus lautet: 10.
Error: (02/04/2016 07:54:11 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 10. Der Windows-SChannel-Fehlerstatus lautet: 10.
Error: (02/04/2016 07:27:56 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 10. Der Windows-SChannel-Fehlerstatus lautet: 10.
CodeIntegrity:
===================================
Date: 2016-02-05 16:24:12.718
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-02-05 16:24:12.704
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-12-29 09:39:29.238
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-12-29 09:39:29.177
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-12-29 09:39:22.666
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-12-29 09:39:22.605
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-12-29 09:39:20.073
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-12-29 09:39:20.011
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-12-29 09:39:19.823
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-12-29 09:39:19.751
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz
Prozentuale Nutzung des RAM: 25%
Installierter physikalischer RAM: 16214.09 MB
Verfügbarer physikalischer RAM: 12000.53 MB
Summe virtueller Speicher: 32598.09 MB
Verfügbarer virtueller Speicher: 28447.78 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:238.37 GB) (Free:30.73 GB) NTFS
Drive d: () (Fixed) (Total:4.99 GB) (Free:0.24 GB) FAT32
Drive e: () (Fixed) (Total:298.08 GB) (Free:187.88 GB) NTFS
Drive s: () (Network) (Total:365.69 GB) (Free:180.59 GB)
Drive t: () (Network) (Total:1845.38 GB) (Free:1844.11 GB)
Drive w: () (Network) (Total:365.69 GB) (Free:180.59 GB)
Drive x: () (Network) (Total:365.69 GB) (Free:180.59 GB)
Drive y: () (Network) (Total:365.69 GB) (Free:180.59 GB)
Drive z: () (Network) (Total:365.69 GB) (Free:180.59 GB)
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 54FBCE7F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=238.4 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 298.1 GB) (Disk ID: 6419355F)
Partition 1: (Active) - (Size=298.1 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
|
06.02.2016, 15:48
| #5 | ||
| /// Winkelfunktion /// TB-Süch-Tiger™ | smartnewtab und andere nervige Weiterleitungen im ChromeZitat:
Zitat:
 Lesestoff:Illegale Software: Cracks, Keygens und Co Bitte lesen => http://www.trojaner-board.de/95393-c...-software.html Es geht weiter wenn du alles Illegale entfernt hast. Bei wiederholten Crack/Keygen Verstößen behalte ich es mir vor, den Support einzustellen, d.h. Hilfe nur noch bei der Datensicherung und Neuinstallation des Betriebssystems.
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
06.02.2016, 19:56
| #6 |
| | smartnewtab und andere nervige Weiterleitungen im Chrome Namd, Der Rechner ist mein Privat-PC und steht hier im einen separaten Raum, nennen wir es Büro. die Liste mit den Einträgen habe ich aus einem Forum: 127.0.0.1 activate.adobe.com 127.0.0.1 licensing.ultraedit.com 127.0.0.1 rad.msn.com 127.0.0.1 live.rads.msn.com 127.0.0.1 ads1.msn.com 127.0.0.1 g.msn.com 127.0.0.1 a.ads2.msads.net 127.0.0.1 b.ads2.msads.net 127.0.0.1 ac3.msn.com 127.0.0.1 apps.skype.com 127.0.0.1 static.2mdn.net und am Montag per Hand eingetragen. Hat leider nichts gebracht... |
|
07.02.2016, 00:05
| #7 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | smartnewtab und andere nervige Weiterleitungen im Chrome Du hast aber schon kapiert, dass diese Liste in der Hosts dazu dient, gecrackte Software lauffähig zu machen? mehr schreibst du ja einfach nicht. Dass du das irgendwo aufgeschnappt hast ist mir schon vorher klar gewesen.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
08.02.2016, 18:20
| #8 |
| | smartnewtab und andere nervige Weiterleitungen im Chrome Hi, Das habe ich nun nach deinen Post auch kapiert. Ich hatte diese Liste aus einem französischen Forum und nach deren Anleitung in die Datei kopiert. Auf dieser Seite stand das dadurch die Seiten nicht mehr geöffnet werden können. Aber das hat leider auch gar nichts gebracht. Aber ich habe heute das hier im Forum gefunden und aus probiert. hosts: emptytemp: das habe ich in die fixlist.txt eingetragen und FRST ausgeführt. das ist der resultierende log: Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:27-01-2016
durchgeführt von Büro (2016-02-08 17:37:10) Run:2
Gestartet von E:\Downloads
Geladene Profile: Büro (Verfügbare Profile: Büro & DefaultAppPool)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
hosts:
emptytemp:
*****************
C:\Windows\System32\Drivers\etc\hosts => erfolgreich verschoben
Hosts erfolgreich wiederhergestellt.
EmptyTemp: => 22.9 GB temporäre Dateien entfernt.
Das System musste neu gestartet werden.
==== Ende von Fixlog 17:43:25 ====
 |
|
08.02.2016, 19:45
| #9 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | smartnewtab und andere nervige Weiterleitungen im Chrome Das allein reicht aber noch nicht Malwarebytes Anti-Rootkit (MBAR) Downloade dir bitte  Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers
__________________ Logfiles bitte immer in CODE-Tags posten |
|
09.02.2016, 05:27
| #10 |
| | smartnewtab und andere nervige Weiterleitungen im Chrome Guten Morgen, Ich habe gerade den Scan mit mbar gemacht. Anbei ein Screenshot. Viele Grüße Dave |
|
09.02.2016, 09:52
| #11 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | smartnewtab und andere nervige Weiterleitungen im Chrome Adware/Junkware/Toolbars entfernen Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop! Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren! 1. Schritt: adwCleaner Downloade Dir bitte  AdwCleaner auf deinen Desktop.
2. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
3. Schritt: Frisches Log mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ Logfiles bitte immer in CODE-Tags posten |
|
09.02.2016, 17:06
| #12 |
| | smartnewtab und andere nervige Weiterleitungen im Chrome Hi, anbei die logs: Code:
ATTFilter # AdwCleaner v5.033 - Bericht erstellt am 09/02/2016 um 16:42:42
# Aktualisiert am 07/02/2016 von Xplode
# Datenbank : 2016-02-07.2 [Server]
# Betriebssystem : Windows 10 Pro (x64)
# Benutzername : Büro - BUERO-PC
# Gestartet von : E:\Downloads\adwcleaner_5.033.exe
# Option : Suchlauf
# Unterstützung : hxxp://toolslib.net/forum
***** [ Dienste ] *****
***** [ Ordner ] *****
***** [ Dateien ] *****
***** [ DLL ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Internetbrowser ] *****
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [607 Bytes] ##########
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.2 (01.06.2016)
Operating System: Windows 10 Pro x64
Ran by Bro (Administrator) on 09.02.2016 at 16:39:35,98
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 0
Registry: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 09.02.2016 at 16:41:27,13
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:27-01-2016
durchgeführt von Büro (Administrator) auf BUERO-PC (09-02-2016 16:46:54)
Gestartet von E:\Downloads
Geladene Profile: Büro (Verfügbare Profile: Büro & DefaultAppPool)
Platform: Windows 10 Pro (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Webroot) C:\Program Files (x86)\Webroot\WRSA.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe
(AgileBits) C:\Program Files (x86)\1Password\Agile1pService.exe
(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
(Sanford, L.P.) C:\Program Files (x86)\DYMO\DYMO Label Software\DymoPnpService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Dassault Systèmes) C:\Program Files\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Webroot) C:\Program Files (x86)\Webroot\WRSA.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(GN Netcom A/S) C:\Program Files (x86)\Jabra\Jabra PC Suite\JabraSkypeDriver.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Ghisler Software GmbH) C:\Program Files\totalcmd\TOTALCMD64.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(Ghisler Software GmbH) C:\Program Files\totalcmd\TCMADM64.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [VIAxHCUtl] => C:\VIA_XHCI\usb3Monitor.exe [331776 2011-07-12] (VIA Technologies, Inc.)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [6868280 2012-05-21] (Logitech Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-08-13] (Apple Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-27] (Intel Corporation)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139264 2011-04-20] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2629632 2011-10-07] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-05-15] (Apple Inc.)
HKLM-x32\...\Run: [Agile1pAgent] => C:\Program Files (x86)\1Password\Agile1pAgent.exe [2248976 2014-09-17] (AgileBits)
HKLM-x32\...\Run: [WRSVC] => C:\Program Files (x86)\Webroot\WRSA.exe [840768 2016-01-04] (Webroot)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [919008 2012-07-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36800 2012-07-27] (Adobe Systems Incorporated)
HKLM\...\Policies\Explorer: [NoViewOnDrive] 0
HKLM\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKLM\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKLM\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKLM\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKLM\...\Policies\Explorer: [NoViewContextMenu] 0
HKLM\...\Policies\Explorer: [NoShellSearchButton] 0
HKLM\...\Policies\Explorer: [NoFind] 0
HKLM\...\Policies\Explorer: [NoFile] 0
HKLM\...\Policies\Explorer: [HideClock] 0
HKLM\...\Policies\Explorer: [NoTrayContextMenu] 0
HKLM\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKLM\...\Policies\Explorer: [NoSetFolders] 0
HKLM\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKLM\...\Policies\Explorer: [NoSetTaskbar] 0
HKLM\...\Policies\Explorer: [NoDeletePrinter] 0
HKLM\...\Policies\Explorer: [NoDFSTab] 0
HKLM\...\Policies\Explorer: [NoChangeStartMenu] 0
HKLM\...\Policies\Explorer: [NoLogoff] 0
HKLM\...\Policies\Explorer: [NoWindowsUpdate] 0
HKLM\...\Policies\Explorer: [NoEncryptOnMove] 0
HKLM\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKLM\...\Policies\Explorer: [NoResolveSearch] 0
HKLM\...\Policies\Explorer: [NoSaveSettings] 0
HKLM\...\Policies\Explorer: [NoHardwareTab] 0
HKLM\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKLM\...\Policies\Explorer: [NoDesktop] 0
HKU\S-1-5-19\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-19\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-19\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-19\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-19\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\S-1-5-20\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-20\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-20\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-20\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-20\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Run: [TrueCrypt] => C:\Program Files\TrueCrypt\TrueCrypt.exe [1516496 2012-08-08] (TrueCrypt Foundation)
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Run: [NINJA.EXE] => C:\Program Files (x86)\Ninja\Ninja\Ninja.exe [10365440 2013-09-16] (Global IP Telecommunications Ltd.)
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Run: [DymoQuickPrint] => C:\Program Files (x86)\DYMO\DYMO Label Software\DymoQuickPrint.exe [1825360 2011-01-28] (Sanford, L.P.)
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50593408 2016-02-02] (Skype Technologies S.A.)
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe"
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: []
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\S-1-5-18\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-18\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-18\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-18\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-18\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoStartMenuSubFolders] 0
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)
ShellIconOverlayIdentifiers: [ ] -> {1914B27A-33C8-46F8-A1C2-F993268D4564} => C:\WINDOWS\system32\WRusr.dll [2016-01-04] (Webroot)
ShellIconOverlayIdentifiers: [ ] -> {C14874EA-ACE4-4A47-8A81-18C4D1C40868} => C:\WINDOWS\system32\WRusr.dll [2016-01-04] (Webroot)
ShellIconOverlayIdentifiers: [ ] -> {6DA1ED92-315E-4D0B-B354-9D5F519DBA95} => C:\WINDOWS\system32\WRusr.dll [2016-01-04] (Webroot)
ShellIconOverlayIdentifiers: [ ] -> {8D7FC74C-E409-42DF-8EEE-69D45FAE2F30} => C:\WINDOWS\system32\WRusr.dll [2016-01-04] (Webroot)
ShellIconOverlayIdentifiers: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\Windows\system32\CbFsMntNtf3.dll [2012-04-09] (EldoS Corporation)
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\Windows\SysWOW64\CbFsMntNtf3.dll [2012-04-09] (EldoS Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk [2015-12-18]
ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\wruninstall.exe (Webroot Software, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install Webroot FF RunOnce.lnk [2015-08-01]
ShortcutTarget: Install Webroot FF RunOnce.lnk -> C:\Program Files (x86)\Common Files\wruninstall.exe (Webroot Software, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install Webroot IE RunOnce.lnk [2015-08-01]
ShortcutTarget: Install Webroot IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\wruninstall.exe (Webroot Software, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Jabra Device Service.lnk [2014-04-18]
ShortcutTarget: Jabra Device Service.lnk -> C:\Program Files (x86)\Jabra\Jabra PC Suite\JabraDeviceService.exe (GN Netcom A/S)
Startup: C:\Users\Büro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk [2016-02-03]
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Büro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RT-Updater.lnk [2016-02-03]
ShortcutTarget: RT-Updater.lnk -> C:\Program Files\Ross-Tech\VCDS\VCDS.EXE (Ross-Tech, LLC)
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\..\Interfaces\{182ac41e-22b3-4a66-853e-1f1d1852da32}: [NameServer] 192.168.23.1
Tcpip\..\Interfaces\{c003528e-6fff-4c78-860a-15a2bfea1112}: [DhcpNameServer] 172.20.10.1
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> Backup.Old.DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SearchScopes: HKU\S-1-5-21-3089249572-137260113-2558678779-1000 -> Backup.Old.DefaultScope {24AA9114-6803-4599-A228-77B94E430634}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Webroot Vault -> {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} -> C:\ProgramData\WRData\pkg\LPBar64.dll [2015-12-18] (Webroot)
BHO: Webroot Filtering Extension -> {C9C42510-9B41-42c1-9DCD-7282A2D07C61} -> C:\Program Files (x86)\Webroot\WRData\PKG\Vistax64\wrflt.dll [2015-12-18] (Webroot)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27] (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-07-27] (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Webroot Vault -> {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} -> C:\ProgramData\WRData\pkg\LPBar.dll [2015-12-18] (Webroot)
BHO-x32: Webroot Filtering Extension -> {C9C42510-9B41-42c1-9DCD-7282A2D07C61} -> C:\Program Files (x86)\Webroot\WRData\PKG\Vistax86\wrflt.dll [2015-12-18] (Webroot)
BHO-x32: 1Password -> {CB1A24DA-7416-4921-A0CF-5AA1160AAE2A} -> C:\Program Files (x86)\1Password\Agile1pIE.dll [2014-09-17] (AgileBits)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-07-27] (Adobe Systems Incorporated)
Toolbar: HKLM - Webroot Toolbar - {97ab88ef-346b-4179-a0b1-7445896547a5} - C:\ProgramData\WRData\pkg\LPBar64.dll [2015-12-18] (Webroot)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-07-27] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Webroot Toolbar - {97ab88ef-346b-4179-a0b1-7445896547a5} - C:\ProgramData\WRData\pkg\LPBar.dll [2015-12-18] (Webroot)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
FireFox:
========
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2014-02-17] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.5.0 -> C:\Windows\system32\npDeployJava1.dll [2012-08-09] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2014-02-17] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2012-06-28] (VideoLAN)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1209149.dll [2014-01-29] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-07-30] ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-02-17] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @dymo.com/DymoLabelFramework -> C:\Program Files (x86)\DYMO\DYMO Label Software\Framework\npDYMOLabelFramework.dll [2011-01-28] ( Sanford L.P.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2011-12-01] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2011-12-01] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\WINDOWS\SysWOW64\npdeployJava1.dll [2015-01-28] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\new_plugin\npjp2.dll [Keine Datei]
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2012-05-14] (Nero AG)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2016-01-20] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2016-01-20] (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-02-17] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2012-07-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3089249572-137260113-2558678779-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-02-17] (Tracker Software Products (Canada) Ltd.)
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2012-08-15] [ist nicht signiert]
Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR Profile: C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ProxFlow) - C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2016-02-06]
CHR Extension: (Google Präsentationen) - C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-01-20]
CHR Extension: (Google Docs) - C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-20]
CHR Extension: (Google Drive) - C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-20]
CHR Extension: (YouTube) - C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-20]
CHR Extension: (Google-Suche) - C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-20]
CHR Extension: (Google Tabellen) - C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-01-20]
CHR Extension: (Google Docs Offline) - C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-20]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-20]
CHR Extension: (Google Mail) - C:\Users\Büro\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-20]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 Agile1Password; C:\Program Files (x86)\1Password\Agile1pService.exe [768784 2014-09-17] (AgileBits)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [Datei ist nicht signiert]
R2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [514128 2012-03-19] (REINER SCT)
R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3755976 2015-07-01] (devolo AG)
R2 DraftSight API Service; C:\Program Files\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe [123392 2013-08-30] (Dassault Systèmes) [Datei ist nicht signiert]
R2 DymoPnpService; C:\Program Files (x86)\DYMO\DYMO Label Software\DymoPnpService.exe [32336 2011-01-28] (Sanford, L.P.)
S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [Datei ist nicht signiert]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Datei ist nicht signiert]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-10-09] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 StarMoney 9.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
S4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6889232 2015-12-14] (TeamViewer GmbH)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [36504 2015-06-22] (VIA Technologies, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
R2 WRSVC; C:\Program Files (x86)\Webroot\WRSA.exe [840768 2016-01-04] (Webroot)
S2 Bonjour Service; "C:\Program Files\Bonjour\mDNSResponder.exe" [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21616 2011-11-02] ()
R3 cbfs3; C:\Windows\System32\drivers\cbfs3.sys [352144 2012-04-09] (EldoS Corporation)
R3 cjusb; C:\Windows\system32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT)
R3 evcDrv; C:\Windows\system32\drivers\evcDrv.sys [298552 2015-08-13] (Jungo Connectivity)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-08-15] ()
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2013-03-04] (CACE Technologies)
S2 pardrv; C:\Windows\System32\Drivers\pardrv.sys [20184 2011-10-12] ( )
R3 Pg4uUSB; C:\Windows\system32\DRIVERS\pg4uusb.sys [138904 2015-09-07] ()
R3 RT-USB; C:\Windows\system32\drivers\RT-USB64.SYS [97152 2014-05-12] (Ross-Tech LLC)
S3 tsusbhub; C:\Windows\System32\drivers\tsusbhub.sys [117248 2010-11-21] (Microsoft Corporation) [Datei ist nicht signiert]
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
R0 vsock; C:\Windows\System32\drivers\vsock.sys [75512 2015-08-04] (VMware, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
R3 WinDriver6; C:\Windows\system32\drivers\windrvr6.sys [276536 2014-08-05] (Jungo Connectivity)
R0 WRkrn; C:\Windows\System32\drivers\WRkrn.sys [117728 2015-10-14] (Webroot)
S3 wrUrlFlt; C:\Windows\system32\DRIVERS\wrUrlFlt.sys [45104 2015-12-18] (Webroot)
S3 XilinxFirmwareLoader; C:\Windows\System32\Drivers\xusbdfwu.sys [19200 2011-02-03] (Xilinx, Inc.)
R2 XilinxPC4Driver; C:\Windows\System32\drivers\xpc4drvr.sys [27384 2011-02-03] (Xilinx, Inc.)
U3 idsvc; kein ImagePath
U0 SR; kein ImagePath
U2 srservice; kein ImagePath
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
U3 wpcsvc; kein ImagePath
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-02-09 16:46 - 2016-02-08 17:53 - 00000858 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ori
2016-02-09 16:38 - 2016-02-09 16:38 - 00016148 _____ C:\WINDOWS\system32\BUERO-PC_Büro_HistoryPrediction.bin
2016-02-09 12:40 - 2016-02-09 16:41 - 00000545 _____ C:\Users\Büro\Desktop\JRT.txt
2016-02-09 05:09 - 2016-02-09 05:09 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-02-09 05:08 - 2016-02-09 05:40 - 00000000 ____D C:\Users\Büro\Desktop\mbar
2016-02-09 05:08 - 2016-02-09 05:08 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-02-05 16:24 - 2016-02-09 16:46 - 00000000 ____D C:\FRST
2016-02-05 06:50 - 2016-02-05 06:50 - 00002336 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-05 06:50 - 2016-02-05 06:50 - 00002324 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-02-05 06:44 - 2016-02-05 06:44 - 00001337 _____ C:\Users\Büro\Desktop\Revo Uninstaller.lnk
2016-02-05 06:44 - 2016-02-05 06:44 - 00000000 ____D C:\Users\Büro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2016-02-05 06:44 - 2016-02-05 06:44 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2016-02-04 06:46 - 2015-01-28 05:57 - 00897960 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\npdeployJava1.dll
2016-02-04 06:46 - 2015-01-28 05:57 - 00818088 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\deployJava1.dll
2016-02-04 06:44 - 2016-02-04 06:44 - 00852720 _____ C:\Users\Büro\Downloads\SecurityCheck.exe
2016-02-03 07:18 - 2016-02-09 05:40 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-02-03 07:15 - 2016-02-03 07:17 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Büro\Downloads\mbar-1.09.3.1001.exe
2016-02-03 06:37 - 2016-02-09 05:09 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-02-03 06:35 - 2016-02-03 06:36 - 22908888 _____ (Malwarebytes ) C:\Users\Büro\Downloads\mbam-setup-2.2.0.1024.exe
2016-02-02 05:51 - 2016-02-02 05:51 - 00182320 _____ C:\Users\Büro\Downloads\DHL-Marke-X6CBKWK36P.pdf
2016-02-01 06:46 - 2016-02-01 06:46 - 00000228 _____ C:\Users\Büro\Downloads\antiskypewerbung.zip
2016-02-01 06:01 - 2016-02-01 06:01 - 02870984 _____ (ESET) C:\Users\Büro\Downloads\esetsmartinstaller_deu.exe
2016-01-28 06:17 - 2016-01-28 06:17 - 00187154 _____ C:\Users\Büro\Downloads\DHL-Marke-ECK3D6VMTW.pdf
2016-01-22 18:16 - 2016-01-22 18:16 - 01140355 _____ C:\Users\Büro\Downloads\rechnung.pdf
2016-01-22 10:03 - 2016-01-22 10:03 - 00075048 _____ C:\Users\Büro\Downloads\ufonts.com_interface-dama.ttf
2016-01-21 17:11 - 2016-01-21 17:12 - 04188505 _____ C:\Users\Büro\Downloads\Kondensataufbereitung-Aquamat.pdf
2016-01-20 17:58 - 2016-01-20 17:58 - 00001488 _____ C:\Users\Büro\Downloads\EMMSettings.rar
2016-01-20 17:57 - 2016-01-20 17:57 - 03588394 _____ C:\Users\Büro\Downloads\OscamEMMV14Spy.zip
2016-01-20 16:20 - 2016-01-20 16:58 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-01-20 16:20 - 2016-01-20 16:20 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2016-01-20 16:08 - 2016-02-09 16:42 - 00000000 ____D C:\AdwCleaner
2016-01-20 16:08 - 2016-01-20 16:08 - 01505280 _____ C:\Users\Büro\Downloads\adwcleaner_5.030.exe
2016-01-20 15:16 - 2016-02-09 16:21 - 00001124 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-20 15:16 - 2016-02-09 15:21 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-20 15:16 - 2016-01-20 17:59 - 00000000 ____D C:\Users\Büro\AppData\Local\Google
2016-01-20 15:16 - 2016-01-20 15:19 - 00000000 ____D C:\Program Files (x86)\Google
2016-01-20 15:16 - 2016-01-20 15:16 - 00004182 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-01-20 15:16 - 2016-01-20 15:16 - 00003950 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-01-13 08:47 - 2016-01-05 04:07 - 02463704 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-01-13 08:47 - 2016-01-05 04:07 - 00377592 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP4SDECD.DLL
2016-01-13 08:47 - 2016-01-05 04:06 - 08022368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-01-13 08:47 - 2016-01-05 04:06 - 01991120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVENCOD.DLL
2016-01-13 08:47 - 2016-01-05 04:06 - 01270104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-01-13 08:47 - 2016-01-05 04:06 - 01063504 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2016-01-13 08:47 - 2016-01-05 04:06 - 00119800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL
2016-01-13 08:47 - 2016-01-05 04:04 - 02824248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2016-01-13 08:47 - 2016-01-05 04:04 - 02641928 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2016-01-13 08:47 - 2016-01-05 04:04 - 01591848 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-01-13 08:47 - 2016-01-05 04:04 - 01150816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-01-13 08:47 - 2016-01-05 04:04 - 00862056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-01-13 08:47 - 2016-01-05 04:04 - 00787720 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL
2016-01-13 08:47 - 2016-01-05 04:04 - 00784136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-01-13 08:47 - 2016-01-05 04:04 - 00779928 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2016-01-13 08:47 - 2016-01-05 04:04 - 00772448 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-01-13 08:47 - 2016-01-05 04:04 - 00751992 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOE.DLL
2016-01-13 08:47 - 2016-01-05 04:04 - 00667856 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2016-01-13 08:47 - 2016-01-05 04:04 - 00250520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPG4DECD.DLL
2016-01-13 08:47 - 2016-01-05 04:04 - 00249464 _____ (Microsoft Corporation) C:\WINDOWS\system32\RESAMPLEDMO.DLL
2016-01-13 08:47 - 2016-01-05 04:04 - 00243248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-01-13 08:47 - 2016-01-05 04:04 - 00233992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll
2016-01-13 08:47 - 2016-01-05 04:04 - 00115704 _____ (Microsoft Corporation) C:\WINDOWS\system32\VIDRESZR.DLL
2016-01-13 08:47 - 2016-01-05 04:04 - 00090912 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll
2016-01-13 08:47 - 2016-01-05 04:04 - 00083704 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfvdsp.dll
2016-01-13 08:47 - 2016-01-05 03:59 - 00781976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2016-01-13 08:47 - 2016-01-05 03:52 - 00441696 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-01-13 08:47 - 2016-01-05 03:50 - 01817064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-01-13 08:47 - 2016-01-05 03:50 - 01083072 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-01-13 08:47 - 2016-01-05 03:50 - 00723648 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-01-13 08:47 - 2016-01-05 03:50 - 00345080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSDECD.DLL
2016-01-13 08:47 - 2016-01-05 03:50 - 00251544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP43DECD.DLL
2016-01-13 08:47 - 2016-01-05 03:50 - 00205072 _____ (Microsoft Corporation) C:\WINDOWS\system32\COLORCNV.DLL
2016-01-13 08:47 - 2016-01-05 03:31 - 01365576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-01-13 08:47 - 2016-01-05 03:30 - 02459096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2016-01-13 08:47 - 2016-01-05 03:30 - 02162064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVENCOD.DLL
2016-01-13 08:47 - 2016-01-05 03:30 - 02152744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-01-13 08:47 - 2016-01-05 03:30 - 01106872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-01-13 08:47 - 2016-01-05 03:30 - 00882208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2016-01-13 08:47 - 2016-01-05 03:30 - 00368776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP4SDECD.DLL
2016-01-13 08:47 - 2016-01-05 03:30 - 00232896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RESAMPLEDMO.DLL
2016-01-13 08:47 - 2016-01-05 03:30 - 00100712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL
2016-01-13 08:47 - 2016-01-05 03:29 - 00208688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll
2016-01-13 08:47 - 2016-01-05 03:28 - 02445128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2016-01-13 08:47 - 2016-01-05 03:28 - 00714808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-01-13 08:47 - 2016-01-05 03:28 - 00696192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOE.DLL
2016-01-13 08:47 - 2016-01-05 03:28 - 00695752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL
2016-01-13 08:47 - 2016-01-05 03:28 - 00645144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-01-13 08:47 - 2016-01-05 03:28 - 00635312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2016-01-13 08:47 - 2016-01-05 03:28 - 00497896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2016-01-13 08:47 - 2016-01-05 03:28 - 00277400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MPG4DECD.DLL
2016-01-13 08:47 - 2016-01-05 03:28 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2016-01-13 08:47 - 2016-01-05 03:28 - 00107952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VIDRESZR.DLL
2016-01-13 08:47 - 2016-01-05 03:28 - 00082096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll
2016-01-13 08:47 - 2016-01-05 03:28 - 00072808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfvdsp.dll
2016-01-13 08:47 - 2016-01-05 03:21 - 00658528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2016-01-13 08:47 - 2016-01-05 03:18 - 21873152 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-01-13 08:47 - 2016-01-05 03:15 - 24592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-01-13 08:47 - 2016-01-05 03:15 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2016-01-13 08:47 - 2016-01-05 03:15 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2016-01-13 08:47 - 2016-01-05 03:15 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll
2016-01-13 08:47 - 2016-01-05 03:10 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh264enc.dll
2016-01-13 08:47 - 2016-01-05 03:10 - 00305776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSDECD.DLL
2016-01-13 08:47 - 2016-01-05 03:10 - 00278424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP43DECD.DLL
2016-01-13 08:47 - 2016-01-05 03:10 - 00188032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COLORCNV.DLL
2016-01-13 08:47 - 2016-01-05 03:09 - 01234944 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2016-01-13 08:47 - 2016-01-05 03:09 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-01-13 08:47 - 2016-01-05 03:02 - 01672192 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2016-01-13 08:47 - 2016-01-05 03:02 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2016-01-13 08:47 - 2016-01-05 03:02 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2016-01-13 08:47 - 2016-01-05 03:01 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2016-01-13 08:47 - 2016-01-05 03:00 - 00826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-01-13 08:47 - 2016-01-05 03:00 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-01-13 08:47 - 2016-01-05 02:59 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-01-13 08:47 - 2016-01-05 02:57 - 00712704 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2016-01-13 08:47 - 2016-01-05 02:57 - 00578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-01-13 08:47 - 2016-01-05 02:57 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-01-13 08:47 - 2016-01-05 02:56 - 07523840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-01-13 08:47 - 2016-01-05 02:51 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL
2016-01-13 08:47 - 2016-01-05 02:51 - 01009664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL
2016-01-13 08:47 - 2016-01-05 02:51 - 00634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVXENCD.DLL
2016-01-13 08:47 - 2016-01-05 02:51 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFWMAAEC.DLL
2016-01-13 08:47 - 2016-01-05 02:51 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSENCD.DLL
2016-01-13 08:47 - 2016-01-05 02:44 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2016-01-13 08:47 - 2016-01-05 02:44 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll
2016-01-13 08:47 - 2016-01-05 02:43 - 19324928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-01-13 08:47 - 2016-01-05 02:42 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2016-01-13 08:47 - 2016-01-05 02:38 - 00556032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh264enc.dll
2016-01-13 08:47 - 2016-01-05 02:32 - 01541632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2016-01-13 08:47 - 2016-01-05 02:32 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2016-01-13 08:47 - 2016-01-05 02:31 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2016-01-13 08:47 - 2016-01-05 02:31 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2016-01-13 08:47 - 2016-01-05 02:30 - 18802176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-01-13 08:47 - 2016-01-05 02:29 - 00650240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2016-01-13 08:47 - 2016-01-05 02:29 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-01-13 08:47 - 2016-01-05 02:26 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-01-13 08:47 - 2016-01-05 02:24 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-01-13 08:47 - 2016-01-05 02:20 - 00890880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL
2016-01-13 08:47 - 2016-01-05 02:19 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL
2016-01-13 08:47 - 2016-01-05 02:19 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVXENCD.DLL
2016-01-13 08:47 - 2016-01-05 02:19 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSENCD.DLL
2016-01-13 08:47 - 2016-01-05 02:19 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFWMAAEC.DLL
2016-01-13 05:53 - 2016-01-13 05:53 - 00000000 ____D C:\Users\Büro\AppData\Roaming\Obsidium
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-02-09 16:46 - 2012-08-08 21:19 - 00000000 ____D C:\temp
2016-02-09 16:43 - 2012-08-08 19:51 - 00000000 ____D C:\Users\Büro\AppData\Roaming\Skype
2016-02-09 13:24 - 2015-11-20 05:41 - 00004154 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{1A68EF23-0DC5-4266-A433-600125A3DAFF}
2016-02-09 13:18 - 2013-06-13 13:48 - 00000000 ____D C:\ProgramData\WRData
2016-02-09 06:30 - 2014-01-08 15:41 - 00000000 ____D C:\Program Files (x86)\StarMoney 9.0
2016-02-09 05:26 - 2012-08-12 14:50 - 00001456 _____ C:\Users\Büro\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2016-02-09 05:06 - 2012-08-08 19:51 - 00000000 ____D C:\ProgramData\Skype
2016-02-09 05:05 - 2015-08-19 06:00 - 00000000 __SHD C:\Users\Büro\IntelGraphicsProfiles
2016-02-09 05:05 - 2015-08-19 05:47 - 00000000 _____ C:\WINDOWS\system32\Drivers\lvuvc.hs
2016-02-08 18:00 - 2015-08-19 05:47 - 02085408 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-02-08 18:00 - 2015-07-10 17:34 - 00886474 _____ C:\WINDOWS\system32\perfh007.dat
2016-02-08 18:00 - 2015-07-10 17:34 - 00197134 _____ C:\WINDOWS\system32\perfc007.dat
2016-02-08 18:00 - 2015-07-10 12:02 - 00000000 ____D C:\WINDOWS\INF
2016-02-08 17:54 - 2015-07-10 13:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-02-08 17:54 - 2012-08-09 17:43 - 00000000 ____D C:\ProgramData\VMware
2016-02-08 17:53 - 2015-07-10 10:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-02-08 17:37 - 2012-12-27 14:30 - 00000000 ____D C:\Users\Büro\AppData\LocalLow\Temp
2016-02-08 11:52 - 2012-10-26 16:08 - 00001028 _____ C:\WINDOWS\BRCALIB.INI
2016-02-06 20:14 - 2012-08-12 12:49 - 00001504 _____ C:\Users\Büro\ViewMateDLX.cfg
2016-02-06 20:14 - 2012-08-12 12:49 - 00000016 ____H C:\WINDOWS\SysWOW64\servdat.slm
2016-02-06 20:10 - 2012-08-12 13:02 - 00000219 _____ C:\WINDOWS\SysWOW64\lsprst7.tgz
2016-02-06 20:10 - 2012-08-12 13:02 - 00000205 _____ C:\WINDOWS\SysWOW64\lsprst7.dll
2016-02-06 06:30 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-02-05 06:16 - 2015-07-10 12:04 - 00000000 ___HD C:\Program Files\WindowsApps
2016-02-04 15:20 - 2015-11-05 15:43 - 00000000 ____D C:\VM-W7-Ultimate
2016-02-04 15:20 - 2012-08-09 17:54 - 00000000 ____D C:\Users\Büro\AppData\Local\VMware
2016-02-04 15:18 - 2012-08-09 17:54 - 00000000 ____D C:\Users\Büro\AppData\Roaming\VMware
2016-02-04 06:48 - 2012-08-08 16:25 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-02-04 06:47 - 2012-08-18 06:13 - 00000000 ____D C:\Program Files (x86)\Java
2016-02-03 10:44 - 2012-10-06 11:14 - 00000000 ____D C:\Users\Büro\AppData\Roaming\TeamViewer
2016-02-03 07:48 - 2015-12-08 06:20 - 00001040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk
2016-02-03 07:48 - 2015-09-16 17:33 - 00000279 _____ C:\Users\Büro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Papierkorb.lnk
2016-02-03 07:48 - 2015-08-19 06:02 - 00002389 _____ C:\Users\Büro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-02-03 07:48 - 2015-08-19 05:54 - 00001552 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-02-03 07:48 - 2015-01-10 16:33 - 00001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nettalk.lnk
2016-02-03 07:48 - 2014-09-29 03:56 - 00001874 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark 2 Preview.lnk
2016-02-03 07:48 - 2014-09-29 03:56 - 00001585 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk
2016-02-03 07:48 - 2013-09-12 05:05 - 00001155 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ninja.lnk
2016-02-03 07:48 - 2012-08-12 13:55 - 00001262 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS5.lnk
2016-02-03 07:48 - 2012-08-12 13:55 - 00001169 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS5.lnk
2016-02-03 07:48 - 2012-08-12 13:54 - 00001353 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS5.exe.lnk
2016-02-03 07:48 - 2012-08-12 13:53 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS5.lnk
2016-02-03 07:48 - 2012-08-12 13:53 - 00000997 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
2016-02-03 07:48 - 2012-08-12 11:21 - 00002465 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller X.lnk
2016-02-03 07:48 - 2012-08-12 11:21 - 00002453 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat X Pro.lnk
2016-02-03 07:48 - 2012-08-11 12:13 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-02-03 07:48 - 2012-08-09 15:52 - 00002184 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Deinstallationsprogramm.lnk
2016-02-03 07:48 - 2012-08-09 15:52 - 00002125 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk
2016-02-03 07:48 - 2012-08-08 16:28 - 00001214 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD VDeck.lnk
2016-02-03 07:47 - 2015-12-24 19:39 - 00001799 _____ C:\Users\Public\Desktop\Xilinx ISE Design Suite 12.1.lnk
2016-02-03 07:47 - 2015-12-08 06:20 - 00001028 _____ C:\Users\Public\Desktop\TeamViewer 11.lnk
2016-02-03 07:47 - 2015-11-16 04:47 - 00002180 _____ C:\Users\Public\Desktop\devolo Cockpit.lnk
2016-02-03 07:47 - 2015-10-10 15:55 - 00001261 _____ C:\Users\Public\Desktop\VMware Workstation 12 Player.lnk
2016-02-03 07:47 - 2015-09-08 14:32 - 00001822 _____ C:\Users\Public\Desktop\iTunes.lnk
2016-02-03 07:47 - 2015-08-31 16:54 - 00002712 _____ C:\Users\Public\Desktop\MPLAB IPE v3.05.lnk
2016-02-03 07:47 - 2015-08-31 16:54 - 00002625 _____ C:\Users\Public\Desktop\MPLAB driver switcher.lnk
2016-02-03 07:47 - 2015-08-31 16:54 - 00002561 _____ C:\Users\Public\Desktop\MPLAB X IDE v3.05.lnk
2016-02-03 07:47 - 2015-06-13 07:48 - 00001143 _____ C:\Users\Public\Desktop\Packet Sender.lnk
2016-02-03 07:47 - 2015-02-19 17:57 - 00001232 _____ C:\Users\Public\Desktop\Target 3001! V17 discover.lnk
2016-02-03 07:47 - 2015-01-10 16:33 - 00001000 _____ C:\Users\Public\Desktop\Nettalk.lnk
2016-02-03 07:47 - 2014-07-02 04:37 - 00000995 _____ C:\Users\Public\Desktop\DVDFab 9.lnk
2016-02-03 07:47 - 2014-03-19 11:20 - 00001062 _____ C:\Users\Public\Desktop\PDF-Viewer.lnk
2016-02-03 07:47 - 2014-03-14 05:58 - 00002642 _____ C:\Users\Public\Desktop\Skype.lnk
2016-02-03 07:47 - 2014-01-14 17:34 - 00000929 _____ C:\Users\Public\Desktop\FILOU-NC12.lnk
2016-02-03 07:47 - 2014-01-09 06:29 - 00000997 _____ C:\Users\Public\Desktop\Cut2D 1.5.lnk
2016-02-03 07:47 - 2014-01-08 15:42 - 00002076 _____ C:\Users\Public\Desktop\StarMoney 9.0.lnk
2016-02-03 07:47 - 2013-12-30 15:48 - 00000911 _____ C:\Users\Public\Desktop\Repetier-Host.lnk
2016-02-03 07:47 - 2013-11-19 09:06 - 00002753 _____ C:\Users\Public\Desktop\DraftSight x64.lnk
2016-02-03 07:47 - 2013-09-12 05:05 - 00001143 _____ C:\Users\Public\Desktop\Ninja.lnk
2016-02-03 07:47 - 2013-08-26 19:25 - 00001240 _____ C:\Users\Public\Desktop\Renee Undeleter.lnk
2016-02-03 07:47 - 2013-08-21 12:23 - 00002012 _____ C:\Users\Public\Desktop\PE-DESIGN NEXT.lnk
2016-02-03 07:47 - 2013-03-13 17:30 - 00002034 _____ C:\Users\Public\Desktop\AutoCAD 2013.lnk
2016-02-03 07:47 - 2013-02-07 14:31 - 00001019 _____ C:\Users\Public\Desktop\iExplorer.lnk
2016-02-03 07:47 - 2013-01-03 09:03 - 00000991 _____ C:\Users\Public\Desktop\FRITZ!fax.lnk
2016-02-03 07:47 - 2012-11-29 06:55 - 00002098 _____ C:\Users\Public\Desktop\Atmel Studio 6.0.lnk
2016-02-03 07:47 - 2012-11-19 10:16 - 00001055 _____ C:\Users\Public\Desktop\Biet-O-Matic.lnk
2016-02-03 07:47 - 2012-10-26 16:09 - 00002140 _____ C:\Users\Public\Desktop\Brother Creative Center.lnk
2016-02-03 07:47 - 2012-10-20 18:22 - 00002099 _____ C:\Users\Public\Desktop\DWG TrueView 2013.lnk
2016-02-03 07:47 - 2012-08-29 11:47 - 00001206 _____ C:\Users\Public\Desktop\OptiCut 5.16b.lnk
2016-02-03 07:47 - 2012-08-28 13:51 - 00001123 _____ C:\Users\Public\Desktop\WinOLS.lnk
2016-02-03 07:47 - 2012-08-12 11:21 - 00002026 _____ C:\Users\Public\Desktop\Adobe Acrobat X Pro.lnk
2016-02-03 07:47 - 2012-08-10 09:48 - 00001372 _____ C:\Users\Public\Desktop\Offa.lnk
2016-02-03 07:47 - 2012-08-09 18:37 - 00002843 _____ C:\Users\Public\Desktop\Nero Burning ROM 11.lnk
2016-02-03 07:47 - 2012-08-09 12:05 - 00001244 _____ C:\Users\Public\Desktop\Target 3001! V15 professional.lnk
2016-02-03 07:47 - 2012-08-08 22:45 - 00000919 _____ C:\Users\Public\Desktop\TrueCrypt.lnk
2016-02-03 07:47 - 2012-08-08 21:37 - 00001152 _____ C:\Users\Public\Desktop\DYMO Label v.8.lnk
2016-02-03 07:47 - 2012-08-08 20:05 - 00000915 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-02-03 07:47 - 2012-08-08 16:28 - 00001202 _____ C:\Users\Public\Desktop\HD VDeck.lnk
2016-02-03 07:46 - 2015-12-28 07:25 - 00001420 _____ C:\Users\Büro\Desktop\Elnec PG4UW.lnk
2016-02-03 07:46 - 2015-12-24 19:44 - 00002107 _____ C:\Users\Büro\Desktop\iMPACT.lnk
2016-02-03 07:46 - 2015-12-23 05:11 - 00000983 _____ C:\Users\Büro\Desktop\VCDS Release 15.7.lnk
2016-02-03 07:46 - 2015-09-03 17:26 - 00001009 _____ C:\Users\Büro\Desktop\PIC C Compiler.lnk
2016-02-03 07:46 - 2015-02-19 17:57 - 00001021 _____ C:\Users\Büro\Desktop\ELECTRA_250.lnk
2016-02-03 07:46 - 2014-01-17 16:55 - 00001169 _____ C:\Users\Büro\Desktop\pronterface.lnk
2016-02-03 07:46 - 2014-01-08 16:56 - 00001378 _____ C:\Users\Büro\Desktop\slic3r.lnk
2016-02-03 07:46 - 2013-05-02 06:03 - 00001478 _____ C:\Users\Büro\Desktop\LaserWorkV5.lnk
2016-02-03 07:46 - 2013-01-21 18:47 - 00001019 _____ C:\Users\Büro\Desktop\1Password.lnk
2016-02-03 07:46 - 2012-12-27 21:02 - 00001362 _____ C:\Users\Büro\Desktop\Free Video Flip and Rotate.lnk
2016-02-03 07:46 - 2012-12-27 14:49 - 00001198 _____ C:\Users\Büro\Desktop\Format Factory.lnk
2016-02-03 07:46 - 2012-12-07 17:52 - 00001409 _____ C:\Users\Büro\Desktop\Internet Explorer (2).lnk
2016-02-03 07:46 - 2012-09-04 07:08 - 00000963 _____ C:\Users\Büro\Desktop\HTerm.lnk
2016-02-03 07:46 - 2012-08-19 05:44 - 00001349 _____ C:\Users\Büro\Desktop\Remote Desktop Connection.lnk
2016-02-03 07:46 - 2012-08-15 17:32 - 00001053 _____ C:\Users\Büro\Desktop\Free M4a to MP3 Converter.lnk
2016-02-03 07:46 - 2012-08-12 13:56 - 00001107 _____ C:\Users\Büro\Desktop\Adobe Photoshop CS5 (64 Bit).lnk
2016-02-03 07:46 - 2012-08-12 13:01 - 00001772 _____ C:\Users\Büro\Desktop\ViewMateDLX.lnk
2016-02-03 07:46 - 2012-08-09 22:00 - 00002190 _____ C:\Users\Büro\Desktop\UltraEdit.lnk
2016-02-03 07:46 - 2012-08-09 17:53 - 00001994 _____ C:\Users\Büro\Desktop\CorelDRW.lnk
2016-02-03 07:46 - 2012-08-09 15:52 - 00002044 _____ C:\Users\Büro\Desktop\JDownloader.lnk
2016-02-03 07:46 - 2012-08-09 10:36 - 00001062 _____ C:\Users\Büro\Desktop\PDF-Viewer.lnk
2016-02-03 07:46 - 2012-08-08 19:56 - 00000770 _____ C:\Users\Büro\Desktop\Total Commander.lnk
2016-02-03 07:46 - 2012-08-08 17:06 - 00003213 _____ C:\Users\Büro\Desktop\Microsoft Outlook 2010.lnk
2016-02-03 07:46 - 2012-08-08 17:06 - 00003029 _____ C:\Users\Büro\Desktop\Microsoft Excel 2010.lnk
2016-02-03 07:46 - 2012-08-08 17:06 - 00003011 _____ C:\Users\Büro\Desktop\Microsoft Word 2010.lnk
2016-02-03 07:46 - 2012-08-08 16:21 - 00001375 _____ C:\Users\Büro\Desktop\Internet Explorer.lnk
2016-02-03 06:48 - 2015-07-10 13:20 - 05042296 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-02-03 06:48 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\TAPI
2016-02-03 06:12 - 2014-01-17 15:33 - 00000715 _____ C:\Users\Büro\printrunconf.ini~bak
2016-02-03 06:12 - 2014-01-17 15:31 - 00000715 _____ C:\Users\Büro\printrunconf.ini
2016-01-31 12:02 - 2012-10-06 11:11 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2016-01-28 05:55 - 2012-08-10 09:43 - 00000000 ____D C:\Offa
2016-01-28 05:34 - 2015-07-10 11:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-01-26 06:19 - 2012-08-08 19:58 - 00000000 ____D C:\Users\Büro\AppData\Local\ElevatedDiagnostics
2016-01-21 11:36 - 2015-08-19 06:45 - 00000000 ___DC C:\WINDOWS\Panther
2016-01-21 11:35 - 2015-10-30 20:28 - 00000000 ___HD C:\$WINDOWS.~BT
2016-01-21 06:16 - 2012-08-08 22:47 - 00000000 ____D C:\Users\Büro\AppData\Local\GHISLER
2016-01-14 06:23 - 2012-08-08 20:37 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-01-14 06:23 - 2012-08-08 20:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-01-13 14:20 - 2012-08-08 20:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-01-13 14:18 - 2013-08-15 16:37 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-01-13 14:14 - 2012-08-08 20:00 - 143671360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-01-13 14:14 - 2009-07-14 03:34 - 00000503 _____ C:\WINDOWS\win.ini
2016-01-13 06:01 - 2014-01-14 17:45 - 00000000 ____D C:\ProgramData\TEMP
2016-01-13 05:52 - 2012-08-28 13:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinOLS
2016-01-11 08:24 - 2012-11-23 18:42 - 00000000 ____D C:\Program Files\Bonjour
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2012-08-08 21:37 - 2012-08-08 21:37 - 0035216 __RSH () C:\Program Files (x86)\DLS8Uninstall.log
2015-08-01 12:01 - 2015-12-18 12:54 - 12964920 _____ (Webroot Software, Inc.) C:\Program Files (x86)\Common Files\wruninstall.exe
2013-03-26 13:42 - 2015-08-31 14:50 - 0000132 _____ () C:\Users\Büro\AppData\Roaming\Adobe BMP Format CS5 Prefs
2013-05-10 05:10 - 2013-05-10 05:10 - 0000132 _____ () C:\Users\Büro\AppData\Roaming\Adobe GIF Format CS5 Prefs
2013-03-26 13:52 - 2015-05-27 18:22 - 0000132 _____ () C:\Users\Büro\AppData\Roaming\Adobe PNG Format CS5 Prefs
2013-06-17 16:23 - 2013-06-17 16:23 - 0000010 _____ () C:\Users\Büro\AppData\Roaming\r5.dll
2012-08-12 14:50 - 2016-02-09 05:26 - 0001456 _____ () C:\Users\Büro\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2013-03-12 12:24 - 2013-03-12 12:24 - 0000337 _____ () C:\Users\Büro\AppData\Local\Perfmon.PerfmonCfg
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-02-08 06:10
==================== Ende von FRST.txt ============================
|
|
09.02.2016, 17:06
| #13 |
| | smartnewtab und andere nervige Weiterleitungen im ChromeCode:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:27-01-2016
durchgeführt von Büro (2016-02-09 16:47:11)
Gestartet von E:\Downloads
Windows 10 Pro (X64) (2015-08-19 04:59:54)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-3089249572-137260113-2558678779-500 - Administrator - Disabled)
Büro (S-1-5-21-3089249572-137260113-2558678779-1000 - Administrator - Enabled) => C:\Users\Büro
DefaultAccount (S-1-5-21-3089249572-137260113-2558678779-503 - Limited - Disabled)
Gast (S-1-5-21-3089249572-137260113-2558678779-501 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Webroot SecureAnywhere (Enabled - Up to date) {66A6FE14-08CB-F415-3742-517201416109}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Webroot SecureAnywhere (Enabled - Up to date) {DDC71FF0-2EF1-FB9B-0DF2-6A007AC62BB4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
@BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.23 - GIGABYTE)
1Password 1.0.9.342 (HKLM-x32\...\1Password_is1) (Version: 1.0 - AgileBits)
Adobe Acrobat X Pro - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000005}) (Version: 10.1.4 - Adobe Systems)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.9.149 - Adobe Systems, Inc.)
Aficio BP20 Series PCL 6 (HKLM-x32\...\Aficio BP20 Series PCL 6) (Version: - )
Apple Application Support (32-Bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.4.4 - Atheros Communications Inc.)
Atmel Software Framework (HKLM-x32\...\{D9DD3CD8-A771-454C-A3AE-ABB29F4E59A2}) (Version: 3.5.205 - Atmel)
Atmel Studio 6.0 (HKLM-x32\...\{51CC3953-2D06-47FA-832A-B7FD24D01322}) (Version: 6.0.1996 - Atmel)
Atmel USB (HKLM-x32\...\{E8F8861D-98E0-43FF-9E48-AC236CC3BE4E}) (Version: 11.0 - Atmel)
AutoGreen B12.0206.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE)
AutoGreen B12.0206.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
AVM FRITZ!fax für FRITZ!Box (HKLM-x32\...\FRITZ! 2.0) (Version: - AVM Berlin)
bcTester 4.9 (de) (HKLM-x32\...\{B18D4784-45FF-4787-A81E-012873CA6515}) (Version: 4.9.2 - QS QualitySoft GmbH)
BdmToGo 1.81 (HKLM\...\{32272EF0-B263-4AB6-41BD-405820705243}_is1) (Version: 1.817 - EVC electronic)
Biet-O-Matic v2.14.10 (HKLM-x32\...\Biet-O-Matic v2.14.10) (Version: 2.14.10 - BOM Development Team)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Brother MFL-Pro Suite MFC-9460CDN (HKLM-x32\...\{979742CC-2CBB-49D8-9BEE-C2F7875F5393}) (Version: 1.0.30.0 - Brother Industries, Ltd.)
Cut2D 1.5 (HKLM-x32\...\Cut2D) (Version: 1.5 - Vectric)
cyberJack Base Components (HKLM-x32\...\{FC338210-F594-11D3-BA24-00001C3AB4DF}) (Version: 6.10.0 - REINER SCT)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Deep Exploration 6 CE (HKLM-x32\...\{E903CEC4-6822-47A4-9F6C-4A93C02119A3}) (Version: 6.3 - Right Hemisphere)
Deutsche Post E-Porto (HKLM-x32\...\{A51F5414-4A2B-45A0-8EF2-B4D29CFBCAE7}) (Version: 2.3.0 - Deutsche Post AG)
devolo Cockpit (HKLM-x32\...\dlancockpit) (Version: 4.3.1.0 - devolo AG)
DraftSight x64 (HKLM\...\{8EB86B18-38DB-4A2D-8559-35B6D1EC3A0A}) (Version: 11.0.1258 - Dassault Systemes)
DVDFab 9.1.5.6 (27/06/2014) (HKLM-x32\...\DVDFab 9_is1) (Version: - Fengtao Software Inc.)
DYMO Label v.8 (HKLM-x32\...\DYMO Label v.8) (Version: 8.3.0.1242 - Sanford, L.P.)
DYMO LabelWriter Drivers (HKLM\...\{CE16D92B-50F3-4FC5-B29C-13FAFEE1A6C6}) (Version: 8.3.0.443 - Sanford L.P.)
EAGLE 7.2.0 (HKLM-x32\...\EAGLE 7.2.0) (Version: 7.2.0 - CadSoft Computer GmbH)
Easy Tune 6 B12.0309.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE)
Easy Tune 6 B12.0309.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
ELECTRA 2.9.5 (HKLM-x32\...\ELECTRA_is1) (Version: - KONEKT)
Elnec Pg4uw ver. 3.20 (HKLM\...\Elnec Pg4uw_is1) (Version: - )
FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production)
FILOU-NC12 (HKLM-x32\...\{8FFC21E2-74EE-441C-A172-2DA244863F0C}_is1) (Version: - FILOU Software GmbH)
FormatFactory 3.0.1 (HKLM-x32\...\FormatFactory) (Version: 3.0.1 - Free Time)
Free M4a to MP3 Converter 7.1 (HKLM-x32\...\Free M4a to MP3 Converter_is1) (Version: - ManiacTools.com)
Free Video Flip and Rotate version 2.1.5.1212 (HKLM-x32\...\Free Video Flip and Rotate_is1) (Version: 2.1.5.1212 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.103 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
GrauTec version 14.10.2012 (HKLM\...\{1D3AE49C-0835-50EB-C6D0-5491B6A5D714}_is1) (Version: 14.10.2012 - GrauTec)
High-Definition Video Playback (x32 Version: 11.1.11100.4.196 - Nero AG) Hidden
Hotfix für Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (HKLM-x32\...\{8E87B944-4815-3C5E-947F-5035C9F64362}.KB947789) (Version: 1 - Microsoft Corporation)
iExplorer 3.2.1.5 (HKLM-x32\...\{7FD8B0C1-CDDA-4B4D-A577-B2E3570EA3A3}_is1) (Version: - Macroplant LLC)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.3.214 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation)
IsoBuster 3.2 (HKLM-x32\...\IsoBuster_is1) (Version: 3.2 - Smart Projects)
iTunes (HKLM\...\{BFEAB774-C7DC-4032-B05A-DA5F7CB7B365}) (Version: 12.2.2.25 - Apple Inc.)
Jabra PC Suite 2.14.5888 (HKLM-x32\...\{6D22DD53-EC7D-45E7-A996-A18CB7C8DFE9}) (Version: 2.14.5888.0 - GN Netcom A/S)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
JDownloader 0.9 (HKLM-x32\...\jdownloader09) (Version: 0.9 - AppWork GmbH)
JLink OB CDC Driver Package (HKLM\...\{85153CE3-6356-407F-A672-C1FA085FB031}) (Version: 1.2.2 - SEGGER)
Logitech Gaming Software 8.30 (HKLM\...\Logitech Gaming Software) (Version: 8.30.86 - Logitech Inc.)
LogWorks3 (HKLM\...\LogWorks3) (Version: 3.08 - Innovate! Technologies)
marvell 91xx driver (HKLM-x32\...\MagniDriver) (Version: 1.2.0.1010 - Marvell)
MC34063 Universal Calculator (HKLM-x32\...\{FFC12E35-0FF8-4E41-B703-0DB1487895DF}) (Version: 1.0.1 - ---)
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{77F1F8AD-51B8-4490-AEEC-BF480073E0FC}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{877B76B2-F83F-4F5A-B28D-3F398641ADB6}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Shell (Isolated) - ENU (HKLM-x32\...\{D64B6984-242F-32BC-B008-752806E5FC44}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU (HKLM-x32\...\{8E87B944-4815-3C5E-947F-5035C9F64362}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU (HKLM-x32\...\{76DAEC83-AF7B-333C-8A53-83D7C7D39199}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
MPLAB X IDE v3.05 (HKLM-x32\...\MPLAB X IDE v3.05 v3.05) (Version: v3.05 - Microchip)
MPLAB XC8 C Compiler (HKLM-x32\...\MPLAB XC8 C Compiler v1.35) (Version: v1.35 - Microchip)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MultiProg version 1.37.1.2 (HKLM-x32\...\{90F9C7B5-E80C-4D74-8E40-1AF3034B3951}_is1) (Version: 1.37.1.2 - Smok)
Nero 11 (HKLM-x32\...\{FC18AB8F-9BA3-423B-91F2-622990F57978}) (Version: 11.2.01000 - Nero AG)
Nero Backup Drivers (HKLM\...\{D600D357-5CB9-4DE9-8FD4-14E208BD1970}) (Version: 1.0.11100.8.0 - Nero AG)
Nettalk 6.7 (HKLM-x32\...\Nettalk_is1) (Version: - Nicolas Kruse)
Ninja 6.0.1 (HKLM-x32\...\{{BBA3D4C8-459A-4A26-8EB9-564846AB70AB}_is1) (Version: 4 - Global IP Telecommunications Ltd.)
ON_OFF Charge B11.1102.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
OptiCut 5.16b (HKLM-x32\...\OptiCoupe 5) (Version: 5.16.2.1 - Boole & Partners)
Packet Sender for Windows (HKLM-x32\...\{0CB04980-86BE-4CB4-8D74-F2EC5211B18C}}_is1) (Version: - Dan Nagle)
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.214.2 - Tracker Software Products Ltd)
PE-DESIGN NEXT (HKLM-x32\...\{041EDAC5-853E-4A10-A0C8-ED0CF7769306}) (Version: 9.01.0000 - Brother Industries, Ltd.)
PIC-C Compiler (HKLM-x32\...\PIC-C Compiler) (Version: 5 - Custom Computer Services, Inc.)
Pimp-My-Nav (HKLM-x32\...\{0CA82D20-95BC-4554-A61C-F4EA2FAA25D1}) (Version: 1.0.2.4 - hxxp://www.pimp-my-nav.com)
Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Renee Undeleter 2013.5.27.0 (HKLM-x32\...\{BECFEA3A-6E81-436B-9D2B-6B01185004A5}}_is1) (Version: 2013.5.27.0 - Rene.e Laboratory)
Repetier-Host Version 1.0.6 (HKLM\...\{1143F758-929B-4EEB-8784-46CCB622F037}_is1) (Version: 1.0.6 - repetier)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.111 - Skype Technologies S.A.)
StarMoney (x32 Version: 3.0.0.124 - StarFinanz) Hidden
StarMoney (x32 Version: 4.0.0.203 - StarFinanz) Hidden
StarMoney 9.0 (HKLM-x32\...\{48148E76-6BCA-4BDC-B889-860B385DCCC7}) (Version: 9.0 - Star Finanz GmbH)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Target 3001! V15 professional (HKLM-x32\...\Target 3001! V15 professional) (Version: - Ing. Buero FRIEDRICH)
Target 3001! V17 discover (HKLM-x32\...\Target 3001! V17 discover) (Version: - Ing. Buero FRIEDRICH)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.53254 - TeamViewer)
Total Commander (Remove or Repair) (HKLM-x32\...\Totalcmd) (Version: 8.01 - Ghisler Software GmbH)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.01 - Ghisler Software GmbH)
TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
UltraEdit (HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\InstallShield_{635A6AF2-63AF-4C1C-AF57-BDC8AF6D397D}) (Version: 18.20.1021 - IDM Computer Solutions, Inc.)
UltraEdit (x32 Version: 18.20.1021 - IDM Computer Solutions, Inc.) Hidden
USB to UART Bridge (Driver Removal) (HKLM-x32\...\SLABCOMM&10C4&EA60) (Version: - Team Orion)
VBA (2627.01) (x32 Version: 6.03.00.9402 - Microsoft Corporation) Hidden
VBA (2701.01) (x32 Version: 6.03.00.9402 - Microsoft Corporation) Hidden
VCDS Release 11.11.6 (HKLM-x32\...\VCDS Release 11.11) (Version: 11.11.6 - Ross-Tech)
VCDS Release 12.12.3 (HKLM-x32\...\VCDS Release 12.12) (Version: 12.12.3 - Ross-Tech)
VCDS Release 15.7.3 (HKLM-x32\...\VCDS Release) (Version: 15.7.3 - Ross-Tech)
Vectric Shell Extensions 1.2 (HKLM-x32\...\VectricThumbnailShellExt) (Version: - Vectric)
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
ViewMate Deluxe 11.4 (HKLM-x32\...\{42242DD8-CCEB-4D4A-AEEF-9B6D48B4F41F}) (Version: 11.4.15 - PentaLogix)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
Visual Studio-Tools für Office System 3.0 Runtime Language Pack - DEU (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime Language Pack - DEU) (Version: - Microsoft Corporation)
VLC media player 2.0.2 (HKLM\...\VLC media player) (Version: 2.0.2 - VideoLAN)
VMware Player (HKLM\...\{DCA4824C-42E8-4911-9C10-5BB43A315625}) (Version: 12.0.0 - VMware, Inc.)
Webroot SecureAnywhere (HKLM-x32\...\WRUNINST) (Version: 9.0.7.46 - Webroot)
Welcome App (Start-up experience) (x32 Version: 11.0.23500.0.0 - Nero AG) Hidden
Windows Driver Package - Arduino LLC (www.arduino.cc) Arduino USB Driver (01/04/2013 1.0.0.0) (HKLM\...\1E3EA5624DD04BEFECF3FFF6D3A21CCE9CD70A91) (Version: 01/04/2013 1.0.0.0 - Arduino LLC (www.arduino.cc))
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows-Treiberpaket - Ross-Tech HIDClass (02/13/2014 6.3.0.2) (HKLM\...\5E356C0921BECEC7743BAC21F6B7A5775044AFC0) (Version: 02/13/2014 6.3.0.2 - Ross-Tech)
Windows-Treiberpaket - Ross-Tech USB Driver Package (05/12/2014 2.10.00) (HKLM\...\88B02C4BD09AA7910C55C4E74BE8F036244B5CF9) (Version: 05/12/2014 2.10.00 - Ross-Tech)
Windows-Treiberpaket - Ross-Tech USB Driver Package (06/16/2010 2.06.02) (HKLM\...\F2D626F9A8E5C6126BED6EBD3E3504D0B2AB8443) (Version: 06/16/2010 2.06.02 - Ross-Tech)
Windows-Treiberpaket - Segger (jlink) USB (04/11/2012 2.6.8.2) (HKLM\...\419546AE8E4244C647A348987F769803F43B9C4F) (Version: 04/11/2012 2.6.8.2 - Segger)
Windows-Treiberpaket - SEGGER (usbser) Ports (01/25/2012 6.0.2600.4) (HKLM\...\BD6BF8BBF7BE0D0091163F649A1A423B7EB9D4F1) (Version: 01/25/2012 6.0.2600.4 - SEGGER)
Windows-Treiberpaket - Silicon Laboratories (silabenm) Ports (10/18/2013 6.6.1.0) (HKLM\...\F92C2D6CB4EA0EE558BDF5F8BDD69083DFC62179) (Version: 10/18/2013 6.6.1.0 - Silicon Laboratories)
WinOLS 3.48.00 (HKLM\...\{32EF2270-B623-4B6A-B41D-400524582073}_is1) (Version: 3.48.00 - EVC electronic)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Wireshark 1.12.1 (64-bit) (HKLM-x32\...\Wireshark) (Version: 1.12.1 - The Wireshark developer community, hxxp://www.wireshark.org)
Xilinx ISE 11 (HKLM-x32\...\Xilinx ISE 11.1) (Version: - )
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{12545889-6D32-4424-9967-1E1D7BD1F809}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{1D625598-C876-4C51-8EF5-F9D8F96F62AA}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{1D6DFD6A-9E16-435A-9327-6FFEC6BA372F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{1E8A29BA-827D-4031-A4A3-AE7999B402F6}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{1EA072EE-57FD-495E-889C-8243C3BDBDBC}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{1FD7F53F-7ED5-439C-9A77-A3821CD09E98}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{20E47D5B-529A-45BD-8E77-BF1A3064A008}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{2709544A-5B24-4F9F-A5DA-CEC7297D3A4E}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{2BCA857B-A18B-4AFA-B183-CC0E49C12058}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{2C74F89E-7421-46B4-BA54-F86F1BD9F237}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{2C7D1157-7D50-4A88-9777-5EBBA3189AB8}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{33DDB83C-9959-4AC1-990C-00D28FFBB37F}\InprocServer32 -> C:\Users\Büro\AppData\Local\Microsoft\Internet Explorer\Downloaded Program Files\LogitechDeviceDetection64.ocx (Logitech, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{3497C2EC-5684-4B21-AF74-F6760E0221DC}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{38C8B14E-7879-4DA9-8C3F-8CAAC359293A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{40770568-0D5E-49D4-BE47-BC47A4F0B0A4}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{44A52280-AE56-490D-890C-89FB7279ED6B}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{59A224A2-BEF8-4C89-96E0-83A5411ABB6C}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{622F6193-E4DD-46E6-BC66-2ED88E9FD28D}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{6451051B-AD22-4C6A-ACCE-013A0E1DDBC3}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{64B99FDB-1D85-447F-98C7-569DBDA723DB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{6BCE6F6E-C050-4F39-BD98-E2743949F724}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{6F56D7C9-18DD-4C15-9FA8-C54E3610EC40}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{70DBCAE8-8C2B-450C-9E1D-43E4686C6512}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{713C0E8A-5AE8-4695-B442-5ED6C4FE5C42}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{72EFC580-D085-4B81-8C55-26A79E445338}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{750AEC19-2E4C-4ED9-9B9F-F9CAFCD060F3}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{7BA16B3F-1AB3-4BD7-B959-52C4B8504EE9}\InprocServer32 -> AcInetUI.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{834CE679-2E47-49DE-9E41-FEC87E9192EB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{849AFB5B-D6C9-4924-A712-F7118FF9611F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{85452F88-5071-492E-B850-2E3C586DCBD8}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{87F5CF8F-A06D-498F-A05F-E520E6B570DB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{89F0FC31-3B1D-494B-A75B-6BD4FA527B8A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{8AA16DFC-DFC6-4B51-8FA2-A5D812BE33BF}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{8ED07FEF-E1B0-4CC3-B2BA-D354828AB952}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{988F4102-E6E3-4282-ACAC-55270827F2A8}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{9906CDFC-DB2C-4126-9422-13139B148495}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{9A21C6C5-27FC-4442-8590-575E7AFD73BB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{9ECF83FB-23C5-43B6-83DE-93CFBDD74D4A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{A58F47CC-FF65-4152-B0B1-666C643A5BFC}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{A6A3D586-44CF-44C2-A92C-620BB713B4F2}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{ABBE3F83-D585-4A50-9B69-198B0F566F2E}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{AC5CECFA-F03A-41D2-A89C-704C44935941}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{B1560245-190E-4BBD-81DF-9B642D0E5325}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{B2A579E0-A797-40B1-8AEE-A8F6404719F8}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{B47196BC-D4AB-41BB-A771-543D67CFC9F5}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{B53CEF4B-1A13-49DE-BBC5-A7100FB2F38C}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{B5EE2B68-9A23-4BCD-BB77-FEA6DFB24DD6}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{b5eedee0-c06e-11cf-8c56-444553540000}\InprocServer32 -> C:\Program Files (x86)\IDM Computer Solutions\UltraEdit\ue64ctmn.dll ()
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{B80687F9-FA4C-4735-9DC4-E5715F2BC698}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{BAE5802A-CF21-4F9C-AE04-D98F4036AC31}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{BBF6A206-CB04-479D-96AE-349E1E83319A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{BC71DEA1-D6FB-48B8-AB06-D151C81BBCDD}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{BF224DC3-B602-4EEE-BFE9-9E4E0AED6837}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{BF4CC07E-E9BB-40D6-873F-855B211033B9}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{C061C82C-D041-4214-BB07-B608107CEFCB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{C2D4ACCC-A3D1-4A0A-AD59-0DD8BA3D5EE1}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{F14E5118-342E-45E8-B99F-B5786E4F4DCA}\InprocServer32 -> C:\Users\Büro\AppData\Local\Microsoft\Internet Explorer\Downloaded Program Files\LogitechDeviceDetection64.ocx (Logitech, Inc.)
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3089249572-137260113-2558678779-1000_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1}\InprocServer32 -> axdb.dll => Keine Datei
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {03DD5FF3-B8D3-47AF-A439-CC57F35C99B3} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {049D91C7-AAF7-4F9D-AA3F-2FE0D0BC993F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-20] (Google Inc.)
Task: {0503F16E-641C-474E-984C-2FD1DFC49477} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-01-13] (Microsoft Corporation)
Task: {063C81C4-45B0-4D1E-B593-2D2C192565ED} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {2133FE1B-8AD1-42EF-A218-C7EAC8FC8E67} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {23A07DDB-0D69-4055-9D02-4E1BADE2AC50} - System32\Tasks\AdobeAAMUpdater-1.0-BUERO-PC-Büro => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-09-16] (Adobe Systems Incorporated)
Task: {29DDAD53-A692-46D1-946C-A9758C67D60D} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {2E8142E8-2377-47ED-8425-F21CB68AC86B} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {361E3EB0-3FF8-4150-9BBF-7D01F48303C5} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {43800D2C-A3B7-48BA-8B3E-7B78496B6102} - System32\Tasks\{A0B6AB9C-B638-4D31-BA5D-555730ABCE81} => pcalua.exe -a E:\8000er\FRITZ!fax_3.07.04.exe -d C:\Users\Büro\Desktop
Task: {44D8986D-C5A2-4396-BF22-43C5DF1DDED1} - System32\Tasks\{85ACD8CE-ACB6-42D9-9527-93EDBE21ABD9} => pcalua.exe -a E:\eagle-win-7.2.0.exe -d E:\
Task: {45774965-2103-48BD-9F7A-E187774982E3} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {4746D36A-CBC6-4F1E-93AE-5ABA931B820F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {4803FF7F-91DF-4184-836B-982E42A1EBC1} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {48CBCDE2-5AE5-43F8-9EF0-6D18525C4B82} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {4A2C2E50-D2C1-4C77-BA64-7303C1D66576} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {4DA79C2B-C5F2-4283-B459-54B231642A77} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {52E7A03F-829F-4E1A-BA5D-3A90B10389C6} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {5F91260E-99C4-48F3-87D3-007E82381DB1} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {60725D03-6821-46B4-8D84-22B13B6385B6} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe
Task: {65373BF8-BB81-43E9-BFB1-FF8D7EE8B428} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {6E129F1E-843B-4D2C-B53C-15769D65D47D} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {77472836-953E-44C2-990D-CDFCFB451503} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {7BE61C0D-BF87-4004-9557-2E4A39D2F8D6} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {86FB8CD5-E50E-4C55-9551-73204DB9F81B} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {95C64EFB-9E0F-4951-8DB5-A8E61C409317} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {9AF3E889-F68C-4AE0-9730-AA14A79C5CD0} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {A0FF1C4C-B44D-432C-AFCB-8A38CAAB8ADC} - \Microsoft\Windows\File Classification Infrastructure\Property Definition Sync -> Keine Datei <==== ACHTUNG
Task: {A20B2CAE-96B0-4388-B8C9-A8AC43E1FEAA} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {A30F41AA-BC63-4FE7-8D7B-637E954C89A2} - \AutoKMS -> Keine Datei <==== ACHTUNG
Task: {A4DD4FB9-FE45-467C-B034-17187C39E411} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {A5FFDE7D-2495-4F05-91C5-6B9C1F28AA3F} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {A7974412-8058-43BB-9E49-D286FA5695D7} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {A86CBF6B-4246-44B7-A2B8-91872DE7F7CF} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {AF92098A-EFF3-4ED4-978A-7D20E023C310} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {B66B03DA-53B8-4648-B691-EAD45B65C0DD} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {C15279FB-BE1D-434D-BCF3-0E6E2F90C1EB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-20] (Google Inc.)
Task: {C357E8DC-6028-43D3-95F0-740146DB4CD2} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {CA044463-1333-4C39-8A80-FC515298EC45} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {D34906B1-24A7-48FB-842E-A23BC34B3A2D} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {DEDC1925-05C5-44BB-BD79-6D934426DB05} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {E4B1F69C-A8FC-4012-A90C-594E604BA81B} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {F56E9DA0-01F1-42ED-BF35-3B6B6680F37A} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\Users\Public\Desktop\Xilinx ISE Design Suite 12.1.lnk -> C:\Xilinx\12.1\ISE_DS\settings64.bat ()
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-08-19 06:21 - 2015-07-15 03:04 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
2012-08-08 21:19 - 2007-05-08 17:55 - 00022016 _____ () C:\WINDOWS\System32\bp20l6.dll
2013-01-03 09:03 - 2006-02-23 11:35 - 00020480 _____ () C:\WINDOWS\System32\FritzColorPort64.dll
2013-01-03 09:03 - 2006-02-22 10:39 - 00020480 _____ () C:\WINDOWS\System32\FritzPort64.dll
2015-03-20 17:12 - 2015-03-20 17:12 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-05-15 15:26 - 2015-05-15 15:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-08-19 06:21 - 2015-08-11 10:14 - 00404480 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll
2013-08-27 18:32 - 2013-08-27 18:32 - 03466240 _____ () C:\Program Files\Dassault Systemes\DraftSight\bin\QtCore4.dll
2013-08-27 18:30 - 2013-08-27 18:30 - 00548864 _____ () C:\Program Files\Dassault Systemes\DraftSight\bin\QtXml4.dll
2013-08-27 18:30 - 2013-08-27 18:30 - 01322496 _____ () C:\Program Files\Dassault Systemes\DraftSight\bin\QtNetwork4.dll
2012-10-26 16:08 - 2010-03-16 00:18 - 00143360 _____ () C:\WINDOWS\system32\BrSNMP64.dll
2015-10-01 05:13 - 2015-09-17 07:48 - 02494712 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2015-10-01 05:13 - 2015-09-17 07:48 - 02494712 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-01 05:13 - 2015-09-17 06:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-12-09 07:25 - 2015-11-25 05:20 - 06569472 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-12-09 07:24 - 2015-11-25 05:17 - 00471040 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-12-09 07:24 - 2015-11-25 05:17 - 01808384 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-10-01 05:13 - 2015-09-17 06:43 - 02274816 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2014-07-31 04:19 - 2011-01-13 10:44 - 00232800 _____ () C:\Program Files (x86)\StarMoney 9.0\ouservice\PATCHW32.dll
2015-08-14 13:03 - 2015-08-14 13:03 - 01301696 _____ () C:\Program Files (x86)\VMware\VMware Player\libxml2.dll
2012-10-26 16:08 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2015-11-05 14:30 - 2015-11-05 14:30 - 00172032 _____ () C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\IsdiInterop\4e35df91c2e6359b56939d1132a01c13\IsdiInterop.ni.dll
2012-08-08 16:28 - 2011-11-29 19:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-08-08 16:26 - 2011-12-16 09:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2016-01-11 10:36 - 2016-01-11 10:36 - 00932032 ____R () C:\Program Files (x86)\Skype\Phone\ssScreenVVS2.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData\TEMP:26DF9837
AlternateDataStreams: C:\ProgramData\TEMP:E8956AB5
AlternateDataStreams: C:\ProgramData\TEMP:EFB09287
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
HKU\.DEFAULT\Software\Classes\.exe: exefile => "%1" %* <===== ACHTUNG
HKU\.DEFAULT\Software\Classes\exefile: "%1" %* <===== ACHTUNG
HKU\S-1-5-19\Software\Classes\.exe: exefile => "%1" %* <===== ACHTUNG
HKU\S-1-5-19\Software\Classes\exefile: "%1" %* <===== ACHTUNG
HKU\S-1-5-20\Software\Classes\.exe: exefile => "%1" %* <===== ACHTUNG
HKU\S-1-5-20\Software\Classes\exefile: "%1" %* <===== ACHTUNG
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\Software\Classes\.exe: exefile => "%1" %* <===== ACHTUNG
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\Software\Classes\exefile: "%1" %* <===== ACHTUNG
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\juprowa.net -> hxxps://services.juprowa.net
IE trusted site: HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\meineschufa.de -> hxxps://meineschufa.de
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2016-02-08 17:41 - 00000793 ____A C:\WINDOWS\system32\Drivers\etc\hosts
# 127.0.0.1 localhost
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Büro\AppData\Local\Microsoft\Windows\Themes\Infiniti\DesktopBackground\w02.jpg
DNS Servers: 192.168.23.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: ) (ConsentPromptBehaviorUser: ) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\Services: XblAuthManager => 3
MSCONFIG\Services: XblGameSave => 3
MSCONFIG\Services: XboxNetApiSvc => 3
MSCONFIG\startupfolder: C:^Users^Büro^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^RT-Updater.lnk => C:\Windows\pss\RT-Updater.lnk.Startup
MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
MSCONFIG\startupreg: Adobe Acrobat Speed Launcher => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: DLSService => "C:\Program Files (x86)\DYMO\DYMO Label Software\DLSService.exe"
MSCONFIG\startupreg: DymoQuickPrint => "C:\Program Files (x86)\DYMO\DYMO Label Software\DymoQuickPrint.exe" /startup
MSCONFIG\startupreg: HDAudDeck => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: NBAgent => "C:\Program Files (x86)\Nero\Nero 11\Nero BackItUp\NBAgent.exe" /WinStart
MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
HKLM\...\StartupApproved\Run32: => "Agile1pAgent"
HKLM\...\StartupApproved\Run32: => "USB3MON"
HKLM\...\StartupApproved\Run32: => "Adobe ARM"
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\StartupApproved\Run: => "DymoQuickPrint"
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\StartupApproved\Run: => "NINJA.EXE"
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\StartupApproved\Run: => "CrashService"
HKU\S-1-5-21-3089249572-137260113-2558678779-1000\...\StartupApproved\Run: => "SpybotPostWindows10UpgradeReInstall"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [UDP Query User{21E98E8A-6EFF-4186-B4FA-F281F01DA301}C:\program files (x86)\tcpudpdbg\tcpudpdbg.exe] => (Block) C:\program files (x86)\tcpudpdbg\tcpudpdbg.exe
FirewallRules: [TCP Query User{246330E9-BEE2-483D-8AA5-2732F8B1D750}C:\program files (x86)\tcpudpdbg\tcpudpdbg.exe] => (Block) C:\program files (x86)\tcpudpdbg\tcpudpdbg.exe
FirewallRules: [{0679252E-2029-494E-A29C-8AF05F68B9C8}] => (Block) C:\program files (x86)\packetsender\packetsender.exe
FirewallRules: [{4578ADC6-2148-4B61-A9A9-AE0CB86F4380}] => (Block) C:\program files (x86)\packetsender\packetsender.exe
FirewallRules: [UDP Query User{6B68782D-3C48-4B57-95F2-10B04E0542CF}C:\program files (x86)\packetsender\packetsender.exe] => (Allow) C:\program files (x86)\packetsender\packetsender.exe
FirewallRules: [TCP Query User{CB6D25CF-454A-4021-82CB-0616962C87A1}C:\program files (x86)\packetsender\packetsender.exe] => (Allow) C:\program files (x86)\packetsender\packetsender.exe
FirewallRules: [{A0B4F3E0-F585-446D-B18F-447C70940D82}] => (Allow) C:\Program Files (x86)\StarMoney 9.0\app\StarMoney.exe
FirewallRules: [{83FEB2D8-F352-430A-BD7A-D4CE35E5C057}] => (Allow) C:\Program Files (x86)\StarMoney 9.0\app\StarMoney.exe
FirewallRules: [{730B5EFE-3FF3-4FB1-A633-16307DCBD537}] => (Allow) C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{73A4F52A-FD3B-495A-BC89-4C60E567D71F}] => (Allow) C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{609D624C-77EB-4700-9EC8-EB9431BE902C}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\CTI\xcti.exe
FirewallRules: [{B6D59BDA-A61E-4C59-A24D-F2DDD71640F9}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\CTI\xcti.exe
FirewallRules: [{02BFDB24-6ACB-41CD-99BD-75A325272CD8}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\USB\Jabra32.exe
FirewallRules: [{95CCAA31-B582-4DEF-AF58-CD5231C57A87}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\USB\Jabra32.exe
FirewallRules: [{60A43653-E1BF-4826-8093-B4C6559DB7CE}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\FV32.exe
FirewallRules: [{15BA25CF-503C-4C16-9E29-C9178308750D}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\FV32.exe
FirewallRules: [{CCE0C31E-DCCA-4D98-AA15-1819BCB6A98D}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\xproxy.exe
FirewallRules: [{2A837DBA-A1D1-4608-AC76-B00D569B4DE2}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\xproxy.exe
FirewallRules: [{C955D636-1B20-4F85-A33D-08D75A74B860}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\Ninja.exe
FirewallRules: [{C5E2F529-BFBA-4031-8669-7FC0713D029C}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\Ninja.exe
FirewallRules: [{A76A8D8B-811B-4AFC-B4D4-B616A85347EE}] => (Block) C:\program files\logworks3\logworks3.exe
FirewallRules: [{D768865D-2B49-4A46-9DF1-72D66F91AFBF}] => (Block) C:\program files\logworks3\logworks3.exe
FirewallRules: [UDP Query User{8B797520-2991-44B5-88A7-D267C5914F9F}C:\program files\logworks3\logworks3.exe] => (Allow) C:\program files\logworks3\logworks3.exe
FirewallRules: [TCP Query User{E5A8BD93-BE9C-4A62-8441-B01B5AEA14CB}C:\program files\logworks3\logworks3.exe] => (Allow) C:\program files\logworks3\logworks3.exe
FirewallRules: [{9E742219-4E48-4F48-A13C-016A652C4780}] => (Block) C:\program files\logworks3\lmconfig331.exe
FirewallRules: [{A48B3FFF-B394-42C2-97DB-BB82ED40D7CF}] => (Block) C:\program files\logworks3\lmconfig331.exe
FirewallRules: [UDP Query User{111DE63F-8A17-4C6B-BFAF-CC82A869E32A}C:\program files\logworks3\lmconfig331.exe] => (Allow) C:\program files\logworks3\lmconfig331.exe
FirewallRules: [TCP Query User{F644650D-4355-42F8-A165-10CA6BD5372C}C:\program files\logworks3\lmconfig331.exe] => (Allow) C:\program files\logworks3\lmconfig331.exe
FirewallRules: [{F982A6CB-B1C4-4BEB-9E78-4D97FB64F1C6}] => (Allow) LPort=50248
FirewallRules: [{A4EFC622-ECB3-4982-B218-C3AB3F4AFAA1}] => (Block) C:\program files (x86)\fritz!\frifax32.exe
FirewallRules: [{A6EE39CF-8413-44A3-B8E7-C8486BE4BDF0}] => (Block) C:\program files (x86)\fritz!\frifax32.exe
FirewallRules: [UDP Query User{122B80AF-D136-48F4-8DBF-E75B15A68CBA}C:\program files (x86)\fritz!\frifax32.exe] => (Allow) C:\program files (x86)\fritz!\frifax32.exe
FirewallRules: [TCP Query User{576B0D35-51B4-407D-B287-65E0E108F3CF}C:\program files (x86)\fritz!\frifax32.exe] => (Allow) C:\program files (x86)\fritz!\frifax32.exe
FirewallRules: [UDP Query User{A22FA895-96FA-453A-88A8-0E94B293712E}C:\temp\_istmp1.dir\_ins5576._mp] => (Block) C:\temp\_istmp1.dir\_ins5576._mp
FirewallRules: [TCP Query User{5D494054-C955-4159-AB87-246CBD4F69AB}C:\temp\_istmp1.dir\_ins5576._mp] => (Block) C:\temp\_istmp1.dir\_ins5576._mp
FirewallRules: [{E71ED175-8BA4-488E-B23A-BD6242DD0EDC}] => (Block) C:\program files (x86)\atmel\atmel studio 6.0\atmelstudio.exe
FirewallRules: [{1BBA72F3-236D-43D0-99BA-AE1E140C1A76}] => (Block) C:\program files (x86)\atmel\atmel studio 6.0\atmelstudio.exe
FirewallRules: [UDP Query User{F2C2A45B-7C28-4A3F-8A4D-AD6C78580921}C:\program files (x86)\atmel\atmel studio 6.0\atmelstudio.exe] => (Allow) C:\program files (x86)\atmel\atmel studio 6.0\atmelstudio.exe
FirewallRules: [TCP Query User{576EFB45-E1CB-4D45-8A28-717F42E0957F}C:\program files (x86)\atmel\atmel studio 6.0\atmelstudio.exe] => (Allow) C:\program files (x86)\atmel\atmel studio 6.0\atmelstudio.exe
FirewallRules: [{F45C30CD-46DF-405E-B460-282607F10FA5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{6CD567AB-20F0-40E7-9E71-578D5C9B4856}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{15C8772E-F9C2-4CD3-8217-DE85FC801BBC}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{48E6D8B6-132E-4EB2-8309-CEA0154BA2E9}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{AA610243-93AB-422C-9133-EE27FB9AB1A5}] => (Allow) LPort=54925
FirewallRules: [{154A30E4-C0B8-4170-A9B7-15818CECCBC5}] => (Allow) C:\Program Files (x86)\Brother\Brmfl10e\FAXRX.exe
FirewallRules: [{646E6CF0-54E2-431F-8F8C-C682D1AE5B82}] => (Allow) C:\Program Files (x86)\Brother\Brmfl10e\FAXRX.exe
FirewallRules: [{97E25129-5BBE-45A2-82D1-86B7C122F09F}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{F531E2D7-C7CF-4E56-8656-AF5519E4288C}] => (Allow) LPort=1900
FirewallRules: [{C2491CDE-B196-4BFF-B859-F944E702A735}] => (Allow) LPort=2869
FirewallRules: [{D1E97FC9-7D32-40C2-A3D6-C974B9965B72}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{D53839F0-86BD-461D-8784-2C6ABB5B47C8}] => (Block) C:\program files\totalcmd\totalcmd64.exe
FirewallRules: [{9F85E56B-C61B-4F64-A5B9-81D1729A8151}] => (Block) C:\program files\totalcmd\totalcmd64.exe
FirewallRules: [UDP Query User{706FFC69-B2E7-4439-968F-361BF1ABD81B}C:\program files\totalcmd\totalcmd64.exe] => (Allow) C:\program files\totalcmd\totalcmd64.exe
FirewallRules: [TCP Query User{9C8F64BE-8632-413B-8C00-CB63ED873AE3}C:\program files\totalcmd\totalcmd64.exe] => (Allow) C:\program files\totalcmd\totalcmd64.exe
FirewallRules: [{D1662C48-C272-4618-A29C-D7331EC4A8A9}] => (Block) C:\program files (x86)\gigabyte\@bios\gwflash.exe
FirewallRules: [{2C06A304-B5A2-4F75-A44F-119870668B40}] => (Block) C:\program files (x86)\gigabyte\@bios\gwflash.exe
FirewallRules: [UDP Query User{D316D5A5-981E-4731-85EC-00FD2B3064BD}C:\program files (x86)\gigabyte\@bios\gwflash.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\gwflash.exe
FirewallRules: [TCP Query User{1923C3CF-66FD-44CE-B1AD-FA3F3F1996A9}C:\program files (x86)\gigabyte\@bios\gwflash.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\gwflash.exe
FirewallRules: [{822A84BE-E1F8-4F1F-A4AB-01B3DE4968BE}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\CTI\xcti.exe
FirewallRules: [{A84C1D9E-A82C-4686-A9DE-F616FBE2DC3D}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\CTI\xcti.exe
FirewallRules: [{A5F3B4AC-2A2E-4BD6-8212-9D121BD84F5C}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\USB\Jabra32.exe
FirewallRules: [{D081090B-C3EF-4428-A323-4A4CD8A7C3DD}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\USB\Jabra32.exe
FirewallRules: [{9EF768C8-07A0-45F6-B6AB-0192D64A124A}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\FV32.exe
FirewallRules: [{DAFF3174-904F-4BDA-9481-EEA9443AABF3}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\FV32.exe
FirewallRules: [{88F288F8-05F3-42B2-9DFF-128E1A7BC8FD}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\xproxy.exe
FirewallRules: [{DFBB4ED5-F306-4CA3-B4CF-725B255A77E4}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\xproxy.exe
FirewallRules: [{BA4CCB4D-26C8-45A9-BE3D-74A42A0C995E}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\Ninja.exe
FirewallRules: [{32A4CC95-8BB4-409E-8C57-0EA5F84E1770}] => (Allow) C:\Program Files (x86)\Ninja\Ninja\Ninja.exe
FirewallRules: [UDP Query User{C42CE4E3-909B-4078-BAF1-C16B444A7C4F}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{992ED9D7-FDF2-4A10-9AE4-E77E04776BEF}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{FDC3242B-1E5A-4A26-94BF-A6BBD5AA1D27}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [TCP Query User{B97A3F77-8FA4-4C2C-BED7-FBE715596251}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [{84E8EF62-9B62-423C-8EC7-304E497C65BC}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{86B4CE88-E2EA-46E3-878B-59313BD6063A}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{A4A740DF-1937-4F6C-A019-A8DBBD65E5F3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{54D142A1-A302-4FD8-932B-34E3684296E4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{3D22E0D5-C50D-4AC5-BD1B-99709F2E98A5}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{7D36C337-32CA-4DC9-A3C8-35C6BE87F698}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{23053DBE-1A44-41E7-B35E-F892F3A0BDCF}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
FirewallRules: [{39C0FE5E-5C47-47E8-8898-E8BB0B1C3940}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
FirewallRules: [{FAD590A7-5D24-40CE-A4D2-28FFD2271572}] => (Allow) LPort=4979
FirewallRules: [{7886DDD8-3BFD-42A1-9706-B131D2C4EADB}] => (Allow) LPort=4979
FirewallRules: [{62A14F7B-EB59-49CB-AA19-A8B398009C2C}] => (Allow) LPort=135
FirewallRules: [{689FD638-7EC3-47F2-BC07-9E07DC1C61AD}] => (Allow) C:\Program Files\Microsoft SQL Server\MSSQL10_50.SIPLACE_2008R2EX\MSSQL\Binn\sqlservr.exe
FirewallRules: [{49134DC7-5192-49C8-8250-A59EF4D5AF37}] => (Allow) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
FirewallRules: [{C452754C-D83A-40B1-9103-5A82918A821F}] => (Allow) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
FirewallRules: [{CDC04001-AACF-4EDD-AFB9-5AC6E853761B}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
FirewallRules: [{3C7EE7CA-9DC7-4116-8D2F-6CAB1E71812B}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
FirewallRules: [TCP Query User{F433835A-C4A0-44E8-995F-15548F4DF2CA}E:\fritz\fritz.box_fon_wlan_7390.annexb.06.30.recover-image.exe] => (Allow) E:\fritz\fritz.box_fon_wlan_7390.annexb.06.30.recover-image.exe
FirewallRules: [UDP Query User{04C1D453-B2EE-4206-A0DB-3F60B9414E54}E:\fritz\fritz.box_fon_wlan_7390.annexb.06.30.recover-image.exe] => (Allow) E:\fritz\fritz.box_fon_wlan_7390.annexb.06.30.recover-image.exe
FirewallRules: [{5DED0F48-53C2-4A02-8123-C9D84561760B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{FB146986-7526-4DEB-ACEA-3515A6D34967}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E14509F9-22BA-4AAC-98D5-8ECABC95D0A7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{282986B1-A3F8-4ED8-BB94-F9A9AAA99AFC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [TCP Query User{437C02ED-2DC5-46DA-B0F2-43084ACC58C4}C:\xilinx\11.1\ise\bin\nt\unwrapped\cableserver.exe] => (Allow) C:\xilinx\11.1\ise\bin\nt\unwrapped\cableserver.exe
FirewallRules: [UDP Query User{15BBA9F6-84A9-4C20-93F0-EF90D17B8284}C:\xilinx\11.1\ise\bin\nt\unwrapped\cableserver.exe] => (Allow) C:\xilinx\11.1\ise\bin\nt\unwrapped\cableserver.exe
FirewallRules: [TCP Query User{582A238B-9A38-4BCB-9200-5236906349FA}C:\program files (x86)\oscam\oscamemmv14spy.exe] => (Allow) C:\program files (x86)\oscam\oscamemmv14spy.exe
FirewallRules: [UDP Query User{BE3096FB-ED43-41ED-B61A-0F94720D1567}C:\program files (x86)\oscam\oscamemmv14spy.exe] => (Allow) C:\program files (x86)\oscam\oscamemmv14spy.exe
FirewallRules: [{9AFD3063-61DE-4795-9182-A61BC86C0505}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{F0811C62-FDFA-4F19-84CE-6664F9A148AB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Wiederherstellungspunkte =========================
02-02-2016 06:17:01 Geplanter Prüfpunkt
03-02-2016 07:39:28 Malwarebytes Anti-Rootkit Restore Point
04-02-2016 06:48:45 Entfernt StarMoney
05-02-2016 06:46:20 Revo Uninstaller's restore point - Google Chrome
05-02-2016 16:20:35 JRT Pre-Junkware Removal
09-02-2016 12:38:21 JRT Pre-Junkware Removal
09-02-2016 16:39:36 JRT Pre-Junkware Removal
==================== Fehlerhafte Geräte im Gerätemanager =============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (02/09/2016 04:39:36 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (02/09/2016 12:38:23 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (02/09/2016 12:33:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SearchUI.exe, Version: 10.0.10240.16603, Zeitstempel: 0x5655390b
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xe0464645
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x1500
Startzeit der fehlerhaften Anwendung: 0xSearchUI.exe0
Pfad der fehlerhaften Anwendung: SearchUI.exe1
Pfad des fehlerhaften Moduls: SearchUI.exe2
Berichtskennung: SearchUI.exe3
Vollständiger Name des fehlerhaften Pakets: SearchUI.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SearchUI.exe5
Error: (02/06/2016 07:55:28 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm ShellExperienceHost.exe, Version 10.0.10240.16515 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 2b40
Startzeit: 01d16028c8ed5595
Beendigungszeit: 4294967295
Anwendungspfad: C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
Berichts-ID: 2e4ac225-cd03-11e5-9be2-902b343550bd
Vollständiger Name des fehlerhaften Pakets: Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy
Auf das fehlerhafte Paket bezogene Anwendungs-ID: App
Error: (02/06/2016 07:55:25 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: BUERO-PC)
Description: Das Paket „Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy+App“ wurde beendet, da das Anhalten zu lange dauerte.
Error: (02/05/2016 04:20:36 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (02/05/2016 06:46:21 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (02/04/2016 06:48:46 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (02/03/2016 07:39:29 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (02/02/2016 06:17:02 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Systemfehler:
=============
Error: (02/09/2016 05:25:12 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 10. Der Windows-SChannel-Fehlerstatus lautet: 10.
Error: (02/09/2016 05:25:12 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 10. Der Windows-SChannel-Fehlerstatus lautet: 10.
Error: (02/09/2016 05:25:12 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 10. Der Windows-SChannel-Fehlerstatus lautet: 10.
Error: (02/09/2016 05:25:12 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 10. Der Windows-SChannel-Fehlerstatus lautet: 10.
Error: (02/08/2016 06:20:51 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (02/08/2016 06:10:09 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (02/08/2016 05:54:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Dienst "Bonjour"" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (02/08/2016 05:54:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "pardrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%20
Error: (02/08/2016 05:54:06 PM) (Source: Application Popup) (EventID: 875) (User: )
Description: AppleCharger.sys
Error: (02/08/2016 05:53:38 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
CodeIntegrity:
===================================
Date: 2016-02-06 19:36:05.181
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-02-06 19:36:05.168
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-02-06 19:36:00.508
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-02-06 19:36:00.496
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-02-06 19:35:50.964
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-02-06 19:35:50.951
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-02-06 19:35:46.173
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-02-06 19:35:46.160
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-02-06 10:52:33.513
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-02-06 10:52:33.500
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz
Prozentuale Nutzung des RAM: 18%
Installierter physikalischer RAM: 16214.09 MB
Verfügbarer physikalischer RAM: 13209.46 MB
Summe virtueller Speicher: 32598.09 MB
Verfügbarer virtueller Speicher: 29807.89 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:238.37 GB) (Free:54.45 GB) NTFS
Drive d: () (Fixed) (Total:4.99 GB) (Free:0.24 GB) FAT32
Drive e: () (Fixed) (Total:298.08 GB) (Free:187.86 GB) NTFS
Drive s: () (Network) (Total:365.69 GB) (Free:180.57 GB)
Drive t: () (Network) (Total:1845.38 GB) (Free:1844.04 GB)
Drive w: () (Network) (Total:365.69 GB) (Free:180.57 GB)
Drive x: () (Network) (Total:365.69 GB) (Free:180.57 GB)
Drive y: () (Network) (Total:365.69 GB) (Free:180.57 GB)
Drive z: () (Network) (Total:365.69 GB) (Free:180.57 GB)
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 54FBCE7F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=238.4 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 298.1 GB) (Disk ID: 6419355F)
Partition 1: (Active) - (Size=298.1 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
|
10.02.2016, 09:30
| #14 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | smartnewtab und andere nervige Weiterleitungen im Chrome FRST-Fix Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft! Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
Task: {063C81C4-45B0-4D1E-B593-2D2C192565ED} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {29DDAD53-A692-46D1-946C-A9758C67D60D} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {361E3EB0-3FF8-4150-9BBF-7D01F48303C5} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {4803FF7F-91DF-4184-836B-982E42A1EBC1} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {77472836-953E-44C2-990D-CDFCFB451503} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {7BE61C0D-BF87-4004-9557-2E4A39D2F8D6} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {95C64EFB-9E0F-4951-8DB5-A8E61C409317} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {A0FF1C4C-B44D-432C-AFCB-8A38CAAB8ADC} - \Microsoft\Windows\File Classification Infrastructure\Property Definition Sync -> Keine Datei <==== ACHTUNG
Task: {A30F41AA-BC63-4FE7-8D7B-637E954C89A2} - \AutoKMS -> Keine Datei <==== ACHTUNG
Task: {A7974412-8058-43BB-9E49-D286FA5695D7} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {AF92098A-EFF3-4ED4-978A-7D20E023C310} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {DEDC1925-05C5-44BB-BD79-6D934426DB05} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {F56E9DA0-01F1-42ED-BF35-3B6B6680F37A} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ Logfiles bitte immer in CODE-Tags posten |
|
10.02.2016, 09:47
| #15 |
| | smartnewtab und andere nervige Weiterleitungen im Chrome Hi, anbei der Log: Code:
ATTFilter
Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:27-01-2016
durchgeführt von Büro (2016-02-10 09:41:27) Run:4
Gestartet von E:\Downloads
Geladene Profile: Büro (Verfügbare Profile: Büro & DefaultAppPool)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
Task: {063C81C4-45B0-4D1E-B593-2D2C192565ED} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {29DDAD53-A692-46D1-946C-A9758C67D60D} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {361E3EB0-3FF8-4150-9BBF-7D01F48303C5} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {4803FF7F-91DF-4184-836B-982E42A1EBC1} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {77472836-953E-44C2-990D-CDFCFB451503} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {7BE61C0D-BF87-4004-9557-2E4A39D2F8D6} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {95C64EFB-9E0F-4951-8DB5-A8E61C409317} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {A0FF1C4C-B44D-432C-AFCB-8A38CAAB8ADC} - \Microsoft\Windows\File Classification Infrastructure\Property Definition Sync -> Keine Datei <==== ACHTUNG
Task: {A30F41AA-BC63-4FE7-8D7B-637E954C89A2} - \AutoKMS -> Keine Datei <==== ACHTUNG
Task: {A7974412-8058-43BB-9E49-D286FA5695D7} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {AF92098A-EFF3-4ED4-978A-7D20E023C310} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {DEDC1925-05C5-44BB-BD79-6D934426DB05} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {F56E9DA0-01F1-42ED-BF35-3B6B6680F37A} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
emptytemp:
*****************
HKLM\SOFTWARE\Policies\Google => Schlüssel erfolgreich entfernt.
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{063C81C4-45B0-4D1E-B593-2D2C192565ED}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{063C81C4-45B0-4D1E-B593-2D2C192565ED}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{29DDAD53-A692-46D1-946C-A9758C67D60D}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{29DDAD53-A692-46D1-946C-A9758C67D60D}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{361E3EB0-3FF8-4150-9BBF-7D01F48303C5}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{361E3EB0-3FF8-4150-9BBF-7D01F48303C5}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4803FF7F-91DF-4184-836B-982E42A1EBC1}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4803FF7F-91DF-4184-836B-982E42A1EBC1}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{77472836-953E-44C2-990D-CDFCFB451503}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{77472836-953E-44C2-990D-CDFCFB451503}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7BE61C0D-BF87-4004-9557-2E4A39D2F8D6}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7BE61C0D-BF87-4004-9557-2E4A39D2F8D6}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{95C64EFB-9E0F-4951-8DB5-A8E61C409317}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{95C64EFB-9E0F-4951-8DB5-A8E61C409317}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A0FF1C4C-B44D-432C-AFCB-8A38CAAB8ADC}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A0FF1C4C-B44D-432C-AFCB-8A38CAAB8ADC}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\File Classification Infrastructure\Property Definition Sync" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{A30F41AA-BC63-4FE7-8D7B-637E954C89A2}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A30F41AA-BC63-4FE7-8D7B-637E954C89A2}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AutoKMS" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A7974412-8058-43BB-9E49-D286FA5695D7}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A7974412-8058-43BB-9E49-D286FA5695D7}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{AF92098A-EFF3-4ED4-978A-7D20E023C310}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AF92098A-EFF3-4ED4-978A-7D20E023C310}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DEDC1925-05C5-44BB-BD79-6D934426DB05}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DEDC1925-05C5-44BB-BD79-6D934426DB05}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F56E9DA0-01F1-42ED-BF35-3B6B6680F37A}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F56E9DA0-01F1-42ED-BF35-3B6B6680F37A}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => Schlüssel erfolgreich entfernt
EmptyTemp: => 328.9 MB temporäre Dateien entfernt.
Das System musste neu gestartet werden.
==== Ende von Fixlog 09:41:35 ====
Viele Dank für deine Hilfe Gruß Dave |
|
| Themen zu smartnewtab und andere nervige Weiterleitungen im Chrome |
| andere, ausprobiert, betrifft, chrome, forum, gen, installer, latein, meinem, nervige, newtab, problem, revo uninstaller, seite, seiten, smart, smartnewtab, uninstaller, weiterleitungen, woche, wochen |
Linear-Darstellung
