|
Plagegeister aller Art und deren Bekämpfung: Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
07.03.2016, 12:20 | #1 |
| Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........ Hallo zusammen, ich habe mir den websearch Virus (ich weis nicht ob virus die richtige bezeichnung ist - ich nenn Ihn einfach mal so) eingefangen..... komischerweise war es eine bekannte große Website auch von AVast als sicher eingestuft - habe jetzt schon herausgefunden dass man dem nicht immer vertrauen sollte. Ok, zurück zum Problem. Ich habe Websearch erfolgreich entfernt (oder auch nicht) da Avast jedesmal eine Bedrohungsmeldung bringt sobald ich bei Google Chrome eine Internetseite öffne und man mich hierher umleiten (so verstehe ich die Fehlermeldung) will: hxxp://95.211.240.247/public/AddOn2/security/s.js Ich kann dies zwar mit ADW Cleaner und Malewarbytes Anti-Maleware löschen dann ist auch Ruhe, aber nach jedem Systemstart geht die Prozedur mit der Virenmeldung wieder von vorne los und die zuvor von ADW und MAM sind wieder da. Ich denke der Vurus stellt sich da selber wieder her. Hat hier jemand einen Tipp wie ich das Löschen kann? |
07.03.2016, 12:22 | #2 |
/// Malwareteam | Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........Mein Name ist Dennis und ich werde dir bei der Bereinigung helfen. Bitte beachte, dass es ein paar Regeln gibt:
Sollte ich nicht innerhalb von 48h antworten, schreibe mir eine PM! Posten in CODE-Tags Lesestoff: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Kannst du mir noch bitte die neusten Logs von AdwCleaner und MBAM posten? Schritt # 1: FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Schritt # 2: Bitte Posten
__________________ |
08.03.2016, 15:19 | #3 |
| Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........ Hallo Dennis,
__________________vielen Dank für deine Hilfe. Ich versuche mich so gut es geht an deine Anweisungen zu halten. Zuerst einmal ADW habe ich gelöscht. Trotzdem dass ich Ihn von einer bekannten Plattform geladen habe (CH.. .de) hat mir hier AVAST angeschlagen und Ihn als Virus idenifiziert. Deshalb habe ich hier keine Logs :-(. Anbei der Log von MBAW: Code:
ATTFilter <?xml version="1.0" encoding="UTF-8" ?> <logs> <record severity="debug" LoggingEventType="4" datetime="2016-03-08T12:59:52.857928+01:00" source="Protection" type="Error" username="SYSTEM" systemname="ARBEIT" code="13" last_modified_tag="9d6acf92-71cf-4f51-b1bc-58c71252de7d" message="IsLicensed"></record> <record severity="debug" LoggingEventType="2" datetime="2016-03-08T12:59:53.045422+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="ARBEIT" last_modified_tag="48e9c732-4bb2-4729-bc3f-f7760c71fd59" result="Stopping" subtype="Malware Protection"></record> <record severity="debug" LoggingEventType="2" datetime="2016-03-08T12:59:53.045422+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="ARBEIT" last_modified_tag="da6bd017-d0c3-44e6-8e53-5a0f5bfa1c49" result="Stopped" subtype="Malware Protection"></record> </logs> Vielen Dank Hallo Dennis, nachdem ich Probleme beim Runterladen hatte, habe ich mithilfe eines anderen PC´s endlich FRST runterladen und per Dropbox verschieben können. Mein PC läuft auf einmal deutlich langsamer und beim ausführen von FRST hat er sich 2x verabschiedet. Hier wie gewünscht die beiden Auswertungen: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01 durchgeführt von Manfred (Administrator) auf ARBEIT (08-03-2016 15:03:50) Gestartet von C:\Users\Manfred\Desktop Geladene Profile: Manfred (Verfügbare Profile: Manfred & .NET v4.5 & DefaultAppPool & .NET v4.5 Classic) Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AVAST Software) C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe (Microsoft Corporation) C:\Windows\System32\lpksetup.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Microsoft Corporation) C:\Windows\System32\TCPSVCS.EXE (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Microsoft Corporation) C:\Windows\System32\mqsvc.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Windows\System32\Speech_OneCore\Common\SpeechRuntime.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\PlacesServer.exe (NVIDIA Corporation) C:\Users\Manfred\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (SugarSync, Inc.) C:\Program Files (x86)\SugarSync\SugarSync.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Dropbox, Inc.) C:\Users\Manfred\AppData\Roaming\Dropbox\bin\Dropbox.exe (RSA, The Security Division of EMC.) C:\Program Files (x86)\Common Files\RSA Shared\RSA Card Conversion Utility\RSACardConversionUtility.exe () C:\Program Files (x86)\onlinebrief24.de\ebdhelper.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicator.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\CSISYNCCLIENT.EXE (AVAST Software) C:\Program Files\AVAST Software\Avast\setup\instup.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-27] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-09-23] (Apple Inc.) HKLM-x32\...\Run: [RSA Card Conversion Utility] => C:\Program Files (x86)\Common Files\RSA Shared\RSA Card Conversion Utility\RSACardConversionUtility.exe [3499728 2010-08-27] (RSA, The Security Division of EMC.) HKLM-x32\...\Run: [onlinebrief24-ebdhelper] => C:\Program Files (x86)\onlinebrief24.de\ebdhelper.exe [692224 2015-04-01] () HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [221216 2015-11-18] (Geek Software GmbH) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7139768 2016-03-04] (AVAST Software) HKLM-x32\...\RunOnce: [{d2c374d4-7d96-4dfb-8892-ecec0d6b4433}] => C:\ProgramData\Package Cache\{d2c374d4-7d96-4dfb-8892-ecec0d6b4433}\MicrosoftAzureTools.VS140.exe [510976 2015-09-21] (Microsoft Corporation) <===== ACHTUNG HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [SugarSync] => C:\Program Files (x86)\SugarSync\SugarSync.exe [18880528 2015-09-28] (SugarSync, Inc.) HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [2895552 2015-07-24] (Valve Corporation) HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [HP Officejet Pro 8600 (NET)] => C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.) HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [THPanel] => C:\Program Files (x86)\Thunder Master\THPanel.exe [2197288 2014-10-17] (Palit Microsystems Ltd.) HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Spotify Web Helper] => C:\Users\Manfred\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2020920 2015-04-23] (Spotify Ltd) HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Spotify] => C:\Users\Manfred\AppData\Roaming\Spotify\Spotify.exe [7168568 2015-04-23] (Spotify Ltd) HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Dropbox Update] => C:\Users\Manfred\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-16] (Dropbox, Inc.) HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Adobe Acrobat Synchronizer] => "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe" HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50599552 2016-02-10] (Skype Technologies S.A.) HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\RunOnce: [Uninstall C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64" HKU\S-1-5-21-2836439086-123312676-467905238-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssText3d.scr [232960 2015-10-30] (Microsoft Corporation) SSODL: EldosMountNotificator - {C28617FD-4FE7-4043-AD51-C8132CE90106} - C:\WINDOWS\system32\SSCbFsMntNtf3.dll (EldoS Corporation) SSODL-x32: EldosMountNotificator - {C28617FD-4FE7-4043-AD51-C8132CE90106} - C:\WINDOWS\SysWow64\SSCbFsMntNtf3.dll (EldoS Corporation) ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64\FileSyncShell64.dll [2016-02-11] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64\FileSyncShell64.dll [2016-02-11] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64\FileSyncShell64.dll [2016-02-11] (Microsoft Corporation) ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-03-04] (AVAST Software) ShellIconOverlayIdentifiers: [EldosIconOverlay] -> {69925D1B-6A0F-4413-861A-81AB98039DB9} => C:\WINDOWS\system32\SSCbFsMntNtf3.dll [2013-01-30] (EldoS Corporation) ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2015-09-28] (SugarSync, Inc.) ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2015-09-28] (SugarSync, Inc.) ShellIconOverlayIdentifiers: [SugarSyncSharedSyncing] -> {F7395C2E-A5D8-4a32-9536-5C6A9F1DC450} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2015-09-28] (SugarSync, Inc.) ShellIconOverlayIdentifiers: [SugarSyncSynced] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2015-09-28] (SugarSync, Inc.) ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileSyncShell.dll [2016-02-11] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileSyncShell.dll [2016-02-11] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileSyncShell.dll [2016-02-11] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [EldosIconOverlay] -> {69925D1B-6A0F-4413-861A-81AB98039DB9} => C:\WINDOWS\SysWow64\SSCbFsMntNtf3.dll [2013-01-30] (EldoS Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GoPro Importer.lnk [2016-03-07] ShortcutTarget: GoPro Importer.lnk -> C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe (GoPro) Startup: C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-03-07] ShortcutTarget: Dropbox.lnk -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CHR HKU\S-1-5-21-2836439086-123312676-467905238-1001\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{018df403-5469-41da-bf60-c308cf3fe914}: [DhcpNameServer] 192.168.178.1 ManualProxies: Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-21-2836439086-123312676-467905238-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} HKU\S-1-5-21-2836439086-123312676-467905238-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://de.yahoo.com/?fr=hp-avast&type=avastbcl HKU\S-1-5-21-2836439086-123312676-467905238-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/ HKU\S-1-5-21-2836439086-123312676-467905238-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} SearchScopes: HKU\S-1-5-21-2836439086-123312676-467905238-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2836439086-123312676-467905238-1001 -> {4E911957-A024-4D49-94F3-E92DB8FBF8EF} URL = hxxp://www.bing.com/search?FORM=BDT3DF&PC=BDT3&dt=072313&q={searchTerms}&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-2836439086-123312676-467905238-1001 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKU\S-1-5-21-2836439086-123312676-467905238-1001 -> {90BE9D6A-D95E-4831-83DC-579445936B92} URL = SearchScopes: HKU\S-1-5-21-2836439086-123312676-467905238-1001 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-02-05] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-07-20] (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-03-04] (AVAST Software) BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-02-04] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-07-20] (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-23] (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-03-04] (AVAST Software) BHO-x32: YouProxy.YouProxy.YouProxy -> {bb4c50c9-d7f0-48ef-a67c-daf6a86830e4} -> C:\WINDOWS\SysWOW64\mscoree.dll [2015-10-30] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-23] (Oracle Corporation) Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - Keine Datei Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - Keine Datei Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1 FF NewTab: about:newtab FF DefaultSearchEngine: Google (avast) FF DefaultSearchUrl: hxxps://www.google.com/search?trackid=sp-006 FF SearchEngineOrder.1: Google (avast) FF SelectedSearchEngine: Google (avast) FF Homepage: hxxps://www.google.com/?trackid=sp-006 FF Keyword.URL: hxxps://www.google.com/search?trackid=sp-006 FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-10] () FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.) FF Plugin: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-07-20] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-07-20] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Keine Datei] FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-10] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] () FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-23] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-23] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-02-04] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-25] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-25] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.) FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-2836439086-123312676-467905238-1001: @citrixonline.com/appdetectorplugin -> C:\Users\Manfred\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2015-10-07] (Citrix Online) FF Plugin HKU\S-1-5-21-2836439086-123312676-467905238-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.) FF Plugin HKU\S-1-5-21-2836439086-123312676-467905238-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Manfred\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-03-24] (Unity Technologies ApS) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.) FF SearchPlugin: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\u93s10rd.default\searchplugins\google-avast.xml [2016-03-04] FF SearchPlugin: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\u93s10rd.default\searchplugins\yahoo-avast.xml [2015-06-17] FF SearchPlugin: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\google-avast.xml [2016-03-04] FF SearchPlugin: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\yahoo-avast.xml [2015-06-17] FF Extension: Greasemonkey - C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\u93s10rd.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2015-04-23] [ist nicht signiert] FF Extension: Greasemonkey - C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2015-04-23] [ist nicht signiert] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-03-05] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF Chrome: ======= CHR HomePage: Default -> hxxp://www.google.de/ CHR StartupUrls: Default -> "hxxp://google.de/","hxxps://mail.google.com/mail/u/0/#inbox","hxxp://www.bing.com/" CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.75\PepperFlash\pepflashplayer.dll () CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.75\ppGoogleNaClPluginChrome.dll => Keine Datei CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.75\pdf.dll => Keine Datei CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll => Keine Datei CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll => Keine Datei CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Unity Player) - C:\Users\Manfred\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll => Keine Datei CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll => Keine Datei CHR Profile: C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Drive) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-05] CHR Extension: (YouTube) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-05] CHR Extension: (Adblock Plus) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-05] CHR Extension: (Google Kalender) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2016-03-05] CHR Extension: (Google Docs Offline) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-07] CHR Extension: (Avast Online Security) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-03-05] CHR Extension: (Dropbox) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2016-03-05] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-03-05] CHR Extension: (Google Mail) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-05] CHR Profile: C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1 CHR Extension: (Google Präsentationen) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-01] CHR Extension: (Google Docs) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-01] CHR Extension: (Google Drive) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-27] CHR Extension: (YouTube) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (Adblock Plus) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-09] CHR Extension: (Google-Suche) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28] CHR Extension: (Lumin - Best Document Viewer) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dbkidnlfklnjanneifjjojofckpcogcl [2015-07-27] CHR Extension: (Gmail offline) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk [2015-07-27] CHR Extension: (Google Tabellen) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-01] CHR Extension: (Google Docs Offline) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-20] CHR Extension: (In Google Drive speichern) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gmbmikajjgmnabiglmofipeabaddhgne [2015-07-27] CHR Extension: (Avast Online Security) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-03-04] CHR Extension: (PDF Viewer) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jccchjobcggajhnmckffhcahkkbioifn [2015-08-03] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-27] CHR Extension: (Google Mail) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-01] CHR Profile: C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2 CHR Extension: (Google Docs) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-11] CHR Extension: (Google Drive) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21] CHR Extension: (YouTube) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24] CHR Extension: (Adblock Plus) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-05] CHR Extension: (Google-Suche) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27] CHR Extension: (Avast Online Security) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-03-07] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-11] CHR Extension: (Google Mail) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-11] CHR Profile: C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3 CHR Extension: (Google Drive) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-21] CHR Extension: (YouTube) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-21] CHR Extension: (Google-Suche) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-21] CHR Extension: (Avast SafePrice) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-04-21] CHR Extension: (Avast Online Security) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-21] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-26] CHR Extension: (Google Wallet) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-15] CHR Extension: (Google Mail) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-21] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx <nicht gefunden> CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-03-04] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2020056 2016-02-09] (Adobe Systems, Incorporated) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-09-15] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert] R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-09-02] (Apple Inc.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-03-04] (AVAST Software) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2804976 2016-02-04] (Microsoft Corporation) S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-19] (Microsoft Corporation) [Datei ist nicht signiert] R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-08-27] (NVIDIA Corporation) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Datei ist nicht signiert] R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [22744 2014-10-15] (Microsoft Corporation) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-27] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-27] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2007048 2015-08-04] (Electronic Arts) S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.) S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [Datei ist nicht signiert] S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation) S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [52968 2015-07-06] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36520 2012-09-13] (Advanced Micro Devices, Inc.) R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices) S2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-03-04] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-03-04] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-03-04] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-03-04] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1065720 2016-03-04] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [463744 2016-03-04] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [165344 2016-03-04] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287016 2016-03-04] (AVAST Software) S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-03-04] () S3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( ) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation) S3 Netaapl; C:\Windows\system32\DRIVERS\netaapl64.sys [23040 2013-07-25] (Apple Inc.) [Datei ist nicht signiert] R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-27] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation) R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [216064 2015-10-30] (Microsoft Corporation) R3 SSCBFS3; C:\Windows\System32\drivers\sscbfs3.sys [347904 2013-01-30] (EldoS Corporation) S3 taphss6; C:\Windows\system32\DRIVERS\taphss6.sys [42184 2013-02-22] (Anchorfree Inc.) S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2015-06-17] (Apple, Inc.) [Datei ist nicht signiert] S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) S0 wypvcacb; System32\drivers\pupio.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-03-08 14:54 - 2016-03-08 15:03 - 00039683 _____ C:\Users\Manfred\Desktop\FRST.txt 2016-03-08 14:54 - 2016-03-08 15:03 - 00000000 ____D C:\FRST 2016-03-08 14:53 - 2016-03-08 14:54 - 02374144 _____ (Farbar) C:\Users\Manfred\Desktop\FRST64.exe 2016-03-08 13:02 - 2016-03-08 13:02 - 00000000 ___HD C:\OneDriveTemp 2016-03-08 12:54 - 2016-03-08 12:57 - 00002435 _____ C:\Users\Manfred\Desktop\Manfred - Chrome.lnk 2016-03-07 13:41 - 2016-03-07 13:42 - 03840080 _____ (AVAST Software) C:\Users\Manfred\Downloads\avast-browse104-cleanup-sfx.exe 2016-03-07 13:41 - 2016-03-07 13:42 - 00000000 ____D C:\Program Files (x86)\AdwCleaner 2016-03-07 12:25 - 2016-03-07 12:25 - 00205349 _____ C:\Users\Manfred\Downloads\Wentenschuh-Schnorr (2).pdf 2016-03-07 12:25 - 2016-03-07 12:25 - 00205349 _____ C:\Users\Manfred\Downloads\Wentenschuh-Schnorr (1).pdf 2016-03-07 11:26 - 2016-03-07 11:26 - 03430855 _____ C:\Users\Manfred\Downloads\scan.pdf 2016-03-07 10:50 - 2016-03-07 10:50 - 00244429 _____ C:\Users\Manfred\Downloads\Wentenschuh-Schnorr.pdf 2016-03-07 10:16 - 2016-03-07 10:16 - 00000000 __SHD C:\found.001 2016-03-05 16:13 - 2016-03-04 12:23 - 00398152 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2016-03-05 16:02 - 2016-03-05 16:02 - 00987728 _____ (Google Inc.) C:\Users\Manfred\Downloads\ChromeSetup (1).exe 2016-03-05 14:29 - 2016-03-05 14:29 - 00987728 _____ (Google Inc.) C:\Users\Manfred\Downloads\ChromeSetup.exe 2016-03-04 13:58 - 2016-03-08 14:26 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2016-03-04 13:53 - 2016-03-07 10:39 - 00001172 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2016-03-04 13:53 - 2016-03-04 13:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2016-03-04 13:53 - 2016-03-04 13:53 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-03-04 13:53 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2016-03-04 13:53 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2016-03-04 13:53 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2016-03-04 13:51 - 2016-03-04 13:51 - 01470472 _____ C:\Users\Manfred\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe 2016-03-04 13:43 - 2016-03-04 13:43 - 05600464 _____ (Piriform Ltd) C:\Users\Manfred\Downloads\ccsetup515_slim.exe 2016-03-04 13:09 - 2016-03-04 13:09 - 01518592 _____ C:\Users\Manfred\Downloads\adwcleaner_5.037.exe 2016-03-04 13:05 - 2016-03-07 10:39 - 00001915 _____ C:\Users\Public\Desktop\QuickTime Player.lnk 2016-03-04 13:05 - 2016-03-04 13:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2016-03-04 12:23 - 2016-03-04 12:23 - 00052184 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2016-03-04 12:21 - 2016-03-07 10:39 - 00002030 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk 2016-03-04 12:21 - 2016-03-07 10:39 - 00002012 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2016-03-04 12:21 - 2016-03-04 12:21 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\AVAST Software 2016-03-04 12:20 - 2016-03-04 12:25 - 00463744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2016-03-04 12:20 - 2016-03-04 12:25 - 00287016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys 2016-03-04 12:20 - 2016-03-04 12:23 - 01065720 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2016-03-04 12:20 - 2016-03-04 12:23 - 00165344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys 2016-03-04 12:20 - 2016-03-04 12:23 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2016-03-04 12:20 - 2016-03-04 12:23 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2016-03-04 12:20 - 2016-03-04 12:23 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys 2016-03-04 12:20 - 2016-03-04 12:23 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys 2016-03-04 11:38 - 2016-03-04 11:38 - 00000000 ____D C:\ProgramData\AVAST Software 2016-03-04 11:38 - 2016-03-04 11:38 - 00000000 ____D C:\Program Files\AVAST Software 2016-03-04 11:34 - 2016-03-04 11:34 - 00022704 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys 2016-03-04 11:31 - 2016-03-04 11:32 - 03286400 _____ (Enigma Software Group USA, LLC.) C:\Users\Manfred\Downloads\SpyHunter-Installer (1).exe 2016-03-04 11:05 - 2016-03-04 11:05 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\dlg 2016-03-04 11:00 - 2016-03-04 11:10 - 00000306 __RSH C:\ProgramData\ntuser.pol 2016-03-04 10:59 - 2016-03-04 10:59 - 00000000 ____D C:\Users\Public\Documents\dmp 2016-03-03 14:43 - 2016-03-03 14:43 - 00066341 _____ C:\Users\Manfred\Desktop\Lohnabrechnung März.pdf 2016-03-03 14:39 - 2016-03-03 14:39 - 00346618 _____ C:\Users\Manfred\Downloads\607673_VAB (1).lo2 2016-03-03 13:44 - 2016-03-03 13:44 - 00119924 _____ C:\Users\Manfred\Downloads\607673_VAB.lo2 2016-03-03 11:53 - 2016-03-03 11:53 - 00092824 _____ C:\Users\Manfred\Downloads\x0392.pdf 2016-03-02 12:28 - 2016-03-02 12:28 - 00011931 _____ C:\Users\Manfred\AppData\Local\recently-used.xbel 2016-03-02 11:49 - 2016-02-23 12:27 - 07475040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-03-02 11:49 - 2016-02-23 12:27 - 02654872 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2016-03-02 11:49 - 2016-02-23 12:25 - 02152288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2016-03-02 11:49 - 2016-02-23 12:25 - 01818696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2016-03-02 11:49 - 2016-02-23 12:23 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2016-03-02 11:49 - 2016-02-23 12:22 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2016-03-02 11:49 - 2016-02-23 12:15 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2016-03-02 11:49 - 2016-02-23 11:34 - 01859960 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2016-03-02 11:49 - 2016-02-23 11:34 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2016-03-02 11:49 - 2016-02-23 11:32 - 08705672 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2016-03-02 11:49 - 2016-02-23 11:32 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2016-03-02 11:49 - 2016-02-23 11:32 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2016-03-02 11:49 - 2016-02-23 11:32 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2016-03-02 11:49 - 2016-02-23 11:31 - 01017032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2016-03-02 11:49 - 2016-02-23 11:31 - 00847656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2016-03-02 11:49 - 2016-02-23 11:31 - 00819648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2016-03-02 11:49 - 2016-02-23 11:31 - 00536256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2016-03-02 11:49 - 2016-02-23 11:31 - 00408120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2016-03-02 11:49 - 2016-02-23 11:25 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2016-03-02 11:49 - 2016-02-23 11:21 - 22564328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2016-03-02 11:49 - 2016-02-23 11:21 - 06606568 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2016-03-02 11:49 - 2016-02-23 10:45 - 02773096 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2016-03-02 11:49 - 2016-02-23 10:45 - 01998176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2016-03-02 11:49 - 2016-02-23 10:45 - 00576352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2016-03-02 11:49 - 2016-02-23 10:38 - 06952088 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2016-03-02 11:49 - 2016-02-23 10:38 - 00980352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2016-03-02 11:49 - 2016-02-23 10:38 - 00895080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2016-03-02 11:49 - 2016-02-23 10:38 - 00882720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2016-03-02 11:49 - 2016-02-23 10:38 - 00709176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2016-03-02 11:49 - 2016-02-23 10:30 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2016-03-02 11:49 - 2016-02-23 10:27 - 21124344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2016-03-02 11:49 - 2016-02-23 10:26 - 05241984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2016-03-02 11:49 - 2016-02-23 09:58 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll 2016-03-02 11:49 - 2016-02-23 09:58 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2016-03-02 11:49 - 2016-02-23 09:56 - 02186864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2016-03-02 11:49 - 2016-02-23 09:37 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2016-03-02 11:49 - 2016-02-23 09:29 - 00591872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll 2016-03-02 11:49 - 2016-02-23 09:28 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2016-03-02 11:49 - 2016-02-23 09:09 - 01390592 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2016-03-02 11:49 - 2016-02-23 09:09 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2016-03-02 11:49 - 2016-02-23 09:06 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2016-03-02 11:49 - 2016-02-23 09:06 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll 2016-03-02 11:49 - 2016-02-23 09:06 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2016-03-02 11:49 - 2016-02-23 09:02 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2016-03-02 11:49 - 2016-02-23 09:00 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2016-03-02 11:49 - 2016-02-23 08:58 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2016-03-02 11:49 - 2016-02-23 08:52 - 00456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll 2016-03-02 11:49 - 2016-02-23 08:41 - 03594240 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2016-03-02 11:49 - 2016-02-23 08:30 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2016-03-02 11:49 - 2016-02-23 08:30 - 01731584 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-03-02 11:49 - 2016-02-23 08:26 - 02158592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2016-03-02 11:49 - 2016-02-23 08:25 - 01996288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll 2016-03-02 11:49 - 2016-02-23 08:24 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2016-03-02 11:49 - 2016-02-23 08:22 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll 2016-03-02 11:49 - 2016-02-23 08:21 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll 2016-03-02 11:49 - 2016-02-23 08:17 - 02635264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2016-03-02 11:49 - 2016-02-23 07:59 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-03-02 11:49 - 2016-02-23 07:55 - 04894208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-03-02 11:49 - 2016-02-23 07:55 - 02229760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2016-03-02 11:49 - 2016-02-23 07:55 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll 2016-03-02 11:49 - 2016-02-23 07:52 - 11545600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2016-03-02 11:49 - 2016-02-23 07:50 - 22396416 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-03-02 11:49 - 2016-02-23 07:50 - 09919488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2016-03-02 11:49 - 2016-02-23 07:40 - 24603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-03-02 11:49 - 2016-02-23 07:39 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-03-02 11:49 - 2016-02-23 07:39 - 02581504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2016-03-02 11:49 - 2016-02-23 07:36 - 19341312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-03-02 11:49 - 2016-02-23 07:36 - 18680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-03-02 11:49 - 2016-02-23 07:36 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-03-02 11:49 - 2016-02-23 07:36 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-03-02 11:49 - 2016-02-23 07:33 - 14254080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2016-03-02 11:49 - 2016-02-23 07:30 - 02061312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2016-03-02 11:49 - 2016-02-09 04:24 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2016-03-02 11:49 - 2016-02-09 04:07 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2016-03-02 11:49 - 2016-02-09 04:04 - 01946624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2016-03-02 11:48 - 2016-02-23 12:29 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2016-03-02 11:48 - 2016-02-23 12:29 - 00874968 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2016-03-02 11:48 - 2016-02-23 12:27 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2016-03-02 11:48 - 2016-02-23 12:27 - 01141504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2016-03-02 11:48 - 2016-02-23 12:25 - 00563552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys 2016-03-02 11:48 - 2016-02-23 12:15 - 00779384 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll 2016-03-02 11:48 - 2016-02-23 12:09 - 01614176 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2016-03-02 11:48 - 2016-02-23 12:08 - 00989536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2016-03-02 11:48 - 2016-02-23 11:33 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2016-03-02 11:48 - 2016-02-23 11:33 - 00389992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll 2016-03-02 11:48 - 2016-02-23 11:32 - 01152328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2016-03-02 11:48 - 2016-02-23 11:32 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2016-03-02 11:48 - 2016-02-23 11:31 - 00476728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll 2016-03-02 11:48 - 2016-02-23 11:22 - 00572272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll 2016-03-02 11:48 - 2016-02-23 11:17 - 00146272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys 2016-03-02 11:48 - 2016-02-23 10:49 - 00216416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2016-03-02 11:48 - 2016-02-23 10:45 - 00394080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2016-03-02 11:48 - 2016-02-23 10:45 - 00259336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqmapi.dll 2016-03-02 11:48 - 2016-02-23 10:44 - 00640984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2016-03-02 11:48 - 2016-02-23 10:44 - 00147808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe 2016-03-02 11:48 - 2016-02-23 10:40 - 00430944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2016-03-02 11:48 - 2016-02-23 10:39 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2016-03-02 11:48 - 2016-02-23 10:38 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2016-03-02 11:48 - 2016-02-23 10:38 - 00450912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2016-03-02 11:48 - 2016-02-23 10:38 - 00420928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll 2016-03-02 11:48 - 2016-02-23 10:37 - 00713824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2016-03-02 11:48 - 2016-02-23 10:32 - 00791744 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2016-03-02 11:48 - 2016-02-23 10:27 - 00376536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll 2016-03-02 11:48 - 2016-02-23 10:25 - 00534368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2016-03-02 11:48 - 2016-02-23 10:20 - 01139712 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSave.dll 2016-03-02 11:48 - 2016-02-23 10:20 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys 2016-03-02 11:48 - 2016-02-23 10:19 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys 2016-03-02 11:48 - 2016-02-23 10:17 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll 2016-03-02 11:48 - 2016-02-23 10:12 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\provpackageapidll.dll 2016-03-02 11:48 - 2016-02-23 10:10 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll 2016-03-02 11:48 - 2016-02-23 10:07 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2016-03-02 11:48 - 2016-02-23 10:07 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll 2016-03-02 11:48 - 2016-02-23 10:06 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll 2016-03-02 11:48 - 2016-02-23 10:01 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys 2016-03-02 11:48 - 2016-02-23 10:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll 2016-03-02 11:48 - 2016-02-23 10:00 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll 2016-03-02 11:48 - 2016-02-23 09:58 - 00187744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2016-03-02 11:48 - 2016-02-23 09:58 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\irmon.dll 2016-03-02 11:48 - 2016-02-23 09:57 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2016-03-02 11:48 - 2016-02-23 09:55 - 00221600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqmapi.dll 2016-03-02 11:48 - 2016-02-23 09:55 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys 2016-03-02 11:48 - 2016-02-23 09:54 - 00539256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2016-03-02 11:48 - 2016-02-23 09:54 - 00141664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe 2016-03-02 11:48 - 2016-02-23 09:53 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll 2016-03-02 11:48 - 2016-02-23 09:53 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll 2016-03-02 11:48 - 2016-02-23 09:52 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe 2016-03-02 11:48 - 2016-02-23 09:50 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2016-03-02 11:48 - 2016-02-23 09:48 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll 2016-03-02 11:48 - 2016-02-23 09:48 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerClient.dll 2016-03-02 11:48 - 2016-02-23 09:40 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll 2016-03-02 11:48 - 2016-02-23 09:39 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2016-03-02 11:48 - 2016-02-23 09:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll 2016-03-02 11:48 - 2016-02-23 09:38 - 00287712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll 2016-03-02 11:48 - 2016-02-23 09:37 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll 2016-03-02 11:48 - 2016-02-23 09:37 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2016-03-02 11:48 - 2016-02-23 09:36 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuickActionsDataModel.dll 2016-03-02 11:48 - 2016-02-23 09:34 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll 2016-03-02 11:48 - 2016-02-23 09:34 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll 2016-03-02 11:48 - 2016-02-23 09:33 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll 2016-03-02 11:48 - 2016-02-23 09:32 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2016-03-02 11:48 - 2016-02-23 09:31 - 00463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2016-03-02 11:48 - 2016-02-23 09:30 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll 2016-03-02 11:48 - 2016-02-23 09:28 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\scapi.dll 2016-03-02 11:48 - 2016-02-23 09:27 - 00307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll 2016-03-02 11:48 - 2016-02-23 09:26 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe 2016-03-02 11:48 - 2016-02-23 09:25 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll 2016-03-02 11:48 - 2016-02-23 09:25 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe 2016-03-02 11:48 - 2016-02-23 09:23 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll 2016-03-02 11:48 - 2016-02-23 09:22 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll 2016-03-02 11:48 - 2016-02-23 09:22 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll 2016-03-02 11:48 - 2016-02-23 09:20 - 00847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2016-03-02 11:48 - 2016-02-23 09:20 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2016-03-02 11:48 - 2016-02-23 09:20 - 00493568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll 2016-03-02 11:48 - 2016-02-23 09:20 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2016-03-02 11:48 - 2016-02-23 09:19 - 00948736 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll 2016-03-02 11:48 - 2016-02-23 09:19 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2016-03-02 11:48 - 2016-02-23 09:18 - 00557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2016-03-02 11:48 - 2016-02-23 09:14 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll 2016-03-02 11:48 - 2016-02-23 09:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2016-03-02 11:48 - 2016-02-23 09:13 - 00915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\configurationclient.dll 2016-03-02 11:48 - 2016-02-23 09:13 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll 2016-03-02 11:48 - 2016-02-23 09:12 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2016-03-02 11:48 - 2016-02-23 09:11 - 01224704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll 2016-03-02 11:48 - 2016-02-23 09:11 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2016-03-02 11:48 - 2016-02-23 09:10 - 00997376 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll 2016-03-02 11:48 - 2016-02-23 09:10 - 00474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll 2016-03-02 11:48 - 2016-02-23 09:09 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2016-03-02 11:48 - 2016-02-23 09:09 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2016-03-02 11:48 - 2016-02-23 09:06 - 01848832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe 2016-03-02 11:48 - 2016-02-23 09:05 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2016-03-02 11:48 - 2016-02-23 09:04 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll 2016-03-02 11:48 - 2016-02-23 09:04 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2016-03-02 11:48 - 2016-02-23 09:04 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2016-03-02 11:48 - 2016-02-23 09:02 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe 2016-03-02 11:48 - 2016-02-23 09:02 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2016-03-02 11:48 - 2016-02-23 08:58 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2016-03-02 11:48 - 2016-02-23 08:58 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll 2016-03-02 11:48 - 2016-02-23 08:58 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2016-03-02 11:48 - 2016-02-23 08:57 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TimeBrokerClient.dll 2016-03-02 11:48 - 2016-02-23 08:54 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll 2016-03-02 11:48 - 2016-02-23 08:50 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll 2016-03-02 11:48 - 2016-02-23 08:49 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll 2016-03-02 11:48 - 2016-02-23 08:48 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2016-03-02 11:48 - 2016-02-23 08:47 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll 2016-03-02 11:48 - 2016-02-23 08:47 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll 2016-03-02 11:48 - 2016-02-23 08:38 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll 2016-03-02 11:48 - 2016-02-23 08:37 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2016-03-02 11:48 - 2016-02-23 08:37 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll 2016-03-02 11:48 - 2016-02-23 08:37 - 00394752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll 2016-03-02 11:48 - 2016-02-23 08:36 - 00713728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll 2016-03-02 11:48 - 2016-02-23 08:36 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll 2016-03-02 11:48 - 2016-02-23 08:36 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2016-03-02 11:48 - 2016-02-23 08:35 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2016-03-02 11:48 - 2016-02-23 08:31 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll 2016-03-02 11:48 - 2016-02-23 08:31 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll 2016-03-02 11:48 - 2016-02-23 08:30 - 01832448 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2016-03-02 11:48 - 2016-02-23 08:30 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll 2016-03-02 11:48 - 2016-02-23 08:29 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll 2016-03-02 11:48 - 2016-02-23 08:29 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll 2016-03-02 11:48 - 2016-02-23 08:28 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll 2016-03-02 11:48 - 2016-02-23 08:28 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll 2016-03-02 11:48 - 2016-02-23 08:26 - 01498112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe 2016-03-02 11:48 - 2016-02-23 08:24 - 04827136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll 2016-03-02 11:48 - 2016-02-23 08:24 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll 2016-03-02 11:48 - 2016-02-23 08:24 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2016-03-02 11:48 - 2016-02-23 08:21 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll 2016-03-02 11:48 - 2016-02-23 08:20 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll 2016-03-02 11:48 - 2016-02-23 08:14 - 00990720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2016-03-02 11:48 - 2016-02-23 08:11 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2016-03-02 11:48 - 2016-02-23 08:05 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll 2016-03-02 11:48 - 2016-02-23 08:01 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2016-03-02 11:48 - 2016-02-23 07:58 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll 2016-03-02 11:48 - 2016-02-23 07:56 - 04412928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll 2016-03-02 11:48 - 2016-02-23 07:53 - 01799168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2016-03-02 11:48 - 2016-02-23 07:51 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2016-03-02 11:48 - 2016-02-23 07:42 - 03425792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2016-03-02 11:48 - 2016-02-23 07:41 - 02912256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll 2016-03-02 11:48 - 2016-02-23 07:35 - 07533568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2016-03-02 11:48 - 2016-02-23 07:33 - 02604032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll 2016-03-02 11:48 - 2016-02-23 07:32 - 02793472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2016-03-02 11:48 - 2016-02-23 07:28 - 06740992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2016-03-02 11:48 - 2016-02-23 07:26 - 12587520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2016-03-02 11:48 - 2016-02-09 05:28 - 00277856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2016-03-02 11:48 - 2016-02-09 05:13 - 00185184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2016-03-02 11:48 - 2016-02-09 04:18 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll 2016-03-02 11:48 - 2016-02-09 04:18 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll 2016-03-02 11:48 - 2016-02-09 04:07 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe 2016-02-29 15:25 - 2016-02-29 15:25 - 00130430 _____ C:\Users\Manfred\Desktop\meineSchufaneu (1).pdf 2016-02-29 15:19 - 2016-03-07 10:38 - 00001129 _____ C:\Users\Manfred\Desktop\Free PDF to Word Doc Converter.lnk 2016-02-29 15:19 - 2016-02-29 15:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free PDF to Word Doc Converter 2016-02-29 15:19 - 2016-02-29 15:19 - 00000000 ____D C:\Program Files (x86)\Free PDF to Word Doc Converter 2016-02-29 15:17 - 2016-02-29 15:18 - 01470472 _____ C:\Users\Manfred\Downloads\Free PDF to Word Doc Converter - CHIP-Installer.exe 2016-02-29 15:15 - 2016-02-29 15:15 - 00104862 _____ C:\Users\Manfred\Downloads\meineSchufaneu (1).pdf 2016-02-29 12:58 - 2016-02-29 12:58 - 00031121 _____ C:\Users\Manfred\Downloads\Angebot11456.pdf 2016-02-29 12:57 - 2016-02-29 12:57 - 00044952 _____ C:\Users\Manfred\Downloads\x0390.pdf 2016-02-25 17:59 - 2016-02-25 17:59 - 00345801 _____ C:\Users\Manfred\Downloads\91_lang__expose (1).pdf 2016-02-25 17:44 - 2016-02-25 17:44 - 00310409 _____ C:\Users\Manfred\Downloads\91_lang__expose.pdf 2016-02-22 15:57 - 2016-02-22 15:57 - 00042689 _____ C:\Users\Manfred\Downloads\Fax_2198905e9_498936082240_1455369278.pdf 2016-02-22 15:57 - 2016-02-22 15:57 - 00042689 _____ C:\Users\Manfred\Downloads\Fax_2198905e9_498936082240_1455369278 (1).pdf 2016-02-22 14:14 - 2016-02-22 14:14 - 00292865 _____ C:\Users\Manfred\Downloads\BV ueber Versicherungsnehmergemeinschaft 30072 09 2015 (1) (1).pdf 2016-02-22 13:59 - 2016-02-22 13:59 - 00039032 _____ C:\Users\Manfred\Downloads\BV ueber Versicherungsnehmergemeinschaft 30072 09 2015 (1).pdf 2016-02-22 13:57 - 2016-02-22 13:57 - 00041343 _____ C:\Users\Manfred\Downloads\SFR-Übertragung - Betriebsübergabe 30053 09 2015.pdf 2016-02-22 13:56 - 2016-02-22 13:56 - 00046393 _____ C:\Users\Manfred\Downloads\SFR-Übertragung auf einen anderen VN (AKB I.6.1.3) 30112 09 2015.pdf 2016-02-22 13:56 - 2016-02-22 13:56 - 00039032 _____ C:\Users\Manfred\Downloads\BV ueber Versicherungsnehmergemeinschaft 30072 09 2015.pdf 2016-02-20 13:07 - 2016-03-07 10:39 - 00002923 _____ C:\Users\Public\Desktop\Nero 2016.lnk 2016-02-20 13:07 - 2016-02-20 13:07 - 00000000 ____D C:\WINDOWS\System32\Tasks\Nero 2016-02-20 13:06 - 2016-02-20 13:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2016 2016-02-20 13:06 - 2016-02-20 13:07 - 00000000 ____D C:\Program Files (x86)\Nero 2016-02-20 13:06 - 2016-02-20 13:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2016-02-20 13:02 - 2016-02-20 13:03 - 02559488 _____ (Nero AG) C:\Users\Manfred\Downloads\Nero_BurningROM2016-21.09.2015_stub_trial.exe 2016-02-19 15:20 - 2016-02-19 15:20 - 00114402 _____ C:\Users\Manfred\Downloads\Expose_kurz!1635!!10875.htm 2016-02-19 12:23 - 2016-02-19 12:23 - 00254523 _____ C:\Users\Manfred\Downloads\ent003_0.pdf 2016-02-18 16:05 - 2016-02-19 11:36 - 00000000 ____D C:\Users\Manfred\Downloads\Expose_kurz!1635!!10875-Dateien 2016-02-18 16:03 - 2016-02-18 16:03 - 00085479 _____ C:\Users\Manfred\Downloads\6568_kurz__expose (5).pdf 2016-02-18 16:03 - 2016-02-18 16:03 - 00083820 _____ C:\Users\Manfred\Downloads\6568_kurz__expose (4).pdf 2016-02-18 16:02 - 2016-02-18 16:02 - 00083816 _____ C:\Users\Manfred\Downloads\6568_kurz__expose (3).pdf 2016-02-18 14:35 - 2016-02-18 14:35 - 00106227 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (6).pdf 2016-02-18 14:35 - 2016-02-18 14:35 - 00104329 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (5).pdf 2016-02-18 14:22 - 2016-02-18 14:22 - 00104334 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (4).pdf 2016-02-18 14:21 - 2016-02-18 14:21 - 00106465 _____ C:\Users\Manfred\Downloads\6450_lang__expose (3).pdf 2016-02-18 14:21 - 2016-02-18 14:21 - 00104337 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (3).pdf 2016-02-18 14:20 - 2016-02-18 14:20 - 00019185 _____ C:\Users\Manfred\Downloads\6450_dokument_objektnachweis.pdf 2016-02-18 14:13 - 2016-02-18 14:13 - 00106225 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (2).pdf 2016-02-18 14:11 - 2016-02-18 14:12 - 00107865 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (1).pdf 2016-02-18 14:11 - 2016-02-18 14:11 - 00104329 _____ C:\Users\Manfred\Downloads\6450_kurz__expose.pdf 2016-02-18 14:10 - 2016-02-18 14:10 - 00106361 _____ C:\Users\Manfred\Downloads\6450_lang__expose (2).pdf 2016-02-18 11:18 - 2016-02-18 11:18 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2016-02-18 11:14 - 2016-02-18 11:14 - 00000000 ____D C:\Users\Manfred\AppData\Local\sipgate_GmbH 2016-02-18 11:13 - 2016-02-18 11:13 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\sipgate Faxdrucker 3.21.1 2016-02-18 11:13 - 2016-02-18 11:13 - 00000000 ____D C:\ProgramData\StandardPlugin 2016-02-18 11:13 - 2016-02-18 11:13 - 00000000 ____D C:\ProgramData\eDocPrintPro 2016-02-18 11:13 - 2016-02-18 11:13 - 00000000 ____D C:\Program Files\Common Files\MAYComputer 2016-02-18 11:07 - 2016-02-18 11:07 - 00096775 _____ C:\Users\Manfred\Downloads\BEURKUNDUNGSAUFTRAG Margarethenstr. 5, Hirten.pdf 2016-02-18 10:59 - 2016-02-18 11:00 - 83174411 _____ C:\Users\Manfred\Downloads\SipgateFaxdrucker_Setup_x64.zip 2016-02-17 16:07 - 2016-02-17 16:07 - 00315387 _____ C:\Users\Manfred\Downloads\931989415_151030_5VB_000000001_133845100.pdf 2016-02-17 13:23 - 2016-02-17 13:23 - 00261008 _____ C:\Users\Manfred\Downloads\Stöckl-Kern.pdf 2016-02-17 11:31 - 2016-02-17 11:31 - 00597297 _____ C:\Users\Manfred\Downloads\bayernatlas.de (3).pdf 2016-02-17 11:29 - 2016-02-17 11:29 - 00831242 _____ C:\Users\Manfred\Downloads\bayernatlas.de (2).pdf 2016-02-17 11:19 - 2016-02-17 11:19 - 07259464 _____ C:\Users\Manfred\Downloads\Teilu.pdf 2016-02-17 11:19 - 2016-02-17 11:19 - 00097875 _____ C:\Users\Manfred\Downloads\BEURKUNDUNGSAUFTRAG Wasserburg Gronow.pdf 2016-02-15 12:32 - 2016-02-15 12:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools 2016-02-12 10:15 - 2016-02-12 10:15 - 00318267 _____ C:\Users\Manfred\Downloads\Wegbeschreibung München.pdf 2016-02-11 16:42 - 2016-02-11 16:42 - 01447476 _____ C:\Users\Manfred\Downloads\6450_lang__expose (1).pdf 2016-02-11 16:40 - 2016-02-11 16:40 - 01411647 _____ C:\Users\Manfred\Downloads\6450_lang__expose.pdf 2016-02-11 14:06 - 2016-02-11 14:06 - 05781974 _____ C:\Users\Manfred\Downloads\Rücklagen (1).pdf 2016-02-11 14:04 - 2016-02-11 14:04 - 01046051 _____ C:\Users\Manfred\Downloads\Protokoll 2015.pdf 2016-02-11 14:00 - 2016-02-11 14:00 - 05781974 _____ C:\Users\Manfred\Downloads\Rücklagen.pdf 2016-02-10 13:42 - 2016-02-10 13:42 - 00762677 _____ C:\Users\Manfred\Downloads\1890_01_2016_142739_0d8b4bb0eaa6b5bf4537be673ecd84b6.pdf 2016-02-10 11:28 - 2016-01-29 07:57 - 04502352 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2016-02-10 11:28 - 2016-01-29 07:33 - 04064320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2016-02-10 11:28 - 2016-01-27 07:15 - 01557776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2016-02-10 11:28 - 2016-01-27 07:01 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2016-02-10 11:28 - 2016-01-27 06:59 - 00304752 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe 2016-02-10 11:28 - 2016-01-27 06:57 - 01824264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2016-02-10 11:28 - 2016-01-27 06:57 - 00820704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2016-02-10 11:28 - 2016-01-27 06:55 - 00081112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe 2016-02-10 11:28 - 2016-01-27 06:54 - 00295264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2016-02-10 11:28 - 2016-01-27 06:46 - 02606824 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2016-02-10 11:28 - 2016-01-27 06:46 - 01270072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2016-02-10 11:28 - 2016-01-27 06:44 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2016-02-10 11:28 - 2016-01-27 06:44 - 00085320 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe 2016-02-10 11:28 - 2016-01-27 06:43 - 00359776 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2016-02-10 11:28 - 2016-01-27 06:21 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll 2016-02-10 11:28 - 2016-01-27 06:15 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ztrace_maps.dll 2016-02-10 11:28 - 2016-01-27 06:11 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll 2016-02-10 11:28 - 2016-01-27 06:08 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll 2016-02-10 11:28 - 2016-01-27 06:08 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ztrace_maps.dll 2016-02-10 11:28 - 2016-01-27 06:07 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassam.dll 2016-02-10 11:28 - 2016-01-27 06:04 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll 2016-02-10 11:28 - 2016-01-27 06:02 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll 2016-02-10 11:28 - 2016-01-27 06:01 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2016-02-10 11:28 - 2016-01-27 05:59 - 00258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassam.dll 2016-02-10 11:28 - 2016-01-27 05:52 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2016-02-10 11:28 - 2016-01-27 05:50 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2016-02-10 11:28 - 2016-01-27 05:49 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-02-10 11:28 - 2016-01-27 05:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll 2016-02-10 11:28 - 2016-01-27 05:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2016-02-10 11:28 - 2016-01-27 05:38 - 07835648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-02-10 11:28 - 2016-01-27 05:32 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2016-02-10 11:28 - 2016-01-27 05:31 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll 2016-02-10 11:27 - 2016-01-27 06:10 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll 2016-02-10 11:27 - 2016-01-27 05:57 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-02-10 11:16 - 2016-02-10 11:16 - 03444673 _____ C:\Users\Manfred\Downloads\Anzeige-Wolfsberger.pdf 2016-02-09 13:23 - 2016-02-09 13:23 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\ASCON Programme 2016-02-09 13:20 - 2016-02-10 12:43 - 00000000 ____D C:\Program Files (x86)\SBS 2016-02-09 13:20 - 2016-02-09 13:20 - 00120320 _____ () C:\WINDOWS\SysWOW64\czip.ocx 2016-02-09 13:20 - 2016-02-09 13:20 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sfx32.dll 2016-02-09 13:20 - 2016-02-09 13:20 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\SBS Installer 2016-02-09 13:19 - 2016-02-09 13:20 - 28473017 _____ (SBS) C:\Users\Manfred\Downloads\3dwrp_ultralight_setup.exe 2016-02-09 12:48 - 2016-02-09 12:48 - 00000000 ____D C:\WINDOWS\Crystal 2016-02-09 12:48 - 2016-02-09 12:48 - 00000000 ____D C:\MEINHAUSPLANER 2016-02-09 12:48 - 2010-10-13 05:43 - 00882608 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.TaskPanel.v13.4.2.ocx 2016-02-09 12:48 - 2010-10-13 05:42 - 02369456 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.CommandBars.v13.4.2.ocx 2016-02-09 12:48 - 2010-10-13 05:42 - 01370032 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.ReportControl.v13.4.2.ocx 2016-02-09 12:48 - 2006-04-06 17:13 - 01276088 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.CommandBars.v10.1.ocx 2016-02-09 12:48 - 2006-04-06 17:13 - 00338104 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.TaskPanel.v10.1.ocx 2016-02-09 12:48 - 2006-04-06 16:13 - 00460984 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.ReportControl.v10.1.ocx 2016-02-09 12:48 - 2004-04-27 14:47 - 00167176 _____ (/n software inc. - www.nsoftware.com) C:\WINDOWS\SysWOW64\ftps60.ocx 2016-02-09 12:48 - 2004-03-12 08:18 - 01369264 _____ (FarPoint Technologies, Inc.) C:\WINDOWS\SysWOW64\FPSPR70.ocx 2016-02-09 12:48 - 2003-02-07 13:18 - 00326656 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltvec12n.ocx 2016-02-09 12:48 - 2003-02-07 13:18 - 00176128 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltlst12n.ocx 2016-02-09 12:48 - 2003-02-07 13:18 - 00094208 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltodb12n.ocx 2016-02-09 12:48 - 2003-02-07 13:17 - 00140288 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lttmb12n.ocx 2016-02-09 12:48 - 2003-02-07 13:16 - 00340480 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTDLG12n.ocx 2016-02-09 12:48 - 2003-02-07 13:04 - 00181248 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfpng12n.dll 2016-02-09 12:48 - 2003-02-07 13:02 - 00182272 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltvid12n.dll 2016-02-09 12:48 - 2003-02-07 13:02 - 00049664 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfwmf12n.dll 2016-02-09 12:48 - 2003-02-07 13:02 - 00047104 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfXpm12n.dll 2016-02-09 12:48 - 2003-02-07 13:02 - 00045568 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfXbm12n.dll 2016-02-09 12:48 - 2003-02-07 13:02 - 00026112 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfxwd12n.dll 2016-02-09 12:48 - 2003-02-07 13:02 - 00020992 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfwpg12n.dll 2016-02-09 12:48 - 2003-02-07 13:02 - 00020992 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lftga12n.dll 2016-02-09 12:48 - 2003-02-07 13:02 - 00019968 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfwfx12n.dll 2016-02-09 12:48 - 2003-02-07 13:02 - 00019456 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfras12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00102400 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfmpg12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00089088 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfjbg12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00084480 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lffpx12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00063488 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfplt12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00060416 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfpct12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00048128 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfica12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00038912 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfflc12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00037888 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfeps12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00036864 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfpsd12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00035328 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfgif12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00031744 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lflmb12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00031232 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFPNM12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00029184 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lflma12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00027648 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfiff12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00026112 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfpcx12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00020992 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfimg12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00019968 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfpcd12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00019968 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfitg12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00019456 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfmsp12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00018944 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfmac12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00482816 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfdwf12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00215552 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lvkrn12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00139264 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfdxf12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00067584 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfdwg12N.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00058880 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfcgm12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00049152 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltlst12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00047616 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfdgn12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00046080 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfdrw12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00035840 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfcal12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00032256 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lttmb12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00030720 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfbmp12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00028672 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfclp12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00026112 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfani12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00023040 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfawd12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00021504 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfCUT12n.dll 2016-02-09 12:48 - 2003-02-07 12:59 - 00307712 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTDLG12n.dll 2016-02-09 12:48 - 2003-02-07 12:59 - 00062464 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltnet12n.dll 2016-02-09 12:48 - 2003-02-07 12:59 - 00053248 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltcap12n.dll 2016-02-09 12:48 - 2003-02-07 12:14 - 00630272 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTOCX12n.ocx 2016-02-09 12:48 - 2003-02-07 12:03 - 00358912 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFCMP12n.DLL 2016-02-09 12:48 - 2003-02-07 12:02 - 00141312 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFTIF12n.DLL 2016-02-09 12:48 - 2003-02-07 12:00 - 00073728 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFFAX12n.DLL 2016-02-09 12:48 - 2003-02-07 11:59 - 00208384 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTEFX12n.dll 2016-02-09 12:48 - 2003-02-07 11:59 - 00164864 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTIMG12n.dll 2016-02-09 12:48 - 2003-02-07 11:59 - 00035840 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTTWN12n.dll 2016-02-09 12:48 - 2003-02-07 11:58 - 00388096 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTKRN12n.dll 2016-02-09 12:48 - 2003-02-07 11:58 - 00259584 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTDIS12n.dll 2016-02-09 12:48 - 2003-02-07 11:58 - 00131072 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTFIL12n.dll 2016-02-09 12:48 - 2003-01-24 15:59 - 00018944 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfavi12n.dll 2016-02-09 12:48 - 2002-08-23 16:50 - 00204800 _____ () C:\WINDOWS\SysWOW64\NumX.ocx 2016-02-09 12:48 - 2002-06-27 11:36 - 00598016 _____ (Key Company) C:\WINDOWS\SysWOW64\KeyTV3.ocx 2016-02-09 12:48 - 2002-01-23 11:17 - 00406048 _____ (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) C:\WINDOWS\SysWOW64\XceedZip.dll 2016-02-09 12:48 - 2000-12-16 20:45 - 00032768 _____ () C:\WINDOWS\SysWOW64\WKAuxil.dll 2016-02-09 12:48 - 2000-10-12 20:46 - 00220160 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltvid12n.ocx 2016-02-09 12:48 - 2000-10-12 20:45 - 00160256 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltnet12n.ocx 2016-02-09 12:48 - 2000-10-12 20:44 - 00176128 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltcap12n.ocx 2016-02-09 12:48 - 2000-10-12 20:19 - 00158208 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lvdlg12n.dll 2016-02-09 12:48 - 2000-05-02 03:17 - 00212480 _____ (Eastman Kodak) C:\WINDOWS\SysWOW64\PCDLIB32.DLL 2016-02-09 12:48 - 2000-04-12 15:28 - 00118784 _____ () C:\WINDOWS\SysWOW64\lfkodak.dll 2016-02-09 12:48 - 2000-04-12 15:24 - 00338944 _____ () C:\WINDOWS\SysWOW64\lffpx7.dll 2016-02-09 12:48 - 2000-02-10 09:46 - 00745472 _____ (Seagate Software, Inc.) C:\WINDOWS\SysWOW64\crpe32_res_de.dll 2016-02-09 12:48 - 2000-02-03 03:16 - 00507904 _____ (Seagate Software) C:\WINDOWS\SysWOW64\crviewer.dll 2016-02-09 12:48 - 2000-02-02 00:48 - 00036864 _____ (Seagate Software, Inc) C:\WINDOWS\SysWOW64\p3smnde.dll 2016-02-09 12:48 - 2000-02-02 00:48 - 00036864 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3sodde.dll 2016-02-09 12:48 - 2000-02-01 12:49 - 00848376 _____ (APEX Software Corporation) C:\WINDOWS\SysWOW64\tdbl6.ocx 2016-02-09 12:48 - 2000-02-01 12:49 - 00242144 _____ (Apex Software Corporation) C:\WINDOWS\SysWOW64\tdbgpp.dll 2016-02-09 12:48 - 2000-02-01 11:49 - 00106984 _____ (Apex Software Corporation) C:\WINDOWS\SysWOW64\xarraydb.ocx 2016-02-09 12:48 - 2000-01-28 08:16 - 05550080 _____ (Seagate Software, Inc.) C:\WINDOWS\SysWOW64\craxdrt.dll 2016-02-09 12:48 - 2000-01-28 08:16 - 05337088 _____ (Seagate Software, Inc.) C:\WINDOWS\SysWOW64\crpe32.dll 2016-02-09 12:48 - 2000-01-27 04:05 - 00270336 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2sodbc.dll 2016-02-09 12:48 - 2000-01-14 04:58 - 00544768 _____ (Seagate Software, Inc.) C:\WINDOWS\SysWOW64\exlate32.dll 2016-02-09 12:48 - 2000-01-11 08:10 - 00442368 _____ (Seagate Software, Inc) C:\WINDOWS\SysWOW64\cpeaut32.dll 2016-02-09 12:48 - 2000-01-11 00:09 - 00618496 _____ (Seagate Software) C:\WINDOWS\SysWOW64\crpaig80.dll 2016-02-09 12:48 - 2000-01-07 01:15 - 00040960 _____ (Seagate Software, Inc) C:\WINDOWS\SysWOW64\cdo32.dll 2016-02-09 12:48 - 1999-12-15 00:17 - 00147456 _____ (Seagate Software, Inc) C:\WINDOWS\SysWOW64\p2smon.dll 2016-02-09 12:48 - 1999-12-08 02:59 - 00024576 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3rdode.dll 2016-02-09 12:48 - 1999-12-08 02:59 - 00024576 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3ddode.dll 2016-02-09 12:48 - 1999-12-07 00:31 - 00094208 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2sevt.dll 2016-02-09 12:48 - 1999-12-07 00:31 - 00094208 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2bdao.dll 2016-02-09 12:48 - 1999-12-07 00:31 - 00061440 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2irdao.dll 2016-02-09 12:48 - 1999-12-07 00:31 - 00053248 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2ctdao.dll 2016-02-09 12:48 - 1999-12-07 00:31 - 00023040 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2bbnd.dll 2016-02-09 12:48 - 1999-12-07 00:31 - 00017920 _____ C:\WINDOWS\SysWOW64\implode.dll 2016-02-09 12:48 - 1999-12-06 11:47 - 00851420 _____ (Seagate Software, Inc.) C:\WINDOWS\SysWOW64\crystl32.ocx 2016-02-09 12:48 - 1999-12-01 03:15 - 00004096 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3dbdde.dll 2016-02-09 12:48 - 1999-11-15 06:53 - 00036864 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3sevde.dll 2016-02-09 12:48 - 1999-11-08 06:15 - 00020480 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3tdode.dll 2016-02-09 12:48 - 1999-10-22 07:33 - 00565760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msvcp50.dll 2016-02-09 12:48 - 1999-06-07 12:59 - 00801464 _____ (APEX Software Corporation) C:\WINDOWS\SysWOW64\tdbg6.ocx 2016-02-09 12:48 - 1999-05-07 01:00 - 00262152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSDatGrd.ocx 2016-02-09 12:48 - 1999-05-07 01:00 - 00198640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mci32.ocx 2016-02-09 12:48 - 1999-05-07 01:00 - 00082960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PicClp32.ocx 2016-02-09 12:48 - 1999-04-13 01:00 - 01046288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet35.dll 2016-02-09 12:48 - 1999-04-13 00:00 - 00415504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrepl35.dll 2016-02-09 12:48 - 1999-03-26 01:00 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Vb6stkit.dll 2016-02-09 12:48 - 1998-10-30 03:02 - 00595968 _____ (KL Group Inc.) C:\WINDOWS\SysWOW64\Resizer.dll 2016-02-09 12:48 - 1998-10-30 03:02 - 00187904 _____ (KL Group Inc.) C:\WINDOWS\SysWOW64\ResizerPPG.ocx 2016-02-09 12:48 - 1998-10-30 03:02 - 00132608 _____ (KL Group Inc.) C:\WINDOWS\SysWOW64\ResizableControl.dll 2016-02-09 12:48 - 1998-10-30 03:02 - 00058880 _____ (KL Group Inc.) C:\WINDOWS\SysWOW64\ResizableControlPPG.ocx 2016-02-09 12:48 - 1998-07-06 01:00 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mscc2de.dll 2016-02-09 12:48 - 1998-07-06 01:00 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlxGdDE.dll 2016-02-09 12:48 - 1998-07-06 01:00 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RchTxDE.dll 2016-02-09 12:48 - 1998-07-06 01:00 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CmDlgDE.dll 2016-02-09 12:48 - 1998-07-06 01:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DBLstDE.dll 2016-02-09 12:48 - 1998-07-06 01:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSComDE.dll 2016-02-09 12:48 - 1998-07-06 01:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msprpde.dll 2016-02-09 12:48 - 1998-07-06 00:00 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Tabctde.dll 2016-02-09 12:48 - 1998-06-24 01:00 - 00525352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DBGrid32.ocx 2016-02-09 12:48 - 1998-06-24 01:00 - 00200496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DBList32.ocx 2016-02-09 12:48 - 1998-06-24 01:00 - 00103744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMM32.OCX 2016-02-09 12:48 - 1998-06-18 01:00 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSDBRPTR.DLL 2016-02-09 12:48 - 1998-06-18 01:00 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msstkprp.dll 2016-02-09 12:48 - 1998-06-18 01:00 - 00089360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Vb5db.dll 2016-02-09 12:48 - 1998-06-17 01:00 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC42LOC.DLL 2016-02-09 12:48 - 1998-04-24 01:00 - 00005807 _____ C:\WINDOWS\SysWOW64\MSCALDEU.TLB 2016-02-09 12:48 - 1998-04-24 00:00 - 00287504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msxbse35.dll 2016-02-09 12:48 - 1998-04-24 00:00 - 00250128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mspdox35.dll 2016-02-09 12:48 - 1998-04-24 00:00 - 00250128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msexcl35.dll 2016-02-09 12:48 - 1998-04-24 00:00 - 00166160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msltus35.dll 2016-02-09 12:48 - 1998-04-24 00:00 - 00165648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mstext35.dll 2016-02-09 12:48 - 1997-11-10 04:08 - 00368912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbar332.dll 2016-02-09 12:48 - 1997-09-04 09:37 - 03782416 _____ C:\WINDOWS\SysWOW64\mso97.dll 2016-02-09 12:48 - 1997-08-27 00:00 - 00148240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint35.dll 2016-02-09 12:48 - 1997-07-30 12:47 - 00099866 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB5DE.dll 2016-02-09 12:48 - 1997-06-23 00:00 - 00252176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x35.dll 2016-02-09 12:48 - 1997-06-23 00:00 - 00024848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjter35.dll 2016-02-09 12:48 - 1997-02-26 01:00 - 00035328 _____ (Apex Software Corporation) C:\WINDOWS\SysWOW64\DBGrdDE.dll 2016-02-09 12:48 - 1997-01-10 21:37 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddao35.dll 2016-02-09 12:47 - 2016-02-09 12:47 - 00000000 ____D C:\Users\Manfred\Downloads\meinHausplaner2012.3.3 2016-02-09 12:35 - 2016-02-09 12:42 - 622968396 _____ C:\Users\Manfred\Downloads\meinHausplaner2012.3.3.zip 2016-02-09 12:35 - 2016-02-09 12:35 - 01466656 _____ C:\Users\Manfred\Downloads\meinHausplaner - CHIP-Installer.exe 2016-02-09 11:13 - 2016-02-09 11:13 - 05415329 _____ C:\Users\Manfred\Documents\Unbenannt.xcf 2016-02-08 13:11 - 2016-02-08 13:11 - 00121184 _____ C:\Users\Manfred\Downloads\Infinus SZ-Online 24.01.2016.pdf ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-03-08 15:04 - 2013-03-24 12:52 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Dropbox 2016-03-08 15:03 - 2015-08-04 13:01 - 00000000 ___RD C:\Users\Manfred\OneDrive 2016-03-08 15:03 - 2013-07-31 12:03 - 00001128 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2016-03-08 15:01 - 2015-12-19 05:34 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-03-08 15:01 - 2015-12-19 04:25 - 00000000 ____D C:\ProgramData\NVIDIA 2016-03-08 14:57 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps 2016-03-08 14:51 - 2015-06-16 11:23 - 00001246 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2836439086-123312676-467905238-1001UA.job 2016-03-08 14:48 - 2015-12-19 04:28 - 00000000 ____D C:\Users\Manfred 2016-03-08 14:48 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-03-08 14:39 - 2014-12-08 20:58 - 00000000 ____D C:\Users\Manfred\360Works 2016-03-08 14:17 - 2013-07-31 12:03 - 00001132 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2016-03-08 13:59 - 2013-07-31 15:29 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2016-03-08 12:58 - 2015-10-30 07:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI 2016-03-08 12:51 - 2015-06-16 11:23 - 00001194 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2836439086-123312676-467905238-1001Core.job 2016-03-08 11:52 - 2013-03-30 20:55 - 00004154 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{30F240A7-6244-488A-AA21-91030689FD7D} 2016-03-07 10:39 - 2016-01-13 11:29 - 00001108 _____ C:\Users\Public\Desktop\PDF-Viewer.lnk 2016-03-07 10:39 - 2015-12-19 05:20 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-03-07 10:39 - 2015-11-25 11:05 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-03-07 10:39 - 2015-10-07 14:06 - 00002590 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk 2016-03-07 10:39 - 2015-10-07 14:06 - 00002586 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk 2016-03-07 10:39 - 2015-10-07 14:06 - 00002565 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk 2016-03-07 10:39 - 2015-10-07 14:06 - 00002540 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk 2016-03-07 10:39 - 2015-10-07 14:06 - 00002507 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk 2016-03-07 10:39 - 2015-10-07 14:06 - 00002504 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk 2016-03-07 10:39 - 2015-10-07 14:06 - 00002476 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk 2016-03-07 10:39 - 2015-09-28 10:25 - 00001365 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk 2016-03-07 10:39 - 2015-09-21 13:33 - 00001505 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blend for Visual Studio 2015.lnk 2016-03-07 10:39 - 2015-09-21 13:27 - 00001514 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015.lnk 2016-03-07 10:39 - 2015-09-21 13:20 - 00002184 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Web Platform Installer.lnk 2016-03-07 10:39 - 2015-09-03 19:39 - 00001377 _____ C:\Users\Public\Desktop\ElsterFormular.lnk 2016-03-07 10:39 - 2015-04-23 12:15 - 00002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2016-03-07 10:39 - 2015-03-17 12:20 - 00001914 _____ C:\Users\Public\Desktop\SugarSync.lnk 2016-03-07 10:39 - 2015-03-13 12:53 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2016-03-07 10:39 - 2015-02-12 14:33 - 00001032 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat.com.lnk 2016-03-07 10:39 - 2014-11-24 20:48 - 00001125 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk 2016-03-07 10:39 - 2014-05-28 17:26 - 00001328 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk 2016-03-07 10:39 - 2013-10-21 19:00 - 00000984 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR-Registrierung.lnk 2016-03-07 10:39 - 2013-07-31 15:27 - 00001432 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2016-03-07 10:39 - 2013-07-31 12:04 - 00002343 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-03-07 10:39 - 2013-04-22 16:40 - 00001932 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SugarSync.lnk 2016-03-07 10:39 - 2013-03-27 21:34 - 00000943 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk 2016-03-07 10:39 - 2013-03-23 19:41 - 00002811 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileMaker Pro Advanced.lnk 2016-03-07 10:39 - 2013-03-11 13:30 - 00001397 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk 2016-03-07 10:38 - 2015-09-01 17:13 - 00002007 _____ C:\Users\Manfred\Desktop\LobuOnline.lnk 2016-03-07 10:38 - 2015-08-04 13:18 - 00002433 _____ C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-03-07 10:38 - 2015-03-06 20:43 - 00001853 _____ C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2016-03-07 10:38 - 2013-10-21 19:12 - 00000469 _____ C:\Users\Manfred\Desktop\Scan.lnk 2016-03-07 10:38 - 2013-09-17 12:36 - 00000912 _____ C:\Users\Manfred\Desktop\Start.lnk 2016-03-07 10:38 - 2013-04-01 02:01 - 00000906 _____ C:\Users\Manfred\Desktop\Downloads.lnk 2016-03-07 10:38 - 2013-03-23 19:38 - 00000523 _____ C:\Users\Manfred\Desktop\Windows (C).lnk 2016-03-07 10:13 - 2015-08-20 10:16 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Skype 2016-03-05 16:38 - 2015-08-20 10:16 - 00000000 ____D C:\ProgramData\Skype 2016-03-05 16:36 - 2015-08-20 10:16 - 00000000 ___RD C:\Program Files (x86)\Skype 2016-03-05 16:16 - 2014-06-12 10:39 - 00000000 ____D C:\AdwCleaner 2016-03-05 13:30 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache 2016-03-05 12:57 - 2015-10-30 08:26 - 00000000 ____D C:\WINDOWS\Setup 2016-03-04 17:13 - 2014-07-11 18:37 - 00000000 ____D C:\Users\Manfred\AppData\Local\com 2016-03-04 13:57 - 2013-03-23 13:50 - 00000000 ____D C:\Users\Manfred\AppData\Local\Packages 2016-03-04 13:05 - 2013-10-05 22:11 - 00000000 ____D C:\Program Files (x86)\QuickTime 2016-03-04 12:30 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF 2016-03-04 12:13 - 2014-07-31 12:46 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2016-03-04 12:11 - 2015-08-03 13:41 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps 2016-03-04 12:01 - 2013-03-11 14:38 - 00000000 __RHD C:\Users\Public\AccountPictures 2016-03-04 11:43 - 2013-09-09 13:54 - 00000000 ____D C:\ProgramData\Package Cache 2016-03-04 11:00 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy 2016-03-04 11:00 - 2013-08-22 16:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy 2016-03-04 03:42 - 2015-12-19 04:27 - 02092088 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-03-04 03:42 - 2015-10-30 19:35 - 00890620 _____ C:\WINDOWS\system32\perfh007.dat 2016-03-04 03:42 - 2015-10-30 19:35 - 00197764 _____ C:\WINDOWS\system32\perfc007.dat 2016-03-04 03:34 - 2015-12-19 04:18 - 00489744 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-03-04 03:31 - 2015-10-30 19:44 - 00000000 ____D C:\Program Files\Windows Journal 2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Media 2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog 2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\bcastdvr 2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Portable Devices 2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Multimedia Platform 2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices 2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform 2016-03-04 03:31 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2016-03-04 03:31 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism 2016-03-03 12:01 - 2015-09-01 17:12 - 00000000 ____D C:\LobuOnlineData 2016-03-03 11:49 - 2013-10-21 15:32 - 00000000 ___RD C:\Scan 2016-03-02 13:33 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-03-02 12:28 - 2013-03-27 21:35 - 00000000 ____D C:\Users\Manfred\.gimp-2.8 2016-02-23 12:09 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2016-02-23 12:07 - 2013-03-11 13:26 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2016-02-20 13:06 - 2014-02-21 09:11 - 00000000 ____D C:\ProgramData\Nero 2016-02-20 13:03 - 2014-02-21 09:17 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Nero 2016-02-10 12:47 - 2013-04-03 17:43 - 00000000 ____D C:\Program Files (x86)\Adobe 2016-02-10 12:46 - 2013-04-03 17:40 - 00000000 ____D C:\ProgramData\Adobe 2016-02-10 12:45 - 2013-10-16 15:09 - 00000000 ____D C:\Program Files\Common Files\Apple 2016-02-10 12:45 - 2013-10-06 15:09 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Apple Computer 2016-02-10 12:42 - 2014-07-14 17:39 - 00000000 ____D C:\Program Files (x86)\Opera 2016-02-10 12:38 - 2013-07-23 17:43 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-02-10 12:18 - 2013-03-23 15:06 - 146614896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-02-09 13:25 - 2013-03-23 13:50 - 00000000 ____D C:\Users\Manfred\AppData\Local\VirtualStore 2016-02-09 11:14 - 2014-11-10 14:48 - 00003490 _____ C:\WINDOWS\System32\Tasks\Apple Diagnostics ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2014-03-04 15:15 - 2014-03-24 15:29 - 0038420 _____ () C:\Users\Manfred\AppData\Roaming\Microsoft Excel 97-2003.ADR 2013-04-02 03:18 - 2013-04-02 08:01 - 0000600 _____ () C:\Users\Manfred\AppData\Local\PUTTY.RND 2016-03-02 12:28 - 2016-03-02 12:28 - 0011931 _____ () C:\Users\Manfred\AppData\Local\recently-used.xbel 2014-03-07 14:49 - 2014-03-07 14:52 - 0000007 _____ () C:\Users\Manfred\AppData\Local\~wmrg 2013-10-21 18:59 - 2013-10-21 18:59 - 0000057 _____ () C:\ProgramData\Ament.ini 2015-12-19 04:24 - 2015-12-19 04:24 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2013-12-21 23:05 - 2013-12-21 23:05 - 0004967 _____ () C:\ProgramData\uxxadbmu.rlu Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\ProgramData\Package Cache\{d2c374d4-7d96-4dfb-8892-ecec0d6b4433}\MicrosoftAzureTools.VS140.exe Einige Dateien in TEMP: ==================== C:\Users\Manfred\AppData\Local\Temp\kernel32.dll C:\Users\Manfred\AppData\Local\Temp\SkypeSetup.exe ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-03-01 12:39 ==================== Ende von FRST.txt ============================ |
08.03.2016, 15:20 | #4 |
| Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........ UNd hier hoch die Addition. txt Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-03-2016 01 durchgeführt von Manfred (2016-03-08 15:11:40) Gestartet von C:\Users\Manfred\Desktop Windows 10 Home Version 1511 (X64) (2015-12-19 04:45:05) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-2836439086-123312676-467905238-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-2836439086-123312676-467905238-503 - Limited - Disabled) freigabeuser (S-1-5-21-2836439086-123312676-467905238-1007 - Administrator - Enabled) Gast (S-1-5-21-2836439086-123312676-467905238-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-2836439086-123312676-467905238-1015 - Limited - Enabled) Manfred (S-1-5-21-2836439086-123312676-467905238-1001 - Administrator - Enabled) => C:\Users\Manfred ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) Acrobat.com (HKLM-x32\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1.377 - Adobe Systems Incorporated) Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.010.20059 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 20.0.0.260 - Adobe Systems Incorporated) Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.306 - Adobe Systems Incorporated) Adobe Flash Player 21 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 21.0.0.174 - Adobe Systems Incorporated) ANNO 2070 (HKLM-x32\...\{B48E264C-C8CD-4617-B0BE-46E977BAD694}) (Version: 1.0.0.0 - Ubisoft) Apple Application Support (32-Bit) (HKLM-x32\...\{C5815ACF-FD34-4553-8A22-C7411B7E662B}) (Version: 4.1.1 - Apple Inc.) Apple Application Support (64-Bit) (HKLM\...\{CBF12D2F-CF64-4CB7-858B-2C1F21068E5F}) (Version: 4.1.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{FD244E19-6EFE-4A2D-948A-0D45D4C168BE}) (Version: 9.0.0.26 - Apple Inc.) Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.) Application Insights Tools for Visual Studio 2013 (x32 Version: 2.4 - Microsoft Corporation) Hidden Application Insights Tools for Visual Studio 2015 (x32 Version: 3.3 - Microsoft Corporation) Hidden Ashampoo Burning Studio 2014 v.12.0.5 (HKLM-x32\...\{91B33C97-280F-B76D-E27B-E712D7041B76}_is1) (Version: 12.0.5 - Ashampoo GmbH & Co. KG) Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2253 - AVAST Software) Azure AD Authentication Connected Service (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden Azure Resource Manager Tools (VS 14) - v2.7 (x32 Version: 2.7.0.0 - Microsoft Corporation) Hidden Azure Resource Manager Tools (VS 2013) - v2.7 (x32 Version: 2.7.0.0 - Microsoft Corporation) Hidden AzureTools.Notifications (x32 Version: 2.7.30818.1601 - Microsoft Corporation) Hidden Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Behaviors SDK (Windows Phone) for Visual Studio 2013 (x32 Version: 12.0.50716.0 - Microsoft Corporation) Hidden Behaviors SDK (Windows) for Visual Studio 2013 (x32 Version: 12.0.50429.0 - Microsoft Corporation) Hidden Blend for Visual Studio 2013 (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden Blend for Visual Studio 2013 DEU resources (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden Blend for Visual Studio 2013 ENU resources (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) Build Tools - amd64 (Version: 12.0.31101 - Microsoft Corporation) Hidden Build Tools - x86 (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden Build Tools Language Resources - amd64 (Version: 12.0.31101 - Microsoft Corporation) Hidden Build Tools Language Resources - x86 (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden Citrix Online Launcher (HKLM-x32\...\{678753E6-E526-4AE5-A144-00240772543A}) (Version: 1.0.393 - Citrix) Cloud Deployment Project for Microsoft Visual Studio 14 - v2.7 (x32 Version: 2.7.30814.3 - Microsoft Corporation) Hidden Cloud Deployment Project for Microsoft Visual Studio 2013 - v2.7 (x32 Version: 2.7.30814.3 - Microsoft Corporation) Hidden Cloud Explorer - v1.0 (x32 Version: 2.7.30818.1601 - Microsoft Corporation) Hidden Company of Heroes 2 (HKLM-x32\...\Steam App 231430) (Version: - Relic Entertainment) Crusader No Remorse (HKLM-x32\...\{2AEA735F-B393-4D89-93EF-5849CB72B4A3}) (Version: 1.0.0.2 - Electronic Arts) Crysis®3 (HKLM-x32\...\{4198AE83-A3C6-4C41-85C8-EC63E990696E}) (Version: 1.0.0.0 - Electronic Arts) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Devenv-Ressourcen für Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Devenv-Ressourcen für Microsoft Visual Studio 2015 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment) Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4954.46574 - PreEmptive Solutions) Hidden Dotfuscator and Analytics Community Edition 5.18.1 (x32 Version: 5.18.1.2898 - PreEmptive Solutions) Hidden Dotfuscator and Analytics Community Edition Language Pack (x32 Version: 5.5.4954.46574 - PreEmptive Solutions) Hidden Dotfuscator and Analytics Community Edition Language Pack 5.18.1 de-DE (x32 Version: 5.18.1.2898 - PreEmptive Solutions) Hidden Dropbox (HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Dropbox) (Version: 3.14.7 - Dropbox, Inc.) ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.2.24.20150630 - Landesfinanzdirektion Thüringen) Entity Framework 6.1.1 Tools for Visual Studio 2013 (HKLM-x32\...\{85253F13-EE42-4850-A3A5-79B90E92D7AC}) (Version: 12.0.30610.0 - Microsoft Corporation) Entity Framework 6.1.3 Tools for Visual Studio 2015 (HKLM-x32\...\{1A8A9739-BAD7-491F-B5B9-A79A2B965422}) (Version: 14.0.40302.0 - Microsoft Corporation) Evolve (HKLM-x32\...\Steam App 273350) (Version: - Turtle Rock Studios) FileMaker Pro 12 Advanced (HKLM-x32\...\{71A1C9DF-A5F0-4331-BAC0-6DF4B8069950}_FileMaker) (Version: 12.0.4.0 - FileMaker, Inc.) FileMaker Pro 12 Advanced (x32 Version: 12.0.4.0 - FileMaker, Inc.) Hidden Finalizer deinstallieren (x32 Version: 2.7.30818.1601 - Microsoft Corporation) Hidden Finalizer installieren (x32 Version: 2.7.30818.1601 - Microsoft Corporation) Hidden Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com) Free YouTube to MP3 Converter version 3.12.59.525 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.59.525 - DVDVideoSoft Ltd.) Galerie de photos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden GIMP 2.8.4 (HKLM\...\GIMP-2_is1) (Version: 2.8.4 - The GIMP Team) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 49.0.2623.75 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden GoPro Studio 2.5.4 (HKLM-x32\...\GoPro Studio) (Version: 2.5.4 - GoPro, Inc.) HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard) HP Officejet Pro 8600 - Grundlegende Software für das Gerät (HKLM\...\{D2D05FDB-4EDA-462D-8DB6-E0B9AD4FA25F}) (Version: 28.0.1315.0 - Hewlett-Packard Co.) HP Officejet Pro 8600 Hilfe (HKLM-x32\...\{FDE820DD-CC88-4395-AD5C-801365B8F316}) (Version: 28.0.0 - Hewlett Packard) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden IIS 10.0 Express (HKLM\...\{5984D8DA-C1AF-4284-9C88-D7150425B315}) (Version: 10.0.1734 - Microsoft Corporation) IIS Express Application Compatibility Database for x64 (HKLM\...\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version: - ) IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version: - ) Install Finalizer (x32 Version: 2.7.30818.1601 - Microsoft Corporation) Hidden iTunes (HKLM\...\{96984DE8-1DB8-425C-AC8C-3098BC696F04}) (Version: 12.3.0.44 - Apple Inc.) Java 7 Update 65 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417065FF}) (Version: 7.0.650 - Oracle) Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle) Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation) Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation) Java SE Development Kit 7 Update 21 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170210}) (Version: 1.7.0.210 - Oracle) Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Kit SDK de vérification de Visual Studio*2012 - fra (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden LobuOnline 15.0.2 (nur entfernen) (HKLM-x32\...\LobuOnline) (Version: 15.0.2 - a.b.s. Rechenzentrum GmbH) LocalESPC (x32 Version: 8.59.29989 - Microsoft Corporation) Hidden LocalESPC Dev12 (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden LocalESPCui for de-de Dev12 (x32 Version: 8.100.25984 - Microsoft) Hidden LocalESPCui for en-us Dev12 (x32 Version: 8.100.25984 - Microsoft) Hidden Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes) Memory Profiler (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (HKLM-x32\...\{21B0F482-5EF9-45DA-8840-340AFE705A6C}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 SDK (Deutsch) (HKLM-x32\...\{CBD7095F-7211-43FD-9FE7-FB08D753AF79}) (Version: 4.5.51641 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{B941AFB4-8851-33A1-9E72-0C33D463C41C}) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.6 SDK (Deutsch) (HKLM-x32\...\{EE8BD24B-75E1-4BBF-86B9-91FE16ADE71C}) (Version: 4.6.00081 - Microsoft Corporation) Microsoft .NET Framework 4.6 SDK (HKLM-x32\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation) Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation) Microsoft .NET Version Manager (x64) 1.0.0-beta5 (HKLM\...\{c5a4aba3-1aba-3ef8-b2d5-c3fa37f59738}) (Version: 1.0.10609.0 - Microsoft Corporation) Microsoft ASP.NET and Web Tools 2013.5 - Visual Studio 2013 - deu (HKLM-x32\...\{6D98300C-E96E-3BD8-987F-914722EEAA63}) (Version: 12.5.60814.0 - Microsoft Corporation) Microsoft ASP.NET and Web Tools 2013.5 - Visual Studio 2013 (HKLM-x32\...\{D3787E6F-BA5D-3588-A665-2E61E3C84551}) (Version: 12.5.60814.0 - Microsoft Corporation) Microsoft ASP.NET and Web Tools 2015 - Visual Studio 2015 - deu (HKLM-x32\...\{B3A51135-5980-35E9-88B9-BBD12A496EE4}) (Version: 14.0.60814.0 - Microsoft Corporation) Microsoft ASP.NET and Web Tools 2015 - Visual Studio 2015 (HKLM-x32\...\{DCEEB371-BB66-3E62-8466-70D49565A280}) (Version: 14.0.60814.0 - Microsoft Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Azure Authoring Tools - v2.7.1 (HKLM\...\{85692F27-8551-4717-A238-FA7FA06867F7}) (Version: 2.7.6499.8 - Microsoft Corporation) Microsoft Azure Command Line Tools (HKLM-x32\...\{96D19CAC-1D2E-4C27-9784-39376952F370}) (Version: 0.9.9 - Microsoft Corporation) Microsoft Azure Compute Emulator - v2.7 (HKLM\...\Microsoft Azure Compute Emulator - v2.7) (Version: 2.7.6499.8 - Microsoft Corporation) Microsoft Azure Data Factory Tools for Visual Studio (HKLM-x32\...\{0E7E834F-4617-4A2C-B28E-E3F3820CEDD9}) (Version: 0.9.3050.2 - Microsoft Corporation) Microsoft Azure HDInsight Tools for Visual Studio 2013 (HKLM-x32\...\{C50B159B-A292-435B-BF83-F5BAFCA1170D}) (Version: 2.0.2600.0 - Microsoft Corporation) Microsoft Azure HDInsight Tools for Visual Studio 2015 (HKLM-x32\...\{C898279C-5105-4E2F-9468-52CDFDC67830}) (Version: 2.0.2600.0 - Microsoft Corporation) Microsoft Azure Libraries for .NET – v2.7 (HKLM\...\{CBF95044-8CCB-492A-B46C-87CE75325CAD}) (Version: 2.7.0707.060 - Microsoft Corporation) Microsoft Azure Mobile App SDK V1.0 (HKLM-x32\...\{D627CBA2-99EA-4823-B8A6-A571B0542ACB}) (Version: 1.0.30626.0 - Microsoft Corporation) Microsoft Azure Mobile App SDK V2.0 (HKLM-x32\...\{55682DAE-D723-40A1-B448-3D259DEF5073}) (Version: 2.0.30626.0 - Microsoft Corporation) Microsoft Azure PowerShell - September 2015 (HKLM-x32\...\{07FA4F62-DDDE-4C8C-8BFD-A7F667789B64}) (Version: 0.9.8 - Microsoft Corporation) Microsoft Azure Quickstarts (HKLM-x32\...\{A6ACA586-9C39-3F57-82B6-9345FF1672F9}) (Version: 1.6 - Microsoft Corporation) Microsoft Azure Storage Emulator - v4.1 (HKLM-x32\...\Microsoft Azure Storage Emulator - v4.1) (Version: 4.1.6848.8 - Microsoft Corporation) Microsoft Azure Storage Tools - v3.2.0 (HKLM-x32\...\{9374C90A-0784-4F19-92B5-FB7161AE0B1C}) (Version: 3.2.0.0 - Microsoft Corporation) Microsoft Azure Tools for Microsoft Visual Studio 2013 - v2.7 (HKLM-x32\...\{9b11fa6b-50da-4b9e-8636-658b9f775772}) (Version: 2.7.30818.1601 - Microsoft Corporation) Microsoft Azure Tools for Microsoft Visual Studio 2015 - v2.7 (HKLM-x32\...\{d2c374d4-7d96-4dfb-8892-ecec0d6b4433}) (Version: 2.7.30818.1601 - Microsoft Corporation) Microsoft Azure-Tools für Microsoft Visual Studio 2013 Sprachpaket (DEU) - v2.7 (HKLM-x32\...\{68f2107d-bc6e-4a5b-bef4-ed8b84133726}) (Version: 2.7.30818.1601 - Microsoft Corporation) Microsoft Azure-Tools für Microsoft Visual Studio 2015 Sprachpaket (DEU) - v2.7 (HKLM-x32\...\{0f36e693-828f-4406-8590-89abd88b30f9}) (Version: 2.7.30818.1601 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation) Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation) Microsoft Help Viewer 2.1 Sprachpaket - DEU (HKLM-x32\...\Microsoft Help Viewer 2.1 Sprachpaket - DEU) (Version: 2.1.21005 - Microsoft Corporation) Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.23107 - Microsoft Corporation) Microsoft Help Viewer 2.2 Sprachpaket - DEU (HKLM-x32\...\Microsoft Help Viewer 2.2 Sprachpaket - DEU) (Version: 2.2.23107 - Microsoft Corporation) Microsoft Hive ODBC Driver (HKLM\...\{AC9970E8-7F55-4F50-A6D3-2BC041589904}) (Version: 1.0.5.5 - Microsoft Corporation) Microsoft Hive ODBC Driver (HKLM-x32\...\{7A580208-9E61-47FD-9AEB-DDDAA67CF0F6}) (Version: 1.0.5.5 - Microsoft Corporation) Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.6568.2025 - Microsoft Corporation) Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0407-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation) Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0409-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation) Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-040C-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation) Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{58FED865-4F13-408D-A5BF-996019C4B936}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2014 Express LocalDB (HKLM\...\{AB8DE9BA-19E1-446A-BCFA-6B3DA9751E21}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server 2014 Management Objects (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server 2014 Management Objects (x64) (HKLM\...\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server 2014 T-SQL Language Service (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 DEU (HKLM\...\{98225B15-ECF5-4645-B5AC-F8C5E869A5D5}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - DEU (14.0.50616.0) (HKLM-x32\...\{FA604873-01A0-4834-AF87-418534E465BB}) (Version: 14.0.50616.0 - Microsoft Corporation) Microsoft SQL Server Data Tools - enu (12.0.41012.0) (HKLM-x32\...\{AC8E0CF4-42A1-4151-B684-97CF6FD726CF}) (Version: 12.0.41012.0 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - DEU (12.0.30919.1) (HKLM-x32\...\{BCB8A870-2B3D-4CC0-87D6-F931E065AC0C}) (Version: 12.0.30919.1 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation) Microsoft SQL Server System CLR Types (HKLM-x32\...\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{9634d50a-0c4d-4f52-8a9f-894a2baae370}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{307a22b8-8353-4c5e-b67b-2404c5734558}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation) Microsoft Visual Studio Community 2013 with Update 4 (HKLM-x32\...\{96a8b90c-0a91-4e76-ab34-730c23923d11}) (Version: 12.0.31101 - Microsoft Corporation) Microsoft Visual Studio Community 2015 (HKLM-x32\...\{5c2b89b0-08cc-492f-b086-21e4d6ae7be4}) (Version: 14.0.23107.10 - Microsoft Corporation) Microsoft Web Deploy 3.6 (HKLM\...\{ED4CC1E5-043E-4157-8452-B5E533FE2BA1}) (Version: 3.1238.1955 - Microsoft Corporation) Microsoft Web Platform Installer 5.0 (HKLM\...\{4D84C195-86F0-4B34-8FDE-4A17EB41306A}) (Version: 5.0.50430.0 - Microsoft Corporation) Microsoft-System-CLR-Typen für SQL Server 2014 (HKLM\...\{63967E7E-5D53-42FA-A7B2-DC50FB0F976F}) (Version: 12.0.2402.11 - Microsoft Corporation) Microsoft-System-CLR-Typen für SQL Server 2014 (HKLM-x32\...\{2ADB6B9D-83C6-494E-B8AE-E815956A4670}) (Version: 12.0.2402.11 - Microsoft Corporation) Mit C# erstellte geräteübergreifende Hybrid-Apps - Vorlagen - DEU (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Firefox 37.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.2 - Mozilla) MSXML 4.0 SP2 Parser und SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) Nero BurningROM 2016 (HKLM-x32\...\{57A3796C-EDE9-43DA-86C4-92279B6B9AB1}) (Version: 17.0.00300 - Nero AG) Nero Info (HKLM-x32\...\{F030BFE8-8476-4C08-A553-233DE80A2BE1}) (Version: 16.0.2000 - Nero AG) NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 355.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 355.82 - NVIDIA Corporation) NVIDIA GeForce Experience 2.5.14.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.14.5 - NVIDIA Corporation) NVIDIA Grafiktreiber 355.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 355.82 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation) NVIDIA Miracast Virtueller Ton 347.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 347.52 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation) Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.6528.1011 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (Version: 16.0.6528.1011 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (x32 Version: 16.0.6528.1011 - Microsoft Corporation) Hidden onlinebrief24.de (HKLM-x32\...\eBriefdienst-onlinebrief24) (Version: - ) OpenSSL 1.0.1e Light (32-bit) (HKLM-x32\...\OpenSSL Light (32-bit)_is1) (Version: - OpenSSL Win32 Installer Team) Origin (HKLM-x32\...\Origin) (Version: 9.2.1.4399 - Electronic Arts, Inc.) Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM-x32\...\{D5409B11-EF28-37A1-AE7A-6051A5BAD923}) (Version: 4.5.50932 - Microsoft Corporation) Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.1 RC für Windows Store-Apps (Deutsch) (x32 Version: 4.5.21005 - Microsoft Corporation) Hidden Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM-x32\...\{3F514FDC-F0F2-3B99-86D6-F7B3A2679B39}) (Version: 4.5.51209 - Microsoft Corporation) Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.6 (Deutsch) (HKLM-x32\...\{7227EFF8-BC26-44D4-B91D-969A82DBDF4A}) (Version: 4.6.00081 - Microsoft Corporation) PDF24 Creator 7.4.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org) PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.316.0 - Tracker Software Products Ltd) Phase 5 HTML-Editor (HKLM-x32\...\{20B1B020-DEAE-48D1-9960-D4C3185D758B}) (Version: 5.6.2.3 - Systemberatung Schommer) PowreShellIntegration.Notifications (x32 Version: 2.5.21003.1603 - Microsoft Corporation) Hidden PreEmptive Analytics Client German Language Pack (x32 Version: 1.2.3197.1 - PreEmptive Solutions) Hidden PreEmptive Analytics Client German Language Pack (x32 Version: 1.2.5134.1 - PreEmptive Solutions) Hidden PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.3197.1 - PreEmptive Solutions) Hidden PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.5134.1 - PreEmptive Solutions) Hidden Prerequisite installer (x32 Version: 17.0.0002 - Nero AG) Hidden Prerequisites for SSDT (HKLM-x32\...\{21373064-AD95-48DB-A32E-0D9E08EF7355}) (Version: 12.0.2000.8 - Microsoft Corporation) Prerequisites for SSDT (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation) Python Tools - Umleitungsvorlage (x32 Version: 1.3 - Microsoft Corporation) Hidden Python Tools Redirection Template (x32 Version: 1.3 - Microsoft Corporation) Hidden QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.) Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) Roslyn Language Services - x86 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden RSA Smart Card Middleware 3.5 (HKLM-x32\...\{AC2F9FCC-170E-4B0B-84AB-7307A373570F}) (Version: 3.5.3.36 - RSA, The Security Division of EMC) SDK de comprobación de Visual Studio 2012 - esn (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.5.14.5 - NVIDIA Corporation) Hidden sipgate Faxdrucker (HKLM\...\{F4950C66-CC26-4BB6-A7E7-D913565573B8}) (Version: 3.21.1 - sipgate GmbH) Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.112 - Skype Technologies S.A.) Spotify (HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Spotify) (Version: 1.0.4.90.g0b6df40b - Spotify AB) Stashimi Stub Installer (x32 Version: 18.001.1 - Nero AG) Hidden Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Studie zur Verbesserung von HP Officejet Pro 8600 Produkten (HKLM\...\{B9824225-2055-4700-BCD4-64B25EC88264}) (Version: 28.0.1315.0 - Hewlett-Packard Co.) SugarSync (HKLM-x32\...\SugarSync) (Version: 3.7.0.14.141281 - SugarSync, Inc.) Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden Team Explorer for Microsoft Visual Studio 2015 (x32 Version: 14.0.23102 - Microsoft Corporation) Hidden TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.41110 - TeamViewer) Test Tools for Microsoft Visual Studio 2015 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden Thunder Master v2.7 (HKLM-x32\...\{EE04522C-0814-4B63-AE57-0B63E5A355BB}_is1) (Version: 2.7.0.1 - Palit Microsystems Ltd.) TypeScript Power Tool (x32 Version: 1.0.5.0 - Microsoft Corporation) Hidden TypeScript Tools for Microsoft Visual Studio 2013 (x32 Version: 1.0.5.0 - Microsoft Corporation) Hidden Uninstall Finalizer (x32 Version: 2.7.30818.1601 - Microsoft Corporation) Hidden Unity Web Player (HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\UnityWebPlayer) (Version: - Unity Technologies ApS) Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation) Uplay (HKLM-x32\...\Uplay) (Version: 4.9 - Ubisoft) Visual Studio 2013 Update 4 (KB2829760) (HKLM-x32\...\{53d408db-eb91-43fb-9d8f-167681c19763}) (Version: 12.0.31101 - Microsoft Corporation) VLC media player (HKLM\...\VLC media player) (Version: 2.2.0 - VideoLAN) VS Update core components (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden WCF Data Services 5.6.0 Runtime (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden WCF Data Services 5.6.4 DEU Language Pack (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden WCF Data Services 5.6.4 Runtime (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden WCF Data Services Tools for Microsoft Visual Studio 2013 (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden WCF Data Services Tools for Microsoft Visual Studio 2015 (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden WCF Data Services Tools for Microsoft Visual Studio 2015 DEU Language Pack (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden WCF RIA Services V1.0 SP2 (HKLM-x32\...\{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}) (Version: 4.1.62812.0 - Microsoft Corporation) Windows Driver Package - GoPro (WinUSB) Universal Serial Bus devices (03/07/2012 ) (HKLM\...\0B624A43DD66DBF5CF3EDFA9741A364E688062A4) (Version: 03/07/2012 - GoPro) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) Windows Phone 8.1 Emulators - ENU (HKLM-x32\...\{166a69f6-6512-47ea-a342-17d954fc059a}) (Version: 12.0.31010.0 - Microsoft Corporation) Windows Phone app for desktop (HKLM-x32\...\{19773614-FC22-4ACC-AAA3-E6BDA81ACF92}) (Version: 1.1.2726.0 - Microsoft Corporation) Windows-Treiberpaket - Microsoft (USBCCID) SmartCardReader (05/17/2005 5.2.3790.2444) (HKLM\...\E38B2136962D21A7BDE5AAC98CD1C6EA6B6D0687) (Version: 05/17/2005 5.2.3790.2444 - Microsoft) Wing Commander III (HKLM-x32\...\{F96B9930-E22A-44D6-81B5-6C8E92C21B4B}) (Version: 2.0.0.2 - Electronic Arts) WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.) WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH) Пакет Visual Studio 2012 Verification SDK - rus (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileCoAuth.exe (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {1955B4FF-4F99-4205-88AE-F79705201A80} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG Task: {1FE0B01E-B554-4CBC-A5C4-D833B77A92C6} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG Task: {2830F66F-52A4-47D1-AE45-5E7519F65CDF} - System32\Tasks\HPCustParticipation HP Officejet Pro 8600 => C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.) Task: {37FA49DA-B481-4A18-8AD2-91299D4DB869} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG Task: {38A1BDD3-24D1-4FE7-88B8-3018ED152DC5} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG Task: {4630406F-1E16-4741-855B-0674743F7176} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG Task: {4CDD364E-16DE-4277-B7E2-FA278DD0B2D7} - System32\Tasks\{6EBF54A7-593D-4801-A245-2DBA63F22C30} => pcalua.exe -a C:\Users\Manfred\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=cor Task: {56358E8E-9617-4DE2-BEA1-EA388563D193} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2015-07-31] (AVAST Software) Task: {5CCA06E5-7B55-474B-B8DC-5B05362F8B6D} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-02-04] (Microsoft Corporation) Task: {5D5A3436-10B7-4583-9F2F-862A55A0AF84} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG Task: {616C2811-F46C-482C-9CC9-E2F4AC8ED37C} - \globalUpdateUpdateTaskMachineCore -> Keine Datei <==== ACHTUNG Task: {618AD729-3145-41E3-9447-E4F1BE220E9B} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-02-10] (Microsoft Corporation) Task: {743ECEC6-3529-41EB-9338-03CD9A4A74B3} - \globalUpdateUpdateTaskMachineUA -> Keine Datei <==== ACHTUNG Task: {7BF0B805-B3E6-45D7-B52F-95C926E95A36} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated) Task: {8331C5DA-6950-4558-8D4F-EE8CA4B588CE} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG Task: {859BE674-FAED-4320-964C-B5F081992F2E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG Task: {87EA2625-4855-4DE6-A3D2-BDFB9FA9ED9B} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe Task: {8D1C48F0-A717-4B4A-ACE1-AC561EC7ACF8} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-02-04] (Microsoft Corporation) Task: {9212D9E3-17C5-4977-B702-A47E75234CDC} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2836439086-123312676-467905238-1001UA => C:\Users\Manfred\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.) Task: {9CE70186-90B3-4B02-9E18-83F107F75BB8} - System32\Tasks\GenericSettingsHandler\Windows-Credentials\RetrySyncTask_for_S-1-5-21-2836439086-123312676-467905238-1001 Task: {9EE86667-A976-4845-BCDF-69C4CCA40C81} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG Task: {A1F1D41E-4C96-4B0C-A5F3-AE51655C3128} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-04] (Adobe Systems Incorporated) Task: {A6D37FE3-2805-4F41-8AC9-BCE0B5C18505} - System32\Tasks\Opera scheduled Autoupdate 1375280827 => C:\Program Files (x86)\Opera\launcher.exe Task: {B84801B8-C5B9-41B6-87E6-7DE80572B8A1} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2015-06-04] (Nero AG) Task: {C3CF7D7B-B32B-4B0F-A2CE-E48E10B31879} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {C87CDE4D-0488-4B57-9E46-806691D90E7F} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG Task: {D56A10CE-6A95-45DA-9B27-64AB6CA18826} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe Task: {D598B635-3924-4192-822E-2DED5EB200F2} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2016-02-23] (Microsoft Corporation) Task: {DA22BF39-558E-4AB3-B460-18CA8F71A88C} - \Desk 365 RunAsStdUser -> Keine Datei <==== ACHTUNG Task: {E2F6A9E6-06DC-43B4-8E28-97451CEE4B00} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG Task: {E796724E-956D-47BD-9273-509C57D0E0D8} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2836439086-123312676-467905238-1001Core => C:\Users\Manfred\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.) Task: {EB02B5EC-7474-446E-81F2-2F498D992E21} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [2016-01-11] (Tracker Software Products (Canada) Ltd.) <==== ACHTUNG Task: {EB21667F-BFBE-4D00-9DEE-9CD22345B28F} - System32\Tasks\{A04B8675-B084-4776-A12C-318EDD7BDE8B} => pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup Task: {ED85231D-DB17-4DB7-8BF8-72EC1AB47D7E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {EF954B3B-FFC3-4360-8488-BACE03B104C3} - \avast! Emergency Update -> Keine Datei <==== ACHTUNG Task: {F66FC328-0B5D-4513-B080-4EEA26D11645} - \CCleanerSkipUAC -> Keine Datei <==== ACHTUNG (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2836439086-123312676-467905238-1001Core.job => C:\Users\Manfred\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2836439086-123312676-467905238-1001UA.job => C:\Users\Manfred\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe <==== ACHTUNG ==================== Verknüpfungen ============================= (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2015-12-19 04:24 - 2015-08-25 16:57 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-09-15 17:13 - 2014-09-15 17:13 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll 2014-02-11 06:08 - 2014-02-11 06:08 - 00817152 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll 2014-02-11 06:08 - 2014-02-11 06:08 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll 2015-02-13 04:20 - 2015-02-13 04:20 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2015-11-20 14:57 - 2015-11-20 14:57 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2015-10-07 14:01 - 2016-02-04 05:51 - 00173256 _____ () C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll 2016-03-02 11:49 - 2016-02-23 12:27 - 02654872 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2016-03-02 11:49 - 2016-02-23 12:27 - 02654872 _____ () C:\WINDOWS\System32\CoreUIComponents.dll 2016-01-13 11:03 - 2016-01-05 02:23 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2015-12-22 14:56 - 2015-12-22 14:56 - 00109568 _____ () C:\Users\Manfred\AppData\Local\Packages\facebook.facebook_8xx8rvfyw5nnt\AC\Microsoft\CLR_v4.0\NativeImages\Facebook.Ba70e54e13#\e1ffd5dff508192182dad7589b397628\Facebook.BackgroundTasks.ni.dll 2015-12-22 14:52 - 2015-12-22 14:52 - 04276736 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Windows.App640a3541#\39e564537c5352e2b8188b12b36ef6c7\Windows.ApplicationModel.ni.dll 2016-02-11 14:34 - 2016-02-11 14:34 - 01053696 _____ () C:\Users\Manfred\AppData\Local\Packages\facebook.facebook_8xx8rvfyw5nnt\AC\Microsoft\CLR_v4.0\NativeImages\Facebook-Win8-Base\a2e3020fcc8f0170039d85fde0116236\Facebook-Win8-Base.ni.dll 2015-12-22 14:56 - 2015-12-22 14:56 - 00557568 _____ () C:\Users\Manfred\AppData\Local\Packages\facebook.facebook_8xx8rvfyw5nnt\AC\Microsoft\CLR_v4.0\NativeImages\Facebook-Base\0ddda6f89e29604ad9744d19638f886e\Facebook-Base.ni.dll 2016-01-22 11:59 - 2016-01-22 12:00 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe 2016-01-13 11:03 - 2016-01-05 02:29 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2016-01-13 11:03 - 2016-01-05 02:24 - 00936960 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll 2016-01-28 12:23 - 2016-01-16 06:10 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2016-01-28 12:23 - 2016-01-16 06:13 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2015-12-19 04:14 - 2015-12-19 04:14 - 00150016 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Dss.BackgroundTask.dll 2016-01-13 11:03 - 2016-01-05 02:23 - 01645056 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.IntentExtraction.dll 2015-12-21 12:44 - 2015-12-07 05:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll 2016-03-02 11:48 - 2016-02-23 09:36 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2015-04-01 11:32 - 2015-04-01 11:32 - 00692224 _____ () C:\Program Files (x86)\onlinebrief24.de\ebdhelper.exe 2016-03-04 12:23 - 2016-03-04 12:23 - 00113496 _____ () C:\Program Files\AVAST Software\Avast\log.dll 2016-03-04 12:23 - 2016-03-04 12:23 - 00133768 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2016-03-08 13:03 - 2016-03-08 13:03 - 02838016 _____ () C:\Program Files\AVAST Software\Avast\defs\16030800\algo.dll 2016-03-04 12:23 - 2016-03-04 12:23 - 00480760 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll 2015-05-06 15:36 - 2015-08-27 01:37 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2013-10-03 23:28 - 2015-09-28 23:11 - 00052736 _____ () C:\Program Files (x86)\SugarSync\librsync.dll 2015-03-13 01:11 - 2015-09-28 23:11 - 00769024 _____ () C:\Program Files (x86)\SugarSync\libGLESv2.dll 2015-03-13 01:11 - 2015-09-28 23:11 - 00875008 _____ () C:\Program Files (x86)\SugarSync\platforms\qwindows.dll 2015-03-13 01:11 - 2015-09-28 23:11 - 00047104 _____ () C:\Program Files (x86)\SugarSync\libEGL.dll 2015-03-13 01:11 - 2015-09-28 23:11 - 00021504 _____ () C:\Program Files (x86)\SugarSync\imageformats\qgif.dll 2015-03-13 01:11 - 2015-09-28 23:11 - 00020992 _____ () C:\Program Files (x86)\SugarSync\imageformats\qico.dll 2015-03-13 01:11 - 2015-09-28 23:11 - 00204800 _____ () C:\Program Files (x86)\SugarSync\imageformats\qjpeg.dll 2015-12-14 12:47 - 2016-01-12 19:44 - 00034768 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd 2016-02-18 11:17 - 2016-01-12 19:45 - 00019408 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\faulthandler.pyd 2015-12-14 12:47 - 2016-01-12 19:44 - 00116688 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\pywintypes27.dll 2015-12-14 12:47 - 2016-01-12 19:44 - 00093640 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\_ctypes.pyd 2015-12-14 12:47 - 2016-01-12 19:44 - 00018376 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\select.pyd 2015-12-14 12:47 - 2016-02-16 19:39 - 00019760 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd 2015-12-14 12:47 - 2016-01-12 19:46 - 00105928 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32api.pyd 2015-12-14 12:47 - 2016-01-12 19:44 - 00392144 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\pythoncom27.dll 2015-12-14 12:47 - 2016-02-16 19:39 - 00381752 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd 2015-12-14 12:47 - 2016-01-12 19:44 - 00692688 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\unicodedata.pyd 2016-02-18 11:17 - 2016-02-16 19:38 - 00020816 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd 2015-12-14 12:47 - 2016-01-12 19:45 - 00112592 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd 2016-02-18 11:17 - 2016-02-16 19:38 - 01682760 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd 2016-02-18 11:17 - 2016-02-16 19:38 - 00020808 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd 2015-12-14 12:47 - 2016-02-16 19:39 - 00020800 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\_cffi_python_x66cf7a7cx17a72769.pyd 2015-12-14 12:47 - 2016-02-16 19:39 - 00021840 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\_cffi_unicode_environ_win32_x8bf8e68bx9968e850.pyd 2016-02-18 11:17 - 2016-02-16 19:39 - 00038696 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\fastpath.pyd 2015-12-14 12:47 - 2016-01-12 19:46 - 00020936 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\mmapfile.pyd 2015-12-14 12:47 - 2016-01-12 19:46 - 00024528 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32event.pyd 2015-12-14 12:47 - 2016-01-12 19:47 - 00114640 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32security.pyd 2015-12-14 12:47 - 2016-01-12 19:46 - 00124880 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32file.pyd 2016-02-18 11:18 - 2016-02-16 19:39 - 00021832 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\_cffi_pywin_kernel32_x64d8f881xc8c369be.pyd 2015-12-14 12:47 - 2016-01-12 19:46 - 00024016 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32clipboard.pyd 2015-12-14 12:47 - 2016-01-12 19:46 - 00175560 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32gui.pyd 2015-12-14 12:47 - 2016-01-12 19:47 - 00030160 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32pipe.pyd 2015-12-14 12:47 - 2016-01-12 19:47 - 00043472 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32process.pyd 2015-12-14 12:47 - 2016-01-12 19:47 - 00028616 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32ts.pyd 2015-12-14 12:47 - 2016-01-12 19:47 - 00048592 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32service.pyd 2016-02-18 11:17 - 2016-02-16 19:39 - 00026456 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd 2015-12-14 12:47 - 2016-01-12 19:46 - 00057808 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32evtlog.pyd 2015-12-14 12:47 - 2016-01-12 19:47 - 00024016 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32profile.pyd 2016-02-18 11:17 - 2016-02-16 19:38 - 00117056 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd 2015-12-14 12:47 - 2016-02-16 19:39 - 00024392 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd 2016-02-18 11:17 - 2016-01-12 19:47 - 00036296 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\librsync.dll 2016-02-18 11:17 - 2016-02-16 19:39 - 00031568 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\enterprise_data.compiled._enterprise_data.pyd 2016-02-18 11:17 - 2015-11-05 01:04 - 00293392 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\EnterpriseDataAdapter.dll 2015-12-14 12:47 - 2016-02-16 19:39 - 00023376 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd 2015-12-14 12:47 - 2016-01-12 19:44 - 00134608 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\_elementtree.pyd 2015-12-14 12:47 - 2016-01-12 19:44 - 00134088 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\pyexpat.pyd 2016-02-18 11:17 - 2016-01-12 19:45 - 00240584 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\jpegtran.pyd 2015-12-14 12:47 - 2016-02-16 19:39 - 00052024 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd 2016-02-18 11:18 - 2016-02-16 19:39 - 00020800 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\winffi.iphlpapi._winffi_iphlpapi.pyd 2016-02-18 11:18 - 2016-02-16 19:39 - 00021824 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\winffi.kernel32._winffi_kernel32.pyd 2016-02-18 11:18 - 2016-02-16 19:39 - 00019776 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\winffi.winerror._winffi_winerror.pyd 2016-02-18 11:18 - 2016-02-16 19:39 - 00020800 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\winffi.wininet._winffi_wininet.pyd 2016-02-18 11:17 - 2016-02-16 19:38 - 00020280 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd 2015-12-14 12:47 - 2016-01-12 19:47 - 00350152 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\winxpgui.pyd 2016-02-18 11:18 - 2016-02-16 19:39 - 00022352 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd 2016-02-18 11:17 - 2016-02-16 19:39 - 00084792 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL 2015-12-14 12:47 - 2016-02-16 19:39 - 01826096 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd 2015-12-14 12:47 - 2016-01-12 19:45 - 00083912 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\sip.pyd 2015-12-14 12:47 - 2016-02-16 19:39 - 03928880 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd 2015-12-14 12:47 - 2016-02-16 19:39 - 01971504 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd 2015-12-14 12:47 - 2016-02-16 19:39 - 00531248 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd 2015-12-14 12:47 - 2016-02-16 19:39 - 00132912 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd 2015-12-14 12:47 - 2016-02-16 19:39 - 00223544 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd 2015-12-14 12:47 - 2016-02-16 19:39 - 00207672 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd 2016-02-18 11:17 - 2016-02-16 19:39 - 00158008 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd 2016-02-18 11:17 - 2016-02-16 19:39 - 00042808 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd 2016-02-18 11:17 - 2016-01-12 19:49 - 00017864 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\libEGL.dll 2016-02-18 11:17 - 2016-01-12 19:49 - 01631184 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\libGLESv2.dll 2015-12-14 12:47 - 2016-02-16 19:39 - 00024904 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\_cffi_wpad_proxy_win_x752e3d61xdcfdcc84.pyd 2015-12-14 12:47 - 2016-02-16 19:39 - 00546096 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd 2015-12-14 12:47 - 2016-02-16 19:39 - 00357680 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd 2015-03-04 22:45 - 2016-01-12 19:52 - 00697304 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll 2013-04-22 13:58 - 2015-11-18 13:04 - 00074272 _____ () C:\Program Files (x86)\PDF24\zlib.dll 2013-04-22 13:58 - 2015-11-18 13:04 - 00052256 _____ () C:\Program Files (x86)\PDF24\OperationUI.dll 2016-03-04 12:20 - 2016-03-04 12:20 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2016-03-05 14:30 - 2016-03-02 05:47 - 01675928 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.75\libglesv2.dll 2016-03-05 14:30 - 2016-03-02 05:47 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.75\libegl.dll 2016-01-22 11:59 - 2016-01-22 11:59 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll 2016-01-22 11:59 - 2016-01-22 12:00 - 22330368 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkyWrap.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) AlternateDataStreams: C:\ProgramData\TEMP:054203E4 [312] AlternateDataStreams: C:\ProgramData\TEMP:9FF7C773 [128] ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) ==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) IE trusted site: HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\localhost -> hxxps://localhost ==================== Hosts Inhalt: ========================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2012-07-26 06:26 - 2013-03-31 22:49 - 00000903 ____N C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost 127.0.0.1 localhost 127.0.0.1 localhost ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-2836439086-123312676-467905238-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Manfred\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\space-dual-screen-earth-from-1128431.jpg DNS Servers: 192.168.178.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKLM\...\StartupApproved\StartupFolder: => "CineForm Status.lnk" HKLM\...\StartupApproved\StartupFolder: => "GoPro Importer.lnk" HKLM\...\StartupApproved\Run32: => "BTnetPortComm" HKLM\...\StartupApproved\Run32: => "BingDesktop" HKLM\...\StartupApproved\Run32: => "iTunesHelper" HKLM\...\StartupApproved\Run32: => "QuickTime Task" HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\StartupApproved\StartupFolder: => "XAMPP Control Panel Autostart.lnk" HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\StartupApproved\StartupFolder: => "Easy2Sync für Outlook.lnk" HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\StartupApproved\Run: => "Steam" HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\StartupApproved\Run: => "iCloudServices" HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\StartupApproved\Run: => "ApplePhotoStreams" HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\StartupApproved\Run: => "Spotify" HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\StartupApproved\Run: => "Spotify Web Helper" HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\StartupApproved\Run: => "THPanel" HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\StartupApproved\Run: => "Skype" ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808 FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [TCP Query User{D6BF20D9-96EA-4412-B2F3-6AD340E860FB}C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe] => (Block) C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe FirewallRules: [UDP Query User{19C0C140-12D9-4493-9D48-B6BD31A5DD30}C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe] => (Block) C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe FirewallRules: [TCP Query User{A74780F4-7FE7-4B90-8703-F44445F3A929}C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe FirewallRules: [UDP Query User{C2D6E90D-68F0-4B82-AE86-638B417CA1FF}C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe FirewallRules: [TCP Query User{EB74AE82-59FA-4E0B-8101-5DA353B34179}C:\users\manfred\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\manfred\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [UDP Query User{4EC91E47-6586-4B77-B419-9EBDBA307046}C:\users\manfred\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\manfred\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [{9E38FC53-7060-470E-8346-F81633ADC2E3}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{F919D8CD-C415-48F7-AE4A-779B57DC06F8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [TCP Query User{C2D5F889-7DAE-498E-9AD2-86A28369AAA6}C:\users\manfred\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\manfred\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [UDP Query User{D5EF9AAB-D844-4298-8E1E-39AB821B3CF6}C:\users\manfred\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\manfred\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [TCP Query User{3FD70C65-2E93-4C62-8319-9EF130B8EDF8}C:\program files (x86)\filemaker\filemaker pro 12 advanced\filemaker pro advanced.exe] => (Allow) C:\program files (x86)\filemaker\filemaker pro 12 advanced\filemaker pro advanced.exe FirewallRules: [UDP Query User{78A15451-B020-4DDB-9973-C0AC26C51CA2}C:\program files (x86)\filemaker\filemaker pro 12 advanced\filemaker pro advanced.exe] => (Allow) C:\program files (x86)\filemaker\filemaker pro 12 advanced\filemaker pro advanced.exe FirewallRules: [TCP Query User{DDAB343C-87FA-49BE-864B-C373C7657A16}C:\program files (x86)\filemaker\filemaker pro 12 advanced\extensions\web support\fm web publishing.exe] => (Allow) C:\program files (x86)\filemaker\filemaker pro 12 advanced\extensions\web support\fm web publishing.exe FirewallRules: [UDP Query User{BDEE13F8-D1CC-46A5-B445-7453621D0D20}C:\program files (x86)\filemaker\filemaker pro 12 advanced\extensions\web support\fm web publishing.exe] => (Allow) C:\program files (x86)\filemaker\filemaker pro 12 advanced\extensions\web support\fm web publishing.exe FirewallRules: [TCP Query User{F1CC27FD-BA39-424A-B4A5-05C22E74158A}C:\program files (x86)\filemaker\filemaker pro 12 advanced\extensions\xdbc support\fmxdbc_listener.exe] => (Allow) C:\program files (x86)\filemaker\filemaker pro 12 advanced\extensions\xdbc support\fmxdbc_listener.exe FirewallRules: [UDP Query User{F268F5B3-59CD-479A-B05A-2D458332BEC2}C:\program files (x86)\filemaker\filemaker pro 12 advanced\extensions\xdbc support\fmxdbc_listener.exe] => (Allow) C:\program files (x86)\filemaker\filemaker pro 12 advanced\extensions\xdbc support\fmxdbc_listener.exe ==================== Wiederherstellungspunkte ========================= 15-02-2016 12:58:58 TypeScript Tools for Microsoft Visual Studio 2015 1.6.3.0 01-03-2016 03:51:38 Geplanter Prüfpunkt 04-03-2016 11:07:05 Removed gs_x64 05-03-2016 16:34:32 ASU_MSI_TRAN 08-03-2016 12:55:38 Microsoft Azure Tools for Microsoft Visual Studio 2015 - v2.7 ==================== Fehlerhafte Geräte im Gerätemanager ============= ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (03/08/2016 03:11:44 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 12) (User: ARBEIT) Description: Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe1018 Error: (03/08/2016 03:11:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ARBEIT) Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2147024865. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“. Error: (03/08/2016 03:11:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ARBEIT) Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2147024865. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“. Error: (03/08/2016 03:10:51 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ARBEIT) Description: Bei der Aktivierung der App „C27EB4BA.Dropbox_xbfy0k16fey96!App“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“. Error: (03/08/2016 03:08:36 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: jusched.exe, Version: 2.1.71.14, Zeitstempel: 0x54261084 Name des fehlerhaften Moduls: USER32.dll, Version: 10.0.10586.20, Zeitstempel: 0x56542632 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00051538 ID des fehlerhaften Prozesses: 0x1ec0 Startzeit der fehlerhaften Anwendung: 0xjusched.exe0 Pfad der fehlerhaften Anwendung: jusched.exe1 Pfad des fehlerhaften Moduls: jusched.exe2 Berichtskennung: jusched.exe3 Vollständiger Name des fehlerhaften Pakets: jusched.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: jusched.exe5 Error: (03/08/2016 03:02:56 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: ARBEIT) Description: Das Paket „Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy+App“ wurde beendet, da das Anhalten zu lange dauerte. Error: (03/08/2016 02:53:48 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: jusched.exe, Version: 2.1.71.14, Zeitstempel: 0x54261084 Name des fehlerhaften Moduls: USER32.dll, Version: 10.0.10586.20, Zeitstempel: 0x56542632 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00051538 ID des fehlerhaften Prozesses: 0x2254 Startzeit der fehlerhaften Anwendung: 0xjusched.exe0 Pfad der fehlerhaften Anwendung: jusched.exe1 Pfad des fehlerhaften Moduls: jusched.exe2 Berichtskennung: jusched.exe3 Vollständiger Name des fehlerhaften Pakets: jusched.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: jusched.exe5 Error: (03/08/2016 02:49:45 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ARBEIT) Description: Bei der Aktivierung der App „C27EB4BA.Dropbox_xbfy0k16fey96!App“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“. Error: (03/08/2016 01:06:35 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: jusched.exe, Version: 2.1.71.14, Zeitstempel: 0x54261084 Name des fehlerhaften Moduls: USER32.dll, Version: 10.0.10586.20, Zeitstempel: 0x56542632 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00051538 ID des fehlerhaften Prozesses: 0x2068 Startzeit der fehlerhaften Anwendung: 0xjusched.exe0 Pfad der fehlerhaften Anwendung: jusched.exe1 Pfad des fehlerhaften Moduls: jusched.exe2 Berichtskennung: jusched.exe3 Vollständiger Name des fehlerhaften Pakets: jusched.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: jusched.exe5 Error: (03/08/2016 01:04:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ARBEIT) Description: Bei der Aktivierung der App „C27EB4BA.Dropbox_xbfy0k16fey96!App“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“. Systemfehler: ============= Error: (03/08/2016 03:11:30 PM) (Source: DCOM) (EventID: 10001) (User: ARBEIT) Description: "C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca31CortanaUI.AppXjxtspbn4351hrtx8tc95e89kaz3h2f1f.mcaNicht verfügbarNicht verfügbar Error: (03/08/2016 03:11:30 PM) (Source: DCOM) (EventID: 10001) (User: ARBEIT) Description: "C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca31CortanaUI.AppX711wbbqg58k5e6x44f02q8a6ngaz9f50.mcaNicht verfügbarNicht verfügbar Error: (03/08/2016 03:07:11 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Manager für heruntergeladene Karten" wurde nicht richtig gestartet. Error: (03/08/2016 03:05:34 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT) Description: {784E29F4-5EBE-4279-9948-1E8FE941646D} Error: (03/08/2016 03:01:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "AODDriver4.3" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (03/08/2016 03:01:14 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Das System wurde zuvor am 08.03.2016 um 14:45:08 unerwartet heruntergefahren. Error: (03/08/2016 02:52:11 PM) (Source: DCOM) (EventID: 10016) (User: ARBEIT) Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}ArbeitManfredS-1-5-21-2836439086-123312676-467905238-1001LocalHost (unter Verwendung von LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742 Error: (03/08/2016 02:52:11 PM) (Source: DCOM) (EventID: 10016) (User: ARBEIT) Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}ArbeitManfredS-1-5-21-2836439086-123312676-467905238-1001LocalHost (unter Verwendung von LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742 Error: (03/08/2016 02:52:11 PM) (Source: DCOM) (EventID: 10016) (User: ARBEIT) Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}ArbeitManfredS-1-5-21-2836439086-123312676-467905238-1001LocalHost (unter Verwendung von LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742 Error: (03/08/2016 02:52:09 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "Manager für heruntergeladene Karten" wurde nicht richtig gestartet. CodeIntegrity: =================================== Date: 2016-03-04 12:13:08.978 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-03-04 12:13:08.947 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-03-04 12:13:08.906 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-03-04 12:13:08.872 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-03-04 12:13:08.824 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-03-04 12:13:08.789 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-03-04 12:13:08.720 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-03-04 12:13:08.685 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-03-04 12:13:08.639 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-03-04 12:13:08.618 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Speicherinformationen =========================== Prozessor: AMD A8-3870 APU with Radeon(tm) HD Graphics Prozentuale Nutzung des RAM: 41% Installierter physikalischer RAM: 8153.29 MB Verfügbarer physikalischer RAM: 4748.98 MB Summe virtueller Speicher: 9433.29 MB Verfügbarer virtueller Speicher: 5767.59 MB ==================== Laufwerke ================================ Drive c: (Windows) (Fixed) (Total:919.68 GB) (Free:349.67 GB) NTFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: B26C2600) Partition 1: (Active) - (Size=346 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=919.7 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=469 MB) - (Type=27) Partition 4: (Not Active) - (Size=11 GB) - (Type=27) ==================== Ende von Addition.txt ============================ |
08.03.2016, 15:22 | #5 |
/// Malwareteam | Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........ Hi, von Downloads von Chip raten wir schon seit einiger Zeit ab: CHIP-Installer - was ist das? - Anleitungen Hast du den Ordner C:\AdwCleaner bzw. C:\Program Files\AdwCleaner? Wenn ja, dann müsste es darin eine AdwCleaner[Cx].txt geben, einfach den Inhalt der neusten hier posten. Und ich bräuchte das MBAM Log hier: Malwarebytes Anti-Malware Logfile finden - Anleitungen |
08.03.2016, 15:33 | #6 |
| Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........ Hallo Dennis, vielen Dank für den Tipp. Ja habe ich gefunden hier die gewünschte TXT. Ja im Nachhinein habe ich dann gelesen dass der Chip - Installer nicht gerade Optimal war ;-) Code:
ATTFilter # AdwCleaner v5.037 - Bericht erstellt am 05/03/2016 um 16:16:12 # Aktualisiert am 28/02/2016 von Xplode # Datenbank : 2016-03-02.1 [Server] # Betriebssystem : Windows 10 Home (x64) # Benutzername : Manfred - ARBEIT # Gestartet von : C:\Users\Manfred\Desktop\adwcleaner_5.037.exe # Option : Löschen # Unterstützung : hxxp://toolslib.net/forum ***** [ Dienste ] ***** ***** [ Ordner ] ***** ***** [ Dateien ] ***** ***** [ DLLs ] ***** ***** [ Verknüpfungen ] ***** ***** [ Aufgabenplanung ] ***** ***** [ Registrierungsdatenbank ] ***** [-] Schlüssel Gelöscht : HKCU\Software\OCS ***** [ Internetbrowser ] ***** [-] [C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : istartpageing [-] [C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : webssearches [-] [C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Gelöscht : hxxp://www.yessearches.com/?mode=nnnb&ptid=cos1&uid=03B1E295670E29870B715AE686CA03BB&v=20160301&ts=AHEpBn0sBHIoC0.. [-] [C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Gelöscht : hxxp://www.istartpageing.com/?type=hp&ts=1457088613&z=cefd9fdfdbb0eec97434cfcg1z2w2mde6b3baq9e6m&from=pcs&uid=TOSHIBAXDT01ACA100_13G8H2JPSXX13G8H2JPSX [-] [C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : lfmhcpmkbdkbgbmkjoiopeeegenkdikp [-] [C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : ombmmloebnfnpehgjnmkcgoegfachobp ************************* :: "Tracing" Schlüssel gelöscht :: Winsock Einstellungen zurückgesetzt ************************* C:\AdwCleaner\AdwCleaner[C1].txt - [22205 Bytes] - [04/03/2016 13:18:43] C:\AdwCleaner\AdwCleaner[C2].txt - [1833 Bytes] - [04/03/2016 13:46:57] C:\AdwCleaner\AdwCleaner[C3].txt - [1988 Bytes] - [05/03/2016 16:16:12] C:\AdwCleaner\AdwCleaner[R0].txt - [11869 Bytes] - [12/06/2014 10:39:48] C:\AdwCleaner\AdwCleaner[R1].txt - [7511 Bytes] - [14/07/2014 15:16:28] C:\AdwCleaner\AdwCleaner[R2].txt - [1142 Bytes] - [14/07/2014 17:12:35] C:\AdwCleaner\AdwCleaner[S0].txt - [10433 Bytes] - [12/06/2014 10:40:52] C:\AdwCleaner\AdwCleaner[S1].txt - [28394 Bytes] - [14/07/2014 16:36:48] C:\AdwCleaner\AdwCleaner[S2].txt - [3393 Bytes] - [14/07/2014 17:15:36] C:\AdwCleaner\AdwCleaner[S3].txt - [2263 Bytes] - [04/03/2016 13:42:59] C:\AdwCleaner\AdwCleaner[S4].txt - [1757 Bytes] - [04/03/2016 13:47:31] C:\AdwCleaner\AdwCleaner[S5].txt - [2584 Bytes] - [05/03/2016 16:08:01] ########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt - [2721 Bytes] ########## Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 07.03.2016 Suchlaufzeit: 13:55 Protokolldatei: scan neu+.txt Administrator: Ja Version: 2.2.0.1024 Malware-Datenbank: v2016.03.07.03 Rootkit-Datenbank: v2016.02.27.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 10 CPU: x64 Dateisystem: NTFS Benutzer: Manfred Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 675685 Abgelaufene Zeit: 1 Std., 20 Min., 10 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Aktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 0 (keine bösartigen Elemente erkannt) Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) |
08.03.2016, 15:45 | #7 |
/// Malwareteam | Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........ Hi, Schritt # 1: Spyhunter Cleaner Deaktiviere bitte dein Antivirenprogramm, da es die Entfernung von SpyHunter blockieren kann. Bitte downloade SpyHunterCleaner und speichere die Datei auf dem Desktop. (Bebilderte Anleitung)
Schritt # 2: JRT Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Schritt # 3: FRST Fix Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter CHR HKU\S-1-5-21-2836439086-123312676-467905238-1001\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG ManualProxies: HO-x32: YouProxy.YouProxy.YouProxy -> {bb4c50c9-d7f0-48ef-a67c-daf6a86830e4} -> C:\WINDOWS\SysWOW64\mscoree.dll [2015-10-30] (Microsoft Corporation) AlternateDataStreams: C:\ProgramData\TEMP:054203E4 [312] AlternateDataStreams: C:\ProgramData\TEMP:9FF7C773 [128] RemoveProxy: Hosts: EmptyTemp: Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt # 4: FRST Und noch ein frisches FRST-Log bitte. Schritt # 5: Bitte Posten
|
08.03.2016, 16:35 | #8 |
| Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........ Hallo Dennis, hier der log von JRT: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 8.0.3 (02.09.2016) Operating System: Windows 10 Home x64 Ran by Manfred (Administrator) on 08.03.2016 at 16:09:01,25 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ File System: 4 Successfully deleted: C:\Users\Manfred\AppData\Local\com (Folder) Successfully deleted: C:\Users\Manfred\AppData\Roaming\getrighttogo (Folder) Successfully deleted: C:\WINDOWS\prefetch\AVAST-FREE-ANTIVIRUS.EXE-3061D725.pf (File) Successfully deleted: C:\WINDOWS\prefetch\AVAST-FREE-ANTIVIRUS.EXE-8DEFFCD0.pf (File) Registry: 3 Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{90BE9D6A-D95E-4831-83DC-579445936B92} (Registry Key) Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bb4c50c9-d7f0-48ef-a67c-daf6a86830e4} (Registry Key) Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bb4c50c9-d7f0-48ef-a67c-daf6a86830e4} (Registry Key) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 08.03.2016 at 16:15:55,10 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-03-2016 01 durchgeführt von Manfred (2016-03-08 16:17:41) Run:1 Gestartet von C:\Users\Manfred\Desktop Geladene Profile: Manfred (Verfügbare Profile: Manfred & .NET v4.5 & DefaultAppPool & .NET v4.5 Classic) Start-Modus: Normal ============================================== fixlist Inhalt: ***************** CHR HKU\S-1-5-21-2836439086-123312676-467905238-1001\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG ManualProxies: HO-x32: YouProxy.YouProxy.YouProxy -> {bb4c50c9-d7f0-48ef-a67c-daf6a86830e4} -> C:\WINDOWS\SysWOW64\mscoree.dll [2015-10-30] (Microsoft Corporation) AlternateDataStreams: C:\ProgramData\TEMP:054203E4 [312] AlternateDataStreams: C:\ProgramData\TEMP:9FF7C773 [128] RemoveProxy: Hosts: EmptyTemp: ***************** "HKU\S-1-5-21-2836439086-123312676-467905238-1001\SOFTWARE\Policies\Google" => Schlüssel erfolgreich entfernt HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies\\ => Wert erfolgreich entfernt HO-x32: YouProxy.YouProxy.YouProxy -> {bb4c50c9-d7f0-48ef-a67c-daf6a86830e4} -> C:\WINDOWS\SysWOW64\mscoree.dll [2015-10-30] (Microsoft Corporation) => Fehler: Kein automatisierter Fix für diesen Eintrag gefunden. C:\ProgramData\TEMP => ":054203E4" ADS erfolgreich entfernt. C:\ProgramData\TEMP => ":9FF7C773" ADS erfolgreich entfernt. ========= RemoveProxy: ========= HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt HKU\S-1-5-21-2836439086-123312676-467905238-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt HKU\S-1-5-21-2836439086-123312676-467905238-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt ========= Ende von RemoveProxy: ========= C:\Windows\System32\Drivers\etc\hosts => erfolgreich verschoben Hosts erfolgreich wiederhergestellt. EmptyTemp: => 6.8 GB temporäre Dateien entfernt. Das System musste neu gestartet werden. ==== Ende von Fixlog 16:21:15 ==== Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01 durchgeführt von Manfred (Administrator) auf ARBEIT (08-03-2016 16:29:22) Gestartet von C:\Users\Manfred\Desktop Geladene Profile: Manfred (Verfügbare Profile: Manfred & .NET v4.5 & DefaultAppPool & .NET v4.5 Classic) Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AVAST Software) C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (Microsoft Corporation) C:\Windows\System32\TCPSVCS.EXE (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (Microsoft Corporation) C:\Windows\System32\mqsvc.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe (Microsoft Corporation) C:\Windows\System32\Speech_OneCore\Common\SpeechRuntime.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (SugarSync, Inc.) C:\Program Files (x86)\SugarSync\SugarSync.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe (Dropbox, Inc.) C:\Users\Manfred\AppData\Roaming\Dropbox\bin\Dropbox.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (RSA, The Security Division of EMC.) C:\Program Files (x86)\Common Files\RSA Shared\RSA Card Conversion Utility\RSACardConversionUtility.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe () C:\Program Files (x86)\onlinebrief24.de\ebdhelper.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicator.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\CSISYNCCLIENT.EXE (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSYNC.EXE (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10586.113_none_7689896a26389b16\TiWorker.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-27] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-09-23] (Apple Inc.) HKLM-x32\...\Run: [RSA Card Conversion Utility] => C:\Program Files (x86)\Common Files\RSA Shared\RSA Card Conversion Utility\RSACardConversionUtility.exe [3499728 2010-08-27] (RSA, The Security Division of EMC.) HKLM-x32\...\Run: [onlinebrief24-ebdhelper] => C:\Program Files (x86)\onlinebrief24.de\ebdhelper.exe [692224 2015-04-01] () HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [221216 2015-11-18] (Geek Software GmbH) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7139768 2016-03-04] (AVAST Software) HKLM-x32\...\RunOnce: [{d2c374d4-7d96-4dfb-8892-ecec0d6b4433}] => C:\ProgramData\Package Cache\{d2c374d4-7d96-4dfb-8892-ecec0d6b4433}\MicrosoftAzureTools.VS140.exe [510976 2015-09-21] (Microsoft Corporation) <===== ACHTUNG HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [SugarSync] => C:\Program Files (x86)\SugarSync\SugarSync.exe [18880528 2015-09-28] (SugarSync, Inc.) HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [2895552 2015-07-24] (Valve Corporation) HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [HP Officejet Pro 8600 (NET)] => C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.) HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [THPanel] => C:\Program Files (x86)\Thunder Master\THPanel.exe [2197288 2014-10-17] (Palit Microsystems Ltd.) HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Spotify Web Helper] => C:\Users\Manfred\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2020920 2015-04-23] (Spotify Ltd) HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Spotify] => C:\Users\Manfred\AppData\Roaming\Spotify\Spotify.exe [7168568 2015-04-23] (Spotify Ltd) HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Dropbox Update] => C:\Users\Manfred\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-16] (Dropbox, Inc.) HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Adobe Acrobat Synchronizer] => "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe" HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50599552 2016-02-10] (Skype Technologies S.A.) HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\RunOnce: [Uninstall C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64" HKU\S-1-5-21-2836439086-123312676-467905238-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssText3d.scr [232960 2015-10-30] (Microsoft Corporation) SSODL: EldosMountNotificator - {C28617FD-4FE7-4043-AD51-C8132CE90106} - C:\WINDOWS\system32\SSCbFsMntNtf3.dll (EldoS Corporation) SSODL-x32: EldosMountNotificator - {C28617FD-4FE7-4043-AD51-C8132CE90106} - C:\WINDOWS\SysWow64\SSCbFsMntNtf3.dll (EldoS Corporation) ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64\FileSyncShell64.dll [2016-02-11] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64\FileSyncShell64.dll [2016-02-11] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64\FileSyncShell64.dll [2016-02-11] (Microsoft Corporation) ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-03-04] (AVAST Software) ShellIconOverlayIdentifiers: [EldosIconOverlay] -> {69925D1B-6A0F-4413-861A-81AB98039DB9} => C:\WINDOWS\system32\SSCbFsMntNtf3.dll [2013-01-30] (EldoS Corporation) ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2015-09-28] (SugarSync, Inc.) ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2015-09-28] (SugarSync, Inc.) ShellIconOverlayIdentifiers: [SugarSyncSharedSyncing] -> {F7395C2E-A5D8-4a32-9536-5C6A9F1DC450} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2015-09-28] (SugarSync, Inc.) ShellIconOverlayIdentifiers: [SugarSyncSynced] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2015-09-28] (SugarSync, Inc.) ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileSyncShell.dll [2016-02-11] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileSyncShell.dll [2016-02-11] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileSyncShell.dll [2016-02-11] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [EldosIconOverlay] -> {69925D1B-6A0F-4413-861A-81AB98039DB9} => C:\WINDOWS\SysWow64\SSCbFsMntNtf3.dll [2013-01-30] (EldoS Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GoPro Importer.lnk [2016-03-07] ShortcutTarget: GoPro Importer.lnk -> C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe (GoPro) Startup: C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-03-07] ShortcutTarget: Dropbox.lnk -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{018df403-5469-41da-bf60-c308cf3fe914}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-21-2836439086-123312676-467905238-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} HKU\S-1-5-21-2836439086-123312676-467905238-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://de.yahoo.com/?fr=hp-avast&type=avastbcl HKU\S-1-5-21-2836439086-123312676-467905238-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/ HKU\S-1-5-21-2836439086-123312676-467905238-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} SearchScopes: HKU\S-1-5-21-2836439086-123312676-467905238-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2836439086-123312676-467905238-1001 -> {4E911957-A024-4D49-94F3-E92DB8FBF8EF} URL = hxxp://www.bing.com/search?FORM=BDT3DF&PC=BDT3&dt=072313&q={searchTerms}&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-2836439086-123312676-467905238-1001 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKU\S-1-5-21-2836439086-123312676-467905238-1001 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-02-05] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-07-20] (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-03-04] (AVAST Software) BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-02-04] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-07-20] (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-23] (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-03-04] (AVAST Software) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-23] (Oracle Corporation) Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - Keine Datei Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - Keine Datei Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1 FF NewTab: about:newtab FF DefaultSearchEngine: Google (avast) FF DefaultSearchUrl: hxxps://www.google.com/search?trackid=sp-006 FF SearchEngineOrder.1: Google (avast) FF SelectedSearchEngine: Google (avast) FF Homepage: hxxps://www.google.com/?trackid=sp-006 FF Keyword.URL: hxxps://www.google.com/search?trackid=sp-006 FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-10] () FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.) FF Plugin: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-07-20] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-07-20] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Keine Datei] FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-10] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] () FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-23] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-23] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-02-04] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-25] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-25] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.) FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-2836439086-123312676-467905238-1001: @citrixonline.com/appdetectorplugin -> C:\Users\Manfred\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2015-10-07] (Citrix Online) FF Plugin HKU\S-1-5-21-2836439086-123312676-467905238-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.) FF Plugin HKU\S-1-5-21-2836439086-123312676-467905238-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Manfred\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-03-24] (Unity Technologies ApS) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.) FF SearchPlugin: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\u93s10rd.default\searchplugins\google-avast.xml [2016-03-04] FF SearchPlugin: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\u93s10rd.default\searchplugins\yahoo-avast.xml [2015-06-17] FF SearchPlugin: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\google-avast.xml [2016-03-04] FF SearchPlugin: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\yahoo-avast.xml [2015-06-17] FF Extension: Greasemonkey - C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\u93s10rd.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2015-04-23] [ist nicht signiert] FF Extension: Greasemonkey - C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2015-04-23] [ist nicht signiert] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-03-05] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF Chrome: ======= CHR HomePage: Default -> hxxp://www.google.de/ CHR StartupUrls: Default -> "hxxp://google.de/","hxxps://mail.google.com/mail/u/0/#inbox","hxxp://www.bing.com/" CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.75\PepperFlash\pepflashplayer.dll () CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.75\ppGoogleNaClPluginChrome.dll => Keine Datei CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.75\pdf.dll => Keine Datei CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll => Keine Datei CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll => Keine Datei CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Unity Player) - C:\Users\Manfred\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll => Keine Datei CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll => Keine Datei CHR Profile: C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Drive) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-05] CHR Extension: (YouTube) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-05] CHR Extension: (Adblock Plus) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-05] CHR Extension: (Google Kalender) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2016-03-05] CHR Extension: (Google Docs Offline) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-07] CHR Extension: (Avast Online Security) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-03-05] CHR Extension: (Dropbox) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2016-03-05] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-03-05] CHR Extension: (Google Mail) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-05] CHR Profile: C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1 CHR Extension: (Google Präsentationen) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-01] CHR Extension: (Google Docs) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-01] CHR Extension: (Google Drive) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-27] CHR Extension: (YouTube) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (Adblock Plus) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-09] CHR Extension: (Google-Suche) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28] CHR Extension: (Lumin - Best Document Viewer) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dbkidnlfklnjanneifjjojofckpcogcl [2015-07-27] CHR Extension: (Gmail offline) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk [2015-07-27] CHR Extension: (Google Tabellen) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-01] CHR Extension: (Google Docs Offline) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-20] CHR Extension: (In Google Drive speichern) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gmbmikajjgmnabiglmofipeabaddhgne [2015-07-27] CHR Extension: (Avast Online Security) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-03-04] CHR Extension: (PDF Viewer) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jccchjobcggajhnmckffhcahkkbioifn [2015-08-03] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-27] CHR Extension: (Google Mail) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-01] CHR Profile: C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2 CHR Extension: (Google Docs) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-11] CHR Extension: (Google Drive) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21] CHR Extension: (YouTube) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24] CHR Extension: (Adblock Plus) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-05] CHR Extension: (Google-Suche) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27] CHR Extension: (Avast Online Security) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-03-07] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-11] CHR Extension: (Google Mail) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-11] CHR Profile: C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3 CHR Extension: (Google Drive) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-21] CHR Extension: (YouTube) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-21] CHR Extension: (Google-Suche) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-21] CHR Extension: (Avast SafePrice) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-04-21] CHR Extension: (Avast Online Security) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-21] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-26] CHR Extension: (Google Wallet) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-15] CHR Extension: (Google Mail) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-21] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx <nicht gefunden> CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-03-04] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2020056 2016-02-09] (Adobe Systems, Incorporated) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-09-15] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert] R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-09-02] (Apple Inc.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-03-04] (AVAST Software) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2804976 2016-02-04] (Microsoft Corporation) S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-19] (Microsoft Corporation) [Datei ist nicht signiert] R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-08-27] (NVIDIA Corporation) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Datei ist nicht signiert] R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [22744 2014-10-15] (Microsoft Corporation) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-27] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-27] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2007048 2015-08-04] (Electronic Arts) S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.) S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [Datei ist nicht signiert] S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation) S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [52968 2015-07-06] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36520 2012-09-13] (Advanced Micro Devices, Inc.) S2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices) R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-03-04] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-03-04] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-03-04] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-03-04] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1065720 2016-03-04] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [463744 2016-03-04] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [165344 2016-03-04] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287016 2016-03-04] (AVAST Software) S3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( ) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation) S3 Netaapl; C:\Windows\system32\DRIVERS\netaapl64.sys [23040 2013-07-25] (Apple Inc.) [Datei ist nicht signiert] R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-27] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation) R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [216064 2015-10-30] (Microsoft Corporation) R3 SSCBFS3; C:\Windows\System32\drivers\sscbfs3.sys [347904 2013-01-30] (EldoS Corporation) S3 taphss6; C:\Windows\system32\DRIVERS\taphss6.sys [42184 2013-02-22] (Anchorfree Inc.) S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2015-06-17] (Apple, Inc.) [Datei ist nicht signiert] S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) S0 wypvcacb; System32\drivers\pupio.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-03-08 16:17 - 2016-03-08 16:21 - 00002365 _____ C:\Users\Manfred\Desktop\Fixlog.txt 2016-03-08 16:15 - 2016-03-08 16:15 - 00001328 _____ C:\Users\Manfred\Desktop\JRT.txt 2016-03-08 16:08 - 2016-03-08 16:08 - 01609216 _____ (Malwarebytes) C:\Users\Manfred\Downloads\JRT.exe 2016-03-08 16:08 - 2016-03-08 16:08 - 01609216 _____ (Malwarebytes) C:\Users\Manfred\Desktop\JRT.exe 2016-03-08 16:04 - 2016-03-08 16:04 - 00000000 ___HD C:\OneDriveTemp 2016-03-08 16:00 - 2016-03-08 16:00 - 00508416 _____ C:\Users\Manfred\Downloads\SpyHunterCleaner.exe 2016-03-08 15:31 - 2016-03-08 15:31 - 00001209 _____ C:\Users\Manfred\Desktop\scan neu+.txt 2016-03-08 15:11 - 2016-03-08 15:18 - 00078949 _____ C:\Users\Manfred\Desktop\Addition.txt 2016-03-08 14:54 - 2016-03-08 16:29 - 00039957 _____ C:\Users\Manfred\Desktop\FRST.txt 2016-03-08 14:54 - 2016-03-08 16:29 - 00000000 ____D C:\FRST 2016-03-08 14:53 - 2016-03-08 14:54 - 02374144 _____ (Farbar) C:\Users\Manfred\Desktop\FRST64.exe 2016-03-08 12:54 - 2016-03-08 12:57 - 00002435 _____ C:\Users\Manfred\Desktop\Manfred - Chrome.lnk 2016-03-07 13:41 - 2016-03-07 13:42 - 03840080 _____ (AVAST Software) C:\Users\Manfred\Downloads\avast-browse104-cleanup-sfx.exe 2016-03-07 13:41 - 2016-03-07 13:42 - 00000000 ____D C:\Program Files (x86)\AdwCleaner 2016-03-07 12:25 - 2016-03-07 12:25 - 00205349 _____ C:\Users\Manfred\Downloads\Wentenschuh-Schnorr (2).pdf 2016-03-07 12:25 - 2016-03-07 12:25 - 00205349 _____ C:\Users\Manfred\Downloads\Wentenschuh-Schnorr (1).pdf 2016-03-07 11:26 - 2016-03-07 11:26 - 03430855 _____ C:\Users\Manfred\Downloads\scan.pdf 2016-03-07 10:50 - 2016-03-07 10:50 - 00244429 _____ C:\Users\Manfred\Downloads\Wentenschuh-Schnorr.pdf 2016-03-07 10:16 - 2016-03-07 10:16 - 00000000 __SHD C:\found.001 2016-03-05 16:13 - 2016-03-04 12:23 - 00398152 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2016-03-05 16:02 - 2016-03-05 16:02 - 00987728 _____ (Google Inc.) C:\Users\Manfred\Downloads\ChromeSetup (1).exe 2016-03-05 14:29 - 2016-03-05 14:29 - 00987728 _____ (Google Inc.) C:\Users\Manfred\Downloads\ChromeSetup.exe 2016-03-04 13:58 - 2016-03-08 15:29 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2016-03-04 13:53 - 2016-03-07 10:39 - 00001172 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2016-03-04 13:53 - 2016-03-04 13:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2016-03-04 13:53 - 2016-03-04 13:53 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-03-04 13:53 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2016-03-04 13:53 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2016-03-04 13:53 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2016-03-04 13:51 - 2016-03-04 13:51 - 01470472 _____ C:\Users\Manfred\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe 2016-03-04 13:43 - 2016-03-04 13:43 - 05600464 _____ (Piriform Ltd) C:\Users\Manfred\Downloads\ccsetup515_slim.exe 2016-03-04 13:09 - 2016-03-04 13:09 - 01518592 _____ C:\Users\Manfred\Downloads\adwcleaner_5.037.exe 2016-03-04 13:05 - 2016-03-07 10:39 - 00001915 _____ C:\Users\Public\Desktop\QuickTime Player.lnk 2016-03-04 13:05 - 2016-03-04 13:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2016-03-04 12:23 - 2016-03-04 12:23 - 00052184 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2016-03-04 12:21 - 2016-03-07 10:39 - 00002030 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk 2016-03-04 12:21 - 2016-03-07 10:39 - 00002012 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2016-03-04 12:21 - 2016-03-04 12:21 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\AVAST Software 2016-03-04 12:20 - 2016-03-04 12:25 - 00463744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2016-03-04 12:20 - 2016-03-04 12:25 - 00287016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys 2016-03-04 12:20 - 2016-03-04 12:23 - 01065720 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2016-03-04 12:20 - 2016-03-04 12:23 - 00165344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys 2016-03-04 12:20 - 2016-03-04 12:23 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2016-03-04 12:20 - 2016-03-04 12:23 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2016-03-04 12:20 - 2016-03-04 12:23 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys 2016-03-04 12:20 - 2016-03-04 12:23 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys 2016-03-04 11:38 - 2016-03-04 11:38 - 00000000 ____D C:\ProgramData\AVAST Software 2016-03-04 11:38 - 2016-03-04 11:38 - 00000000 ____D C:\Program Files\AVAST Software 2016-03-04 11:05 - 2016-03-04 11:05 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\dlg 2016-03-04 11:00 - 2016-03-04 11:10 - 00000306 __RSH C:\ProgramData\ntuser.pol 2016-03-04 10:59 - 2016-03-04 10:59 - 00000000 ____D C:\Users\Public\Documents\dmp 2016-03-03 14:43 - 2016-03-03 14:43 - 00066341 _____ C:\Users\Manfred\Desktop\Lohnabrechnung März.pdf 2016-03-03 14:39 - 2016-03-03 14:39 - 00346618 _____ C:\Users\Manfred\Downloads\607673_VAB (1).lo2 2016-03-03 13:44 - 2016-03-03 13:44 - 00119924 _____ C:\Users\Manfred\Downloads\607673_VAB.lo2 2016-03-03 11:53 - 2016-03-03 11:53 - 00092824 _____ C:\Users\Manfred\Downloads\x0392.pdf 2016-03-02 12:28 - 2016-03-02 12:28 - 00011931 _____ C:\Users\Manfred\AppData\Local\recently-used.xbel 2016-03-02 11:49 - 2016-02-23 12:27 - 07475040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-03-02 11:49 - 2016-02-23 12:27 - 02654872 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2016-03-02 11:49 - 2016-02-23 12:25 - 02152288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2016-03-02 11:49 - 2016-02-23 12:25 - 01818696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2016-03-02 11:49 - 2016-02-23 12:23 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2016-03-02 11:49 - 2016-02-23 12:22 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2016-03-02 11:49 - 2016-02-23 12:15 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2016-03-02 11:49 - 2016-02-23 11:34 - 01859960 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2016-03-02 11:49 - 2016-02-23 11:34 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2016-03-02 11:49 - 2016-02-23 11:32 - 08705672 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2016-03-02 11:49 - 2016-02-23 11:32 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2016-03-02 11:49 - 2016-02-23 11:32 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2016-03-02 11:49 - 2016-02-23 11:32 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2016-03-02 11:49 - 2016-02-23 11:31 - 01017032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2016-03-02 11:49 - 2016-02-23 11:31 - 00847656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2016-03-02 11:49 - 2016-02-23 11:31 - 00819648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2016-03-02 11:49 - 2016-02-23 11:31 - 00536256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2016-03-02 11:49 - 2016-02-23 11:31 - 00408120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2016-03-02 11:49 - 2016-02-23 11:25 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2016-03-02 11:49 - 2016-02-23 11:21 - 22564328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2016-03-02 11:49 - 2016-02-23 11:21 - 06606568 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2016-03-02 11:49 - 2016-02-23 10:45 - 02773096 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2016-03-02 11:49 - 2016-02-23 10:45 - 01998176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2016-03-02 11:49 - 2016-02-23 10:45 - 00576352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2016-03-02 11:49 - 2016-02-23 10:38 - 06952088 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2016-03-02 11:49 - 2016-02-23 10:38 - 00980352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2016-03-02 11:49 - 2016-02-23 10:38 - 00895080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2016-03-02 11:49 - 2016-02-23 10:38 - 00882720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2016-03-02 11:49 - 2016-02-23 10:38 - 00709176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2016-03-02 11:49 - 2016-02-23 10:30 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2016-03-02 11:49 - 2016-02-23 10:27 - 21124344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2016-03-02 11:49 - 2016-02-23 10:26 - 05241984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2016-03-02 11:49 - 2016-02-23 09:58 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll 2016-03-02 11:49 - 2016-02-23 09:58 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2016-03-02 11:49 - 2016-02-23 09:56 - 02186864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2016-03-02 11:49 - 2016-02-23 09:37 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2016-03-02 11:49 - 2016-02-23 09:29 - 00591872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll 2016-03-02 11:49 - 2016-02-23 09:28 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2016-03-02 11:49 - 2016-02-23 09:09 - 01390592 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2016-03-02 11:49 - 2016-02-23 09:09 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2016-03-02 11:49 - 2016-02-23 09:06 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2016-03-02 11:49 - 2016-02-23 09:06 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll 2016-03-02 11:49 - 2016-02-23 09:06 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2016-03-02 11:49 - 2016-02-23 09:02 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2016-03-02 11:49 - 2016-02-23 09:00 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2016-03-02 11:49 - 2016-02-23 08:58 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2016-03-02 11:49 - 2016-02-23 08:52 - 00456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll 2016-03-02 11:49 - 2016-02-23 08:41 - 03594240 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2016-03-02 11:49 - 2016-02-23 08:30 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2016-03-02 11:49 - 2016-02-23 08:30 - 01731584 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-03-02 11:49 - 2016-02-23 08:26 - 02158592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2016-03-02 11:49 - 2016-02-23 08:25 - 01996288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll 2016-03-02 11:49 - 2016-02-23 08:24 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2016-03-02 11:49 - 2016-02-23 08:22 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll 2016-03-02 11:49 - 2016-02-23 08:21 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll 2016-03-02 11:49 - 2016-02-23 08:17 - 02635264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2016-03-02 11:49 - 2016-02-23 07:59 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-03-02 11:49 - 2016-02-23 07:55 - 04894208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-03-02 11:49 - 2016-02-23 07:55 - 02229760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2016-03-02 11:49 - 2016-02-23 07:55 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll 2016-03-02 11:49 - 2016-02-23 07:52 - 11545600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2016-03-02 11:49 - 2016-02-23 07:50 - 22396416 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-03-02 11:49 - 2016-02-23 07:50 - 09919488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2016-03-02 11:49 - 2016-02-23 07:40 - 24603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-03-02 11:49 - 2016-02-23 07:39 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-03-02 11:49 - 2016-02-23 07:39 - 02581504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2016-03-02 11:49 - 2016-02-23 07:36 - 19341312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-03-02 11:49 - 2016-02-23 07:36 - 18680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-03-02 11:49 - 2016-02-23 07:36 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-03-02 11:49 - 2016-02-23 07:36 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-03-02 11:49 - 2016-02-23 07:33 - 14254080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2016-03-02 11:49 - 2016-02-23 07:30 - 02061312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2016-03-02 11:49 - 2016-02-09 04:24 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2016-03-02 11:49 - 2016-02-09 04:07 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2016-03-02 11:49 - 2016-02-09 04:04 - 01946624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2016-03-02 11:48 - 2016-02-23 12:29 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2016-03-02 11:48 - 2016-02-23 12:29 - 00874968 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2016-03-02 11:48 - 2016-02-23 12:27 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2016-03-02 11:48 - 2016-02-23 12:27 - 01141504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2016-03-02 11:48 - 2016-02-23 12:25 - 00563552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys 2016-03-02 11:48 - 2016-02-23 12:15 - 00779384 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll 2016-03-02 11:48 - 2016-02-23 12:09 - 01614176 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2016-03-02 11:48 - 2016-02-23 12:08 - 00989536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2016-03-02 11:48 - 2016-02-23 11:33 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2016-03-02 11:48 - 2016-02-23 11:33 - 00389992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll 2016-03-02 11:48 - 2016-02-23 11:32 - 01152328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2016-03-02 11:48 - 2016-02-23 11:32 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll 2016-03-02 11:48 - 2016-02-23 11:31 - 00476728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll 2016-03-02 11:48 - 2016-02-23 11:22 - 00572272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll 2016-03-02 11:48 - 2016-02-23 11:17 - 00146272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys 2016-03-02 11:48 - 2016-02-23 10:49 - 00216416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2016-03-02 11:48 - 2016-02-23 10:45 - 00394080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2016-03-02 11:48 - 2016-02-23 10:45 - 00259336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqmapi.dll 2016-03-02 11:48 - 2016-02-23 10:44 - 00640984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2016-03-02 11:48 - 2016-02-23 10:44 - 00147808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe 2016-03-02 11:48 - 2016-02-23 10:40 - 00430944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2016-03-02 11:48 - 2016-02-23 10:39 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2016-03-02 11:48 - 2016-02-23 10:38 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2016-03-02 11:48 - 2016-02-23 10:38 - 00450912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll 2016-03-02 11:48 - 2016-02-23 10:38 - 00420928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll 2016-03-02 11:48 - 2016-02-23 10:37 - 00713824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2016-03-02 11:48 - 2016-02-23 10:32 - 00791744 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2016-03-02 11:48 - 2016-02-23 10:27 - 00376536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll 2016-03-02 11:48 - 2016-02-23 10:25 - 00534368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2016-03-02 11:48 - 2016-02-23 10:20 - 01139712 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSave.dll 2016-03-02 11:48 - 2016-02-23 10:20 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys 2016-03-02 11:48 - 2016-02-23 10:19 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys 2016-03-02 11:48 - 2016-02-23 10:17 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll 2016-03-02 11:48 - 2016-02-23 10:12 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\provpackageapidll.dll 2016-03-02 11:48 - 2016-02-23 10:10 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll 2016-03-02 11:48 - 2016-02-23 10:07 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2016-03-02 11:48 - 2016-02-23 10:07 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll 2016-03-02 11:48 - 2016-02-23 10:06 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll 2016-03-02 11:48 - 2016-02-23 10:01 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys 2016-03-02 11:48 - 2016-02-23 10:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll 2016-03-02 11:48 - 2016-02-23 10:00 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll 2016-03-02 11:48 - 2016-02-23 09:58 - 00187744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2016-03-02 11:48 - 2016-02-23 09:58 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\irmon.dll 2016-03-02 11:48 - 2016-02-23 09:57 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2016-03-02 11:48 - 2016-02-23 09:55 - 00221600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqmapi.dll 2016-03-02 11:48 - 2016-02-23 09:55 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys 2016-03-02 11:48 - 2016-02-23 09:54 - 00539256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2016-03-02 11:48 - 2016-02-23 09:54 - 00141664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe 2016-03-02 11:48 - 2016-02-23 09:53 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll 2016-03-02 11:48 - 2016-02-23 09:53 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll 2016-03-02 11:48 - 2016-02-23 09:52 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe 2016-03-02 11:48 - 2016-02-23 09:50 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2016-03-02 11:48 - 2016-02-23 09:48 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll 2016-03-02 11:48 - 2016-02-23 09:48 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerClient.dll 2016-03-02 11:48 - 2016-02-23 09:40 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll 2016-03-02 11:48 - 2016-02-23 09:39 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2016-03-02 11:48 - 2016-02-23 09:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll 2016-03-02 11:48 - 2016-02-23 09:38 - 00287712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll 2016-03-02 11:48 - 2016-02-23 09:37 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll 2016-03-02 11:48 - 2016-02-23 09:37 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2016-03-02 11:48 - 2016-02-23 09:36 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuickActionsDataModel.dll 2016-03-02 11:48 - 2016-02-23 09:34 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll 2016-03-02 11:48 - 2016-02-23 09:34 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll 2016-03-02 11:48 - 2016-02-23 09:33 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll 2016-03-02 11:48 - 2016-02-23 09:32 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2016-03-02 11:48 - 2016-02-23 09:31 - 00463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2016-03-02 11:48 - 2016-02-23 09:30 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll 2016-03-02 11:48 - 2016-02-23 09:28 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\scapi.dll 2016-03-02 11:48 - 2016-02-23 09:27 - 00307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll 2016-03-02 11:48 - 2016-02-23 09:26 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe 2016-03-02 11:48 - 2016-02-23 09:25 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll 2016-03-02 11:48 - 2016-02-23 09:25 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe 2016-03-02 11:48 - 2016-02-23 09:23 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll 2016-03-02 11:48 - 2016-02-23 09:22 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll 2016-03-02 11:48 - 2016-02-23 09:22 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll 2016-03-02 11:48 - 2016-02-23 09:20 - 00847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2016-03-02 11:48 - 2016-02-23 09:20 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2016-03-02 11:48 - 2016-02-23 09:20 - 00493568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll 2016-03-02 11:48 - 2016-02-23 09:20 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2016-03-02 11:48 - 2016-02-23 09:19 - 00948736 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll 2016-03-02 11:48 - 2016-02-23 09:19 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2016-03-02 11:48 - 2016-02-23 09:18 - 00557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2016-03-02 11:48 - 2016-02-23 09:14 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll 2016-03-02 11:48 - 2016-02-23 09:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2016-03-02 11:48 - 2016-02-23 09:13 - 00915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\configurationclient.dll 2016-03-02 11:48 - 2016-02-23 09:13 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll 2016-03-02 11:48 - 2016-02-23 09:12 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2016-03-02 11:48 - 2016-02-23 09:11 - 01224704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll 2016-03-02 11:48 - 2016-02-23 09:11 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2016-03-02 11:48 - 2016-02-23 09:10 - 00997376 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll 2016-03-02 11:48 - 2016-02-23 09:10 - 00474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll 2016-03-02 11:48 - 2016-02-23 09:09 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2016-03-02 11:48 - 2016-02-23 09:09 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2016-03-02 11:48 - 2016-02-23 09:06 - 01848832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe 2016-03-02 11:48 - 2016-02-23 09:05 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2016-03-02 11:48 - 2016-02-23 09:04 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll 2016-03-02 11:48 - 2016-02-23 09:04 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2016-03-02 11:48 - 2016-02-23 09:04 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2016-03-02 11:48 - 2016-02-23 09:02 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe 2016-03-02 11:48 - 2016-02-23 09:02 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2016-03-02 11:48 - 2016-02-23 08:58 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2016-03-02 11:48 - 2016-02-23 08:58 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll 2016-03-02 11:48 - 2016-02-23 08:58 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2016-03-02 11:48 - 2016-02-23 08:57 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TimeBrokerClient.dll 2016-03-02 11:48 - 2016-02-23 08:54 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll 2016-03-02 11:48 - 2016-02-23 08:50 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll 2016-03-02 11:48 - 2016-02-23 08:49 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll 2016-03-02 11:48 - 2016-02-23 08:48 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2016-03-02 11:48 - 2016-02-23 08:47 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll 2016-03-02 11:48 - 2016-02-23 08:47 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll 2016-03-02 11:48 - 2016-02-23 08:38 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll 2016-03-02 11:48 - 2016-02-23 08:37 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2016-03-02 11:48 - 2016-02-23 08:37 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll 2016-03-02 11:48 - 2016-02-23 08:37 - 00394752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll 2016-03-02 11:48 - 2016-02-23 08:36 - 00713728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll 2016-03-02 11:48 - 2016-02-23 08:36 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll 2016-03-02 11:48 - 2016-02-23 08:36 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2016-03-02 11:48 - 2016-02-23 08:35 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2016-03-02 11:48 - 2016-02-23 08:31 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll 2016-03-02 11:48 - 2016-02-23 08:31 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll 2016-03-02 11:48 - 2016-02-23 08:30 - 01832448 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2016-03-02 11:48 - 2016-02-23 08:30 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll 2016-03-02 11:48 - 2016-02-23 08:29 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll 2016-03-02 11:48 - 2016-02-23 08:29 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll 2016-03-02 11:48 - 2016-02-23 08:28 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll 2016-03-02 11:48 - 2016-02-23 08:28 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll 2016-03-02 11:48 - 2016-02-23 08:26 - 01498112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe 2016-03-02 11:48 - 2016-02-23 08:24 - 04827136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll 2016-03-02 11:48 - 2016-02-23 08:24 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll 2016-03-02 11:48 - 2016-02-23 08:24 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2016-03-02 11:48 - 2016-02-23 08:21 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll 2016-03-02 11:48 - 2016-02-23 08:20 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll 2016-03-02 11:48 - 2016-02-23 08:14 - 00990720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2016-03-02 11:48 - 2016-02-23 08:11 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2016-03-02 11:48 - 2016-02-23 08:05 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll 2016-03-02 11:48 - 2016-02-23 08:01 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2016-03-02 11:48 - 2016-02-23 07:58 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll 2016-03-02 11:48 - 2016-02-23 07:56 - 04412928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll 2016-03-02 11:48 - 2016-02-23 07:53 - 01799168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2016-03-02 11:48 - 2016-02-23 07:51 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2016-03-02 11:48 - 2016-02-23 07:42 - 03425792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2016-03-02 11:48 - 2016-02-23 07:41 - 02912256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll 2016-03-02 11:48 - 2016-02-23 07:35 - 07533568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2016-03-02 11:48 - 2016-02-23 07:33 - 02604032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll 2016-03-02 11:48 - 2016-02-23 07:32 - 02793472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2016-03-02 11:48 - 2016-02-23 07:28 - 06740992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2016-03-02 11:48 - 2016-02-23 07:26 - 12587520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2016-03-02 11:48 - 2016-02-09 05:28 - 00277856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2016-03-02 11:48 - 2016-02-09 05:13 - 00185184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2016-03-02 11:48 - 2016-02-09 04:18 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll 2016-03-02 11:48 - 2016-02-09 04:18 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll 2016-03-02 11:48 - 2016-02-09 04:07 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe 2016-02-29 15:25 - 2016-02-29 15:25 - 00130430 _____ C:\Users\Manfred\Desktop\meineSchufaneu (1).pdf 2016-02-29 15:19 - 2016-03-07 10:38 - 00001129 _____ C:\Users\Manfred\Desktop\Free PDF to Word Doc Converter.lnk 2016-02-29 15:19 - 2016-02-29 15:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free PDF to Word Doc Converter 2016-02-29 15:19 - 2016-02-29 15:19 - 00000000 ____D C:\Program Files (x86)\Free PDF to Word Doc Converter 2016-02-29 15:17 - 2016-02-29 15:18 - 01470472 _____ C:\Users\Manfred\Downloads\Free PDF to Word Doc Converter - CHIP-Installer.exe 2016-02-29 15:15 - 2016-02-29 15:15 - 00104862 _____ C:\Users\Manfred\Downloads\meineSchufaneu (1).pdf 2016-02-29 12:58 - 2016-02-29 12:58 - 00031121 _____ C:\Users\Manfred\Downloads\Angebot11456.pdf 2016-02-29 12:57 - 2016-02-29 12:57 - 00044952 _____ C:\Users\Manfred\Downloads\x0390.pdf 2016-02-25 17:59 - 2016-02-25 17:59 - 00345801 _____ C:\Users\Manfred\Downloads\91_lang__expose (1).pdf 2016-02-25 17:44 - 2016-02-25 17:44 - 00310409 _____ C:\Users\Manfred\Downloads\91_lang__expose.pdf 2016-02-22 15:57 - 2016-02-22 15:57 - 00042689 _____ C:\Users\Manfred\Downloads\Fax_2198905e9_498936082240_1455369278.pdf 2016-02-22 15:57 - 2016-02-22 15:57 - 00042689 _____ C:\Users\Manfred\Downloads\Fax_2198905e9_498936082240_1455369278 (1).pdf 2016-02-22 14:14 - 2016-02-22 14:14 - 00292865 _____ C:\Users\Manfred\Downloads\BV ueber Versicherungsnehmergemeinschaft 30072 09 2015 (1) (1).pdf 2016-02-22 13:59 - 2016-02-22 13:59 - 00039032 _____ C:\Users\Manfred\Downloads\BV ueber Versicherungsnehmergemeinschaft 30072 09 2015 (1).pdf 2016-02-22 13:57 - 2016-02-22 13:57 - 00041343 _____ C:\Users\Manfred\Downloads\SFR-Übertragung - Betriebsübergabe 30053 09 2015.pdf 2016-02-22 13:56 - 2016-02-22 13:56 - 00046393 _____ C:\Users\Manfred\Downloads\SFR-Übertragung auf einen anderen VN (AKB I.6.1.3) 30112 09 2015.pdf 2016-02-22 13:56 - 2016-02-22 13:56 - 00039032 _____ C:\Users\Manfred\Downloads\BV ueber Versicherungsnehmergemeinschaft 30072 09 2015.pdf 2016-02-20 13:07 - 2016-03-07 10:39 - 00002923 _____ C:\Users\Public\Desktop\Nero 2016.lnk 2016-02-20 13:07 - 2016-02-20 13:07 - 00000000 ____D C:\WINDOWS\System32\Tasks\Nero 2016-02-20 13:06 - 2016-02-20 13:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2016 2016-02-20 13:06 - 2016-02-20 13:07 - 00000000 ____D C:\Program Files (x86)\Nero 2016-02-20 13:06 - 2016-02-20 13:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2016-02-20 13:02 - 2016-02-20 13:03 - 02559488 _____ (Nero AG) C:\Users\Manfred\Downloads\Nero_BurningROM2016-21.09.2015_stub_trial.exe 2016-02-19 15:20 - 2016-02-19 15:20 - 00114402 _____ C:\Users\Manfred\Downloads\Expose_kurz!1635!!10875.htm 2016-02-19 12:23 - 2016-02-19 12:23 - 00254523 _____ C:\Users\Manfred\Downloads\ent003_0.pdf 2016-02-18 16:05 - 2016-02-19 11:36 - 00000000 ____D C:\Users\Manfred\Downloads\Expose_kurz!1635!!10875-Dateien 2016-02-18 16:03 - 2016-02-18 16:03 - 00085479 _____ C:\Users\Manfred\Downloads\6568_kurz__expose (5).pdf 2016-02-18 16:03 - 2016-02-18 16:03 - 00083820 _____ C:\Users\Manfred\Downloads\6568_kurz__expose (4).pdf 2016-02-18 16:02 - 2016-02-18 16:02 - 00083816 _____ C:\Users\Manfred\Downloads\6568_kurz__expose (3).pdf 2016-02-18 14:35 - 2016-02-18 14:35 - 00106227 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (6).pdf 2016-02-18 14:35 - 2016-02-18 14:35 - 00104329 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (5).pdf 2016-02-18 14:22 - 2016-02-18 14:22 - 00104334 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (4).pdf 2016-02-18 14:21 - 2016-02-18 14:21 - 00106465 _____ C:\Users\Manfred\Downloads\6450_lang__expose (3).pdf 2016-02-18 14:21 - 2016-02-18 14:21 - 00104337 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (3).pdf 2016-02-18 14:20 - 2016-02-18 14:20 - 00019185 _____ C:\Users\Manfred\Downloads\6450_dokument_objektnachweis.pdf 2016-02-18 14:13 - 2016-02-18 14:13 - 00106225 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (2).pdf 2016-02-18 14:11 - 2016-02-18 14:12 - 00107865 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (1).pdf 2016-02-18 14:11 - 2016-02-18 14:11 - 00104329 _____ C:\Users\Manfred\Downloads\6450_kurz__expose.pdf 2016-02-18 14:10 - 2016-02-18 14:10 - 00106361 _____ C:\Users\Manfred\Downloads\6450_lang__expose (2).pdf 2016-02-18 11:18 - 2016-02-18 11:18 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2016-02-18 11:14 - 2016-02-18 11:14 - 00000000 ____D C:\Users\Manfred\AppData\Local\sipgate_GmbH 2016-02-18 11:13 - 2016-02-18 11:13 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\sipgate Faxdrucker 3.21.1 2016-02-18 11:13 - 2016-02-18 11:13 - 00000000 ____D C:\ProgramData\StandardPlugin 2016-02-18 11:13 - 2016-02-18 11:13 - 00000000 ____D C:\ProgramData\eDocPrintPro 2016-02-18 11:13 - 2016-02-18 11:13 - 00000000 ____D C:\Program Files\Common Files\MAYComputer 2016-02-18 11:07 - 2016-02-18 11:07 - 00096775 _____ C:\Users\Manfred\Downloads\BEURKUNDUNGSAUFTRAG Margarethenstr. 5, Hirten.pdf 2016-02-18 10:59 - 2016-02-18 11:00 - 83174411 _____ C:\Users\Manfred\Downloads\SipgateFaxdrucker_Setup_x64.zip 2016-02-17 16:07 - 2016-02-17 16:07 - 00315387 _____ C:\Users\Manfred\Downloads\931989415_151030_5VB_000000001_133845100.pdf 2016-02-17 13:23 - 2016-02-17 13:23 - 00261008 _____ C:\Users\Manfred\Downloads\Stöckl-Kern.pdf 2016-02-17 11:31 - 2016-02-17 11:31 - 00597297 _____ C:\Users\Manfred\Downloads\bayernatlas.de (3).pdf 2016-02-17 11:29 - 2016-02-17 11:29 - 00831242 _____ C:\Users\Manfred\Downloads\bayernatlas.de (2).pdf 2016-02-17 11:19 - 2016-02-17 11:19 - 07259464 _____ C:\Users\Manfred\Downloads\Teilu.pdf 2016-02-17 11:19 - 2016-02-17 11:19 - 00097875 _____ C:\Users\Manfred\Downloads\BEURKUNDUNGSAUFTRAG Wasserburg Gronow.pdf 2016-02-15 12:32 - 2016-02-15 12:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools 2016-02-12 10:15 - 2016-02-12 10:15 - 00318267 _____ C:\Users\Manfred\Downloads\Wegbeschreibung München.pdf 2016-02-11 16:42 - 2016-02-11 16:42 - 01447476 _____ C:\Users\Manfred\Downloads\6450_lang__expose (1).pdf 2016-02-11 16:40 - 2016-02-11 16:40 - 01411647 _____ C:\Users\Manfred\Downloads\6450_lang__expose.pdf 2016-02-11 14:06 - 2016-02-11 14:06 - 05781974 _____ C:\Users\Manfred\Downloads\Rücklagen (1).pdf 2016-02-11 14:04 - 2016-02-11 14:04 - 01046051 _____ C:\Users\Manfred\Downloads\Protokoll 2015.pdf 2016-02-11 14:00 - 2016-02-11 14:00 - 05781974 _____ C:\Users\Manfred\Downloads\Rücklagen.pdf 2016-02-10 13:42 - 2016-02-10 13:42 - 00762677 _____ C:\Users\Manfred\Downloads\1890_01_2016_142739_0d8b4bb0eaa6b5bf4537be673ecd84b6.pdf 2016-02-10 11:28 - 2016-01-29 07:57 - 04502352 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2016-02-10 11:28 - 2016-01-29 07:33 - 04064320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2016-02-10 11:28 - 2016-01-27 07:15 - 01557776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2016-02-10 11:28 - 2016-01-27 07:01 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2016-02-10 11:28 - 2016-01-27 06:59 - 00304752 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe 2016-02-10 11:28 - 2016-01-27 06:57 - 01824264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2016-02-10 11:28 - 2016-01-27 06:57 - 00820704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2016-02-10 11:28 - 2016-01-27 06:55 - 00081112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe 2016-02-10 11:28 - 2016-01-27 06:54 - 00295264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2016-02-10 11:28 - 2016-01-27 06:46 - 02606824 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2016-02-10 11:28 - 2016-01-27 06:46 - 01270072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2016-02-10 11:28 - 2016-01-27 06:44 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2016-02-10 11:28 - 2016-01-27 06:44 - 00085320 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe 2016-02-10 11:28 - 2016-01-27 06:43 - 00359776 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2016-02-10 11:28 - 2016-01-27 06:21 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll 2016-02-10 11:28 - 2016-01-27 06:15 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ztrace_maps.dll 2016-02-10 11:28 - 2016-01-27 06:11 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll 2016-02-10 11:28 - 2016-01-27 06:08 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll 2016-02-10 11:28 - 2016-01-27 06:08 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ztrace_maps.dll 2016-02-10 11:28 - 2016-01-27 06:07 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassam.dll 2016-02-10 11:28 - 2016-01-27 06:04 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll 2016-02-10 11:28 - 2016-01-27 06:02 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll 2016-02-10 11:28 - 2016-01-27 06:01 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2016-02-10 11:28 - 2016-01-27 05:59 - 00258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassam.dll 2016-02-10 11:28 - 2016-01-27 05:52 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2016-02-10 11:28 - 2016-01-27 05:50 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2016-02-10 11:28 - 2016-01-27 05:49 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-02-10 11:28 - 2016-01-27 05:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll 2016-02-10 11:28 - 2016-01-27 05:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2016-02-10 11:28 - 2016-01-27 05:38 - 07835648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-02-10 11:28 - 2016-01-27 05:32 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2016-02-10 11:28 - 2016-01-27 05:31 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll 2016-02-10 11:27 - 2016-01-27 06:10 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll 2016-02-10 11:27 - 2016-01-27 05:57 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-02-10 11:16 - 2016-02-10 11:16 - 03444673 _____ C:\Users\Manfred\Downloads\Anzeige-Wolfsberger.pdf 2016-02-09 13:23 - 2016-02-09 13:23 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\ASCON Programme 2016-02-09 13:20 - 2016-02-10 12:43 - 00000000 ____D C:\Program Files (x86)\SBS 2016-02-09 13:20 - 2016-02-09 13:20 - 00120320 _____ () C:\WINDOWS\SysWOW64\czip.ocx 2016-02-09 13:20 - 2016-02-09 13:20 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sfx32.dll 2016-02-09 13:20 - 2016-02-09 13:20 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\SBS Installer 2016-02-09 13:19 - 2016-02-09 13:20 - 28473017 _____ (SBS) C:\Users\Manfred\Downloads\3dwrp_ultralight_setup.exe 2016-02-09 12:48 - 2016-02-09 12:48 - 00000000 ____D C:\WINDOWS\Crystal 2016-02-09 12:48 - 2016-02-09 12:48 - 00000000 ____D C:\MEINHAUSPLANER 2016-02-09 12:48 - 2010-10-13 05:43 - 00882608 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.TaskPanel.v13.4.2.ocx 2016-02-09 12:48 - 2010-10-13 05:42 - 02369456 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.CommandBars.v13.4.2.ocx 2016-02-09 12:48 - 2010-10-13 05:42 - 01370032 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.ReportControl.v13.4.2.ocx 2016-02-09 12:48 - 2006-04-06 17:13 - 01276088 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.CommandBars.v10.1.ocx 2016-02-09 12:48 - 2006-04-06 17:13 - 00338104 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.TaskPanel.v10.1.ocx 2016-02-09 12:48 - 2006-04-06 16:13 - 00460984 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.ReportControl.v10.1.ocx 2016-02-09 12:48 - 2004-04-27 14:47 - 00167176 _____ (/n software inc. - www.nsoftware.com) C:\WINDOWS\SysWOW64\ftps60.ocx 2016-02-09 12:48 - 2004-03-12 08:18 - 01369264 _____ (FarPoint Technologies, Inc.) C:\WINDOWS\SysWOW64\FPSPR70.ocx 2016-02-09 12:48 - 2003-02-07 13:18 - 00326656 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltvec12n.ocx 2016-02-09 12:48 - 2003-02-07 13:18 - 00176128 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltlst12n.ocx 2016-02-09 12:48 - 2003-02-07 13:18 - 00094208 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltodb12n.ocx 2016-02-09 12:48 - 2003-02-07 13:17 - 00140288 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lttmb12n.ocx 2016-02-09 12:48 - 2003-02-07 13:16 - 00340480 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTDLG12n.ocx 2016-02-09 12:48 - 2003-02-07 13:04 - 00181248 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfpng12n.dll 2016-02-09 12:48 - 2003-02-07 13:02 - 00182272 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltvid12n.dll 2016-02-09 12:48 - 2003-02-07 13:02 - 00049664 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfwmf12n.dll 2016-02-09 12:48 - 2003-02-07 13:02 - 00047104 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfXpm12n.dll 2016-02-09 12:48 - 2003-02-07 13:02 - 00045568 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfXbm12n.dll 2016-02-09 12:48 - 2003-02-07 13:02 - 00026112 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfxwd12n.dll 2016-02-09 12:48 - 2003-02-07 13:02 - 00020992 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfwpg12n.dll 2016-02-09 12:48 - 2003-02-07 13:02 - 00020992 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lftga12n.dll 2016-02-09 12:48 - 2003-02-07 13:02 - 00019968 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfwfx12n.dll 2016-02-09 12:48 - 2003-02-07 13:02 - 00019456 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfras12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00102400 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfmpg12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00089088 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfjbg12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00084480 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lffpx12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00063488 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfplt12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00060416 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfpct12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00048128 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfica12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00038912 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfflc12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00037888 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfeps12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00036864 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfpsd12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00035328 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfgif12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00031744 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lflmb12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00031232 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFPNM12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00029184 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lflma12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00027648 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfiff12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00026112 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfpcx12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00020992 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfimg12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00019968 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfpcd12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00019968 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfitg12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00019456 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfmsp12n.dll 2016-02-09 12:48 - 2003-02-07 13:01 - 00018944 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfmac12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00482816 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfdwf12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00215552 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lvkrn12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00139264 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfdxf12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00067584 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfdwg12N.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00058880 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfcgm12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00049152 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltlst12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00047616 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfdgn12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00046080 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfdrw12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00035840 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfcal12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00032256 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lttmb12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00030720 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfbmp12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00028672 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfclp12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00026112 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfani12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00023040 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfawd12n.dll 2016-02-09 12:48 - 2003-02-07 13:00 - 00021504 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfCUT12n.dll 2016-02-09 12:48 - 2003-02-07 12:59 - 00307712 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTDLG12n.dll 2016-02-09 12:48 - 2003-02-07 12:59 - 00062464 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltnet12n.dll 2016-02-09 12:48 - 2003-02-07 12:59 - 00053248 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltcap12n.dll 2016-02-09 12:48 - 2003-02-07 12:14 - 00630272 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTOCX12n.ocx 2016-02-09 12:48 - 2003-02-07 12:03 - 00358912 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFCMP12n.DLL 2016-02-09 12:48 - 2003-02-07 12:02 - 00141312 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFTIF12n.DLL 2016-02-09 12:48 - 2003-02-07 12:00 - 00073728 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFFAX12n.DLL 2016-02-09 12:48 - 2003-02-07 11:59 - 00208384 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTEFX12n.dll 2016-02-09 12:48 - 2003-02-07 11:59 - 00164864 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTIMG12n.dll 2016-02-09 12:48 - 2003-02-07 11:59 - 00035840 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTTWN12n.dll 2016-02-09 12:48 - 2003-02-07 11:58 - 00388096 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTKRN12n.dll 2016-02-09 12:48 - 2003-02-07 11:58 - 00259584 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTDIS12n.dll 2016-02-09 12:48 - 2003-02-07 11:58 - 00131072 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTFIL12n.dll 2016-02-09 12:48 - 2003-01-24 15:59 - 00018944 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfavi12n.dll 2016-02-09 12:48 - 2002-08-23 16:50 - 00204800 _____ () C:\WINDOWS\SysWOW64\NumX.ocx 2016-02-09 12:48 - 2002-06-27 11:36 - 00598016 _____ (Key Company) C:\WINDOWS\SysWOW64\KeyTV3.ocx 2016-02-09 12:48 - 2002-01-23 11:17 - 00406048 _____ (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) C:\WINDOWS\SysWOW64\XceedZip.dll 2016-02-09 12:48 - 2000-12-16 20:45 - 00032768 _____ () C:\WINDOWS\SysWOW64\WKAuxil.dll 2016-02-09 12:48 - 2000-10-12 20:46 - 00220160 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltvid12n.ocx 2016-02-09 12:48 - 2000-10-12 20:45 - 00160256 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltnet12n.ocx 2016-02-09 12:48 - 2000-10-12 20:44 - 00176128 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltcap12n.ocx 2016-02-09 12:48 - 2000-10-12 20:19 - 00158208 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lvdlg12n.dll 2016-02-09 12:48 - 2000-05-02 03:17 - 00212480 _____ (Eastman Kodak) C:\WINDOWS\SysWOW64\PCDLIB32.DLL 2016-02-09 12:48 - 2000-04-12 15:28 - 00118784 _____ () C:\WINDOWS\SysWOW64\lfkodak.dll 2016-02-09 12:48 - 2000-04-12 15:24 - 00338944 _____ () C:\WINDOWS\SysWOW64\lffpx7.dll 2016-02-09 12:48 - 2000-02-10 09:46 - 00745472 _____ (Seagate Software, Inc.) C:\WINDOWS\SysWOW64\crpe32_res_de.dll 2016-02-09 12:48 - 2000-02-03 03:16 - 00507904 _____ (Seagate Software) C:\WINDOWS\SysWOW64\crviewer.dll 2016-02-09 12:48 - 2000-02-02 00:48 - 00036864 _____ (Seagate Software, Inc) C:\WINDOWS\SysWOW64\p3smnde.dll 2016-02-09 12:48 - 2000-02-02 00:48 - 00036864 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3sodde.dll 2016-02-09 12:48 - 2000-02-01 12:49 - 00848376 _____ (APEX Software Corporation) C:\WINDOWS\SysWOW64\tdbl6.ocx 2016-02-09 12:48 - 2000-02-01 12:49 - 00242144 _____ (Apex Software Corporation) C:\WINDOWS\SysWOW64\tdbgpp.dll 2016-02-09 12:48 - 2000-02-01 11:49 - 00106984 _____ (Apex Software Corporation) C:\WINDOWS\SysWOW64\xarraydb.ocx 2016-02-09 12:48 - 2000-01-28 08:16 - 05550080 _____ (Seagate Software, Inc.) C:\WINDOWS\SysWOW64\craxdrt.dll 2016-02-09 12:48 - 2000-01-28 08:16 - 05337088 _____ (Seagate Software, Inc.) C:\WINDOWS\SysWOW64\crpe32.dll 2016-02-09 12:48 - 2000-01-27 04:05 - 00270336 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2sodbc.dll 2016-02-09 12:48 - 2000-01-14 04:58 - 00544768 _____ (Seagate Software, Inc.) C:\WINDOWS\SysWOW64\exlate32.dll 2016-02-09 12:48 - 2000-01-11 08:10 - 00442368 _____ (Seagate Software, Inc) C:\WINDOWS\SysWOW64\cpeaut32.dll 2016-02-09 12:48 - 2000-01-11 00:09 - 00618496 _____ (Seagate Software) C:\WINDOWS\SysWOW64\crpaig80.dll 2016-02-09 12:48 - 2000-01-07 01:15 - 00040960 _____ (Seagate Software, Inc) C:\WINDOWS\SysWOW64\cdo32.dll 2016-02-09 12:48 - 1999-12-15 00:17 - 00147456 _____ (Seagate Software, Inc) C:\WINDOWS\SysWOW64\p2smon.dll 2016-02-09 12:48 - 1999-12-08 02:59 - 00024576 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3rdode.dll 2016-02-09 12:48 - 1999-12-08 02:59 - 00024576 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3ddode.dll 2016-02-09 12:48 - 1999-12-07 00:31 - 00094208 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2sevt.dll 2016-02-09 12:48 - 1999-12-07 00:31 - 00094208 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2bdao.dll 2016-02-09 12:48 - 1999-12-07 00:31 - 00061440 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2irdao.dll 2016-02-09 12:48 - 1999-12-07 00:31 - 00053248 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2ctdao.dll 2016-02-09 12:48 - 1999-12-07 00:31 - 00023040 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2bbnd.dll 2016-02-09 12:48 - 1999-12-07 00:31 - 00017920 _____ C:\WINDOWS\SysWOW64\implode.dll 2016-02-09 12:48 - 1999-12-06 11:47 - 00851420 _____ (Seagate Software, Inc.) C:\WINDOWS\SysWOW64\crystl32.ocx 2016-02-09 12:48 - 1999-12-01 03:15 - 00004096 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3dbdde.dll 2016-02-09 12:48 - 1999-11-15 06:53 - 00036864 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3sevde.dll 2016-02-09 12:48 - 1999-11-08 06:15 - 00020480 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3tdode.dll 2016-02-09 12:48 - 1999-10-22 07:33 - 00565760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msvcp50.dll 2016-02-09 12:48 - 1999-06-07 12:59 - 00801464 _____ (APEX Software Corporation) C:\WINDOWS\SysWOW64\tdbg6.ocx 2016-02-09 12:48 - 1999-05-07 01:00 - 00262152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSDatGrd.ocx 2016-02-09 12:48 - 1999-05-07 01:00 - 00198640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mci32.ocx 2016-02-09 12:48 - 1999-05-07 01:00 - 00082960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PicClp32.ocx 2016-02-09 12:48 - 1999-04-13 01:00 - 01046288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet35.dll 2016-02-09 12:48 - 1999-04-13 00:00 - 00415504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrepl35.dll 2016-02-09 12:48 - 1999-03-26 01:00 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Vb6stkit.dll 2016-02-09 12:48 - 1998-10-30 03:02 - 00595968 _____ (KL Group Inc.) C:\WINDOWS\SysWOW64\Resizer.dll 2016-02-09 12:48 - 1998-10-30 03:02 - 00187904 _____ (KL Group Inc.) C:\WINDOWS\SysWOW64\ResizerPPG.ocx 2016-02-09 12:48 - 1998-10-30 03:02 - 00132608 _____ (KL Group Inc.) C:\WINDOWS\SysWOW64\ResizableControl.dll 2016-02-09 12:48 - 1998-10-30 03:02 - 00058880 _____ (KL Group Inc.) C:\WINDOWS\SysWOW64\ResizableControlPPG.ocx 2016-02-09 12:48 - 1998-07-06 01:00 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mscc2de.dll 2016-02-09 12:48 - 1998-07-06 01:00 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlxGdDE.dll 2016-02-09 12:48 - 1998-07-06 01:00 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RchTxDE.dll 2016-02-09 12:48 - 1998-07-06 01:00 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CmDlgDE.dll 2016-02-09 12:48 - 1998-07-06 01:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DBLstDE.dll 2016-02-09 12:48 - 1998-07-06 01:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSComDE.dll 2016-02-09 12:48 - 1998-07-06 01:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msprpde.dll 2016-02-09 12:48 - 1998-07-06 00:00 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Tabctde.dll 2016-02-09 12:48 - 1998-06-24 01:00 - 00525352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DBGrid32.ocx 2016-02-09 12:48 - 1998-06-24 01:00 - 00200496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DBList32.ocx 2016-02-09 12:48 - 1998-06-24 01:00 - 00103744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMM32.OCX 2016-02-09 12:48 - 1998-06-18 01:00 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSDBRPTR.DLL 2016-02-09 12:48 - 1998-06-18 01:00 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msstkprp.dll 2016-02-09 12:48 - 1998-06-18 01:00 - 00089360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Vb5db.dll 2016-02-09 12:48 - 1998-06-17 01:00 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC42LOC.DLL 2016-02-09 12:48 - 1998-04-24 01:00 - 00005807 _____ C:\WINDOWS\SysWOW64\MSCALDEU.TLB 2016-02-09 12:48 - 1998-04-24 00:00 - 00287504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msxbse35.dll 2016-02-09 12:48 - 1998-04-24 00:00 - 00250128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mspdox35.dll 2016-02-09 12:48 - 1998-04-24 00:00 - 00250128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msexcl35.dll 2016-02-09 12:48 - 1998-04-24 00:00 - 00166160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msltus35.dll 2016-02-09 12:48 - 1998-04-24 00:00 - 00165648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mstext35.dll 2016-02-09 12:48 - 1997-11-10 04:08 - 00368912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbar332.dll 2016-02-09 12:48 - 1997-09-04 09:37 - 03782416 _____ C:\WINDOWS\SysWOW64\mso97.dll 2016-02-09 12:48 - 1997-08-27 00:00 - 00148240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint35.dll 2016-02-09 12:48 - 1997-07-30 12:47 - 00099866 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB5DE.dll 2016-02-09 12:48 - 1997-06-23 00:00 - 00252176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x35.dll 2016-02-09 12:48 - 1997-06-23 00:00 - 00024848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjter35.dll 2016-02-09 12:48 - 1997-02-26 01:00 - 00035328 _____ (Apex Software Corporation) C:\WINDOWS\SysWOW64\DBGrdDE.dll 2016-02-09 12:48 - 1997-01-10 21:37 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddao35.dll 2016-02-09 12:47 - 2016-02-09 12:47 - 00000000 ____D C:\Users\Manfred\Downloads\meinHausplaner2012.3.3 2016-02-09 12:35 - 2016-02-09 12:42 - 622968396 _____ C:\Users\Manfred\Downloads\meinHausplaner2012.3.3.zip 2016-02-09 12:35 - 2016-02-09 12:35 - 01466656 _____ C:\Users\Manfred\Downloads\meinHausplaner - CHIP-Installer.exe 2016-02-09 11:13 - 2016-02-09 11:13 - 05415329 _____ C:\Users\Manfred\Documents\Unbenannt.xcf 2016-02-08 13:11 - 2016-02-08 13:11 - 00121184 _____ C:\Users\Manfred\Downloads\Infinus SZ-Online 24.01.2016.pdf ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-03-08 16:26 - 2013-03-24 12:52 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Dropbox 2016-03-08 16:24 - 2015-08-04 13:01 - 00000000 ___RD C:\Users\Manfred\OneDrive 2016-03-08 16:24 - 2013-07-31 12:03 - 00001128 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2016-03-08 16:22 - 2015-12-19 05:34 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-03-08 16:22 - 2015-12-19 04:25 - 00000000 ____D C:\ProgramData\NVIDIA 2016-03-08 16:21 - 2015-10-30 07:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI 2016-03-08 16:17 - 2013-07-31 12:03 - 00001132 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2016-03-08 16:17 - 2013-04-03 17:21 - 00000000 ____D C:\Users\Manfred\AppData\LocalLow\Temp 2016-03-08 16:01 - 2015-12-19 04:28 - 00000000 ____D C:\Users\Manfred 2016-03-08 15:59 - 2013-07-31 15:29 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2016-03-08 15:51 - 2015-06-16 11:23 - 00001246 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2836439086-123312676-467905238-1001UA.job 2016-03-08 15:23 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps 2016-03-08 14:48 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-03-08 14:39 - 2014-12-08 20:58 - 00000000 ____D C:\Users\Manfred\360Works 2016-03-08 12:51 - 2015-06-16 11:23 - 00001194 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2836439086-123312676-467905238-1001Core.job 2016-03-08 11:52 - 2013-03-30 20:55 - 00004154 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{30F240A7-6244-488A-AA21-91030689FD7D} 2016-03-07 10:39 - 2016-01-13 11:29 - 00001108 _____ C:\Users\Public\Desktop\PDF-Viewer.lnk 2016-03-07 10:39 - 2015-12-19 05:20 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-03-07 10:39 - 2015-11-25 11:05 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-03-07 10:39 - 2015-10-07 14:06 - 00002590 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk 2016-03-07 10:39 - 2015-10-07 14:06 - 00002586 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk 2016-03-07 10:39 - 2015-10-07 14:06 - 00002565 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk 2016-03-07 10:39 - 2015-10-07 14:06 - 00002540 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk 2016-03-07 10:39 - 2015-10-07 14:06 - 00002507 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk 2016-03-07 10:39 - 2015-10-07 14:06 - 00002504 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk 2016-03-07 10:39 - 2015-10-07 14:06 - 00002476 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk 2016-03-07 10:39 - 2015-09-28 10:25 - 00001365 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk 2016-03-07 10:39 - 2015-09-21 13:33 - 00001505 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blend for Visual Studio 2015.lnk 2016-03-07 10:39 - 2015-09-21 13:27 - 00001514 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015.lnk 2016-03-07 10:39 - 2015-09-21 13:20 - 00002184 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Web Platform Installer.lnk 2016-03-07 10:39 - 2015-09-03 19:39 - 00001377 _____ C:\Users\Public\Desktop\ElsterFormular.lnk 2016-03-07 10:39 - 2015-04-23 12:15 - 00002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2016-03-07 10:39 - 2015-03-17 12:20 - 00001914 _____ C:\Users\Public\Desktop\SugarSync.lnk 2016-03-07 10:39 - 2015-03-13 12:53 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2016-03-07 10:39 - 2015-02-12 14:33 - 00001032 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat.com.lnk 2016-03-07 10:39 - 2014-11-24 20:48 - 00001125 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk 2016-03-07 10:39 - 2014-05-28 17:26 - 00001328 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk 2016-03-07 10:39 - 2013-10-21 19:00 - 00000984 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR-Registrierung.lnk 2016-03-07 10:39 - 2013-07-31 15:27 - 00001432 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2016-03-07 10:39 - 2013-07-31 12:04 - 00002343 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-03-07 10:39 - 2013-04-22 16:40 - 00001932 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SugarSync.lnk 2016-03-07 10:39 - 2013-03-27 21:34 - 00000943 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk 2016-03-07 10:39 - 2013-03-23 19:41 - 00002811 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileMaker Pro Advanced.lnk 2016-03-07 10:39 - 2013-03-11 13:30 - 00001397 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk 2016-03-07 10:38 - 2015-09-01 17:13 - 00002007 _____ C:\Users\Manfred\Desktop\LobuOnline.lnk 2016-03-07 10:38 - 2015-08-04 13:18 - 00002433 _____ C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-03-07 10:38 - 2015-03-06 20:43 - 00001853 _____ C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2016-03-07 10:38 - 2013-10-21 19:12 - 00000469 _____ C:\Users\Manfred\Desktop\Scan.lnk 2016-03-07 10:38 - 2013-09-17 12:36 - 00000912 _____ C:\Users\Manfred\Desktop\Start.lnk 2016-03-07 10:38 - 2013-04-01 02:01 - 00000906 _____ C:\Users\Manfred\Desktop\Downloads.lnk 2016-03-07 10:38 - 2013-03-23 19:38 - 00000523 _____ C:\Users\Manfred\Desktop\Windows (C).lnk 2016-03-07 10:13 - 2015-08-20 10:16 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Skype 2016-03-05 16:38 - 2015-08-20 10:16 - 00000000 ____D C:\ProgramData\Skype 2016-03-05 16:36 - 2015-08-20 10:16 - 00000000 ___RD C:\Program Files (x86)\Skype 2016-03-05 16:16 - 2014-06-12 10:39 - 00000000 ____D C:\AdwCleaner 2016-03-05 13:30 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache 2016-03-05 12:57 - 2015-10-30 08:26 - 00000000 ____D C:\WINDOWS\Setup 2016-03-04 13:57 - 2013-03-23 13:50 - 00000000 ____D C:\Users\Manfred\AppData\Local\Packages 2016-03-04 13:05 - 2013-10-05 22:11 - 00000000 ____D C:\Program Files (x86)\QuickTime 2016-03-04 12:30 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF 2016-03-04 12:13 - 2014-07-31 12:46 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2016-03-04 12:11 - 2015-08-03 13:41 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps 2016-03-04 12:01 - 2013-03-11 14:38 - 00000000 __RHD C:\Users\Public\AccountPictures 2016-03-04 11:43 - 2013-09-09 13:54 - 00000000 ____D C:\ProgramData\Package Cache 2016-03-04 11:00 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy 2016-03-04 11:00 - 2013-08-22 16:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy 2016-03-04 03:42 - 2015-12-19 04:27 - 02092088 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-03-04 03:42 - 2015-10-30 19:35 - 00890620 _____ C:\WINDOWS\system32\perfh007.dat 2016-03-04 03:42 - 2015-10-30 19:35 - 00197764 _____ C:\WINDOWS\system32\perfc007.dat 2016-03-04 03:34 - 2015-12-19 04:18 - 00489744 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-03-04 03:31 - 2015-10-30 19:44 - 00000000 ____D C:\Program Files\Windows Journal 2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Media 2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog 2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\bcastdvr 2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Portable Devices 2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Multimedia Platform 2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices 2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform 2016-03-04 03:31 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2016-03-04 03:31 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism 2016-03-03 12:01 - 2015-09-01 17:12 - 00000000 ____D C:\LobuOnlineData 2016-03-03 11:49 - 2013-10-21 15:32 - 00000000 ___RD C:\Scan 2016-03-02 13:33 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-03-02 12:28 - 2013-03-27 21:35 - 00000000 ____D C:\Users\Manfred\.gimp-2.8 2016-02-23 12:09 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2016-02-23 12:07 - 2013-03-11 13:26 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2016-02-20 13:06 - 2014-02-21 09:11 - 00000000 ____D C:\ProgramData\Nero 2016-02-20 13:03 - 2014-02-21 09:17 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Nero 2016-02-10 12:47 - 2013-04-03 17:43 - 00000000 ____D C:\Program Files (x86)\Adobe 2016-02-10 12:46 - 2013-04-03 17:40 - 00000000 ____D C:\ProgramData\Adobe 2016-02-10 12:45 - 2013-10-16 15:09 - 00000000 ____D C:\Program Files\Common Files\Apple 2016-02-10 12:45 - 2013-10-06 15:09 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Apple Computer 2016-02-10 12:42 - 2014-07-14 17:39 - 00000000 ____D C:\Program Files (x86)\Opera 2016-02-10 12:38 - 2013-07-23 17:43 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-02-10 12:18 - 2013-03-23 15:06 - 146614896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-02-09 13:25 - 2013-03-23 13:50 - 00000000 ____D C:\Users\Manfred\AppData\Local\VirtualStore 2016-02-09 11:14 - 2014-11-10 14:48 - 00003490 _____ C:\WINDOWS\System32\Tasks\Apple Diagnostics ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2014-03-04 15:15 - 2014-03-24 15:29 - 0038420 _____ () C:\Users\Manfred\AppData\Roaming\Microsoft Excel 97-2003.ADR 2013-04-02 03:18 - 2013-04-02 08:01 - 0000600 _____ () C:\Users\Manfred\AppData\Local\PUTTY.RND 2016-03-02 12:28 - 2016-03-02 12:28 - 0011931 _____ () C:\Users\Manfred\AppData\Local\recently-used.xbel 2014-03-07 14:49 - 2014-03-07 14:52 - 0000007 _____ () C:\Users\Manfred\AppData\Local\~wmrg 2013-10-21 18:59 - 2013-10-21 18:59 - 0000057 _____ () C:\ProgramData\Ament.ini 2015-12-19 04:24 - 2015-12-19 04:24 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2013-12-21 23:05 - 2013-12-21 23:05 - 0004967 _____ () C:\ProgramData\uxxadbmu.rlu Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\ProgramData\Package Cache\{d2c374d4-7d96-4dfb-8892-ecec0d6b4433}\MicrosoftAzureTools.VS140.exe ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-03-01 12:39 ==================== Ende von FRST.txt ============================ |
08.03.2016, 23:23 | #9 |
/// Malwareteam | Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........ Besteht das Problem noch? Wenn ja, in allen Browsern? |
09.03.2016, 10:52 | #10 |
| Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........ Hallo Dennis, die Weiterleitungen sind weg. Vielen Dank. Meinst du wir haben alles erwischt? LG |
09.03.2016, 10:53 | #11 |
/// Malwareteam | Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........ Hi, wir machen noch einen Kontrollscan zur Sicherheit Schritt # 1: ESET ESET Online Scanner
Schritt # 2: Bitte Posten
|
10.03.2016, 13:32 | #12 |
| Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........ Hallo Dennis, erst mal vielen Dank für deine Mühen, jetzt hat es etwas gedauert, habe den Scanner über nacht laufen lassen..... 9 Bedrohungen hat er gefunden hier die Log datei: Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=f50188835272d94cae63be4fe447cb41 # end=init # utc_time=2016-03-09 10:21:10 # local_time=2016-03-09 11:21:10 (+0100, Mitteleuropäische Zeit) # country="Germany" # osver=6.2.9200 NT Update Init Update Download Update Finalize Updated modules version: 28494 # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=f50188835272d94cae63be4fe447cb41 # end=updated # utc_time=2016-03-09 10:23:33 # local_time=2016-03-09 11:23:33 (+0100, Mitteleuropäische Zeit) # country="Germany" # osver=6.2.9200 NT # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7777 # api_version=3.1.1 # EOSSerial=f50188835272d94cae63be4fe447cb41 # engine=28494 # end=stopped # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2016-03-09 11:33:05 # local_time=2016-03-09 12:33:05 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1031 # osver=6.2.9200 NT # compatibility_mode_1='avast! Antivirus' # compatibility_mode=788 16777213 100 98 331908 436376 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776574 100 94 442591 11337328 0 0 # scanned=184064 # found=5 # cleaned=0 # scan_time=4171 sh=3AEB3F19AB22354A6AAA0D231805325B4A3277DC ft=0 fh=0000000000000000 vn="JS/Lightning.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\web\js\xagainit.js.vir" sh=4E36757475FB5BA3AFAF017C6C6D787122D459F4 ft=1 fh=52f519951b273060 vn="Variante von Win32/ELEX.FF evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\4WdM4\WdMan.exe.vir" sh=019273ADFAF31F36E1297FB2DB6AD8B3D4EF8966 ft=0 fh=0000000000000000 vn="JS/Lightning.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.4.7_0\js\xagainit.js.vir" sh=5331448737649E9CB3F81D90D929BF80BD8F94A4 ft=1 fh=78700c4f007807de vn="Variante von Win32/ELEX.GQ evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Manfred\AppData\Roaming\istartpageing\UninstallManager.exe.vir" sh=F684B1290DE1EC6D2C348E3B884BCF1D84F3A944 ft=1 fh=e43fd8b8b63ad450 vn="Variante von Win64/Systweak.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\WINDOWS\SysNative\roboot64.exe.vir" ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=f50188835272d94cae63be4fe447cb41 # end=init # utc_time=2016-03-09 12:03:27 # local_time=2016-03-09 01:03:27 (+0100, Mitteleuropäische Zeit) # country="Germany" # osver=6.2.9200 NT ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=f50188835272d94cae63be4fe447cb41 # end=init # utc_time=2016-03-09 12:03:37 # local_time=2016-03-09 01:03:37 (+0100, Mitteleuropäische Zeit) # country="Germany" # osver=6.2.9200 NT Update Init Update Download esets_scanner_update returned -1 esets_gle=53251 Update Finalize Updated modules version: 28494 # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=f50188835272d94cae63be4fe447cb41 # end=updated # utc_time=2016-03-09 12:04:02 # local_time=2016-03-09 01:04:02 (+0100, Mitteleuropäische Zeit) # country="Germany" # osver=6.2.9200 NT # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7777 # api_version=3.1.1 # EOSSerial=f50188835272d94cae63be4fe447cb41 # engine=28494 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2016-03-09 04:44:54 # local_time=2016-03-09 05:44:54 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1031 # osver=6.2.9200 NT # compatibility_mode_1='avast! Antivirus' # compatibility_mode=788 16777213 100 98 354217 455085 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776574 100 94 464900 11356037 0 0 # scanned=543164 # found=9 # cleaned=0 # scan_time=16851 sh=3AEB3F19AB22354A6AAA0D231805325B4A3277DC ft=0 fh=0000000000000000 vn="JS/Lightning.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\web\js\xagainit.js.vir" sh=4E36757475FB5BA3AFAF017C6C6D787122D459F4 ft=1 fh=52f519951b273060 vn="Variante von Win32/ELEX.FF evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\4WdM4\WdMan.exe.vir" sh=019273ADFAF31F36E1297FB2DB6AD8B3D4EF8966 ft=0 fh=0000000000000000 vn="JS/Lightning.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.4.7_0\js\xagainit.js.vir" sh=5331448737649E9CB3F81D90D929BF80BD8F94A4 ft=1 fh=78700c4f007807de vn="Variante von Win32/ELEX.GQ evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Manfred\AppData\Roaming\istartpageing\UninstallManager.exe.vir" sh=F684B1290DE1EC6D2C348E3B884BCF1D84F3A944 ft=1 fh=e43fd8b8b63ad450 vn="Variante von Win64/Systweak.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\WINDOWS\SysNative\roboot64.exe.vir" sh=52DD7D18DAC83C24D48284BF0ACFDC148EBC9E8B ft=1 fh=3396adde71e315f0 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Manfred\Downloads\Free PDF to Word Doc Converter - CHIP-Installer.exe" sh=8221CA33EEA188F171990445FDBE3D01FC0E570A ft=1 fh=24ab96437044cc4c vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Manfred\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe" sh=10B9F13C3FC7CE9B4BD7ED594A79A5E342025C6A ft=1 fh=161f4771f9311d61 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Manfred\Downloads\meinHausplaner - CHIP-Installer.exe" sh=E8C6D46B8EB252CA6B7BCF613CB1990994213A7C ft=1 fh=ece7f765455d75ac vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Manfred\Downloads\PDF XChange Viewer - CHIP-Installer.exe" |
10.03.2016, 15:08 | #13 |
/// Malwareteam | Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........ Hi, ist alles entweder schon in Quarantäne oder der CHIP-Installer. Zu dem noch weiter unten mehr Infos. Deinstalliere bitte alle deine Java Versionen. Falls dus unbedingt brauchst, dann kannst dus dir neu herunterladen. Dann wären wir hier durch. Deine Logs sind sauber Falls du deine Passwörter nicht regelmäßig änderst - jetzt ist der Zeitpunkt dafür! Schritt # 1: Entfernen unserer Tools Die Reihenfolge ist hier entscheidend.
Abschließend noch ein paar Tipps von mir: Schritt # 2: Empfohlene Software Habe immer ein aktuelles Antivirenprogramm deiner Wahl installiert und aktiviere die automatischen Updates (standardmäßig eingeschaltet). Ich empfehle:
Verwende nach Möglichkeit nicht den Internet Explorer, da dieser viele Sicherheitslücken enthält. Achte aber darauf, dass er immer up to date bleibt, weil viele Programme diesen zum Anzeigen von Websites benutzen. Alternativ kannst du verwenden:Dazu sind folgende Add-ons empfehlenswert: uBlock Origin (Chrome) --> Blockiert Werbung. Werbung kann sehr nervig sein, aber auch auf schädliche Links verweisen. uBlock ist effizienter als der Konkurrent AdblockPlus. Ghostery --> Blockiert Tracker und Cookies, welche dich im Internet nachverfolgen können. Stelle jedoch bei der Installation sicher, dass du Ghostrank nicht zustimmst. Du kannst auch Malwarebytes Anti-Exploit verwenden, um aktuelle Sicherheitslücken zu stopfen. Halte immer deine Plug-ins und Software aktuell, vor allem:
PluginCheck Filehippo App Manager Schritt # 3: Tipps um eine Neuinfektion zu vermeiden Downloade nach Möglichkeit immer direkt von der Herstellerseite oder alternativ von einem sauberen Download-Portal wie FilePony.de. Von Downloadern wie die von Chip, Softonic und Sourceforge raten wir ab: CHIP-Installer - was ist das? - Anleitungen Auch versuchen sich immer mehr Programme durch Installationsroutinen auf den PC "durchzumogeln". Das klappt ganz gut, weil viele Anwender sich diese nicht genau durchlesen und schnell durchklicken. Manchmal steht auch in den Lizenzvereinbarungen, dass ein Programm, was eigentlich als Freeware angepriesen wird, nur genutzt werden kann, wenn man sich bestimmte Toolbars oder andere Programme mitinstallieren lässt. Da hilft es nur aufmerksam zu sein. Ein Tool, welches dich dabei gut unterstützen kann, ist: Unchecky. Dieses überwacht im Hintergrund Installationsprozesse und hakt automatisch nervige Adwarekomponenten wie Toolbars ab. Falls man etwas übersieht, warnt noch ein Pop-up, bevor man fortfahren kann. Wir raten von jeglichen Optimizern, Cleanern, SpeedUps und Ähnlichem ab, da diese Softwareprodukte meist keinen Performancegewinn bringen. Du kannst jedoch regelmäßig deinen PC mit der windowsinternen Datenträgerbereinigung behandeln. Überprüfe regelmäßig (mind. 1x pro Monat) deinen PC mit Malwarebytes Anti-Malware und ESET. Falls du dir unsicher bist, ob ein Download wirklich sauber ist, kannst du immer https://www.virustotal.com/ zurate ziehen. Schritt # 4: Unterstütze uns! Wenn du uns mit einer kleinen Spende unterstützen möchtest, so kannst du dies hier tun: http://www.trojaner-board.de/79994-s...ndenkonto.html Es reicht aber auch schon ein simples hier, wenn du mit uns zufrieden warst. unsere Facebook-Seite! Bitte gib mir bescheid, wenn du das alles gelesen hast und alles klar ist, damit ich dieses Thema aus meinen Abos löschen kann. |
10.03.2016, 19:23 | #14 |
| Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........ Hallo Dennis, nochmal vielen herzlichen Dank. Java 7 lässt sich aufgrund einer fehlenden MSI Datei nicht löschen.... ich habe gerade gegoogelt, da gibt es ein Tool, das das anscheinend reparieren soll.... aber ich trau mich echt nichts runterladen. LG Manfred |
10.03.2016, 23:38 | #15 |
/// Malwareteam | Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........ Kannst du mir mal bitte die Fehlermeldung und einen Link zum Tool posten? |
Themen zu Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........ |
avast, bekannte, cleaner, einfach, eingestuft, entfernt, erfolgreich, fehlermeldung, google, große, hallo zusammen, inter, interne, internetseite, löschen, malewarbytes, seite, sobald, systems, systemstart, virus, vorne, websearch, website, zusammen, zuvor |