Hi,
mein Browser (chrome) bekommt immer wieder mal eine Art transparenten Linklayer über das gesamte Browserfenster, der beim Klicken Werbung in neuen Tabs öffnet. Ich habe bereits mit Kaspersky, Malwarebytes Anti Malware und Spybot Search & Destroy gescannt. Es wurde auch mal etwas gefunden und erfolgreich entfernt, allerdings besteht das Problem immernoch.

Ich habe bereits mit FRST64 gescannt, hier die Logs:

FRST.txt
FRST Logfile:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
durchgeführt von Christoph Steiner (Administrator) auf AM16TOSHIBA (08-03-2016 09:35:42)
Gestartet von C:\Users\Christoph Steiner\Desktop\Repair Tools
Geladene Profile: Christoph Steiner (Verfügbare Profile: Christoph Steiner & DefaultAppPool)
Platform: Windows 10 Pro Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Windows\System32\GFNEXSrv.exe
(AVM Berlin) C:\Program Files\FRITZ!Fernzugang\certsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(AVM Berlin) C:\Program Files\FRITZ!Fernzugang\avmike.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(AVM Berlin) C:\Program Files\FRITZ!Fernzugang\nwtsrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe
(NovaStor Corporation) C:\Program Files (x86)\NovaStor\NovaStor NovaBACKUP\nsService.exe
(BUFFALO INC.) C:\Program Files (x86)\BUFFALO\NASNAVI\nassvc.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(NovaStor Corporation) C:\Program Files (x86)\NovaStor\NovaStor NovaBACKUP\DR\x64\drdiag.exe
(Microsoft Corporation) C:\Windows\System32\vdsldr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avpui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoHook.exe
(Greenshot) C:\Program Files\Greenshot\Greenshot.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(Mirko Böer) C:\Program Files (x86)\AmP\AmP.exe
(Spotify Ltd) C:\Users\Christoph Steiner\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Dropbox, Inc.) C:\Users\Christoph Steiner\AppData\Local\Dropbox\Update\DropboxUpdate.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(NovaStor Corporation) C:\Program Files (x86)\NovaStor\NovaStor NovaBACKUP\nsCtrl.exe
(Dropbox, Inc.) C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe
(BUFFALO INC.) C:\Program Files (x86)\BUFFALO\NASNAVI\nassche.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\outlook.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13261456 2012-12-10] (Realtek Semiconductor)
HKLM\...\Run: [SRS Premium Sound HD] => C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2165120 2012-03-22] (SRS Labs, Inc.)
HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [590256 2011-09-23] (TOSHIBA Corporation)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [989056 2011-12-14] (TOSHIBA Corporation)
HKLM\...\Run: [Teco] => C:\Program Files\TOSHIBA\TECO\Teco.exe [1562032 2012-02-29] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [712096 2011-12-14] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710560 2011-11-26] (TOSHIBA Corporation)
HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba TEMPRO] => C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1546720 2011-02-10] (Toshiba Europe GmbH)
HKLM\...\Run: [Toshiba Registration] => C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2013-02-19] (Toshiba Europe GmbH)
HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [536576 2014-12-29] (Greenshot)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3954880 2015-10-08] (Synaptics Incorporated)
HKLM\...\Run: [MouseDriver] => C:\WINDOWS\system32\TiltWheelMouse.exe [241152 2013-04-09] (Pixart Imaging Inc)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [TSleepSrv] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe [253312 2011-11-21] (TOSHIBA)
HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2691480 2014-03-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [217632 2015-07-13] (Geek Software GmbH)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1085656 2015-12-13] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [594992 2016-01-29] (Oracle Corporation)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\Run: [Wunderlist] => C:\Program Files (x86)\Wunderlist2\Wunderlist.exe [13021792 2013-12-02] (6 Wunderkinder GmbH)
HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\Run: [Alle meine Passworte] => C:\Program Files (x86)\AmP\AmP.exe [9302936 2013-10-21] (Mirko Böer)
HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\Run: [Spotify Web Helper] => C:\Users\Christoph Steiner\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1524336 2016-02-22] (Spotify Ltd)
HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\Run: [Dropbox Update] => C:\Users\Christoph Steiner\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-15] (Dropbox, Inc.)
HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50599552 2016-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\Run: [PureSync] => "C:\Program Files (x86)\Jumping Bytes\PureSync\PureSyncTray.exe"
HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\RunOnce: [Uninstall C:\Users\Christoph Steiner\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Christoph Steiner\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\RunOnce: [Uninstall C:\Users\Christoph Steiner\AppData\Local\Microsoft\OneDrive\17.3.5892.0626] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Christoph Steiner\AppData\Local\Microsoft\OneDrive\17.3.5892.0626"
HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\RunOnce: [Uninstall C:\Users\Christoph Steiner\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Christoph Steiner\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64"
HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\RunOnce: [Uninstall C:\Users\Christoph Steiner\AppData\Local\Microsoft\OneDrive\17.3.6281.1202] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Christoph Steiner\AppData\Local\Microsoft\OneDrive\17.3.6281.1202"
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2013-12-13] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2013-12-13] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2013-12-13] ()
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\DropboxExt.33.dll [2016-02-16] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NovaBACKUP Tray Control.lnk [2014-06-27]
ShortcutTarget: NovaBACKUP Tray Control.lnk -> C:\Program Files (x86)\NovaStor\NovaStor NovaBACKUP\nsCtrl.exe (NovaStor Corporation)
Startup: C:\Users\Christoph Steiner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-02-19]
ShortcutTarget: Dropbox.lnk -> C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Christoph Steiner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EOS Utility.lnk [2016-02-02]
ShortcutTarget: EOS Utility.lnk -> C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe (Keine Datei)
Startup: C:\Users\Christoph Steiner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2013-09-13]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Christoph Steiner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteTray.lnk [2015-01-30]
ShortcutTarget: EvernoteTray.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Christoph Steiner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NAS Scheduler.lnk [2014-06-02]
ShortcutTarget: NAS Scheduler.lnk -> C:\Program Files (x86)\BUFFALO\NASNAVI\nassche.exe (BUFFALO INC.)
Startup: C:\Users\Christoph Steiner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneDrive for Business.lnk [2015-11-02]
ShortcutTarget: OneDrive for Business.lnk -> C:\Program Files\Microsoft Office 15\root\office15\groove.exe (Microsoft Corporation)
Startup: C:\Users\Christoph Steiner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Wunderlist.lnk [2015-08-20]
ShortcutTarget: Wunderlist.lnk -> C:\Users\Christoph Steiner\AppData\Local\Wunderlist\Wunderlist.exe ()
Startup: C:\Users\Christoph%20Steiner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-02-19]
ShortcutTarget: Dropbox.lnk -> C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Christoph%20Steiner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EOS Utility.lnk [2016-02-02]
ShortcutTarget: EOS Utility.lnk -> C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe (Keine Datei)
Startup: C:\Users\Christoph%20Steiner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2013-09-13]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Christoph%20Steiner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteTray.lnk [2015-01-30]
ShortcutTarget: EvernoteTray.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Christoph%20Steiner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NAS Scheduler.lnk [2014-06-02]
ShortcutTarget: NAS Scheduler.lnk -> C:\Program Files (x86)\BUFFALO\NASNAVI\nassche.exe (BUFFALO INC.)
Startup: C:\Users\Christoph%20Steiner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneDrive for Business.lnk [2015-11-02]
ShortcutTarget: OneDrive for Business.lnk -> C:\Program Files\Microsoft Office 15\root\office15\groove.exe (Microsoft Corporation)
Startup: C:\Users\Christoph%20Steiner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Wunderlist.lnk [2015-08-20]
ShortcutTarget: Wunderlist.lnk -> C:\Users\Christoph Steiner\AppData\Local\Wunderlist\Wunderlist.exe ()
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{234ff03b-1ac1-4ee7-be53-610c5287022f}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{345bbca5-46ff-4a1c-9cd1-70d1530184ae}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{94fd14f4-617d-4925-831d-d2f8bab1ace2}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://toshiba13.msn.com/
HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://toshiba13.msn.com
SearchScopes: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000 -> DefaultScope {C34E3C54-BA2C-42DA-9388-47957CC070E3} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_73\bin\ssv.dll [2016-02-08] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-06-09] (Microsoft Corporation)
BHO: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-10-20] (AO Kaspersky Lab)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-08] (Oracle Corporation)
BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2013-02-28] (SEIKO EPSON CORPORATION)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-02-08] (Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2014-12-17] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-10-20] (AO Kaspersky Lab)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-08] (Oracle Corporation)
Toolbar: HKLM - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-10-20] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2013-02-28] (SEIKO EPSON CORPORATION)
Toolbar: HKLM-x32 - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-10-20] (AO Kaspersky Lab)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\Christoph Steiner\AppData\Roaming\Mozilla\Firefox\Profiles\2symkrfv.default
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-12] ()
FF Plugin: @java.com/DTPlugin,version=11.73.2 -> C:\Program Files\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll [2016-02-08] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.73.2 -> C:\Program Files\Java\jre1.8.0_73\bin\plugin2\npjp2.dll [2016-02-08] (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-06-11] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2013-12-19] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-12] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll [2016-02-08] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\plugin2\npjp2.dll [2016-02-08] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-02-25] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-12-17] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1692217113-2845591083-1275299302-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Christoph Steiner\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-03-24] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-1692217113-2845591083-1275299302-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [Keine Datei]
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2014-04-04] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_D772DC8D6FAF43A29B25C4EBAA5AD1DE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox
FF Extension: Kaspersky Protection - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox [2016-03-01]

Chrome: 
=======
CHR HomePage: Default -> hxxp://81.20.142.100/symfony/web/index.php/auth/login
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR Session Restore: Default -> ist aktiviert.
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\ppGoogleNaClPluginChrome.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\pdf.dll => Keine Datei
CHR Plugin: (Java Deployment Toolkit 6.0.300.12) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll => Keine Datei
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll => Keine Datei
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Java(TM) Platform SE 6 U30) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll => Keine Datei
CHR Profile: C:\Users\Christoph Steiner\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Christoph Steiner\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]
CHR Extension: (Google Drive) - C:\Users\Christoph Steiner\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\Christoph Steiner\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Google-Suche) - C:\Users\Christoph Steiner\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Axure RP Extension for Chrome) - C:\Users\Christoph Steiner\AppData\Local\Google\Chrome\User Data\Default\Extensions\dogkpdfcklifaemcdfbildhcofnopogp [2014-01-30]
CHR Extension: (Kaspersky Protection) - C:\Users\Christoph Steiner\AppData\Local\Google\Chrome\User Data\Default\Extensions\eahebamiopdhefndnmappcihfajigkka [2015-09-24]
CHR Extension: (Readium) - C:\Users\Christoph Steiner\AppData\Local\Google\Chrome\User Data\Default\Extensions\fepbnnnkkadjhjahcafoaglimekefifl [2016-02-04]
CHR Extension: (GoToMeeting Pro Screensharing) - C:\Users\Christoph Steiner\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcgikpombjkodabhbdalkcdhmllafipp [2015-06-18]
CHR Extension: (Google Docs Offline) - C:\Users\Christoph Steiner\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-18]
CHR Extension: (Eye Dropper) - C:\Users\Christoph Steiner\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmdcmlfkchdmnmnmheododdhjedfccka [2015-07-15]
CHR Extension: (Clearly) - C:\Users\Christoph Steiner\AppData\Local\Google\Chrome\User Data\Default\Extensions\iooicodkiihhpojmmeghjclgihfjdjhj [2015-06-15]
CHR Extension: (Into The Mist) - C:\Users\Christoph Steiner\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgihmkgobaljfehcadcckdggpeojaadh [2013-09-02]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Christoph Steiner\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-27]
CHR Extension: (Google Mail) - C:\Users\Christoph Steiner\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-30]
CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka
CHR HKLM-x32\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2020056 2016-02-09] (Adobe Systems, Incorporated)
S2 Apache2.4; C:\xampp\apache\bin\httpd.exe [22016 2014-07-17] (Apache Software Foundation) [Datei ist nicht signiert]
R2 avmike; C:\Program Files\FRITZ!Fernzugang\avmike.exe [337824 2012-11-28] (AVM Berlin)
R2 AVP16.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe [194000 2015-09-23] (Kaspersky Lab ZAO)
S3 Backup Client Agent Service; C:\Program Files (x86)\NovaStor\NovaStor NovaBACKUP\ManagementServer.Agent.Service.exe [398632 2013-04-21] (NovaStor Corporation)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1141248 2015-06-10] ()
R2 certsrv; C:\Program Files\FRITZ!Fernzugang\certsrv.exe [143776 2012-11-28] (AVM Berlin)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation)
R2 Disaster Recovery Imaging; C:\Program Files (x86)\NovaStor\NovaStor NovaBACKUP\DR\x64\drdiag.exe [6183208 2013-04-21] (NovaStor Corporation)
R2 EpsonScanSvc; C:\windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 GFNEXSrv; C:\Windows\System32\GFNEXSrv.exe [162824 2010-09-10] ()
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-02-21] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-21] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 NasPmService; C:\Program Files (x86)\BUFFALO\NASNAVI\nassvc.exe [251760 2012-03-29] (BUFFALO INC.)
R2 nsService; C:\Program Files (x86)\NovaStor\NovaStor NovaBACKUP\nsService.exe [541328 2013-04-21] (NovaStor Corporation)
R2 nwtsrv; C:\Program Files\FRITZ!Fernzugang\nwtsrv.exe [191328 2013-06-10] (AVM Berlin)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [255168 2015-10-08] (Synaptics Incorporated)
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)
S3 vssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\vssbridge64.exe [144640 2015-07-08] (AO Kaspersky Lab)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
S2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 athr; C:\Windows\System32\drivers\athw10x.sys [4342936 2015-09-21] (Qualcomm Atheros Communications, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-05-28] (Advanced Micro Devices)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [389816 2015-07-05] (Kaspersky Lab ZAO)
R2 IntelHaxm; C:\Windows\System32\DRIVERS\IntelHaxm.sys [84992 2015-01-30] (Intel  Corporation)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-06-22] (Kaspersky Lab ZAO)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [53432 2015-06-06] (Kaspersky Lab ZAO)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [70512 2015-06-27] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [77728 2016-03-01] (AO Kaspersky Lab)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [30328 2015-06-24] (Kaspersky Lab)
R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [181640 2015-10-20] (AO Kaspersky Lab)
R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [227512 2015-10-20] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [927640 2016-03-01] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [39608 2015-06-11] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [41656 2015-06-06] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [41352 2015-09-30] (AO Kaspersky Lab)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [87944 2015-10-20] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [102584 2015-06-16] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [187056 2015-06-23] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek                                            )
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [51392 2015-10-08] (Synaptics Incorporated)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [45728 2015-08-07] (Toshiba Corporation)
S3 t_mouse.sys; C:\Windows\system32\DRIVERS\t_mouse.sys [6144 2013-04-09] ()
S1 Uim_DEVIM; C:\Windows\System32\DRIVERS\uim_devim.sys [25992 2014-05-19] ()
S1 Uim_IM; C:\Windows\System32\DRIVERS\uim_im.sys [700296 2014-05-19] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U3 idsvc; kein ImagePath
U3 wpcsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-03-08 09:35 - 2016-03-08 09:35 - 00000000 ____D C:\Users\Christoph%20Steiner\Desktop\Repair Tools
2016-03-08 09:35 - 2016-03-08 09:35 - 00000000 ____D C:\Users\Christoph Steiner\Desktop\Repair Tools
2016-03-08 09:35 - 2016-03-08 09:35 - 00000000 ____D C:\FRST
2016-03-07 16:02 - 2016-03-07 20:18 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-03-07 16:02 - 2016-03-07 16:04 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-03-07 16:02 - 2016-03-07 16:02 - 00001475 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2016-03-07 16:02 - 2016-03-07 16:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2016-03-07 16:02 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean64.exe
2016-03-07 13:31 - 2009-06-10 22:00 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts - Kopie
2016-03-07 11:44 - 2016-03-07 20:17 - 00000000 ____D C:\Program Files (x86)\AdwCleaner
2016-03-07 10:35 - 2016-03-07 19:08 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-03-07 10:32 - 2016-03-07 10:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-03-07 10:32 - 2016-03-07 10:32 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-03-07 10:32 - 2016-03-07 10:32 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-03-07 10:32 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-03-07 10:32 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-03-07 10:32 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-03-04 18:24 - 2016-03-04 18:29 - 00000000 ____D C:\AdwCleaner
2016-03-04 18:24 - 2016-03-04 18:24 - 01518592 _____ C:\Users\Christoph%20Steiner\Downloads\adwcleaner_5.037.exe
2016-03-04 18:24 - 2016-03-04 18:24 - 01518592 _____ C:\Users\Christoph Steiner\Downloads\adwcleaner_5.037.exe
2016-03-04 15:06 - 2016-03-07 20:21 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2016-03-04 08:46 - 2016-03-04 08:46 - 01263755 _____ C:\Users\Christoph%20Steiner\Downloads\2651.pdf
2016-03-04 08:46 - 2016-03-04 08:46 - 01263755 _____ C:\Users\Christoph Steiner\Downloads\2651.pdf
2016-03-04 08:43 - 2016-03-04 08:43 - 00000000 ____D C:\Users\Christoph%20Steiner\Documents\My BodyMedia-Dateien
2016-03-04 08:43 - 2016-03-04 08:43 - 00000000 ____D C:\Users\Christoph%20Steiner\BodyMedia
2016-03-04 08:43 - 2016-03-04 08:43 - 00000000 ____D C:\Users\Christoph Steiner\Documents\My BodyMedia-Dateien
2016-03-04 08:43 - 2016-03-04 08:43 - 00000000 ____D C:\Users\Christoph Steiner\BodyMedia
2016-03-03 08:27 - 2016-02-23 12:27 - 07475040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-03-03 08:27 - 2016-02-23 12:25 - 01818696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-03-03 08:27 - 2016-02-23 12:23 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-03-03 08:27 - 2016-02-23 12:22 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-03-03 08:27 - 2016-02-23 12:15 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-03-03 08:27 - 2016-02-23 11:34 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-03-03 08:27 - 2016-02-23 11:32 - 08705672 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-03-03 08:27 - 2016-02-23 11:32 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2016-03-03 08:27 - 2016-02-23 11:31 - 00536256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-03-03 08:27 - 2016-02-23 11:21 - 22564328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-03-03 08:27 - 2016-02-23 11:21 - 06606568 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-03-03 08:27 - 2016-02-23 10:45 - 01998176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-03-03 08:27 - 2016-02-23 10:38 - 06952088 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-03-03 08:27 - 2016-02-23 10:27 - 21124344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-03-03 08:27 - 2016-02-23 10:26 - 05241984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-03-03 08:27 - 2016-02-23 09:58 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-03-03 08:27 - 2016-02-23 09:58 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-03-03 08:27 - 2016-02-23 09:28 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-03-03 08:27 - 2016-02-23 09:09 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-03-03 08:27 - 2016-02-23 09:06 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2016-03-03 08:27 - 2016-02-23 09:06 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2016-03-03 08:27 - 2016-02-23 09:00 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-03-03 08:27 - 2016-02-23 08:58 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2016-03-03 08:27 - 2016-02-23 08:52 - 00456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2016-03-03 08:27 - 2016-02-23 08:41 - 03594240 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-03-03 08:27 - 2016-02-23 08:30 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-03-03 08:27 - 2016-02-23 08:30 - 01731584 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-03-03 08:27 - 2016-02-23 08:24 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-03-03 08:27 - 2016-02-23 08:22 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-03-03 08:27 - 2016-02-23 08:21 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2016-03-03 08:27 - 2016-02-23 07:59 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-03-03 08:27 - 2016-02-23 07:55 - 04894208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-03-03 08:27 - 2016-02-23 07:55 - 02229760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-03-03 08:27 - 2016-02-23 07:52 - 11545600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-03-03 08:27 - 2016-02-23 07:50 - 22396416 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-03-03 08:27 - 2016-02-23 07:50 - 09919488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-03-03 08:27 - 2016-02-23 07:40 - 24603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-03-03 08:27 - 2016-02-23 07:39 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-03-03 08:27 - 2016-02-23 07:36 - 19341312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-03-03 08:27 - 2016-02-23 07:36 - 18680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-03-03 08:27 - 2016-02-23 07:36 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-03-03 08:27 - 2016-02-23 07:36 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-03-03 08:27 - 2016-02-09 04:24 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-03-03 08:27 - 2016-02-09 04:07 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-03-03 08:27 - 2016-02-09 04:04 - 01946624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-03-03 08:26 - 2016-02-23 12:29 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-03-03 08:26 - 2016-02-23 12:29 - 00874968 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-03-03 08:26 - 2016-02-23 12:27 - 02654872 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-03-03 08:26 - 2016-02-23 12:27 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-03-03 08:26 - 2016-02-23 12:27 - 01141504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-03-03 08:26 - 2016-02-23 12:25 - 02152288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-03-03 08:26 - 2016-02-23 12:25 - 00563552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2016-03-03 08:26 - 2016-02-23 12:15 - 00779384 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2016-03-03 08:26 - 2016-02-23 12:09 - 01614176 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-03-03 08:26 - 2016-02-23 12:08 - 00989536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2016-03-03 08:26 - 2016-02-23 11:34 - 01859960 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-03-03 08:26 - 2016-02-23 11:33 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-03-03 08:26 - 2016-02-23 11:33 - 00389992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-03-03 08:26 - 2016-02-23 11:32 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-03-03 08:26 - 2016-02-23 11:32 - 01152328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-03-03 08:26 - 2016-02-23 11:32 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-03-03 08:26 - 2016-02-23 11:32 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-03-03 08:26 - 2016-02-23 11:31 - 01017032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-03-03 08:26 - 2016-02-23 11:31 - 00847656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-03-03 08:26 - 2016-02-23 11:31 - 00819648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-03-03 08:26 - 2016-02-23 11:31 - 00476728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2016-03-03 08:26 - 2016-02-23 11:31 - 00408120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2016-03-03 08:26 - 2016-02-23 11:25 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-03-03 08:26 - 2016-02-23 11:22 - 00572272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2016-03-03 08:26 - 2016-02-23 11:17 - 00146272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2016-03-03 08:26 - 2016-02-23 10:49 - 00216416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2016-03-03 08:26 - 2016-02-23 10:45 - 02773096 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2016-03-03 08:26 - 2016-02-23 10:45 - 00576352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-03-03 08:26 - 2016-02-23 10:45 - 00394080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-03-03 08:26 - 2016-02-23 10:45 - 00259336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqmapi.dll
2016-03-03 08:26 - 2016-02-23 10:44 - 00640984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2016-03-03 08:26 - 2016-02-23 10:44 - 00147808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2016-03-03 08:26 - 2016-02-23 10:40 - 00430944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2016-03-03 08:26 - 2016-02-23 10:39 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-03-03 08:26 - 2016-02-23 10:38 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-03-03 08:26 - 2016-02-23 10:38 - 00980352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2016-03-03 08:26 - 2016-02-23 10:38 - 00895080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-03-03 08:26 - 2016-02-23 10:38 - 00882720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-03-03 08:26 - 2016-02-23 10:38 - 00709176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-03-03 08:26 - 2016-02-23 10:38 - 00450912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-03-03 08:26 - 2016-02-23 10:38 - 00420928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2016-03-03 08:26 - 2016-02-23 10:37 - 00713824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2016-03-03 08:26 - 2016-02-23 10:32 - 00791744 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-03-03 08:26 - 2016-02-23 10:30 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-03-03 08:26 - 2016-02-23 10:27 - 00376536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-03-03 08:26 - 2016-02-23 10:25 - 00534368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2016-03-03 08:26 - 2016-02-23 10:20 - 01139712 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSave.dll
2016-03-03 08:26 - 2016-02-23 10:20 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2016-03-03 08:26 - 2016-02-23 10:19 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
2016-03-03 08:26 - 2016-02-23 10:17 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2016-03-03 08:26 - 2016-02-23 10:12 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\provpackageapidll.dll
2016-03-03 08:26 - 2016-02-23 10:10 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2016-03-03 08:26 - 2016-02-23 10:07 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-03-03 08:26 - 2016-02-23 10:07 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2016-03-03 08:26 - 2016-02-23 10:06 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2016-03-03 08:26 - 2016-02-23 10:01 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys
2016-03-03 08:26 - 2016-02-23 10:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-03-03 08:26 - 2016-02-23 10:00 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2016-03-03 08:26 - 2016-02-23 09:58 - 00187744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2016-03-03 08:26 - 2016-02-23 09:58 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\irmon.dll
2016-03-03 08:26 - 2016-02-23 09:57 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-03-03 08:26 - 2016-02-23 09:56 - 02186864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2016-03-03 08:26 - 2016-02-23 09:55 - 00221600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqmapi.dll
2016-03-03 08:26 - 2016-02-23 09:55 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2016-03-03 08:26 - 2016-02-23 09:54 - 00539256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2016-03-03 08:26 - 2016-02-23 09:54 - 00141664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2016-03-03 08:26 - 2016-02-23 09:54 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2016-03-03 08:26 - 2016-02-23 09:53 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2016-03-03 08:26 - 2016-02-23 09:53 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2016-03-03 08:26 - 2016-02-23 09:52 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2016-03-03 08:26 - 2016-02-23 09:51 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys
2016-03-03 08:26 - 2016-02-23 09:50 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-03-03 08:26 - 2016-02-23 09:48 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-03-03 08:26 - 2016-02-23 09:48 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerClient.dll
2016-03-03 08:26 - 2016-02-23 09:40 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2016-03-03 08:26 - 2016-02-23 09:39 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2016-03-03 08:26 - 2016-02-23 09:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2016-03-03 08:26 - 2016-02-23 09:38 - 00287712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2016-03-03 08:26 - 2016-02-23 09:37 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-03-03 08:26 - 2016-02-23 09:37 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-03-03 08:26 - 2016-02-23 09:37 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-03-03 08:26 - 2016-02-23 09:36 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuickActionsDataModel.dll
2016-03-03 08:26 - 2016-02-23 09:34 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-03-03 08:26 - 2016-02-23 09:34 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2016-03-03 08:26 - 2016-02-23 09:33 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-03-03 08:26 - 2016-02-23 09:32 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-03-03 08:26 - 2016-02-23 09:31 - 00463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2016-03-03 08:26 - 2016-02-23 09:30 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2016-03-03 08:26 - 2016-02-23 09:29 - 00591872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2016-03-03 08:26 - 2016-02-23 09:28 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\scapi.dll
2016-03-03 08:26 - 2016-02-23 09:27 - 00307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2016-03-03 08:26 - 2016-02-23 09:26 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2016-03-03 08:26 - 2016-02-23 09:25 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll
2016-03-03 08:26 - 2016-02-23 09:25 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2016-03-03 08:26 - 2016-02-23 09:23 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2016-03-03 08:26 - 2016-02-23 09:22 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2016-03-03 08:26 - 2016-02-23 09:22 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2016-03-03 08:26 - 2016-02-23 09:20 - 00847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2016-03-03 08:26 - 2016-02-23 09:20 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-03-03 08:26 - 2016-02-23 09:20 - 00493568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-03-03 08:26 - 2016-02-23 09:20 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-03 08:26 - 2016-02-23 09:19 - 00948736 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-03-03 08:26 - 2016-02-23 09:19 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2016-03-03 08:26 - 2016-02-23 09:18 - 00557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-03-03 08:26 - 2016-02-23 09:14 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-03-03 08:26 - 2016-02-23 09:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-03-03 08:26 - 2016-02-23 09:13 - 00954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2016-03-03 08:26 - 2016-02-23 09:13 - 00915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\configurationclient.dll
2016-03-03 08:26 - 2016-02-23 09:13 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-03-03 08:26 - 2016-02-23 09:12 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-03-03 08:26 - 2016-02-23 09:11 - 01224704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2016-03-03 08:26 - 2016-02-23 09:11 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-03-03 08:26 - 2016-02-23 09:10 - 00997376 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2016-03-03 08:26 - 2016-02-23 09:10 - 00474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2016-03-03 08:26 - 2016-02-23 09:09 - 01390592 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-03-03 08:26 - 2016-02-23 09:09 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-03-03 08:26 - 2016-02-23 09:09 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-03-03 08:26 - 2016-02-23 09:06 - 01848832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2016-03-03 08:26 - 2016-02-23 09:06 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-03-03 08:26 - 2016-02-23 09:05 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-03-03 08:26 - 2016-02-23 09:04 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-03-03 08:26 - 2016-02-23 09:04 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-03-03 08:26 - 2016-02-23 09:04 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-03-03 08:26 - 2016-02-23 09:02 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-03-03 08:26 - 2016-02-23 09:02 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2016-03-03 08:26 - 2016-02-23 09:02 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2016-03-03 08:26 - 2016-02-23 08:58 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-03-03 08:26 - 2016-02-23 08:58 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll
2016-03-03 08:26 - 2016-02-23 08:58 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2016-03-03 08:26 - 2016-02-23 08:57 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TimeBrokerClient.dll
2016-03-03 08:26 - 2016-02-23 08:54 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll
2016-03-03 08:26 - 2016-02-23 08:50 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2016-03-03 08:26 - 2016-02-23 08:49 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-03-03 08:26 - 2016-02-23 08:48 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2016-03-03 08:26 - 2016-02-23 08:47 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2016-03-03 08:26 - 2016-02-23 08:47 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2016-03-03 08:26 - 2016-02-23 08:38 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2016-03-03 08:26 - 2016-02-23 08:37 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2016-03-03 08:26 - 2016-02-23 08:37 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-03-03 08:26 - 2016-02-23 08:37 - 00394752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2016-03-03 08:26 - 2016-02-23 08:36 - 00713728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2016-03-03 08:26 - 2016-02-23 08:36 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2016-03-03 08:26 - 2016-02-23 08:36 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-03 08:26 - 2016-02-23 08:35 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2016-03-03 08:26 - 2016-02-23 08:31 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2016-03-03 08:26 - 2016-02-23 08:31 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2016-03-03 08:26 - 2016-02-23 08:30 - 01832448 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-03-03 08:26 - 2016-02-23 08:30 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-03-03 08:26 - 2016-02-23 08:29 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2016-03-03 08:26 - 2016-02-23 08:29 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-03-03 08:26 - 2016-02-23 08:28 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
2016-03-03 08:26 - 2016-02-23 08:28 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll
2016-03-03 08:26 - 2016-02-23 08:26 - 02158592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-03-03 08:26 - 2016-02-23 08:26 - 01498112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2016-03-03 08:26 - 2016-02-23 08:25 - 01996288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-03-03 08:26 - 2016-02-23 08:24 - 04827136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2016-03-03 08:26 - 2016-02-23 08:24 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-03-03 08:26 - 2016-02-23 08:24 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-03-03 08:26 - 2016-02-23 08:21 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2016-03-03 08:26 - 2016-02-23 08:20 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2016-03-03 08:26 - 2016-02-23 08:17 - 02635264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-03-03 08:26 - 2016-02-23 08:14 - 00990720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-03-03 08:26 - 2016-02-23 08:11 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-03-03 08:26 - 2016-02-23 08:05 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-03-03 08:26 - 2016-02-23 08:01 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2016-03-03 08:26 - 2016-02-23 07:58 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll
2016-03-03 08:26 - 2016-02-23 07:56 - 04412928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2016-03-03 08:26 - 2016-02-23 07:55 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-03-03 08:26 - 2016-02-23 07:53 - 01799168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-03-03 08:26 - 2016-02-23 07:51 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-03-03 08:26 - 2016-02-23 07:42 - 03425792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-03-03 08:26 - 2016-02-23 07:41 - 02912256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2016-03-03 08:26 - 2016-02-23 07:39 - 02581504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-03-03 08:26 - 2016-02-23 07:35 - 07533568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-03-03 08:26 - 2016-02-23 07:33 - 14254080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-03-03 08:26 - 2016-02-23 07:33 - 02604032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2016-03-03 08:26 - 2016-02-23 07:32 - 02793472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-03-03 08:26 - 2016-02-23 07:30 - 02061312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-03-03 08:26 - 2016-02-23 07:28 - 06740992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-03-03 08:26 - 2016-02-23 07:26 - 12587520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-03-03 08:26 - 2016-02-09 05:28 - 00277856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2016-03-03 08:26 - 2016-02-09 05:13 - 00185184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2016-03-03 08:26 - 2016-02-09 04:18 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2016-03-03 08:26 - 2016-02-09 04:18 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2016-03-03 08:26 - 2016-02-09 04:07 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2016-03-01 10:17 - 2016-03-01 10:17 - 00005379 _____ C:\Users\Christoph%20Steiner\AppData\Local\recently-used.xbel
2016-03-01 10:17 - 2016-03-01 10:17 - 00005379 _____ C:\Users\Christoph Steiner\AppData\Local\recently-used.xbel
2016-02-25 10:05 - 2016-02-25 10:05 - 00005214 _____ C:\Users\Christoph%20Steiner\Downloads\Feb_25_2016.csv
2016-02-25 10:05 - 2016-02-25 10:05 - 00005214 _____ C:\Users\Christoph Steiner\Downloads\Feb_25_2016.csv
2016-02-25 09:30 - 2016-02-25 09:30 - 00224114 _____ C:\Users\Christoph%20Steiner\Downloads\Günther Schlierkamp.pdf
2016-02-25 09:30 - 2016-02-25 09:30 - 00224114 _____ C:\Users\Christoph Steiner\Downloads\Günther Schlierkamp.pdf
2016-02-25 09:29 - 2016-02-25 09:29 - 00102822 _____ C:\Users\Christoph%20Steiner\Downloads\Branch Warren.pdf
2016-02-25 09:29 - 2016-02-25 09:29 - 00102822 _____ C:\Users\Christoph Steiner\Downloads\Branch Warren.pdf
2016-02-25 09:29 - 2016-02-25 09:29 - 00099886 _____ C:\Users\Christoph%20Steiner\Downloads\Lou Ferrigno 1970.pdf
2016-02-25 09:29 - 2016-02-25 09:29 - 00099886 _____ C:\Users\Christoph Steiner\Downloads\Lou Ferrigno 1970.pdf
2016-02-25 09:27 - 2016-02-25 09:27 - 00177610 _____ C:\Users\Christoph%20Steiner\Downloads\Casey Viator.pdf
2016-02-25 09:27 - 2016-02-25 09:27 - 00177610 _____ C:\Users\Christoph Steiner\Downloads\Casey Viator.pdf
2016-02-25 09:27 - 2016-02-25 09:27 - 00098183 _____ C:\Users\Christoph%20Steiner\Downloads\TOM PLATZ (1).pdf
2016-02-25 09:27 - 2016-02-25 09:27 - 00098183 _____ C:\Users\Christoph Steiner\Downloads\TOM PLATZ (1).pdf
2016-02-25 09:27 - 2016-02-25 09:27 - 00085740 _____ C:\Users\Christoph%20Steiner\Downloads\LEE PRIEST mit  13 .pdf
2016-02-25 09:27 - 2016-02-25 09:27 - 00085740 _____ C:\Users\Christoph Steiner\Downloads\LEE PRIEST mit  13 .pdf
2016-02-25 09:27 - 2016-02-25 09:27 - 00033301 _____ C:\Users\Christoph%20Steiner\Downloads\Arnold Schwarzenegger_Mr Olympia Zeit.pdf
2016-02-25 09:27 - 2016-02-25 09:27 - 00033301 _____ C:\Users\Christoph Steiner\Downloads\Arnold Schwarzenegger_Mr Olympia Zeit.pdf
2016-02-25 09:27 - 2016-02-25 09:27 - 00030583 _____ C:\Users\Christoph%20Steiner\Downloads\Markus Rühl_Masse.pdf
2016-02-25 09:27 - 2016-02-25 09:27 - 00030583 _____ C:\Users\Christoph Steiner\Downloads\Markus Rühl_Masse.pdf
2016-02-25 09:27 - 2016-02-25 09:27 - 00027951 _____ C:\Users\Christoph%20Steiner\Downloads\Ronnie Coleman_Masse.pdf
2016-02-25 09:27 - 2016-02-25 09:27 - 00027951 _____ C:\Users\Christoph Steiner\Downloads\Ronnie Coleman_Masse.pdf
2016-02-25 09:25 - 2016-02-25 09:25 - 00226250 _____ C:\Users\Christoph%20Steiner\Downloads\Flex Wheeler.pdf
2016-02-25 09:25 - 2016-02-25 09:25 - 00226250 _____ C:\Users\Christoph Steiner\Downloads\Flex Wheeler.pdf
2016-02-25 09:25 - 2016-02-25 09:25 - 00215916 _____ C:\Users\Christoph%20Steiner\Downloads\Victor Martinez.pdf
2016-02-25 09:25 - 2016-02-25 09:25 - 00215916 _____ C:\Users\Christoph Steiner\Downloads\Victor Martinez.pdf
2016-02-25 09:25 - 2016-02-25 09:25 - 00105616 _____ C:\Users\Christoph%20Steiner\Downloads\Zack Khan.pdf
2016-02-25 09:25 - 2016-02-25 09:25 - 00105616 _____ C:\Users\Christoph Steiner\Downloads\Zack Khan.pdf
2016-02-25 09:25 - 2016-02-25 09:25 - 00103753 _____ C:\Users\Christoph%20Steiner\Downloads\KEVIN LEVRONE.pdf
2016-02-25 09:25 - 2016-02-25 09:25 - 00103753 _____ C:\Users\Christoph Steiner\Downloads\KEVIN LEVRONE.pdf
2016-02-25 09:25 - 2016-02-25 09:25 - 00098183 _____ C:\Users\Christoph%20Steiner\Downloads\TOM PLATZ.pdf
2016-02-25 09:25 - 2016-02-25 09:25 - 00098183 _____ C:\Users\Christoph Steiner\Downloads\TOM PLATZ.pdf
2016-02-25 09:25 - 2016-02-25 09:25 - 00033479 _____ C:\Users\Christoph%20Steiner\Downloads\Peter Baers.pdf
2016-02-25 09:25 - 2016-02-25 09:25 - 00033479 _____ C:\Users\Christoph Steiner\Downloads\Peter Baers.pdf
2016-02-24 13:16 - 2016-02-24 13:16 - 00095564 _____ C:\Users\Christoph%20Steiner\Downloads\order_confirmation_20151402.pdf
2016-02-24 13:16 - 2016-02-24 13:16 - 00095564 _____ C:\Users\Christoph Steiner\Downloads\order_confirmation_20151402.pdf
2016-02-23 13:29 - 2016-02-23 13:29 - 00327433 _____ C:\Users\Christoph%20Steiner\Desktop\job_opening-frontend_developer.pdf
2016-02-23 13:29 - 2016-02-23 13:29 - 00327433 _____ C:\Users\Christoph Steiner\Desktop\job_opening-frontend_developer.pdf
2016-02-23 10:09 - 2016-02-23 10:10 - 11286146 _____ C:\Users\Christoph%20Steiner\Desktop\Affiliate_Marketing_eBook_Projecter.pdf
2016-02-23 10:09 - 2016-02-23 10:10 - 11286146 _____ C:\Users\Christoph Steiner\Desktop\Affiliate_Marketing_eBook_Projecter.pdf
2016-02-22 18:12 - 2016-02-22 18:12 - 00405078 _____ C:\Users\Christoph%20Steiner\Desktop\rdc___b-c.pdf
2016-02-22 18:12 - 2016-02-22 18:12 - 00405078 _____ C:\Users\Christoph Steiner\Desktop\rdc___b-c.pdf
2016-02-20 23:30 - 2016-02-20 23:30 - 00000000 ____D C:\Users\Christoph%20Steiner\Documents\League of Legends
2016-02-20 23:30 - 2016-02-20 23:30 - 00000000 ____D C:\Users\Christoph Steiner\Documents\League of Legends
2016-02-19 13:19 - 2016-02-19 13:19 - 00079253 _____ C:\Users\Christoph%20Steiner\Downloads\Bestellformular.pdf
2016-02-19 13:19 - 2016-02-19 13:19 - 00079253 _____ C:\Users\Christoph Steiner\Downloads\Bestellformular.pdf
2016-02-19 13:12 - 2016-02-19 13:12 - 00031356 _____ C:\Users\Christoph%20Steiner\Downloads\erstellung-von-agb-allgemeine-geschaeftsbedingungen-1425-mqwn6b.pdf
2016-02-19 13:12 - 2016-02-19 13:12 - 00031356 _____ C:\Users\Christoph Steiner\Downloads\erstellung-von-agb-allgemeine-geschaeftsbedingungen-1425-mqwn6b.pdf
2016-02-19 09:08 - 2016-02-19 09:08 - 00000000 ____D C:\Users\Christoph%20Steiner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-02-19 09:08 - 2016-02-19 09:08 - 00000000 ____D C:\Users\Christoph Steiner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-02-18 10:22 - 2016-02-18 10:22 - 14120720 _____ (LogMeIn, Inc.) C:\Users\Christoph%20Steiner\Downloads\join.me (2).exe
2016-02-18 10:22 - 2016-02-18 10:22 - 14120720 _____ (LogMeIn, Inc.) C:\Users\Christoph Steiner\Downloads\join.me (2).exe
2016-02-17 09:53 - 2016-02-17 09:53 - 00000020 ___SH C:\Users\DefaultAppPool\ntuser.ini
2016-02-17 09:53 - 2016-02-17 09:53 - 00000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2016-02-17 09:53 - 2016-02-17 09:53 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2016-02-17 09:53 - 2016-02-17 09:53 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2016-02-17 09:53 - 2016-02-17 09:53 - 00000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2016-02-17 09:53 - 2016-02-17 09:53 - 00000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2016-02-17 09:53 - 2016-02-17 09:53 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2016-02-17 09:53 - 2016-02-17 09:53 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Videos
2016-02-17 09:53 - 2016-02-17 09:53 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Musik
2016-02-17 09:53 - 2016-02-17 09:53 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Bilder
2016-02-17 09:53 - 2016-02-17 09:53 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-02-17 09:53 - 2016-02-17 09:53 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf
2016-02-17 09:53 - 2016-02-17 09:53 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten
2016-02-17 09:53 - 2016-02-17 09:53 - 00000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2016-02-17 09:53 - 2016-02-17 09:53 - 00000000 ____D C:\Users\DefaultAppPool
2016-02-17 09:53 - 2016-01-14 20:23 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Media Center Programs
2016-02-17 09:53 - 2016-01-14 20:23 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Macromedia
2016-02-16 12:09 - 2016-02-16 12:09 - 00019300 _____ C:\Users\Christoph%20Steiner\Downloads\wm_tos.html
2016-02-16 12:09 - 2016-02-16 12:09 - 00019300 _____ C:\Users\Christoph Steiner\Downloads\wm_tos.html
2016-02-14 13:33 - 2016-02-14 13:33 - 00008354 _____ C:\Users\Christoph%20Steiner\Downloads\20160214-52619152-umsatz.CSV
2016-02-14 13:33 - 2016-02-14 13:33 - 00008354 _____ C:\Users\Christoph Steiner\Downloads\20160214-52619152-umsatz.CSV
2016-02-14 13:32 - 2016-02-14 13:32 - 00030982 _____ C:\Users\Christoph%20Steiner\Downloads\20160214-51611283-umsatz.CSV
2016-02-14 13:32 - 2016-02-14 13:32 - 00030982 _____ C:\Users\Christoph Steiner\Downloads\20160214-51611283-umsatz.CSV
2016-02-11 13:11 - 2016-02-11 13:11 - 00000000 _____ C:\WINDOWS\Minidump\021116-36921-01.dmp
2016-02-10 09:25 - 2016-01-29 07:57 - 04502352 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-02-10 09:25 - 2016-01-29 07:33 - 04064320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-02-10 09:25 - 2016-01-27 07:15 - 01557776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-02-10 09:25 - 2016-01-27 07:01 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-02-10 09:25 - 2016-01-27 06:59 - 00304752 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-02-10 09:25 - 2016-01-27 06:57 - 01824264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-02-10 09:25 - 2016-01-27 06:57 - 00820704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-02-10 09:25 - 2016-01-27 06:55 - 00081112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe
2016-02-10 09:25 - 2016-01-27 06:54 - 00295264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-02-10 09:25 - 2016-01-27 06:46 - 02606824 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-02-10 09:25 - 2016-01-27 06:46 - 01270072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-02-10 09:25 - 2016-01-27 06:44 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-02-10 09:25 - 2016-01-27 06:44 - 00085320 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe
2016-02-10 09:25 - 2016-01-27 06:43 - 00359776 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-02-10 09:25 - 2016-01-27 06:21 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll
2016-02-10 09:25 - 2016-01-27 06:15 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ztrace_maps.dll
2016-02-10 09:25 - 2016-01-27 06:11 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll
2016-02-10 09:25 - 2016-01-27 06:10 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2016-02-10 09:25 - 2016-01-27 06:08 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-02-10 09:25 - 2016-01-27 06:08 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ztrace_maps.dll
2016-02-10 09:25 - 2016-01-27 06:07 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassam.dll
2016-02-10 09:25 - 2016-01-27 06:04 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
2016-02-10 09:25 - 2016-01-27 06:02 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2016-02-10 09:25 - 2016-01-27 06:01 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-02-10 09:25 - 2016-01-27 05:59 - 00258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassam.dll
2016-02-10 09:25 - 2016-01-27 05:57 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-02-10 09:25 - 2016-01-27 05:52 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-02-10 09:25 - 2016-01-27 05:50 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-02-10 09:25 - 2016-01-27 05:49 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-02-10 09:25 - 2016-01-27 05:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll
2016-02-10 09:25 - 2016-01-27 05:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-02-10 09:25 - 2016-01-27 05:38 - 07835648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-02-10 09:25 - 2016-01-27 05:32 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-02-10 09:25 - 2016-01-27 05:31 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll
2016-02-09 13:14 - 2016-02-09 13:14 - 02639996 _____ C:\Users\Christoph%20Steiner\Downloads\DEV-TestingScript-090216-1314-2.pdf
2016-02-09 13:14 - 2016-02-09 13:14 - 02639996 _____ C:\Users\Christoph Steiner\Downloads\DEV-TestingScript-090216-1314-2.pdf
2016-02-09 13:04 - 2016-02-09 13:04 - 00242296 _____ C:\Users\Christoph%20Steiner\Downloads\Firefox Setup Stub 44.0.1.exe
2016-02-09 13:04 - 2016-02-09 13:04 - 00242296 _____ C:\Users\Christoph Steiner\Downloads\Firefox Setup Stub 44.0.1.exe
2016-02-09 10:02 - 2016-02-09 10:02 - 00003672 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask
2016-02-08 10:41 - 2016-02-08 10:41 - 11438475 _____ (CamStudio Open Source ) C:\Users\Christoph%20Steiner\Downloads\CamStudio_Setup_2-7_r316.exe
2016-02-08 10:41 - 2016-02-08 10:41 - 11438475 _____ (CamStudio Open Source ) C:\Users\Christoph Steiner\Downloads\CamStudio_Setup_2-7_r316.exe
2016-02-08 10:41 - 2016-02-08 10:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CamStudio 2.7
2016-02-08 10:41 - 2016-02-08 10:41 - 00000000 ____D C:\Program Files\CamStudio 2.7
2016-02-08 09:06 - 2016-02-08 09:06 - 00110176 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-64.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-03-08 09:30 - 2013-09-03 10:58 - 00000000 ____D C:\Users\Christoph%20Steiner\AppData\Roaming\Skype
2016-03-08 09:30 - 2013-09-03 10:58 - 00000000 ____D C:\Users\Christoph Steiner\AppData\Roaming\Skype
2016-03-08 09:18 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-08 09:18 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-03-08 09:18 - 2013-09-02 11:48 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2016-03-08 09:07 - 2013-09-03 11:05 - 00000000 ___RD C:\Users\Christoph%20Steiner\Dropbox
2016-03-08 09:07 - 2013-09-03 11:05 - 00000000 ___RD C:\Users\Christoph Steiner\Dropbox
2016-03-08 09:07 - 2013-09-03 11:02 - 00000000 ____D C:\Users\Christoph%20Steiner\AppData\Roaming\Dropbox
2016-03-08 09:07 - 2013-09-03 11:02 - 00000000 ____D C:\Users\Christoph Steiner\AppData\Roaming\Dropbox
2016-03-08 09:06 - 2015-09-01 07:56 - 00001138 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d0e4836555d08f.job
2016-03-08 09:06 - 2013-09-04 08:57 - 00000000 ____D C:\Users\Christoph%20Steiner\Desktop\Scans
2016-03-08 09:06 - 2013-09-04 08:57 - 00000000 ____D C:\Users\Christoph Steiner\Desktop\Scans
2016-03-08 09:03 - 2015-06-18 10:03 - 00000091 _____ C:\HaxLogs.txt
2016-03-08 09:02 - 2016-01-14 20:40 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-03-08 00:31 - 2015-10-30 07:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-03-08 00:31 - 2015-10-05 10:13 - 01479882 _____ C:\WINDOWS\ntbtlog.txt
2016-03-07 16:59 - 2015-09-01 07:57 - 00001142 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d0e483665283c3.job
2016-03-07 16:04 - 2015-09-06 22:02 - 00000000 ____D C:\Program Files\Common Files\AV
2016-03-07 15:46 - 2015-01-30 15:16 - 00000000 ____D C:\Users\Christoph%20Steiner\AppData\Local\Greenshot
2016-03-07 15:46 - 2015-01-30 15:16 - 00000000 ____D C:\Users\Christoph Steiner\AppData\Local\Greenshot
2016-03-07 13:09 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2016-03-07 13:00 - 2016-01-14 20:16 - 00000000 ____D C:\Users\Christoph Steiner
2016-03-07 12:11 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache
2016-03-07 11:38 - 2014-02-01 13:15 - 00000000 ____D C:\Program Files (x86)\Steam
2016-03-07 11:35 - 2016-01-14 20:15 - 02086244 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-07 11:35 - 2015-10-30 19:35 - 00889446 _____ C:\WINDOWS\system32\perfh007.dat
2016-03-07 11:35 - 2015-10-30 19:35 - 00197494 _____ C:\WINDOWS\system32\perfc007.dat
2016-03-07 11:30 - 2016-01-14 20:46 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-03-07 11:30 - 2014-01-06 16:30 - 00000306 __RSH C:\ProgramData\ntuser.pol
2016-03-07 11:28 - 2016-01-14 20:07 - 05281192 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-03-07 11:27 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-03-07 11:25 - 2015-10-30 19:47 - 00000000 ____D C:\Program Files\Windows Journal
2016-03-07 11:25 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Media
2016-03-07 11:25 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2016-03-07 11:25 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-03-07 11:25 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-03-07 11:25 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-03-07 11:25 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-03-07 11:25 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-03-07 11:25 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2016-03-07 11:25 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-03-07 11:25 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-03-07 11:25 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-03-07 11:25 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-03-07 11:19 - 2014-02-21 08:36 - 00000000 ____D C:\Users\Christoph%20Steiner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-03-07 11:19 - 2014-02-21 08:36 - 00000000 ____D C:\Users\Christoph Steiner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-03-07 09:49 - 2014-06-02 13:41 - 00003456 ____H C:\ProgramData\nsActivation.act
2016-03-04 19:18 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-03-04 18:58 - 2013-09-09 12:59 - 00000000 ____D C:\Users\Christoph%20Steiner\AppData\Roaming\vlc
2016-03-04 18:58 - 2013-09-09 12:59 - 00000000 ____D C:\Users\Christoph Steiner\AppData\Roaming\vlc
2016-03-04 18:29 - 2015-01-28 11:15 - 00001145 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-03-04 18:29 - 2013-09-02 11:41 - 00001382 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-04 11:03 - 2015-10-23 13:13 - 00000000 ____D C:\Program Files (x86)\LoL
2016-03-04 09:55 - 2015-03-03 20:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BodyMedia
2016-03-04 09:55 - 2015-03-03 20:49 - 00000000 ____D C:\Program Files (x86)\BodyMedia
2016-03-04 09:55 - 2013-02-20 00:02 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-03-03 16:51 - 2015-02-23 16:09 - 00000000 ____D C:\Users\Christoph%20Steiner\AppData\Local\Spotify
2016-03-03 16:51 - 2015-02-23 16:09 - 00000000 ____D C:\Users\Christoph Steiner\AppData\Local\Spotify
2016-03-03 16:46 - 2015-02-23 16:07 - 00000000 ____D C:\Users\Christoph%20Steiner\AppData\Roaming\Spotify
2016-03-03 16:46 - 2015-02-23 16:07 - 00000000 ____D C:\Users\Christoph Steiner\AppData\Roaming\Spotify
2016-03-01 13:38 - 2015-06-30 00:05 - 00927640 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klif.sys
2016-03-01 13:38 - 2015-06-06 07:51 - 00077728 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\kldisk.sys
2016-03-01 10:25 - 2015-12-01 11:19 - 00000000 ____D C:\Users\Christoph%20Steiner\Documents\Gehaltsabrechnung
2016-03-01 10:25 - 2015-12-01 11:19 - 00000000 ____D C:\Users\Christoph Steiner\Documents\Gehaltsabrechnung
2016-03-01 10:17 - 2013-09-27 08:09 - 00000000 ____D C:\Users\Christoph%20Steiner\AppData\Local\gtk-2.0
2016-03-01 10:17 - 2013-09-27 08:09 - 00000000 ____D C:\Users\Christoph Steiner\AppData\Local\gtk-2.0
2016-03-01 10:17 - 2013-09-27 08:05 - 00000000 ____D C:\Users\Christoph%20Steiner\.gimp-2.8
2016-03-01 10:17 - 2013-09-27 08:05 - 00000000 ____D C:\Users\Christoph Steiner\.gimp-2.8
2016-02-25 13:27 - 2016-01-28 15:38 - 00000000 ____D C:\Users\Christoph%20Steiner\Desktop\Privat
2016-02-25 13:27 - 2016-01-28 15:38 - 00000000 ____D C:\Users\Christoph Steiner\Desktop\Privat
2016-02-19 13:36 - 2016-01-14 20:46 - 00000000 ____D C:\Users\Christoph%20Steiner\AppData\Local\Packages
2016-02-19 13:36 - 2016-01-14 20:46 - 00000000 ____D C:\Users\Christoph Steiner\AppData\Local\Packages
2016-02-17 16:10 - 2014-12-10 13:39 - 00000000 ____D C:\Users\Christoph%20Steiner\AppData\Local\Wunderlist
2016-02-17 16:10 - 2014-12-10 13:39 - 00000000 ____D C:\Users\Christoph Steiner\AppData\Local\Wunderlist
2016-02-15 11:43 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-02-14 13:28 - 2013-02-20 00:00 - 00000000 ____D C:\ProgramData\Skype
2016-02-12 16:09 - 2015-12-24 10:47 - 00000000 ____D C:\Program Files\dm
2016-02-12 14:42 - 2016-01-14 20:52 - 00002476 _____ C:\Users\Christoph%20Steiner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-02-12 14:42 - 2016-01-14 20:52 - 00002476 _____ C:\Users\Christoph Steiner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-02-12 14:42 - 2015-02-25 10:10 - 00000000 ___RD C:\Users\Christoph%20Steiner\OneDrive
2016-02-12 14:42 - 2015-02-25 10:10 - 00000000 ___RD C:\Users\Christoph Steiner\OneDrive
2016-02-11 13:11 - 2016-01-20 13:36 - 00000000 ____D C:\WINDOWS\Minidump
2016-02-11 13:11 - 2013-09-11 08:20 - 1142415231 _____ C:\WINDOWS\MEMORY.DMP
2016-02-10 10:55 - 2014-03-05 09:21 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-02-10 10:36 - 2014-03-05 09:21 - 146614896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-02-09 15:40 - 2015-04-15 15:39 - 00004544 _____ C:\Users\Christoph%20Steiner\AppData\Roaming\CamStudio.cfg
2016-02-09 15:40 - 2015-04-15 15:39 - 00004544 _____ C:\Users\Christoph Steiner\AppData\Roaming\CamStudio.cfg
2016-02-09 15:40 - 2015-04-15 15:39 - 00000408 _____ C:\Users\Christoph%20Steiner\AppData\Roaming\CamShapes.ini
2016-02-09 15:40 - 2015-04-15 15:39 - 00000408 _____ C:\Users\Christoph%20Steiner\AppData\Roaming\CamLayout.ini
2016-02-09 15:40 - 2015-04-15 15:39 - 00000408 _____ C:\Users\Christoph Steiner\AppData\Roaming\CamShapes.ini
2016-02-09 15:40 - 2015-04-15 15:39 - 00000408 _____ C:\Users\Christoph Steiner\AppData\Roaming\CamLayout.ini
2016-02-09 15:40 - 2015-04-15 15:39 - 00000133 _____ C:\Users\Christoph%20Steiner\AppData\Roaming\Camdata.ini
2016-02-09 15:40 - 2015-04-15 15:39 - 00000133 _____ C:\Users\Christoph Steiner\AppData\Roaming\Camdata.ini
2016-02-08 14:11 - 2016-01-25 08:42 - 00000000 ____D C:\Users\Christoph%20Steiner\OneDrive - wondermags Sàrl
2016-02-08 14:11 - 2016-01-25 08:42 - 00000000 ____D C:\Users\Christoph Steiner\OneDrive - wondermags Sàrl
2016-02-08 12:59 - 2016-02-02 10:33 - 00000000 ____D C:\LiveStream
2016-02-08 10:38 - 2014-04-02 09:07 - 00000000 ____D C:\Users\Christoph%20Steiner\AppData\Local\DOSBox
2016-02-08 10:38 - 2014-04-02 09:07 - 00000000 ____D C:\Users\Christoph Steiner\AppData\Local\DOSBox
2016-02-08 09:07 - 2015-06-18 09:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2016-02-08 09:07 - 2014-07-23 09:34 - 00000000 ____D C:\ProgramData\Oracle
2016-02-08 09:07 - 2014-07-23 09:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-02-08 09:07 - 2013-02-19 23:48 - 00000000 ____D C:\Program Files (x86)\Java
2016-02-08 09:06 - 2015-08-28 13:51 - 00000000 ____D C:\Users\Christoph%20Steiner\.oracle_jre_usage
2016-02-08 09:06 - 2015-08-28 13:51 - 00000000 ____D C:\Users\Christoph Steiner\.oracle_jre_usage
2016-02-08 09:06 - 2015-06-18 09:50 - 00110176 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2016-02-08 09:06 - 2015-06-18 09:50 - 00000000 ____D C:\Program Files\Java
2016-02-08 09:05 - 2016-01-25 08:44 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-01-13 17:03 - 2014-04-30 12:40 - 0000132 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Adobe PNG-Format CC - Voreinstellungen
2015-04-15 15:39 - 2016-02-09 15:40 - 0000133 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Camdata.ini
2015-04-15 15:39 - 2016-02-09 15:40 - 0000408 _____ () C:\Users\Christoph Steiner\AppData\Roaming\CamLayout.ini
2015-04-15 15:39 - 2016-02-09 15:40 - 0000408 _____ () C:\Users\Christoph Steiner\AppData\Roaming\CamShapes.ini
2015-04-15 15:39 - 2016-02-09 15:40 - 0004544 _____ () C:\Users\Christoph Steiner\AppData\Roaming\CamStudio.cfg
2015-04-15 15:36 - 2015-04-15 16:03 - 0000096 _____ () C:\Users\Christoph Steiner\AppData\Roaming\version2.xml
2014-01-04 11:10 - 2015-05-29 09:20 - 0001456 _____ () C:\Users\Christoph Steiner\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2016-03-01 10:17 - 2016-03-01 10:17 - 0005379 _____ () C:\Users\Christoph Steiner\AppData\Local\recently-used.xbel
2014-01-08 10:50 - 2014-02-07 09:54 - 0000032 ____H () C:\Users\Christoph Steiner\AppData\Local\t70rc.dat
2014-06-02 13:42 - 2014-06-02 13:42 - 0000053 __RSH () C:\ProgramData\1.14.5.lic
2014-06-02 13:41 - 2016-03-07 09:49 - 0003456 ____H () C:\ProgramData\nsActivation.act

Einige Dateien in TEMP:
====================
C:\Users\Christoph Steiner\AppData\Local\Temp\Execute2App.exe
C:\Users\Christoph Steiner\AppData\Local\Temp\jre-8u71-windows-au.exe
C:\Users\Christoph Steiner\AppData\Local\Temp\jre-8u73-windows-au.exe
C:\Users\Christoph Steiner\AppData\Local\Temp\msvcp90.dll
C:\Users\Christoph Steiner\AppData\Local\Temp\msvcr90.dll
C:\Users\Christoph Steiner\AppData\Local\Temp\sqlite3.dll
C:\Users\Christoph Steiner\AppData\Local\Temp\zq5iAwrcnH.exe
C:\Users\Christoph%20Steiner\AppData\Local\Temp\Execute2App.exe
C:\Users\Christoph%20Steiner\AppData\Local\Temp\jre-8u71-windows-au.exe
C:\Users\Christoph%20Steiner\AppData\Local\Temp\jre-8u73-windows-au.exe
C:\Users\Christoph%20Steiner\AppData\Local\Temp\msvcp90.dll
C:\Users\Christoph%20Steiner\AppData\Local\Temp\msvcr90.dll
C:\Users\Christoph%20Steiner\AppData\Local\Temp\sqlite3.dll
C:\Users\Christoph%20Steiner\AppData\Local\Temp\zq5iAwrcnH.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-03-07 12:00

==================== Ende von FRST.txt ============================
         

--- --- ---

===========

Addition.txtFRST Additions Logfile:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
durchgeführt von Christoph Steiner (2016-03-08 09:36:56)
Gestartet von C:\Users\Christoph Steiner\Desktop\Repair Tools
Windows 10 Pro Version 1511 (X64) (2016-01-14 19:46:08)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1692217113-2845591083-1275299302-500 - Administrator - Disabled)
Christoph Steiner (S-1-5-21-1692217113-2845591083-1275299302-1000 - Administrator - Enabled) => C:\Users\Christoph Steiner
DefaultAccount (S-1-5-21-1692217113-2845591083-1275299302-503 - Limited - Disabled)
Gast (S-1-5-21-1692217113-2845591083-1275299302-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1692217113-2845591083-1275299302-1002 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Kaspersky Internet Security (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Kaspersky Internet Security (Enabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
FW: Kaspersky Internet Security (Disabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 20.0.0.233 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.3.0.322 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.14)  MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.14 - Adobe Systems Incorporated)
Alle meine Passworte 4.13 (HKLM-x32\...\AllemeinePassworte) (Version:  - Mirko Böer)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AMD Catalyst Install Manager (HKLM\...\{F856881A-D370-B1A7-2AFF-128F4AA93558}) (Version: 3.0.859.0 - Advanced Micro Devices, Inc.)
Android SDK Tools (HKLM-x32\...\Android SDK Tools) (Version: 1.16 - Google Inc.)
Android Studio (HKLM\...\Android Studio) (Version: 1.0 - Google Inc.)
Anno 1602 (HKLM-x32\...\ANNO1602) (Version:  - )
Atheros Bluetooth Filter Driver Package (HKLM\...\{65486209-5C54-439C-8383-8AC9BBE25932}) (Version: 1.0.0.12 - Atheros Communications)
Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 9.2 - Atheros)
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Axure RP Pro 7.0 (HKLM-x32\...\Axure RP Pro 7.0) (Version: 7.0.0.3145 - Axure Software Solutions, Inc.)
Axure RP Pro 7.0 (x32 Version: 7.0.0.3145 - Axure Software Solutions, Inc.) Hidden
Banished 1.0 (HKLM-x32\...\Banished 1.0) (Version: 1.0 - Cat-A-Cat)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
BitTorrent (HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\BitTorrent) (Version: 7.9.3.40101 - BitTorrent Inc.)
Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v9.10.32(T) - TOSHIBA CORPORATION)
BodyMedia SYNC (HKLM-x32\...\InstallShield_{99567851-B7F1-4692-A33A-0732E761220B}) (Version: 2.3.1.102 - BodyMedia, Inc.)
BodyMedia SYNC (x32 Version: 2.3.1.102 - BodyMedia, Inc.) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Brother MFL-Pro Suite MFC-7420 (HKLM-x32\...\{C2530D63-B66B-48B5-BB50-7C6281FE7AA6}) (Version: 1.0.1.0 - Brother Industries, Ltd.)
BUFFALO NAS Navigator2 (HKLM-x32\...\UN060501) (Version:  - )
Callnote Version 3.0.43.0 (HKLM-x32\...\{048CD767-219E-4F04-AA84-3128F6A35948}_is1) (Version: 3.0.43.0 - Kanda Software)
CamStudio 2.7 (HKLM\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7 - CamStudio Open Source)
Command & Conquer(TM) Generäle (HKLM-x32\...\InstallShield_{06F80017-8F98-4C94-B868-52358569FC32}) (Version: 0.50.0000 - Electronic Arts)
Command & Conquer(TM) Generäle (x32 Version: 0.50.0000 - Electronic Arts) Hidden
Command and Conquer(TM) Generäle Die Stunde Null  (HKLM-x32\...\InstallShield_{F3E9C243-122E-4D6B-ACC1-E1FEC02F6CA1}) (Version: 1.00.0000 - Electronic Arts)
Command and Conquer(TM) Generäle Die Stunde Null  (x32 Version: 1.00.0000 - Electronic Arts) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Dropbox (HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\Dropbox) (Version: 3.14.7 - Dropbox, Inc.)
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.2.0 - SEIKO EPSON CORPORATION)
Epson E-Web Print (HKLM-x32\...\{CEC98C2A-9ED5-49DA-9F3A-92434E0A4FA3}) (Version: 1.19.0000 - SEIKO EPSON CORPORATION)
EPSON Printer Finder (HKLM-x32\...\{B8ECD0D3-AE08-4891-B6C7-32F96B75EB6C}) (Version: 1.0.0 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON WF-3520 Series Printer Uninstall (HKLM\...\EPSON WF-3520 Series) (Version:  - SEIKO EPSON Corporation)
Evernote v. 5.8.1 (HKLM-x32\...\{4FD2D1C8-8636-11E4-9D21-00163E98E7D6}) (Version: 5.8.1.6061 - Evernote Corp.)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Free Audio Converter version 5.0.52.1122 (HKLM-x32\...\Free Audio Converter_is1) (Version: 5.0.52.1122 - DVDVideoSoft Ltd.)
FRITZ!Box-Fernzugang einrichten (HKLM-x32\...\{EFADD989-D9F2-49F6-A280-675951CC78D3}) (Version: 1.0.3 - AVM Berlin)
FRITZ!Fernzugang (HKLM\...\{DD57CC22-8864-4CCA-94D4-600D024C1207}) (Version: 1.3.1 - AVM Berlin)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.116 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
Greenshot 1.2.4.10 (HKLM\...\Greenshot_is1) (Version: 1.2.4.10 - Greenshot)
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.35342 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.3.1427 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.220 - Intel Corporation)
Intel® Hardware Accelerated Execution Manager (HKLM\...\{ECCB31F5-435D-4F37-A98D-5854D3C62718}) (Version: 1.1.1 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
Java 8 Update 73 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418073F0}) (Version: 8.0.730.2 - Oracle Corporation)
Java 8 Update 73 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218073F0}) (Version: 8.0.730.2 - Oracle Corporation)
Java SE Development Kit 7 Update 79 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170790}) (Version: 1.7.0.790 - Oracle)
Java SE Development Kit 8 Update 51 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180510}) (Version: 8.0.510.16 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{77E7AE5C-181C-4CAF-ADBF-946F11C1CE26}) (Version: 16.0.0.614 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 16.0.0.614 - Kaspersky Lab) Hidden
Kyocera Product Library (HKLM\...\Kyocera Product Library) (Version: 2.0.0713 - Kyocera Mita Corporation)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version:  - DONTNOD Entertainment)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft Office 365 Business - de-de (HKLM\...\O365BusinessRetail - de-de) (Version: 15.0.4737.1003 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022.218 (HKLM\...\{BBBE35B2-9349-3C48-BD3D-F574B17C7924}) (Version: 9.0.21022.218 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 42.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 de)) (Version: 42.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla)
Network Play System (Patching) (HKLM-x32\...\Network Play System (Patching)) (Version:  - )
NovaBACKUP (HKLM-x32\...\NovaBACKUP) (Version: 14.5.18 - NovaStor)
NovaBACKUP (x32 Version: 14.5.18 - NovaStor) Hidden
NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
PDF24 Creator 7.0.5 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Photolive (HKLM-x32\...\com.adobe.example.photolive) (Version: 0.5 - UNKNOWN)
Photolive (x32 Version: 0.5 - UNKNOWN) Hidden
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
Ports Of Call - classic - Windows (HKLM-x32\...\Ports Of Call - classic - Windows) (Version:  - )
Premium Sound HD (HKLM\...\{3007FF9F-5B2C-41FF-8BFC-08BF25DB2681}) (Version: 1.12.1800 - SRS Labs, Inc.)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6794 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7601.30130 - Realtek Semiconductor Corp.)
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16011.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.16011.2 - Samsung Electronics Co., Ltd.) Hidden
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.59.0 - Samsung Electronics Co., Ltd.)
ScummVM 1.7.0 (HKLM-x32\...\ScummVM_is1) (Version:  - The ScummVM Team)
Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.112 - Skype Technologies S.A.)
Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.1.16014.12 - Samsung Electronics Co., Ltd.)
Smart Switch (x32 Version: 4.1.16014.12 - Samsung Electronics Co., Ltd.) Hidden
Software Updater (HKLM-x32\...\{C09D747A-BD47-42A9-915E-CEB6B1BB7C11}) (Version: 4.2.7 - SEIKO EPSON CORPORATION) <==== ACHTUNG
Spotify (HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\Spotify) (Version: 1.0.23.90.g42187855 - Spotify AB)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Sublime Text 2.0.2 (HKLM\...\Sublime Text 2_is1) (Version:  - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.16.3 - Synaptics Incorporated)
The Banner Saga (HKLM-x32\...\Steam App 237990) (Version:  - Stoic)
The Wolf Among Us (HKLM-x32\...\Steam App 250320) (Version:  - Telltale Games)
Tinypic 3.18 (HKLM-x32\...\{E3723A04-A894-4036-A78E-282E18F43C0A}_is1) (Version: Tinypic 3.18 - E. Fiedler)
TOSHIBA Assist (HKLM-x32\...\{C2A276E3-154E-44DC-AAF1-FFDD7FD30E35}) (Version: 4.2.3.1 - TOSHIBA CORPORATION)
TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.11 for x64 - TOSHIBA Corporation)
TOSHIBA eco Utility (HKLM\...\{F5AFF327-9B52-4E96-B5A0-BD2488A8EEC9}) (Version: 1.3.23.64 - TOSHIBA Corporation)
TOSHIBA Hardware Setup (HKLM-x32\...\{2FD5D2C5-A7A1-4065-89BA-90542BF7CCD3}) (Version: 2.00.0020 - TOSHIBA)
TOSHIBA HDD/SSD Alert (HKLM\...\{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.64.11 - TOSHIBA Corporation)
Toshiba Manuals (HKLM-x32\...\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}) (Version: 10.04 - TOSHIBA)
TOSHIBA Media Controller (HKLM-x32\...\{C7A4F26F-F9B0-41B2-8659-99181108CDE3}) (Version: 1.0.87.5 - TOSHIBA CORPORATION)
TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.7.15.64 - TOSHIBA Corporation)
TOSHIBA Recovery Media Creator (HKLM-x32\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.6.52020009 - TOSHIBA CORPORATION)
TOSHIBA Recovery Media Creator Reminder (HKLM-x32\...\InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}) (Version: 1.00.0019 - TOSHIBA)
TOSHIBA Resolution+ Plug-in for Windows Media Player (HKLM-x32\...\{6CB76C9D-80C2-4CB3-A4CD-D96B239E3F94}) (Version: 1.1.2004 - TOSHIBA Corporation)
TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.2.14 - TOSHIBA)
TOSHIBA Sleep Utility (HKLM-x32\...\{654F7484-88C5-46DC-AB32-C66BCB0E2102}) (Version: 1.4.0022.000104 - TOSHIBA Corporation)
TOSHIBA Supervisor Password (HKLM-x32\...\{119826A8-4EF6-4BE5-A88B-D2D81FA7CEE2}) (Version: 2.00.0009 - TOSHIBA)
TOSHIBA TEMPRO (HKLM-x32\...\{F082CB11-4794-4259-99A1-D91BA762AD15}) (Version: 3.35 - Toshiba Europe GmbH)
TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.6.0021.640203 - TOSHIBA Corporation)
TOSHIBA Web Camera Application (HKLM-x32\...\InstallShield_{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}) (Version: 2.0.3.39 - TOSHIBA Corporation)
TP-LINK TL-WN721N_TL-WN722N Driver (HKLM-x32\...\{86A7EED0-02D0-4D91-8183-8D2F23F5E6AE}) (Version: 1.3.1 - TP-LINK)
Unity Web Player (HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
VLC media player 2.0.7 (HKLM\...\VLC media player) (Version: 2.0.7 - VideoLAN)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Driver Package - GoPro (WinUSB) Universal Serial Bus devices  (03/07/2012 ) (HKLM\...\0B624A43DD66DBF5CF3EDFA9741A364E688062A4) (Version: 03/07/2012  - GoPro)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Wunderlist - Wunderlist (HKLM-x32\...\Wunderlist Wunderlist) (Version: 3.4.3 - Wunderlist)
Wunderlist (HKLM-x32\...\{1ca68332-4ba1-4943-9010-eaa1aa45b492}) (Version: 2.3.0.31 - 6 Wunderkinder GmbH)
Wunderlist (x32 Version: 2.3.0.31 - 6 Wunderkinder GmbH) Hidden
XAMPP (HKLM-x32\...\xampp) (Version: 5.6.3-0 - Bitnami)
XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version:  - Firaxis Games)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Christoph Steiner\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {01323C9F-8EF4-4D41-84FC-125DA3207A17} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {058832B1-18FD-4A7A-BA25-1BDCCD04622F} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {060E5843-D1A7-4293-9E14-69A560284D1C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {096E3A4F-2121-45F3-AFC6-8B2FAB157B0F} - System32\Tasks\Quark Updater => C:\Program Files\Quark\Quark Update\AutoUpdate.exe
Task: {1854F2F3-5EA8-4FF9-8F27-4C48730B07CB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {203EE8A9-79DB-422B-AA8E-7E19B09FCD6F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {2092319F-881A-4302-9A97-939CCC745DED} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {2ABCDB2A-1010-49B8-8642-1C5FBAB4A77E} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {2D92B8D5-9D6C-4B44-85D1-442695BE56F8} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-06-09] (Microsoft Corporation)
Task: {346F8C7A-9B65-4480-993C-FF77BA2B1B3E} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {34EE72BA-C3EB-4D59-8EFD-36FAF522434B} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {370CE587-0210-4120-BBE4-1050C0A54F53} - System32\Tasks\Microsoft Office 15 Sync Maintenance for AM16Toshiba-Christoph Steiner AM16Toshiba => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2015-06-02] (Microsoft Corporation)
Task: {3DBD2D3E-73E2-456A-A0D3-E0155EB183A6} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {3EDC996E-6509-4A5C-92CD-6F7F625EF9D3} - System32\Tasks\{6EEA5547-F7C3-4E62-9A84-15DF0E0B3195} => Chrome.exe hxxp://ui.skype.com/ui/0/6.6.0.106/en/abandoninstall?page=tsMain
Task: {4B580AC8-F24B-4643-9D41-D58CDFEB089A} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {504ADBB3-0C86-476E-BB22-5BFA6A248D3F} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {57214681-BAB8-4DE7-8DDC-1249B24934EF} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {5D79C2B4-D491-47B1-8B39-02F885967757} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {5DD9338A-7815-408C-B6CB-0C06C45524A0} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {608B05DF-78BE-4F4B-9B78-45CF54015799} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1692217113-2845591083-1275299302-1000UA => C:\Users\Christoph Steiner\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-15] (Dropbox, Inc.)
Task: {68B1BC1B-B971-4D5B-963F-34820DF5EED3} - System32\Tasks\{648F1541-3793-4A44-86E9-69EA46D3FEE3} => pcalua.exe -a C:\CS\ANNO1602\gcganock.EXE -d C:\CS\ANNO1602
Task: {71CECA0A-CAF6-4F2B-BA5E-4CFAEE56FA4F} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {73C1DB52-417C-4FD4-8CEE-14CD592A39E2} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {774CD4F7-1923-4D86-9A57-BED2EB1C839A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {77E7C248-8128-4993-A409-30755BBC6B62} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {7EE3ECE9-8BE2-4A70-943D-AB00C609CF87} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {8292C200-7DC1-4A6B-9FA0-640D08930B22} - System32\Tasks\CreateExplorerShellUnelevatedTask => /NOUACCHECK
Task: {86721361-1DD2-46C5-A62B-3E7752544C7C} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {887618E4-ACBB-418F-85A4-F1FAE13D829C} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {8A13B440-FB84-4107-B294-63C5D8DC3FA0} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {8DFFE845-7379-440A-964B-427D2AD509A2} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {8F955C2E-7605-4B98-9FFC-B647A344AE06} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {921519E8-5A4E-4188-8751-281DC38AFBA1} - System32\Tasks\{8C0C4AE9-7709-4AEA-AE33-CB4A929A78CE} => pcalua.exe -a C:\Users\CHRIST~1\AppData\Local\Temp\jre-8u51-windows-au.exe -d C:\windows\SysWOW64 -c /installmethod=jau FAMILYUPGRADE=1
Task: {94BB7FA7-308E-4F01-A23F-BE5266344D0A} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {9F4A22E4-B715-4B85-95BB-ACF621CFDD4F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {A4111EC5-3EB2-4CC3-8F76-6497C8308467} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {A6316714-A4BE-4970-8CE6-0BC0400BEC20} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {AEB1CE94-5B0D-43CE-84CC-BC4B0B53159A} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {AF65672A-6496-4085-BB41-CDEB6A758F71} - System32\Tasks\GoogleUpdateTaskMachineUA1d0e483665283c3 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {B0F2024D-E9DA-4F71-96BA-E44F6A27A656} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {B0F2C4D5-4966-41E4-B3BD-6F0F82106EEF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-12] (Adobe Systems Incorporated)
Task: {B9DED668-F657-4C02-A7EB-0458ED2FE40A} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {C22E9045-49A5-4656-83E0-05662434910F} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {C68C71D1-231B-487A-A43D-626C3CC64BA5} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {CA6654FE-5649-4639-8E3D-94169B70EFBE} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {D864645F-98E2-440C-A15F-79FDF4A4AB76} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {DAEDA142-1F9A-4D14-B47C-AE5AD70E7AD1} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {DC4C76B6-A708-4DF7-A430-7AA3396CB850} - System32\Tasks\GoogleUpdateTaskMachineCore1d0e4836555d08f => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {E8800A9F-9C8D-4AF6-ADD5-2FD51E9046AD} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {ECD807E3-71A1-4511-9E51-7F298ECBC71B} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {ED166A32-9AF5-4CAE-971B-643234DB0D34} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {F2B24FFA-8BCC-46C2-9FAA-95E9C6DF5FC7} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {FD4B64FB-0565-427E-906D-D691536DD2CB} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1692217113-2845591083-1275299302-1000Core => C:\Users\Christoph Steiner\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-15] (Dropbox, Inc.)
Task: {FE7DD3E8-F7A7-4D40-A1F2-A156D1511ABD} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1692217113-2845591083-1275299302-1000Core.job => C:\Users\Christoph Steiner\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1692217113-2845591083-1275299302-1000UA.job => C:\Users\Christoph Steiner\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d0e4836555d08f.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d0e483665283c3.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\WINDOWS\Tasks\Quark Updater.job => C:\Program Files\Quark\Quark Update\AutoUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-10-30 08:17 - 2015-10-30 08:17 - 00028672 _____ () C:\WINDOWS\SYSTEM32\efsext.dll
2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2013-04-13 19:29 - 2010-09-10 01:26 - 00162824 _____ () C:\Windows\System32\GFNEXSrv.exe
2013-04-13 19:12 - 2012-02-21 20:29 - 00128280 ____N () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
2015-02-25 09:50 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2012-02-29 03:00 - 2012-02-29 03:00 - 00594368 ____N () C:\Program Files\TOSHIBA\TECO\TecoPower.dll
2016-03-03 08:26 - 2016-02-23 12:27 - 02654872 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-01-22 08:53 - 2016-01-22 08:53 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-03-03 08:26 - 2016-02-23 12:27 - 02654872 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2013-12-13 12:20 - 2013-12-13 12:20 - 03359600 ____N () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
2016-01-14 19:59 - 2016-01-14 19:59 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-03-03 08:26 - 2016-02-23 09:36 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-01-15 07:18 - 2016-01-05 02:29 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-01-15 07:13 - 2016-01-05 02:23 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-01-28 13:35 - 2016-01-16 06:10 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-01-28 13:35 - 2016-01-16 06:13 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2011-08-22 23:19 - 2011-08-22 23:19 - 11204992 ____N () C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll
2010-12-15 23:19 - 2010-12-15 23:19 - 00124320 ____N () C:\Program Files\TOSHIBA\TECO\MUIHelp.dll
2011-11-26 02:51 - 2011-11-26 02:51 - 00079784 ____N () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll
2015-07-08 22:18 - 2015-07-08 22:18 - 00794920 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\kpcengine.2.3.dll
2013-04-21 21:12 - 2013-04-21 21:12 - 00141096 _____ () C:\Program Files (x86)\NovaStor\NovaStor NovaBACKUP\CrashRpt1401.dll
2013-04-21 21:05 - 2013-04-21 21:05 - 00197264 _____ () \\?\C:\Program Files (x86)\NovaStor\NovaStor NovaBACKUP\nsEngineRes407.dll
2013-04-21 21:12 - 2013-04-21 21:12 - 00010024 _____ () C:\Program Files (x86)\NovaStor\NovaStor NovaBACKUP\throttle.dll
2016-03-07 16:02 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2016-03-07 16:02 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2016-03-07 16:02 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2016-03-07 16:02 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2016-03-07 16:02 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2013-04-13 19:12 - 2012-02-21 20:09 - 01198872 ____N () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2016-01-22 08:53 - 2016-01-22 08:53 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-01-22 08:53 - 2016-01-22 08:53 - 22330368 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2016-01-11 10:36 - 2016-01-11 10:36 - 00932032 ____R () C:\Program Files (x86)\Skype\Phone\ssScreenVVS2.dll
2013-04-21 21:05 - 2013-04-21 21:05 - 06086800 _____ () \\?\C:\Program Files (x86)\NovaStor\NovaStor NovaBACKUP\nsAppRes407.dll
2015-12-10 07:16 - 2016-01-12 19:44 - 00034768 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd
2016-02-19 09:07 - 2016-01-12 19:45 - 00019408 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\faulthandler.pyd
2015-12-10 07:16 - 2016-01-12 19:44 - 00116688 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\pywintypes27.dll
2015-12-10 07:16 - 2016-01-12 19:44 - 00093640 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\_ctypes.pyd
2015-12-10 07:16 - 2016-01-12 19:44 - 00018376 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\select.pyd
2015-12-10 07:16 - 2016-02-16 19:39 - 00019760 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd
2015-12-10 07:16 - 2016-01-12 19:46 - 00105928 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\win32api.pyd
2015-12-10 07:16 - 2016-01-12 19:44 - 00392144 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\pythoncom27.dll
2015-12-10 07:16 - 2016-02-16 19:39 - 00381752 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd
2015-12-10 07:16 - 2016-01-12 19:44 - 00692688 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\unicodedata.pyd
2016-02-19 09:07 - 2016-02-16 19:38 - 00020816 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd
2015-12-10 07:16 - 2016-01-12 19:45 - 00112592 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd
2016-02-19 09:07 - 2016-02-16 19:38 - 01682760 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd
2016-02-19 09:07 - 2016-02-16 19:38 - 00020808 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd
2015-12-10 07:16 - 2016-02-16 19:39 - 00020800 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\_cffi_python_x66cf7a7cx17a72769.pyd
2015-12-10 07:16 - 2016-02-16 19:39 - 00021840 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\_cffi_unicode_environ_win32_x8bf8e68bx9968e850.pyd
2016-02-19 09:07 - 2016-02-16 19:39 - 00038696 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\fastpath.pyd
2015-12-10 07:16 - 2016-01-12 19:46 - 00020936 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\mmapfile.pyd
2015-12-10 07:16 - 2016-01-12 19:46 - 00024528 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\win32event.pyd
2015-12-10 07:16 - 2016-01-12 19:47 - 00114640 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\win32security.pyd
2015-12-10 07:16 - 2016-01-12 19:46 - 00124880 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\win32file.pyd
2016-02-19 09:07 - 2016-02-16 19:39 - 00021832 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\_cffi_pywin_kernel32_x64d8f881xc8c369be.pyd
2015-12-10 07:16 - 2016-01-12 19:46 - 00024016 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\win32clipboard.pyd
2015-12-10 07:16 - 2016-01-12 19:46 - 00175560 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\win32gui.pyd
2015-12-10 07:16 - 2016-01-12 19:47 - 00030160 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\win32pipe.pyd
2015-12-10 07:16 - 2016-01-12 19:47 - 00043472 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\win32process.pyd
2015-12-10 07:16 - 2016-01-12 19:47 - 00028616 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\win32ts.pyd
2015-12-10 07:16 - 2016-01-12 19:47 - 00048592 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\win32service.pyd
2016-02-19 09:07 - 2016-02-16 19:39 - 00026456 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd
2015-12-10 07:16 - 2016-01-12 19:46 - 00057808 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\win32evtlog.pyd
2015-12-10 07:16 - 2016-01-12 19:47 - 00024016 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\win32profile.pyd
2016-02-19 09:07 - 2016-02-16 19:38 - 00117056 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd
2015-12-10 07:16 - 2016-02-16 19:39 - 00024392 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd
2016-02-19 09:07 - 2016-01-12 19:47 - 00036296 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\librsync.dll
2016-02-19 09:07 - 2016-02-16 19:39 - 00031568 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\enterprise_data.compiled._enterprise_data.pyd
2016-02-19 09:07 - 2015-11-05 01:04 - 00293392 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\EnterpriseDataAdapter.dll
2015-12-10 07:16 - 2016-02-16 19:39 - 00023376 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd
2015-12-10 07:16 - 2016-01-12 19:44 - 00134608 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\_elementtree.pyd
2015-12-10 07:16 - 2016-01-12 19:44 - 00134088 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\pyexpat.pyd
2016-02-19 09:07 - 2016-01-12 19:45 - 00240584 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\jpegtran.pyd
2015-12-10 07:16 - 2016-02-16 19:39 - 00052024 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd
2016-02-19 09:07 - 2016-02-16 19:39 - 00020800 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\winffi.iphlpapi._winffi_iphlpapi.pyd
2016-02-19 09:07 - 2016-02-16 19:39 - 00021824 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\winffi.kernel32._winffi_kernel32.pyd
2016-02-19 09:07 - 2016-02-16 19:39 - 00019776 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\winffi.winerror._winffi_winerror.pyd
2016-02-19 09:07 - 2016-02-16 19:39 - 00020800 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\winffi.wininet._winffi_wininet.pyd
2016-02-19 09:07 - 2016-02-16 19:38 - 00020280 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd
2015-12-10 07:16 - 2016-01-12 19:47 - 00350152 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\winxpgui.pyd
2016-02-19 09:07 - 2016-02-16 19:39 - 00022352 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd
2016-02-19 09:07 - 2016-02-16 19:39 - 00084792 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL
2015-12-10 07:16 - 2016-02-16 19:39 - 01826096 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd
2015-12-10 07:16 - 2016-01-12 19:45 - 00083912 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\sip.pyd
2015-12-10 07:16 - 2016-02-16 19:39 - 03928880 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd
2015-12-10 07:16 - 2016-02-16 19:39 - 01971504 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd
2015-12-10 07:16 - 2016-02-16 19:39 - 00531248 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd
2015-12-10 07:16 - 2016-02-16 19:39 - 00132912 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd
2015-12-10 07:16 - 2016-02-16 19:39 - 00223544 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd
2015-12-10 07:16 - 2016-02-16 19:39 - 00207672 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd
2016-02-19 09:07 - 2016-02-16 19:39 - 00158008 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd
2016-02-19 09:07 - 2016-02-16 19:39 - 00042808 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd
2016-02-19 09:07 - 2016-01-12 19:49 - 00017864 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\libEGL.dll
2016-02-19 09:07 - 2016-01-12 19:49 - 01631184 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2015-12-10 07:16 - 2016-02-16 19:39 - 00024904 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\_cffi_wpad_proxy_win_x752e3d61xdcfdcc84.pyd
2015-12-10 07:16 - 2016-02-16 19:39 - 00546096 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd
2015-12-10 07:16 - 2016-02-16 19:39 - 00357680 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd
2015-03-04 22:45 - 2016-01-12 19:52 - 00697304 _____ () C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll
2014-12-17 15:11 - 2014-12-17 15:11 - 00439304 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
2014-12-17 15:11 - 2014-12-17 15:11 - 00321032 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2013-09-02 16:14 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2013-11-06 09:42 - 2015-07-13 11:41 - 00074272 _____ () C:\Program Files (x86)\PDF24\zlib.dll
2013-11-06 09:42 - 2015-07-13 11:41 - 00051744 _____ () C:\Program Files (x86)\PDF24\OperationUI.dll
2015-02-25 09:50 - 2015-02-25 09:50 - 00316576 _____ () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll
2016-02-20 23:01 - 2016-02-18 05:14 - 01630360 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\libglesv2.dll
2016-02-20 23:01 - 2016-02-18 05:14 - 00085656 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\libegl.dll
2016-02-20 23:01 - 2016-02-18 05:15 - 16808600 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\PepperFlash\pepflashplayer.dll
2015-02-25 09:51 - 2015-07-24 05:43 - 00122024 _____ () C:\Program Files\Microsoft Office 15\root\Office15\JitV.dll
2015-02-25 09:50 - 2015-02-25 09:50 - 00316576 _____ () C:\Program Files\Microsoft Office 15\root\Office15\AppVIsvStream32.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:054203E4 [124]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Register Baldur's Gate: Tales of the Sword Coast.lnk [2206]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\View Baldur's Gate: Tales of The Sword Coast Readme.lnk [2470]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)

HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\Software\Classes\.exe:  =>  <===== ACHTUNG

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\cleverreach.com -> hxxp://novastor.cleverreach.com
IE trusted site: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\google-analytics.com -> hxxp://google-analytics.com
IE trusted site: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\novastor.com -> hxxp://novastor.com
IE trusted site: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\novastor.com -> hxxps://novastor.com
IE trusted site: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\sharepoint.com -> hxxps://wondermagssarl.sharepoint.com
IE trusted site: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\sony.com -> sony.com

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2016-03-07 13:31 - 2016-03-07 13:31 - 00000669 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Christoph Steiner\Pictures\hubblessharpestviewoftheorionnebula.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\Run: => "Toshiba TEMPRO"
HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\StartupApproved\StartupFolder: => "OneDrive for Business.lnk"
HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\StartupApproved\StartupFolder: => "Wunderlist.lnk"
HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\StartupApproved\StartupFolder: => "EOS Utility.lnk"
HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\StartupApproved\Run: => "EPLTarget\P0000000000000000"
HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1692217113-2845591083-1275299302-1000\...\StartupApproved\Run: => "Wunderlist"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [UDP Query User{941AEEC4-C293-4483-8F18-EC3E35DDB2C3}C:\users\christoph steiner\appdata\local\temp\joib270.tmp\join.me.exe] => (Allow) C:\users\christoph steiner\appdata\local\temp\joib270.tmp\join.me.exe
FirewallRules: [TCP Query User{B463BE0B-A23E-479E-8B92-AF315E5216AD}C:\users\christoph steiner\appdata\local\temp\joib270.tmp\join.me.exe] => (Allow) C:\users\christoph steiner\appdata\local\temp\joib270.tmp\join.me.exe
FirewallRules: [UDP Query User{D0270204-9A7C-4010-8834-7C2A93D6E6E0}C:\users\christoph steiner\appdata\local\temp\joi39d4.tmp\join.me.exe] => (Allow) C:\users\christoph steiner\appdata\local\temp\joi39d4.tmp\join.me.exe
FirewallRules: [TCP Query User{23D93EFA-195F-4053-A2B0-C1BE0ABEED45}C:\users\christoph steiner\appdata\local\temp\joi39d4.tmp\join.me.exe] => (Allow) C:\users\christoph steiner\appdata\local\temp\joi39d4.tmp\join.me.exe
FirewallRules: [{D78D03F7-FA3F-4F21-B85A-E0C387D5DD81}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro 2\Apowersoft Screen Recorder Pro 2.exe
FirewallRules: [{378A7F30-E333-48DE-B1D7-2C660D5B05B5}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro 2\Apowersoft Screen Recorder Pro 2.exe
FirewallRules: [{D61595A2-AD96-41E2-9370-EF9AA2454258}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{AD538CB9-AF07-48C3-8484-D34DC375C054}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{54C0FAE1-014A-4B89-AACF-23A63D5B230F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{113A464C-E915-44FE-9AE0-0AAD5F8864AD}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [UDP Query User{87862C77-102F-49BA-82F4-47DBC29F769D}C:\users\christoph steiner\desktop\left 4 dead (portable)\left 4 dead\left4dead.exe] => (Allow) C:\users\christoph steiner\desktop\left 4 dead (portable)\left 4 dead\left4dead.exe
FirewallRules: [TCP Query User{C0844009-BCBC-4F41-8F2A-28AE63A27704}C:\users\christoph steiner\desktop\left 4 dead (portable)\left 4 dead\left4dead.exe] => (Allow) C:\users\christoph steiner\desktop\left 4 dead (portable)\left 4 dead\left4dead.exe
FirewallRules: [UDP Query User{F4E1B321-B093-435D-9ADA-38C95E3DB443}C:\program files (x86)\ea games\command & conquer generäle stunde null\game.dat] => (Allow) C:\program files (x86)\ea games\command & conquer generäle stunde null\game.dat
FirewallRules: [TCP Query User{3B2048F6-5A6B-47AA-A02D-923921B0CDF1}C:\program files (x86)\ea games\command & conquer generäle stunde null\game.dat] => (Allow) C:\program files (x86)\ea games\command & conquer generäle stunde null\game.dat
FirewallRules: [UDP Query User{F16D16D9-4813-404E-8DD0-9B66F1142F1C}C:\users\christoph steiner\desktop\wc3\warcraft iii deutsch\war3.exe] => (Allow) C:\users\christoph steiner\desktop\wc3\warcraft iii deutsch\war3.exe
FirewallRules: [TCP Query User{2E894537-F4A9-4EE0-803D-1605D1BD1761}C:\users\christoph steiner\desktop\wc3\warcraft iii deutsch\war3.exe] => (Allow) C:\users\christoph steiner\desktop\wc3\warcraft iii deutsch\war3.exe
FirewallRules: [UDP Query User{98FC4AE4-EA80-4418-AF7D-E343ACF159EC}C:\program files (x86)\ea games\command & conquer generäle stunde null\patchget.dat] => (Allow) C:\program files (x86)\ea games\command & conquer generäle stunde null\patchget.dat
FirewallRules: [TCP Query User{389F8502-6706-4038-95CC-0C73F2F7A13A}C:\program files (x86)\ea games\command & conquer generäle stunde null\patchget.dat] => (Allow) C:\program files (x86)\ea games\command & conquer generäle stunde null\patchget.dat
FirewallRules: [{45556022-B7C5-4F4F-B1A5-9F89134CE347}] => (Allow) LPort=1900
FirewallRules: [{1E5899B9-2DC3-433D-98E1-57465F6B5672}] => (Allow) LPort=2869
FirewallRules: [{F5B1E4F1-B732-4FF5-94FA-566B4224DF3A}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [UDP Query User{EF3B119D-3D21-4C69-94AD-1FDB2C7F45DC}C:\program files\java\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\javaw.exe
FirewallRules: [TCP Query User{B2F35A10-3F14-4213-9F39-3A63BB0BA70A}C:\program files\java\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\javaw.exe
FirewallRules: [{9CED3428-438B-469A-9E35-36649CC0075E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{3180A99A-76E5-464A-A959-AAE8B4FAE43D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [UDP Query User{5DA1676F-E9E2-4E36-8309-196290E44D81}C:\program files (x86)\steam\steamapps\common\anno 1404\tools\anno4web.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\anno 1404\tools\anno4web.exe
FirewallRules: [TCP Query User{3C795B44-6BAC-46CE-A280-1F8EC14B6F7B}C:\program files (x86)\steam\steamapps\common\anno 1404\tools\anno4web.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\anno 1404\tools\anno4web.exe
FirewallRules: [UDP Query User{5CFCA91B-CB3B-4A09-892A-CB2AFB89D8C0}C:\cs\wondermags\android\jdk 7u79\bin\java.exe] => (Allow) C:\cs\wondermags\android\jdk 7u79\bin\java.exe
FirewallRules: [TCP Query User{7F340380-B696-4BA3-84AA-D46293477D08}C:\cs\wondermags\android\jdk 7u79\bin\java.exe] => (Allow) C:\cs\wondermags\android\jdk 7u79\bin\java.exe
FirewallRules: [UDP Query User{D92D2C99-3F9F-450E-9F7F-216953F4E086}C:\program files\android\android studio\bin\studio64.exe] => (Allow) C:\program files\android\android studio\bin\studio64.exe
FirewallRules: [TCP Query User{2A9E47A0-BA6E-4477-8110-E81122777B09}C:\program files\android\android studio\bin\studio64.exe] => (Allow) C:\program files\android\android studio\bin\studio64.exe
FirewallRules: [{B16BCD74-D059-49FC-8849-8F7415E17B9B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{DBD5E13F-8156-4D89-B363-F29915978740}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [UDP Query User{011CAC04-97C2-4B2A-B432-CBE693522673}C:\xampp\mysql\bin\mysqld.exe] => (Block) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [TCP Query User{55FD2C43-AC3D-4002-85F0-39B3D18A5D78}C:\xampp\mysql\bin\mysqld.exe] => (Block) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{448071F7-F13D-4F1A-9AFA-174A1384C01D}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{0E1C2D1E-1C80-4282-9C8D-CB3EB4468A02}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{05FA298A-48D8-4591-AD77-184ACD18FC5C}C:\users\christoph steiner\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\christoph steiner\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{A4BD7876-3230-44B6-BE36-476170239D18}C:\users\christoph steiner\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\christoph steiner\appdata\roaming\spotify\spotify.exe
FirewallRules: [{EFBFD89B-F94E-49E6-B970-CC4DB78BD441}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [UDP Query User{ADCAC1B8-43BF-41C7-8AD1-C4121A84C784}C:\users\christoph steiner\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\christoph steiner\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{E5B6E625-C27C-4F71-8C3B-747EE5CCA211}C:\users\christoph steiner\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\christoph steiner\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{F58DE84C-D21E-4841-8F90-EF231F9A223D}C:\program files (x86)\callnote\jre\launch4j-tmp\callnote cli.exe] => (Allow) C:\program files (x86)\callnote\jre\launch4j-tmp\callnote cli.exe
FirewallRules: [TCP Query User{39D37706-D3C4-4C45-812C-28804A01328F}C:\program files (x86)\callnote\jre\launch4j-tmp\callnote cli.exe] => (Allow) C:\program files (x86)\callnote\jre\launch4j-tmp\callnote cli.exe
FirewallRules: [{A5E25D2C-2B88-4BDB-8E4E-C7F51E20B3FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [{191E37D6-D027-4BCF-A770-D64B7978DCD6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [{B55B6AA1-C91C-4CC0-86B1-AFE6DC6E9535}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A4C6AFE0-16AC-4E1B-9A11-CB7694CC9FA8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{2A9C53A2-8EA3-4B2D-848B-E17752BC1695}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [{97E5D3A0-6B4A-43E5-9A6A-014F852ACEA2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [{AC8E72E4-690F-4345-8B22-102F7A611350}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{F292FD0D-DF5F-4887-94D6-B4E452A045D8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{E2B927FA-6EE2-4F55-A193-8D94EC1E176B}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{5B24A764-D508-4411-953A-BA880F169550}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{E307B310-6CE9-481F-AA4B-351B6D746B27}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{8D43177E-01E1-481A-BE4C-18C63C2B68B2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [UDP Query User{496F0CC1-1F6C-44E7-BF6F-608BE2966A7C}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [TCP Query User{CAD6574D-A277-46BE-ADCC-1DA2C52D4CE1}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [UDP Query User{0559A067-D264-4ABF-B012-936C71277D1C}C:\users\christoph steiner\downloads\openarena-0.8.8\openarena-0.8.8\openarena.exe] => (Allow) C:\users\christoph steiner\downloads\openarena-0.8.8\openarena-0.8.8\openarena.exe
FirewallRules: [TCP Query User{AD39BACB-BDF3-4866-8B48-D72C9E89F827}C:\users\christoph steiner\downloads\openarena-0.8.8\openarena-0.8.8\openarena.exe] => (Allow) C:\users\christoph steiner\downloads\openarena-0.8.8\openarena-0.8.8\openarena.exe
FirewallRules: [UDP Query User{3ADA4D2B-505E-436F-9B96-8D54F6EE0829}C:\users\christoph steiner\appdata\roaming\bittorrent\bittorrent.exe] => (Allow) C:\users\christoph steiner\appdata\roaming\bittorrent\bittorrent.exe
FirewallRules: [TCP Query User{7A5BFB11-6699-493A-8A3E-872080E112D5}C:\users\christoph steiner\appdata\roaming\bittorrent\bittorrent.exe] => (Allow) C:\users\christoph steiner\appdata\roaming\bittorrent\bittorrent.exe
FirewallRules: [UDP Query User{F6982F09-DF86-4A36-B5CB-7C70BD6DFD80}C:\users\christoph steiner\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\christoph steiner\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{559122CB-DE52-4243-8B4C-3995F5C47E70}C:\users\christoph steiner\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\christoph steiner\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{C9FCB0DA-D8A0-4342-A3C7-3366A5EDEC40}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [TCP Query User{A11D68A8-BFF3-4E0A-BC34-22BA12C1842B}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [{56318229-A89D-4244-A965-3CDF53732237}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{FB3200DA-0322-492F-A91F-AC2BF92045C3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{70A15C05-0C3C-4F4B-A7A8-8FA089B2F990}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{F8C98178-42CC-404E-9354-4404531C1F59}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{E2AB35CE-6E91-49BD-8893-E4C4620E2F44}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{379D0BEE-D5AB-49F0-94A2-053FF0DDF77F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{F7CCF3B8-7C21-44A3-A335-2C923D994EE9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{8EB2E16A-1C51-4066-BB21-9D422497245B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{26446E5D-D143-4E62-ABEC-5B19CB04C259}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{ACE8C4EB-A3DE-4959-9140-9E2A828D0B1C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{971276C6-6F53-4384-A5F7-F2DD64D369BB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{9741C05C-DE6E-46F3-8CBC-A5A780E4E260}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{FCFDB872-678C-4FCC-8C78-E9025B32C426}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{3DC57720-064F-4EDC-AA87-119F4ACF013F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{00021536-E6C7-4ED4-9BC5-8DAF6C7885EF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{4F80543B-BCCF-4B43-B895-C034E87D6478}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{1AA45257-439D-44CA-B29C-DE4E24547F17}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{74CBB86C-FC54-4D7E-A041-2BF9E763DEF8}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{68126C85-AA44-4623-9C14-17C77B64F222}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{357466DB-8816-4550-B04F-8ABFB09F4A69}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{06AB2540-9FE6-451A-B2E3-F47487B70F47}] => (Allow) C:\Program Files (x86)\BUFFALO\NASNAVI\NasNavi.exe
FirewallRules: [{EC4B97C5-28FE-4BE8-A403-8F0E568FA9A0}] => (Allow) C:\Program Files (x86)\BUFFALO\NASNAVI\NasNavi.exe
FirewallRules: [{060F60F9-98E2-401A-9E91-ECEEDD3334CF}] => (Allow) C:\Program Files (x86)\BUFFALO\NASNAVI\NasNavi.exe
FirewallRules: [{313A0CDA-FC2E-45F6-8C7F-CB6A6641BA9D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{A4F91931-96F3-4FEA-8519-AC5C5B603F14}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{170F43B7-4BB7-440F-B372-964491970FD8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{19C76280-8C41-463F-A750-4108A19EFB6B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{5519066B-2DE7-445C-9EF5-3AAEA38844CD}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B56454B0-490C-424B-A9BD-4038A18DBFE8}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{0E07B4EA-27F7-4D99-A99D-CF4E6ECE05BD}] => (Allow) C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{EB823634-2A04-45C7-8597-BD5BCC4A6016}] => (Allow) C:\Users\Christoph Steiner\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{054FA524-BBE5-497F-8A08-525FA95BCB67}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{E0A80AFB-9D02-4D5D-83F9-F422AC5A7885}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{90FAB9B0-F021-45E5-8A84-E07638E62B25}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1473A756-A2DA-435C-BB87-0B50C4AFEBC2}] => (Allow) C:\Program Files (x86)\Canon\EOS Utility\EOSUPNPSV.exe
FirewallRules: [{DD74074A-8B2A-4751-83D6-F0A66960EF31}] => (Allow) C:\Program Files (x86)\Canon\EOS Utility\EOSUPNPSV.exe
FirewallRules: [{BEDBD42B-ABE7-4A54-AD62-255F90271AB1}] => (Allow) C:\Program Files (x86)\Canon\EOS Utility\EOSUPNPSV.exe
FirewallRules: [{0579DCCC-EEA5-49AB-A329-985D8E4A1F3E}] => (Allow) C:\Program Files (x86)\Canon\EOS Utility\EOSUPNPSV.exe
FirewallRules: [TCP Query User{6A3D474C-95E1-4BEC-9F28-55BA703EC989}C:\users\christoph steiner\appdata\local\temp\joic1fd.tmp\join.me.exe] => (Allow) C:\users\christoph steiner\appdata\local\temp\joic1fd.tmp\join.me.exe
FirewallRules: [UDP Query User{DE594136-6F14-434F-9079-63E51243894D}C:\users\christoph steiner\appdata\local\temp\joic1fd.tmp\join.me.exe] => (Allow) C:\users\christoph steiner\appdata\local\temp\joic1fd.tmp\join.me.exe
FirewallRules: [{5B65399F-8B20-4B21-95A1-29C32781FF7F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Wiederherstellungspunkte =========================

21-02-2016 10:35:32 Geplanter Prüfpunkt
29-02-2016 11:27:40 Geplanter Prüfpunkt
04-03-2016 08:41:45 Installiert BodyMedia SenseWear 8.1
07-03-2016 12:38:40 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Qualcomm Atheros AR9485WB-EG Wireless Network Adapter
Description: Qualcomm Atheros AR9485WB-EG Wireless Network Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Qualcomm Atheros Communications Inc.
Service: athr
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (03/08/2016 09:35:10 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.

Error: (03/08/2016 09:34:50 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.

Error: (03/08/2016 09:08:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: TPCHSrv.exe, Version: 1.0.0.17, Zeitstempel: 0x4ee83cbe
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10586.122, Zeitstempel: 0x56cbf9dd
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000ee6dc
ID des fehlerhaften Prozesses: 0x2188
Startzeit der fehlerhaften Anwendung: 0xTPCHSrv.exe0
Pfad der fehlerhaften Anwendung: TPCHSrv.exe1
Pfad des fehlerhaften Moduls: TPCHSrv.exe2
Berichtskennung: TPCHSrv.exe3
Vollständiger Name des fehlerhaften Pakets: TPCHSrv.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: TPCHSrv.exe5

Error: (03/08/2016 09:03:25 AM) (Source: Apache Service) (EventID: 3299) (User: )
Description: The Apache service named  reported the following error:
>>> AH00015: Unable to open logs     .

Error: (03/08/2016 09:03:25 AM) (Source: Apache Service) (EventID: 3299) (User: )
Description: The Apache service named  reported the following error:
>>> AH00451: no listening sockets available, shutting down     .

Error: (03/08/2016 09:03:25 AM) (Source: Apache Service) (EventID: 3299) (User: )
Description: The Apache service named  reported the following error:
>>> (OS 10013)Der Zugriff auf einen Socket war aufgrund der Zugriffsrechte des Sockets unzulässig.  : AH00072: make_sock: could not bind to address 0.0.0.0:80     .

Error: (03/08/2016 09:03:25 AM) (Source: Apache Service) (EventID: 3299) (User: )
Description: The Apache service named  reported the following error:
>>> (OS 10013)Der Zugriff auf einen Socket war aufgrund der Zugriffsrechte des Sockets unzulässig.  : AH00072: make_sock: could not bind to address [::]:80     .

Error: (03/07/2016 08:21:45 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Users\CHRIST~1\AppData\Local\Temp\jrt\CreateRestorePoint.exe  "JRT Pre-Junkware Removal"; Beschreibung = JRT Pre-Junkware Removal; Fehler = 0x8007043c).

Error: (03/07/2016 08:21:25 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.

Error: (03/07/2016 08:18:02 PM) (Source: Apache Service) (EventID: 3299) (User: )
Description: The Apache service named  reported the following error:
>>> AH00015: Unable to open logs     .


Systemfehler:
=============
Error: (03/08/2016 09:10:27 AM) (Source: DCOM) (EventID: 10010) (User: AM16Toshiba)
Description: {45CC1698-D1CF-417B-BC32-80EB79E05EF1}

Error: (03/08/2016 09:09:31 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "TPCH Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/08/2016 09:03:25 AM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Apache2.4" wurde mit dem folgenden dienstspezifischen Fehler beendet: 
%%1

Error: (03/08/2016 09:03:01 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (03/08/2016 09:02:53 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "RtkAudioService" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (03/08/2016 12:31:16 AM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT)
Description: 1084dpsNicht verfügbar{DDCFD26B-FEED-44CD-B71D-79487D2E5E5A}

Error: (03/08/2016 12:31:15 AM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT)
Description: 1084dpsNicht verfügbar{DDCFD26B-FEED-44CD-B71D-79487D2E5E5A}

Error: (03/08/2016 12:31:14 AM) (Source: DCOM) (EventID: 10005) (User: AM16Toshiba)
Description: 1084ShellHWDetectionNicht verfügbar{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (03/08/2016 12:31:13 AM) (Source: DCOM) (EventID: 10005) (User: AM16Toshiba)
Description: 1084WSearchNicht verfügbar{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

Error: (03/08/2016 12:31:11 AM) (Source: DCOM) (EventID: 10005) (User: AM16Toshiba)
Description: 1084WSearchNicht verfügbar{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}


CodeIntegrity:
===================================
  Date: 2016-03-07 12:05:27.069
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-03-07 12:05:27.020
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-03-07 12:05:26.990
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-03-07 12:05:26.932
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-03-07 12:05:26.896
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-03-07 12:05:26.859
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-03-07 12:05:25.064
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-03-07 12:05:24.940
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-03-07 12:03:20.621
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-03-07 12:03:20.583
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll that did not meet the Microsoft signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-3230M CPU @ 2.60GHz
Prozentuale Nutzung des RAM: 54%
Installierter physikalischer RAM: 8143.3 MB
Verfügbarer physikalischer RAM: 3713.79 MB
Summe virtueller Speicher: 16335.3 MB
Verfügbarer virtueller Speicher: 11324.57 MB

==================== Laufwerke ================================

Drive c: (TI31047800A) (Fixed) (Total:451.62 GB) (Free:124.55 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: EE7C0577)
Partition 1: (Active) - (Size=1.5 GB) - (Type=27)
Partition 2: (Not Active) - (Size=451.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=815 MB) - (Type=27)
Partition 4: (Not Active) - (Size=11.9 GB) - (Type=17)

==================== Ende von Addition.txt =================
         

--- --- ---

Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Hallo,

vielen Dank für die Rückmeldung. Ich habe das Problem mitlerweile selbstlösen können.

Dieser Topic kann also zugemacht werden.