Unsicher über Anwendung von CryptoPrevent u.a.

Ecronika · 22.05.2016, 14:58

Nach einigen Ungereimtheiten auf einem anderen PC in meiner Familie (es könnten weitere Themen folgen), habe ich nun begonnen mir mal einen nach dem anderen nach Schadsoftware zu begutachten und bin bei einem nun bei folgendem Log über dessen Bewertung im Allgemeinen und speziell über die Kennzeichnung mit "Achtung" an allen Dingen, die ich auf den Einsatz des Tools CryptoPrevent zurückführen würde verunsichert ...

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:22-05-2016
durchgeführt von Tobias (Administrator) auf TOBIAS-PC (22-05-2016 15:12:59)
Gestartet von C:\Users\Tobias\Desktop
Geladene Profile: Tobias & Lilly (Verfügbare Profile: Tobias & Lilly)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AOMEI Tech Co., Ltd.) C:\Program Files (x86)\AOMEI Backupper\ABService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler64.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(The Document Foundation) C:\Program Files (x86)\LibreOffice 5\program\scalc.exe
(The Document Foundation) C:\Program Files (x86)\LibreOffice 5\program\soffice.exe
(The Document Foundation) C:\Program Files (x86)\LibreOffice 5\program\soffice.bin
(Microsoft Corporation) C:\Windows\splwow64.exe
() F:\VDE\VDEView.exe
() C:\Program Files (x86)\foobar2000\foobar2000.exe
(Microsoft Corporation) C:\Windows\System32\calc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
() C:\Program Files (x86)\WISO\Steuersoftware 2016\wmain16.dll
(ALF AG) C:\Program Files (x86)\ALFBanCo6\AlfBanCo6.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16472832 2016-03-18] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1340192 2016-01-29] (Microsoft Corporation)
HKLM-x32\...\Run: [AMD AVT] => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595504 2016-01-29] (Oracle Corporation)
HKLM Group Policy restriction on software: *.divx*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %programfiles(x86)%\*\svchost.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.bmp*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.ppt*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp3*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.docx*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: syskey.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.pdf*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.wav*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpeg*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp4*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Users\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpg*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.bmp*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.pdf*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.gif*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.txt*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp3*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.pdf*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Users\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.txt*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.xlsx*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpeg*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.xlsx*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.wmv*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.docx*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.7z*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.pub*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.txt*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.txt*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.wma*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.divx*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.docx*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.rar*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.docx*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.rtf*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.zip*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.pub*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp4*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.pptx*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.doc*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpg*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.gif*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp3*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.rar*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.divx*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.docx*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.txt*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.gif*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Users\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.pptx*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: scsvserv.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.doc*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *:\$Recycle.Bin <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Users\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.bmp*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.pub*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.avi*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %allusersprofile%\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.zip*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.divx*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.avi*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.wav*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp4*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.divx*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.gif*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.pub*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.txt*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %allusersprofile%\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.wma*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.wma*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.xlsx*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.xls*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.avi*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.wma*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpeg*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.avi*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.pdf*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp4*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.docx*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpg*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: cipher.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.rtf*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.zip*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.pptx*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.pptx*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.rar*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.wav*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %programfiles%\*\svchost.exe <====== ACHTUNG
HKLM Group Policy restriction on software: ** <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\Appdata\Roaming\Microsoft\Windows\IEUpdate\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.wav*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.zip*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.wmv*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.zip*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %allusersprofile%\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: vssadmin.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.pdf*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpg*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.gif*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.gif*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.7z*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: lsassvrtdbks.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %allusersprofile%\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.pdf*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.txt*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.pdf*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.gif*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: lsassw86s.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp4*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpg*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.xls*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpeg*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.ppt*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.pptx*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.ppt*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.doc*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.rar*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpeg*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.png*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.pub*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.pdf*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.7z*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.divx*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.zip*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.xls*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.ppt*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.wma*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.pptx*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.xlsx*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.doc*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.pptx*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.avi*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpeg*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.xlsx*.js <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Users\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.rtf*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.doc*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.avi*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.wma*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp3*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Users\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.png*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.rar*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.zip*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.7z*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.ppt*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.bmp*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.xlsx*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp3*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.doc*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpg*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.bmp*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.wav*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\*\svchost.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.rtf*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.bmp*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp4*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.wav*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.rtf*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.rar*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp3*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.wmv*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.png*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.xls*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp3*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpg*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.png*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.pub*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpeg*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.png*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.wma*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.divx*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.wav*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.avi*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %allusersprofile%\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.png*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.wmv*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.rar*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.txt*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.bmp*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.wav*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.ppt*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.pub*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.avi*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.xlsx*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.xlsx*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.ppt*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.doc*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %systemdrive%\*\svchost.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.pub*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.xls*.js <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Users\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.bmp*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.wmv*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.rtf*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.docx*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp4*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.png*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.wmv*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %allusersprofile%\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %allusersprofile%\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpeg*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.wmv*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.png*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.7z*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.xls*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.divx*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.wma*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.7z*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.wmv*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.pptx*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.rar*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp4*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.xls*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.ppt*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.zip*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.xls*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.doc*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.rtf*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %allusersprofile%\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.docx*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.rtf*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.gif*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.7z*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.7z*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpg*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp3*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\tools\expand.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\raptr\raptr-4.4.4-r100182-release.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\desktopiconforamazon\iconforamazon.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\tools\oscdimg.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\desktopiconforamazon\iconforamazon.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\desktopiconforamazon\iconforamazon.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\tools\oscdimg.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\icqm\icq.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\icqm\icqsetup.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\tools\imagex.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\tools\dism.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\pccustubinstaller\pccheckupinstaller.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\pccustubinstaller\pccheckupinstaller.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\raptr\raptr-4.4.4-r100182-release.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\tools\subinacl.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\tools\dism.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\icqm\icqsetup.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\desktopiconforamazon\iconforamazon.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\icqm\icq.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\tools\expand.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\tools\oscdimg.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\tools\dism.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\icqm\icq.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\tools\expand.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\tools\imagex.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\raptr\raptr-4.4.4-r100182-release.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\icqm\icq.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\tools\dism.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\pccustubinstaller\pccheckupinstaller.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\pccustubinstaller\pccheckupinstaller.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\tools\expand.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\tools\imagex.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\tools\subinacl.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\tools\oscdimg.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\raptr\raptr-4.4.4-r100182-release.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\icqm\icqsetup.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\tools\subinacl.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\icqm\icqsetup.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\tools\imagex.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\tools\subinacl.exe <====== ACHTUNG
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8619224 2016-01-15] (Piriform Ltd)
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\Run: [GoogleChromeAutoLaunch_3E029A545A903A02B262797A0B1ADE1D] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304 2016-05-11] (Google Inc.)
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {09d516ca-2b55-11e1-997d-806e6f6e6963} - D:\start.exe /auto
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {27cae23b-1441-11e0-9040-806e6f6e6963} - D:\menue.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {84a4c421-15fb-11e0-b25e-00241d273df8} - H:\setup.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {97310e1f-b813-11e2-ad6d-00241d273df8} - I:\Autorun.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {a62ddaff-7d98-11e0-bd82-001150f5aa18} - G:\SamsungKiesInstaller.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {c5f43e28-3797-11e4-bebe-00241d273df8} - I:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {dd8eb564-382c-11e0-b38d-001150f5aa18} - J:\setup.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {e0c6157a-980e-11e3-9036-020406080a0c} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {ffad9440-5ded-11e3-a58d-00241d273df8} - M:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\Run: [uTorrent] => "C:\Program Files (x86)\uTorrent\uTorrent.exe"  /MINIMIZED
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\Run: [GoogleChromeAutoLaunch_3E029A545A903A02B262797A0B1ADE1D] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304 2016-05-11] (Google Inc.)
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\Run: [C9E2C46E4256CA39ECA0DEAEED818A2394673964._service_run] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304 2016-05-11] (Google Inc.)
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\Run: [MyTomTomSA.exe] => "C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe"
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\Run: [DAEMON Tools Lite] => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\Run: [Spotify Web Helper] => "C:\Users\Tobias\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\Run: [Spotify] => "C:\Users\Tobias\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\Run: [Xvid] => C:\Program Files (x86)\Xvid\CheckUpdate.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55360 2014-06-24] (Raptr, Inc)
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\Run: [pdiface] => C:\Program Files\Bitdefender\60-Second Virus Scanner\pdiface.exe -noshow
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [1958248 2015-11-20] (TomTom)
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\Run: [ICQ] => C:\Users\Lilly\AppData\Roaming\ICQM\icq.exe -CU
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\Run: [Dropbox Update] => C:\Users\Tobias\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-19] (Dropbox, Inc.)
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\MountPoints2: {09d516ca-2b55-11e1-997d-806e6f6e6963} - D:\autorun.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\MountPoints2: {27cae23b-1441-11e0-9040-806e6f6e6963} - D:\menue.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\MountPoints2: {84a4c421-15fb-11e0-b25e-00241d273df8} - H:\setup.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\MountPoints2: {97310e1f-b813-11e2-ad6d-00241d273df8} - I:\Startup.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\MountPoints2: {9c96da71-0033-11e2-b0c1-00241d273df8} - G:\Startup.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\MountPoints2: {a62ddaff-7d98-11e0-bd82-001150f5aa18} - G:\SamsungKiesInstaller.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\MountPoints2: {c5f43e28-3797-11e4-bebe-00241d273df8} - I:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\MountPoints2: {dd8eb564-382c-11e0-b38d-001150f5aa18} - J:\setup.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\MountPoints2: {e0c6157a-980e-11e3-9036-020406080a0c} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\MountPoints2: {ffad9440-5ded-11e3-a58d-00241d273df8} - M:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => c:\windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-07] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2016-03-12]
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk [2014-09-06]
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2014\mshaktuell.exe ()
BootExecute: autocheck autochk * OODBS
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{C48DADB5-765A-4E89-9F97-A316B5CE6B81}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{CCEC49E1-91C8-4C57-98C4-741F01CAB96B}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKLM -> {589B893E-773C-4941-88C2-0DCC718E621C} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> {1C477015-0093-4C46-9DA2-268340024F43} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> {224150C8-9F06-4D96-A51D-44A7951D972C} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> {BB5A6418-A5C3-4C4B-AAC3-DDD9A4902AEA} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> {D982EF7F-7F6A-40C1-80CE-B1FE1977269E} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3455670051-300026812-3451469050-1008 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://taplika.com/results.php?f=4&q={searchTerms}&a=tlk_ir_15_06&cd=2XzuyEtN2Y1L1Qzu0EyC0BzzyEzz0AtA0FtCyEtCtDyCtCyEtN0D0Tzu0StCtCtBzztN1L2XzutAtFyBtFtBtFtDtN1L1CzutCyEtBzytDyD1V1BtAtN1L1G1B1V1N2Y1L1Qzu2SyC0BzzyB0DtB0F0BtGtAyE0AtCtGyDyDyDyCtG0F0BtBtAtGtDyC0FtCtDyDzzzy0C0B0B0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAyD0BtAtByD0EtCtG0A0FtBtCtGyEtDyEtCtG0B0F0A0FtGyDyC0CyEtByDyC0C0C0DyC0A2Q&cr=362526228&ir=
SearchScopes: HKU\S-1-5-21-3455670051-300026812-3451469050-1008 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://taplika.com/results.php?f=4&q={searchTerms}&a=tlk_ir_15_06&cd=2XzuyEtN2Y1L1Qzu0EyC0BzzyEzz0AtA0FtCyEtCtDyCtCyEtN0D0Tzu0StCtCtBzztN1L2XzutAtFyBtFtBtFtDtN1L1CzutCyEtBzytDyD1V1BtAtN1L1G1B1V1N2Y1L1Qzu2SyC0BzzyB0DtB0F0BtGtAyE0AtCtGyDyDyDyCtG0F0BtBtAtGtDyC0FtCtDyDzzzy0C0B0B0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAyD0BtAtByD0EtCtG0A0FtBtCtGyEtDyEtCtG0B0F0A0FtGyDyC0CyEtByDyC0C0C0DyC0A2Q&cr=362526228&ir=
SearchScopes: HKU\S-1-5-21-3455670051-300026812-3451469050-1008 -> {589B893E-773C-4941-88C2-0DCC718E621C} URL = hxxp://myhome.vi-view.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=M4-CT256M4SSD2_00000000130109243A4E&ts=1422909811&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3455670051-300026812-3451469050-1008 -> {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKU\S-1-5-21-3455670051-300026812-3451469050-1008 -> {88F24E0E-8BC9-4F3C-A9D8-D6457FEE2195} URL = hxxp://myhome.vi-view.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=M4-CT256M4SSD2_00000000130109243A4E&ts=1422909811&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3455670051-300026812-3451469050-1008 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={51052DC5-6EDB-4A9F-89F1-D1DFD0A94B0D}&mid=957022cb457947d192afd16d5bc3d40b-d67d4d99d5563bd037147d0cd5662f6ca3519738&lang=de&ds=ts024&pr=sa&d=2012-02-09 23:06:04&v=9.0.0.23&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3455670051-300026812-3451469050-1008 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://myhome.vi-view.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=M4-CT256M4SSD2_00000000130109243A4E&ts=1422909811&type=default&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_91\bin\ssv.dll [2016-05-06] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-05-06] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-05-06] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-05-06] (Oracle Corporation)
Toolbar: HKLM - Kein Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Keine Datei
Toolbar: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> Kein Name - {A13C2648-91D4-4BF3-BC6D-0079707C4389} -  Keine Datei
Toolbar: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> Kein Name - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -  Keine Datei
Toolbar: HKU\S-1-5-21-3455670051-300026812-3451469050-1008 -> Kein Name - {A13C2648-91D4-4BF3-BC6D-0079707C4389} -  Keine Datei
Toolbar: HKU\S-1-5-21-3455670051-300026812-3451469050-1008 -> Kein Name - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -  Keine Datei
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPID.cab
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} -  Keine Datei

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-13] ()
FF Plugin: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-05-06] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-05-06] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-13] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2015-12-21] (Adobe Systems, Inc.)
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-05-06] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-05-06] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @TrendMicro.com/FFExtension -> C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension\components\npToolbarChrome.dll [Keine Datei]
FF Plugin-x32: @videolan.org/vlc,version=2.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3455670051-300026812-3451469050-1000: @protectdisc.com/NPPDLicenseHelper -> C:\Users\Tobias\AppData\Roaming\ProtectDisc\License Helper v2\NPPDLicenseHelper.dll [2009-06-25] ( )
FF Plugin HKU\S-1-5-21-3455670051-300026812-3451469050-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Tobias\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-07-09] (Unity Technologies ApS)

Chrome: 
=======
CHR HomePage: Default -> hxxp://taplika.com/?f=1&a=tlk_ir_15_06&cd=2XzuyEtN2Y1L1Qzu0EyC0BzzyEzz0AtA0FtCyEtCtDyCtCyEtN0D0Tzu0StCtCtBzztN1L2XzutAtFyBtFtBtFtDtN1L1CzutCyEtBzytDyD1V1BtAtN1L1G1B1V1N2Y1L1Qzu2SyC0BzzyB0DtB0F0BtGtAyE0AtCtGyDyDyDyCtG0F0BtBtAtGtDyC0FtCtDyDzzzy0C0B0B0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAyD0BtAtByD0EtCtG0A0FtBtCtGyEtDyEtCtG0B0F0A0FtGyDyC0CyEtByDyC0C0C0DyC0A2Q&cr=362526228&ir=
CHR StartupUrls: Default -> "hxxp://taplika.com/?f=7&a=tlk_ir_15_06&cd=2XzuyEtN2Y1L1Qzu0EyC0BzzyEzz0AtA0FtCyEtCtDyCtCyEtN0D0Tzu0StCtCtBzztN1L2XzutAtFyBtFtBtFtDtN1L1CzutCyEtBzytDyD1V1BtAtN1L1G1B1V1N2Y1L1Qzu2SyC0BzzyB0DtB0F0BtGtAyE0AtCtGyDyDyDyCtG0F0BtBtAtGtDyC0FtCtDyDzzzy0C0B0B0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAyD0BtAtByD0EtCtG0A0FtBtCtGyEtDyEtCtG0B0F0A0FtGyDyC0CyEtByDyC0C0C0DyC0A2Q&cr=362526228&ir=","hxxp://myhome.vi-view.com/?type=hp&ts=1422909745&from=cor&uid=M4-CT256M4SSD2_00000000130109243A4E"
CHR Plugin: (Shockwave Flash) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\PepperFlash\11.5.31.138\pepflashplayer.dll => Keine Datei
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll => Keine Datei
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\ppGoogleNaClPluginChrome.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\pdf.dll => Keine Datei
CHR Plugin: (Free Studio) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.0_0\np_dvs_plugin.dll => Keine Datei
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll => Keine Datei
CHR Plugin: (NPCIG.dll) - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll => Keine Datei
CHR Plugin: (Java(TM) Platform SE 7 U7) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll => Keine Datei
CHR Plugin: (Java Deployment Toolkit 7.0.70.10) - C:\Windows\SysWOW64\npDeployJava1.dll => Keine Datei
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Protect Disc License Acquisition Plugin) - C:\Users\Tobias\AppData\Roaming\ProtectDisc\License Helper v2\NPPDLicenseHelper.dll ( )
CHR Plugin: (Unity Player) - C:\Users\Tobias\Desktop\ENYGUIDE\FirefoxPortable\Data\plugins\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll => Keine Datei
CHR Profile: C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-05]
CHR Extension: (Google Cast) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2016-03-25]
CHR Extension: (Videostream for Google Chromecast™) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnciopoikihiagdjbjpnocolokfelagl [2016-05-19]
CHR Extension: (Google-Suche) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Tampermonkey) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2016-04-14]
CHR Extension: (Logitech Smooth Scrolling) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2016-03-28]
CHR Extension: (Avast Online Security) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-04-06]
CHR Extension: (AntiGameOrigin v6) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfaofnlkooiapdmkbppmpgmjmhkolaeb [2016-05-10]
CHR Extension: (IITC: Ingress intel map total conversion) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmhpdgdggldlaplddgghhiejhmoeehii [2015-04-02]
CHR Extension: (AntiGameOrigin) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldbahlcmhmlpomdepooifmhnalokdhgm [2014-08-30]
CHR Extension: (AntiGameOrigin) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\lofjbjdoaekhachdchonbbdlpklicdbn [2012-10-10]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-03]
CHR Extension: (Google Mail) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR HKLM-x32\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - <kein Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [heoldelcflnigdllmlopiefhkkobendj] - <kein Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - <kein Path/update_url>

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S4 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-04-30] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]
R2 Backupper Service; C:\Program Files (x86)\AOMEI Backupper\ABService.exe [29912 2015-09-15] (AOMEI Tech Co., Ltd.)
S4 hasplms; C:\Windows\system32\hasplms.exe [4180576 2010-09-27] (SafeNet Inc.)
S4 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2016-01-29] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [374344 2016-01-29] (Microsoft Corporation)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1570520 2016-02-02] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [837848 2016-02-02] (Secunia)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7032080 2016-05-12] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S4 Windows Internet Name Service;  [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [30648 2015-02-26] () [Datei ist nicht signiert]
R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11944 2012-12-04] (Advanced Micro Devices Inc.)
R2 ammntdrv; C:\Windows\system32\ammntdrv.sys [151480 2015-02-26] () [Datei ist nicht signiert]
R2 amwrtdrv; C:\Windows\system32\amwrtdrv.sys [17848 2015-02-26] () [Datei ist nicht signiert]
S3 AODDriver; C:\Program Files (x86)\GIGABYTE\ET6\amd64\AODDriver.sys [52280 2010-03-12] (Advanced Micro Devices)
R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
S2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
S2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
S3 AVerAF35; C:\Windows\System32\Drivers\AVerAF35.sys [804992 2013-06-05] (AVerMedia TECHNOLOGIES, Inc.) [Datei ist nicht signiert]
S3 dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys [20552 2010-07-30] (Devguru Co., Ltd)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 GeneStor; C:\Windows\System32\DRIVERS\GeneStor.sys [60928 2012-07-06] (GenesysLogic)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-09-20] ()
S3 HtcVCom32; C:\Windows\System32\DRIVERS\HtcVComV64.sys [121800 2010-03-09] (QUALCOMM Incorporated)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-07-17] (REALiX(tm))
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (EZB Systems, Inc.)
R3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [49304 2014-12-15] (Visicom Media Inc.)
R3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35992 2014-12-15] (Visicom Media Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [289120 2015-11-13] (Microsoft Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133816 2015-11-13] (Microsoft Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2016-02-02] (Secunia)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19936 2011-09-02] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [13280 2011-09-02] ()
S3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [3810520 2015-10-08] (Realtek Semiconductor Corporation                           )
R3 rusb3hub; C:\Windows\System32\DRIVERS\rusb3hub.sys [114568 2012-08-27] (Renesas Electronics Corporation)
R3 rusb3xhc; C:\Windows\System32\DRIVERS\rusb3xhc.sys [230280 2012-08-27] (Renesas Electronics Corporation)
R3 Serenum; C:\Windows\System32\DRIVERS\nuvserenum.sys [23552 2014-01-12] (Windows (R) Win 7 DDK provider)
R3 Serial; C:\Windows\System32\DRIVERS\nuvserial.sys [86016 2014-01-12] (Nuvoton Technology Corp.)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [204568 2013-10-28] (DEVGURU Co., LTD.(www.devguru.co.kr))
R1 vmm; C:\Windows\system32\Treiber\vmm.sys [294248 2012-09-02] (Microsoft Corporation)
U3 DfSdkS; kein ImagePath
S4 sptd; System32\Drivers\sptd.sys [X]
U2 TMAgent; kein ImagePath
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-05-22 15:12 - 2016-05-22 15:13 - 00066114 _____ C:\Users\Tobias\Desktop\FRST.txt
2016-05-22 15:12 - 2016-05-22 15:12 - 00000000 ____D C:\FRST
2016-05-22 15:11 - 2016-05-22 15:11 - 02383360 _____ (Farbar) C:\Users\Tobias\Desktop\FRST64.exe
2016-05-22 13:09 - 2016-05-22 13:09 - 00000000 ____D C:\Users\Tobias\Documents\steuer
2016-05-22 13:01 - 2016-05-22 13:01 - 00002065 _____ C:\Users\Public\Desktop\WISO steuer Sparbuch 2016.lnk
2016-05-22 13:00 - 2016-05-22 13:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WISO steuer Sparbuch 2016
2016-05-17 01:56 - 2016-05-18 08:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2016-05-13 20:34 - 2016-05-13 20:34 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-05-11 23:10 - 2016-04-23 19:08 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-05-11 23:10 - 2016-04-23 18:24 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-05-11 23:10 - 2016-04-23 07:25 - 25816064 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-05-11 23:10 - 2016-04-23 07:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-05-11 23:10 - 2016-04-23 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-05-11 23:10 - 2016-04-23 07:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-05-11 23:10 - 2016-04-23 07:00 - 02893312 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-05-11 23:10 - 2016-04-23 07:00 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-05-11 23:10 - 2016-04-23 07:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-05-11 23:10 - 2016-04-23 07:00 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-05-11 23:10 - 2016-04-23 07:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-05-11 23:10 - 2016-04-23 06:52 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-05-11 23:10 - 2016-04-23 06:51 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-05-11 23:10 - 2016-04-23 06:48 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-05-11 23:10 - 2016-04-23 06:47 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-05-11 23:10 - 2016-04-23 06:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-05-11 23:10 - 2016-04-23 06:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-05-11 23:10 - 2016-04-23 06:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-05-11 23:10 - 2016-04-23 06:46 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-05-11 23:10 - 2016-04-23 06:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-05-11 23:10 - 2016-04-23 06:36 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-05-11 23:10 - 2016-04-23 06:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-05-11 23:10 - 2016-04-23 06:27 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-05-11 23:10 - 2016-04-23 06:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-05-11 23:10 - 2016-04-23 06:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-05-11 23:10 - 2016-04-23 06:21 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-05-11 23:10 - 2016-04-23 06:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-05-11 23:10 - 2016-04-23 06:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-05-11 23:10 - 2016-04-23 06:11 - 20350464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-05-11 23:10 - 2016-04-23 06:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-05-11 23:10 - 2016-04-23 06:08 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-05-11 23:10 - 2016-04-23 06:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-05-11 23:10 - 2016-04-23 06:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-05-11 23:10 - 2016-04-23 06:07 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-05-11 23:10 - 2016-04-23 06:07 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-05-11 23:10 - 2016-04-23 06:07 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-05-11 23:10 - 2016-04-23 06:06 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-05-11 23:10 - 2016-04-23 06:06 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-05-11 23:10 - 2016-04-23 06:05 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-05-11 23:10 - 2016-04-23 06:04 - 02285568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-05-11 23:10 - 2016-04-23 06:02 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-05-11 23:10 - 2016-04-23 06:01 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-05-11 23:10 - 2016-04-23 06:00 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-05-11 23:10 - 2016-04-23 05:59 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-05-11 23:10 - 2016-04-23 05:58 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-05-11 23:10 - 2016-04-23 05:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-05-11 23:10 - 2016-04-23 05:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-05-11 23:10 - 2016-04-23 05:51 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-05-11 23:10 - 2016-04-23 05:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-05-11 23:10 - 2016-04-23 05:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-05-11 23:10 - 2016-04-23 05:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-05-11 23:10 - 2016-04-23 05:43 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-05-11 23:10 - 2016-04-23 05:41 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-05-11 23:10 - 2016-04-23 05:40 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-05-11 23:10 - 2016-04-23 05:39 - 01547776 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-05-11 23:10 - 2016-04-23 05:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-05-11 23:10 - 2016-04-23 05:36 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-05-11 23:10 - 2016-04-23 05:33 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-05-11 23:10 - 2016-04-23 05:31 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-05-11 23:10 - 2016-04-23 05:30 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-05-11 23:10 - 2016-04-23 05:30 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-05-11 23:10 - 2016-04-23 05:28 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-05-11 23:10 - 2016-04-23 05:26 - 13811200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-05-11 23:10 - 2016-04-23 05:12 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-05-11 23:10 - 2016-04-23 05:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-05-11 23:10 - 2016-04-23 05:07 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-05-11 23:10 - 2016-04-14 15:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-05-11 23:10 - 2016-04-14 15:21 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-05-11 23:10 - 2016-04-09 09:01 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-05-11 23:10 - 2016-04-09 09:01 - 00264936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-05-11 23:10 - 2016-04-09 08:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-05-11 23:10 - 2016-04-09 08:57 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-05-11 23:10 - 2016-04-09 08:57 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-05-11 23:10 - 2016-04-09 08:54 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-05-11 23:10 - 2016-04-09 08:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-05-11 23:10 - 2016-04-09 07:49 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-05-11 23:10 - 2016-04-06 17:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-05-11 23:10 - 2016-03-09 20:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-05-11 23:10 - 2016-03-09 20:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-05-11 23:08 - 2016-04-09 09:02 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-05-11 23:08 - 2016-04-09 09:01 - 05546216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-05-11 23:08 - 2016-04-09 09:01 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-05-11 23:08 - 2016-04-09 09:01 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-05-11 23:08 - 2016-04-09 09:01 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-05-11 23:08 - 2016-04-09 08:59 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-05-11 23:08 - 2016-04-09 08:59 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-05-11 23:08 - 2016-04-09 08:59 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 07:52 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-05-11 23:08 - 2016-04-09 07:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-05-11 23:08 - 2016-04-09 07:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-05-11 23:08 - 2016-04-09 07:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-05-11 23:08 - 2016-04-09 07:48 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-05-11 23:08 - 2016-04-09 07:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-05-11 23:08 - 2016-04-09 07:44 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-05-11 23:08 - 2016-04-09 07:44 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-05-11 23:08 - 2016-04-09 07:44 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-05-11 23:08 - 2016-04-09 07:43 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-05-11 23:08 - 2016-04-09 07:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-05-11 23:08 - 2016-04-09 07:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-05-11 23:08 - 2016-04-09 07:38 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-05-11 23:08 - 2016-04-09 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-05-11 23:08 - 2016-04-09 07:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-05-11 23:08 - 2016-04-09 07:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-05-11 23:08 - 2016-04-09 07:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-05-11 23:08 - 2016-04-09 07:37 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 07:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 07:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 07:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 06:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-05-11 23:08 - 2016-04-09 05:52 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-05-10 19:21 - 2016-05-10 19:21 - 00479944 _____ C:\Users\Tobias\Downloads\Datasheet LINEARdrive 200W 8A DC v2.2.pdf
2016-05-10 18:24 - 2016-05-10 18:24 - 00039404 _____ C:\Users\Tobias\Downloads\SLV_Datenblatt_229740_2016-05-10_1824.pdf
2016-05-10 18:18 - 2016-05-10 18:19 - 00037905 _____ C:\Users\Tobias\Downloads\SLV_Datenblatt_227418_2016-05-10_1818.pdf
2016-05-06 03:08 - 2016-05-06 03:08 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-05-06 03:07 - 2016-05-06 03:05 - 00110144 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-64.dll
2016-05-06 03:05 - 2016-05-06 03:05 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2016-05-06 03:05 - 2016-05-06 03:05 - 00000000 ____D C:\Program Files\Java
2016-05-05 20:28 - 2016-05-05 20:28 - 01805841 _____ C:\Users\Tobias\Downloads\Order_Overview_881402.pdf
2016-05-05 20:28 - 2016-05-05 20:28 - 00337685 _____ C:\Users\Tobias\Downloads\41238989_Data_Sheet.pdf
2016-05-05 20:20 - 2016-05-05 20:22 - 39652274 _____ C:\Users\Tobias\Downloads\16DE0003_KAT_SP_GST_2016-17_Web.pdf
2016-05-05 20:15 - 2016-05-05 20:15 - 00110389 _____ C:\Users\Tobias\Downloads\datasheet (1).pdf
2016-05-05 20:15 - 2016-05-05 20:15 - 00000408 _____ C:\Users\Tobias\Downloads\ausschreibungstexte (1).txt
2016-05-02 19:49 - 2016-05-02 19:49 - 04771484 _____ C:\Users\Tobias\Downloads\Ford Transit Custom - Broschuere (3).pdf
2016-05-02 00:33 - 2016-05-02 00:33 - 00043107 _____ C:\Users\Tobias\Downloads\warrantyPdf_132528-4023668.pdf
2016-05-01 23:36 - 2016-05-01 23:36 - 00273607 _____ C:\Users\Tobias\Downloads\hilfeplanverfahren.pdf
2016-04-30 18:37 - 2016-04-30 18:37 - 04771484 _____ C:\Users\Tobias\Downloads\Ford Transit Custom - Broschuere (2).pdf
2016-04-30 18:34 - 2016-04-30 18:34 - 04771484 _____ C:\Users\Tobias\Downloads\Ford Transit Custom - Broschuere (1).pdf
2016-04-30 18:28 - 2016-04-30 18:28 - 01258118 _____ C:\Users\Tobias\Downloads\ford-transit-connect-preisliste.pdf
2016-04-30 18:26 - 2016-04-30 18:26 - 00088351 _____ C:\Users\Tobias\Downloads\Transit Center.pdf
2016-04-30 18:22 - 2016-04-30 18:22 - 03320676 _____ C:\Users\Tobias\Downloads\Ford Transit Connect - Broschuere (2).pdf
2016-04-30 18:22 - 2016-04-30 18:22 - 03320676 _____ C:\Users\Tobias\Downloads\Ford Transit Connect - Broschuere (1).pdf
2016-04-30 18:18 - 2016-04-30 18:18 - 03320676 _____ C:\Users\Tobias\Downloads\Ford Transit Connect - Broschuere.pdf
2016-04-30 14:41 - 2016-04-30 14:42 - 00240443 _____ C:\Users\Tobias\Downloads\Ford_Transit_Custom_Kastenwagen-Preisliste (1).pdf
2016-04-30 00:37 - 2016-04-30 00:37 - 14961430 _____ C:\Users\Tobias\Downloads\wireless-charging-230v-l-boxx-bay--manual-221269.pdf
2016-04-29 17:24 - 2016-04-29 17:24 - 00864367 _____ C:\Users\Tobias\Downloads\TAB NS Nord (5).pdf
2016-04-28 20:51 - 2016-04-28 20:51 - 04771484 _____ C:\Users\Tobias\Downloads\Ford Transit Custom - Broschuere.pdf
2016-04-28 20:51 - 2016-04-28 20:51 - 00240443 _____ C:\Users\Tobias\Downloads\Ford_Transit_Custom_Kastenwagen-Preisliste.pdf
2016-04-28 20:39 - 2016-04-28 20:39 - 01048087 _____ C:\Users\Tobias\Downloads\Ford Nutzfahrzeuge - Broschuere.pdf
2016-04-26 20:57 - 2016-04-26 20:57 - 00009216 _____ C:\Users\Tobias\Documents\HKV VFB.xls
2016-04-25 17:45 - 2016-04-25 17:46 - 07634905 _____ C:\Users\Tobias\Downloads\de_4093krmtsd.vd4
2016-04-24 16:50 - 2016-04-24 16:50 - 00136048 _____ C:\Users\Tobias\Downloads\1461509377930.pdf
2016-04-24 10:49 - 2016-04-24 10:49 - 19621412 _____ C:\Users\Tobias\Downloads\gws-18-125-v-li--manual-176679 (2).pdf
2016-04-24 00:46 - 2016-04-24 00:46 - 06620135 _____ C:\Users\Tobias\Downloads\gdr-10-8-li--manual-195921.pdf
2016-04-24 00:33 - 2016-04-25 00:25 - 00015625 _____ C:\Users\Tobias\Documents\Bestellung VFB.ods
2016-04-22 21:02 - 2016-04-22 21:02 - 01576484 _____ C:\Users\Tobias\Downloads\Kupferdatentechnik (Auszug 153-173).pdf
2016-04-22 20:36 - 2016-04-22 20:36 - 00653276 _____ C:\Users\Tobias\Documents\HFB-A2D-5-1105-GR-EG-E-160229-W3F-VORABZUG.pdf
2016-04-22 20:36 - 2016-04-22 20:36 - 00633229 _____ C:\Users\Tobias\Documents\HFB-A2D-5-1115-GR-OG-G-160323-W3F.pdf
2016-04-22 20:36 - 2016-04-22 20:36 - 00297824 _____ C:\Users\Tobias\Documents\HFB-A2D-5-1125-GR-DG-F-160324-W3F.pdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-05-22 15:03 - 2009-07-14 06:45 - 00023248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-05-22 15:03 - 2009-07-14 06:45 - 00023248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-05-22 14:49 - 2016-03-12 02:03 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-05-22 14:19 - 2015-06-19 16:09 - 00001228 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3455670051-300026812-3451469050-1000UA.job
2016-05-22 13:38 - 2015-02-28 11:27 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\ALFBanCo6
2016-05-22 13:38 - 2015-02-28 11:27 - 00000000 ____D C:\ProgramData\AlfBanCo6
2016-05-22 13:07 - 2011-01-16 23:01 - 00001256 _____ C:\Windows\wiso.ini
2016-05-22 13:01 - 2011-01-16 22:58 - 00000000 ____D C:\Users\Tobias\AppData\Local\Buhl
2016-05-22 12:57 - 2011-01-16 22:56 - 00000000 ____D C:\Program Files (x86)\WISO
2016-05-22 12:57 - 2010-12-30 20:38 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-05-22 12:42 - 2016-01-02 23:35 - 00000935 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk
2016-05-22 12:42 - 2016-01-02 23:35 - 00000923 _____ C:\Users\Public\Desktop\TeamViewer 11.lnk
2016-05-22 12:42 - 2014-09-01 22:40 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2016-05-21 22:19 - 2015-06-19 16:09 - 00001176 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3455670051-300026812-3451469050-1000Core.job
2016-05-21 16:54 - 2010-12-31 02:20 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-20 20:14 - 2011-06-19 19:50 - 00000000 ___RD C:\Users\Tobias\Dropbox
2016-05-20 20:10 - 2010-12-30 21:33 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\foobar2000
2016-05-18 08:01 - 2016-03-12 10:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-05-15 21:54 - 2016-03-23 01:10 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-05-15 21:54 - 2016-03-23 01:10 - 00002471 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-05-15 10:59 - 2009-07-14 19:58 - 00670822 _____ C:\Windows\system32\perfh007.dat
2016-05-15 10:59 - 2009-07-14 19:58 - 00138946 _____ C:\Windows\system32\perfc007.dat
2016-05-15 10:59 - 2009-07-14 07:13 - 01537930 _____ C:\Windows\system32\PerfStringBackup.INI
2016-05-15 10:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-05-13 20:34 - 2011-06-19 19:48 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\Dropbox
2016-05-13 20:28 - 2016-03-12 02:03 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-05-13 20:28 - 2016-03-12 02:03 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-05-13 20:28 - 2016-03-12 02:03 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-05-13 03:00 - 2014-12-22 14:02 - 00000000 ____D C:\Windows\system32\appraiser
2016-05-13 00:24 - 2012-10-10 17:24 - 00002149 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-12 12:39 - 2012-09-30 20:31 - 00000000 ____D C:\Windows\rescache
2016-05-12 12:09 - 2016-02-03 23:45 - 00000000 ____D C:\Users\Tobias\.oracle_jre_usage
2016-05-12 03:22 - 2012-07-29 17:12 - 00408368 _____ C:\Windows\system32\FNTCACHE.DAT
2016-05-12 03:22 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-05-12 03:21 - 2009-07-14 20:18 - 00000000 ____D C:\Program Files\Windows Journal
2016-05-11 16:49 - 2010-12-31 02:20 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-11 16:49 - 2010-12-31 02:20 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-11 16:49 - 2010-12-31 02:20 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-07 03:00 - 2016-03-26 02:22 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-05-07 03:00 - 2016-03-26 02:22 - 00000000 ___SD C:\Windows\system32\GWX
2016-05-06 21:30 - 2011-01-04 19:51 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\ALFBanCo4
2016-05-06 21:29 - 2015-02-28 11:27 - 00000000 ____D C:\Program Files (x86)\ALFBanCo6
2016-05-06 03:09 - 2012-08-07 21:28 - 00000954 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-05-06 03:08 - 2016-03-12 01:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-05-06 03:08 - 2013-08-14 21:09 - 00000000 ____D C:\Program Files (x86)\Java
2016-05-05 10:32 - 2010-12-31 21:31 - 00061440 _____ C:\Users\Tobias\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-05-01 09:36 - 2010-12-31 14:45 - 00007626 _____ C:\Users\Tobias\AppData\Local\Resmon.ResmonCfg
2016-04-26 21:10 - 2012-03-29 21:37 - 00901632 ___SH C:\Users\Tobias\Documents\Thumbs.db
2016-04-22 20:36 - 2016-03-15 18:08 - 00789767 _____ C:\Users\Tobias\Documents\HFB-A2D-5-1095-GR-UG-F-160315-W3F.pdf
2016-04-22 20:36 - 2016-03-15 18:08 - 00590694 _____ C:\Users\Tobias\Documents\HFB-A2D-5-1085-GR-U2-C-160315-W3F.pdf
2016-04-22 09:57 - 2011-01-16 16:15 - 00453288 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2012-10-10 17:24 - 2012-10-10 17:27 - 4096000 _____ () C:\Program Files (x86)\GUTF882.tmp
2012-03-25 01:45 - 2012-04-09 12:23 - 0000630 _____ () C:\Users\Tobias\AppData\Roaming\AutoGK.ini
2015-02-02 23:53 - 2015-02-02 23:53 - 0000044 _____ () C:\Users\Tobias\AppData\Roaming\WB.CFG
2012-09-30 18:59 - 2012-09-30 19:08 - 0157009 _____ () C:\Users\Tobias\AppData\Local\ars.cache
2012-09-30 18:59 - 2012-09-30 19:08 - 0247315 _____ () C:\Users\Tobias\AppData\Local\census.cache
2011-01-18 21:01 - 2011-04-11 20:38 - 0001164 _____ () C:\Users\Tobias\AppData\Local\crc32list11.txt
2010-12-31 21:31 - 2016-05-05 10:32 - 0061440 _____ () C:\Users\Tobias\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-09-30 18:50 - 2012-09-30 18:50 - 0000036 _____ () C:\Users\Tobias\AppData\Local\housecall.guid.cache
2012-07-21 21:45 - 2012-07-21 21:45 - 0004463 _____ () C:\Users\Tobias\AppData\Local\MatClass.Settings.xml
2010-12-31 14:45 - 2016-05-01 09:36 - 0007626 _____ () C:\Users\Tobias\AppData\Local\Resmon.ResmonCfg
2014-07-10 20:19 - 2014-07-10 20:19 - 0000011 _____ () C:\ProgramData\.tv7
2015-02-27 12:43 - 2015-02-27 12:43 - 0256414 _____ () C:\ProgramData\1425033748.bdinstall.bin
2012-08-28 17:20 - 2012-08-28 17:20 - 0019280 _____ () C:\ProgramData\CAEManager.lcs
2012-04-20 21:01 - 2012-04-20 21:01 - 0000137 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2012-08-28 17:20 - 2012-10-02 23:40 - 0001764 _____ () C:\ProgramData\SEE_1000.ini
2012-08-28 17:20 - 2012-10-02 23:40 - 0001764 _____ () C:\ProgramData\SEE_1001.ini
2012-08-28 17:20 - 2012-10-02 23:40 - 0001764 _____ () C:\ProgramData\SEE_1010.ini
2012-08-28 17:20 - 2012-10-02 23:40 - 0001764 _____ () C:\ProgramData\SEE_1100.ini
2012-08-28 17:20 - 2012-10-02 23:40 - 0001764 _____ () C:\ProgramData\SEE_5001.ini
2012-08-28 17:20 - 2012-10-02 23:40 - 0001764 _____ () C:\ProgramData\SEE_5002.ini
2012-08-28 17:20 - 2012-10-02 23:40 - 0001764 _____ () C:\ProgramData\SEE_5004.ini
2012-08-28 17:20 - 2012-10-02 23:40 - 0001764 _____ () C:\ProgramData\SEE_5005.ini
2012-08-28 17:20 - 2012-10-02 23:40 - 0001764 _____ () C:\ProgramData\SEE_5006.ini
2012-08-28 17:20 - 2012-10-02 23:40 - 0001764 _____ () C:\ProgramData\SEE_5008.ini

Einige Dateien in TEMP:
====================
C:\Users\Tobias\AppData\Local\Temp\13-9-legacy_vista_win7_64_dd_ccc_whql.exe
C:\Users\Tobias\AppData\Local\Temp\genteert.dll
C:\Users\Tobias\AppData\Local\Temp\gkey.exe
C:\Users\Tobias\AppData\Local\Temp\pkeyui.exe
C:\Users\Tobias\AppData\Local\Temp\SpotifyUninstall.exe
C:\Users\Tobias\AppData\Local\Temp\sqlite3.dll
C:\Users\Tobias\AppData\Local\Temp\wabk.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-05-18 00:19

==================== Ende von FRST.txt ============================

Mit dem Posten der Addition.txt überschreite ich leider das zulässige Zeichenlimit

burningice · 25.05.2016, 10:52

Mein Name ist Rafael und ich werde dir bei der Bereinigung helfen.

Damit ich dir optimal helfen kann, halte dich bitte an folgende Regeln:

Bitte lies meine Posts komplett durch bevor du sie abarbeitest
Wenn ein Problem auftauchen sollte oder dir etwas unklar ist, unterbreche deine Arbeit und beschreibe es so genau wie möglich.
Bitte kein Crossposting
Installiere oder Deinstalliere keine Software ohne Aufforderung
Bitte verwende nur die Tools, welche hier im Thread erwähnt werden und führe sie nur gemäß Anweisung aus
Bitte antworte innerhalb von 24h um eine sinnvolle Bereinigung zu ermöglichen
Poste die Logs immer in CODE-Tags (#-Button), zur Not die Logs einfach aufteilen
Wichtig: Nur weil dein Problem mit einem Schritt plötzlich behoben ist, bedeutet das nicht, dass dein PC auch sauber ist. Mache solange weiter, bis ich dir sage, dass dein PC "clean" ist
Wenn ich dir nicht binnen 36h antworte, sende mir bitte eine persönliche Nachricht!

Los geht's

Bitte füge die Addition jetzt als Anhang an

Ecronika · 25.05.2016, 18:07

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:22-05-2016
durchgeführt von Tobias (2016-05-22 15:13:36)
Gestartet von C:\Users\Tobias\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2010-12-30 18:23:36)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3455670051-300026812-3451469050-500 - Administrator - Disabled)
Gast (S-1-5-21-3455670051-300026812-3451469050-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-3455670051-300026812-3451469050-1011 - Limited - Enabled)
Kelly (S-1-5-21-3455670051-300026812-3451469050-1069 - Administrator - Enabled)
Lilly (S-1-5-21-3455670051-300026812-3451469050-1008 - Administrator - Enabled) => C:\Users\Lilly
Tobias (S-1-5-21-3455670051-300026812-3451469050-1000 - Administrator - Enabled) => C:\Users\Tobias

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Microsoft Security Essentials (Enabled - Up to date) {768124D7-F5F7-6D2F-DDC2-94DFA4017C95}
AS: Microsoft Security Essentials (Enabled - Up to date) {CDE0C533-D3CD-62A1-E772-AFADDF863628}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\uTorrent) (Version: 3.4.3.40760 - BitTorrent Inc.)
7-Zip 15.14 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1514-000001000000}) (Version: 15.14.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.016.20039 - Adobe Systems Incorporated)
Adobe Flash Player 21 ActiveX (HKLM-x32\...\{FA944726-00F8-43B5-BB97-33E6FF409C22}) (Version: 21.0.0.242 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\{C4E4BF86-4E27-4B8B-8BF9-A5BF1C7573A4}) (Version: 21.0.0.242 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.2 (HKLM-x32\...\{5ECE64C9-F5B3-4914-B1F2-23D46548B7E3}) (Version: 12.2.3.183 - Adobe Systems, Inc)
ALF-BanCo 6 (HKLM-x32\...\Alf-BanCo6_is1) (Version: 6.2.1 - ALF AG)
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.5.0 - Sereby Corporation)
AMD Catalyst Install Manager (HKLM\...\{37FCE154-7F59-74F0-3A35-BF503CEB230B}) (Version: 8.0.877.0 - Advanced Micro Devices, Inc.)
AOMEI Backupper Standard (HKLM-x32\...\{A83692F5-3E9B-4E95-9E7E-B5DF5536C09F}_is1) (Version:  - AOMEI Technology Co., Ltd.)
ArcaniA - Gothic 4 (HKLM-x32\...\{EE74D039-45D7-44E9-BF95-B9CFB015964F}_is1) (Version:  - JoWooD Entertainment AG)
AviSynth 2.5 (HKLM-x32\...\AviSynth) (Version:  - )
AVS Update Manager 1.0 (HKLM-x32\...\AVS Update Manager_is1) (Version:  - Online Media Technologies Ltd.)
Biet-O-Matic v2.14.12 (HKLM-x32\...\Biet-O-Matic v2.14.12) (Version: 2.14.12 - BOM Development Team)
Biet-O-Matic v2.14.8 (HKLM-x32\...\Biet-O-Matic v2.14.8) (Version: 2.14.8 - BOM Development Team)
BPS650 (HKLM-x32\...\{4F3C4874-D5D9-41A0-B8DE-FD7CA4690CE3}) (Version: 2.11.1 - Siedle)
CANON iMAGE GATEWAY MyCamera Download Plugin (HKLM-x32\...\MyCamera Download Plugin) (Version: 3.1.1.2 - Canon Inc.)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM-x32\...\CANON iMAGE GATEWAY Task) (Version: 1.9.0.9 - Canon Inc.)
Canon MOV Decoder (HKLM-x32\...\Canon MOV Decoder) (Version: 1.8.0.7 - Canon Inc.)
Canon MOV Encoder (HKLM-x32\...\Canon MOV Encoder) (Version: 1.6.0.1 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM-x32\...\MovieEditTask) (Version: 3.7.0.4 - Canon Inc.)
Canon Utilities Digital Photo Professional 3.10 (HKLM-x32\...\DPP) (Version: 3.10.2.0 - Canon Inc.)
Canon Utilities EOS Sample Music (HKLM-x32\...\EOS Sample Music) (Version: 1.0.0.204 - Canon Inc.)
Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.10.2.0 - Canon Inc.)
Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX (HKLM-x32\...\EOS Video Snapshot Task) (Version: 1.0.0.10 - Canon Inc.)
Canon Utilities Movie Uploader for YouTube (HKLM-x32\...\MovieUploaderForYouTube) (Version: 1.2.0.7 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.9.0.0 - Canon Inc.)
Canon Utilities ZoomBrowser EX (HKLM-x32\...\ZoomBrowser EX) (Version: 6.7.0.24 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (HKLM-x32\...\ZoomBrowser EX Memory Card Utility) (Version: 1.5.0.9 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.14 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.3.4643 - CDBurnerXP)
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden
CPUID CPU-Z 1.69 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
CryptoPrevent (HKLM-x32\...\{5C5B24E7-4694-4049-A222-CCE7D3FAC63F}_is1) (Version:  - Foolish IT LLC)
Curse Client (HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\090215de958f1060) (Version: 4.0.1.112 - Curse)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dead Space™ 2 (HKLM-x32\...\{96D06FDD-6AF4-4309-BC1B-1C9588B0575E}) (Version: 1.0.941.0 - Electronic Arts)
Debugging Tools for Windows (x86) (HKLM-x32\...\{300A2961-B2B5-4889-9CB9-5C2A570D08AD}) (Version: 6.11.1.404 - Microsoft Corporation)
Defraggler (HKLM\...\Defraggler) (Version: 2.20 - Piriform)
Die*Sims™*3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.0.631 - Electronic Arts)
DirectX for Managed Code Update (Summer 2004) (x32 Version: 9.02.2904 - Microsoft) Hidden
DriveImage XML (Private Edition) (HKLM-x32\...\{F7E1CA14-B39D-452A-960B-39423DDDD933}) (Version: 2.44.000 - Runtime Software)
Driver Fusion (HKLM-x32\...\Driver Fusion) (Version: 3.0 - Treexy)
Dropbox (HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\Dropbox) (Version: 3.20.1 - Dropbox, Inc.)
Dropbox (HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\Dropbox) (Version: 2.0.22 - Dropbox, Inc.)
DWG TrueView 2015 - English (Version: 20.0.51.0 - Autodesk) Hidden
Easy Tune 6 B11.0722.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE)
Easy Tune 6 B11.0722.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
ElcomPDF (HKLM\...\ElcomPDF) (Version:  - )
Elektronischer Magnetplaner (HKLM-x32\...\magnet) (Version:  - )
EPSON SX130 Series Printer Uninstall (HKLM\...\EPSON SX130 Series) (Version:  - SEIKO EPSON Corporation)
EPSON-Drucker-Software (HKLM\...\EPSON Printer and Utilities) (Version:  - SEIKO EPSON Corporation)
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
Exact Audio Copy 1.0beta3 (HKLM-x32\...\Exact Audio Copy) (Version: 1.0beta3 - Andre Wiethoff)
foobar2000 v1.1.1 (HKLM-x32\...\foobar2000) (Version: 1.1.1 - Peter Pawlowski)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 50.0.2661.102 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.21.123 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{D1D4D7EA-62B8-4665-9FF7-02A91B925CC9}) (Version: 1.0.18.74 - Google)
Hager - Tehalit 5.1 (HKLM-x32\...\Elcom 5.1) (Version:  - )
Hager (HKLM-x32\...\ZPlan21) (Version:  - )
Hager prerequisites (HKLM-x32\...\{98C64AD3-6A1D-4737-9ED8-06A73741550C}) (Version: 1.00.0000 - hager)
HandBrake 0.9.8 (HKLM-x32\...\HandBrake) (Version: 0.9.8 - )
herdProtect Anti-Malware Scanner (HKLM-x32\...\herdProtectScan) (Version: 1.0 - Reason Company Software Inc.)
ICQ 8.2 (build 7134) (HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\ICQ) (Version: 8.2.7134.0 - ICQ)
ICQ 8.2 (build 7134) (HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\ICQ) (Version: 8.2.7134.0 - ICQ)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.40 - Irfan Skiljan)
Java 8 Update 91 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418091F0}) (Version: 8.0.910.14 - Oracle Corporation)
Java 8 Update 91 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.14 - Oracle Corporation)
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Kabel++ (HKLM-x32\...\Kabel++_is1) (Version:  - Sandker Elektrosoftware)
KFE-Viewer und KFE-Konverter Version 15/11/10a (HKLM-x32\...\KFE-Viewer und KFE-Konverter_is1) (Version:  - VOLIE)
K-Lite Codec Pack (64-bit) v4.1.0 (HKLM\...\KLiteCodecPack64_is1) (Version: 4.1.0 - )
K-Lite Codec Pack 6.9.0 (Standard) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 6.9.0 - )
Lenovo_Wireless_Driver (HKLM-x32\...\{28ABE740-47F3-441B-9437-852F6A64EFF8}) (Version: 1.02.01 - Lenovo)
LibreOffice 5.0.5.2 (HKLM-x32\...\{43D862C3-739D-4FF6-91C0-25612368CC81}) (Version: 5.0.5.2 - The Document Foundation)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
ManyCam 4.1.0 (HKLM-x32\...\ManyCam) (Version: 4.1.0 - Visicom Media Inc.)
MechWarrior Online (HKLM-x32\...\{73bcb521-8936-42d7-ad00-ec2bb399e26c}) (Version: 1.4.3.0 - Piranha Games Inc.)
MechWarrior Online (x32 Version: 1.4.3.0 - Piranha Games Inc.) Hidden
MeteoSynModul (HKLM-x32\...\MeteoSynModul_is1) (Version: 1.0.5.3 - Dr. Valentin EnergieSoftware GmbH)
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office 2007 Primary Interop Assemblies (HKLM-x32\...\{50120000-1105-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Access database engine 2007 (German) (HKLM-x32\...\{90120000-00D1-0407-0000-0000000FF1CE}) (Version: 12.0.6425.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.9.218.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SkyDrive (HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Virtual PC 2007 SP1 (HKLM\...\{AD483998-2E9A-4405-83FF-6E503AF49CBB}) (Version: 6.0.192.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version:  - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.5.166.0 - Microsoft Corporation)
mIRC (HKLM-x32\...\mIRC) (Version: 7.14 - mIRC Co. Ltd.)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 45.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 45.0 (x86 de)) (Version: 45.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.1.0.5973 - Mozilla)
Mozilla Thunderbird 45.1.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.1.0 (x86 de)) (Version: 45.1.0 - Mozilla)
MPC-HC 1.7.0 (HKLM-x32\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.0.7858 - MPC-HC Team)
MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project)
MyDefrag v4.3.1 (HKLM\...\MyDefrag v4.3.1_is1) (Version: 4.0.0.0 - J.C. Kessels)
MyDriveConnect 4.0.7.2442 (HKLM-x32\...\MyDriveConnect) (Version: 4.0.7.2442 - TomTom)
NEC Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}) (Version: 1.0.20.0 - NEC Electronics Corporation)
NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.20.0 - NEC Electronics Corporation) Hidden
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenSSL 1.0.2g (64-bit) (HKLM\...\OpenSSL (64-bit)_is1) (Version:  - OpenSSL Win64 Installer Team)
paint.net (HKLM\...\{DADC2AF6-DC9F-4BCF-BFCE-DCEC16EF507C}) (Version: 4.0.9 - dotPDN LLC)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.1 - pdfforge)
Phase 5 HTML-Editor (HKLM-x32\...\{20B1B020-DEAE-48D1-9960-D4C3185D758B}) (Version: 5.6.2.3 - Systemberatung Schommer)
Philips Product Selector 5.2.6.0 (HKLM-x32\...\InstallShield_{81AD9228-21AC-4DBD-AE33-98146A88BAA8}) (Version: 5.2.6.0 - Philips Lighting)
Philips Product Selector 5.2.6.0 (x32 Version: 5.2.6.0 - Philips Lighting) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.259 - Google, Inc.)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
POV-Ray for Windows v3.6.0 (HKLM-x32\...\POV-Ray for Windows v3.6) (Version: 3.6 - Persistence of Vision Raytracer Pty. Ltd.)
ProfiCAD 7.5.6 (HKLM-x32\...\ProfiCAD_is1) (Version:  - )
ProjectLibre (HKLM-x32\...\{E29A4ED9-3192-4D72-A2E2-9C32B512714D}) (Version: 1.5.19.0 - ProjectLibre)
Protect Disc License Helper 1.0.125 (IE) (HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\Protect Disc License Helper) (Version: 1.0.125 - Protect Disc)
Protect Disc License Helper 1.0.125 (IE) (HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\Protect Disc License Helper) (Version: 1.0.125 - Protect Disc)
ProtectDisc Driver, Version 11 (HKLM-x32\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)
Quick Media Converter (HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\QUICKMEDIACONVERTER) (Version:  - )
Quick Media Converter (HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\QUICKMEDIACONVERTER) (Version:  - )
QuickGamma 4.0.0.2 (HKLM-x32\...\QuickGamma_is1) (Version: 4.0.0.2 - Eberhard Werle)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.46.610.2011 - Realtek)
Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6409 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7770 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30126 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{17528CE4-C333-48FB-A9E4-D841E795CDCE}) (Version: 3.0.23.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.39.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.39.0 - Renesas Electronics Corporation) Hidden
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 3.0.23.0 - Renesas Electronics Corporation) Hidden
RITTO USB Parametrier-Software 17831 (HKLM-x32\...\{809C6C39-7AD3-4C9B-B93C-671EE4070F0D}) (Version: 2.0.0.0 - Ritto GmbH & Co. KG)
RT 7 Lite (64-Bit) (HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\RT 7 Lite x64) (Version: 2.6.0 - Rockers Team)
RT 7 Lite (64-Bit) (HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\RT 7 Lite x64) (Version: 1.7.0 - Rockers Team)
RT 7 Lite x64 (Version: 2.6.0 - Rockers Team) Hidden
Saleen FolderSync (HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\Saleen FolderSync) (Version:  - Saleen Software)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.4.0 - SAMSUNG Electronics Co., Ltd.)
Secunia PSI (3.0.0.11005) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.11005 - Secunia)
Semiolog (HKLM-x32\...\Semiolog2) (Version:  - )
Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.111 - Skype Technologies S.A.)
SonyEditor (remove only) (HKLM-x32\...\SonyEditor) (Version:  - )
Spannungsabfall 3.x (HKLM-x32\...\Spannungsabfall_is1) (Version:  - Andreas Wiesmüller)
Spannungsabfall Version 4.x (HKLM-x32\...\{F59BD5E4-AE39-426E-89C9-792FA93563C0}_is1) (Version: 4.x - Andreas Wiesmüller)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Spotify (HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\Spotify) (Version: 0.9.1.57.ge7405149 - Spotify AB)
SSDlife Pro (HKLM-x32\...\{6F104B6D-535A-4D27-9A11-8525368AEB1F}) (Version: 2.5.82 - BinarySense Inc.)
StriePlan (HKLM-x32\...\{EE0D65D8-A2F2-4C03-9F34-E51CC7E6BE90}) (Version: 3.7.3.0062 - ABB STRIEBEL & JOHN)
StriePlan (x32 Version: 3.7.3.0062 - ABB STRIEBEL & JOHN) Hidden
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.59518 - TeamViewer)
Tomb Raider [2013] Collectors Edition MULTI-2 1.01.748.0 (HKLM-x32\...\Tomb Raider [2013] Collectors Edition MULTI-2 1.01.748.0) (Version:  - )
ToolBedView (HKLM-x32\...\{C18071EC-6658-4ADB-BD0C-10EE3449E9B8}) (Version: 1.26.4 - ToolBed GmbH)
Total Commander (Remove or Repair) (HKLM-x32\...\Totalcmd) (Version: 7.56a - Ghisler Software GmbH)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 10.0.4600.4 - TuneUp Software) Hidden
UltraISO Premium V9.61 (HKLM-x32\...\UltraISO_is1) (Version:  - )
Unity Web Player (HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-3455670051-300026812-3451469050-1008\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
VDE-Anwendungsprogramm 8.0.18.0 (HKLM-x32\...\VDE-Anwendungsprogramm) (Version: 8.0.18.0 - VDE Verlag GmbH)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.3 - VideoLAN)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinHTTrack Website Copier 3.47-27 (HKLM-x32\...\WinHTTrack Website Copier_is1) (Version: 3.47.27 - HTTrack)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
Wise Registry Cleaner 9.03 (HKLM-x32\...\Wise Registry Cleaner_is1) (Version: 9.03 - WiseCleaner.com, Inc.)
WISO Mein Geld 2013 Professional (HKLM-x32\...\WISO Mein Geld 2013 Professional) (Version:  - Buhl Data Service GmbH)
WISO Mein Geld 2013 Professional (x32 Version: 15.0.0.1 - Buhl Data Service GmbH) Hidden
WISO steuer:Sparbuch 2016 (HKLM-x32\...\{4F7B49DA-A71A-4127-9E58-5CFA89047C43}) (Version: 23.00.1146 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2011 (HKLM-x32\...\{02F0B8AE-7501-4333-AFBE-6BAABFEC7637}) (Version: 18.00.6928 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2012 (HKLM-x32\...\{0CC1DAFB-40C8-4903-953D-471E541477C7}) (Version: 19.05.7368 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2013 (HKLM-x32\...\{D6CC2FAF-F827-4091-96A1-D32CC9B69C79}) (Version: 20.00.8137 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2014 (HKLM-x32\...\{2617EFF8-3301-4B08-A314-AE4CF2BF98DA}) (Version: 21.00.8480 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2015 (HKLM-x32\...\{9D63573A-C054-478D-BF78-4F32608C903A}) (Version: 22.07.9009 - Buhl Data Service GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: 4.2.2.14545 - Blizzard Entertainment)
WorldUnlock Codes Calculator (HKLM-x32\...\WorldUnlock Codes Calculator) (Version:  - )
WSCAD SUITE 2012 Service Pack 1 Demo (C:\WSCAD\WSCAD SUITE DEMO\2012) (HKLM-x32\...\{7A145BC0-AB8D-4E6C-9C67-ECF3678403BC}) (Version: 2012 - WSCAD electronic GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\DWG TrueView 2015 - English\dwgviewr.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2015 - English\en-US\dwgviewrficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0439E2AA-2FF3-4885-BEB9-9A5106883998} - System32\Tasks\WiseCleaner\WRCSkipUAC => C:\Program Files (x86)\Wise\Wise Registry Cleaner\WiseRegCleaner.exe [2016-01-19] (WiseCleaner.com)
Task: {11C10B84-B9E3-4A5B-8B0E-3DEA0F28C2FC} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
Task: {1451AA8F-C21B-40D0-AD2A-703E6E1E4891} - System32\Tasks\Driver Booster SkipUAC (Tobias) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {14DAF99E-18C1-4AA2-92ED-C1574E7D8389} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2015-07-08] (Microsoft Corporation)
Task: {25488372-4E37-48FE-9E85-3726994FFA34} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2015-07-08] (Microsoft)
Task: {348EADBC-844D-4FC8-9132-247AB56057C9} - System32\Tasks\cFos\Registration Tasks\Open Browser => Chrome.exe --new-window "hxxp://www.cfos.de/de/cfosspeed/cfosspeed-feature-highlights.htm?sw-10.10.2238&amp;days=29&amp;ret=0&amp;raw=13&amp;exp=102"
Task: {3511ED8D-C1BD-4571-91C1-4A8352874E1B} - System32\Tasks\{28F0A57B-EB49-4570-B791-9B5FF04F2734} => pcalua.exe -a C:\Users\Tobias\AppData\Local\Temp\Temp1_DE_PlanungssoftwareElcom_30-Tage-Testversion.zip\Elcom.exe
Task: {475C1DAF-F948-449D-81B7-CCACB69F5962} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
Task: {591CD591-AE2C-468C-9A44-DDEB2CDDD23A} - System32\Tasks\Norton Management\Norton Error Analyzer => C:\Program Files (x86)\Norton Management\Engine\3.0.0.133\SymErr.exe
Task: {6242DA8C-38B7-4931-A9C5-69C000C97B05} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-01-15] (Piriform Ltd)
Task: {831980F6-FEB5-46E3-AF9D-646923239FF3} - System32\Tasks\Google Updater and Installer => C:\Users\Tobias\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {9BD70C16-9A51-470D-AE0E-35BD8445B795} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3455670051-300026812-3451469050-1000UA => C:\Users\Tobias\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {9CA61598-C7C1-4735-80D9-BE3831CDD9F6} - System32\Tasks\Norton Management\Norton Error Processor => C:\Program Files (x86)\Norton Management\Engine\3.0.0.133\SymErr.exe
Task: {B9C98292-22BF-4867-BB06-5C69A77D4834} - System32\Tasks\{D77EE04F-8299-4E6E-9889-0FE2BC6A2C73} => pcalua.exe -a C:\Users\Tobias\Downloads\epson373260eu.exe -d C:\Users\Tobias\Downloads
Task: {BC60206F-08E6-400F-BB25-70A00DF1B208} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2015-07-08] (Microsoft Corporation)
Task: {BF673638-52C0-4D9C-AB72-993F3EF7D459} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2015-07-08] (Microsoft Corporation)
Task: {C5C60201-72F3-4CA8-AA00-A48F497BF249} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3455670051-300026812-3451469050-1000Core => C:\Users\Tobias\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {CF15901E-7918-480D-BB02-905E3F98163A} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files (x86)\Norton Identity Safe\Engine\2013.3.3.19\SymErr.exe
Task: {D2D0600E-F173-4A91-A36F-E3C84D5342B8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-13] (Adobe Systems Incorporated)
Task: {D8DEFD4F-79D2-4413-88F2-81AB4CD342B1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-09] (Google Inc.)
Task: {DB8B6F6A-161F-48B1-A58C-E7C21FD28C56} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2015-07-08] (Microsoft Corporation)
Task: {E090E34E-3495-49E8-8848-14FD019BF486} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files (x86)\Norton Identity Safe\Engine\2013.3.3.19\SymErr.exe
Task: {EF8AC2B7-79FE-4190-8F99-8E93C7FC782B} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-01-29] (Oracle Corporation)
Task: {F5DA4E1B-EAEC-4415-A311-2B428BDC1DA2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-09] (Google Inc.)
Task: {F985B7E0-EA5E-46D3-88E2-1BB325FA38B1} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-03-04] (AVAST Software)
Task: {FB719659-DEB1-4F11-93B2-7BCC49177E08} - System32\Tasks\Divx-Online-Aktualisierungsprogramm => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
Task: {FE31A96F-95E3-4D15-B86E-18041E81DE17} - System32\Tasks\cFosTASK => C:\Windows\BOX_cFosTASK.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3455670051-300026812-3451469050-1000Core.job => C:\Users\Tobias\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3455670051-300026812-3451469050-1000UA.job => C:\Users\Tobias\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

ShortcutWithArgument: C:\Users\Tobias\Desktop\LiveStreamingApp.lnk -> C:\Program Files (x86)\premier-league-live.net\LiveStreamingApp.exe (Cool mirage) -> /loadUrl=hxxp://bundesliga-streams.net
ShortcutWithArgument: C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\premier-league-live.net\LiveStreamingApp.lnk -> C:\Program Files (x86)\premier-league-live.net\LiveStreamingApp.exe (Cool mirage) -> /loadUrl=hxxp://bundesliga-streams.net

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2012-02-20 00:35 - 2008-07-19 17:26 - 00087040 _____ () C:\Windows\System32\custmon64.dll
2016-01-15 22:44 - 2016-01-15 22:44 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2010-07-20 07:47 - 2010-12-23 12:14 - 09192064 ____C () F:\VDE\VDEView.exe
2010-11-05 12:46 - 2010-11-05 12:46 - 01974272 _____ () C:\Program Files (x86)\foobar2000\foobar2000.exe
2016-05-22 12:57 - 2016-05-10 11:38 - 03652224 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2016\wmain16.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00306904 _____ () C:\Program Files (x86)\AOMEI Backupper\UiLogic.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00241368 _____ () C:\Program Files (x86)\AOMEI Backupper\diskmgr.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00290520 _____ () C:\Program Files (x86)\AOMEI Backupper\Comn.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00077528 _____ () C:\Program Files (x86)\AOMEI Backupper\Ldm.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00061144 _____ () C:\Program Files (x86)\AOMEI Backupper\Device.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00282328 _____ () C:\Program Files (x86)\AOMEI Backupper\BrFat.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00962264 _____ () C:\Program Files (x86)\AOMEI Backupper\BrNtfs.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00122584 _____ () C:\Program Files (x86)\AOMEI Backupper\FuncLogic.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00282328 _____ () C:\Program Files (x86)\AOMEI Backupper\Clone.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00347864 _____ () C:\Program Files (x86)\AOMEI Backupper\ImgFile.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00028376 _____ () C:\Program Files (x86)\AOMEI Backupper\Encrypt.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00069336 _____ () C:\Program Files (x86)\AOMEI Backupper\Compress.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00102104 _____ () C:\Program Files (x86)\AOMEI Backupper\BrVol.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00253656 _____ () C:\Program Files (x86)\AOMEI Backupper\GptBcd.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00155352 _____ () C:\Program Files (x86)\AOMEI Backupper\FlBackup.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00483032 _____ () C:\Program Files (x86)\AOMEI Backupper\EnumFolder.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00175832 _____ () C:\Program Files (x86)\AOMEI Backupper\DeviceMgr.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00118488 _____ () C:\Program Files (x86)\AOMEI Backupper\Backup.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00691928 _____ () C:\Program Files (x86)\AOMEI Backupper\Sync.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00102104 _____ () C:\Program Files (x86)\AOMEI Backupper\BrLog.dll
2016-03-12 00:21 - 2015-02-26 01:00 - 02403504 _____ () C:\Program Files (x86)\AOMEI Backupper\QtCore4.dll
2014-10-20 21:57 - 2014-02-10 13:44 - 04592128 _____ () C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libglesv2.dll
2014-10-20 21:57 - 2014-02-10 13:44 - 00112128 _____ () C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libegl.dll
2016-02-05 15:07 - 2016-02-05 15:07 - 01040488 _____ () C:\Program Files (x86)\LibreOffice 5\program\libxml2.dll
2016-02-05 15:07 - 2016-02-05 15:07 - 00372840 _____ () C:\Program Files (x86)\LibreOffice 5\program\glew32.dll
2016-02-05 15:07 - 2016-02-05 15:07 - 00182376 _____ () C:\Program Files (x86)\LibreOffice 5\program\libxslt.dll
2016-02-05 15:07 - 2016-02-05 15:07 - 00116328 _____ () C:\Program Files (x86)\LibreOffice 5\program\python3.dll
2016-02-05 12:38 - 2016-02-05 12:38 - 00049152 _____ () C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.3\lib\_socket.pyd
2002-11-25 12:10 - 2002-11-25 12:10 - 01497600 ____C () F:\VDE\vdk200.dll
2010-04-21 14:48 - 2010-04-21 14:48 - 00066560 _____ () C:\Program Files (x86)\foobar2000\zlib1.dll
2010-11-05 12:42 - 2010-11-05 12:42 - 00148480 _____ () C:\Program Files (x86)\foobar2000\shared.dll
2010-11-05 12:43 - 2010-11-05 12:43 - 00274432 _____ () C:\Program Files (x86)\foobar2000\components\foo_fileops.dll
2010-11-05 12:44 - 2010-11-05 12:44 - 00479232 _____ () C:\Program Files (x86)\foobar2000\components\foo_converter.dll
2010-11-05 12:44 - 2010-11-05 12:44 - 00294400 _____ () C:\Program Files (x86)\foobar2000\components\foo_rgscan.dll
2010-11-05 12:50 - 2010-11-05 12:50 - 01376256 _____ () C:\Program Files (x86)\foobar2000\components\foo_input_std.dll
2010-11-05 12:45 - 2010-11-05 12:45 - 00275456 _____ () C:\Program Files (x86)\foobar2000\components\foo_dsp_std.dll
2010-11-05 12:43 - 2010-11-05 12:43 - 00242176 _____ () C:\Program Files (x86)\foobar2000\components\foo_freedb2.dll
2010-11-05 12:44 - 2010-11-05 12:44 - 00299008 _____ () C:\Program Files (x86)\foobar2000\components\foo_cdda.dll
2010-11-05 12:45 - 2010-11-05 12:45 - 01128960 _____ () C:\Program Files (x86)\foobar2000\components\foo_ui_std.dll
2016-05-13 00:24 - 2016-05-11 13:48 - 17565848 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\PepperFlash\pepflashplayer.dll
2016-05-22 12:57 - 2016-05-10 11:29 - 04686976 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2016\wbae216.dll
2016-05-22 12:57 - 2016-05-10 11:28 - 39051904 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2016\wgui16.dll
2016-05-22 12:57 - 2016-05-10 11:13 - 00355968 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2016\btsservices55.dll
2016-05-22 12:57 - 2016-05-10 11:13 - 00622720 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2016\btsplatformapi55.dll
2016-05-22 12:57 - 2016-05-10 11:12 - 00685568 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2016\sqlitesee.dll
2016-05-22 12:57 - 2016-05-10 11:14 - 01744384 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2016\btselsterapi.dll
2016-05-22 12:57 - 2016-05-10 11:23 - 04786816 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2016\wreli16.dll
2016-05-22 12:57 - 2016-05-10 11:23 - 09737856 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2016\wcore16.dll
2016-05-22 12:57 - 2015-10-22 10:24 - 00249344 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2016\clucene-contribs-lib.dll
2016-05-22 12:57 - 2015-10-22 10:24 - 01029120 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2016\clucene-core.dll
2016-05-22 12:57 - 2015-10-22 10:24 - 00096768 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2016\clucene-shared.dll
2016-05-22 12:57 - 2015-10-22 10:24 - 00067584 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2016\zlib1.dll
2016-05-22 12:57 - 2016-05-10 11:13 - 02799232 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2016\btsguiwinapi55.dll
2016-05-22 12:57 - 2016-05-10 11:13 - 00164480 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2016\btsdcom55.dll
2016-05-22 12:57 - 2016-05-10 11:29 - 02006656 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2016\wbae316.dll
2016-05-22 12:57 - 2016-05-10 11:29 - 03352704 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2016\wbae416.dll
2016-05-22 12:57 - 2016-05-10 11:37 - 01584256 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2016\wfabu16.dll
2016-05-22 12:57 - 2016-05-10 11:29 - 01696384 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2016\whau116.dll
2016-05-22 12:57 - 2016-05-10 11:29 - 03812480 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2016\whau216.dll
2016-05-22 12:57 - 2016-05-10 11:37 - 09640576 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2016\wkont16.dll
2016-05-22 12:57 - 2016-05-10 11:36 - 03109504 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2016\wimp16.dll
2016-05-22 12:57 - 2016-05-10 11:35 - 11130496 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2016\wbae116.dll
2016-05-22 12:57 - 2016-05-10 11:29 - 03555968 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2016\wwerb16.dll
2016-05-22 12:57 - 2016-05-10 11:13 - 00112128 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2016\sqldrivers\libqsqlitesee.dll
2015-02-28 11:27 - 2003-01-16 15:16 - 00024576 _____ () C:\Program Files (x86)\ALFBanCo6\alfCBF.dll
2015-10-05 00:12 - 2016-03-04 14:45 - 00023552 _____ () C:\Program Files (x86)\ALFBanCo6\AlfSocketNet6.dll
2009-07-13 23:03 - 2009-07-14 03:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll
2015-02-28 11:27 - 2014-02-17 12:22 - 00040960 _____ () C:\Program Files (x86)\ALFBanCo6\AlfKtoCheck6.dll
2015-02-28 11:27 - 2016-04-15 08:59 - 00483328 _____ () C:\Program Files (x86)\ALFBanCo6\AlfCHbci6.dll
2015-02-28 11:27 - 2016-04-15 09:00 - 00327680 _____ () C:\Program Files (x86)\ALFBanCo6\alfctapi6.dll
2015-02-28 11:27 - 2014-12-09 11:01 - 00176128 _____ () C:\Program Files (x86)\ALFBanCo6\AlfProxy.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:1AAB2E68 [240]
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1 [112]
AlternateDataStreams: C:\Users\Tobias\Downloads\BOM21412_setup.exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\chromeinstall-7u25.exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\Kabel_light_demo_setup.exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\Nicht bestätigt 156135.crdownload:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\PandaCloudAntivirus.exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\PSISetup (1).exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\spybot-2.4.exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\WebInstaller_2002 (1).exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\WebInstaller_2002.exe:BDU [0]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)

HKLM\...\.scr: CryptoPreventSCR => "C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventFilterMod.CryptoPreventEXEC" "%1" /S %* <===== ACHTUNG

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2015-04-03 13:16 - 00000938 ____R C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3455670051-300026812-3451469050-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3455670051-300026812-3451469050-1008\Control Panel\Desktop\\Wallpaper -> C:\Users\Lilly\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 1) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\Services: AMD External Events Utility => 2
MSCONFIG\Services: AMD FUEL Service => 2
MSCONFIG\Services: DialComService => 3
MSCONFIG\Services: EPSON_PM_RPCV4_04 => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: gusvc => 3
MSCONFIG\Services: hasplms => 2
MSCONFIG\Services: IDriverT => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\Services: tor => 2
MSCONFIG\startupfolder: C:^Users^Tobias^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CurseClientStartup.ccip => C:\Windows\pss\CurseClientStartup.ccip.Startup
MSCONFIG\startupfolder: C:^Users^Tobias^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: AMD AVT => Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
MSCONFIG\startupreg: AsioThk32Reg => REGSVR32.EXE /S CTASIO.DLL
MSCONFIG\startupreg: C9E2C46E4256CA39ECA0DEAEED818A2394673964._service_run => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=service
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: CTHelper => CTHELPER.EXE
MSCONFIG\startupreg: Dropbox Update => "C:\Users\Tobias\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
MSCONFIG\startupreg: EPLTarget => 
MSCONFIG\startupreg: GoogleChromeAutoLaunch_3E029A545A903A02B262797A0B1ADE1D => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: icq => C:\Users\Tobias\AppData\Roaming\ICQM\icq.exe -CU
MSCONFIG\startupreg: MyDriveConnect.exe => "C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe"
MSCONFIG\startupreg: PrnStatusMX => C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [TCP Query User{390D9B7D-77C0-43D9-A14C-B04C4642BC8C}E:\spiele\dead space 2\deadspace2.exe] => (Block) E:\spiele\dead space 2\deadspace2.exe
FirewallRules: [UDP Query User{EAFF774A-BCF0-40C6-8980-4F61C9FA3E00}E:\spiele\dead space 2\deadspace2.exe] => (Block) E:\spiele\dead space 2\deadspace2.exe
FirewallRules: [{156F004F-2692-490D-8D66-E2F27D1651CC}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [{E466B29D-8BF5-4D17-8A17-E6E8A9A98BF9}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [TCP Query User{132E5D3F-A7B9-47BD-927D-211814D8F02F}C:\program files (x86)\totalcmd\totalcmd.exe] => (Allow) C:\program files (x86)\totalcmd\totalcmd.exe
FirewallRules: [UDP Query User{FF2E99FA-1DD6-44C2-80A1-890820D2F82A}C:\program files (x86)\totalcmd\totalcmd.exe] => (Allow) C:\program files (x86)\totalcmd\totalcmd.exe
FirewallRules: [{069687EB-F6C4-4A8A-99BF-2EEBF7AF5399}] => (Allow) LPort=23423
FirewallRules: [{B3B26EE4-F62E-49A9-BC32-72E4CA54F5E7}] => (Allow) C:\Users\Tobias\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{A49D91B5-871A-4091-BE88-5753F4582CB4}] => (Allow) C:\Users\Tobias\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{A307AD13-8C6D-44CA-A1CC-122041B28456}C:\users\tobias\desktop\jdownloader_portableapps\commonfiles\java\bin\javaw.exe] => (Allow) C:\users\tobias\desktop\jdownloader_portableapps\commonfiles\java\bin\javaw.exe
FirewallRules: [UDP Query User{1F0A6EF7-9FBC-4EF3-9084-E44A489660B7}C:\users\tobias\desktop\jdownloader_portableapps\commonfiles\java\bin\javaw.exe] => (Allow) C:\users\tobias\desktop\jdownloader_portableapps\commonfiles\java\bin\javaw.exe
FirewallRules: [TCP Query User{8DB73F11-34D7-41B5-9973-16FBAD63B065}C:\users\tobias\desktop\jdownloader_portableapps\commonfiles\java\bin\java.exe] => (Allow) C:\users\tobias\desktop\jdownloader_portableapps\commonfiles\java\bin\java.exe
FirewallRules: [UDP Query User{F5575465-D150-4E7F-9B1C-79118B81764D}C:\users\tobias\desktop\jdownloader_portableapps\commonfiles\java\bin\java.exe] => (Allow) C:\users\tobias\desktop\jdownloader_portableapps\commonfiles\java\bin\java.exe
FirewallRules: [TCP Query User{FB71BBB0-57AF-40BB-BCA4-8C79C5FCEE6A}\\lilliana\mirc\mirc.exe] => (Allow) \\lilliana\mirc\mirc.exe
FirewallRules: [UDP Query User{88FF1C08-F3A0-4BB2-9280-F2FC3B7891BB}\\lilliana\mirc\mirc.exe] => (Allow) \\lilliana\mirc\mirc.exe
FirewallRules: [TCP Query User{2DCFCD8C-2490-4F10-B2BB-F57DC1F9FC49}C:\users\tobias\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\tobias\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{1F7B9F2D-F0C9-418F-93FC-92FCFB06A7FE}C:\users\tobias\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\tobias\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{1B6337C9-DA51-450B-94AC-248E73B161A7}] => (Allow) E:\Spiele\Steam\SteamApps\common\command and conquer red alert 3\runme.exe
FirewallRules: [{47D17BC7-4B18-4F92-83F8-CC6A1524151D}] => (Allow) E:\Spiele\Steam\SteamApps\common\command and conquer red alert 3\runme.exe
FirewallRules: [{44098540-55A7-415C-93AC-FE10E6FEFE78}] => (Allow) E:\Spiele\Steam\SteamApps\common\command and conquer red alert 3\Support\EA Help\Electronic_Arts_Technical_Support.htm
FirewallRules: [{D789C391-A4E5-4B29-BC5A-726089CE78BB}] => (Allow) E:\Spiele\Steam\SteamApps\common\command and conquer red alert 3\Support\EA Help\Electronic_Arts_Technical_Support.htm
FirewallRules: [{8A8DF58D-187A-43C4-A932-6AC5A421806E}] => (Allow) E:\Spiele\Steam\SteamApps\common\command and conquer 3 tiberium wars\CNC3.exe
FirewallRules: [{2DC7D8BB-EC21-4894-AE60-98949FE98D11}] => (Allow) E:\Spiele\Steam\SteamApps\common\command and conquer 3 tiberium wars\CNC3.exe
FirewallRules: [{51C9F0B6-CBAE-40E8-85A6-2C6973E4514E}] => (Allow) E:\Spiele\Steam\SteamApps\common\command and conquer 3 tiberium wars\Support\EA Help\Electronic_Arts_Technical_Support.htm
FirewallRules: [{656D92DE-008F-4997-8A58-3970F7AF6FE3}] => (Allow) E:\Spiele\Steam\SteamApps\common\command and conquer 3 tiberium wars\Support\EA Help\Electronic_Arts_Technical_Support.htm
FirewallRules: [TCP Query User{F24DDB01-168A-4D63-A075-FF09D3D0CADA}E:\spiele\world of warcraft\launcher.exe] => (Allow) E:\spiele\world of warcraft\launcher.exe
FirewallRules: [UDP Query User{24B8E4C5-5B83-4E09-AE9E-6BEDCB4BFAD5}E:\spiele\world of warcraft\launcher.exe] => (Allow) E:\spiele\world of warcraft\launcher.exe
FirewallRules: [TCP Query User{915822E1-DC29-4A5B-A651-AEB26C2F7716}C:\program files (x86)\icq7.5\icq.exe] => (Allow) C:\program files (x86)\icq7.5\icq.exe
FirewallRules: [UDP Query User{4C26A2BA-D03C-4505-B968-3C3AD2FE1FF4}C:\program files (x86)\icq7.5\icq.exe] => (Allow) C:\program files (x86)\icq7.5\icq.exe
FirewallRules: [TCP Query User{9FA327F7-E6E1-4A47-A47F-73775DAF1BB7}E:\spiele\backup\mass effect 2\binaries\masseffect2.exe] => (Block) E:\spiele\backup\mass effect 2\binaries\masseffect2.exe
FirewallRules: [UDP Query User{5F1FEA93-D60F-488A-8923-06EAE247B273}E:\spiele\backup\mass effect 2\binaries\masseffect2.exe] => (Block) E:\spiele\backup\mass effect 2\binaries\masseffect2.exe
FirewallRules: [TCP Query User{064EC1C0-E189-4416-8A5B-947F39212CFD}C:\elcom\zplan21\apps\rteng9.exe] => (Allow) C:\elcom\zplan21\apps\rteng9.exe
FirewallRules: [UDP Query User{43E5F0E0-2637-4DA4-B439-9B747DC2ED41}C:\elcom\zplan21\apps\rteng9.exe] => (Allow) C:\elcom\zplan21\apps\rteng9.exe
FirewallRules: [{510B1D6A-1E3E-4C6D-A919-9F39A3390E5C}] => (Block) C:\elcom\zplan21\apps\rteng9.exe
FirewallRules: [{6F42F371-3F80-4B49-85A9-9C66146A97A3}] => (Block) C:\elcom\zplan21\apps\rteng9.exe
FirewallRules: [{1DF16117-0A3A-47B1-8A27-8242B0811516}] => (Allow) E:\Spiele\Steam\SteamApps\common\crazy machines elements\cmElements.exe
FirewallRules: [{F20265FF-2697-447B-AF3F-989E7465D18D}] => (Allow) E:\Spiele\Steam\SteamApps\common\crazy machines elements\cmElements.exe
FirewallRules: [TCP Query User{CB4AD304-0BF9-469F-95E0-729BC16596C6}C:\program files (x86)\mirc\mirc.exe] => (Allow) C:\program files (x86)\mirc\mirc.exe
FirewallRules: [UDP Query User{6FA38902-E82E-43B4-B1F0-C8AAEF504D81}C:\program files (x86)\mirc\mirc.exe] => (Allow) C:\program files (x86)\mirc\mirc.exe
FirewallRules: [TCP Query User{6B163FF8-B151-415D-9A3A-9533C838A169}\\lilly-pc\mirc\mirc.exe] => (Allow) \\lilly-pc\mirc\mirc.exe
FirewallRules: [UDP Query User{6F3A01DB-D051-46A1-908B-9A3354D147D8}\\lilly-pc\mirc\mirc.exe] => (Allow) \\lilly-pc\mirc\mirc.exe
FirewallRules: [TCP Query User{C520490B-8DA5-4754-B3A6-1882F680F877}C:\program files (x86)\mysql 4.0\bin\mysqld-nt.exe] => (Allow) C:\program files (x86)\mysql 4.0\bin\mysqld-nt.exe
FirewallRules: [UDP Query User{109DCCCA-330D-48F5-B001-341C7616E46C}C:\program files (x86)\mysql 4.0\bin\mysqld-nt.exe] => (Allow) C:\program files (x86)\mysql 4.0\bin\mysqld-nt.exe
FirewallRules: [VirtualPC-In-UDP-1] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-UDP-2] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-TCP-1] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [TCP Query User{6262B00F-F9ED-42A9-88F3-0BA806268EEA}D:\enyguide\enyguidestarter.exe] => (Allow) D:\enyguide\enyguidestarter.exe
FirewallRules: [UDP Query User{ED1CC35A-D910-4AB2-8159-4FBA4E56E552}D:\enyguide\enyguidestarter.exe] => (Allow) D:\enyguide\enyguidestarter.exe
FirewallRules: [TCP Query User{0A7C6903-F33E-4018-B6E5-8EE40F394D7B}C:\users\tobias\desktop\enyguide\enyguidestarter.exe] => (Allow) C:\users\tobias\desktop\enyguide\enyguidestarter.exe
FirewallRules: [UDP Query User{2274D70E-396D-4294-8DF6-91CB539AAA0D}C:\users\tobias\desktop\enyguide\enyguidestarter.exe] => (Allow) C:\users\tobias\desktop\enyguide\enyguidestarter.exe
FirewallRules: [{944BAD7C-E9CF-41A2-84F2-13B7978C09C0}] => (Allow) E:\Spiele\Steam\SteamApps\common\stronghold kingdoms\StrongholdKingdoms.exe
FirewallRules: [{BD7DDB18-D013-4D5A-9894-E0092C37EDD1}] => (Allow) E:\Spiele\Steam\SteamApps\common\stronghold kingdoms\StrongholdKingdoms.exe
FirewallRules: [{DB5515A3-9FAC-49C9-A54E-8E5D9A0BF5E1}] => (Allow) C:\Windows\system32\hasplms.exe
FirewallRules: [TCP Query User{A36CE07B-2D05-4CA2-9F12-7EBEDE5776AC}C:\program files (x86)\microsoft virtual pc\virtual pc.exe] => (Allow) C:\program files (x86)\microsoft virtual pc\virtual pc.exe
FirewallRules: [UDP Query User{CC5CF65F-7316-4AD4-ACCA-1C23DB5A3C42}C:\program files (x86)\microsoft virtual pc\virtual pc.exe] => (Allow) C:\program files (x86)\microsoft virtual pc\virtual pc.exe
FirewallRules: [{038CDC55-635B-449E-B29C-13BE728818B5}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{6C9EE4D7-89DB-4D55-99CE-C1A8AB22177C}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{47236C61-2CA5-42B8-8C71-A541D33E4821}] => (Allow) E:\Spiele\Steam\SteamApps\common\dungeon siege iii - demo\Dungeon Siege III.exe
FirewallRules: [{6F1EDF81-0BAB-4501-B1D2-DEF13A174DC4}] => (Allow) E:\Spiele\Steam\SteamApps\common\dungeon siege iii - demo\Dungeon Siege III.exe
FirewallRules: [{C75071F9-DEBC-4269-A9CF-B2D253D253B0}] => (Allow) E:\Spiele\Steam\SteamApps\common\stronghold kingdoms\StrongholdKingdoms.exe
FirewallRules: [{5C2A4F19-E251-4391-BFD2-41846D881BCD}] => (Allow) E:\Spiele\Steam\SteamApps\common\stronghold kingdoms\StrongholdKingdoms.exe
FirewallRules: [TCP Query User{475534EC-9753-4058-BA5E-A0F42D5D8C5A}F:\mirc732\mirc.exe] => (Allow) F:\mirc732\mirc.exe
FirewallRules: [UDP Query User{97E06900-D886-4BE6-9C91-48494DDB3D1B}F:\mirc732\mirc.exe] => (Allow) F:\mirc732\mirc.exe
FirewallRules: [{D11D7C5A-C175-48C7-92DA-868673DC228A}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [{8E6AC60D-C189-4D00-B007-F0A3B4A4AF89}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [TCP Query User{D94E59E3-9D10-4729-BBC3-8D4FFD61A48F}C:\program files (x86)\mirc\mirc.exe] => (Allow) C:\program files (x86)\mirc\mirc.exe
FirewallRules: [UDP Query User{B6D57099-5A7C-49B9-85EE-1D5D74ACE926}C:\program files (x86)\mirc\mirc.exe] => (Allow) C:\program files (x86)\mirc\mirc.exe
FirewallRules: [TCP Query User{A19A63CB-2613-47CC-8DAE-68529BBB083A}E:\spiele\steam\steamapps\common\command and conquer 3 tiberium wars\retailexe\1.9\cnc3game.dat] => (Allow) E:\spiele\steam\steamapps\common\command and conquer 3 tiberium wars\retailexe\1.9\cnc3game.dat
FirewallRules: [UDP Query User{3F85C810-5C64-45B5-A392-504C7D96755F}E:\spiele\steam\steamapps\common\command and conquer 3 tiberium wars\retailexe\1.9\cnc3game.dat] => (Allow) E:\spiele\steam\steamapps\common\command and conquer 3 tiberium wars\retailexe\1.9\cnc3game.dat
FirewallRules: [TCP Query User{C7E922D5-1529-40B1-845E-30DD0A8E6F03}C:\elcom\5.1\apps\rteng9.exe] => (Allow) C:\elcom\5.1\apps\rteng9.exe
FirewallRules: [UDP Query User{5B2B9D52-81F2-43E4-B9F0-AD177C52F1D9}C:\elcom\5.1\apps\rteng9.exe] => (Allow) C:\elcom\5.1\apps\rteng9.exe
FirewallRules: [TCP Query User{1DAD5165-B465-452B-8E47-BB98A11934FA}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{80C5885C-1032-47EB-B438-572BB4B78D2E}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [TCP Query User{1F218E04-A692-4BFE-9667-7401C324DC1F}C:\elcom\magnet\apps\rteng9.exe] => (Allow) C:\elcom\magnet\apps\rteng9.exe
FirewallRules: [UDP Query User{B83ED54C-49F2-4C1A-810B-425A0D25689D}C:\elcom\magnet\apps\rteng9.exe] => (Allow) C:\elcom\magnet\apps\rteng9.exe
FirewallRules: [TCP Query User{04D652FA-926F-4181-9897-C1347F56ED39}I:\tools\sdi_r199\sdi_r199.exe] => (Allow) I:\tools\sdi_r199\sdi_r199.exe
FirewallRules: [UDP Query User{1A3198BF-3489-4BC4-80E0-91514566A392}I:\tools\sdi_r199\sdi_r199.exe] => (Allow) I:\tools\sdi_r199\sdi_r199.exe
FirewallRules: [TCP Query User{28F05ADD-38DF-4EED-9DEE-D98101759D92}I:\sdi_r311\sdi_r312.exe] => (Allow) I:\sdi_r311\sdi_r312.exe
FirewallRules: [UDP Query User{564BAB92-3504-4698-8178-33F4999CC591}I:\sdi_r311\sdi_r312.exe] => (Allow) I:\sdi_r311\sdi_r312.exe
FirewallRules: [TCP Query User{4BC69694-0472-4F2F-9E84-662906A57560}I:\sdi_r311\sdi_r311.exe] => (Allow) I:\sdi_r311\sdi_r311.exe
FirewallRules: [UDP Query User{FA11486E-3176-4BA2-BCA6-51368EC826F8}I:\sdi_r311\sdi_r311.exe] => (Allow) I:\sdi_r311\sdi_r311.exe
FirewallRules: [TCP Query User{10DD1BE2-5C46-49D6-9028-7683A2F5A136}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
FirewallRules: [UDP Query User{70836141-4698-4752-9E95-457FA795A7C3}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
FirewallRules: [{19F04B80-5B49-4FCF-987C-282BF963430D}] => (Allow) C:\Users\Tobias\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{DD94AC7C-04A6-4BB2-95F7-8BDE04B6C7F0}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{BC4D3DD4-C314-4944-B78F-EBAA6A59F6D5}] => (Allow) LPort=2869
FirewallRules: [{B5AF6687-0784-4AD4-B52C-AD33C8006B9F}] => (Allow) LPort=1900
FirewallRules: [{61E8F127-532C-4A4A-AEAB-2383BA19AAD2}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{7152E896-1518-4A7F-B492-7C59C3ED2015}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{1F8F3505-5F7D-4722-8955-AA96B74D79E4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{6092DF5C-9606-479A-A2F8-8086AEF752D3}] => (Allow) LPort=5556
FirewallRules: [{4564B3B6-460D-489E-AE17-3B8E87DAB0D4}] => (Allow) LPort=5558
FirewallRules: [TCP Query User{659FA8F0-CCBD-4758-9BCD-E0F9FDD9BCA6}I:\sdi_r423\sdi_r423\sdi_x64_r423.exe] => (Allow) I:\sdi_r423\sdi_r423\sdi_x64_r423.exe
FirewallRules: [UDP Query User{8FE08169-2CA2-4AC3-B1D3-008C2082A94C}I:\sdi_r423\sdi_r423\sdi_x64_r423.exe] => (Allow) I:\sdi_r423\sdi_r423\sdi_x64_r423.exe
FirewallRules: [{4C21A091-A212-4A84-8765-A63DFAA4D682}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{960C8484-9E60-4222-8B61-9BB6E7C6C9B9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{34626EB9-5057-41EB-AA06-8B4EC5B2EBEC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{45EA96ED-D690-40C7-8926-EA9A276794DD}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{AC3B05E7-4AAE-49E3-AF01-E5BB431CE986}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{E034DAE5-D3B1-41DE-BC10-5FC32B8BF240}I:\sdi_r423\sdi_x64_r423.exe] => (Allow) I:\sdi_r423\sdi_x64_r423.exe
FirewallRules: [UDP Query User{C14F0EB9-83D4-4C8D-9D90-D2E896D85568}I:\sdi_r423\sdi_x64_r423.exe] => (Allow) I:\sdi_r423\sdi_x64_r423.exe
FirewallRules: [TCP Query User{422476F0-47BA-4FF5-A470-75B77614438C}I:\tools\sdi_r423\sdi_x64_r423.exe] => (Allow) I:\tools\sdi_r423\sdi_x64_r423.exe
FirewallRules: [UDP Query User{70B66DB7-05B5-4EED-BC4C-9BC808D9D487}I:\tools\sdi_r423\sdi_x64_r423.exe] => (Allow) I:\tools\sdi_r423\sdi_x64_r423.exe
FirewallRules: [TCP Query User{A83939DB-6069-402A-9BBE-442F3377450D}I:\tools\sdi_r423\sdi_r423\sdi_x64_r437.exe] => (Allow) I:\tools\sdi_r423\sdi_r423\sdi_x64_r437.exe
FirewallRules: [UDP Query User{68EAD1EE-118A-45FC-B7FA-AFE3E9B7841C}I:\tools\sdi_r423\sdi_r423\sdi_x64_r437.exe] => (Allow) I:\tools\sdi_r423\sdi_r423\sdi_x64_r437.exe
FirewallRules: [{D77098D6-7744-47B4-A6FD-12586039F6B7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{9C1CDD00-C66F-4B7F-AA54-F82201FFA351}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{CA906822-D8ED-4B5B-BF8D-16D952269B7F}C:\program files (x86)\java\jre1.8.0_74\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_74\bin\jp2launcher.exe
FirewallRules: [UDP Query User{D52C463B-CABF-4BB6-A3C4-3A2EB6AD05A4}C:\program files (x86)\java\jre1.8.0_74\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_74\bin\jp2launcher.exe
FirewallRules: [TCP Query User{351DBE27-8814-4428-9998-E37EEE60FAB8}I:\tools\sdi_r423\sdi_x64_r438.exe] => (Allow) I:\tools\sdi_r423\sdi_x64_r438.exe
FirewallRules: [UDP Query User{D39F8109-828D-43D1-80B3-D7023B0F2AF4}I:\tools\sdi_r423\sdi_x64_r438.exe] => (Allow) I:\tools\sdi_r423\sdi_x64_r438.exe
FirewallRules: [TCP Query User{C6AB3444-C6D0-4FE2-92DE-3DA51217EEDC}I:\tools\sdi_r423\sdi_x64_r439.exe] => (Allow) I:\tools\sdi_r423\sdi_x64_r439.exe
FirewallRules: [UDP Query User{581B71CD-FBB3-4911-B7CE-8B826D44164E}I:\tools\sdi_r423\sdi_x64_r439.exe] => (Allow) I:\tools\sdi_r423\sdi_x64_r439.exe
FirewallRules: [TCP Query User{58425BB1-3AF1-42E7-8DAC-AC76FF1180CD}I:\tools\sdi_r423\sdi_x64_r439.exe] => (Allow) I:\tools\sdi_r423\sdi_x64_r439.exe
FirewallRules: [UDP Query User{FC1896AF-CE0E-407E-B0B1-20C79795F2E3}I:\tools\sdi_r423\sdi_x64_r439.exe] => (Allow) I:\tools\sdi_r423\sdi_x64_r439.exe
FirewallRules: [{E2585501-C7EA-4311-B6A6-C156C7B0CBFC}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{FB680CCD-6F08-40B5-902D-C090EB5A8AAC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{EDCA0D09-B8B7-4CBD-839D-62F65B1A86D3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{39CFA6EA-AA73-4104-BD61-DD8328F693BC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{43A1DC6F-ACC0-483C-82E8-C86EEBD0E646}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

==================== Wiederherstellungspunkte =========================

16-05-2016 07:40:19 Windows Update
20-05-2016 07:09:53 Windows Update
22-05-2016 12:57:09 Installiert WISO steuer:Sparbuch 2016

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: AODDriver4.2.0
Description: AODDriver4.2.0
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: AODDriver4.2.0
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (05/16/2016 01:44:38 PM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz   konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet.   0x0.

Error: (05/16/2016 01:44:28 PM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Kontext:  Anwendung, SystemIndex Katalog

Error: (05/16/2016 01:44:28 PM) (Source: Windows Search Service) (EventID: 3006) (User: )
Description: Die Leistungsüberwachung kann für den Gatherer-Dienst nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Error: (05/12/2016 03:22:29 AM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz   konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet.   0x0.

Error: (05/12/2016 03:22:29 AM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Kontext:  Anwendung, SystemIndex Katalog

Error: (05/12/2016 03:22:29 AM) (Source: Windows Search Service) (EventID: 3006) (User: )
Description: Die Leistungsüberwachung kann für den Gatherer-Dienst nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Error: (04/14/2016 03:21:39 AM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz   konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet.   0x0.

Error: (04/14/2016 03:21:38 AM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Kontext:  Anwendung, SystemIndex Katalog

Error: (04/14/2016 03:21:38 AM) (Source: Windows Search Service) (EventID: 3006) (User: )
Description: Die Leistungsüberwachung kann für den Gatherer-Dienst nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Error: (04/06/2016 10:21:39 PM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz   konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet.   0x0.


Systemfehler:
=============
Error: (05/22/2016 02:58:29 PM) (Source: srv) (EventID: 2017) (User: )
Description: Der Server konnte keinen nicht-ausgelagerten Poolspeicher reservieren, da die konfigurierte Grenze für die Reservierung von nicht-ausgelagertem Poolspeicher erreicht wurde.

Error: (05/22/2016 12:36:36 PM) (Source: srv) (EventID: 2017) (User: )
Description: Der Server konnte keinen nicht-ausgelagerten Poolspeicher reservieren, da die konfigurierte Grenze für die Reservierung von nicht-ausgelagertem Poolspeicher erreicht wurde.

Error: (05/12/2016 03:22:27 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.3" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (05/12/2016 03:22:27 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.2.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (05/11/2016 05:36:17 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )
Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.

	Neue Signaturversion: 

	Vorherige Signaturversion: 115.63.0.0

	Aktualisierungsquelle: %NT-AUTORITÄT51

	Aktualisierungsphase: 4.9.0218.00

	Quellpfad: 4.9.0218.01

	Signaturtyp: %NT-AUTORITÄT602

	Aktualisierungstyp: %NT-AUTORITÄT604

	Benutzer: NT-AUTORITÄT\NETZWERKDIENST

	Aktuelle Modulversion: %NT-AUTORITÄT605

	Vorherige Modulversion: %NT-AUTORITÄT606

	Fehlercode: %NT-AUTORITÄT607

	Fehlerbeschreibung: %NT-AUTORITÄT608

Error: (05/11/2016 05:36:17 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )
Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.

	Neue Signaturversion: 

	Vorherige Signaturversion: 1.219.1269.0

	Aktualisierungsquelle: %NT-AUTORITÄT51

	Aktualisierungsphase: 4.9.0218.00

	Quellpfad: 4.9.0218.01

	Signaturtyp: %NT-AUTORITÄT602

	Aktualisierungstyp: %NT-AUTORITÄT604

	Benutzer: NT-AUTORITÄT\NETZWERKDIENST

	Aktuelle Modulversion: %NT-AUTORITÄT605

	Vorherige Modulversion: %NT-AUTORITÄT606

	Fehlercode: %NT-AUTORITÄT607

	Fehlerbeschreibung: %NT-AUTORITÄT608

Error: (05/11/2016 05:36:17 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )
Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.

	Neue Signaturversion: 

	Vorherige Signaturversion: 1.219.1269.0

	Aktualisierungsquelle: %NT-AUTORITÄT51

	Aktualisierungsphase: 4.9.0218.00

	Quellpfad: 4.9.0218.01

	Signaturtyp: %NT-AUTORITÄT602

	Aktualisierungstyp: %NT-AUTORITÄT604

	Benutzer: NT-AUTORITÄT\NETZWERKDIENST

	Aktuelle Modulversion: %NT-AUTORITÄT605

	Vorherige Modulversion: %NT-AUTORITÄT606

	Fehlercode: %NT-AUTORITÄT607

	Fehlerbeschreibung: %NT-AUTORITÄT608

Error: (05/11/2016 05:36:17 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )
Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.

	Neue Signaturversion: 

	Vorherige Signaturversion: 1.219.1269.0

	Aktualisierungsquelle: %NT-AUTORITÄT59

	Aktualisierungsphase: 4.9.0218.00

	Quellpfad: 4.9.0218.01

	Signaturtyp: %NT-AUTORITÄT602

	Aktualisierungstyp: %NT-AUTORITÄT604

	Benutzer: NT-AUTORITÄT\SYSTEM

	Aktuelle Modulversion: %NT-AUTORITÄT605

	Vorherige Modulversion: %NT-AUTORITÄT606

	Fehlercode: %NT-AUTORITÄT607

	Fehlerbeschreibung: %NT-AUTORITÄT608

Error: (05/11/2016 05:36:17 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )
Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.

	Neue Signaturversion: 

	Vorherige Signaturversion: 1.219.1269.0

	Aktualisierungsquelle: %NT-AUTORITÄT59

	Aktualisierungsphase: 4.9.0218.00

	Quellpfad: 4.9.0218.01

	Signaturtyp: %NT-AUTORITÄT602

	Aktualisierungstyp: %NT-AUTORITÄT604

	Benutzer: NT-AUTORITÄT\SYSTEM

	Aktuelle Modulversion: %NT-AUTORITÄT605

	Vorherige Modulversion: %NT-AUTORITÄT606

	Fehlercode: %NT-AUTORITÄT607

	Fehlerbeschreibung: %NT-AUTORITÄT608

Error: (05/02/2016 09:34:35 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 20.


CodeIntegrity:
===================================
  Date: 2015-07-17 23:27:53.344
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-07-17 23:27:53.275
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-07-17 23:27:45.818
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-07-17 23:27:45.746
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-07-17 23:27:01.966
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-07-17 23:27:01.888
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-07-17 23:26:05.462
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-07-17 23:26:05.400
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-07-17 23:23:27.567
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-07-17 23:23:27.499
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Speicherinformationen =========================== 

Prozessor: AMD Phenom(tm) II X4 965 Processor
Prozentuale Nutzung des RAM: 35%
Installierter physikalischer RAM: 8189.09 MB
Verfügbarer physikalischer RAM: 5253.58 MB
Summe virtueller Speicher: 16376.37 MB
Verfügbarer virtueller Speicher: 9777.05 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:238.37 GB) (Free:62.06 GB) NTFS
Drive d: (ST2016) (CDROM) (Total:0.63 GB) (Free:0 GB) CDFS
Drive e: (Downloads & Spiele) (Fixed) (Total:465.76 GB) (Free:7.16 GB) NTFS
Drive f: (Medienbibliothek) (Fixed) (Total:1863.01 GB) (Free:27.69 GB) NTFS
Drive h: (Filme & Downloads) (Fixed) (Total:465.76 GB) (Free:21.01 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 00AE1392)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=238.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 119EB49F)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: 423C423B)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 77457857)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

burningice · 27.05.2016, 02:05

Attention heißt ja auch "Aufpassen" und nicht "gefährlich". Solche Beschränkungen sind natürlich untypisch, scheinen in deinem Fall aber natürlich alle von CrytoPrevent zu kommen.

Machen wir einen Scan auf schädliche Dateien auf deinem Rechner:

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Hinweis: Dieser Scan kann schon einmal mehrere Stunden dauern...

Ecronika · 27.05.2016, 22:11

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=6bc6a19371baf846b0bd32af0d538122
# end=init
# utc_time=2016-05-27 05:43:42
# local_time=2016-05-27 07:43:42 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 29611
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=6bc6a19371baf846b0bd32af0d538122
# end=updated
# utc_time=2016-05-27 05:55:25
# local_time=2016-05-27 07:55:25 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=6bc6a19371baf846b0bd32af0d538122
# engine=29611
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-05-27 08:45:55
# local_time=2016-05-27 10:45:55 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 7598302 87362349 0 0
# scanned=378784
# found=2
# cleaned=0
# scan_time=10229
sh=FF273D0017363755214FA5CD888C2C2D54721700 ft=1 fh=0089eae0191970f8 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows\assembly\GAC\Microsoft.VisualStudio.OLE.Interop\7.1.40304.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.OLE.Interop.dll"
sh=A70EFAB5F2D2D83AD2B7E0304169C73F6D0EC700 ft=1 fh=011924ad9c4ebdbf vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll"

burningice · 30.05.2016, 14:15

Ja also bezüglich deiner Sperren ist das ganz normal für deine eingesetzte Software.

Es sind wohl 1,2 Spuren von potentiell unerwünschten Programmen auf deinem Rechner, aber das ist nichts besonderes.

Schaut eigentlich voll okay aus.

Hast du noch irgendwelche Probleme oder Fragen zu deinem Rechner?

Ecronika · 01.06.2016, 23:09

Nein, ernsthafte Probleme habe ich eh keine, wunderte mich nur der Meldungen und werde wohl noch den 2 Meldungen von Eset zuwendet ...

burningice · 03.06.2016, 00:01

Ja machen wir einfach das Standardprogramm:

Schritt 1
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2
Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3
Bitte starte wieder FRST, setze den Haken bei Addition und drücke auf Untersuchen. Poste bitte wieder die beiden Textdateien, die so entstehen.

Bitte poste in deiner nächsten Antwort also:

Logfile von AdwCleaner
Logfile von Malwarebytes
Frst.txt
Addition.txt

Ecronika · 05.06.2016, 04:18

Code:

ATTFilter

# AdwCleaner v5.119 - Bericht erstellt am 05/06/2016 um 04:49:25
# Aktualisiert am 30/05/2016 von Xplode
# Datenbank : 2016-06-03.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (X64)
# Benutzername : Tobias - TOBIAS-PC
# Gestartet von : C:\Users\Tobias\Desktop\AdwCleaner_5.119.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****


***** [ Dateien ] *****


***** [ DLLs ] *****


***** [ WMI ] *****


***** [ Verknüpfungen ] *****


***** [ Aufgabenplanung ] *****


***** [ Registrierungsdatenbank ] *****

[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\OCComSDK.ComSDK
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\OCComSDK.ComSDK.1
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\Search.BrowserWndAPI
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\Search.BrowserWndAPI.1
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{63EDCDD3-8AFC-4358-A90F-F7FB8F5C64FF}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{BD5843ED-13C4-4EFF-ACE9-56CEE22BC087}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B9D64D3B-BE75-4FA2-B94A-C4AE772A0146}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\Interface\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\Interface\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552}
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\systweak

***** [ Internetbrowser ] *****

[-] [C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] gelöscht : hxxp://taplika.com/?f=7&a=tlk_ir_15_06&cd=2XzuyEtN2Y1L1Qzu0EyC0BzzyEzz0AtA0FtCyEtCtDyCtCyEtN0D0Tzu0StCtCtBzztN1L2XzutAtFyBtFtBtFtDtN1L1CzutCyEtBzytDyD1V1BtAtN1L1G1B1V1N2Y1L1Qzu2SyC0BzzyB0DtB0F0BtGtAyE0AtCtGyDyDyDyCtG0F0BtBtAtGtDyC0FtCtDyDzzzy0C0B0B0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAyD0BtAtByD0EtCtG0A0FtBtCtGyEtDyEtCtG0B0F0A0FtGyDyC0CyEtByDyC0C0C0DyC0A2Q&cr=362526228&ir=
[-] [C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] gelöscht : hxxp://myhome.vi-view.com/?type=hp&ts=1422909745&from=cor&uid=M4-CT256M4SSD2_00000000130109243A4E
[-] [C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] gelöscht : hxxp://taplika.com/?f=1&a=tlk_ir_15_06&cd=2XzuyEtN2Y1L1Qzu0EyC0BzzyEzz0AtA0FtCyEtCtDyCtCyEtN0D0Tzu0StCtCtBzztN1L2XzutAtFyBtFtBtFtDtN1L1CzutCyEtBzytDyD1V1BtAtN1L1G1B1V1N2Y1L1Qzu2SyC0BzzyB0DtB0F0BtGtAyE0AtCtGyDyDyDyCtG0F0BtBtAtGtDyC0FtCtDyDzzzy0C0B0B0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAyD0BtAtByD0EtCtG0A0FtBtCtGyEtDyEtCtG0B0F0A0FtGyDyC0CyEtByDyC0C0C0DyC0A2Q&cr=362526228&ir=

*************************

:: "Tracing" Schlüssel gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [10935 Bytes] - [28/03/2016 07:45:28]
C:\AdwCleaner\AdwCleaner[C2].txt - [2688 Bytes] - [28/03/2016 08:21:06]
C:\AdwCleaner\AdwCleaner[C3].txt - [3250 Bytes] - [05/06/2016 04:49:25]
C:\AdwCleaner\AdwCleaner[S1].txt - [12670 Bytes] - [28/03/2016 07:42:32]
C:\AdwCleaner\AdwCleaner[S2].txt - [2477 Bytes] - [28/03/2016 07:50:31]
C:\AdwCleaner\AdwCleaner[S3].txt - [3254 Bytes] - [05/06/2016 04:47:16]

########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt - [3543 Bytes] ##########

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 05.06.2016
Suchlaufzeit: 04:54
Protokolldatei: mbam.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2016.06.04.06
Rootkit-Datenbank: v2016.05.27.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Tobias

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 371873
Abgelaufene Zeit: 14 Min., 22 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)

Ecronika · 05.06.2016, 04:20

FRST - Teil 1

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-06-2016
durchgeführt von Tobias (Administrator) auf TOBIAS-PC (05-06-2016 05:13:50)
Gestartet von C:\Users\Tobias\Desktop
Geladene Profile: Tobias (Verfügbare Profile: Tobias & Lilly)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AOMEI Tech Co., Ltd.) C:\Program Files (x86)\AOMEI Backupper\ABService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(TomTom) C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16475392 2016-05-27] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1340192 2016-01-29] (Microsoft Corporation)
HKLM-x32\...\Run: [AMD AVT] => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595504 2016-01-29] (Oracle Corporation)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] => C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe [55264 2016-03-10] (Malwarebytes)
HKLM Group Policy restriction on software: *.divx*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %programfiles(x86)%\*\svchost.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.bmp*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.ppt*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp3*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.docx*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: syskey.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.pdf*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.wav*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpeg*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp4*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Users\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpg*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.bmp*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.pdf*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.gif*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.txt*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp3*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.pdf*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Users\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.txt*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.xlsx*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpeg*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.xlsx*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.wmv*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.docx*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.7z*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.pub*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.txt*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.txt*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.wma*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.divx*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.docx*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.rar*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.docx*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.rtf*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.zip*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.pub*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp4*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.pptx*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.doc*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpg*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.gif*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp3*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.rar*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.divx*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.docx*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.txt*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.gif*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Users\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.pptx*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: scsvserv.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.doc*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *:\$Recycle.Bin <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Users\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.bmp*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.pub*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.avi*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %allusersprofile%\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.zip*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.divx*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.avi*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.wav*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp4*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.divx*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.gif*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.pub*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.txt*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %allusersprofile%\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.wma*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.wma*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.xlsx*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.xls*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.avi*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.wma*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpeg*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.avi*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.pdf*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp4*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.docx*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpg*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: cipher.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.rtf*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.zip*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.pptx*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.pptx*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.rar*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.wav*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %programfiles%\*\svchost.exe <====== ACHTUNG
HKLM Group Policy restriction on software: ** <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\Appdata\Roaming\Microsoft\Windows\IEUpdate\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.wav*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.zip*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.wmv*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.zip*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %allusersprofile%\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: vssadmin.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.pdf*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpg*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.gif*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.gif*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.7z*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: lsassvrtdbks.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %allusersprofile%\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.pdf*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.txt*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.pdf*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.gif*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: lsassw86s.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp4*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpg*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.xls*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpeg*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.ppt*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.pptx*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.ppt*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.doc*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.rar*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpeg*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.png*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.pub*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.pdf*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.7z*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.divx*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.zip*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.xls*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.ppt*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.wma*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.pptx*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.xlsx*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.doc*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.pptx*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.avi*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpeg*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.xlsx*.js <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Users\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.rtf*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.doc*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.avi*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.wma*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp3*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Users\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.png*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.rar*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.zip*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.7z*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.ppt*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.bmp*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.xlsx*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp3*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.doc*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpg*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.bmp*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.wav*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\*\svchost.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.rtf*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.bmp*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp4*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.wav*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.rtf*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.rar*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp3*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.wmv*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.png*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.xls*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp3*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpg*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.png*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.pub*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpeg*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.png*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.wma*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.divx*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.wav*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.avi*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %allusersprofile%\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.png*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.wmv*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.rar*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.txt*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.bmp*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.wav*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.ppt*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.pub*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.avi*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.xlsx*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.xlsx*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.ppt*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.doc*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %systemdrive%\*\svchost.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.pub*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.xls*.js <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Users\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.bmp*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.wmv*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.rtf*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.docx*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp4*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.png*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.wmv*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %allusersprofile%\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %allusersprofile%\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpeg*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.wmv*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\*\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.png*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.7z*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.xls*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: *.divx*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.wma*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.7z*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.wmv*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.pptx*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.rar*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp4*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.xls*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: *.ppt*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.zip*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.xls*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.doc*.com <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\*.js <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\*.pif <====== ACHTUNG
HKLM Group Policy restriction on software: *.rtf*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %allusersprofile%\*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.docx*.jse <====== ACHTUNG
HKLM Group Policy restriction on software: *.rtf*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.gif*.com <====== ACHTUNG
HKLM Group Policy restriction on software: *.7z*.bat <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\*.exe <====== ACHTUNG
HKLM Group Policy restriction on software: *.7z*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %programdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.cmd <====== ACHTUNG
HKLM Group Policy restriction on software: *.jpg*.js <====== ACHTUNG
HKLM Group Policy restriction on software: *.mp3*.scr <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\tools\expand.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\raptr\raptr-4.4.4-r100182-release.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\desktopiconforamazon\iconforamazon.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\tools\oscdimg.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\desktopiconforamazon\iconforamazon.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\desktopiconforamazon\iconforamazon.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\tools\oscdimg.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\icqm\icq.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\icqm\icqsetup.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\tools\imagex.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\tools\dism.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\pccustubinstaller\pccheckupinstaller.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\pccustubinstaller\pccheckupinstaller.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\raptr\raptr-4.4.4-r100182-release.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\tools\subinacl.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\tools\dism.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\icqm\icqsetup.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\desktopiconforamazon\iconforamazon.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\icqm\icq.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\tools\expand.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\tools\oscdimg.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\tools\dism.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\icqm\icq.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\tools\expand.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\tools\imagex.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\raptr\raptr-4.4.4-r100182-release.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\icqm\icq.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\tools\dism.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\pccustubinstaller\pccheckupinstaller.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\pccustubinstaller\pccheckupinstaller.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\tools\expand.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\tools\imagex.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\tools\subinacl.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\LocalLow\tools\oscdimg.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\raptr\raptr-4.4.4-r100182-release.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\icqm\icqsetup.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %appdata%\tools\subinacl.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\icqm\icqsetup.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Local\tools\imagex.exe <====== ACHTUNG
HKLM Group Policy restriction on software: %userprofile%\AppData\Roaming\tools\subinacl.exe <====== ACHTUNG
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8619224 2016-01-15] (Piriform Ltd)
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [2042144 2016-04-14] (TomTom)
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\Run: [GoogleChromeAutoLaunch_3E029A545A903A02B262797A0B1ADE1D] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [941720 2016-06-01] (Google Inc.)
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {09d516ca-2b55-11e1-997d-806e6f6e6963} - D:\start.exe /auto
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {27cae23b-1441-11e0-9040-806e6f6e6963} - D:\menue.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {84a4c421-15fb-11e0-b25e-00241d273df8} - H:\setup.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {97310e1f-b813-11e2-ad6d-00241d273df8} - I:\Autorun.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {a62ddaff-7d98-11e0-bd82-001150f5aa18} - G:\SamsungKiesInstaller.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {c5f43e28-3797-11e4-bebe-00241d273df8} - I:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {dd8eb564-382c-11e0-b38d-001150f5aa18} - J:\setup.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {e0c6157a-980e-11e3-9036-020406080a0c} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {ffad9440-5ded-11e3-a58d-00241d273df8} - M:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => c:\windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-31] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-31] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-31] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll [2016-05-31] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-31] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-31] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt.34.dll [2016-05-31] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2016-06-05]
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk [2014-09-06]
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2014\mshaktuell.exe ()
BootExecute: autocheck autochk * OODBS

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{C48DADB5-765A-4E89-9F97-A316B5CE6B81}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{CCEC49E1-91C8-4C57-98C4-741F01CAB96B}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> {1C477015-0093-4C46-9DA2-268340024F43} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> {224150C8-9F06-4D96-A51D-44A7951D972C} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> {BB5A6418-A5C3-4C4B-AAC3-DDD9A4902AEA} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> {D982EF7F-7F6A-40C1-80CE-B1FE1977269E} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_91\bin\ssv.dll [2016-05-06] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-05-06] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-05-06] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-05-06] (Oracle Corporation)
Toolbar: HKLM - Kein Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Keine Datei
Toolbar: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> Kein Name - {A13C2648-91D4-4BF3-BC6D-0079707C4389} -  Keine Datei
Toolbar: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> Kein Name - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -  Keine Datei
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPID.cab
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} -  Keine Datei

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-13] ()
FF Plugin: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-05-06] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-05-06] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-13] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2015-12-21] (Adobe Systems, Inc.)
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-05-06] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-05-06] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @TrendMicro.com/FFExtension -> C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension\components\npToolbarChrome.dll [Keine Datei]
FF Plugin-x32: @videolan.org/vlc,version=2.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3455670051-300026812-3451469050-1000: @protectdisc.com/NPPDLicenseHelper -> C:\Users\Tobias\AppData\Roaming\ProtectDisc\License Helper v2\NPPDLicenseHelper.dll [2009-06-25] ( )
FF Plugin HKU\S-1-5-21-3455670051-300026812-3451469050-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Tobias\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-07-09] (Unity Technologies ApS)

Chrome: 
=======
CHR HomePage: Default -> hxxp://taplika.com/?f=1&a=tlk_ir_15_06&cd=2XzuyEtN2Y1L1Qzu0EyC0BzzyEzz0AtA0FtCyEtCtDyCtCyEtN0D0Tzu0StCtCtBzztN1L2XzutAtFyBtFtBtFtDtN1L1CzutCyEtBzytDyD1V1BtAtN1L1G1B1V1N2Y1L1Qzu2SyC0BzzyB0DtB0F0BtGtAyE0AtCtGyDyDyDyCtG0F0BtBtAtGtDyC0FtCtDyDzzzy0C0B0B0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAyD0BtAtByD0EtCtG0A0FtBtCtGyEtDyEtCtG0B0F0A0FtGyDyC0CyEtByDyC0C0C0DyC0A2Q&cr=362526228&ir=
CHR StartupUrls: Default -> "hxxp://taplika.com/?f=7&a=tlk_ir_15_06&cd=2XzuyEtN2Y1L1Qzu0EyC0BzzyEzz0AtA0FtCyEtCtDyCtCyEtN0D0Tzu0StCtCtBzztN1L2XzutAtFyBtFtBtFtDtN1L1CzutCyEtBzytDyD1V1BtAtN1L1G1B1V1N2Y1L1Qzu2SyC0BzzyB0DtB0F0BtGtAyE0AtCtGyDyDyDyCtG0F0BtBtAtGtDyC0FtCtDyDzzzy0C0B0B0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAyD0BtAtByD0EtCtG0A0FtBtCtGyEtDyEtCtG0B0F0A0FtGyDyC0CyEtByDyC0C0C0DyC0A2Q&cr=362526228&ir=","hxxp://myhome.vi-view.com/?type=hp&ts=1422909745&from=cor&uid=M4-CT256M4SSD2_00000000130109243A4E"
CHR Plugin: (Shockwave Flash) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\PepperFlash\11.5.31.138\pepflashplayer.dll => Keine Datei
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll => Keine Datei
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.79\ppGoogleNaClPluginChrome.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.79\pdf.dll => Keine Datei
CHR Plugin: (Free Studio) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.0_0\np_dvs_plugin.dll => Keine Datei
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll => Keine Datei
CHR Plugin: (NPCIG.dll) - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll => Keine Datei
CHR Plugin: (Java(TM) Platform SE 7 U7) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll => Keine Datei
CHR Plugin: (Java Deployment Toolkit 7.0.70.10) - C:\Windows\SysWOW64\npDeployJava1.dll => Keine Datei
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Protect Disc License Acquisition Plugin) - C:\Users\Tobias\AppData\Roaming\ProtectDisc\License Helper v2\NPPDLicenseHelper.dll ( )
CHR Plugin: (Unity Player) - C:\Users\Tobias\Desktop\ENYGUIDE\FirefoxPortable\Data\plugins\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll => Keine Datei
CHR Profile: C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-05]
CHR Extension: (Google Cast) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2016-03-25]
CHR Extension: (Videostream for Google Chromecast™) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnciopoikihiagdjbjpnocolokfelagl [2016-06-05]
CHR Extension: (Google-Suche) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Tampermonkey) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2016-05-28]
CHR Extension: (Logitech Smooth Scrolling) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2016-03-28]
CHR Extension: (Avast Online Security) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-04-06]
CHR Extension: (AntiGameOrigin v6) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfaofnlkooiapdmkbppmpgmjmhkolaeb [2016-05-10]
CHR Extension: (IITC: Ingress intel map total conversion) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmhpdgdggldlaplddgghhiejhmoeehii [2015-04-02]
CHR Extension: (AntiGameOrigin) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldbahlcmhmlpomdepooifmhnalokdhgm [2014-08-30]
CHR Extension: (AntiGameOrigin) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\lofjbjdoaekhachdchonbbdlpklicdbn [2012-10-10]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-03]
CHR Extension: (Google Mail) - C:\Users\Tobias\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR HKLM-x32\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - <kein Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [heoldelcflnigdllmlopiefhkkobendj] - <kein Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - <kein Path/update_url>

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S4 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-04-30] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]
R2 Backupper Service; C:\Program Files (x86)\AOMEI Backupper\ABService.exe [29912 2015-09-15] (AOMEI Tech Co., Ltd.)
S4 hasplms; C:\Windows\system32\hasplms.exe [4180576 2010-09-27] (SafeNet Inc.)
S4 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2016-01-29] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [374344 2016-01-29] (Microsoft Corporation)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1570520 2016-02-02] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [837848 2016-02-02] (Secunia)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7032080 2016-05-12] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S4 Windows Internet Name Service;  [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [30648 2015-02-26] () [Datei ist nicht signiert]
R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11944 2012-12-04] (Advanced Micro Devices Inc.)
R2 ammntdrv; C:\Windows\system32\ammntdrv.sys [151480 2015-02-26] () [Datei ist nicht signiert]
R2 amwrtdrv; C:\Windows\system32\amwrtdrv.sys [17848 2015-02-26] () [Datei ist nicht signiert]
S3 AODDriver; C:\Program Files (x86)\GIGABYTE\ET6\amd64\AODDriver.sys [52280 2010-03-12] (Advanced Micro Devices)
R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
S2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
S2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
S3 AVerAF35; C:\Windows\System32\Drivers\AVerAF35.sys [804992 2013-06-05] (AVerMedia TECHNOLOGIES, Inc.) [Datei ist nicht signiert]
S3 dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys [20552 2010-07-30] (Devguru Co., Ltd)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 GeneStor; C:\Windows\System32\DRIVERS\GeneStor.sys [60928 2012-07-06] (GenesysLogic)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-09-20] ()
S3 HtcVCom32; C:\Windows\System32\DRIVERS\HtcVComV64.sys [121800 2010-03-09] (QUALCOMM Incorporated)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-07-17] (REALiX(tm))
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (EZB Systems, Inc.)
R3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [49304 2014-12-15] (Visicom Media Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-06-05] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation)
R3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35992 2014-12-15] (Visicom Media Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [289120 2015-11-13] (Microsoft Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133816 2015-11-13] (Microsoft Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)
U0 opjrkgaf; C:\Windows\System32\drivers\okucp.sys [79064 2016-06-05] (Malwarebytes)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2016-02-02] (Secunia)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19936 2011-09-02] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [13280 2011-09-02] ()
S3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [3810520 2015-10-08] (Realtek Semiconductor Corporation                           )
R3 rusb3hub; C:\Windows\System32\DRIVERS\rusb3hub.sys [114568 2012-08-27] (Renesas Electronics Corporation)
R3 rusb3xhc; C:\Windows\System32\DRIVERS\rusb3xhc.sys [230280 2012-08-27] (Renesas Electronics Corporation)
R3 Serenum; C:\Windows\System32\DRIVERS\nuvserenum.sys [23552 2014-01-12] (Windows (R) Win 7 DDK provider)
R3 Serial; C:\Windows\System32\DRIVERS\nuvserial.sys [86016 2014-01-12] (Nuvoton Technology Corp.)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [204568 2013-10-28] (DEVGURU Co., LTD.(www.devguru.co.kr))
R1 vmm; C:\Windows\system32\Treiber\vmm.sys [294248 2012-09-02] (Microsoft Corporation)
U3 DfSdkS; kein ImagePath
S4 sptd; System32\Drivers\sptd.sys [X]
U2 TMAgent; kein ImagePath
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-06-05 05:13 - 2016-06-05 05:13 - 00001200 _____ C:\Users\Tobias\Desktop\mbam.txt
2016-06-05 05:13 - 2016-06-05 05:13 - 00000000 ____D C:\Users\Tobias\Desktop\FRST-OlderVersion
2016-06-05 05:11 - 2016-06-05 05:13 - 00000080 _____ C:\Users\Public\Desktop\Die*SimsT*3.lnk
2016-06-05 05:11 - 2016-06-05 05:11 - 00079064 _____ (Malwarebytes) C:\Windows\system32\Drivers\okucp.sys
2016-06-05 05:11 - 2016-06-05 05:11 - 00002822 _____ C:\Windows\Minidump\knpjawbv
2016-06-05 04:53 - 2016-06-05 05:13 - 00001072 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-06-05 04:52 - 2016-06-05 04:52 - 22851472 _____ (Malwarebytes ) C:\Users\Tobias\Downloads\mbam-setup-2.2.1.1043.exe
2016-06-05 04:45 - 2016-06-05 04:45 - 03677248 _____ C:\Users\Tobias\Downloads\AdwCleaner_5.119 (1).exe
2016-06-05 04:45 - 2016-06-05 04:45 - 03677248 _____ C:\Users\Tobias\Desktop\AdwCleaner_5.119.exe
2016-06-04 09:50 - 2016-06-04 09:50 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-06-03 00:42 - 2016-06-04 02:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2016-06-02 19:23 - 2016-06-02 19:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-06-02 19:23 - 2016-06-02 19:23 - 00000000 ____D C:\Program Files\7-Zip
2016-06-02 00:15 - 2016-04-15 23:14 - 09526616 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2016-06-02 00:15 - 2016-04-15 23:14 - 08585696 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2016-06-02 00:15 - 2016-04-15 23:14 - 07394016 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2016-06-02 00:15 - 2016-04-15 23:14 - 00133528 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2016-06-02 00:15 - 2016-04-15 23:14 - 00120656 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2016-06-02 00:15 - 2016-04-15 23:14 - 00102616 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2016-06-02 00:15 - 2016-04-15 23:13 - 08844232 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2016-06-02 00:15 - 2016-04-15 23:11 - 00296648 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdacpksd.sys
2016-06-02 00:15 - 2016-04-15 23:05 - 26345472 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2016-06-02 00:15 - 2016-04-15 22:27 - 30380032 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2016-06-02 00:15 - 2016-04-15 22:27 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2016-06-02 00:15 - 2016-04-15 22:27 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2016-06-02 00:15 - 2016-04-15 22:21 - 25070080 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2016-06-02 00:15 - 2016-04-15 22:20 - 00097280 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2016-06-02 00:15 - 2016-04-15 22:20 - 00089600 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2016-06-02 00:15 - 2016-04-15 22:19 - 00367104 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2016-06-02 00:15 - 2016-04-15 22:15 - 00224256 _____ C:\Windows\system32\dgtrayicon.exe
2016-06-02 00:15 - 2016-04-15 22:15 - 00209920 _____ C:\Windows\system32\GameManager64.dll
2016-06-02 00:15 - 2016-04-15 22:15 - 00186368 _____ C:\Windows\SysWOW64\GameManager32.dll
2016-06-02 00:15 - 2016-04-15 22:15 - 00162304 _____ C:\Windows\system32\atieah64.exe
2016-06-02 00:15 - 2016-04-15 22:15 - 00145408 _____ C:\Windows\SysWOW64\atieah32.exe
2016-06-02 00:15 - 2016-04-15 22:14 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2016-06-02 00:15 - 2016-04-15 22:12 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2016-06-02 00:15 - 2016-04-15 22:12 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2016-06-02 00:15 - 2016-04-15 22:10 - 00676864 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2016-06-02 00:15 - 2016-04-15 22:10 - 00195072 _____ C:\Windows\system32\hsa-thunk64.dll
2016-06-02 00:15 - 2016-04-15 22:10 - 00174592 _____ C:\Windows\SysWOW64\hsa-thunk.dll
2016-06-02 00:15 - 2015-11-04 06:20 - 00009184 _____ C:\Windows\system32\AMDKernelEvents.man
2016-06-02 00:14 - 2016-04-15 23:15 - 00141792 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdhcp64.dll
2016-06-02 00:14 - 2016-04-15 23:15 - 00128384 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdhcp32.dll
2016-06-02 00:14 - 2016-04-15 23:15 - 00110880 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2016-06-02 00:14 - 2016-04-15 23:15 - 00102616 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2016-06-02 00:14 - 2016-04-15 23:15 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2016-06-02 00:14 - 2016-04-15 23:15 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2016-06-02 00:14 - 2016-04-15 23:15 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2016-06-02 00:14 - 2016-04-15 23:15 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2016-06-02 00:14 - 2016-04-15 23:14 - 09588416 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2016-06-02 00:14 - 2016-04-15 23:14 - 01248000 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2016-06-02 00:14 - 2016-04-15 22:57 - 06956032 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdvlk64.dll
2016-06-02 00:14 - 2016-04-15 22:54 - 48212480 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2016-06-02 00:14 - 2016-04-15 22:54 - 00235008 _____ C:\Windows\system32\clinfo.exe
2016-06-02 00:14 - 2016-04-15 22:53 - 05420032 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdvlk32.dll
2016-06-02 00:14 - 2016-04-15 22:52 - 40126976 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2016-06-02 00:14 - 2016-04-15 22:51 - 00065024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2016-06-02 00:14 - 2016-04-15 22:51 - 00059392 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2016-06-02 00:14 - 2016-04-15 22:49 - 26886656 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl12cl64.dll
2016-06-02 00:14 - 2016-04-15 22:49 - 21730304 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl12cl.dll
2016-06-02 00:14 - 2016-04-15 22:28 - 00701440 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr64.dll
2016-06-02 00:14 - 2016-04-15 22:28 - 00580096 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdlvr32.dll
2016-06-02 00:14 - 2016-04-15 22:27 - 06884864 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll
2016-06-02 00:14 - 2016-04-15 22:24 - 00865280 _____ (AMD) C:\Windows\system32\coinst_16.15.dll
2016-06-02 00:14 - 2016-04-15 22:24 - 00050688 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2016-06-02 00:14 - 2016-04-15 22:24 - 00039424 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll
2016-06-02 00:14 - 2016-04-15 22:23 - 05398016 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll
2016-06-02 00:14 - 2016-04-15 22:22 - 03437632 _____ C:\Windows\system32\atiumd6a.cap
2016-06-02 00:14 - 2016-04-15 22:19 - 15711744 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2016-06-02 00:14 - 2016-04-15 22:19 - 00698768 _____ C:\Windows\SysWOW64\atiapfxx.blb
2016-06-02 00:14 - 2016-04-15 22:19 - 00698768 _____ C:\Windows\system32\atiapfxx.blb
2016-06-02 00:14 - 2016-04-15 22:19 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2016-06-02 00:14 - 2016-04-15 22:19 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2016-06-02 00:14 - 2016-04-15 22:19 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2016-06-02 00:14 - 2016-04-15 22:19 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2016-06-02 00:14 - 2016-04-15 22:18 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2016-06-02 00:14 - 2016-04-15 22:17 - 03471376 _____ C:\Windows\SysWOW64\atiumdva.cap
2016-06-02 00:14 - 2016-04-15 22:15 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2016-06-02 00:14 - 2016-04-15 22:15 - 00204800 _____ C:\Windows\system32\amdgfxinfo64.dll
2016-06-02 00:14 - 2016-04-15 22:15 - 00189952 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll
2016-06-02 00:14 - 2016-04-15 22:15 - 00078336 _____ (AMD) C:\Windows\system32\atimuixx.dll
2016-06-02 00:14 - 2016-04-15 22:11 - 01276416 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2016-06-02 00:14 - 2016-04-15 22:11 - 00944640 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2016-06-02 00:14 - 2016-04-15 22:11 - 00944640 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll
2016-06-02 00:14 - 2016-04-15 22:11 - 00157696 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2016-06-02 00:14 - 2016-04-15 22:11 - 00142336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2016-06-02 00:14 - 2016-04-15 22:11 - 00075776 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2016-06-02 00:14 - 2016-04-15 22:11 - 00070144 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2016-06-02 00:14 - 2016-04-15 22:11 - 00070144 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2016-06-02 00:14 - 2016-04-15 22:11 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2016-06-02 00:14 - 2016-03-16 12:49 - 00857576 _____ C:\Windows\system32\amdicdxx.dat
2016-06-02 00:14 - 2016-02-01 20:52 - 00254804 _____ C:\Windows\system32\ativvaxy_FJ.dat
2016-06-02 00:14 - 2016-02-01 20:51 - 00251856 _____ C:\Windows\system32\ativvaxy_FJ_nd.dat
2016-06-02 00:14 - 2016-02-01 20:49 - 00322612 _____ C:\Windows\system32\ativvaxy_vi.dat
2016-06-02 00:14 - 2016-02-01 20:48 - 00320944 _____ C:\Windows\system32\ativvaxy_vi_nd.dat
2016-06-02 00:14 - 2016-02-01 20:46 - 00264736 _____ C:\Windows\system32\ativvaxy_stn_nd.dat
2016-06-02 00:14 - 2016-02-01 20:44 - 00260640 _____ C:\Windows\system32\ativvaxy_cz_nd.dat
2016-06-02 00:14 - 2016-01-29 23:02 - 00175584 _____ C:\Windows\system32\amde31a.dat
2016-06-02 00:14 - 2016-01-25 20:42 - 00365824 _____ C:\Windows\system32\ativvaxy_el_nd.dat
2016-06-02 00:14 - 2016-01-19 16:56 - 00234292 _____ C:\Windows\system32\ativvaxy_cik.dat
2016-06-02 00:14 - 2016-01-19 16:49 - 00232496 _____ C:\Windows\system32\ativvaxy_cik_nd.dat
2016-06-02 00:14 - 2016-01-18 21:04 - 00166624 _____ C:\Windows\system32\amde34b.dat
2016-06-02 00:14 - 2016-01-18 21:04 - 00166624 _____ C:\Windows\system32\amde34a.dat
2016-06-02 00:14 - 2016-01-11 19:31 - 00177280 _____ C:\Windows\system32\ativce03.dat
2016-06-02 00:14 - 2015-12-16 23:06 - 00000144 _____ C:\Windows\system32\amd-vulkan64.json
2016-06-02 00:14 - 2015-12-15 19:54 - 00000144 _____ C:\Windows\SysWOW64\amd-vulkan32.json
2016-06-02 00:13 - 2016-05-27 08:54 - 05994966 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2016-06-02 00:13 - 2016-05-27 08:54 - 05089536 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2016-06-02 00:13 - 2016-05-27 08:54 - 03283248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 03282544 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 03199232 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 03095224 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 02895104 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2016-06-02 00:13 - 2016-05-27 08:54 - 02060032 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 02050184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 01355616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00914024 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00768824 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBAPO32.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00689888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00574760 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00532384 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00410040 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00387320 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00343712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00330568 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00221976 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00214840 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00209536 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00192984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00166208 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00122328 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00118600 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00110992 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00088352 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00074608 _____ (Creative Technology Ltd.) C:\Windows\system32\MBppld64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00069928 _____ (Creative Technology Ltd.) C:\Windows\system32\MBPPCn64.dll
2016-06-02 00:13 - 2016-05-27 08:54 - 00023696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2016-06-02 00:13 - 2011-02-04 16:53 - 00092672 _____ (Point Grey Research) C:\Windows\system32\Drivers\PGR1394.sys
2016-06-02 00:12 - 2016-04-21 09:03 - 01028352 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2016-06-02 00:12 - 2016-04-21 09:03 - 00082544 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2016-05-30 22:07 - 2016-05-30 22:16 - 08709731 _____ C:\Users\Tobias\Downloads\gsb-10-8-2-li--manual-193213 (1).pdf
2016-05-30 22:06 - 2016-05-30 22:20 - 12097373 _____ C:\Users\Tobias\Downloads\gsr-10-8-v-ec--manual-161866.pdf
2016-05-30 21:50 - 2016-05-30 21:50 - 00000000 ____D C:\Users\Tobias\Downloads\SDI_R453
2016-05-30 21:49 - 2016-05-30 21:50 - 03655710 _____ C:\Users\Tobias\Downloads\SDI_R453.zip
2016-05-29 17:37 - 2016-05-29 17:37 - 06234037 _____ C:\Users\Tobias\Downloads\03-F_TCS_VK_06_12_12_150dpi.pdf
2016-05-29 17:37 - 2016-05-29 17:37 - 04935935 _____ C:\Users\Tobias\Downloads\Verbrauchskatalog_2014_DF.pdf
2016-05-29 17:35 - 2016-05-29 17:35 - 00497643 _____ C:\Users\Tobias\Downloads\2 Kia Genf 2011 Neuer Rio.pdf
2016-05-28 08:04 - 2016-05-28 08:04 - 01202749 _____ C:\Users\Tobias\Documents\Paul, Tobias - Einkommensteuer 2015 - ELSTER Einkommensteuererklärung - Meine Kopie.pdf
2016-05-28 08:03 - 2016-05-28 08:03 - 00170488 _____ C:\Users\Tobias\Documents\Einkommensteuererklärung 2015 - Einkommensteuererklärung.pdf
2016-05-28 08:03 - 2016-05-28 08:03 - 00050665 _____ C:\Users\Tobias\Documents\Checkliste - Einkommensteuererklärung.pdf
2016-05-28 08:00 - 2016-05-28 08:00 - 01023347 _____ C:\Users\Tobias\Documents\Paul, Tobias - Einkommensteuer 2015 - ELSTER Einkommensteuererklärung 2015 - An das Finanzamt.pdf
2016-05-27 19:43 - 2016-05-27 19:43 - 00000000 ____D C:\Program Files (x86)\ESET
2016-05-27 15:24 - 2016-05-27 15:24 - 02870984 _____ (ESET) C:\Users\Tobias\Downloads\esetsmartinstaller_deu.exe
2016-05-25 21:38 - 2016-05-25 21:38 - 01233770 _____ C:\Users\Tobias\Downloads\LED-Broschuere_Theben_de.pdf
2016-05-22 15:13 - 2016-05-22 15:14 - 00080742 _____ C:\Users\Tobias\Desktop\Addition.txt
2016-05-22 15:12 - 2016-06-05 05:13 - 00058521 _____ C:\Users\Tobias\Desktop\FRST.txt
2016-05-22 15:12 - 2016-06-05 05:13 - 00000000 ____D C:\FRST
2016-05-22 15:11 - 2016-06-05 05:13 - 02384384 _____ (Farbar) C:\Users\Tobias\Desktop\FRST64.exe
2016-05-22 13:09 - 2016-05-22 13:09 - 00000000 ____D C:\Users\Tobias\Documents\steuer
2016-05-22 13:01 - 2016-06-05 05:13 - 00002059 _____ C:\Users\Public\Desktop\WISO steuer Sparbuch 2016.lnk
2016-05-22 13:00 - 2016-05-22 13:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WISO steuer Sparbuch 2016
2016-05-11 23:10 - 2016-04-23 19:08 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-05-11 23:10 - 2016-04-23 18:24 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-05-11 23:10 - 2016-04-23 07:25 - 25816064 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-05-11 23:10 - 2016-04-23 07:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-05-11 23:10 - 2016-04-23 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-05-11 23:10 - 2016-04-23 07:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-05-11 23:10 - 2016-04-23 07:00 - 02893312 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-05-11 23:10 - 2016-04-23 07:00 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-05-11 23:10 - 2016-04-23 07:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-05-11 23:10 - 2016-04-23 07:00 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-05-11 23:10 - 2016-04-23 07:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-05-11 23:10 - 2016-04-23 06:52 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-05-11 23:10 - 2016-04-23 06:51 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-05-11 23:10 - 2016-04-23 06:48 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-05-11 23:10 - 2016-04-23 06:47 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-05-11 23:10 - 2016-04-23 06:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-05-11 23:10 - 2016-04-23 06:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-05-11 23:10 - 2016-04-23 06:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-05-11 23:10 - 2016-04-23 06:46 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-05-11 23:10 - 2016-04-23 06:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-05-11 23:10 - 2016-04-23 06:36 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-05-11 23:10 - 2016-04-23 06:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-05-11 23:10 - 2016-04-23 06:27 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-05-11 23:10 - 2016-04-23 06:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-05-11 23:10 - 2016-04-23 06:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-05-11 23:10 - 2016-04-23 06:21 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-05-11 23:10 - 2016-04-23 06:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-05-11 23:10 - 2016-04-23 06:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-05-11 23:10 - 2016-04-23 06:11 - 20350464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-05-11 23:10 - 2016-04-23 06:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-05-11 23:10 - 2016-04-23 06:08 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-05-11 23:10 - 2016-04-23 06:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-05-11 23:10 - 2016-04-23 06:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-05-11 23:10 - 2016-04-23 06:07 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-05-11 23:10 - 2016-04-23 06:07 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-05-11 23:10 - 2016-04-23 06:07 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-05-11 23:10 - 2016-04-23 06:06 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-05-11 23:10 - 2016-04-23 06:06 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-05-11 23:10 - 2016-04-23 06:05 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-05-11 23:10 - 2016-04-23 06:04 - 02285568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-05-11 23:10 - 2016-04-23 06:02 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-05-11 23:10 - 2016-04-23 06:01 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-05-11 23:10 - 2016-04-23 06:00 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-05-11 23:10 - 2016-04-23 05:59 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-05-11 23:10 - 2016-04-23 05:58 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-05-11 23:10 - 2016-04-23 05:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-05-11 23:10 - 2016-04-23 05:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-05-11 23:10 - 2016-04-23 05:51 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-05-11 23:10 - 2016-04-23 05:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-05-11 23:10 - 2016-04-23 05:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-05-11 23:10 - 2016-04-23 05:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-05-11 23:10 - 2016-04-23 05:43 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-05-11 23:10 - 2016-04-23 05:41 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-05-11 23:10 - 2016-04-23 05:40 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-05-11 23:10 - 2016-04-23 05:39 - 01547776 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-05-11 23:10 - 2016-04-23 05:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-05-11 23:10 - 2016-04-23 05:36 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-05-11 23:10 - 2016-04-23 05:33 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-05-11 23:10 - 2016-04-23 05:31 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-05-11 23:10 - 2016-04-23 05:30 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-05-11 23:10 - 2016-04-23 05:30 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-05-11 23:10 - 2016-04-23 05:28 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-05-11 23:10 - 2016-04-23 05:26 - 13811200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-05-11 23:10 - 2016-04-23 05:12 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-05-11 23:10 - 2016-04-23 05:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-05-11 23:10 - 2016-04-23 05:07 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-05-11 23:10 - 2016-04-14 15:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-05-11 23:10 - 2016-04-14 15:21 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-05-11 23:10 - 2016-04-09 09:01 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-05-11 23:10 - 2016-04-09 09:01 - 00264936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-05-11 23:10 - 2016-04-09 08:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-05-11 23:10 - 2016-04-09 08:57 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-05-11 23:10 - 2016-04-09 08:57 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-05-11 23:10 - 2016-04-09 08:54 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-05-11 23:10 - 2016-04-09 08:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-05-11 23:10 - 2016-04-09 07:49 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-05-11 23:10 - 2016-04-06 17:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-05-11 23:10 - 2016-03-09 20:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-05-11 23:10 - 2016-03-09 20:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-05-11 23:08 - 2016-04-09 09:02 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-05-11 23:08 - 2016-04-09 09:01 - 05546216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-05-11 23:08 - 2016-04-09 09:01 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-05-11 23:08 - 2016-04-09 09:01 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-05-11 23:08 - 2016-04-09 09:01 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-05-11 23:08 - 2016-04-09 08:59 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-05-11 23:08 - 2016-04-09 08:59 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-05-11 23:08 - 2016-04-09 08:59 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-05-11 23:08 - 2016-04-09 08:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 07:52 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-05-11 23:08 - 2016-04-09 07:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-05-11 23:08 - 2016-04-09 07:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-05-11 23:08 - 2016-04-09 07:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-05-11 23:08 - 2016-04-09 07:48 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-05-11 23:08 - 2016-04-09 07:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-05-11 23:08 - 2016-04-09 07:44 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-05-11 23:08 - 2016-04-09 07:44 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-05-11 23:08 - 2016-04-09 07:44 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-05-11 23:08 - 2016-04-09 07:43 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-05-11 23:08 - 2016-04-09 07:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-05-11 23:08 - 2016-04-09 07:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-05-11 23:08 - 2016-04-09 07:38 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-05-11 23:08 - 2016-04-09 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-05-11 23:08 - 2016-04-09 07:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-05-11 23:08 - 2016-04-09 07:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-05-11 23:08 - 2016-04-09 07:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-05-11 23:08 - 2016-04-09 07:37 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 07:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 07:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 07:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-05-11 23:08 - 2016-04-09 06:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-05-11 23:08 - 2016-04-09 05:52 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-05-10 19:21 - 2016-05-10 19:21 - 00479944 _____ C:\Users\Tobias\Downloads\Datasheet LINEARdrive 200W 8A DC v2.2.pdf
2016-05-10 18:24 - 2016-05-10 18:24 - 00039404 _____ C:\Users\Tobias\Downloads\SLV_Datenblatt_229740_2016-05-10_1824.pdf
2016-05-10 18:18 - 2016-05-10 18:19 - 00037905 _____ C:\Users\Tobias\Downloads\SLV_Datenblatt_227418_2016-05-10_1818.pdf
2016-05-06 03:08 - 2016-05-06 03:08 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-05-06 03:07 - 2016-05-06 03:05 - 00110144 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-64.dll
2016-05-06 03:05 - 2016-05-06 03:05 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2016-05-06 03:05 - 2016-05-06 03:05 - 00000000 ____D C:\Program Files\Java

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-06-05 05:13 - 2016-04-09 20:56 - 00001808 _____ C:\Users\Public\Desktop\StriePlan.lnk
2016-06-05 05:13 - 2016-03-25 22:15 - 00001176 _____ C:\Users\Public\Desktop\CryptoPrevent.lnk
2016-06-05 05:13 - 2016-03-23 01:10 - 00002471 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-06-05 05:13 - 2016-03-23 01:10 - 00002009 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2016-06-05 05:13 - 2016-03-12 10:56 - 00001462 _____ C:\Users\Public\Desktop\LibreOffice 5.0.lnk
2016-06-05 05:13 - 2016-03-12 10:40 - 00001053 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-06-05 05:13 - 2016-03-12 10:40 - 00001035 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-06-05 05:13 - 2016-03-12 10:31 - 00001029 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2016-06-05 05:13 - 2016-03-12 00:21 - 00001021 _____ C:\Users\Public\Desktop\AOMEI Backupper Standard.lnk
2016-06-05 05:13 - 2016-02-29 01:18 - 00002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2016-06-05 05:13 - 2016-02-25 23:39 - 00001728 _____ C:\Users\Public\Desktop\Defraggler.lnk
2016-06-05 05:13 - 2016-02-22 17:04 - 00002015 _____ C:\Users\Public\Desktop\SSDlife Pro.lnk
2016-06-05 05:13 - 2016-02-15 01:04 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-06-05 05:13 - 2016-02-04 00:45 - 00002723 _____ C:\Users\Public\Desktop\Skype.lnk
2016-06-05 05:13 - 2016-01-02 23:35 - 00000935 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk
2016-06-05 05:13 - 2016-01-02 23:35 - 00000917 _____ C:\Users\Public\Desktop\TeamViewer 11.lnk
2016-06-05 05:13 - 2015-12-21 18:36 - 00001006 _____ C:\Users\Public\Desktop\KFE-Konverter.lnk
2016-06-05 05:13 - 2015-12-21 18:36 - 00000989 _____ C:\Users\Public\Desktop\KFE-Viewer.lnk
2016-06-05 05:13 - 2015-11-19 00:58 - 00002446 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2016-06-05 05:13 - 2015-11-19 00:58 - 00001340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2016-06-05 05:13 - 2015-11-19 00:58 - 00001267 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2016-06-05 05:13 - 2015-08-05 12:28 - 00001024 _____ C:\Users\Public\Desktop\Driver Fusion.lnk
2016-06-05 05:13 - 2015-08-05 11:54 - 00001199 _____ C:\Users\Public\Desktop\Wise Registry Cleaner.lnk
2016-06-05 05:13 - 2015-06-21 09:00 - 00000966 _____ C:\Users\Public\Desktop\TomTom MyDrive Connect.lnk
2016-06-05 05:13 - 2015-06-19 19:30 - 00002059 _____ C:\Users\Public\Desktop\WISO Steuer-Sparbuch 2015.lnk
2016-06-05 05:13 - 2015-06-05 03:13 - 00002122 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2016-06-05 05:13 - 2015-05-01 00:02 - 00001752 _____ C:\Users\Public\Desktop\BPS650.lnk
2016-06-05 05:13 - 2015-02-28 11:27 - 00000992 _____ C:\Users\Public\Desktop\BanCo-Ticker 6.lnk
2016-06-05 05:13 - 2015-02-28 11:27 - 00000973 _____ C:\Users\Public\Desktop\ALF-BanCo 6.lnk
2016-06-05 05:13 - 2015-02-02 22:42 - 00001973 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader.lnk
2016-06-05 05:13 - 2015-02-02 22:42 - 00001909 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Deinstallationsprogramm.lnk
2016-06-05 05:13 - 2015-02-02 22:42 - 00001886 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk
2016-06-05 05:13 - 2014-11-14 17:40 - 00001690 _____ C:\Users\Public\Desktop\Elektronischer Magnetplaner.lnk
2016-06-05 05:13 - 2014-09-06 00:23 - 00002059 _____ C:\Users\Public\Desktop\WISO Steuer-Sparbuch 2014.lnk
2016-06-05 05:13 - 2014-09-02 21:14 - 00002177 _____ C:\Users\Public\Desktop\DWG TrueView 2015 - English.lnk
2016-06-05 05:13 - 2014-05-12 00:25 - 00001032 _____ C:\Users\Public\Desktop\Exact Audio Copy.lnk
2016-06-05 05:13 - 2014-04-02 23:58 - 00000907 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2016-06-05 05:13 - 2014-04-02 23:10 - 00000961 _____ C:\Users\Public\Desktop\UltraISO.lnk
2016-06-05 05:13 - 2014-04-02 22:54 - 00001905 _____ C:\Users\Public\Desktop\CDBurnerXP.lnk
2016-06-05 05:13 - 2014-04-02 22:54 - 00001861 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
2016-06-05 05:13 - 2013-12-27 04:06 - 00002016 _____ C:\Users\Public\Desktop\MechWarrior Online.lnk
2016-06-05 05:13 - 2013-10-29 01:19 - 00001673 _____ C:\Users\Public\Desktop\Hager Katalog 2010.lnk
2016-06-05 05:13 - 2013-10-29 01:19 - 00001655 _____ C:\Users\Public\Desktop\Elcom 5.1.lnk
2016-06-05 05:13 - 2013-10-19 16:02 - 00000989 _____ C:\Users\Public\Desktop\PDFCreator.lnk
2016-06-05 05:13 - 2013-10-03 12:47 - 00001793 _____ C:\Users\Public\Desktop\WSCAD  2012 - Demoversion.lnk
2016-06-05 05:13 - 2013-10-02 21:59 - 00000961 _____ C:\Users\Public\Desktop\ProfiCAD.lnk
2016-06-05 05:13 - 2013-09-08 10:55 - 00000836 _____ C:\Users\Public\Desktop\RailDesigner 5.lnk
2016-06-05 05:13 - 2013-07-21 00:13 - 00001290 _____ C:\Users\Public\Desktop\Belegschnellerfassung.lnk
2016-06-05 05:13 - 2013-07-21 00:13 - 00001153 _____ C:\Users\Public\Desktop\WISO Mein Geld 2013.lnk
2016-06-05 05:13 - 2013-06-30 16:29 - 00001075 _____ C:\Users\Public\Desktop\DriveImage XML.lnk
2016-06-05 05:13 - 2013-02-13 15:23 - 00002059 _____ C:\Users\Public\Desktop\WISO Steuer-Sparbuch 2013.lnk
2016-06-05 05:13 - 2013-02-11 00:43 - 00001718 _____ C:\Users\Public\Desktop\Semiolog.lnk
2016-06-05 05:13 - 2012-11-10 23:58 - 00001697 _____ C:\Users\Public\Desktop\Zplan21.lnk
2016-06-05 05:13 - 2012-11-09 22:47 - 00001308 _____ C:\Users\Public\Desktop\ArcaniA - Gothic 4.lnk
2016-06-05 05:13 - 2012-10-10 17:24 - 00002149 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-06-05 05:13 - 2012-10-07 22:22 - 00001958 _____ C:\Users\Public\Desktop\Philips_Cat.lnk
2016-06-05 05:13 - 2012-08-31 13:06 - 00001851 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Virtual PC.lnk
2016-06-05 05:13 - 2012-08-07 21:28 - 00000948 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-06-05 05:13 - 2012-06-25 20:27 - 00001254 _____ C:\Users\Public\Desktop\ZoomBrowser EX.lnk
2016-06-05 05:13 - 2012-06-25 20:26 - 00001104 _____ C:\Users\Public\Desktop\Digital Photo Professional.lnk
2016-06-05 05:13 - 2012-06-25 20:26 - 00001063 _____ C:\Users\Public\Desktop\Picture Style Editor.lnk
2016-06-05 05:13 - 2012-06-25 20:26 - 00001025 _____ C:\Users\Public\Desktop\EOS Utility.lnk
2016-06-05 05:13 - 2012-03-12 20:50 - 00002057 _____ C:\Users\Public\Desktop\WISO Steuer-Sparbuch 2012.lnk
2016-06-05 05:13 - 2011-10-01 10:01 - 00000995 _____ C:\Users\Public\Desktop\Biet-O-Matic.lnk
2016-06-05 05:13 - 2011-08-30 22:06 - 00001966 _____ C:\Users\Public\Desktop\ET6.lnk
2016-06-05 05:13 - 2011-07-26 18:13 - 00001109 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2016-06-05 05:13 - 2011-06-01 22:50 - 00002083 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\POV-Ray for Windows.lnk
2016-06-05 05:13 - 2011-03-05 21:31 - 00001091 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2016-06-05 05:13 - 2011-01-30 23:00 - 00001418 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2016-06-05 05:13 - 2011-01-18 23:42 - 00001262 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paint.NET.lnk
2016-06-05 05:13 - 2011-01-18 23:42 - 00001244 _____ C:\Users\Public\Desktop\Paint.NET.lnk
2016-06-05 05:13 - 2011-01-18 21:01 - 00002047 _____ C:\Users\Public\Desktop\WISO Steuer-Sparbuch 2011.lnk
2016-06-05 05:13 - 2011-01-17 14:50 - 00002266 _____ C:\Users\Public\Desktop\Creative-Produktregistrierung.lnk
2016-06-05 05:13 - 2010-12-30 21:33 - 00001113 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk
2016-06-05 05:13 - 2010-12-30 20:20 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-06-05 05:13 - 2010-12-30 20:20 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-06-05 05:13 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-06-05 05:13 - 2009-07-14 06:57 - 00001352 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
2016-06-05 05:13 - 2009-07-14 06:57 - 00001330 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2016-06-05 05:13 - 2009-07-14 06:57 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2016-06-05 05:13 - 2009-07-14 06:54 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2016-06-05 05:12 - 2015-12-26 13:12 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps
2016-06-05 05:12 - 2015-11-19 00:57 - 00002180 _____ C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2016-06-05 05:12 - 2014-08-30 20:53 - 00001664 _____ C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\ICQ.lnk
2016-06-05 05:12 - 2011-06-12 08:02 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-06-05 05:12 - 2010-12-30 20:23 - 00001421 _____ C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-06-05 05:12 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-06-05 05:12 - 2009-07-14 07:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2016-06-05 05:12 - 2009-07-14 06:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2016-06-05 05:11 - 2015-12-31 15:34 - 00001328 _____ C:\Users\Tobias\Desktop\Saleen FolderSync.lnk
2016-06-05 05:11 - 2015-12-26 13:11 - 00002261 _____ C:\Users\Tobias\Desktop\Chrome App Launcher.lnk
2016-06-05 05:11 - 2015-10-20 17:41 - 00001881 _____ C:\Users\Tobias\Desktop\SonyEditor.lnk
2016-06-05 05:11 - 2015-05-16 19:59 - 00002199 _____ C:\Users\Tobias\Desktop\RT 7 Lite (64-Bit).lnk
2016-06-05 05:11 - 2015-05-16 19:25 - 00002568 _____ C:\Users\Tobias\Desktop\Windows 7 USB DVD Download Tool.lnk
2016-06-05 05:11 - 2015-01-02 04:39 - 00000975 _____ C:\Users\Tobias\Desktop\Kabel++ Light.lnk
2016-06-05 05:11 - 2014-12-24 00:25 - 00002152 _____ C:\Users\Tobias\Desktop\Tomb Raider [2013] Collectors Edition.lnk
2016-06-05 05:11 - 2014-12-07 16:42 - 00000954 _____ C:\Users\Tobias\Desktop\LiveStreamingApp.lnk
2016-06-05 05:11 - 2014-08-30 20:53 - 00001806 _____ C:\Users\Tobias\Desktop\ICQ.lnk
2016-06-05 05:11 - 2014-08-04 20:58 - 00000995 _____ C:\Users\Tobias\Desktop\QuickGamma.lnk
2016-06-05 05:11 - 2014-01-01 09:08 - 00000927 _____ C:\Users\Tobias\Desktop\HTTrack Website Copier.lnk
2016-06-05 05:11 - 2013-11-03 13:32 - 00001838 _____ C:\Users\Tobias\Desktop\TS3.exe - Verknüpfung.lnk
2016-06-05 05:11 - 2013-09-27 09:40 - 00000881 _____ C:\Users\Tobias\Desktop\HTML Editor.lnk
2016-06-05 05:11 - 2012-12-28 01:42 - 00000868 _____ C:\Users\Tobias\Desktop\Handbrake.lnk
2016-06-05 05:11 - 2012-11-12 01:21 - 00000967 _____ C:\Users\Tobias\Desktop\SpeedFan.lnk
2016-06-05 05:11 - 2012-10-10 17:24 - 00002209 _____ C:\Users\Tobias\Desktop\Google Chrome.lnk
2016-06-05 05:11 - 2012-08-04 18:24 - 00001288 _____ C:\Users\Tobias\Desktop\Norton Installation Files.lnk
2016-06-05 05:11 - 2011-11-02 21:00 - 00002911 _____ C:\Users\Tobias\Desktop\RITTO USB Parametriersoftware 17831.lnk
2016-06-05 05:11 - 2011-09-11 12:41 - 00001308 _____ C:\Users\Tobias\Desktop\Norton-Installationsdateien.lnk
2016-06-05 05:11 - 2011-06-19 19:50 - 00001021 _____ C:\Users\Tobias\Desktop\Dropbox.lnk
2016-06-05 05:11 - 2011-06-01 22:50 - 00002095 _____ C:\Users\Tobias\Desktop\POV-Ray v3.6.lnk
2016-06-05 05:11 - 2011-04-12 16:07 - 00000000 ____D C:\Windows\Minidump
2016-06-05 05:11 - 2011-01-06 01:04 - 00001611 _____ C:\Users\Tobias\Desktop\DivX Movies.lnk
2016-06-05 05:03 - 2009-07-14 06:45 - 00023248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-06-05 05:03 - 2009-07-14 06:45 - 00023248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-06-05 04:57 - 2009-07-14 19:58 - 00670822 _____ C:\Windows\system32\perfh007.dat
2016-06-05 04:57 - 2009-07-14 19:58 - 00138946 _____ C:\Windows\system32\perfc007.dat
2016-06-05 04:57 - 2009-07-14 07:13 - 01537930 _____ C:\Windows\system32\PerfStringBackup.INI
2016-06-05 04:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-06-05 04:54 - 2015-02-03 00:37 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-06-05 04:53 - 2015-02-03 00:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-06-05 04:53 - 2015-02-03 00:36 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-06-05 04:51 - 2010-12-31 02:20 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-06-05 04:50 - 2016-03-12 10:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-06-05 04:50 - 2016-03-12 02:03 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-06-05 04:50 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-06-05 04:49 - 2016-03-28 07:42 - 00000000 ____D C:\AdwCleaner
2016-06-05 04:48 - 2015-02-28 11:27 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\ALFBanCo6
2016-06-05 04:48 - 2015-02-28 11:27 - 00000000 ____D C:\ProgramData\AlfBanCo6
2016-06-05 04:48 - 2011-06-19 19:50 - 00000000 ___RD C:\Users\Tobias\Dropbox
2016-06-05 04:19 - 2015-06-19 16:09 - 00001228 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3455670051-300026812-3451469050-1000UA.job
2016-06-05 04:12 - 2015-06-19 16:09 - 00001176 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3455670051-300026812-3451469050-1000Core.job
2016-06-04 09:50 - 2011-06-19 19:48 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\Dropbox
2016-06-02 23:03 - 2010-12-30 21:33 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\foobar2000
2016-06-02 00:14 - 2015-08-10 21:00 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2016-06-01 18:55 - 2014-09-01 22:40 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2016-05-30 21:55 - 2011-02-18 09:19 - 00000000 ____D C:\Users\Tobias\AppData\Local\CrashDumps
2016-05-27 23:13 - 2012-08-07 21:30 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\vlc
2016-05-26 16:31 - 2013-10-29 00:45 - 00000000 ____D C:\Program Files (x86)\MyDrive Connect
2016-05-26 03:00 - 2016-03-26 02:22 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-05-26 03:00 - 2016-03-26 02:22 - 00000000 ___SD C:\Windows\system32\GWX
2016-05-22 13:07 - 2011-01-16 23:01 - 00001256 _____ C:\Windows\wiso.ini
2016-05-22 13:01 - 2011-01-16 22:58 - 00000000 ____D C:\Users\Tobias\AppData\Local\Buhl
2016-05-22 12:57 - 2011-01-16 22:56 - 00000000 ____D C:\Program Files (x86)\WISO
2016-05-22 12:57 - 2010-12-30 20:38 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-05-15 21:54 - 2016-03-23 01:10 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-05-13 20:28 - 2016-03-12 02:03 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-05-13 20:28 - 2016-03-12 02:03 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-05-13 20:28 - 2016-03-12 02:03 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-05-13 03:00 - 2014-12-22 14:02 - 00000000 ____D C:\Windows\system32\appraiser
2016-05-12 12:39 - 2012-09-30 20:31 - 00000000 ____D C:\Windows\rescache
2016-05-12 12:09 - 2016-02-03 23:45 - 00000000 ____D C:\Users\Tobias\.oracle_jre_usage
2016-05-12 03:22 - 2012-07-29 17:12 - 00408368 _____ C:\Windows\system32\FNTCACHE.DAT
2016-05-12 03:21 - 2009-07-14 20:18 - 00000000 ____D C:\Program Files\Windows Journal
2016-05-11 16:49 - 2010-12-31 02:20 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-11 16:49 - 2010-12-31 02:20 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-11 16:49 - 2010-12-31 02:20 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-06 21:30 - 2011-01-04 19:51 - 00000000 ____D C:\Users\Tobias\AppData\Roaming\ALFBanCo4
2016-05-06 21:29 - 2015-02-28 11:27 - 00000000 ____D C:\Program Files (x86)\ALFBanCo6
2016-05-06 03:08 - 2016-03-12 01:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-05-06 03:08 - 2013-08-14 21:09 - 00000000 ____D C:\Program Files (x86)\Java

Ecronika · 05.06.2016, 04:22

FRST - Teil 2

Code:

ATTFilter

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2012-10-10 17:24 - 2012-10-10 17:27 - 4096000 _____ () C:\Program Files (x86)\GUTF882.tmp
2012-03-25 01:45 - 2012-04-09 12:23 - 0000630 _____ () C:\Users\Tobias\AppData\Roaming\AutoGK.ini
2015-02-02 23:53 - 2015-02-02 23:53 - 0000044 _____ () C:\Users\Tobias\AppData\Roaming\WB.CFG
2012-09-30 18:59 - 2012-09-30 19:08 - 0157009 _____ () C:\Users\Tobias\AppData\Local\ars.cache
2012-09-30 18:59 - 2012-09-30 19:08 - 0247315 _____ () C:\Users\Tobias\AppData\Local\census.cache
2011-01-18 21:01 - 2011-04-11 20:38 - 0001164 _____ () C:\Users\Tobias\AppData\Local\crc32list11.txt
2010-12-31 21:31 - 2016-05-05 10:32 - 0061440 _____ () C:\Users\Tobias\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-09-30 18:50 - 2012-09-30 18:50 - 0000036 _____ () C:\Users\Tobias\AppData\Local\housecall.guid.cache
2012-07-21 21:45 - 2012-07-21 21:45 - 0004463 _____ () C:\Users\Tobias\AppData\Local\MatClass.Settings.xml
2010-12-31 14:45 - 2016-05-01 09:36 - 0007626 _____ () C:\Users\Tobias\AppData\Local\Resmon.ResmonCfg
2014-07-10 20:19 - 2014-07-10 20:19 - 0000011 _____ () C:\ProgramData\.tv7
2015-02-27 12:43 - 2015-02-27 12:43 - 0256414 _____ () C:\ProgramData\1425033748.bdinstall.bin
2012-08-28 17:20 - 2012-08-28 17:20 - 0019280 _____ () C:\ProgramData\CAEManager.lcs
2012-04-20 21:01 - 2012-04-20 21:01 - 0000137 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2012-08-28 17:20 - 2012-10-02 23:40 - 0001764 _____ () C:\ProgramData\SEE_1000.ini
2012-08-28 17:20 - 2012-10-02 23:40 - 0001764 _____ () C:\ProgramData\SEE_1001.ini
2012-08-28 17:20 - 2012-10-02 23:40 - 0001764 _____ () C:\ProgramData\SEE_1010.ini
2012-08-28 17:20 - 2012-10-02 23:40 - 0001764 _____ () C:\ProgramData\SEE_1100.ini
2012-08-28 17:20 - 2012-10-02 23:40 - 0001764 _____ () C:\ProgramData\SEE_5001.ini
2012-08-28 17:20 - 2012-10-02 23:40 - 0001764 _____ () C:\ProgramData\SEE_5002.ini
2012-08-28 17:20 - 2012-10-02 23:40 - 0001764 _____ () C:\ProgramData\SEE_5004.ini
2012-08-28 17:20 - 2012-10-02 23:40 - 0001764 _____ () C:\ProgramData\SEE_5005.ini
2012-08-28 17:20 - 2012-10-02 23:40 - 0001764 _____ () C:\ProgramData\SEE_5006.ini
2012-08-28 17:20 - 2012-10-02 23:40 - 0001764 _____ () C:\ProgramData\SEE_5008.ini

Einige Dateien in TEMP:
====================
C:\Users\Tobias\AppData\Local\Temp\13-9-legacy_vista_win7_64_dd_ccc_whql.exe
C:\Users\Tobias\AppData\Local\Temp\genteert.dll
C:\Users\Tobias\AppData\Local\Temp\gkey.exe
C:\Users\Tobias\AppData\Local\Temp\libeay32.dll
C:\Users\Tobias\AppData\Local\Temp\msvcr120.dll
C:\Users\Tobias\AppData\Local\Temp\pkeyui.exe
C:\Users\Tobias\AppData\Local\Temp\SpotifyUninstall.exe
C:\Users\Tobias\AppData\Local\Temp\sqlite3.dll
C:\Users\Tobias\AppData\Local\Temp\wabk.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-05-28 00:03

==================== Ende von FRST.txt ============================

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-06-2016
durchgeführt von Tobias (2016-06-05 05:14:26)
Gestartet von C:\Users\Tobias\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2010-12-30 18:23:36)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3455670051-300026812-3451469050-500 - Administrator - Disabled)
Gast (S-1-5-21-3455670051-300026812-3451469050-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-3455670051-300026812-3451469050-1011 - Limited - Enabled)
Kelly (S-1-5-21-3455670051-300026812-3451469050-1069 - Administrator - Enabled)
Lilly (S-1-5-21-3455670051-300026812-3451469050-1008 - Administrator - Enabled) => C:\Users\Lilly
Tobias (S-1-5-21-3455670051-300026812-3451469050-1000 - Administrator - Enabled) => C:\Users\Tobias

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Microsoft Security Essentials (Enabled - Up to date) {768124D7-F5F7-6D2F-DDC2-94DFA4017C95}
AS: Microsoft Security Essentials (Enabled - Up to date) {CDE0C533-D3CD-62A1-E772-AFADDF863628}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 16.00 (x64) (HKLM\...\7-Zip) (Version: 16.00 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.016.20045 - Adobe Systems Incorporated)
Adobe Flash Player 21 ActiveX (HKLM-x32\...\{FA944726-00F8-43B5-BB97-33E6FF409C22}) (Version: 21.0.0.242 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\{C4E4BF86-4E27-4B8B-8BF9-A5BF1C7573A4}) (Version: 21.0.0.242 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.2 (HKLM-x32\...\{5ECE64C9-F5B3-4914-B1F2-23D46548B7E3}) (Version: 12.2.3.183 - Adobe Systems, Inc)
ALF-BanCo 6 (HKLM-x32\...\Alf-BanCo6_is1) (Version: 6.2.1 - ALF AG)
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.5.0 - Sereby Corporation)
AMD Catalyst Install Manager (HKLM\...\{37FCE154-7F59-74F0-3A35-BF503CEB230B}) (Version: 8.0.877.0 - Advanced Micro Devices, Inc.)
AOMEI Backupper Standard (HKLM-x32\...\{A83692F5-3E9B-4E95-9E7E-B5DF5536C09F}_is1) (Version:  - AOMEI Technology Co., Ltd.)
ArcaniA - Gothic 4 (HKLM-x32\...\{EE74D039-45D7-44E9-BF95-B9CFB015964F}_is1) (Version:  - JoWooD Entertainment AG)
AviSynth 2.5 (HKLM-x32\...\AviSynth) (Version:  - )
AVS Update Manager 1.0 (HKLM-x32\...\AVS Update Manager_is1) (Version:  - Online Media Technologies Ltd.)
Biet-O-Matic v2.14.12 (HKLM-x32\...\Biet-O-Matic v2.14.12) (Version: 2.14.12 - BOM Development Team)
Biet-O-Matic v2.14.8 (HKLM-x32\...\Biet-O-Matic v2.14.8) (Version: 2.14.8 - BOM Development Team)
BPS650 (HKLM-x32\...\{4F3C4874-D5D9-41A0-B8DE-FD7CA4690CE3}) (Version: 2.11.1 - Siedle)
CANON iMAGE GATEWAY MyCamera Download Plugin (HKLM-x32\...\MyCamera Download Plugin) (Version: 3.1.1.2 - Canon Inc.)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM-x32\...\CANON iMAGE GATEWAY Task) (Version: 1.9.0.9 - Canon Inc.)
Canon MOV Decoder (HKLM-x32\...\Canon MOV Decoder) (Version: 1.8.0.7 - Canon Inc.)
Canon MOV Encoder (HKLM-x32\...\Canon MOV Encoder) (Version: 1.6.0.1 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM-x32\...\MovieEditTask) (Version: 3.7.0.4 - Canon Inc.)
Canon Utilities Digital Photo Professional 3.10 (HKLM-x32\...\DPP) (Version: 3.10.2.0 - Canon Inc.)
Canon Utilities EOS Sample Music (HKLM-x32\...\EOS Sample Music) (Version: 1.0.0.204 - Canon Inc.)
Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.10.2.0 - Canon Inc.)
Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX (HKLM-x32\...\EOS Video Snapshot Task) (Version: 1.0.0.10 - Canon Inc.)
Canon Utilities Movie Uploader for YouTube (HKLM-x32\...\MovieUploaderForYouTube) (Version: 1.2.0.7 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.9.0.0 - Canon Inc.)
Canon Utilities ZoomBrowser EX (HKLM-x32\...\ZoomBrowser EX) (Version: 6.7.0.24 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (HKLM-x32\...\ZoomBrowser EX Memory Card Utility) (Version: 1.5.0.9 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.14 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.3.4643 - CDBurnerXP)
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden
CPUID CPU-Z 1.69 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
CryptoPrevent (HKLM-x32\...\{5C5B24E7-4694-4049-A222-CCE7D3FAC63F}_is1) (Version:  - Foolish IT LLC)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dead Space™ 2 (HKLM-x32\...\{96D06FDD-6AF4-4309-BC1B-1C9588B0575E}) (Version: 1.0.941.0 - Electronic Arts)
Debugging Tools for Windows (x86) (HKLM-x32\...\{300A2961-B2B5-4889-9CB9-5C2A570D08AD}) (Version: 6.11.1.404 - Microsoft Corporation)
Defraggler (HKLM\...\Defraggler) (Version: 2.20 - Piriform)
Die*Sims™*3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.0.631 - Electronic Arts)
DirectX for Managed Code Update (Summer 2004) (x32 Version: 9.02.2904 - Microsoft) Hidden
DriveImage XML (Private Edition) (HKLM-x32\...\{F7E1CA14-B39D-452A-960B-39423DDDD933}) (Version: 2.44.000 - Runtime Software)
Driver Fusion (HKLM-x32\...\Driver Fusion) (Version: 3.0 - Treexy)
Dropbox (HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\Dropbox) (Version: 4.4.29 - Dropbox, Inc.)
DWG TrueView 2015 - English (Version: 20.0.51.0 - Autodesk) Hidden
Easy Tune 6 B11.0722.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE)
Easy Tune 6 B11.0722.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
ElcomPDF (HKLM\...\ElcomPDF) (Version:  - )
Elektronischer Magnetplaner (HKLM-x32\...\magnet) (Version:  - )
EPSON SX130 Series Printer Uninstall (HKLM\...\EPSON SX130 Series) (Version:  - SEIKO EPSON Corporation)
EPSON-Drucker-Software (HKLM\...\EPSON Printer and Utilities) (Version:  - SEIKO EPSON Corporation)
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Exact Audio Copy 1.0beta3 (HKLM-x32\...\Exact Audio Copy) (Version: 1.0beta3 - Andre Wiethoff)
foobar2000 v1.1.1 (HKLM-x32\...\foobar2000) (Version: 1.1.1 - Peter Pawlowski)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 51.0.2704.79 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.21.123 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{D1D4D7EA-62B8-4665-9FF7-02A91B925CC9}) (Version: 1.0.18.74 - Google)
Hager - Tehalit 5.1 (HKLM-x32\...\Elcom 5.1) (Version:  - )
Hager (HKLM-x32\...\ZPlan21) (Version:  - )
Hager prerequisites (HKLM-x32\...\{98C64AD3-6A1D-4737-9ED8-06A73741550C}) (Version: 1.00.0000 - hager)
HandBrake 0.9.8 (HKLM-x32\...\HandBrake) (Version: 0.9.8 - )
herdProtect Anti-Malware Scanner (HKLM-x32\...\herdProtectScan) (Version: 1.0 - Reason Company Software Inc.)
ICQ 8.2 (build 7134) (HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\ICQ) (Version: 8.2.7134.0 - ICQ)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.40 - Irfan Skiljan)
Java 8 Update 91 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418091F0}) (Version: 8.0.910.14 - Oracle Corporation)
Java 8 Update 91 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.14 - Oracle Corporation)
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Kabel++ (HKLM-x32\...\Kabel++_is1) (Version:  - Sandker Elektrosoftware)
KFE-Viewer und KFE-Konverter Version 15/11/10a (HKLM-x32\...\KFE-Viewer und KFE-Konverter_is1) (Version:  - VOLIE)
K-Lite Codec Pack (64-bit) v4.1.0 (HKLM\...\KLiteCodecPack64_is1) (Version: 4.1.0 - )
K-Lite Codec Pack 6.9.0 (Standard) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 6.9.0 - )
Lenovo_Wireless_Driver (HKLM-x32\...\{28ABE740-47F3-441B-9437-852F6A64EFF8}) (Version: 1.02.01 - Lenovo)
LibreOffice 5.0.5.2 (HKLM-x32\...\{43D862C3-739D-4FF6-91C0-25612368CC81}) (Version: 5.0.5.2 - The Document Foundation)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
ManyCam 4.1.0 (HKLM-x32\...\ManyCam) (Version: 4.1.0 - Visicom Media Inc.)
MechWarrior Online (HKLM-x32\...\{73bcb521-8936-42d7-ad00-ec2bb399e26c}) (Version: 1.4.3.0 - Piranha Games Inc.)
MechWarrior Online (x32 Version: 1.4.3.0 - Piranha Games Inc.) Hidden
MeteoSynModul (HKLM-x32\...\MeteoSynModul_is1) (Version: 1.0.5.3 - Dr. Valentin EnergieSoftware GmbH)
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office 2007 Primary Interop Assemblies (HKLM-x32\...\{50120000-1105-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Access database engine 2007 (German) (HKLM-x32\...\{90120000-00D1-0407-0000-0000000FF1CE}) (Version: 12.0.6425.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.9.218.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SkyDrive (HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Virtual PC 2007 SP1 (HKLM\...\{AD483998-2E9A-4405-83FF-6E503AF49CBB}) (Version: 6.0.192.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version:  - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.5.166.0 - Microsoft Corporation)
mIRC (HKLM-x32\...\mIRC) (Version: 7.14 - mIRC Co. Ltd.)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 45.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 45.0 (x86 de)) (Version: 45.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.1.1.5990 - Mozilla)
Mozilla Thunderbird 45.1.1 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.1.1 (x86 de)) (Version: 45.1.1 - Mozilla)
MPC-HC 1.7.0 (HKLM-x32\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.0.7858 - MPC-HC Team)
MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project)
MyDefrag v4.3.1 (HKLM\...\MyDefrag v4.3.1_is1) (Version: 4.0.0.0 - J.C. Kessels)
NEC Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}) (Version: 1.0.20.0 - NEC Electronics Corporation)
NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.20.0 - NEC Electronics Corporation) Hidden
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenSSL 1.0.2g (64-bit) (HKLM\...\OpenSSL (64-bit)_is1) (Version:  - OpenSSL Win64 Installer Team)
paint.net (HKLM\...\{DADC2AF6-DC9F-4BCF-BFCE-DCEC16EF507C}) (Version: 4.0.9 - dotPDN LLC)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.1 - pdfforge)
Phase 5 HTML-Editor (HKLM-x32\...\{20B1B020-DEAE-48D1-9960-D4C3185D758B}) (Version: 5.6.2.3 - Systemberatung Schommer)
Philips Product Selector 5.2.6.0 (HKLM-x32\...\InstallShield_{81AD9228-21AC-4DBD-AE33-98146A88BAA8}) (Version: 5.2.6.0 - Philips Lighting)
Philips Product Selector 5.2.6.0 (x32 Version: 5.2.6.0 - Philips Lighting) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.259 - Google, Inc.)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
POV-Ray for Windows v3.6.0 (HKLM-x32\...\POV-Ray for Windows v3.6) (Version: 3.6 - Persistence of Vision Raytracer Pty. Ltd.)
ProfiCAD 7.5.6 (HKLM-x32\...\ProfiCAD_is1) (Version:  - )
ProjectLibre (HKLM-x32\...\{E29A4ED9-3192-4D72-A2E2-9C32B512714D}) (Version: 1.5.19.0 - ProjectLibre)
Protect Disc License Helper 1.0.125 (IE) (HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\Protect Disc License Helper) (Version: 1.0.125 - Protect Disc)
ProtectDisc Driver, Version 11 (HKLM-x32\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)
Quick Media Converter (HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\QUICKMEDIACONVERTER) (Version:  - )
QuickGamma 4.0.0.2 (HKLM-x32\...\QuickGamma_is1) (Version: 4.0.0.2 - Eberhard Werle)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.46.610.2011 - Realtek)
Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6409 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7831 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30126 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{17528CE4-C333-48FB-A9E4-D841E795CDCE}) (Version: 3.0.23.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.39.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.39.0 - Renesas Electronics Corporation) Hidden
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 3.0.23.0 - Renesas Electronics Corporation) Hidden
RITTO USB Parametrier-Software 17831 (HKLM-x32\...\{809C6C39-7AD3-4C9B-B93C-671EE4070F0D}) (Version: 2.0.0.0 - Ritto GmbH & Co. KG)
RT 7 Lite (64-Bit) (HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\RT 7 Lite x64) (Version: 2.6.0 - Rockers Team)
RT 7 Lite x64 (Version: 2.6.0 - Rockers Team) Hidden
Saleen FolderSync (HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\Saleen FolderSync) (Version:  - Saleen Software)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.4.0 - SAMSUNG Electronics Co., Ltd.)
Secunia PSI (3.0.0.11005) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.11005 - Secunia)
Semiolog (HKLM-x32\...\Semiolog2) (Version:  - )
Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.111 - Skype Technologies S.A.)
SonyEditor (remove only) (HKLM-x32\...\SonyEditor) (Version:  - )
Spannungsabfall 3.x (HKLM-x32\...\Spannungsabfall_is1) (Version:  - Andreas Wiesmüller)
Spannungsabfall Version 4.x (HKLM-x32\...\{F59BD5E4-AE39-426E-89C9-792FA93563C0}_is1) (Version: 4.x - Andreas Wiesmüller)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
SSDlife Pro (HKLM-x32\...\{6F104B6D-535A-4D27-9A11-8525368AEB1F}) (Version: 2.5.82 - BinarySense Inc.)
StriePlan (HKLM-x32\...\{EE0D65D8-A2F2-4C03-9F34-E51CC7E6BE90}) (Version: 3.7.3.0062 - ABB STRIEBEL & JOHN)
StriePlan (x32 Version: 3.7.3.0062 - ABB STRIEBEL & JOHN) Hidden
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.59518 - TeamViewer)
Tomb Raider [2013] Collectors Edition MULTI-2 1.01.748.0 (HKLM-x32\...\Tomb Raider [2013] Collectors Edition MULTI-2 1.01.748.0) (Version:  - )
TomTom MyDrive Connect 4.1.0.2658 (HKLM-x32\...\MyDriveConnect) (Version: 4.1.0.2658 - TomTom)
ToolBedView (HKLM-x32\...\{C18071EC-6658-4ADB-BD0C-10EE3449E9B8}) (Version: 1.26.4 - ToolBed GmbH)
Total Commander (Remove or Repair) (HKLM-x32\...\Totalcmd) (Version: 7.56a - Ghisler Software GmbH)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 10.0.4600.4 - TuneUp Software) Hidden
UltraISO Premium V9.61 (HKLM-x32\...\UltraISO_is1) (Version:  - )
Unity Web Player (HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
VDE-Anwendungsprogramm 8.0.18.0 (HKLM-x32\...\VDE-Anwendungsprogramm) (Version: 8.0.18.0 - VDE Verlag GmbH)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.3 - VideoLAN)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinHTTrack Website Copier 3.47-27 (HKLM-x32\...\WinHTTrack Website Copier_is1) (Version: 3.47.27 - HTTrack)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
Wise Registry Cleaner 9.03 (HKLM-x32\...\Wise Registry Cleaner_is1) (Version: 9.03 - WiseCleaner.com, Inc.)
WISO Mein Geld 2013 Professional (HKLM-x32\...\WISO Mein Geld 2013 Professional) (Version:  - Buhl Data Service GmbH)
WISO Mein Geld 2013 Professional (x32 Version: 15.0.0.1 - Buhl Data Service GmbH) Hidden
WISO steuer:Sparbuch 2016 (HKLM-x32\...\{4F7B49DA-A71A-4127-9E58-5CFA89047C43}) (Version: 23.00.1146 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2011 (HKLM-x32\...\{02F0B8AE-7501-4333-AFBE-6BAABFEC7637}) (Version: 18.00.6928 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2012 (HKLM-x32\...\{0CC1DAFB-40C8-4903-953D-471E541477C7}) (Version: 19.05.7368 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2013 (HKLM-x32\...\{D6CC2FAF-F827-4091-96A1-D32CC9B69C79}) (Version: 20.00.8137 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2014 (HKLM-x32\...\{2617EFF8-3301-4B08-A314-AE4CF2BF98DA}) (Version: 21.00.8480 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2015 (HKLM-x32\...\{9D63573A-C054-478D-BF78-4F32608C903A}) (Version: 22.07.9009 - Buhl Data Service GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: 4.2.2.14545 - Blizzard Entertainment)
WorldUnlock Codes Calculator (HKLM-x32\...\WorldUnlock Codes Calculator) (Version:  - )
WSCAD SUITE 2012 Service Pack 1 Demo (C:\WSCAD\WSCAD SUITE DEMO\2012) (HKLM-x32\...\{7A145BC0-AB8D-4E6C-9C67-ECF3678403BC}) (Version: 2012 - WSCAD electronic GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\DWG TrueView 2015 - English\dwgviewr.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2015 - English\en-US\dwgviewrficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3455670051-300026812-3451469050-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Tobias\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0439E2AA-2FF3-4885-BEB9-9A5106883998} - System32\Tasks\WiseCleaner\WRCSkipUAC => C:\Program Files (x86)\Wise\Wise Registry Cleaner\WiseRegCleaner.exe [2016-01-19] (WiseCleaner.com)
Task: {11C10B84-B9E3-4A5B-8B0E-3DEA0F28C2FC} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
Task: {1451AA8F-C21B-40D0-AD2A-703E6E1E4891} - System32\Tasks\Driver Booster SkipUAC (Tobias) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {14DAF99E-18C1-4AA2-92ED-C1574E7D8389} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2015-07-08] (Microsoft Corporation)
Task: {25488372-4E37-48FE-9E85-3726994FFA34} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2015-07-08] (Microsoft)
Task: {348EADBC-844D-4FC8-9132-247AB56057C9} - System32\Tasks\cFos\Registration Tasks\Open Browser => Chrome.exe --new-window "hxxp://www.cfos.de/de/cfosspeed/cfosspeed-feature-highlights.htm?sw-10.10.2238&amp;days=29&amp;ret=0&amp;raw=13&amp;exp=102"
Task: {3511ED8D-C1BD-4571-91C1-4A8352874E1B} - System32\Tasks\{28F0A57B-EB49-4570-B791-9B5FF04F2734} => pcalua.exe -a C:\Users\Tobias\AppData\Local\Temp\Temp1_DE_PlanungssoftwareElcom_30-Tage-Testversion.zip\Elcom.exe
Task: {475C1DAF-F948-449D-81B7-CCACB69F5962} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
Task: {591CD591-AE2C-468C-9A44-DDEB2CDDD23A} - System32\Tasks\Norton Management\Norton Error Analyzer => C:\Program Files (x86)\Norton Management\Engine\3.0.0.133\SymErr.exe
Task: {6242DA8C-38B7-4931-A9C5-69C000C97B05} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-01-15] (Piriform Ltd)
Task: {831980F6-FEB5-46E3-AF9D-646923239FF3} - System32\Tasks\Google Updater and Installer => C:\Users\Tobias\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {9BD70C16-9A51-470D-AE0E-35BD8445B795} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3455670051-300026812-3451469050-1000UA => C:\Users\Tobias\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {9CA61598-C7C1-4735-80D9-BE3831CDD9F6} - System32\Tasks\Norton Management\Norton Error Processor => C:\Program Files (x86)\Norton Management\Engine\3.0.0.133\SymErr.exe
Task: {B9C98292-22BF-4867-BB06-5C69A77D4834} - System32\Tasks\{D77EE04F-8299-4E6E-9889-0FE2BC6A2C73} => pcalua.exe -a C:\Users\Tobias\Downloads\epson373260eu.exe -d C:\Users\Tobias\Downloads
Task: {BC60206F-08E6-400F-BB25-70A00DF1B208} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2015-07-08] (Microsoft Corporation)
Task: {BF673638-52C0-4D9C-AB72-993F3EF7D459} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2015-07-08] (Microsoft Corporation)
Task: {C5C60201-72F3-4CA8-AA00-A48F497BF249} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3455670051-300026812-3451469050-1000Core => C:\Users\Tobias\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {CF15901E-7918-480D-BB02-905E3F98163A} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files (x86)\Norton Identity Safe\Engine\2013.3.3.19\SymErr.exe
Task: {D2D0600E-F173-4A91-A36F-E3C84D5342B8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-13] (Adobe Systems Incorporated)
Task: {D8DEFD4F-79D2-4413-88F2-81AB4CD342B1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-09] (Google Inc.)
Task: {DB8B6F6A-161F-48B1-A58C-E7C21FD28C56} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2015-07-08] (Microsoft Corporation)
Task: {E090E34E-3495-49E8-8848-14FD019BF486} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files (x86)\Norton Identity Safe\Engine\2013.3.3.19\SymErr.exe
Task: {EF8AC2B7-79FE-4190-8F99-8E93C7FC782B} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-01-29] (Oracle Corporation)
Task: {F5DA4E1B-EAEC-4415-A311-2B428BDC1DA2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-09] (Google Inc.)
Task: {F985B7E0-EA5E-46D3-88E2-1BB325FA38B1} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-06-03] (AVAST Software)
Task: {FB719659-DEB1-4F11-93B2-7BCC49177E08} - System32\Tasks\Divx-Online-Aktualisierungsprogramm => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
Task: {FE31A96F-95E3-4D15-B86E-18041E81DE17} - System32\Tasks\cFosTASK => C:\Windows\BOX_cFosTASK.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3455670051-300026812-3451469050-1000Core.job => C:\Users\Tobias\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3455670051-300026812-3451469050-1000UA.job => C:\Users\Tobias\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

ShortcutWithArgument: C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Videostream for Google Chromecast™.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=Default --app-id=cnciopoikihiagdjbjpnocolokfelagl

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2012-02-20 00:35 - 2008-07-19 17:26 - 00087040 _____ () C:\Windows\System32\custmon64.dll
2016-01-15 22:44 - 2016-01-15 22:44 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00306904 _____ () C:\Program Files (x86)\AOMEI Backupper\UiLogic.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00241368 _____ () C:\Program Files (x86)\AOMEI Backupper\diskmgr.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00290520 _____ () C:\Program Files (x86)\AOMEI Backupper\Comn.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00077528 _____ () C:\Program Files (x86)\AOMEI Backupper\Ldm.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00061144 _____ () C:\Program Files (x86)\AOMEI Backupper\Device.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00282328 _____ () C:\Program Files (x86)\AOMEI Backupper\BrFat.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00962264 _____ () C:\Program Files (x86)\AOMEI Backupper\BrNtfs.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00122584 _____ () C:\Program Files (x86)\AOMEI Backupper\FuncLogic.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00282328 _____ () C:\Program Files (x86)\AOMEI Backupper\Clone.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00347864 _____ () C:\Program Files (x86)\AOMEI Backupper\ImgFile.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00028376 _____ () C:\Program Files (x86)\AOMEI Backupper\Encrypt.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00069336 _____ () C:\Program Files (x86)\AOMEI Backupper\Compress.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00102104 _____ () C:\Program Files (x86)\AOMEI Backupper\BrVol.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00253656 _____ () C:\Program Files (x86)\AOMEI Backupper\GptBcd.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00155352 _____ () C:\Program Files (x86)\AOMEI Backupper\FlBackup.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00483032 _____ () C:\Program Files (x86)\AOMEI Backupper\EnumFolder.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00175832 _____ () C:\Program Files (x86)\AOMEI Backupper\DeviceMgr.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00118488 _____ () C:\Program Files (x86)\AOMEI Backupper\Backup.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00691928 _____ () C:\Program Files (x86)\AOMEI Backupper\Sync.dll
2016-03-12 00:21 - 2015-09-15 18:56 - 00102104 _____ () C:\Program Files (x86)\AOMEI Backupper\BrLog.dll
2016-03-12 00:21 - 2015-02-26 01:00 - 02403504 _____ () C:\Program Files (x86)\AOMEI Backupper\QtCore4.dll
2014-09-11 17:06 - 2014-09-11 17:06 - 00878592 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\platforms\qwindows.dll
2014-09-11 17:05 - 2014-09-11 17:05 - 00036352 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\bearer\qgenericbearer.dll
2014-09-11 17:06 - 2014-09-11 17:06 - 00038912 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\bearer\qnativerwifibearer.dll
2014-09-11 17:14 - 2014-09-11 17:14 - 00032256 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qdds.dll
2014-09-11 17:05 - 2014-09-11 17:05 - 00021504 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qgif.dll
2014-09-11 17:14 - 2014-09-11 17:14 - 00027648 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qicns.dll
2014-09-11 17:05 - 2014-09-11 17:05 - 00021504 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qico.dll
2014-09-11 17:14 - 2014-09-11 17:14 - 00381952 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qjp2.dll
2014-09-11 17:05 - 2014-09-11 17:05 - 00204800 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qjpeg.dll
2014-09-11 17:14 - 2014-09-11 17:14 - 00218112 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qmng.dll
2014-09-11 17:08 - 2014-09-11 17:08 - 00015872 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qsvg.dll
2014-09-11 17:14 - 2014-09-11 17:14 - 00015360 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qtga.dll
2014-09-11 17:15 - 2014-09-11 17:15 - 00307712 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qtiff.dll
2014-09-11 17:15 - 2014-09-11 17:15 - 00014848 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qwbmp.dll
2014-09-11 17:15 - 2014-09-11 17:15 - 00252928 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qwebp.dll
2016-06-03 00:56 - 2016-06-01 08:50 - 17565848 _____ () C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.79\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:1AAB2E68 [240]
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1 [112]
AlternateDataStreams: C:\Users\Tobias\Downloads\BOM21412_setup.exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\chromeinstall-7u25.exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\Kabel_light_demo_setup.exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\PandaCloudAntivirus.exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\PSISetup (1).exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\spybot-2.4.exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\WebInstaller_2002 (1).exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\WebInstaller_2002.exe:BDU [0]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)

HKLM\...\.scr: CryptoPreventSCR => "C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventFilterMod.CryptoPreventEXEC" "%1" /S %* <===== ACHTUNG
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\Software\Classes\.scr: DWGTrueViewScriptFile => C:\Windows\system32\notepad.exe "%1"

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2015-04-03 13:16 - 00000938 ____R C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3455670051-300026812-3451469050-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Tobias\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 1) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\Services: AMD External Events Utility => 2
MSCONFIG\Services: AMD FUEL Service => 2
MSCONFIG\Services: DialComService => 3
MSCONFIG\Services: EPSON_PM_RPCV4_04 => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: gusvc => 3
MSCONFIG\Services: hasplms => 2
MSCONFIG\Services: IDriverT => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\Services: tor => 2
MSCONFIG\startupfolder: C:^Users^Tobias^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CurseClientStartup.ccip => C:\Windows\pss\CurseClientStartup.ccip.Startup
MSCONFIG\startupfolder: C:^Users^Tobias^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: AMD AVT => Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
MSCONFIG\startupreg: AsioThk32Reg => REGSVR32.EXE /S CTASIO.DLL
MSCONFIG\startupreg: C9E2C46E4256CA39ECA0DEAEED818A2394673964._service_run => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=service
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: CTHelper => CTHELPER.EXE
MSCONFIG\startupreg: Dropbox Update => "C:\Users\Tobias\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
MSCONFIG\startupreg: EPLTarget => 
MSCONFIG\startupreg: GoogleChromeAutoLaunch_3E029A545A903A02B262797A0B1ADE1D => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: icq => C:\Users\Tobias\AppData\Roaming\ICQM\icq.exe -CU
MSCONFIG\startupreg: MyDriveConnect.exe => "C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe"
MSCONFIG\startupreg: PrnStatusMX => C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [TCP Query User{390D9B7D-77C0-43D9-A14C-B04C4642BC8C}E:\spiele\dead space 2\deadspace2.exe] => (Block) E:\spiele\dead space 2\deadspace2.exe
FirewallRules: [UDP Query User{EAFF774A-BCF0-40C6-8980-4F61C9FA3E00}E:\spiele\dead space 2\deadspace2.exe] => (Block) E:\spiele\dead space 2\deadspace2.exe
FirewallRules: [{156F004F-2692-490D-8D66-E2F27D1651CC}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [{E466B29D-8BF5-4D17-8A17-E6E8A9A98BF9}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [TCP Query User{132E5D3F-A7B9-47BD-927D-211814D8F02F}C:\program files (x86)\totalcmd\totalcmd.exe] => (Allow) C:\program files (x86)\totalcmd\totalcmd.exe
FirewallRules: [UDP Query User{FF2E99FA-1DD6-44C2-80A1-890820D2F82A}C:\program files (x86)\totalcmd\totalcmd.exe] => (Allow) C:\program files (x86)\totalcmd\totalcmd.exe
FirewallRules: [{069687EB-F6C4-4A8A-99BF-2EEBF7AF5399}] => (Allow) LPort=23423
FirewallRules: [{B3B26EE4-F62E-49A9-BC32-72E4CA54F5E7}] => (Allow) C:\Users\Tobias\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{A49D91B5-871A-4091-BE88-5753F4582CB4}] => (Allow) C:\Users\Tobias\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{A307AD13-8C6D-44CA-A1CC-122041B28456}C:\users\tobias\desktop\jdownloader_portableapps\commonfiles\java\bin\javaw.exe] => (Allow) C:\users\tobias\desktop\jdownloader_portableapps\commonfiles\java\bin\javaw.exe
FirewallRules: [UDP Query User{1F0A6EF7-9FBC-4EF3-9084-E44A489660B7}C:\users\tobias\desktop\jdownloader_portableapps\commonfiles\java\bin\javaw.exe] => (Allow) C:\users\tobias\desktop\jdownloader_portableapps\commonfiles\java\bin\javaw.exe
FirewallRules: [TCP Query User{8DB73F11-34D7-41B5-9973-16FBAD63B065}C:\users\tobias\desktop\jdownloader_portableapps\commonfiles\java\bin\java.exe] => (Allow) C:\users\tobias\desktop\jdownloader_portableapps\commonfiles\java\bin\java.exe
FirewallRules: [UDP Query User{F5575465-D150-4E7F-9B1C-79118B81764D}C:\users\tobias\desktop\jdownloader_portableapps\commonfiles\java\bin\java.exe] => (Allow) C:\users\tobias\desktop\jdownloader_portableapps\commonfiles\java\bin\java.exe
FirewallRules: [TCP Query User{FB71BBB0-57AF-40BB-BCA4-8C79C5FCEE6A}\\lilliana\mirc\mirc.exe] => (Allow) \\lilliana\mirc\mirc.exe
FirewallRules: [UDP Query User{88FF1C08-F3A0-4BB2-9280-F2FC3B7891BB}\\lilliana\mirc\mirc.exe] => (Allow) \\lilliana\mirc\mirc.exe
FirewallRules: [TCP Query User{2DCFCD8C-2490-4F10-B2BB-F57DC1F9FC49}C:\users\tobias\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\tobias\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{1F7B9F2D-F0C9-418F-93FC-92FCFB06A7FE}C:\users\tobias\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\tobias\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{1B6337C9-DA51-450B-94AC-248E73B161A7}] => (Allow) E:\Spiele\Steam\SteamApps\common\command and conquer red alert 3\runme.exe
FirewallRules: [{47D17BC7-4B18-4F92-83F8-CC6A1524151D}] => (Allow) E:\Spiele\Steam\SteamApps\common\command and conquer red alert 3\runme.exe
FirewallRules: [{44098540-55A7-415C-93AC-FE10E6FEFE78}] => (Allow) E:\Spiele\Steam\SteamApps\common\command and conquer red alert 3\Support\EA Help\Electronic_Arts_Technical_Support.htm
FirewallRules: [{D789C391-A4E5-4B29-BC5A-726089CE78BB}] => (Allow) E:\Spiele\Steam\SteamApps\common\command and conquer red alert 3\Support\EA Help\Electronic_Arts_Technical_Support.htm
FirewallRules: [{8A8DF58D-187A-43C4-A932-6AC5A421806E}] => (Allow) E:\Spiele\Steam\SteamApps\common\command and conquer 3 tiberium wars\CNC3.exe
FirewallRules: [{2DC7D8BB-EC21-4894-AE60-98949FE98D11}] => (Allow) E:\Spiele\Steam\SteamApps\common\command and conquer 3 tiberium wars\CNC3.exe
FirewallRules: [{51C9F0B6-CBAE-40E8-85A6-2C6973E4514E}] => (Allow) E:\Spiele\Steam\SteamApps\common\command and conquer 3 tiberium wars\Support\EA Help\Electronic_Arts_Technical_Support.htm
FirewallRules: [{656D92DE-008F-4997-8A58-3970F7AF6FE3}] => (Allow) E:\Spiele\Steam\SteamApps\common\command and conquer 3 tiberium wars\Support\EA Help\Electronic_Arts_Technical_Support.htm
FirewallRules: [TCP Query User{F24DDB01-168A-4D63-A075-FF09D3D0CADA}E:\spiele\world of warcraft\launcher.exe] => (Allow) E:\spiele\world of warcraft\launcher.exe
FirewallRules: [UDP Query User{24B8E4C5-5B83-4E09-AE9E-6BEDCB4BFAD5}E:\spiele\world of warcraft\launcher.exe] => (Allow) E:\spiele\world of warcraft\launcher.exe
FirewallRules: [TCP Query User{915822E1-DC29-4A5B-A651-AEB26C2F7716}C:\program files (x86)\icq7.5\icq.exe] => (Allow) C:\program files (x86)\icq7.5\icq.exe
FirewallRules: [UDP Query User{4C26A2BA-D03C-4505-B968-3C3AD2FE1FF4}C:\program files (x86)\icq7.5\icq.exe] => (Allow) C:\program files (x86)\icq7.5\icq.exe
FirewallRules: [TCP Query User{9FA327F7-E6E1-4A47-A47F-73775DAF1BB7}E:\spiele\backup\mass effect 2\binaries\masseffect2.exe] => (Block) E:\spiele\backup\mass effect 2\binaries\masseffect2.exe
FirewallRules: [UDP Query User{5F1FEA93-D60F-488A-8923-06EAE247B273}E:\spiele\backup\mass effect 2\binaries\masseffect2.exe] => (Block) E:\spiele\backup\mass effect 2\binaries\masseffect2.exe
FirewallRules: [TCP Query User{064EC1C0-E189-4416-8A5B-947F39212CFD}C:\elcom\zplan21\apps\rteng9.exe] => (Allow) C:\elcom\zplan21\apps\rteng9.exe
FirewallRules: [UDP Query User{43E5F0E0-2637-4DA4-B439-9B747DC2ED41}C:\elcom\zplan21\apps\rteng9.exe] => (Allow) C:\elcom\zplan21\apps\rteng9.exe
FirewallRules: [{510B1D6A-1E3E-4C6D-A919-9F39A3390E5C}] => (Block) C:\elcom\zplan21\apps\rteng9.exe
FirewallRules: [{6F42F371-3F80-4B49-85A9-9C66146A97A3}] => (Block) C:\elcom\zplan21\apps\rteng9.exe
FirewallRules: [{1DF16117-0A3A-47B1-8A27-8242B0811516}] => (Allow) E:\Spiele\Steam\SteamApps\common\crazy machines elements\cmElements.exe
FirewallRules: [{F20265FF-2697-447B-AF3F-989E7465D18D}] => (Allow) E:\Spiele\Steam\SteamApps\common\crazy machines elements\cmElements.exe
FirewallRules: [TCP Query User{CB4AD304-0BF9-469F-95E0-729BC16596C6}C:\program files (x86)\mirc\mirc.exe] => (Allow) C:\program files (x86)\mirc\mirc.exe
FirewallRules: [UDP Query User{6FA38902-E82E-43B4-B1F0-C8AAEF504D81}C:\program files (x86)\mirc\mirc.exe] => (Allow) C:\program files (x86)\mirc\mirc.exe
FirewallRules: [TCP Query User{6B163FF8-B151-415D-9A3A-9533C838A169}\\lilly-pc\mirc\mirc.exe] => (Allow) \\lilly-pc\mirc\mirc.exe
FirewallRules: [UDP Query User{6F3A01DB-D051-46A1-908B-9A3354D147D8}\\lilly-pc\mirc\mirc.exe] => (Allow) \\lilly-pc\mirc\mirc.exe
FirewallRules: [TCP Query User{C520490B-8DA5-4754-B3A6-1882F680F877}C:\program files (x86)\mysql 4.0\bin\mysqld-nt.exe] => (Allow) C:\program files (x86)\mysql 4.0\bin\mysqld-nt.exe
FirewallRules: [UDP Query User{109DCCCA-330D-48F5-B001-341C7616E46C}C:\program files (x86)\mysql 4.0\bin\mysqld-nt.exe] => (Allow) C:\program files (x86)\mysql 4.0\bin\mysqld-nt.exe
FirewallRules: [VirtualPC-In-UDP-1] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-UDP-2] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-TCP-1] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [TCP Query User{6262B00F-F9ED-42A9-88F3-0BA806268EEA}D:\enyguide\enyguidestarter.exe] => (Allow) D:\enyguide\enyguidestarter.exe
FirewallRules: [UDP Query User{ED1CC35A-D910-4AB2-8159-4FBA4E56E552}D:\enyguide\enyguidestarter.exe] => (Allow) D:\enyguide\enyguidestarter.exe
FirewallRules: [TCP Query User{0A7C6903-F33E-4018-B6E5-8EE40F394D7B}C:\users\tobias\desktop\enyguide\enyguidestarter.exe] => (Allow) C:\users\tobias\desktop\enyguide\enyguidestarter.exe
FirewallRules: [UDP Query User{2274D70E-396D-4294-8DF6-91CB539AAA0D}C:\users\tobias\desktop\enyguide\enyguidestarter.exe] => (Allow) C:\users\tobias\desktop\enyguide\enyguidestarter.exe
FirewallRules: [{944BAD7C-E9CF-41A2-84F2-13B7978C09C0}] => (Allow) E:\Spiele\Steam\SteamApps\common\stronghold kingdoms\StrongholdKingdoms.exe
FirewallRules: [{BD7DDB18-D013-4D5A-9894-E0092C37EDD1}] => (Allow) E:\Spiele\Steam\SteamApps\common\stronghold kingdoms\StrongholdKingdoms.exe
FirewallRules: [{DB5515A3-9FAC-49C9-A54E-8E5D9A0BF5E1}] => (Allow) C:\Windows\system32\hasplms.exe
FirewallRules: [TCP Query User{A36CE07B-2D05-4CA2-9F12-7EBEDE5776AC}C:\program files (x86)\microsoft virtual pc\virtual pc.exe] => (Allow) C:\program files (x86)\microsoft virtual pc\virtual pc.exe
FirewallRules: [UDP Query User{CC5CF65F-7316-4AD4-ACCA-1C23DB5A3C42}C:\program files (x86)\microsoft virtual pc\virtual pc.exe] => (Allow) C:\program files (x86)\microsoft virtual pc\virtual pc.exe
FirewallRules: [{038CDC55-635B-449E-B29C-13BE728818B5}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{6C9EE4D7-89DB-4D55-99CE-C1A8AB22177C}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{47236C61-2CA5-42B8-8C71-A541D33E4821}] => (Allow) E:\Spiele\Steam\SteamApps\common\dungeon siege iii - demo\Dungeon Siege III.exe
FirewallRules: [{6F1EDF81-0BAB-4501-B1D2-DEF13A174DC4}] => (Allow) E:\Spiele\Steam\SteamApps\common\dungeon siege iii - demo\Dungeon Siege III.exe
FirewallRules: [{C75071F9-DEBC-4269-A9CF-B2D253D253B0}] => (Allow) E:\Spiele\Steam\SteamApps\common\stronghold kingdoms\StrongholdKingdoms.exe
FirewallRules: [{5C2A4F19-E251-4391-BFD2-41846D881BCD}] => (Allow) E:\Spiele\Steam\SteamApps\common\stronghold kingdoms\StrongholdKingdoms.exe
FirewallRules: [TCP Query User{475534EC-9753-4058-BA5E-A0F42D5D8C5A}F:\mirc732\mirc.exe] => (Allow) F:\mirc732\mirc.exe
FirewallRules: [UDP Query User{97E06900-D886-4BE6-9C91-48494DDB3D1B}F:\mirc732\mirc.exe] => (Allow) F:\mirc732\mirc.exe
FirewallRules: [{D11D7C5A-C175-48C7-92DA-868673DC228A}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [{8E6AC60D-C189-4D00-B007-F0A3B4A4AF89}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [TCP Query User{D94E59E3-9D10-4729-BBC3-8D4FFD61A48F}C:\program files (x86)\mirc\mirc.exe] => (Allow) C:\program files (x86)\mirc\mirc.exe
FirewallRules: [UDP Query User{B6D57099-5A7C-49B9-85EE-1D5D74ACE926}C:\program files (x86)\mirc\mirc.exe] => (Allow) C:\program files (x86)\mirc\mirc.exe
FirewallRules: [TCP Query User{A19A63CB-2613-47CC-8DAE-68529BBB083A}E:\spiele\steam\steamapps\common\command and conquer 3 tiberium wars\retailexe\1.9\cnc3game.dat] => (Allow) E:\spiele\steam\steamapps\common\command and conquer 3 tiberium wars\retailexe\1.9\cnc3game.dat
FirewallRules: [UDP Query User{3F85C810-5C64-45B5-A392-504C7D96755F}E:\spiele\steam\steamapps\common\command and conquer 3 tiberium wars\retailexe\1.9\cnc3game.dat] => (Allow) E:\spiele\steam\steamapps\common\command and conquer 3 tiberium wars\retailexe\1.9\cnc3game.dat
FirewallRules: [TCP Query User{C7E922D5-1529-40B1-845E-30DD0A8E6F03}C:\elcom\5.1\apps\rteng9.exe] => (Allow) C:\elcom\5.1\apps\rteng9.exe
FirewallRules: [UDP Query User{5B2B9D52-81F2-43E4-B9F0-AD177C52F1D9}C:\elcom\5.1\apps\rteng9.exe] => (Allow) C:\elcom\5.1\apps\rteng9.exe
FirewallRules: [TCP Query User{1DAD5165-B465-452B-8E47-BB98A11934FA}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{80C5885C-1032-47EB-B438-572BB4B78D2E}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [TCP Query User{1F218E04-A692-4BFE-9667-7401C324DC1F}C:\elcom\magnet\apps\rteng9.exe] => (Allow) C:\elcom\magnet\apps\rteng9.exe
FirewallRules: [UDP Query User{B83ED54C-49F2-4C1A-810B-425A0D25689D}C:\elcom\magnet\apps\rteng9.exe] => (Allow) C:\elcom\magnet\apps\rteng9.exe
FirewallRules: [TCP Query User{04D652FA-926F-4181-9897-C1347F56ED39}I:\tools\sdi_r199\sdi_r199.exe] => (Allow) I:\tools\sdi_r199\sdi_r199.exe
FirewallRules: [UDP Query User{1A3198BF-3489-4BC4-80E0-91514566A392}I:\tools\sdi_r199\sdi_r199.exe] => (Allow) I:\tools\sdi_r199\sdi_r199.exe
FirewallRules: [TCP Query User{28F05ADD-38DF-4EED-9DEE-D98101759D92}I:\sdi_r311\sdi_r312.exe] => (Allow) I:\sdi_r311\sdi_r312.exe
FirewallRules: [UDP Query User{564BAB92-3504-4698-8178-33F4999CC591}I:\sdi_r311\sdi_r312.exe] => (Allow) I:\sdi_r311\sdi_r312.exe
FirewallRules: [TCP Query User{4BC69694-0472-4F2F-9E84-662906A57560}I:\sdi_r311\sdi_r311.exe] => (Allow) I:\sdi_r311\sdi_r311.exe
FirewallRules: [UDP Query User{FA11486E-3176-4BA2-BCA6-51368EC826F8}I:\sdi_r311\sdi_r311.exe] => (Allow) I:\sdi_r311\sdi_r311.exe
FirewallRules: [TCP Query User{10DD1BE2-5C46-49D6-9028-7683A2F5A136}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
FirewallRules: [UDP Query User{70836141-4698-4752-9E95-457FA795A7C3}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
FirewallRules: [{19F04B80-5B49-4FCF-987C-282BF963430D}] => (Allow) C:\Users\Tobias\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{DD94AC7C-04A6-4BB2-95F7-8BDE04B6C7F0}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{BC4D3DD4-C314-4944-B78F-EBAA6A59F6D5}] => (Allow) LPort=2869
FirewallRules: [{B5AF6687-0784-4AD4-B52C-AD33C8006B9F}] => (Allow) LPort=1900
FirewallRules: [{61E8F127-532C-4A4A-AEAB-2383BA19AAD2}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{7152E896-1518-4A7F-B492-7C59C3ED2015}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{1F8F3505-5F7D-4722-8955-AA96B74D79E4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{6092DF5C-9606-479A-A2F8-8086AEF752D3}] => (Allow) LPort=5556
FirewallRules: [{4564B3B6-460D-489E-AE17-3B8E87DAB0D4}] => (Allow) LPort=5558
FirewallRules: [TCP Query User{659FA8F0-CCBD-4758-9BCD-E0F9FDD9BCA6}I:\sdi_r423\sdi_r423\sdi_x64_r423.exe] => (Allow) I:\sdi_r423\sdi_r423\sdi_x64_r423.exe
FirewallRules: [UDP Query User{8FE08169-2CA2-4AC3-B1D3-008C2082A94C}I:\sdi_r423\sdi_r423\sdi_x64_r423.exe] => (Allow) I:\sdi_r423\sdi_r423\sdi_x64_r423.exe
FirewallRules: [{4C21A091-A212-4A84-8765-A63DFAA4D682}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{960C8484-9E60-4222-8B61-9BB6E7C6C9B9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{34626EB9-5057-41EB-AA06-8B4EC5B2EBEC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{45EA96ED-D690-40C7-8926-EA9A276794DD}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{AC3B05E7-4AAE-49E3-AF01-E5BB431CE986}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{E034DAE5-D3B1-41DE-BC10-5FC32B8BF240}I:\sdi_r423\sdi_x64_r423.exe] => (Allow) I:\sdi_r423\sdi_x64_r423.exe
FirewallRules: [UDP Query User{C14F0EB9-83D4-4C8D-9D90-D2E896D85568}I:\sdi_r423\sdi_x64_r423.exe] => (Allow) I:\sdi_r423\sdi_x64_r423.exe
FirewallRules: [TCP Query User{422476F0-47BA-4FF5-A470-75B77614438C}I:\tools\sdi_r423\sdi_x64_r423.exe] => (Allow) I:\tools\sdi_r423\sdi_x64_r423.exe
FirewallRules: [UDP Query User{70B66DB7-05B5-4EED-BC4C-9BC808D9D487}I:\tools\sdi_r423\sdi_x64_r423.exe] => (Allow) I:\tools\sdi_r423\sdi_x64_r423.exe
FirewallRules: [TCP Query User{A83939DB-6069-402A-9BBE-442F3377450D}I:\tools\sdi_r423\sdi_r423\sdi_x64_r437.exe] => (Allow) I:\tools\sdi_r423\sdi_r423\sdi_x64_r437.exe
FirewallRules: [UDP Query User{68EAD1EE-118A-45FC-B7FA-AFE3E9B7841C}I:\tools\sdi_r423\sdi_r423\sdi_x64_r437.exe] => (Allow) I:\tools\sdi_r423\sdi_r423\sdi_x64_r437.exe
FirewallRules: [{D77098D6-7744-47B4-A6FD-12586039F6B7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{9C1CDD00-C66F-4B7F-AA54-F82201FFA351}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{CA906822-D8ED-4B5B-BF8D-16D952269B7F}C:\program files (x86)\java\jre1.8.0_74\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_74\bin\jp2launcher.exe
FirewallRules: [UDP Query User{D52C463B-CABF-4BB6-A3C4-3A2EB6AD05A4}C:\program files (x86)\java\jre1.8.0_74\bin\jp2launcher.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_74\bin\jp2launcher.exe
FirewallRules: [TCP Query User{351DBE27-8814-4428-9998-E37EEE60FAB8}I:\tools\sdi_r423\sdi_x64_r438.exe] => (Allow) I:\tools\sdi_r423\sdi_x64_r438.exe
FirewallRules: [UDP Query User{D39F8109-828D-43D1-80B3-D7023B0F2AF4}I:\tools\sdi_r423\sdi_x64_r438.exe] => (Allow) I:\tools\sdi_r423\sdi_x64_r438.exe
FirewallRules: [TCP Query User{C6AB3444-C6D0-4FE2-92DE-3DA51217EEDC}I:\tools\sdi_r423\sdi_x64_r439.exe] => (Allow) I:\tools\sdi_r423\sdi_x64_r439.exe
FirewallRules: [UDP Query User{581B71CD-FBB3-4911-B7CE-8B826D44164E}I:\tools\sdi_r423\sdi_x64_r439.exe] => (Allow) I:\tools\sdi_r423\sdi_x64_r439.exe
FirewallRules: [TCP Query User{58425BB1-3AF1-42E7-8DAC-AC76FF1180CD}I:\tools\sdi_r423\sdi_x64_r439.exe] => (Allow) I:\tools\sdi_r423\sdi_x64_r439.exe
FirewallRules: [UDP Query User{FC1896AF-CE0E-407E-B0B1-20C79795F2E3}I:\tools\sdi_r423\sdi_x64_r439.exe] => (Allow) I:\tools\sdi_r423\sdi_x64_r439.exe
FirewallRules: [{FB680CCD-6F08-40B5-902D-C090EB5A8AAC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{EDCA0D09-B8B7-4CBD-839D-62F65B1A86D3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{39CFA6EA-AA73-4104-BD61-DD8328F693BC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{43A1DC6F-ACC0-483C-82E8-C86EEBD0E646}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [TCP Query User{AC26B345-5F2A-402E-B232-70C4409F088B}C:\users\tobias\downloads\sdi_r453\sdi_r453\sdi_x64_r453.exe] => (Allow) C:\users\tobias\downloads\sdi_r453\sdi_r453\sdi_x64_r453.exe
FirewallRules: [UDP Query User{7FC927A4-CB59-4772-8AE7-5831EEAFFD2A}C:\users\tobias\downloads\sdi_r453\sdi_r453\sdi_x64_r453.exe] => (Allow) C:\users\tobias\downloads\sdi_r453\sdi_r453\sdi_x64_r453.exe
FirewallRules: [TCP Query User{AD14117A-9FFB-4C95-B412-12E053A784B7}I:\tools\sdi_r453\sdi_x64_r453.exe] => (Allow) I:\tools\sdi_r453\sdi_x64_r453.exe
FirewallRules: [UDP Query User{1416D0F5-AB2D-489E-A33F-4B4321D79D90}I:\tools\sdi_r453\sdi_x64_r453.exe] => (Allow) I:\tools\sdi_r453\sdi_x64_r453.exe
FirewallRules: [{F19D8E74-932A-48DD-BA71-656C436D3DEC}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Wiederherstellungspunkte =========================

29-05-2016 09:37:27 Windows Update
01-06-2016 17:12:17 Windows Update
02-06-2016 00:12:15 Installed drivers
02-06-2016 00:19:32 Installed drivers
05-06-2016 04:08:19 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: AODDriver4.2.0
Description: AODDriver4.2.0
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: AODDriver4.2.0
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (06/05/2016 04:50:53 AM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz   konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet.   0x0.

Error: (06/05/2016 04:50:53 AM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Kontext:  Anwendung, SystemIndex Katalog

Error: (06/05/2016 04:50:53 AM) (Source: Windows Search Service) (EventID: 3006) (User: )
Description: Die Leistungsüberwachung kann für den Gatherer-Dienst nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Error: (06/05/2016 04:49:34 AM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz   konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet.   0x0.

Error: (06/05/2016 04:49:34 AM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Kontext:  Anwendung, SystemIndex Katalog

Error: (06/05/2016 04:49:34 AM) (Source: Windows Search Service) (EventID: 3006) (User: )
Description: Die Leistungsüberwachung kann für den Gatherer-Dienst nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Error: (06/05/2016 04:45:39 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (06/02/2016 12:19:32 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {71d54fb2-34e3-40eb-9f39-146c9f244416}

Error: (06/02/2016 12:18:43 AM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz   konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet.   0x0.

Error: (06/02/2016 12:18:43 AM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Kontext:  Anwendung, SystemIndex Katalog


Systemfehler:
=============
Error: (06/05/2016 04:50:52 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.3" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (06/05/2016 04:50:52 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.2.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (06/05/2016 04:49:25 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/05/2016 04:49:25 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/05/2016 04:49:25 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Secunia Update Agent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (06/05/2016 04:49:25 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Secunia PSI Agent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (06/05/2016 04:49:25 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/05/2016 04:49:24 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Live ID Sign-in Assistant" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/05/2016 04:49:24 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "AOMEI Backupper Scheduler Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (06/05/2016 04:49:24 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Adobe Acrobat Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


CodeIntegrity:
===================================
  Date: 2015-07-17 23:27:53.344
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-07-17 23:27:53.275
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-07-17 23:27:45.818
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-07-17 23:27:45.746
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-07-17 23:27:01.966
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-07-17 23:27:01.888
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-07-17 23:26:05.462
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-07-17 23:26:05.400
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-07-17 23:23:27.567
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-07-17 23:23:27.499
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\AtihdW76.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Speicherinformationen =========================== 

Prozessor: AMD Phenom(tm) II X4 965 Processor
Prozentuale Nutzung des RAM: 35%
Installierter physikalischer RAM: 8189.09 MB
Verfügbarer physikalischer RAM: 5273.11 MB
Summe virtueller Speicher: 16376.37 MB
Verfügbarer virtueller Speicher: 13374.96 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:238.37 GB) (Free:53.2 GB) NTFS
Drive d: (ST2016) (CDROM) (Total:0.63 GB) (Free:0 GB) CDFS
Drive e: (Downloads & Spiele) (Fixed) (Total:465.76 GB) (Free:20.93 GB) NTFS
Drive f: (Medienbibliothek) (Fixed) (Total:1863.01 GB) (Free:77.16 GB) NTFS
Drive h: (Filme & Downloads) (Fixed) (Total:465.76 GB) (Free:21.87 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 00AE1392)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=238.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 119EB49F)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: 423C423B)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 77457857)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

burningice · 05.06.2016, 18:23

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {09d516ca-2b55-11e1-997d-806e6f6e6963} - D:\start.exe /auto
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {27cae23b-1441-11e0-9040-806e6f6e6963} - D:\menue.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {84a4c421-15fb-11e0-b25e-00241d273df8} - H:\setup.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {97310e1f-b813-11e2-ad6d-00241d273df8} - I:\Autorun.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {a62ddaff-7d98-11e0-bd82-001150f5aa18} - G:\SamsungKiesInstaller.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {c5f43e28-3797-11e4-bebe-00241d273df8} - I:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {dd8eb564-382c-11e0-b38d-001150f5aa18} - J:\setup.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {e0c6157a-980e-11e3-9036-020406080a0c} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {ffad9440-5ded-11e3-a58d-00241d273df8} - M:\HTC_Sync_Manager_PC.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
Toolbar: HKLM - Kein Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Keine Datei
Toolbar: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> Kein Name - {A13C2648-91D4-4BF3-BC6D-0079707C4389} -  Keine Datei
Toolbar: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> Kein Name - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -  Keine Datei
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} -  Keine Datei
CHR HomePage: Default -> hxxp://taplika.com/?f=1&a=tlk_ir_15_06&cd=2XzuyEtN2Y1L1Qzu0EyC0BzzyEzz0AtA0FtCyEtCtDyCtCyEtN0D0Tzu0StCtCtBzztN1L2XzutAtFyBtFtBtFtDtN1L1CzutCyEtBzytDyD1V1BtAtN1L1G1B1V1N2Y1L1Qzu2SyC0BzzyB0DtB0F0BtGtAyE0AtCtGyDyDyDyCtG0F0BtBtAtGtDyC0FtCtDyDzzzy0C0B0B0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAyD0BtAtByD0EtCtG0A0FtBtCtGyEtDyEtCtG0B0F0A0FtGyDyC0CyEtByDyC0C0C0DyC0A2Q&cr=362526228&ir=
CHR StartupUrls: Default -> "hxxp://taplika.com/?f=7&a=tlk_ir_15_06&cd=2XzuyEtN2Y1L1Qzu0EyC0BzzyEzz0AtA0FtCyEtCtDyCtCyEtN0D0Tzu0StCtCtBzztN1L2XzutAtFyBtFtBtFtDtN1L1CzutCyEtBzytDyD1V1BtAtN1L1G1B1V1N2Y1L1Qzu2SyC0BzzyB0DtB0F0BtGtAyE0AtCtGyDyDyDyCtG0F0BtBtAtGtDyC0FtCtDyDzzzy0C0B0B0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAyD0BtAtByD0EtCtG0A0FtBtCtGyEtDyEtCtG0B0F0A0FtGyDyC0CyEtByDyC0C0C0DyC0A2Q&cr=362526228&ir=","hxxp://myhome.vi-view.com/?type=hp&ts=1422909745&from=cor&uid=M4-CT256M4SSD2_00000000130109243A4E"
CHR HKLM-x32\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - <kein Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [heoldelcflnigdllmlopiefhkkobendj] - <kein Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - <kein Path/update_url>
AlternateDataStreams: C:\ProgramData\TEMP:1AAB2E68 [240]
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1 [112]
AlternateDataStreams: C:\Users\Tobias\Downloads\BOM21412_setup.exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\chromeinstall-7u25.exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\Kabel_light_demo_setup.exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\PandaCloudAntivirus.exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\PSISetup (1).exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\spybot-2.4.exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\WebInstaller_2002 (1).exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\WebInstaller_2002.exe:BDU [0]
FirewallRules: [{069687EB-F6C4-4A8A-99BF-2EEBF7AF5399}] => (Allow) LPort=23423
FirewallRules: [{BC4D3DD4-C314-4944-B78F-EBAA6A59F6D5}] => (Allow) LPort=2869
emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Ecronika · 07.06.2016, 17:58

Code:

ATTFilter

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:06-06-2016
durchgeführt von Tobias (2016-06-07 18:54:23) Run:1
Gestartet von C:\Users\Tobias\Desktop
Geladene Profile: Tobias (Verfügbare Profile: Tobias & Lilly)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {09d516ca-2b55-11e1-997d-806e6f6e6963} - D:\start.exe /auto
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {27cae23b-1441-11e0-9040-806e6f6e6963} - D:\menue.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {84a4c421-15fb-11e0-b25e-00241d273df8} - H:\setup.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {97310e1f-b813-11e2-ad6d-00241d273df8} - I:\Autorun.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {a62ddaff-7d98-11e0-bd82-001150f5aa18} - G:\SamsungKiesInstaller.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {c5f43e28-3797-11e4-bebe-00241d273df8} - I:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {dd8eb564-382c-11e0-b38d-001150f5aa18} - J:\setup.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {e0c6157a-980e-11e3-9036-020406080a0c} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\...\MountPoints2: {ffad9440-5ded-11e3-a58d-00241d273df8} - M:\HTC_Sync_Manager_PC.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
Toolbar: HKLM - Kein Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Keine Datei
Toolbar: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> Kein Name - {A13C2648-91D4-4BF3-BC6D-0079707C4389} -  Keine Datei
Toolbar: HKU\S-1-5-21-3455670051-300026812-3451469050-1000 -> Kein Name - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -  Keine Datei
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} -  Keine Datei
CHR HomePage: Default -> hxxp://taplika.com/?f=1&a=tlk_ir_15_06&cd=2XzuyEtN2Y1L1Qzu0EyC0BzzyEzz0AtA0FtCyEtCtDyCtCyEtN0D0Tzu0StCtCtBzztN1L2XzutAtFyBtFtBtFtDtN1L1CzutCyEtBzytDyD1V1BtAtN1L1G1B1V1N2Y1L1Qzu2SyC0BzzyB0DtB0F0BtGtAyE0AtCtGyDyDyDyCtG0F0BtBtAtGtDyC0FtCtDyDzzzy0C0B0B0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAyD0BtAtByD0EtCtG0A0FtBtCtGyEtDyEtCtG0B0F0A0FtGyDyC0CyEtByDyC0C0C0DyC0A2Q&cr=362526228&ir=
CHR StartupUrls: Default -> "hxxp://taplika.com/?f=7&a=tlk_ir_15_06&cd=2XzuyEtN2Y1L1Qzu0EyC0BzzyEzz0AtA0FtCyEtCtDyCtCyEtN0D0Tzu0StCtCtBzztN1L2XzutAtFyBtFtBtFtDtN1L1CzutCyEtBzytDyD1V1BtAtN1L1G1B1V1N2Y1L1Qzu2SyC0BzzyB0DtB0F0BtGtAyE0AtCtGyDyDyDyCtG0F0BtBtAtGtDyC0FtCtDyDzzzy0C0B0B0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAyD0BtAtByD0EtCtG0A0FtBtCtGyEtDyEtCtG0B0F0A0FtGyDyC0CyEtByDyC0C0C0DyC0A2Q&cr=362526228&ir=","hxxp://myhome.vi-view.com/?type=hp&ts=1422909745&from=cor&uid=M4-CT256M4SSD2_00000000130109243A4E"
CHR HKLM-x32\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - <kein Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [heoldelcflnigdllmlopiefhkkobendj] - <kein Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - <kein Path/update_url>
AlternateDataStreams: C:\ProgramData\TEMP:1AAB2E68 [240]
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1 [112]
AlternateDataStreams: C:\Users\Tobias\Downloads\BOM21412_setup.exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\chromeinstall-7u25.exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\Kabel_light_demo_setup.exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\PandaCloudAntivirus.exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\PSISetup (1).exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\spybot-2.4.exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\WebInstaller_2002 (1).exe:BDU [0]
AlternateDataStreams: C:\Users\Tobias\Downloads\WebInstaller_2002.exe:BDU [0]
FirewallRules: [{069687EB-F6C4-4A8A-99BF-2EEBF7AF5399}] => (Allow) LPort=23423
FirewallRules: [{BC4D3DD4-C314-4944-B78F-EBAA6A59F6D5}] => (Allow) LPort=2869
emptytemp:
         
*****************

"HKU\S-1-5-21-3455670051-300026812-3451469050-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{09d516ca-2b55-11e1-997d-806e6f6e6963}" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{09d516ca-2b55-11e1-997d-806e6f6e6963} => Schlüssel nicht gefunden. 
"HKU\S-1-5-21-3455670051-300026812-3451469050-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{27cae23b-1441-11e0-9040-806e6f6e6963}" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{27cae23b-1441-11e0-9040-806e6f6e6963} => Schlüssel nicht gefunden. 
"HKU\S-1-5-21-3455670051-300026812-3451469050-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{84a4c421-15fb-11e0-b25e-00241d273df8}" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{84a4c421-15fb-11e0-b25e-00241d273df8} => Schlüssel nicht gefunden. 
"HKU\S-1-5-21-3455670051-300026812-3451469050-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{97310e1f-b813-11e2-ad6d-00241d273df8}" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{97310e1f-b813-11e2-ad6d-00241d273df8} => Schlüssel nicht gefunden. 
"HKU\S-1-5-21-3455670051-300026812-3451469050-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a62ddaff-7d98-11e0-bd82-001150f5aa18}" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{a62ddaff-7d98-11e0-bd82-001150f5aa18} => Schlüssel nicht gefunden. 
"HKU\S-1-5-21-3455670051-300026812-3451469050-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c5f43e28-3797-11e4-bebe-00241d273df8}" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{c5f43e28-3797-11e4-bebe-00241d273df8} => Schlüssel nicht gefunden. 
"HKU\S-1-5-21-3455670051-300026812-3451469050-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dd8eb564-382c-11e0-b38d-001150f5aa18}" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{dd8eb564-382c-11e0-b38d-001150f5aa18} => Schlüssel nicht gefunden. 
"HKU\S-1-5-21-3455670051-300026812-3451469050-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e0c6157a-980e-11e3-9036-020406080a0c}" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{e0c6157a-980e-11e3-9036-020406080a0c} => Schlüssel nicht gefunden. 
"HKU\S-1-5-21-3455670051-300026812-3451469050-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ffad9440-5ded-11e3-a58d-00241d273df8}" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{ffad9440-5ded-11e3-a58d-00241d273df8} => Schlüssel nicht gefunden. 
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => Schlüssel nicht gefunden. 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Wert erfolgreich wiederhergestellt
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Wert erfolgreich wiederhergestellt
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\Software\Microsoft\Internet Explorer\Main\\Search Page => Wert erfolgreich wiederhergestellt
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\Software\Microsoft\Internet Explorer\Main\\Search Bar => Wert erfolgreich entfernt
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wert erfolgreich wiederhergestellt
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F}" => Schlüssel erfolgreich entfernt
HKCR\Wow6432Node\CLSID\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} => Schlüssel nicht gefunden. 
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wert erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => Wert erfolgreich entfernt
HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => Schlüssel nicht gefunden. 
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{A13C2648-91D4-4BF3-BC6D-0079707C4389} => Wert erfolgreich entfernt
HKCR\CLSID\{A13C2648-91D4-4BF3-BC6D-0079707C4389} => Schlüssel nicht gefunden. 
HKU\S-1-5-21-3455670051-300026812-3451469050-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{1DAC0C53-7D23-4AB3-856A-B04D98CD982A} => Wert erfolgreich entfernt
HKCR\CLSID\{1DAC0C53-7D23-4AB3-856A-B04D98CD982A} => Schlüssel nicht gefunden. 
"HKCR\PROTOCOLS\Handler\tmtbim" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{0B37915C-8B98-4B9E-80D4-464D2C830D10} => Schlüssel nicht gefunden. 
Chrome HomePage => erfolgreich entfernt
Chrome StartupUrls => erfolgreich entfernt
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fnjbmmemklcjgepojigaapkoodmkgbae" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\heoldelcflnigdllmlopiefhkkobendj" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\nneajnkjbffgblleaoojgaacokifdkhm" => Schlüssel erfolgreich entfernt
C:\ProgramData\TEMP => ":1AAB2E68" ADS erfolgreich entfernt.
C:\ProgramData\TEMP => ":D1B5B4F1" ADS erfolgreich entfernt.
C:\Users\Tobias\Downloads\BOM21412_setup.exe => ":BDU" ADS erfolgreich entfernt.
C:\Users\Tobias\Downloads\chromeinstall-7u25.exe => ":BDU" ADS erfolgreich entfernt.
C:\Users\Tobias\Downloads\Kabel_light_demo_setup.exe => ":BDU" ADS erfolgreich entfernt.
C:\Users\Tobias\Downloads\PandaCloudAntivirus.exe => ":BDU" ADS erfolgreich entfernt.
C:\Users\Tobias\Downloads\PSISetup (1).exe => ":BDU" ADS erfolgreich entfernt.
C:\Users\Tobias\Downloads\spybot-2.4.exe => ":BDU" ADS erfolgreich entfernt.
C:\Users\Tobias\Downloads\WebInstaller_2002 (1).exe => ":BDU" ADS erfolgreich entfernt.
C:\Users\Tobias\Downloads\WebInstaller_2002.exe => ":BDU" ADS erfolgreich entfernt.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{069687EB-F6C4-4A8A-99BF-2EEBF7AF5399} => Wert erfolgreich entfernt
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BC4D3DD4-C314-4944-B78F-EBAA6A59F6D5} => Wert erfolgreich entfernt
EmptyTemp: => 3.4 GB temporäre Dateien entfernt.


Das System musste neu gestartet werden.

==== Ende von Fixlog 18:54:34 ====

burningice · 07.06.2016, 18:44

Hast du noch irgendwelche Probleme mit deinem Rechner?

Ecronika · 07.06.2016, 19:14

Wie zuvor, keine erkenntlichen Probleme, Nein.

07.06.2016, 18:44	#14
burningice /// Malwareteam	Unsicher über Anwendung von CryptoPrevent u.a. Hast du noch irgendwelche Probleme mit deinem Rechner? __________________ Mfg, Rafael ~ I'm storm. I'm calm. I'm fire. I'm ice. I'm burningice. ~ Unterstütze uns mit einer Spende ......... Lob, Kritik oder Wünsche ......... .......... Folge uns auf Facebook ..........

Unsicher über Anwendung von CryptoPrevent u.a.

Log-Analyse und Auswertung: Unsicher über Anwendung von CryptoPrevent u.a.