|
Log-Analyse und Auswertung: Windows 7: Sehr langsam gewordenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
02.06.2016, 13:29 | #1 |
| Windows 7: Sehr langsam geworden Hallo zusammen, seit kurzem ist mein Dienstlaptop sehr langsam geworden. Da wir nur ein kleines Unternehmen sind, haben wir keinen eigenen IT-Support und ich hoffe, dass man mir hier helfen kann. Der Laptop ist allgemein beim Bedienen (z.B. beim Programmieren) langsamer geworden und auch beim Surfen laden alle Seiten langsamer als ursprünglich. Virenmeldungen o.Ä. habe ich nicht erhalten. FRST.txt: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:01-06-2016 durchgeführt von ****** (Administrator) auf ******-PC (02-06-2016 11:19:19) Gestartet von C:\Users\******\Desktop Geladene Profile: ****** (Verfügbare Profile: ******) Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (AMD) C:\Windows\System32\atiesrxx.exe (Dell Inc.) C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Dell Inc.) C:\Program Files\Dell\DW WLAN Card\BCMWLTRY.EXE (AMD) C:\Windows\System32\atieclxx.exe (Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe (Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe (Apache Software Foundation) C:\Program Files (x86)\Zend\Apache2\bin\httpd.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe.bak (International Business Machines Corporation) C:\Program Files (x86)\IBM\SQLLIB\BIN\db2mgmtsvc.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Bitdefender) C:\Program Files\Bitdefender\Endpoint Security\epag.exe (Bitdefender) C:\Program Files\Bitdefender\Endpoint Security\epintegrationservice.exe (Bitdefender) C:\Program Files\Bitdefender\Endpoint Security\epsecurityservice.exe (Bitdefender) C:\Program Files\Bitdefender\Endpoint Security\epupdateservice.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe () C:\Program Files (x86)\EasyPHP-DevServer-14.1VC11\binaries\mysql\bin\eds-mysqld.exe () C:\Program Files (x86)\Zend\MySQL55\bin\mysqld.exe (Dell Inc.) C:\Program Files\Dell\PPO\poaService.exe (Dell Inc.) C:\Program Files\Dell\PPO\poaSmSrv.exe (Dell Inc.) C:\Program Files\Dell\PPO\poaTaServ.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\pg_ctl.exe (Apache Software Foundation) C:\Program Files (x86)\Zend\Apache2\bin\httpd.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\postgres.exe (Zend Technologies Ltd.) C:\Program Files (x86)\Zend\ZendServer\bin\zdd.exe (Zend Technologies Ltd.) C:\Program Files (x86)\Zend\ZendServer\bin\jqd.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\postgres.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\postgres.exe (Zend Technologies Ltd.) C:\Program Files (x86)\Zend\ZendServer\bin\MonitorNode.exe (Apache Software Foundation) C:\Program Files (x86)\Zend\Apache2\bin\ApacheMonitor.exe (Zend Technologies Ltd.) C:\Program Files (x86)\Zend\ZendServer\bin\zsd.exe (Zend Technologies Ltd.) C:\Program Files (x86)\Zend\ZendServer\bin\scd.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe (Bitdefender) C:\Program Files\Bitdefender\Endpoint Security\epconsole.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (O2Micro International) C:\Windows\System32\drivers\o2flash.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe (JetBrains s.r.o.) C:\Program Files (x86)\JetBrains\PhpStorm 10.0.3\bin\PhpStorm.exe (JetBrains s.r.o.) C:\Program Files (x86)\JetBrains\PhpStorm 10.0.3\bin\fsnotifier.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (JetBrains s.r.o.) C:\Program Files (x86)\JetBrains\PhpStorm 10.0.3\bin\runnerw.exe (Joyent, Inc) C:\Program Files (x86)\nodejs\node.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2717197321-735008668-2171964612-1000\...\Run: [sciebo] => C:\Program Files (x86)\sciebo\sciebo.exe [35994223 2016-02-22] () HKU\S-1-5-21-2717197321-735008668-2171964612-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8455960 2015-08-20] (Piriform Ltd) Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll ShellIconOverlayIdentifiers: [ OCError] -> {0960F090-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-02-16] (ownCloud Inc.) ShellIconOverlayIdentifiers: [ OCOK] -> {0960F092-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-02-16] (ownCloud Inc.) ShellIconOverlayIdentifiers: [ OCOKShared] -> {0960F093-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-02-16] (ownCloud Inc.) ShellIconOverlayIdentifiers: [ OCSync] -> {0960F094-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-02-16] (ownCloud Inc.) ShellIconOverlayIdentifiers: [ OCWarning] -> {0960F096-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-02-16] (ownCloud Inc.) ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Apache Web Server Monitor.lnk [2015-04-14] ShortcutTarget: Apache Web Server Monitor.lnk -> C:\Program Files (x86)\Zend\Apache2\bin\ApacheMonitor.exe (Apache Software Foundation) Startup: C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\appassure - Kopie.bat [2016-02-18] () ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) ProxyServer: [S-1-5-21-2717197321-735008668-2171964612-1000] => proxy.bku.int:8080 Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.101.208.254 Tcpip\..\Interfaces\{42898DD9-FD51-496C-9331-4F4F1020F4E9}: [DhcpNameServer] 192.101.208.254 Tcpip\..\Interfaces\{D7A32A57-E264-4FB9-8345-15DB70E718AF}: [DhcpNameServer] 10.63.250.1 Internet Explorer: ================== HKU\S-1-5-21-2717197321-735008668-2171964612-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://dell13.msn.com/?pc=DCJB HKU\S-1-5-21-2717197321-735008668-2171964612-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell13.msn.com/?pc=DCJB SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2717197321-735008668-2171964612-1000 -> DefaultScope {325EF410-2F76-402A-A8BC-16B4B4CA937D} URL = SearchScopes: HKU\S-1-5-21-2717197321-735008668-2171964612-1000 -> {325EF410-2F76-402A-A8BC-16B4B4CA937D} URL = BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-05-09] (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2016-05-09] (Microsoft Corporation) BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-05-09] (Microsoft Corporation) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2016-05-09] (Microsoft Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2016-05-09] (Microsoft Corporation) BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-05-09] (Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-05-09] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-05-09] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-05-09] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-05-09] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\us4bfpfd.default FF Homepage: hxxps://www.google.de/?gws_rd=ssl FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-18] () FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei] FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-18] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-11-13] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-11-13] (Intel Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei] FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-05-09] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll [2013-05-13] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-05-09] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-04-23] (Adobe Systems Inc.) FF SearchPlugin: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\us4bfpfd.default\searchplugins\google-bersetzer.xml [2015-03-13] FF SearchPlugin: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\us4bfpfd.default\searchplugins\stack-overflow.xml [2015-02-27] FF Extension: WOT - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\us4bfpfd.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-12-14] FF Extension: NoScript - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\us4bfpfd.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-06-01] FF Extension: Adblock Plus - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\us4bfpfd.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-06-01] FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => nicht gefunden Chrome: ======= CHR DefaultSearchKeyword: Default -> jb CHR Profile: C:\Users\******\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-02] CHR Extension: (Google Drive) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-26] CHR Extension: (UI5 Inspector) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\bebecogbafbighhaildooiibipcnbngo [2016-05-03] CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2016-06-02] CHR Extension: (YouTube) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (Adblock Plus) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-06-02] CHR Extension: (JSONView) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\chklaanhfefbnpoihckbnefhakgolnmc [2016-04-28] CHR Extension: (Google-Suche) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28] CHR Extension: (Google Docs Offline) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-29] CHR Extension: (JetBrains IDE Support) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmhgeddbohgjknpmjagkdomcpobmllji [2016-04-27] CHR Extension: (Leo Dictionary Widget) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\kepemmpmljphklmpfgfmhpjhpdlccpke [2015-07-08] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-11] CHR Extension: (Google Mail) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-13] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S2 Apache; C:\Program Files (x86)\EasyPHP-DevServer-14.1VC11\binaries\apache\bin\eds-httpd.exe [22016 2013-11-22] (Apache Software Foundation) [Datei ist nicht signiert] R2 Apache2.2-Zend; C:\Program Files (x86)\Zend\Apache2\bin\httpd.exe [23168 2014-12-29] (Apache Software Foundation) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2911472 2016-05-02] (Microsoft Corporation) R2 DB2MGMTSVC_DB2COPY1; C:\Program Files (x86)\IBM\SQLLIB\BIN\db2mgmtsvc.exe [38688 2009-04-04] (International Business Machines Corporation) S3 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2486272 2013-04-30] (Dell Inc.) [Datei ist nicht signiert] R2 epag; C:\Program Files\Bitdefender\Endpoint Security\epag.exe [3378336 2016-04-14] (Bitdefender) R2 EPIntegrationService; C:\Program Files\Bitdefender\Endpoint Security\EPIntegrationService.exe [100392 2016-04-14] (Bitdefender) R2 EPSecurityService; C:\Program Files\Bitdefender\Endpoint Security\EPSecurityService.exe [100392 2016-04-14] (Bitdefender) R2 EPUpdateService; C:\Program Files\Bitdefender\Endpoint Security\EPUpdateService.exe [100392 2016-04-14] (Bitdefender) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-10-28] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Datei ist nicht signiert] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) S3 InvProtectSvc; C:\Program Files (x86)\Invincea\Enterprise\X64\InvProtectSvc64.exe [2947856 2013-07-30] (Invincea, Inc.) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-11-13] (Intel Corporation) U2 MySQL; C:\Program Files (x86)\EasyPHP-DevServer-14.1VC11\binaries\mysql\bin\eds-mysqld.exe [10964480 2013-11-18] () [Datei ist nicht signiert] R2 MySQL_ZendServer55; C:\Program Files (x86)\Zend\MySQL55\my.ini [8967 2016-01-26] () [Datei ist nicht signiert] S3 ose; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [202288 2016-04-28] (Microsoft Corporation) [Datei ist nicht signiert] R2 poaService; C:\Program Files\Dell\PPO\poaService.exe [641232 2013-12-18] (Dell Inc.) R2 PoaSMSrv; C:\Program Files\Dell\PPO\poaSmSrv.exe [277712 2013-12-18] (Dell Inc.) R2 poaTaServ; C:\Program Files\Dell\PPO\poaTaServ.exe [516304 2013-12-18] (Dell Inc.) R2 postgresql-9.3; C:\Program Files (x86)\PostgreSQL\9.3\bin\pg_ctl.exe [76800 2014-07-22] (PostgreSQL Global Development Group) [Datei ist nicht signiert] S2 RapidRecoveryAgent; C:\Program Files\AppRecovery\Agent\Agent.Service.exe [77120 2016-02-01] (Dell) S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2009-10-20] (CACE Technologies, Inc.) S2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-06-19] (Realtek Semiconductor) S3 SboxSvc; C:\Program Files (x86)\Invincea\Enterprise\Sandbox\SboxSvc.exe [124616 2013-07-30] () S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2014-06-28] (Microsoft Corporation) R2 wltrysvc; C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe [6169600 2014-06-28] (Dell Inc.) [Datei ist nicht signiert] R2 ZendDeployment; C:\Program Files (x86)\Zend\ZendServer\bin\zdd.exe [1460864 2014-12-29] (Zend Technologies Ltd.) R2 ZendJobQueue; C:\Program Files (x86)\Zend\ZendServer\bin\jqd.exe [1318528 2014-12-29] (Zend Technologies Ltd.) [Datei ist nicht signiert] R2 ZendMonitor; C:\Program Files (x86)\Zend\ZendServer\bin\MonitorNode.exe [615552 2014-12-29] (Zend Technologies Ltd.) R2 ZendServerDaemon; C:\Program Files (x86)\Zend\ZendServer\bin\zsd.exe [2066048 2014-12-29] (Zend Technologies Ltd.) R2 ZendSessionClustering; C:\Program Files (x86)\Zend\ZendServer\bin\scd.exe [1179776 2014-12-29] (Zend Technologies Ltd.) [Datei ist nicht signiert] R2 Dell.PowerManager.Service; C:\Windows\system32\dllhost.exe /Processid:{2C33F44B-6CE9-471D-9D87-A8F6AD7630E0} S2 DellDRLogSvc; C:\Program Files\AppRecovery\Agent\DellLogService\DellDRLogSvc [X] S2 MySQL_ZendServer51; "C:\Program Files (x86)\Zend\MySQL51\bin\mysqld" --defaults-file="C:\Program Files (x86)\Zend\MySQL51\my.ini" MySQL_ZendServer51 ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R0 AAFsFlt; C:\Windows\System32\DRIVERS\AAFsFlt.sys [77008 2016-02-01] (Dell Inc.) S3 AAVdisk; C:\Windows\System32\DRIVERS\AAVdisk.sys [70864 2016-02-01] (Dell Inc.) R0 AAVolFlt; C:\Windows\System32\DRIVERS\AAVolFlt.sys [83152 2016-02-01] (Dell Inc.) R3 AAVStor; C:\Windows\System32\DRIVERS\AAVStor.sys [58576 2016-02-01] (Dell Inc.) R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [36608 2013-12-14] (Advanced Micro Devices, Inc.) R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1623536 2016-04-14] (BitDefender) R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [842152 2016-04-14] (BitDefender) S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [170200 2014-06-28] (Broadcom Corporation.) R1 Bdfndisf; C:\Windows\System32\DRIVERS\BdfNdisf6.sys [102328 2015-12-23] (BitDefender LLC) R1 Bdfwfpf; C:\Program Files\Bitdefender\Endpoint Security\bdfwfpf.sys [103504 2011-11-14] (BitDefender LLC) R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [23312 2013-04-29] (Dell Computer Corporation) S3 dmodusb; C:\Windows\System32\DRIVERS\dmodusb.sys [32768 2008-12-17] (Windows (R) Codename Longhorn DDK provider) R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [489752 2014-08-14] (Intel Corporation) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [182936 2016-04-14] (BitDefender LLC) R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28008 2013-10-19] (Intel Corporation) R3 IntcAzAudAddService; C:\Windows\System32\drivers\RTDVHD64.sys [2261464 2013-08-27] (Realtek Semiconductor Corp.) S3 InvProtectDrv; C:\Program Files (x86)\Invincea\Enterprise\X64\InvProtectDrv64.sys [34824 2013-07-30] () R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-11-13] (Intel Corporation) R2 NPF; C:\Windows\System32\drivers\npf.sys [47632 2009-10-20] (CACE Technologies, Inc.) R3 O2FJ2RDR; C:\Windows\System32\DRIVERS\O2FJ2w7x64.sys [185760 2013-05-07] (O2Micro ) R3 POADrvr; C:\Windows\System32\drivers\POADrvr.sys [21264 2013-12-18] (Dell Computer Corporation) S3 SboxDrv; C:\Program Files (x86)\Invincea\Enterprise\Sandbox\SboxDrv.sys [202248 2013-07-30] () R3 ST_ACCEL; C:\Windows\System32\DRIVERS\ST_Accel.sys [75976 2013-08-06] (STMicroelectronics) R2 trufos; C:\Windows\System32\DRIVERS\trufos.sys [511320 2016-04-14] (BitDefender S.R.L.) R3 WinDriver6; C:\Windows\System32\drivers\windrvr6.sys [254976 2013-10-13] (Jungo) R2 XilinxPC4Driver; C:\Windows\System32\drivers\xpc4drvr.sys [27384 2013-10-13] (Xilinx, Inc.) ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-06-02 11:19 - 2016-06-02 11:22 - 00028272 _____ C:\Users\******\Desktop\FRST.txt 2016-06-02 11:18 - 2016-06-02 11:19 - 00000000 ____D C:\FRST 2016-06-02 11:15 - 2016-06-02 11:15 - 02383872 _____ (Farbar) C:\Users\******\Desktop\FRST64.exe 2016-06-01 11:44 - 2016-06-01 16:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-06-01 11:03 - 2016-06-01 12:00 - 00000000 ____D C:\Users\******\AppData\Local\VSIXInstaller 2016-05-23 14:06 - 2016-05-23 14:06 - 00000000 ____D C:\Users\******\Präsentation 2016-05-19 15:21 - 2016-05-19 15:21 - 00000000 ____D C:\Users\******\AppData\Local\Composer 2016-05-19 15:21 - 2016-05-19 15:21 - 00000000 ____D C:\ProgramData\ComposerSetup 2016-05-19 15:21 - 2016-05-19 15:21 - 00000000 ____D C:\Program Files (x86)\ComposerSetup 2016-05-19 15:20 - 2016-05-19 15:20 - 00751448 _____ (getcomposer.org ) C:\Users\******\Downloads\Composer-Setup (1).exe 2016-05-19 15:19 - 2016-05-19 15:19 - 00751448 _____ (getcomposer.org ) C:\Users\******\Downloads\Composer-Setup.exe 2016-05-19 14:41 - 2016-05-19 14:41 - 00000815 _____ C:\Users\******\Downloads\yii 2016-05-11 08:57 - 2016-04-23 19:08 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2016-05-11 08:57 - 2016-04-23 18:24 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2016-05-11 08:57 - 2016-04-23 07:25 - 25816064 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-05-11 08:57 - 2016-04-23 07:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2016-05-11 08:57 - 2016-04-23 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2016-05-11 08:57 - 2016-04-23 07:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2016-05-11 08:57 - 2016-04-23 07:00 - 02893312 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-05-11 08:57 - 2016-04-23 07:00 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2016-05-11 08:57 - 2016-04-23 07:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2016-05-11 08:57 - 2016-04-23 07:00 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2016-05-11 08:57 - 2016-04-23 07:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2016-05-11 08:57 - 2016-04-23 06:52 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2016-05-11 08:57 - 2016-04-23 06:51 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2016-05-11 08:57 - 2016-04-23 06:48 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2016-05-11 08:57 - 2016-04-23 06:47 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2016-05-11 08:57 - 2016-04-23 06:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2016-05-11 08:57 - 2016-04-23 06:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2016-05-11 08:57 - 2016-04-23 06:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2016-05-11 08:57 - 2016-04-23 06:46 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2016-05-11 08:57 - 2016-04-23 06:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2016-05-11 08:57 - 2016-04-23 06:36 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2016-05-11 08:57 - 2016-04-23 06:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2016-05-11 08:57 - 2016-04-23 06:27 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2016-05-11 08:57 - 2016-04-23 06:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2016-05-11 08:57 - 2016-04-23 06:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2016-05-11 08:57 - 2016-04-23 06:21 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2016-05-11 08:57 - 2016-04-23 06:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2016-05-11 08:57 - 2016-04-23 06:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2016-05-11 08:57 - 2016-04-23 06:11 - 20350464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2016-05-11 08:57 - 2016-04-23 06:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2016-05-11 08:57 - 2016-04-23 06:08 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2016-05-11 08:57 - 2016-04-23 06:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2016-05-11 08:57 - 2016-04-23 06:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2016-05-11 08:57 - 2016-04-23 06:07 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2016-05-11 08:57 - 2016-04-23 06:07 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2016-05-11 08:57 - 2016-04-23 06:07 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2016-05-11 08:57 - 2016-04-23 06:06 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2016-05-11 08:57 - 2016-04-23 06:06 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2016-05-11 08:57 - 2016-04-23 06:05 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2016-05-11 08:57 - 2016-04-23 06:04 - 02285568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2016-05-11 08:57 - 2016-04-23 06:02 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2016-05-11 08:57 - 2016-04-23 06:01 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2016-05-11 08:57 - 2016-04-23 06:00 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-05-11 08:57 - 2016-04-23 05:59 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2016-05-11 08:57 - 2016-04-23 05:58 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2016-05-11 08:57 - 2016-04-23 05:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2016-05-11 08:57 - 2016-04-23 05:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2016-05-11 08:57 - 2016-04-23 05:51 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2016-05-11 08:57 - 2016-04-23 05:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2016-05-11 08:57 - 2016-04-23 05:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2016-05-11 08:57 - 2016-04-23 05:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2016-05-11 08:57 - 2016-04-23 05:43 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2016-05-11 08:57 - 2016-04-23 05:41 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2016-05-11 08:57 - 2016-04-23 05:40 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2016-05-11 08:57 - 2016-04-23 05:39 - 01547776 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2016-05-11 08:57 - 2016-04-23 05:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2016-05-11 08:57 - 2016-04-23 05:36 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2016-05-11 08:57 - 2016-04-23 05:33 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2016-05-11 08:57 - 2016-04-23 05:31 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2016-05-11 08:57 - 2016-04-23 05:30 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2016-05-11 08:57 - 2016-04-23 05:30 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2016-05-11 08:57 - 2016-04-23 05:28 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2016-05-11 08:57 - 2016-04-23 05:26 - 13811200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2016-05-11 08:57 - 2016-04-23 05:12 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2016-05-11 08:57 - 2016-04-23 05:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2016-05-11 08:57 - 2016-04-23 05:07 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2016-05-11 08:57 - 2016-04-14 15:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2016-05-11 08:57 - 2016-04-14 15:21 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2016-05-11 08:57 - 2016-04-09 09:01 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2016-05-11 08:57 - 2016-04-09 09:01 - 00264936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2016-05-11 08:57 - 2016-04-09 08:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2016-05-11 08:57 - 2016-04-09 08:57 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2016-05-11 08:57 - 2016-04-09 08:57 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2016-05-11 08:57 - 2016-04-09 08:54 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2016-05-11 08:57 - 2016-04-09 08:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2016-05-11 08:57 - 2016-04-09 07:49 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2016-05-11 08:57 - 2016-04-06 17:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll 2016-05-11 08:57 - 2016-03-09 20:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2016-05-11 08:57 - 2016-03-09 20:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll 2016-05-11 08:56 - 2016-04-09 09:02 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2016-05-11 08:56 - 2016-04-09 09:01 - 05546216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2016-05-11 08:56 - 2016-04-09 09:01 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2016-05-11 08:56 - 2016-04-09 09:01 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2016-05-11 08:56 - 2016-04-09 09:01 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2016-05-11 08:56 - 2016-04-09 08:59 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2016-05-11 08:56 - 2016-04-09 08:59 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2016-05-11 08:56 - 2016-04-09 08:59 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 07:52 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2016-05-11 08:56 - 2016-04-09 07:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2016-05-11 08:56 - 2016-04-09 07:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2016-05-11 08:56 - 2016-04-09 07:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2016-05-11 08:56 - 2016-04-09 07:48 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2016-05-11 08:56 - 2016-04-09 07:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2016-05-11 08:56 - 2016-04-09 07:44 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2016-05-11 08:56 - 2016-04-09 07:44 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2016-05-11 08:56 - 2016-04-09 07:44 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2016-05-11 08:56 - 2016-04-09 07:43 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2016-05-11 08:56 - 2016-04-09 07:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2016-05-11 08:56 - 2016-04-09 07:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2016-05-11 08:56 - 2016-04-09 07:38 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2016-05-11 08:56 - 2016-04-09 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2016-05-11 08:56 - 2016-04-09 07:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2016-05-11 08:56 - 2016-04-09 07:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2016-05-11 08:56 - 2016-04-09 07:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2016-05-11 08:56 - 2016-04-09 07:37 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 07:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 07:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 07:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 06:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2016-05-11 08:56 - 2016-04-09 05:52 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2016-05-06 09:41 - 2016-05-06 09:41 - 01195744 _____ (Adobe Systems Incorporated) C:\Users\******\Downloads\readerdc_de_xa_install.exe 2016-05-06 09:32 - 2016-05-06 09:32 - 00000000 ____D C:\Users\******\AppData\Local\Silverlake Software LLC 2016-05-06 09:32 - 2016-05-06 09:32 - 00000000 ____D C:\Users\******\AppData\Local\CEF 2016-05-06 09:32 - 2016-05-06 09:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Velocity 2016-05-06 09:32 - 2016-05-06 09:32 - 00000000 ____D C:\Program Files (x86)\Silverlake Software LLC 2016-05-06 09:30 - 2016-05-06 09:31 - 47558656 _____ C:\Users\******\Downloads\VelocitySetup-1.1.3.msi ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-06-02 10:42 - 2014-06-28 11:06 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-06-02 10:39 - 2014-08-01 13:15 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-06-02 10:07 - 2009-07-14 06:45 - 00031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-06-02 10:07 - 2009-07-14 06:45 - 00031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-06-02 10:01 - 2015-04-08 17:04 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2016-06-02 10:01 - 2015-04-08 17:04 - 00000000 ___SD C:\Windows\system32\GWX 2016-06-02 09:25 - 2015-05-04 09:21 - 00000000 ____D C:\Users\******\AppData\Local\CrashDumps 2016-06-02 09:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2016-06-02 09:06 - 2014-08-01 13:15 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-06-01 16:23 - 2014-08-01 12:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-06-01 13:31 - 2014-06-28 11:29 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2016-06-01 13:31 - 2014-06-28 11:08 - 00000000 ____D C:\ProgramData\Package Cache 2016-06-01 13:28 - 2015-11-24 14:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0 2016-06-01 13:20 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\MSBuild 2016-06-01 13:05 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2016-06-01 12:53 - 2015-11-24 14:55 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs 2016-06-01 12:19 - 2016-04-12 14:44 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 14.0 2016-06-01 12:19 - 2015-11-24 14:55 - 00000000 ____D C:\Windows\system32\1031 2016-06-01 12:13 - 2015-04-14 12:31 - 00000000 ____D C:\Windows\system32\1033 2016-06-01 11:50 - 2015-11-24 14:55 - 00000000 ____D C:\Windows\SysWOW64\1031 2016-06-01 09:38 - 2015-05-04 08:11 - 00000000 ____D C:\Users\******\AppData\Local\Deployment 2016-06-01 09:28 - 2016-04-13 15:11 - 00000000 ____D C:\Users\******\sciebo 2016-06-01 09:28 - 2016-04-13 15:10 - 00000000 ____D C:\Users\******\AppData\Local\sciebo 2016-06-01 09:10 - 2014-09-25 13:29 - 00000000 ____D C:\Users\******\.WebIde80 2016-06-01 09:10 - 2014-08-01 14:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JetBrains 2016-06-01 09:10 - 2014-08-01 14:05 - 00000000 ____D C:\Program Files (x86)\JetBrains 2016-06-01 09:07 - 2014-08-01 11:45 - 00000000 ____D C:\Users\****** 2016-06-01 08:48 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Registration 2016-06-01 08:44 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-05-25 11:34 - 2014-08-01 12:07 - 00000000 __SHD C:\Users\******\AppData\LocalLow\EmieSiteList 2016-05-25 11:34 - 2014-08-01 12:06 - 00000000 __SHD C:\Users\******\AppData\LocalLow\EmieUserList 2016-05-25 11:22 - 2016-01-11 09:47 - 00000000 ____D C:\Users\******\.oracle_jre_usage 2016-05-25 10:22 - 2014-06-28 11:34 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2016-05-23 14:11 - 2010-11-21 08:50 - 00730102 _____ C:\Windows\system32\perfh007.dat 2016-05-23 14:11 - 2010-11-21 08:50 - 00159428 _____ C:\Windows\system32\perfc007.dat 2016-05-23 14:11 - 2009-07-14 07:13 - 01687686 _____ C:\Windows\system32\PerfStringBackup.INI 2016-05-20 17:27 - 2015-07-14 08:22 - 00000000 ____D C:\Users\******\AppData\Local\TSVNCache 2016-05-19 15:22 - 2014-08-01 16:39 - 00000000 ____D C:\Users\******\AppData\Roaming\Composer 2016-05-19 11:28 - 2015-12-10 17:08 - 00001237 _____ C:\Users\******\Desktop\PoC.lnk 2016-05-18 13:02 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2016-05-18 10:42 - 2014-06-28 11:06 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-05-18 10:42 - 2014-06-28 11:06 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-05-18 10:42 - 2014-06-28 11:06 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2016-05-18 10:00 - 2014-12-10 18:14 - 00000000 ____D C:\Windows\system32\appraiser 2016-05-18 09:41 - 2014-08-13 11:21 - 00002149 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-05-18 09:41 - 2014-08-13 11:21 - 00002137 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-05-18 09:10 - 2015-06-29 09:24 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2016-05-18 08:51 - 2009-07-14 06:45 - 00433136 _____ C:\Windows\system32\FNTCACHE.DAT 2016-05-11 16:53 - 2010-11-21 09:01 - 00000000 ____D C:\Program Files\Windows Journal 2016-05-11 10:22 - 2014-08-01 12:52 - 00000000 ____D C:\Windows\system32\MRT 2016-05-11 10:04 - 2014-08-01 12:52 - 139319312 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2016-05-11 08:34 - 2014-08-01 13:15 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2016-05-11 08:34 - 2014-08-01 13:15 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2016-05-11 08:19 - 2014-06-28 11:29 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2016-05-10 14:17 - 2016-04-22 11:03 - 00000000 ____D C:\Users\******\ClionProjects 2016-05-06 10:24 - 2016-01-11 09:43 - 00000000 ____D C:\Users\******\.WebIde100 2016-05-04 13:30 - 2016-04-12 15:39 - 00000000 ____D C:\Users\******\Documents\Visual Studio 2015 ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-02-23 11:04 - 2015-02-23 11:04 - 0000580 _____ () C:\Users\******\AppData\Roaming\onecal.xml 2014-11-06 17:46 - 2015-06-10 17:04 - 0000600 _____ () C:\Users\******\AppData\Roaming\winscp.rnd 2015-04-14 11:36 - 2015-04-14 11:36 - 0000600 _____ () C:\Users\******\AppData\Local\PUTTY.RND 2014-12-11 12:07 - 2014-12-11 12:07 - 0007604 _____ () C:\Users\******\AppData\Local\Resmon.ResmonCfg 2015-03-11 13:53 - 2015-03-11 13:53 - 0064321 _____ () C:\ProgramData\1426074763.bdinstall.bin 2015-03-11 15:07 - 2015-03-11 15:07 - 0269807 _____ () C:\ProgramData\1426079049.bdinstall.bin 2015-03-11 17:06 - 2015-03-11 17:06 - 0055783 _____ () C:\ProgramData\1426086360.bdinstall.bin 2015-06-01 08:27 - 2015-06-01 08:27 - 0275959 _____ () C:\ProgramData\1433139646.bdinstall.bin 2015-06-01 08:23 - 2015-06-01 08:23 - 0101807 _____ () C:\ProgramData\1433139666.bdinstall.bin ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-05-18 12:54 ==================== Ende von FRST.txt ============================ Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:01-06-2016 durchgeführt von ****** (2016-06-02 11:26:28) Gestartet von C:\Users\******\Desktop Windows 7 Professional Service Pack 1 (X64) (2014-08-01 09:45:27) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-2717197321-735008668-2171964612-500 - Administrator - Disabled) Gast (S-1-5-21-2717197321-735008668-2171964612-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-2717197321-735008668-2171964612-1002 - Limited - Enabled) ****** (S-1-5-21-2717197321-735008668-2171964612-1000 - Administrator - Enabled) => C:\Users\****** ZendUser (S-1-5-21-2717197321-735008668-2171964612-1003 - Limited - Enabled) ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Bitdefender Endpoint Security Tools Antimalware (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371} AS: Bitdefender Endpoint Security Tools Antimalware (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Bitdefender Endpoint Security Tools Firewall (Enabled) {078AF241-05A3-0EFF-40E0-3E0D69EA140A} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Active Directory Authentication Library für SQL Server (Version: 13.0.1100.286 - Microsoft Corporation) Hidden Active Directory Authentication Library für SQL Server (x86) (x32 Version: 13.0.1100.286 - Microsoft Corporation) Hidden Adobe Flash Player 21 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 21.0.0.242 - Adobe Systems Incorporated) Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.242 - Adobe Systems Incorporated) Adobe Reader XI (11.0.16) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.16 - Adobe Systems Incorporated) AMD Catalyst Install Manager (HKLM\...\{BF728146-387A-B1FE-28F1-F25B5363D5EA}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.) AppRecovery Agent (Version: 6.0.1.609 - Dell AppAssure) Hidden AWS Command Line Interface (HKLM-x32\...\{C9E555F0-D0E8-4270-82A7-4CEF23052FFF}) (Version: 1.10.19 - Amazon Web Services Developer Relations) AWS Tools for Windows (HKLM-x32\...\{9CB0CB7D-C176-414A-9170-4B5183B899A4}) (Version: 3.9.326.0 - Amazon Web Services Developer Relations) Bitdefender Endpoint Security Tools (HKLM\...\Endpoint Security) (Version: 6.2.9.751 - Bitdefender) CCleaner (HKLM\...\CCleaner) (Version: 5.09 - Piriform) Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden Composer - Php Dependency Manager (HKLM-x32\...\{7315AF68-E777-496A-A6A2-4763A98ED35A}_is1) (Version: - getcomposer.org) Dell Client System Update (HKLM-x32\...\{04566294-A6B6-4462-9721-031073EB3694}) (Version: 1.3.0 - Dell Inc.) Dell ControlVault Host Components Installer 64 bit (HKLM\...\{00E61C2A-E507-4662-8534-A0FA48F415AE}) (Version: 2.3.415.120 - Broadcom Corporation) Dell Data Vault (Version: 1.1.0.6 - Dell Inc.) Hidden Dell Digital Delivery (HKLM-x32\...\{D850CB7E-72BC-4510-BA4F-48932BFAB295}) (Version: 2.9.901.0 - Dell Products, LP) Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc) Dell Power Manager (HKLM\...\{E45D7941-F3F0-4E8E-AD55-DCE2FE0AE6D8}) (Version: 1.1.0 - Dell Inc.) Dell Precision Performance Optimizer (HKLM-x32\...\{D66A3355-FEA4-4F60-8BAF-D6CBEDB396D8}) (Version: 01.08.00 - Dell Inc.) Dell Protected Workspace (HKLM-x32\...\{E2CAA395-66B3-4772-85E3-6134DBAB244E}) (Version: 2.3.15835 - Invincea, Inc.) Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.1200.101.134 - ALPS ELECTRIC CO., LTD.) Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 1.40.54 - Creative Technology Ltd) DW WLAN Card Utility (HKLM\...\DW WLAN Card Utility) (Version: 6.30.223.75 - Dell Inc.) Erforderliche Komponenten für SSDT (HKLM-x32\...\{2466E484-9D86-416B-9C88-AA533F15AF1C}) (Version: 12.0.2000.8 - Microsoft Corporation) Erforderliche Komponenten für SSDT (HKLM-x32\...\{3FF082A7-A5DE-4BDA-B56A-1D2BEFD617A3}) (Version: 11.1.3000.0 - Microsoft Corporation) Erforderliche Komponenten für SSDT RC0 (HKLM-x32\...\{837FF5F6-F0CB-4C80-B003-65B14F1490FE}) (Version: 13.0.1100.286 - Microsoft Corporation) Git version 1.9.5-preview20141217 (HKLM-x32\...\Git_is1) (Version: 1.9.5-preview20141217 - The Git Development Community) Google Apps Sync™ for Microsoft Outlook® 3.8.440.1250 (HKLM-x32\...\{091C294E-F243-432C-93E1-DEC4C2B9635B}) (Version: 3.8.440.1250 - Google, Inc.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 50.0.2661.102 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden HeidiSQL (HKLM\...\HeidiSQL_is1) (Version: - Ansgar Becker) HydraVision (x32 Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden IBM Data Server Runtime Client - DB2COPY1 (HKLM-x32\...\{5AEE236C-0100-464B-BD2E-883AA70A5D73}) (Version: 9.5.302.513 - IBM) IIS 10.0 Express (HKLM\...\{7A28A2B0-458B-4A58-84AC-C90D2D4B79FB}) (Version: 10.0.1735 - Microsoft Corporation) IIS Express Application Compatibility Database for x64 (HKLM\...\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version: - ) IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version: - ) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation) Intel(R) Network Connections 19.0.27.1 (HKLM\...\PROSetDX) (Version: 19.0.27.1 - Intel) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3412 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.7.1000 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.1.28 - Intel Corporation) JetBrains CLion 2016.1.1 (HKLM-x32\...\CLion 2016.1.1) (Version: 145.597.10 - JetBrains s.r.o.) JetBrains DataGrip 1.0.1 (HKLM-x32\...\DataGrip 1.0.1) (Version: 143.1411.5 - JetBrains s.r.o.) JetBrains PhpStorm 10.0.3 (HKLM-x32\...\PhpStorm 10.0.3) (Version: 143.1770 - JetBrains s.r.o.) Logitech Unifying-Software 2.50 (HKLM\...\Logitech Unifying) (Version: 2.50.25 - Logitech) Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (HKLM-x32\...\{21B0F482-5EF9-45DA-8840-340AFE705A6C}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 SDK (Deutsch) (HKLM-x32\...\{CBD7095F-7211-43FD-9FE7-FB08D753AF79}) (Version: 4.5.51641 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{19E8AE59-4D4A-3534-B567-6CC08FA4102E}) (Version: 4.5.51651 - Microsoft Corporation) Microsoft .NET Framework 4.6 SDK (Deutsch) (HKLM-x32\...\{EE8BD24B-75E1-4BBF-86B9-91FE16ADE71C}) (Version: 4.6.00081 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 SDK (Deutsch) (HKLM-x32\...\{529EFF09-750D-48B9-A47A-34A3B6248C3F}) (Version: 4.6.01055 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 SDK (HKLM-x32\...\{2F0ECC80-B9E4-4485-8083-CD32F22ABD92}) (Version: 4.6.01055 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 Targeting Pack (ENU) (HKLM-x32\...\{8EEB28EE-5141-411C-9CF0-9952264FE4AF}) (Version: 4.6.01055 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 Targeting Pack (HKLM-x32\...\{8BC3EEC9-090F-4C53-A8DA-1BEC913040F9}) (Version: 4.6.01055 - Microsoft Corporation) Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation) Microsoft Help Viewer 2.1 Sprachpaket - DEU (HKLM-x32\...\Microsoft Help Viewer 2.1 Sprachpaket - DEU) (Version: 2.1.21005 - Microsoft Corporation) Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.25123 - Microsoft Corporation) Microsoft Help Viewer 2.2 Sprachpaket - DEU (HKLM-x32\...\Microsoft Help Viewer 2.2 Sprachpaket - DEU) (Version: 2.2.25123 - Microsoft Corporation) Microsoft Office 365 Business - de-de (HKLM\...\O365BusinessRetail - de-de) (Version: 16.0.6868.2060 - Microsoft Corporation) Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.6868.2060 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-2717197321-735008668-2171964612-1000\...\OneDriveSetup.exe) (Version: 17.3.4604.0120 - Microsoft Corporation) Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20513.0 - Microsoft Corporation) Microsoft SQL Server 2008 Native Client (HKLM\...\{C79A7EAB-9D6F-4072-8A6D-F8F54957CD93}) (Version: 10.0.1600.22 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Management Objects (x64) (HKLM\...\{E016AA48-A21B-4728-9BD0-E3AAE23BEE5F}) (Version: 10.51.2500.0 - Microsoft Corporation) Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{F09DEB00-9F41-4BC9-BA81-9F131B12B3D5}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{D4E30517-FE6F-491E-942F-AE10E1B18F38}) (Version: 11.1.2902.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (x64) (HKLM\...\{B4EDAE03-DB34-4DD0-BA7E-2ED80DEA50B1}) (Version: 11.1.2902.0 - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{269A8DF6-BBDA-441F-932B-233F9B746D72}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{EC75BD20-F9CA-4E77-825F-ABD77E95BE91}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{0BF65908-D137-4A9E-B7C9-78F32F74F6FD}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (HKLM\...\{93945D16-4C3D-433E-B7E4-3D0D86B284C8}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{6F173435-3F19-4043-BA3D-A46AA8472859}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 T-SQL-Sprachdienst (HKLM-x32\...\{1D812D86-D8EF-41AC-A518-BA12E1913747}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2016 LocalDB RC0 (HKLM\...\{BDEC3091-D84B-4F70-B1AB-6487354160F4}) (Version: 13.0.1100.286 - Microsoft Corporation) Microsoft SQL Server 2016 Management Objects RC0 (x64) (HKLM\...\{8C76566F-6B51-43FD-A99E-AAA2E9A96918}) (Version: 13.0.1100.286 - Microsoft Corporation) Microsoft SQL Server 2016 T-SQL ScriptDom RC0 (HKLM\...\{F5E316A6-F894-4DCF-9088-F07E06A1ABFA}) (Version: 13.0.1100.286 - Microsoft Corporation) Microsoft SQL Server 2016 T-SQL-Sprachdienst RC0 (HKLM-x32\...\{F5AF6F7A-E0DC-480C-94E3-B5596C9A239F}) (Version: 13.0.12000.52 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 DEU (HKLM\...\{98225B15-ECF5-4645-B5AC-F8C5E869A5D5}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - DEU (12.0.41012.0) (HKLM-x32\...\{79AB8378-D661-4021-9941-FE5F4AEB57BB}) (Version: 12.0.41012.0 - Microsoft Corporation) Microsoft SQL Server Data Tools - DEU (14.0.60311.1) (HKLM-x32\...\{FE4AF448-6FF2-4996-889F-8F07BA88DB59}) (Version: 14.0.60311.1 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - DEU (12.0.30919.1) (HKLM-x32\...\{BCB8A870-2B3D-4CC0-87D6-F931E065AC0C}) (Version: 12.0.30919.1 - Microsoft Corporation) Microsoft SQL Server System CLR Types (x64) (HKLM\...\{C9F697B9-FAC8-4B76-9D3D-40FA3BFA4F9E}) (Version: 10.51.2500.0 - Microsoft Corporation) Microsoft SQL Server*2014 Express LocalDB (HKLM\...\{CA191120-4CB1-4E3D-89B8-79FDB9017A2E}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server*2014 Management Objects (HKLM-x32\...\{4F4CB3E2-9D2F-465A-854B-8276B02F4E7D}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server*2014 Management Objects (x64) (HKLM\...\{03CB711D-679E-46ED-851B-C568418CF914}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server*2014 Transact-SQL ScriptDom (HKLM\...\{F2A2DB39-2C5A-4764-AA0F-5AB112663FFA}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server*2014 T-SQL Language Service (HKLM-x32\...\{06BE8B71-46C6-434B-869E-85C58EF3120A}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server*2016 Management Objects RC0 (HKLM-x32\...\{029A7000-E652-4D44-88C2-483C9FD345A7}) (Version: 13.0.1100.286 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{FC3BB979-AA54-4B60-BBA3-2C4DA6E08D80}) (Version: 12.0.2402.29 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{091CE6AA-2753-4F6E-AD1C-0E875744EB54}) (Version: 12.0.2402.29 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{9634d50a-0c4d-4f52-8a9f-894a2baae370}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{307a22b8-8353-4c5e-b67b-2404c5734558}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation) Microsoft Web Deploy 3.6 (HKLM\...\{94E1227C-08A9-4962-B388-1F05D89AEA75}) (Version: 3.1238.1962 - Microsoft Corporation) Microsoft-System-CLR-Typen für SQL Server 2012 (HKLM-x32\...\{43341417-7882-4F34-8390-53DFD00F6C0F}) (Version: 11.1.3366.16 - Microsoft Corporation) Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (HKLM\...\{24440413-490E-41CA-BD33-0B30FD3EBE3A}) (Version: 11.1.3366.16 - Microsoft Corporation) Microsoft-System-CLR-Typen für SQL Server*2016 RC0 (HKLM\...\{71F2875A-58DC-432F-B959-67B6D928E08F}) (Version: 13.0.1100.286 - Microsoft Corporation) Microsoft-System-CLR-Typen für SQL Server*2016 RC0 (HKLM-x32\...\{D2C7A7B6-719A-4F6A-881A-555B999F82AC}) (Version: 13.0.1100.286 - Microsoft Corporation) Mozilla Firefox 45.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 45.0.1 (x86 de)) (Version: 45.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.0.1.5918 - Mozilla) MySQL Server 5.1 (HKLM-x32\...\{C54C7C1F-4015-4217-8F16-8CF993C59793}) (Version: 5.1.50 - Oracle Corporation) MySQL Server 5.5 (HKLM-x32\...\{20381839-62AB-4689-8FF2-24C4C3E18B08}) (Version: 5.5.23 - Oracle Corporation) MySQL Workbench 6.3 CE (HKLM-x32\...\{082A9ADE-EE11-420B-A9E5-26E25132183B}) (Version: 6.3.4 - Oracle Corporation) Node.js (HKLM-x32\...\{BA5AF894-392B-42F6-93DD-5FC7DD6972A9}) (Version: 0.12.4 - Joyent, Inc. and other Node contributors) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.7 - Notepad++ Team) Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.6828.1015 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (Version: 16.0.6828.1015 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (x32 Version: 16.0.6828.1015 - Microsoft Corporation) Hidden OneNote Web Exporter (0.5.0) (HKLM-x32\...\{B6604A34-B5A6-46F3-892C-D98A8F6E83A9}) (Version: 0.5.0 - Microsoft Corporation) Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM-x32\...\{D5409B11-EF28-37A1-AE7A-6051A5BAD923}) (Version: 4.5.50932 - Microsoft Corporation) Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM-x32\...\{3F514FDC-F0F2-3B99-86D6-F7B3A2679B39}) (Version: 4.5.51209 - Microsoft Corporation) Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM-x32\...\{4860C1E5-CE58-4D32-89DE-37951333B4C9}) (Version: 4.6.01055 - Microsoft Corporation) PostgreSQL 9.3 (x86) (HKLM-x32\...\PostgreSQL 9.3) (Version: 9.3 - PostgreSQL Global Development Group) PowerXpressHybrid (x32 Version: 1.00.0000 - Ihr Firmenname) Hidden PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden Rapid Recovery Agent (HKLM\...\AppRecovery Agent 5) (Version: 6.0.1.609 - Dell Inc.) Realtek Audio COM Components (HKLM-x32\...\{2355B503-9B11-4449-861D-1C1748B26320}) (Version: 1.0.2 - Realtek Semiconductor Corp.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5988 - Realtek Semiconductor Corp.) Roslyn Language Services - x86 (x32 Version: 14.0.25126 - Microsoft Corporation) Hidden sciebo (HKLM-x32\...\sciebo) (Version: 2.1.1.525 - Sync and Share NRW ) Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee) ST Microelectronics 3 Axis Digital Accelerometer Solution (HKLM-x32\...\{9C24F411-9CA7-4A8A-91F3-F08A4A38EB31}) (Version: 4.10.0051 - ST Microelectronics) Subversion (HKLM-x32\...\{486C482D-388D-40DF-85C5-31B55346B0F4}) (Version: 1.8.13 - CollabNet) TortoiseSVN 1.8.11.26392 (64 bit) (HKLM\...\{11309CA9-9118-44D6-B345-83C86A5111D5}) (Version: 1.8.26392 - TortoiseSVN) TypeScript Tools for Microsoft Visual Studio 2015 (x32 Version: 1.8.30.0 - Microsoft Corporation) Hidden Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation) Velocity (HKLM-x32\...\{00AA03F4-2786-4FC8-83DB-E7278E2AFA38}) (Version: 1.1.3.16231 - Silverlake Software LLC) WIDCOMM Bluetooth Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.4600 - Broadcom Corporation) WinPcap 4.1.1 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.1753 - CACE Technologies) WinSCP 5.5.6 (HKLM-x32\...\winscp3_is1) (Version: 5.5.6 - Martin Prikryl) Zend Server (HKLM-x32\...\InstallShield_{795630F9-CE59-4FE7-AE6C-051E4D174916}) (Version: 8.0.1.94158 - Zend Technologies) Zend Server (x32 Version: 8.0.1.94158 - Zend Technologies) Hidden ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-2717197321-735008668-2171964612-1000_Classes\CLSID\{ca586c80-7c84-4b88-8537-726724df6929}\InprocServer32 -> C:\Program Files (x86)\Git\git-cheetah\git_shell_ext64.dll () ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {07E1DDD8-FA27-470E-B70E-FCA0C89973D6} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2016-05-09] (Microsoft Corporation) Task: {26A44841-489F-4A10-8590-C60B19DB00A4} - System32\Tasks\{B2AB3A51-8ECE-41E5-ACEA-B544752D7D4D} => C:\one2htm.exe Task: {2FAAD875-19DF-41BE-9258-E75C07EA79FC} - System32\Tasks\Microsoft\VisualStudio\VSIX Auto Update 14 => C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\VSIXAutoUpdate.exe Task: {41CBE0B0-22F6-4A84-B8A7-1EED7D4B1E60} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2016-05-09] (Microsoft Corporation) Task: {4DFB06BF-F76B-4E7C-89A9-9013ACF5D7C1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-18] (Adobe Systems Incorporated) Task: {5983236E-5ECA-4999-9BA8-B23A09B197FE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.) Task: {84E27A5F-D4BE-4C74-939C-188ACDEFC79D} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-05-02] (Microsoft Corporation) Task: {958A3829-62B0-49C8-A191-16D9BD69C497} - System32\Tasks\AppAssure => C:\Windows\AppAssure.bat [2016-03-04] () Task: {A7520089-16AC-41FB-A3F4-6E0EC46E1C25} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2016-05-09] (Microsoft Corporation) Task: {B7015C30-8615-409D-8AEE-47D141905D3F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-08-20] (Piriform Ltd) Task: {C552E044-9BFA-4C08-B9C5-888C0AFEA046} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.) Task: {FADDDF9B-C2D9-40E2-9069-633BA298B6A9} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated) Task: {FE3788A1-1D40-43F0-B9C8-689687B2657B} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-05-02] (Microsoft Corporation) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Verknüpfungen ============================= (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) WMI_ActiveScriptEventConsumer_DellPowerManagerPowerStateChangeEventConsumer: <===== ACHTUNG WMI_ActiveScriptEventConsumer_DellPowerManagerUserLoginEventConsumer: <===== ACHTUNG WMI_ActiveScriptEventConsumer_DellPowerManagerPolicyChangeEventConsumer: <===== ACHTUNG WMI_ActiveScriptEventConsumer_DellPowerManagerAlertEventConsumer: <===== ACHTUNG WMI_ActiveScriptEventConsumer_DellPowerManagerPowerPlanSettingChangeEventConsumer: <===== ACHTUNG WMI_ActiveScriptEventConsumer_DellPowerManagerPowerPlanChangeEventConsumer: <===== ACHTUNG ShortcutWithArgument: C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Node.js\Node.js command prompt.lnk -> C:\Windows\SysWOW64\cmd.exe (Microsoft Corporation) -> /k "C:\Program Files (x86)\nodejs\nodevars.bat" ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2016-01-25 09:53 - 2016-05-02 04:01 - 00417472 _____ () C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll 2015-06-01 08:26 - 2015-11-03 10:25 - 00267664 _____ () C:\Program Files\Bitdefender\Endpoint Security\zlib.dll 2015-06-01 08:26 - 2016-04-14 12:25 - 00280576 _____ () C:\Program Files\Bitdefender\Endpoint Security\txmlutil.dll 2016-04-14 12:25 - 2016-04-14 12:25 - 00216696 _____ () C:\Program Files\Bitdefender\Endpoint Security\Product.ConditionalRunner.Comm.dll 2015-06-01 08:26 - 2011-11-14 20:17 - 00153680 _____ () C:\Program Files\Bitdefender\Endpoint Security\bdfwcore.dll 2016-05-09 14:03 - 2016-05-09 14:04 - 01006336 _____ () C:\Program Files\Bitdefender\Endpoint Security\Signatures\WFEngines\wfengines_01525_011\ashttpbr.mdl 2016-05-09 14:03 - 2016-05-09 14:04 - 00541952 _____ () C:\Program Files\Bitdefender\Endpoint Security\Signatures\WFEngines\wfengines_01525_011\ashttpdsp.mdl 2016-05-09 14:03 - 2016-05-09 14:04 - 03446544 _____ () C:\Program Files\Bitdefender\Endpoint Security\Signatures\WFEngines\wfengines_01525_011\ashttpf.mdl 2016-05-09 14:03 - 2016-05-09 14:04 - 01541440 _____ () C:\Program Files\Bitdefender\Endpoint Security\Signatures\WFEngines\wfengines_01525_011\ashttprbl.mdl 2016-05-09 14:03 - 2016-05-09 14:03 - 01006336 _____ () C:\Program Files\Bitdefender\Endpoint Security\Signatures\OTEngines\otengines_01539_009\ashttpbr.mdl 2016-05-09 14:03 - 2016-05-09 14:03 - 00541952 _____ () C:\Program Files\Bitdefender\Endpoint Security\Signatures\OTEngines\otengines_01539_009\ashttpdsp.mdl 2016-05-09 14:03 - 2016-05-09 14:03 - 03035488 _____ () C:\Program Files\Bitdefender\Endpoint Security\Signatures\OTEngines\otengines_01539_009\ashttpph.mdl 2016-05-09 14:03 - 2016-05-09 14:03 - 01541440 _____ () C:\Program Files\Bitdefender\Endpoint Security\Signatures\OTEngines\otengines_01539_009\ashttprbl.mdl 2014-08-01 13:48 - 2013-11-18 02:20 - 10964480 _____ () C:\Program Files (x86)\EasyPHP-DevServer-14.1VC11\binaries\mysql\bin\eds-mysqld.exe 2012-03-30 10:49 - 2012-03-30 10:49 - 08174080 _____ () C:\Program Files (x86)\Zend\MySQL55\bin\mysqld.exe 2016-02-16 16:30 - 2016-02-16 16:30 - 00058880 _____ () C:\Program Files (x86)\sciebo\shellext\OCUtil_x64.dll 2015-03-19 19:55 - 2015-03-19 19:55 - 00088960 _____ () C:\Program Files\TortoiseSVN\bin\libsasl.dll 2014-08-01 13:30 - 2014-07-22 08:51 - 00138752 _____ () C:\Program Files (x86)\PostgreSQL\9.3\bin\LIBPQ.dll 2014-08-01 13:30 - 2014-02-05 08:56 - 01036800 _____ () C:\Program Files (x86)\PostgreSQL\9.3\bin\libxml2.dll 2014-12-29 16:24 - 2014-12-29 16:24 - 00092288 _____ () C:\Program Files (x86)\Zend\ZendServer\bin\zip.dll 2014-12-29 16:24 - 2014-12-29 16:24 - 00238720 _____ () C:\Program Files (x86)\Zend\ZendServer\bin\ZendDevBarLib.dll 2014-12-24 18:04 - 2014-12-24 18:04 - 00043648 _____ () C:\Program Files (x86)\Zend\ZendServer\lib\phpext\php_ldap.dll 2014-12-01 01:01 - 2014-12-01 01:01 - 00171520 _____ () C:\Program Files (x86)\Zend\ZendServer\bin\oldap32.dll 2014-12-01 01:01 - 2014-12-01 01:01 - 00035840 _____ () C:\Program Files (x86)\Zend\ZendServer\bin\olber32.dll 2014-12-01 00:59 - 2014-12-01 00:59 - 00170112 _____ () C:\Program Files (x86)\Zend\ZendServer\bin\libmcrypt.dll 2014-12-01 01:05 - 2014-12-01 01:05 - 00239744 _____ () C:\Program Files (x86)\Zend\ZendServer\bin\libtidy.dll 2014-06-28 11:23 - 2013-11-13 23:23 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2016-01-08 04:39 - 2016-01-08 04:39 - 00036352 _____ () C:\Program Files (x86)\JetBrains\PhpStorm 10.0.3\bin\IdeaWin32.dll 2016-01-08 04:39 - 2016-01-08 04:39 - 00032768 _____ () C:\Program Files (x86)\JetBrains\PhpStorm 10.0.3\bin\focuskiller.dll 2015-03-19 19:29 - 2015-03-19 19:29 - 00072064 _____ () C:\Program Files\TortoiseSVN\bin\libsasl32.dll 2016-01-25 09:55 - 2016-01-25 09:58 - 01754296 _____ () C:\Program Files (x86)\Microsoft Office\root\Office16\tmpod.dll 2016-02-26 09:34 - 2016-05-09 14:15 - 00038080 _____ () C:\Program Files (x86)\Microsoft Office\root\Office16\lynchtmlconvpxy.dll 2016-05-09 14:15 - 2016-05-09 14:16 - 03592384 _____ () C:\Program Files (x86)\Microsoft Office\root\Office16\gfx.dll 2016-02-26 09:33 - 2016-05-09 14:16 - 01072832 _____ () C:\Program Files (x86)\Microsoft Office\Root\Office16\ADDINS\UmOutlookAddin.dll 2016-02-26 09:35 - 2016-05-09 14:24 - 00519872 _____ () C:\Program Files (x86)\Microsoft Office\root\Office16\msfad.dll 2016-05-18 09:41 - 2016-05-11 13:48 - 01738904 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\libglesv2.dll 2016-05-18 09:41 - 2016-05-11 13:48 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\libegl.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) AlternateDataStreams: C:\Windows\SysWOW64\MSIHANDLE:3229 [0] AlternateDataStreams: C:\Windows\SysWOW64\MSIHANDLE:3277 [0] AlternateDataStreams: C:\Windows\SysWOW64\MSIHANDLE:3378 [0] AlternateDataStreams: C:\ProgramData\TEMP:EFC3EB10 [304] AlternateDataStreams: C:\Users\******\Desktop\FRST64.exe:BDU [0] AlternateDataStreams: C:\Users\******\Downloads\Composer-Setup (1).exe:BDU [0] AlternateDataStreams: C:\Users\******\Downloads\Composer-Setup.exe:BDU [0] AlternateDataStreams: C:\Users\******\Downloads\PhpStorm-2016.1.exe:BDU [0] AlternateDataStreams: C:\Users\******\Downloads\readerdc_de_xa_install.exe:BDU [0] AlternateDataStreams: C:\Users\******\Downloads\sciebo-2.1.1.525-setup.exe:BDU [0] ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver" ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) ==================== Hosts Inhalt: ========================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2009-07-14 04:34 - 2015-07-13 15:34 - 00000951 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-2717197321-735008668-2171964612-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\******\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.101.208.254 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0) Windows Firewall ist deaktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk => C:\Windows\pss\Bluetooth.lnk.CommonStartup MSCONFIG\startupfolder: C:^Users^******^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^An OneNote senden.lnk => C:\Windows\pss\An OneNote senden.lnk.Startup MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: Apoint => C:\Program Files\DellTPad\Apoint.exe MSCONFIG\startupreg: Broadcom Wireless Manager UI => C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR MSCONFIG\startupreg: Dell Webcam Central => "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2 MSCONFIG\startupreg: DellPoaEvents => C:\Program Files\Dell\PPO\DellPoaEvents.exe MSCONFIG\startupreg: HotKeysCmds => "C:\Windows\system32\hkcmd.exe" MSCONFIG\startupreg: HydraVisionDesktopManager => "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe" MSCONFIG\startupreg: IAStorIcon => "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60 MSCONFIG\startupreg: IgfxTray => "C:\Windows\system32\igfxtray.exe" MSCONFIG\startupreg: Logitech Download Assistant => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch MSCONFIG\startupreg: Lync => "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe" /fromrunkey MSCONFIG\startupreg: Persistence => "C:\Windows\system32\igfxpers.exe" MSCONFIG\startupreg: RtHDVBg => "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX5REC MSCONFIG\startupreg: RtHDVBg_PushButton => "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /IM MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe /s MSCONFIG\startupreg: StartCCC => "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun MSCONFIG\startupreg: USB3MON => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [{010720A9-A318-4140-BCC6-D290F82DA91F}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe FirewallRules: [{3E8D4FFB-E433-47EA-9FDC-68C9FFC94E5B}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe FirewallRules: [{4B570550-D7CD-4D79-992F-6E27E0A72424}] => (Allow) C:\Users\******\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe FirewallRules: [TCP Query User{60875F94-F0C4-4134-8A53-22329CC80DC0}C:\program files (x86)\jetbrains\phpstorm 7.1.3\bin\phpstorm.exe] => (Allow) C:\program files (x86)\jetbrains\phpstorm 7.1.3\bin\phpstorm.exe FirewallRules: [UDP Query User{98D6CD06-A304-4879-AAB7-E76775934B47}C:\program files (x86)\jetbrains\phpstorm 7.1.3\bin\phpstorm.exe] => (Allow) C:\program files (x86)\jetbrains\phpstorm 7.1.3\bin\phpstorm.exe FirewallRules: [TCP Query User{551D3DA9-5A6D-47C1-B3FD-9E84B47BEA42}C:\program files (x86)\jetbrains\phpstorm 7.1.3\bin\phpstorm.exe] => (Block) C:\program files (x86)\jetbrains\phpstorm 7.1.3\bin\phpstorm.exe FirewallRules: [UDP Query User{7C79A879-4433-4F0E-91DB-9BF37E7DE9EC}C:\program files (x86)\jetbrains\phpstorm 7.1.3\bin\phpstorm.exe] => (Block) C:\program files (x86)\jetbrains\phpstorm 7.1.3\bin\phpstorm.exe FirewallRules: [{5D844956-4DEE-4307-B2F3-9D886A338B40}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{354658F8-C92A-42FE-8D87-E68DB0F914E3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{A63BD9CE-EE7A-42B6-8426-F72D2AC0E9C6}C:\program files (x86)\jetbrains\phpstorm 7.1.3\jre\jre\bin\java.exe] => (Allow) C:\program files (x86)\jetbrains\phpstorm 7.1.3\jre\jre\bin\java.exe FirewallRules: [UDP Query User{AE2CEF72-C797-42BD-BD36-AE2F2476893F}C:\program files (x86)\jetbrains\phpstorm 7.1.3\jre\jre\bin\java.exe] => (Allow) C:\program files (x86)\jetbrains\phpstorm 7.1.3\jre\jre\bin\java.exe FirewallRules: [TCP Query User{41A13CA2-171B-45EE-89CC-804AA25F98A7}C:\program files (x86)\jetbrains\phpstorm 8.0.2\bin\phpstorm.exe] => (Allow) C:\program files (x86)\jetbrains\phpstorm 8.0.2\bin\phpstorm.exe FirewallRules: [UDP Query User{F36DC71A-2678-4E4D-85B6-389CE2B030B1}C:\program files (x86)\jetbrains\phpstorm 8.0.2\bin\phpstorm.exe] => (Allow) C:\program files (x86)\jetbrains\phpstorm 8.0.2\bin\phpstorm.exe FirewallRules: [TCP Query User{B92ACE09-2F81-4CCB-9C42-54B59AC68ADC}C:\program files (x86)\jetbrains\phpstorm 8.0.2\bin\phpstorm.exe] => (Block) C:\program files (x86)\jetbrains\phpstorm 8.0.2\bin\phpstorm.exe FirewallRules: [UDP Query User{B2CCA63C-A87D-4278-9147-C98822DCCE97}C:\program files (x86)\jetbrains\phpstorm 8.0.2\bin\phpstorm.exe] => (Block) C:\program files (x86)\jetbrains\phpstorm 8.0.2\bin\phpstorm.exe FirewallRules: [TCP Query User{32F877DB-5A9D-4101-82C1-A8C9EFB56707}C:\program files (x86)\jetbrains\phpstorm 8.0.2\jre\jre\bin\java.exe] => (Allow) C:\program files (x86)\jetbrains\phpstorm 8.0.2\jre\jre\bin\java.exe FirewallRules: [UDP Query User{1CDA7826-4209-4D1B-B5E1-1CE48F881364}C:\program files (x86)\jetbrains\phpstorm 8.0.2\jre\jre\bin\java.exe] => (Allow) C:\program files (x86)\jetbrains\phpstorm 8.0.2\jre\jre\bin\java.exe FirewallRules: [TCP Query User{5C5E4A69-E49E-4153-9111-7ECEB96E36A9}C:\program files (x86)\zend\apache2\bin\httpd.exe] => (Allow) C:\program files (x86)\zend\apache2\bin\httpd.exe FirewallRules: [UDP Query User{9857C592-C612-4012-BECF-CC85248156D1}C:\program files (x86)\zend\apache2\bin\httpd.exe] => (Allow) C:\program files (x86)\zend\apache2\bin\httpd.exe FirewallRules: [TCP Query User{436727A1-9A82-42E5-B510-26AF5651100B}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{86B2EDC6-93B4-42FB-804F-5B54B1BF01D0}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [{BEE9A646-B152-438E-AD66-9961BEEACE91}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe FirewallRules: [{CE5D95A9-802D-4242-80BB-903754D91E21}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe FirewallRules: [{40FDF048-9988-449B-9391-B0D9AF49DDEC}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{5B9D6EBB-D27A-4C6F-99BA-84D8F7060475}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{903A03C0-EC37-4D18-A624-847A87A36450}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe FirewallRules: [{D88BE14D-C309-4DEF-B69F-78B6299EC6DA}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe FirewallRules: [{5EA9FD29-000E-4DF4-B418-4F419A92EAF7}] => (Allow) C:\Users\******\AppData\Local\Microsoft\OneDrive\OneDrive.exe FirewallRules: [{C68A90E9-F7FC-4F10-9060-24FC388882A0}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe FirewallRules: [{D900E9E1-1603-4AA4-90B7-03877C3B4191}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe FirewallRules: [{E4A5850E-EC75-4561-AD27-22814EAF2061}] => (Allow) C:\Program Files\AppRecovery\Agent\Agent.Service.exe FirewallRules: [{F604EA84-FC93-4393-A1F9-431D5D201A57}] => (Allow) C:\Program Files\AppRecovery\Agent\Agent.Service.exe FirewallRules: [{74BFA68D-AB98-4331-AF72-916A7E4455D8}] => (Allow) LPort=8006 FirewallRules: [{58906C5A-1FE4-43D6-B8A5-78DB1993E19D}] => (Allow) LPort=8009 FirewallRules: [{11446455-B18A-4E45-8F54-9AD925302E16}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe FirewallRules: [{19FFB077-8100-44E4-B803-45AAEA5BCE86}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Wiederherstellungspunkte ========================= 01-06-2016 09:19:15 Microsoft Visual Studio Community 2015 mit Update 2 01-06-2016 09:23:13 Visual Studio 2015 Update 2 (KB3022398) 01-06-2016 09:25:25 Update for Microsoft Visual Studio 2015 (KB3151378) 01-06-2016 12:21:55 Microsoft Visual Studio Express 2013 für Windows Desktop - DEU mit Update 5 01-06-2016 12:24:13 Visual Studio 2013 Update 5 (KB2829760) 02-06-2016 10:00:11 Windows Update ==================== Fehlerhafte Geräte im Gerätemanager ============= ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (06/02/2016 11:25:02 AM) (Source: Zend OPcache) (EventID: 2) (User: ) Description: Unable to open base address fileDas System kann die angegebene Datei nicht finden. Error: (06/02/2016 11:25:02 AM) (Source: Zend OPcache) (EventID: 2) (User: ) Description: C:\Windows\TEMP\\ZendOPcache.MemoryBase@SYSTEMDas System kann die angegebene Datei nicht finden. Error: (06/02/2016 11:14:57 AM) (Source: Zend OPcache) (EventID: 2) (User: ) Description: Unable to open base address fileDas System kann die angegebene Datei nicht finden. Error: (06/02/2016 11:14:57 AM) (Source: Zend OPcache) (EventID: 2) (User: ) Description: C:\Windows\TEMP\\ZendOPcache.MemoryBase@SYSTEMDas System kann die angegebene Datei nicht finden. Error: (06/02/2016 11:05:00 AM) (Source: Zend OPcache) (EventID: 2) (User: ) Description: Unable to open base address fileDas System kann die angegebene Datei nicht finden. Error: (06/02/2016 11:05:00 AM) (Source: Zend OPcache) (EventID: 2) (User: ) Description: C:\Windows\TEMP\\ZendOPcache.MemoryBase@SYSTEMDas System kann die angegebene Datei nicht finden. Error: (06/02/2016 10:54:58 AM) (Source: Zend OPcache) (EventID: 2) (User: ) Description: Unable to open base address fileDas System kann die angegebene Datei nicht finden. Error: (06/02/2016 10:54:58 AM) (Source: Zend OPcache) (EventID: 2) (User: ) Description: C:\Windows\TEMP\\ZendOPcache.MemoryBase@SYSTEMDas System kann die angegebene Datei nicht finden. Error: (06/02/2016 10:44:55 AM) (Source: Zend OPcache) (EventID: 2) (User: ) Description: Unable to open base address fileDas System kann die angegebene Datei nicht finden. Error: (06/02/2016 10:44:55 AM) (Source: Zend OPcache) (EventID: 2) (User: ) Description: C:\Windows\TEMP\\ZendOPcache.MemoryBase@SYSTEMDas System kann die angegebene Datei nicht finden. Systemfehler: ============= Error: (06/01/2016 08:50:37 AM) (Source: BROWSER) (EventID: 8032) (User: ) Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{42898DD9-FD51-496C-9331-4F4F1020F4E9}" zu oft fehl. Der Sicherungssuchdienst wird beendet. Error: (06/01/2016 08:48:15 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "MySQL" wurde nicht richtig gestartet. Error: (06/01/2016 08:46:09 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Dell Data Protection | Rapid Recovery Agent Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (06/01/2016 08:46:09 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Dell Data Protection | Rapid Recovery Agent Service erreicht. Error: (06/01/2016 08:45:59 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (06/01/2016 08:45:13 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "MySQL_ZendServer51" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (06/01/2016 08:45:05 AM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Apache" wurde mit folgendem dienstspezifischem Fehler beendet: %%1. Error: (06/01/2016 08:44:56 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Realtek Audio Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%193 Error: (05/25/2016 09:00:18 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "MySQL" wurde nicht richtig gestartet. Error: (05/25/2016 08:58:51 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) ==================== Speicherinformationen =========================== Prozessor: Intel(R) Core(TM) i7-4900MQ CPU @ 2.80GHz Prozentuale Nutzung des RAM: 35% Installierter physikalischer RAM: 16289.09 MB Verfügbarer physikalischer RAM: 10495.94 MB Summe virtueller Speicher: 32576.37 MB Verfügbarer virtueller Speicher: 25871.04 MB ==================== Laufwerke ================================ Drive c: (OS) (Fixed) (Total:666.82 GB) (Free:552.32 GB) NTFS Drive e: (Backup) (Fixed) (Total:19.53 GB) (Free:15.15 GB) NTFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 698.6 GB) (Disk ID: 75D2DD0E) Partition 1: (Not Active) - (Size=39 MB) - (Type=DE) Partition 2: (Active) - (Size=12.2 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=666.8 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=19.5 GB) - (Type=OF Extended) ==================== Ende von Addition.txt ============================ |
02.06.2016, 19:37 | #2 |
| Windows 7: Sehr langsam geworden Bist Du fit in Englisch?
__________________Step 1: Downloade Dir bitte Malwarebytes Anti-Malware
Step 2: Downloade Dir bitte AdwCleaner auf deinen Desktop.
Step 3: Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
================================ Frische FRST Logs nachreichen.
__________________ Geändert von Machiavelli (02.06.2016 um 19:53 Uhr) |
03.06.2016, 11:19 | #3 | |
| Windows 7: Sehr langsam geworden Danke für deine schnelle Hilfe!
__________________Englischkenntnisse sind gut, habe ich keinerlei Probleme mit. Wie beende ich Bitdefender? Ich krieg das nicht hin.. mbam.txt: Zitat:
AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v5.119 - Bericht erstellt am 03/06/2016 um 10:26:52 # Aktualisiert am 30/05/2016 von Xplode # Datenbank : 2016-05-30.3 [Server] # Betriebssystem : Windows 7 Professional Service Pack 1 (X64) # Benutzername : ****** - ******-PC # Gestartet von : C:\Users\******\Desktop\AdwCleaner_5.119.exe # Option : Löschen # Unterstützung : ToolsLib - Forum: Ask for help or share your experience. ***** [ Dienste ] ***** ***** [ Ordner ] ***** [-] Ordner gelöscht : C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\chklaanhfefbnpoihckbnefhakgolnmc ***** [ Dateien ] ***** [-] Datei gelöscht : C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_chklaanhfefbnpoihckbnefhakgolnmc_0.localstorage ***** [ DLLs ] ***** ***** [ WMI ] ***** ***** [ Verknüpfungen ] ***** ***** [ Aufgabenplanung ] ***** ***** [ Registrierungsdatenbank ] ***** [-] Schlüssel gelöscht : HKLM\SOFTWARE\Description ***** [ Internetbrowser ] ***** [-] [C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] gelöscht : chklaanhfefbnpoihckbnefhakgolnmc ************************* :: "Tracing" Schlüssel gelöscht :: Proxy Einstellungen zurückgesetzt :: Winsock Einstellungen zurückgesetzt :: Internet Explorer Richtlinien gelöscht :: Chrome Richtlinien gelöscht ************************* C:\AdwCleaner\AdwCleaner[C1].txt - [1403 Bytes] - [03/06/2016 10:26:52] C:\AdwCleaner\AdwCleaner[S1].txt - [1311 Bytes] - [03/06/2016 10:07:45] ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1549 Bytes] ########## |
03.06.2016, 14:12 | #4 | |
| Windows 7: Sehr langsam gewordenZitat:
Zur Not vorübergehend deinstallieren. Dann JRT und FRST.
__________________ Proud member of Unite |
04.06.2016, 16:41 | #5 |
| Windows 7: Sehr langsam geworden JRT.txt: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 8.0.6 (04.25.2016) Operating System: Windows 7 Professional x64 Ran by ****** (Administrator) on 04.06.2016 at 17:10:28,96 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ File System: 31 Successfully deleted: C:\ProgramData\1426074763.bdinstall.bin (File) Successfully deleted: C:\ProgramData\1426079049.bdinstall.bin (File) Successfully deleted: C:\ProgramData\1426086360.bdinstall.bin (File) Successfully deleted: C:\ProgramData\1433139646.bdinstall.bin (File) Successfully deleted: C:\ProgramData\1433139666.bdinstall.bin (File) Successfully deleted: C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\kepemmpmljphklmpfgfmhpjhpdlccpke (Folder) Successfully deleted: C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_kepemmpmljphklmpfgfmhpjhpdlccpke_0.localstorage (File) Successfully deleted: C:\Users\******\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) Successfully deleted: C:\Users\******\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1RM5QGXU (Temporary Internet Files Folder) Successfully deleted: C:\Users\******\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3KEY1OAF (Temporary Internet Files Folder) Successfully deleted: C:\Users\******\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) Successfully deleted: C:\Users\******\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AOT2INYT (Temporary Internet Files Folder) Successfully deleted: C:\Users\******\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BZEJ4OTW (Temporary Internet Files Folder) Successfully deleted: C:\Users\******\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CV0AS3JM (Temporary Internet Files Folder) Successfully deleted: C:\Users\******\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) Successfully deleted: C:\Users\******\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KIXK1DI6 (Temporary Internet Files Folder) Successfully deleted: C:\Users\******\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) Successfully deleted: C:\Users\******\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MC6CT6BU (Temporary Internet Files Folder) Successfully deleted: C:\Users\******\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RM4YWAWV (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1RM5QGXU (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3KEY1OAF (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AOT2INYT (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BZEJ4OTW (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CV0AS3JM (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KIXK1DI6 (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MC6CT6BU (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RM4YWAWV (Temporary Internet Files Folder) Registry: 3 Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{325EF410-2F76-402A-A8BC-16B4B4CA937D} (Registry Key) Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} (Registry Key) Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} (Registry Key) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 04.06.2016 at 17:17:05,84 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:03-06-2016 durchgeführt von ****** (Administrator) auf ******-PC (04-06-2016 17:30:06) Gestartet von C:\Users\******\Desktop Geladene Profile: ****** (Verfügbare Profile: ******) Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (AMD) C:\Windows\System32\atiesrxx.exe (Dell Inc.) C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Dell Inc.) C:\Program Files\Dell\DW WLAN Card\BCMWLTRY.EXE (Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe (Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe (Apache Software Foundation) C:\Program Files (x86)\Zend\Apache2\bin\httpd.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe (International Business Machines Corporation) C:\Program Files (x86)\IBM\SQLLIB\BIN\db2mgmtsvc.exe (Apache Software Foundation) C:\Program Files (x86)\Zend\Apache2\bin\httpd.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe (Bitdefender) C:\Program Files\Bitdefender\Endpoint Security\epag.exe (Bitdefender) C:\Program Files\Bitdefender\Endpoint Security\epintegrationservice.exe (Bitdefender) C:\Program Files\Bitdefender\Endpoint Security\epsecurityservice.exe (Bitdefender) C:\Program Files\Bitdefender\Endpoint Security\epupdateservice.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe () C:\Program Files (x86)\EasyPHP-DevServer-14.1VC11\binaries\mysql\bin\eds-mysqld.exe () C:\Program Files (x86)\Zend\MySQL55\bin\mysqld.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe (Dell Inc.) C:\Program Files\Dell\PPO\poaService.exe (Dell Inc.) C:\Program Files\Dell\PPO\poaSmSrv.exe (Dell Inc.) C:\Program Files\Dell\PPO\poaTaServ.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\pg_ctl.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Zend Technologies Ltd.) C:\Program Files (x86)\Zend\ZendServer\bin\zdd.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\postgres.exe (Zend Technologies Ltd.) C:\Program Files (x86)\Zend\ZendServer\bin\jqd.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\postgres.exe (Zend Technologies Ltd.) C:\Program Files (x86)\Zend\ZendServer\bin\MonitorNode.exe (Zend Technologies Ltd.) C:\Program Files (x86)\Zend\ZendServer\bin\zsd.exe (Zend Technologies Ltd.) C:\Program Files (x86)\Zend\ZendServer\bin\scd.exe (Dell) C:\Program Files\AppRecovery\Agent\Agent.Service.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\postgres.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (O2Micro International) C:\Windows\System32\drivers\o2flash.exe (Bitdefender) C:\Program Files\Bitdefender\Endpoint Security\epconsole.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2717197321-735008668-2171964612-1000\...\Run: [sciebo] => C:\Program Files (x86)\sciebo\sciebo.exe [35994223 2016-02-22] () HKU\S-1-5-21-2717197321-735008668-2171964612-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8455960 2015-08-20] (Piriform Ltd) Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll ShellIconOverlayIdentifiers: [ OCError] -> {0960F090-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-02-16] (ownCloud Inc.) ShellIconOverlayIdentifiers: [ OCOK] -> {0960F092-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-02-16] (ownCloud Inc.) ShellIconOverlayIdentifiers: [ OCOKShared] -> {0960F093-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-02-16] (ownCloud Inc.) ShellIconOverlayIdentifiers: [ OCSync] -> {0960F094-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-02-16] (ownCloud Inc.) ShellIconOverlayIdentifiers: [ OCWarning] -> {0960F096-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-02-16] (ownCloud Inc.) ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Apache Web Server Monitor.lnk [2015-04-14] ShortcutTarget: Apache Web Server Monitor.lnk -> C:\Program Files (x86)\Zend\Apache2\bin\ApacheMonitor.exe (Apache Software Foundation) Startup: C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\appassure - Kopie.bat [2016-02-18] () ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{42898DD9-FD51-496C-9331-4F4F1020F4E9}: [DhcpNameServer] 192.101.208.254 Tcpip\..\Interfaces\{D7A32A57-E264-4FB9-8345-15DB70E718AF}: [DhcpNameServer] 192.168.2.1 Internet Explorer: ================== HKU\S-1-5-21-2717197321-735008668-2171964612-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://dell13.msn.com/?pc=DCJB HKU\S-1-5-21-2717197321-735008668-2171964612-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell13.msn.com/?pc=DCJB SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2717197321-735008668-2171964612-1000 -> DefaultScope {325EF410-2F76-402A-A8BC-16B4B4CA937D} URL = BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-06-01] (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2016-06-01] (Microsoft Corporation) BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-06-01] (Microsoft Corporation) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2016-06-01] (Microsoft Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2016-06-01] (Microsoft Corporation) BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-06-01] (Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-06-01] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-06-01] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-06-01] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-06-01] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\us4bfpfd.default FF Homepage: hxxps://www.google.de/?gws_rd=ssl FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-18] () FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei] FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-18] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-11-13] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-11-13] (Intel Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei] FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-06-01] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll [2013-05-13] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-06-01] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-04-23] (Adobe Systems Inc.) FF SearchPlugin: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\us4bfpfd.default\searchplugins\google-bersetzer.xml [2015-03-13] FF SearchPlugin: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\us4bfpfd.default\searchplugins\stack-overflow.xml [2015-02-27] FF Extension: WOT - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\us4bfpfd.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-12-14] FF Extension: NoScript - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\us4bfpfd.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-06-01] FF Extension: Adblock Plus - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\us4bfpfd.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-06-01] FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => nicht gefunden Chrome: ======= CHR DefaultSearchKeyword: Default -> jb CHR Profile: C:\Users\******\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-02] CHR Extension: (Google Drive) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-26] CHR Extension: (UI5 Inspector) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\bebecogbafbighhaildooiibipcnbngo [2016-05-03] CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2016-06-02] CHR Extension: (YouTube) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (Adblock Plus) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-06-02] CHR Extension: (Google-Suche) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28] CHR Extension: (Google Docs Offline) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-29] CHR Extension: (JetBrains IDE Support) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmhgeddbohgjknpmjagkdomcpobmllji [2016-04-27] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-11] CHR Extension: (Google Mail) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-13] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S2 Apache; C:\Program Files (x86)\EasyPHP-DevServer-14.1VC11\binaries\apache\bin\eds-httpd.exe [22016 2013-11-22] (Apache Software Foundation) [Datei ist nicht signiert] R2 Apache2.2-Zend; C:\Program Files (x86)\Zend\Apache2\bin\httpd.exe [23168 2014-12-29] (Apache Software Foundation) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2911472 2016-05-15] (Microsoft Corporation) R2 DB2MGMTSVC_DB2COPY1; C:\Program Files (x86)\IBM\SQLLIB\BIN\db2mgmtsvc.exe [38688 2009-04-04] (International Business Machines Corporation) S3 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2486272 2013-04-30] (Dell Inc.) [Datei ist nicht signiert] R2 epag; C:\Program Files\Bitdefender\Endpoint Security\epag.exe [3378336 2016-04-14] (Bitdefender) R2 EPIntegrationService; C:\Program Files\Bitdefender\Endpoint Security\EPIntegrationService.exe [100392 2016-04-14] (Bitdefender) R2 EPSecurityService; C:\Program Files\Bitdefender\Endpoint Security\EPSecurityService.exe [100392 2016-04-14] (Bitdefender) R2 EPUpdateService; C:\Program Files\Bitdefender\Endpoint Security\EPUpdateService.exe [100392 2016-04-14] (Bitdefender) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-10-28] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Datei ist nicht signiert] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) S3 InvProtectSvc; C:\Program Files (x86)\Invincea\Enterprise\X64\InvProtectSvc64.exe [2947856 2013-07-30] (Invincea, Inc.) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-11-13] (Intel Corporation) U2 MySQL; C:\Program Files (x86)\EasyPHP-DevServer-14.1VC11\binaries\mysql\bin\eds-mysqld.exe [10964480 2013-11-18] () [Datei ist nicht signiert] R2 MySQL_ZendServer55; C:\Program Files (x86)\Zend\MySQL55\my.ini [8967 2016-01-26] () [Datei ist nicht signiert] R2 poaService; C:\Program Files\Dell\PPO\poaService.exe [641232 2013-12-18] (Dell Inc.) R2 PoaSMSrv; C:\Program Files\Dell\PPO\poaSmSrv.exe [277712 2013-12-18] (Dell Inc.) R2 poaTaServ; C:\Program Files\Dell\PPO\poaTaServ.exe [516304 2013-12-18] (Dell Inc.) R2 postgresql-9.3; C:\Program Files (x86)\PostgreSQL\9.3\bin\pg_ctl.exe [76800 2014-07-22] (PostgreSQL Global Development Group) [Datei ist nicht signiert] R2 RapidRecoveryAgent; C:\Program Files\AppRecovery\Agent\Agent.Service.exe [77120 2016-02-01] (Dell) S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2009-10-20] (CACE Technologies, Inc.) S2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-06-19] (Realtek Semiconductor) S3 SboxSvc; C:\Program Files (x86)\Invincea\Enterprise\Sandbox\SboxSvc.exe [124616 2013-07-30] () S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2014-06-28] (Microsoft Corporation) R2 wltrysvc; C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe [6169600 2014-06-28] (Dell Inc.) [Datei ist nicht signiert] R2 ZendDeployment; C:\Program Files (x86)\Zend\ZendServer\bin\zdd.exe [1460864 2014-12-29] (Zend Technologies Ltd.) R2 ZendJobQueue; C:\Program Files (x86)\Zend\ZendServer\bin\jqd.exe [1318528 2014-12-29] (Zend Technologies Ltd.) [Datei ist nicht signiert] R2 ZendMonitor; C:\Program Files (x86)\Zend\ZendServer\bin\MonitorNode.exe [615552 2014-12-29] (Zend Technologies Ltd.) R2 ZendServerDaemon; C:\Program Files (x86)\Zend\ZendServer\bin\zsd.exe [2066048 2014-12-29] (Zend Technologies Ltd.) R2 ZendSessionClustering; C:\Program Files (x86)\Zend\ZendServer\bin\scd.exe [1179776 2014-12-29] (Zend Technologies Ltd.) [Datei ist nicht signiert] S2 Dell.PowerManager.Service; C:\Windows\system32\dllhost.exe /Processid:{2C33F44B-6CE9-471D-9D87-A8F6AD7630E0} S2 DellDRLogSvc; C:\Program Files\AppRecovery\Agent\DellLogService\DellDRLogSvc [X] S2 MySQL_ZendServer51; "C:\Program Files (x86)\Zend\MySQL51\bin\mysqld" --defaults-file="C:\Program Files (x86)\Zend\MySQL51\my.ini" MySQL_ZendServer51 ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R0 AAFsFlt; C:\Windows\System32\DRIVERS\AAFsFlt.sys [77008 2016-02-01] (Dell Inc.) S3 AAVdisk; C:\Windows\System32\DRIVERS\AAVdisk.sys [70864 2016-02-01] (Dell Inc.) R0 AAVolFlt; C:\Windows\System32\DRIVERS\AAVolFlt.sys [83152 2016-02-01] (Dell Inc.) R3 AAVStor; C:\Windows\System32\DRIVERS\AAVStor.sys [58576 2016-02-01] (Dell Inc.) R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [36608 2013-12-14] (Advanced Micro Devices, Inc.) R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1623536 2016-04-14] (BitDefender) R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [842152 2016-04-14] (BitDefender) S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [170200 2014-06-28] (Broadcom Corporation.) R1 Bdfndisf; C:\Windows\System32\DRIVERS\BdfNdisf6.sys [102328 2015-12-23] (BitDefender LLC) R1 Bdfwfpf; C:\Program Files\Bitdefender\Endpoint Security\bdfwfpf.sys [103504 2011-11-14] (BitDefender LLC) R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [23312 2013-04-29] (Dell Computer Corporation) S3 dmodusb; C:\Windows\System32\DRIVERS\dmodusb.sys [32768 2008-12-17] (Windows (R) Codename Longhorn DDK provider) R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [489752 2014-08-14] (Intel Corporation) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [182936 2016-04-14] (BitDefender LLC) R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28008 2013-10-19] (Intel Corporation) R3 IntcAzAudAddService; C:\Windows\System32\drivers\RTDVHD64.sys [2261464 2013-08-27] (Realtek Semiconductor Corp.) S3 InvProtectDrv; C:\Program Files (x86)\Invincea\Enterprise\X64\InvProtectDrv64.sys [34824 2013-07-30] () R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-11-13] (Intel Corporation) R2 NPF; C:\Windows\System32\drivers\npf.sys [47632 2009-10-20] (CACE Technologies, Inc.) R3 O2FJ2RDR; C:\Windows\System32\DRIVERS\O2FJ2w7x64.sys [185760 2013-05-07] (O2Micro ) R3 POADrvr; C:\Windows\System32\drivers\POADrvr.sys [21264 2013-12-18] (Dell Computer Corporation) S3 SboxDrv; C:\Program Files (x86)\Invincea\Enterprise\Sandbox\SboxDrv.sys [202248 2013-07-30] () R3 ST_ACCEL; C:\Windows\System32\DRIVERS\ST_Accel.sys [75976 2013-08-06] (STMicroelectronics) R2 trufos; C:\Windows\System32\DRIVERS\trufos.sys [511320 2016-04-14] (BitDefender S.R.L.) R3 WinDriver6; C:\Windows\System32\drivers\windrvr6.sys [254976 2013-10-13] (Jungo) R2 XilinxPC4Driver; C:\Windows\System32\drivers\xpc4drvr.sys [27384 2013-10-13] (Xilinx, Inc.) ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-06-04 17:29 - 2016-06-04 17:29 - 00000000 ____D C:\Users\******\Desktop\FRST-OlderVersion 2016-06-04 17:17 - 2016-06-04 17:17 - 00005548 _____ C:\Users\******\Desktop\JRT.txt 2016-06-03 12:06 - 2016-06-03 12:06 - 01610816 _____ (Malwarebytes) C:\Users\******\Desktop\JRT.exe 2016-06-03 10:26 - 2016-06-03 12:16 - 00001640 _____ C:\Users\******\Desktop\AdwCleaner[C1].txt 2016-06-03 10:03 - 2016-06-03 12:07 - 00000000 ____D C:\AdwCleaner 2016-06-03 09:59 - 2016-06-03 09:59 - 03677248 _____ C:\Users\******\Desktop\AdwCleaner_5.119.exe 2016-06-03 09:58 - 2016-06-03 12:15 - 00001218 _____ C:\Users\******\Desktop\mbam.txt 2016-06-03 08:44 - 2016-06-03 08:45 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-06-03 08:44 - 2016-06-03 08:44 - 00001064 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2016-06-03 08:44 - 2016-06-03 08:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2016-06-03 08:43 - 2016-06-03 08:44 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-06-03 08:43 - 2016-06-03 08:43 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-06-03 08:43 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2016-06-03 08:43 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2016-06-03 08:43 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2016-06-03 08:41 - 2016-06-03 08:41 - 22851472 _____ (Malwarebytes ) C:\Users\******\Downloads\mbam-setup-2.2.1.1043.exe 2016-06-02 11:26 - 2016-06-02 12:10 - 00047798 _____ C:\Users\******\Desktop\Addition.txt 2016-06-02 11:19 - 2016-06-04 17:30 - 00025311 _____ C:\Users\******\Desktop\FRST.txt 2016-06-02 11:18 - 2016-06-04 17:30 - 00000000 ____D C:\FRST 2016-06-02 11:15 - 2016-06-04 17:29 - 02384384 _____ (Farbar) C:\Users\******\Desktop\FRST64.exe 2016-06-01 11:44 - 2016-06-01 16:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-06-01 11:03 - 2016-06-01 12:00 - 00000000 ____D C:\Users\******\AppData\Local\VSIXInstaller 2016-05-23 14:06 - 2016-05-23 14:06 - 00000000 ____D C:\Users\******\Präsentation 2016-05-19 15:21 - 2016-05-19 15:21 - 00000000 ____D C:\Users\******\AppData\Local\Composer 2016-05-19 15:21 - 2016-05-19 15:21 - 00000000 ____D C:\ProgramData\ComposerSetup 2016-05-19 15:21 - 2016-05-19 15:21 - 00000000 ____D C:\Program Files (x86)\ComposerSetup 2016-05-19 15:20 - 2016-05-19 15:20 - 00751448 _____ (getcomposer.org ) C:\Users\******\Downloads\Composer-Setup (1).exe 2016-05-19 15:19 - 2016-05-19 15:19 - 00751448 _____ (getcomposer.org ) C:\Users\******\Downloads\Composer-Setup.exe 2016-05-19 14:41 - 2016-05-19 14:41 - 00000815 _____ C:\Users\******\Downloads\yii 2016-05-11 08:57 - 2016-04-23 19:08 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2016-05-11 08:57 - 2016-04-23 18:24 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2016-05-11 08:57 - 2016-04-23 07:25 - 25816064 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-05-11 08:57 - 2016-04-23 07:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2016-05-11 08:57 - 2016-04-23 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2016-05-11 08:57 - 2016-04-23 07:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2016-05-11 08:57 - 2016-04-23 07:00 - 02893312 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-05-11 08:57 - 2016-04-23 07:00 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2016-05-11 08:57 - 2016-04-23 07:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2016-05-11 08:57 - 2016-04-23 07:00 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2016-05-11 08:57 - 2016-04-23 07:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2016-05-11 08:57 - 2016-04-23 06:52 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2016-05-11 08:57 - 2016-04-23 06:51 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2016-05-11 08:57 - 2016-04-23 06:48 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2016-05-11 08:57 - 2016-04-23 06:47 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2016-05-11 08:57 - 2016-04-23 06:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2016-05-11 08:57 - 2016-04-23 06:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2016-05-11 08:57 - 2016-04-23 06:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2016-05-11 08:57 - 2016-04-23 06:46 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2016-05-11 08:57 - 2016-04-23 06:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2016-05-11 08:57 - 2016-04-23 06:36 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2016-05-11 08:57 - 2016-04-23 06:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2016-05-11 08:57 - 2016-04-23 06:27 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2016-05-11 08:57 - 2016-04-23 06:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2016-05-11 08:57 - 2016-04-23 06:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2016-05-11 08:57 - 2016-04-23 06:21 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2016-05-11 08:57 - 2016-04-23 06:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2016-05-11 08:57 - 2016-04-23 06:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2016-05-11 08:57 - 2016-04-23 06:11 - 20350464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2016-05-11 08:57 - 2016-04-23 06:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2016-05-11 08:57 - 2016-04-23 06:08 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2016-05-11 08:57 - 2016-04-23 06:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2016-05-11 08:57 - 2016-04-23 06:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2016-05-11 08:57 - 2016-04-23 06:07 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2016-05-11 08:57 - 2016-04-23 06:07 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2016-05-11 08:57 - 2016-04-23 06:07 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2016-05-11 08:57 - 2016-04-23 06:06 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2016-05-11 08:57 - 2016-04-23 06:06 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2016-05-11 08:57 - 2016-04-23 06:05 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2016-05-11 08:57 - 2016-04-23 06:04 - 02285568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2016-05-11 08:57 - 2016-04-23 06:02 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2016-05-11 08:57 - 2016-04-23 06:01 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2016-05-11 08:57 - 2016-04-23 06:00 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-05-11 08:57 - 2016-04-23 05:59 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2016-05-11 08:57 - 2016-04-23 05:58 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2016-05-11 08:57 - 2016-04-23 05:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2016-05-11 08:57 - 2016-04-23 05:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2016-05-11 08:57 - 2016-04-23 05:51 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2016-05-11 08:57 - 2016-04-23 05:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2016-05-11 08:57 - 2016-04-23 05:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2016-05-11 08:57 - 2016-04-23 05:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2016-05-11 08:57 - 2016-04-23 05:43 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2016-05-11 08:57 - 2016-04-23 05:41 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2016-05-11 08:57 - 2016-04-23 05:40 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2016-05-11 08:57 - 2016-04-23 05:39 - 01547776 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2016-05-11 08:57 - 2016-04-23 05:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2016-05-11 08:57 - 2016-04-23 05:36 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2016-05-11 08:57 - 2016-04-23 05:33 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2016-05-11 08:57 - 2016-04-23 05:31 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2016-05-11 08:57 - 2016-04-23 05:30 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2016-05-11 08:57 - 2016-04-23 05:30 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2016-05-11 08:57 - 2016-04-23 05:28 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2016-05-11 08:57 - 2016-04-23 05:26 - 13811200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2016-05-11 08:57 - 2016-04-23 05:12 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2016-05-11 08:57 - 2016-04-23 05:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2016-05-11 08:57 - 2016-04-23 05:07 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2016-05-11 08:57 - 2016-04-14 15:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2016-05-11 08:57 - 2016-04-14 15:21 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2016-05-11 08:57 - 2016-04-09 09:01 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2016-05-11 08:57 - 2016-04-09 09:01 - 00264936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2016-05-11 08:57 - 2016-04-09 08:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2016-05-11 08:57 - 2016-04-09 08:57 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2016-05-11 08:57 - 2016-04-09 08:57 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2016-05-11 08:57 - 2016-04-09 08:54 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2016-05-11 08:57 - 2016-04-09 08:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2016-05-11 08:57 - 2016-04-09 07:49 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2016-05-11 08:57 - 2016-04-06 17:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll 2016-05-11 08:57 - 2016-03-09 20:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2016-05-11 08:57 - 2016-03-09 20:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll 2016-05-11 08:56 - 2016-04-09 09:02 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2016-05-11 08:56 - 2016-04-09 09:01 - 05546216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2016-05-11 08:56 - 2016-04-09 09:01 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2016-05-11 08:56 - 2016-04-09 09:01 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2016-05-11 08:56 - 2016-04-09 09:01 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2016-05-11 08:56 - 2016-04-09 08:59 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2016-05-11 08:56 - 2016-04-09 08:59 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2016-05-11 08:56 - 2016-04-09 08:59 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 07:52 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2016-05-11 08:56 - 2016-04-09 07:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2016-05-11 08:56 - 2016-04-09 07:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2016-05-11 08:56 - 2016-04-09 07:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2016-05-11 08:56 - 2016-04-09 07:48 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2016-05-11 08:56 - 2016-04-09 07:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2016-05-11 08:56 - 2016-04-09 07:44 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2016-05-11 08:56 - 2016-04-09 07:44 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2016-05-11 08:56 - 2016-04-09 07:44 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2016-05-11 08:56 - 2016-04-09 07:43 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2016-05-11 08:56 - 2016-04-09 07:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2016-05-11 08:56 - 2016-04-09 07:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2016-05-11 08:56 - 2016-04-09 07:38 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2016-05-11 08:56 - 2016-04-09 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2016-05-11 08:56 - 2016-04-09 07:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2016-05-11 08:56 - 2016-04-09 07:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2016-05-11 08:56 - 2016-04-09 07:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2016-05-11 08:56 - 2016-04-09 07:37 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 07:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 07:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 07:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 06:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2016-05-11 08:56 - 2016-04-09 05:52 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2016-05-06 09:41 - 2016-05-06 09:41 - 01195744 _____ (Adobe Systems Incorporated) C:\Users\******\Downloads\readerdc_de_xa_install.exe 2016-05-06 09:32 - 2016-05-06 09:32 - 00000000 ____D C:\Users\******\AppData\Local\Silverlake Software LLC 2016-05-06 09:32 - 2016-05-06 09:32 - 00000000 ____D C:\Users\******\AppData\Local\CEF 2016-05-06 09:32 - 2016-05-06 09:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Velocity 2016-05-06 09:32 - 2016-05-06 09:32 - 00000000 ____D C:\Program Files (x86)\Silverlake Software LLC 2016-05-06 09:30 - 2016-05-06 09:31 - 47558656 _____ C:\Users\******\Downloads\VelocitySetup-1.1.3.msi ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-06-04 17:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Registration 2016-06-04 17:12 - 2009-07-14 06:45 - 00031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-06-04 17:12 - 2009-07-14 06:45 - 00031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-06-04 17:07 - 2014-08-01 13:15 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-06-04 17:07 - 2014-06-28 11:06 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-06-04 11:39 - 2015-05-04 08:11 - 00000000 ____D C:\Users\******\AppData\Local\Deployment 2016-06-04 11:36 - 2016-04-13 15:11 - 00000000 ____D C:\Users\******\sciebo 2016-06-04 11:36 - 2016-04-13 15:10 - 00000000 ____D C:\Users\******\AppData\Local\sciebo 2016-06-04 11:36 - 2014-08-01 13:15 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-06-04 11:26 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-06-03 12:07 - 2015-05-06 15:35 - 00000432 _____ C:\Users\******\Desktop\Neues Textdokument.txt 2016-06-03 10:57 - 2014-06-28 11:29 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2016-06-03 10:51 - 2014-06-28 11:29 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2016-06-03 10:29 - 2014-08-01 12:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-06-03 08:44 - 2015-07-14 08:22 - 00000000 ____D C:\Users\******\AppData\Local\TSVNCache 2016-06-03 08:38 - 2015-05-04 09:21 - 00000000 ____D C:\Users\******\AppData\Local\CrashDumps 2016-06-02 10:01 - 2015-04-08 17:04 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2016-06-02 10:01 - 2015-04-08 17:04 - 00000000 ___SD C:\Windows\system32\GWX 2016-06-02 09:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2016-06-01 13:31 - 2014-06-28 11:08 - 00000000 ____D C:\ProgramData\Package Cache 2016-06-01 13:28 - 2015-11-24 14:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0 2016-06-01 13:20 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\MSBuild 2016-06-01 13:05 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2016-06-01 12:53 - 2015-11-24 14:55 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs 2016-06-01 12:19 - 2016-04-12 14:44 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 14.0 2016-06-01 12:19 - 2015-11-24 14:55 - 00000000 ____D C:\Windows\system32\1031 2016-06-01 12:13 - 2015-04-14 12:31 - 00000000 ____D C:\Windows\system32\1033 2016-06-01 11:50 - 2015-11-24 14:55 - 00000000 ____D C:\Windows\SysWOW64\1031 2016-06-01 09:10 - 2014-09-25 13:29 - 00000000 ____D C:\Users\******\.WebIde80 2016-06-01 09:10 - 2014-08-01 14:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JetBrains 2016-06-01 09:10 - 2014-08-01 14:05 - 00000000 ____D C:\Program Files (x86)\JetBrains 2016-06-01 09:07 - 2014-08-01 11:45 - 00000000 ____D C:\Users\****** 2016-05-25 11:34 - 2014-08-01 12:07 - 00000000 __SHD C:\Users\******\AppData\LocalLow\EmieSiteList 2016-05-25 11:34 - 2014-08-01 12:06 - 00000000 __SHD C:\Users\******\AppData\LocalLow\EmieUserList 2016-05-25 11:22 - 2016-01-11 09:47 - 00000000 ____D C:\Users\******\.oracle_jre_usage 2016-05-25 10:22 - 2014-06-28 11:34 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2016-05-23 14:11 - 2010-11-21 08:50 - 00730102 _____ C:\Windows\system32\perfh007.dat 2016-05-23 14:11 - 2010-11-21 08:50 - 00159428 _____ C:\Windows\system32\perfc007.dat 2016-05-23 14:11 - 2009-07-14 07:13 - 01687686 _____ C:\Windows\system32\PerfStringBackup.INI 2016-05-19 15:22 - 2014-08-01 16:39 - 00000000 ____D C:\Users\******\AppData\Roaming\Composer 2016-05-19 11:28 - 2015-12-10 17:08 - 00001237 _____ C:\Users\******\Desktop\PoC.lnk 2016-05-18 13:02 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2016-05-18 10:42 - 2014-06-28 11:06 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-05-18 10:42 - 2014-06-28 11:06 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-05-18 10:42 - 2014-06-28 11:06 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2016-05-18 10:00 - 2014-12-10 18:14 - 00000000 ____D C:\Windows\system32\appraiser 2016-05-18 09:41 - 2014-08-13 11:21 - 00002149 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-05-18 09:41 - 2014-08-13 11:21 - 00002137 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-05-18 09:10 - 2015-06-29 09:24 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2016-05-18 08:51 - 2009-07-14 06:45 - 00433136 _____ C:\Windows\system32\FNTCACHE.DAT 2016-05-11 16:53 - 2010-11-21 09:01 - 00000000 ____D C:\Program Files\Windows Journal 2016-05-11 10:22 - 2014-08-01 12:52 - 00000000 ____D C:\Windows\system32\MRT 2016-05-11 10:04 - 2014-08-01 12:52 - 139319312 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2016-05-11 08:34 - 2014-08-01 13:15 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2016-05-11 08:34 - 2014-08-01 13:15 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2016-05-10 14:17 - 2016-04-22 11:03 - 00000000 ____D C:\Users\******\ClionProjects 2016-05-06 10:24 - 2016-01-11 09:43 - 00000000 ____D C:\Users\******\.WebIde100 ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-02-23 11:04 - 2015-02-23 11:04 - 0000580 _____ () C:\Users\******\AppData\Roaming\onecal.xml 2014-11-06 17:46 - 2015-06-10 17:04 - 0000600 _____ () C:\Users\******\AppData\Roaming\winscp.rnd 2015-04-14 11:36 - 2015-04-14 11:36 - 0000600 _____ () C:\Users\******\AppData\Local\PUTTY.RND 2014-12-11 12:07 - 2014-12-11 12:07 - 0007604 _____ () C:\Users\******\AppData\Local\Resmon.ResmonCfg Einige Dateien in TEMP: ==================== C:\Users\******\AppData\Local\Temp\libeay32.dll C:\Users\******\AppData\Local\Temp\msvcr120.dll C:\Users\******\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-06-03 11:33 ==================== Ende von FRST.txt ============================ |
04.06.2016, 19:04 | #6 |
| Windows 7: Sehr langsam geworden Step 1: Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter Hosts: WMI_ActiveScriptEventConsumer_DellPowerManagerPowerStateChangeEventConsumer: <===== ACHTUNG WMI_ActiveScriptEventConsumer_DellPowerManagerUserLoginEventConsumer: <===== ACHTUNG WMI_ActiveScriptEventConsumer_DellPowerManagerPolicyChangeEventConsumer: <===== ACHTUNG WMI_ActiveScriptEventConsumer_DellPowerManagerAlertEventConsumer: <===== ACHTUNG WMI_ActiveScriptEventConsumer_DellPowerManagerPowerPlanSettingChangeEventConsumer: <===== ACHTUNG WMI_ActiveScriptEventConsumer_DellPowerManagerPowerPlanChangeEventConsumer: <===== ACHTUNG AlternateDataStreams: C:\Windows\SysWOW64\MSIHANDLE:3229 [0] AlternateDataStreams: C:\Windows\SysWOW64\MSIHANDLE:3277 [0] AlternateDataStreams: C:\Windows\SysWOW64\MSIHANDLE:3378 [0] AlternateDataStreams: C:\ProgramData\TEMP:EFC3EB10 [304] AlternateDataStreams: C:\Users\******\Desktop\FRST64.exe:BDU [0] AlternateDataStreams: C:\Users\******\Downloads\Composer-Setup (1).exe:BDU [0] AlternateDataStreams: C:\Users\******\Downloads\Composer-Setup.exe:BDU [0] AlternateDataStreams: C:\Users\******\Downloads\PhpStorm-2016.1.exe:BDU [0] AlternateDataStreams: C:\Users\******\Downloads\readerdc_de_xa_install.exe:BDU [0] AlternateDataStreams: C:\Users\******\Downloads\sciebo-2.1.1.525-setup.exe:BDU [0] SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2717197321-735008668-2171964612-1000 -> DefaultScope {325EF410-2F76-402A-A8BC-16B4B4CA937D} URL = FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei] FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei] EmptyTemp: Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Step 2: ESET Online Scanner
Step 3: Neue FRST Logs nachreichen.
__________________ --> Windows 7: Sehr langsam geworden |
08.06.2016, 09:12 | #7 |
| Windows 7: Sehr langsam geworden Fixlog.txt: Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:07-06-2016 durchgeführt von ****** (2016-06-07 22:50:50) Run:2 Gestartet von C:\Users\******\Desktop Geladene Profile: ****** (Verfügbare Profile: ******) Start-Modus: Normal ============================================== fixlist Inhalt: ***************** Hosts: WMI_ActiveScriptEventConsumer_DellPowerManagerPowerStateChangeEventConsumer: <===== ACHTUNG WMI_ActiveScriptEventConsumer_DellPowerManagerUserLoginEventConsumer: <===== ACHTUNG WMI_ActiveScriptEventConsumer_DellPowerManagerPolicyChangeEventConsumer: <===== ACHTUNG WMI_ActiveScriptEventConsumer_DellPowerManagerAlertEventConsumer: <===== ACHTUNG WMI_ActiveScriptEventConsumer_DellPowerManagerPowerPlanSettingChangeEventConsumer: <===== ACHTUNG WMI_ActiveScriptEventConsumer_DellPowerManagerPowerPlanChangeEventConsumer: <===== ACHTUNG AlternateDataStreams: C:\Windows\SysWOW64\MSIHANDLE:3229 [0] AlternateDataStreams: C:\Windows\SysWOW64\MSIHANDLE:3277 [0] AlternateDataStreams: C:\Windows\SysWOW64\MSIHANDLE:3378 [0] AlternateDataStreams: C:\ProgramData\TEMP:EFC3EB10 [304] AlternateDataStreams: C:\Users\******\Desktop\FRST64.exe:BDU [0] AlternateDataStreams: C:\Users\******\Downloads\Composer-Setup (1).exe:BDU [0] AlternateDataStreams: C:\Users\******\Downloads\Composer-Setup.exe:BDU [0] AlternateDataStreams: C:\Users\******\Downloads\PhpStorm-2016.1.exe:BDU [0] AlternateDataStreams: C:\Users\******\Downloads\readerdc_de_xa_install.exe:BDU [0] AlternateDataStreams: C:\Users\******\Downloads\sciebo-2.1.1.525-setup.exe:BDU [0] SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2717197321-735008668-2171964612-1000 -> DefaultScope {325EF410-2F76-402A-A8BC-16B4B4CA937D} URL = FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei] FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei] EmptyTemp: ***************** C:\Windows\System32\Drivers\etc\hosts => erfolgreich verschoben Hosts erfolgreich wiederhergestellt. WMI_ActiveScriptEventConsumer_DellPowerManagerPowerStateChangeEventConsumer: <===== ACHTUNG => nicht gefunden WMI_ActiveScriptEventConsumer_DellPowerManagerUserLoginEventConsumer: <===== ACHTUNG => nicht gefunden WMI_ActiveScriptEventConsumer_DellPowerManagerPolicyChangeEventConsumer: <===== ACHTUNG => nicht gefunden WMI_ActiveScriptEventConsumer_DellPowerManagerAlertEventConsumer: <===== ACHTUNG => nicht gefunden WMI_ActiveScriptEventConsumer_DellPowerManagerPowerPlanSettingChangeEventConsumer: <===== ACHTUNG => nicht gefunden WMI_ActiveScriptEventConsumer_DellPowerManagerPowerPlanChangeEventConsumer: <===== ACHTUNG => nicht gefunden "C:\Windows\SysWOW64\MSIHANDLE" => ":3229" ADS nicht gefunden. "C:\Windows\SysWOW64\MSIHANDLE" => ":3277" ADS nicht gefunden. "C:\Windows\SysWOW64\MSIHANDLE" => ":3378" ADS nicht gefunden. "C:\ProgramData\TEMP" => ":EFC3EB10" ADS nicht gefunden. "C:\Users\******\Desktop\FRST64.exe" => ":BDU" ADS nicht gefunden. C:\Users\******\Downloads\Composer-Setup (1).exe => ":BDU" ADS erfolgreich entfernt. C:\Users\******\Downloads\Composer-Setup.exe => ":BDU" ADS erfolgreich entfernt. C:\Users\******\Downloads\PhpStorm-2016.1.exe => ":BDU" ADS erfolgreich entfernt. C:\Users\******\Downloads\readerdc_de_xa_install.exe => ":BDU" ADS erfolgreich entfernt. C:\Users\******\Downloads\sciebo-2.1.1.525-setup.exe => ":BDU" ADS erfolgreich entfernt. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Schlüssel nicht gefunden. HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Schlüssel nicht gefunden. HKU\S-1-5-21-2717197321-735008668-2171964612-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wert nicht gefunden. HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE => Schlüssel nicht gefunden. HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE => Schlüssel nicht gefunden. EmptyTemp: => 9.2 MB temporäre Dateien entfernt. Das System musste neu gestartet werden. ==== Ende von Fixlog 22:50:57 ==== Beim Eset Online Scanner bekomm ich immer die Fehlermeldung "Unerwarteter Fehler 8". Wie soll ich nun weiter machen? |
08.06.2016, 14:02 | #8 | |
| Windows 7: Sehr langsam geworden Bitte das: Zitat:
__________________ Proud member of Unite |
08.06.2016, 16:04 | #9 |
| Windows 7: Sehr langsam geworden FRST.txt: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:07-06-2016 durchgeführt von ****** (Administrator) auf ******-PC (08-06-2016 15:36:42) Gestartet von C:\Users\******\Desktop Geladene Profile: ****** (Verfügbare Profile: ******) Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Dell Inc.) C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Dell Inc.) C:\Program Files\Dell\DW WLAN Card\BCMWLTRY.EXE (Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe (Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe (Apache Software Foundation) C:\Program Files (x86)\Zend\Apache2\bin\httpd.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe (International Business Machines Corporation) C:\Program Files (x86)\IBM\SQLLIB\BIN\db2mgmtsvc.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Bitdefender) C:\Program Files\Bitdefender\Endpoint Security\epag.exe (Bitdefender) C:\Program Files\Bitdefender\Endpoint Security\epintegrationservice.exe (Bitdefender) C:\Program Files\Bitdefender\Endpoint Security\epsecurityservice.exe (Bitdefender) C:\Program Files\Bitdefender\Endpoint Security\epupdateservice.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe () C:\Program Files (x86)\EasyPHP-DevServer-14.1VC11\binaries\mysql\bin\eds-mysqld.exe () C:\Program Files (x86)\Zend\MySQL55\bin\mysqld.exe (Dell Inc.) C:\Program Files\Dell\PPO\poaService.exe (Dell Inc.) C:\Program Files\Dell\PPO\poaSmSrv.exe (Dell Inc.) C:\Program Files\Dell\PPO\poaTaServ.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\pg_ctl.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Zend Technologies Ltd.) C:\Program Files (x86)\Zend\ZendServer\bin\zdd.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\postgres.exe (Zend Technologies Ltd.) C:\Program Files (x86)\Zend\ZendServer\bin\jqd.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\postgres.exe (Zend Technologies Ltd.) C:\Program Files (x86)\Zend\ZendServer\bin\MonitorNode.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Zend Technologies Ltd.) C:\Program Files (x86)\Zend\ZendServer\bin\zsd.exe (Apache Software Foundation) C:\Program Files (x86)\Zend\Apache2\bin\httpd.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.3\bin\postgres.exe (Zend Technologies Ltd.) C:\Program Files (x86)\Zend\ZendServer\bin\scd.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe (Bitdefender) C:\Program Files\Bitdefender\Endpoint Security\epconsole.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe () C:\Program Files (x86)\sciebo\sciebo.exe (Apache Software Foundation) C:\Program Files (x86)\Zend\Apache2\bin\ApacheMonitor.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (JetBrains s.r.o.) C:\Program Files (x86)\JetBrains\PhpStorm 10.0.3\bin\PhpStorm.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (JetBrains s.r.o.) C:\Program Files (x86)\JetBrains\PhpStorm 10.0.3\bin\fsnotifier.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (O2Micro International) C:\Windows\System32\drivers\o2flash.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (JetBrains s.r.o.) C:\Program Files (x86)\JetBrains\PhpStorm 10.0.3\bin\runnerw.exe (Joyent, Inc) C:\Program Files (x86)\nodejs\node.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe (The PHP Group) C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe () C:\Program Files (x86)\Microsoft Office\root\Office16\lynchtmlconv.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2717197321-735008668-2171964612-1000\...\Run: [sciebo] => C:\Program Files (x86)\sciebo\sciebo.exe [35994223 2016-02-22] () HKU\S-1-5-21-2717197321-735008668-2171964612-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8455960 2015-08-20] (Piriform Ltd) Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll ShellIconOverlayIdentifiers: [ OCError] -> {0960F090-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-02-16] (ownCloud Inc.) ShellIconOverlayIdentifiers: [ OCOK] -> {0960F092-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-02-16] (ownCloud Inc.) ShellIconOverlayIdentifiers: [ OCOKShared] -> {0960F093-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-02-16] (ownCloud Inc.) ShellIconOverlayIdentifiers: [ OCSync] -> {0960F094-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-02-16] (ownCloud Inc.) ShellIconOverlayIdentifiers: [ OCWarning] -> {0960F096-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\sciebo\shellext\OCOverlays_x64.dll [2016-02-16] (ownCloud Inc.) ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Apache Web Server Monitor.lnk [2015-04-14] ShortcutTarget: Apache Web Server Monitor.lnk -> C:\Program Files (x86)\Zend\Apache2\bin\ApacheMonitor.exe (Apache Software Foundation) Startup: C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2016-06-08] ShortcutTarget: An OneNote senden.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation) Startup: C:\Users\******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\appassure - Kopie.bat [2016-02-18] () ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: 127.0.0.1 imap2 Tcpip\Parameters: [DhcpNameServer] 192.101.208.254 Tcpip\..\Interfaces\{42898DD9-FD51-496C-9331-4F4F1020F4E9}: [DhcpNameServer] 192.101.208.254 Tcpip\..\Interfaces\{D7A32A57-E264-4FB9-8345-15DB70E718AF}: [DhcpNameServer] 192.101.208.254 Internet Explorer: ================== HKU\S-1-5-21-2717197321-735008668-2171964612-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://dell13.msn.com/?pc=DCJB HKU\S-1-5-21-2717197321-735008668-2171964612-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell13.msn.com/?pc=DCJB BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-06-01] (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2016-06-01] (Microsoft Corporation) BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-06-01] (Microsoft Corporation) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2016-06-01] (Microsoft Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2016-06-01] (Microsoft Corporation) BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-06-01] (Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-06-01] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-06-01] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-06-01] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-06-01] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\us4bfpfd.default FF Homepage: hxxps://www.google.de/?gws_rd=ssl FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-18] () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-18] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-11-13] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-11-13] (Intel Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-06-01] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll [2013-05-13] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-06-01] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-04-23] (Adobe Systems Inc.) FF SearchPlugin: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\us4bfpfd.default\searchplugins\google-bersetzer.xml [2015-03-13] FF SearchPlugin: C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\us4bfpfd.default\searchplugins\stack-overflow.xml [2015-02-27] FF Extension: WOT - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\us4bfpfd.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-12-14] FF Extension: NoScript - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\us4bfpfd.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-06-01] FF Extension: Adblock Plus - C:\Users\******\AppData\Roaming\Mozilla\Firefox\Profiles\us4bfpfd.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-06-01] FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => nicht gefunden Chrome: ======= CHR DefaultSearchKeyword: Default -> jb CHR Profile: C:\Users\******\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-02] CHR Extension: (Google Drive) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-26] CHR Extension: (UI5 Inspector) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\bebecogbafbighhaildooiibipcnbngo [2016-05-03] CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2016-06-02] CHR Extension: (YouTube) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (Adblock Plus) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-06-02] CHR Extension: (Google-Suche) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28] CHR Extension: (Google Docs Offline) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-29] CHR Extension: (JetBrains IDE Support) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmhgeddbohgjknpmjagkdomcpobmllji [2016-04-27] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-11] CHR Extension: (Google Mail) - C:\Users\******\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-13] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S2 Apache; C:\Program Files (x86)\EasyPHP-DevServer-14.1VC11\binaries\apache\bin\eds-httpd.exe [22016 2013-11-22] (Apache Software Foundation) [Datei ist nicht signiert] R2 Apache2.2-Zend; C:\Program Files (x86)\Zend\Apache2\bin\httpd.exe [23168 2014-12-29] (Apache Software Foundation) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2911472 2016-05-15] (Microsoft Corporation) R2 DB2MGMTSVC_DB2COPY1; C:\Program Files (x86)\IBM\SQLLIB\BIN\db2mgmtsvc.exe [38688 2009-04-04] (International Business Machines Corporation) S3 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2486272 2013-04-30] (Dell Inc.) [Datei ist nicht signiert] R2 epag; C:\Program Files\Bitdefender\Endpoint Security\epag.exe [3378336 2016-04-14] (Bitdefender) R2 EPIntegrationService; C:\Program Files\Bitdefender\Endpoint Security\EPIntegrationService.exe [100392 2016-04-14] (Bitdefender) R2 EPSecurityService; C:\Program Files\Bitdefender\Endpoint Security\EPSecurityService.exe [100392 2016-04-14] (Bitdefender) R2 EPUpdateService; C:\Program Files\Bitdefender\Endpoint Security\EPUpdateService.exe [100392 2016-04-14] (Bitdefender) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-10-28] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Datei ist nicht signiert] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) S3 InvProtectSvc; C:\Program Files (x86)\Invincea\Enterprise\X64\InvProtectSvc64.exe [2947856 2013-07-30] (Invincea, Inc.) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-11-13] (Intel Corporation) U2 MySQL; C:\Program Files (x86)\EasyPHP-DevServer-14.1VC11\binaries\mysql\bin\eds-mysqld.exe [10964480 2013-11-18] () [Datei ist nicht signiert] R2 MySQL_ZendServer55; C:\Program Files (x86)\Zend\MySQL55\my.ini [8967 2016-01-26] () [Datei ist nicht signiert] R2 poaService; C:\Program Files\Dell\PPO\poaService.exe [641232 2013-12-18] (Dell Inc.) R2 PoaSMSrv; C:\Program Files\Dell\PPO\poaSmSrv.exe [277712 2013-12-18] (Dell Inc.) R2 poaTaServ; C:\Program Files\Dell\PPO\poaTaServ.exe [516304 2013-12-18] (Dell Inc.) R2 postgresql-9.3; C:\Program Files (x86)\PostgreSQL\9.3\bin\pg_ctl.exe [76800 2014-07-22] (PostgreSQL Global Development Group) [Datei ist nicht signiert] S2 RapidRecoveryAgent; C:\Program Files\AppRecovery\Agent\Agent.Service.exe [77120 2016-02-01] (Dell) S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2009-10-20] (CACE Technologies, Inc.) S2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-06-19] (Realtek Semiconductor) S3 SboxSvc; C:\Program Files (x86)\Invincea\Enterprise\Sandbox\SboxSvc.exe [124616 2013-07-30] () S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2014-06-28] (Microsoft Corporation) R2 wltrysvc; C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe [6169600 2014-06-28] (Dell Inc.) [Datei ist nicht signiert] R2 ZendDeployment; C:\Program Files (x86)\Zend\ZendServer\bin\zdd.exe [1460864 2014-12-29] (Zend Technologies Ltd.) R2 ZendJobQueue; C:\Program Files (x86)\Zend\ZendServer\bin\jqd.exe [1318528 2014-12-29] (Zend Technologies Ltd.) [Datei ist nicht signiert] R2 ZendMonitor; C:\Program Files (x86)\Zend\ZendServer\bin\MonitorNode.exe [615552 2014-12-29] (Zend Technologies Ltd.) R2 ZendServerDaemon; C:\Program Files (x86)\Zend\ZendServer\bin\zsd.exe [2066048 2014-12-29] (Zend Technologies Ltd.) R2 ZendSessionClustering; C:\Program Files (x86)\Zend\ZendServer\bin\scd.exe [1179776 2014-12-29] (Zend Technologies Ltd.) [Datei ist nicht signiert] R2 Dell.PowerManager.Service; C:\Windows\system32\dllhost.exe /Processid:{2C33F44B-6CE9-471D-9D87-A8F6AD7630E0} S2 DellDRLogSvc; C:\Program Files\AppRecovery\Agent\DellLogService\DellDRLogSvc [X] S2 MySQL_ZendServer51; "C:\Program Files (x86)\Zend\MySQL51\bin\mysqld" --defaults-file="C:\Program Files (x86)\Zend\MySQL51\my.ini" MySQL_ZendServer51 ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R0 AAFsFlt; C:\Windows\System32\DRIVERS\AAFsFlt.sys [77008 2016-02-01] (Dell Inc.) S3 AAVdisk; C:\Windows\System32\DRIVERS\AAVdisk.sys [70864 2016-02-01] (Dell Inc.) R0 AAVolFlt; C:\Windows\System32\DRIVERS\AAVolFlt.sys [83152 2016-02-01] (Dell Inc.) R3 AAVStor; C:\Windows\System32\DRIVERS\AAVStor.sys [58576 2016-02-01] (Dell Inc.) R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [36608 2013-12-14] (Advanced Micro Devices, Inc.) R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1623536 2016-04-14] (BitDefender) R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [842152 2016-04-14] (BitDefender) S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [170200 2014-06-28] (Broadcom Corporation.) R1 Bdfndisf; C:\Windows\System32\DRIVERS\BdfNdisf6.sys [102328 2015-12-23] (BitDefender LLC) R1 Bdfwfpf; C:\Program Files\Bitdefender\Endpoint Security\bdfwfpf.sys [103504 2011-11-14] (BitDefender LLC) R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [23312 2013-04-29] (Dell Computer Corporation) S3 dmodusb; C:\Windows\System32\DRIVERS\dmodusb.sys [32768 2008-12-17] (Windows (R) Codename Longhorn DDK provider) R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [489752 2014-08-14] (Intel Corporation) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [182936 2016-04-14] (BitDefender LLC) R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28008 2013-10-19] (Intel Corporation) R3 IntcAzAudAddService; C:\Windows\System32\drivers\RTDVHD64.sys [2261464 2013-08-27] (Realtek Semiconductor Corp.) S3 InvProtectDrv; C:\Program Files (x86)\Invincea\Enterprise\X64\InvProtectDrv64.sys [34824 2013-07-30] () R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-11-13] (Intel Corporation) R2 NPF; C:\Windows\System32\drivers\npf.sys [47632 2009-10-20] (CACE Technologies, Inc.) R3 O2FJ2RDR; C:\Windows\System32\DRIVERS\O2FJ2w7x64.sys [185760 2013-05-07] (O2Micro ) R3 POADrvr; C:\Windows\System32\drivers\POADrvr.sys [21264 2013-12-18] (Dell Computer Corporation) S3 SboxDrv; C:\Program Files (x86)\Invincea\Enterprise\Sandbox\SboxDrv.sys [202248 2013-07-30] () R3 ST_ACCEL; C:\Windows\System32\DRIVERS\ST_Accel.sys [75976 2013-08-06] (STMicroelectronics) R2 trufos; C:\Windows\System32\DRIVERS\trufos.sys [511320 2016-04-14] (BitDefender S.R.L.) R3 WinDriver6; C:\Windows\System32\drivers\windrvr6.sys [254976 2013-10-13] (Jungo) R2 XilinxPC4Driver; C:\Windows\System32\drivers\xpc4drvr.sys [27384 2013-10-13] (Xilinx, Inc.) ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-06-08 10:53 - 2016-06-08 10:53 - 00504246 _____ C:\Users\******\Downloads\order47856647.pdf 2016-06-08 09:03 - 2016-06-08 09:03 - 00000241 _____ C:\Users\******\.gitconfig 2016-06-08 08:39 - 2016-06-08 08:39 - 00000000 ____D C:\Program Files (x86)\ESET 2016-06-08 08:16 - 2016-06-08 08:16 - 826120007 _____ C:\Windows\MEMORY.DMP 2016-06-08 08:16 - 2016-06-08 08:16 - 00358960 _____ C:\Windows\Minidump\060816-23899-01.dmp 2016-06-08 08:16 - 2016-06-08 08:16 - 00000000 ____D C:\Windows\Minidump 2016-06-07 22:43 - 2016-06-08 10:09 - 00004119 _____ C:\Users\******\Desktop\Fixlog.txt 2016-06-04 17:29 - 2016-06-07 22:43 - 00000000 ____D C:\Users\******\Desktop\FRST-OlderVersion 2016-06-04 17:17 - 2016-06-04 17:36 - 00005578 _____ C:\Users\******\Desktop\JRT.txt 2016-06-03 12:06 - 2016-06-03 12:06 - 01610816 _____ (Malwarebytes) C:\Users\******\Desktop\JRT.exe 2016-06-03 10:26 - 2016-06-03 12:16 - 00001640 _____ C:\Users\******\Desktop\AdwCleaner[C1].txt 2016-06-03 10:03 - 2016-06-03 12:07 - 00000000 ____D C:\AdwCleaner 2016-06-03 09:59 - 2016-06-03 09:59 - 03677248 _____ C:\Users\******\Desktop\AdwCleaner_5.119.exe 2016-06-03 09:58 - 2016-06-03 12:15 - 00001218 _____ C:\Users\******\Desktop\mbam.txt 2016-06-03 08:44 - 2016-06-03 08:45 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-06-03 08:44 - 2016-06-03 08:44 - 00001064 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2016-06-03 08:44 - 2016-06-03 08:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2016-06-03 08:43 - 2016-06-03 08:44 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-06-03 08:43 - 2016-06-03 08:43 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-06-03 08:43 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2016-06-03 08:43 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2016-06-03 08:43 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2016-06-03 08:41 - 2016-06-03 08:41 - 22851472 _____ (Malwarebytes ) C:\Users\******\Downloads\mbam-setup-2.2.1.1043.exe 2016-06-02 11:26 - 2016-06-02 12:10 - 00047798 _____ C:\Users\******\Desktop\Addition.txt 2016-06-02 11:19 - 2016-06-08 15:36 - 00027718 _____ C:\Users\******\Desktop\FRST.txt 2016-06-02 11:18 - 2016-06-08 15:36 - 00000000 ____D C:\FRST 2016-06-02 11:15 - 2016-06-07 22:43 - 02385408 _____ (Farbar) C:\Users\******\Desktop\FRST64.exe 2016-06-01 11:44 - 2016-06-01 16:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-06-01 11:03 - 2016-06-01 12:00 - 00000000 ____D C:\Users\******\AppData\Local\VSIXInstaller 2016-05-23 14:06 - 2016-05-23 14:06 - 00000000 ____D C:\Users\******\Präsentation 2016-05-19 15:21 - 2016-05-19 15:21 - 00000000 ____D C:\Users\******\AppData\Local\Composer 2016-05-19 15:21 - 2016-05-19 15:21 - 00000000 ____D C:\ProgramData\ComposerSetup 2016-05-19 15:21 - 2016-05-19 15:21 - 00000000 ____D C:\Program Files (x86)\ComposerSetup 2016-05-19 15:20 - 2016-05-19 15:20 - 00751448 _____ (getcomposer.org ) C:\Users\******\Downloads\Composer-Setup (1).exe 2016-05-19 15:19 - 2016-05-19 15:19 - 00751448 _____ (getcomposer.org ) C:\Users\******\Downloads\Composer-Setup.exe 2016-05-19 14:41 - 2016-05-19 14:41 - 00000815 _____ C:\Users\******\Downloads\yii 2016-05-11 08:57 - 2016-04-23 19:08 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2016-05-11 08:57 - 2016-04-23 18:24 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2016-05-11 08:57 - 2016-04-23 07:25 - 25816064 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-05-11 08:57 - 2016-04-23 07:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2016-05-11 08:57 - 2016-04-23 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2016-05-11 08:57 - 2016-04-23 07:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2016-05-11 08:57 - 2016-04-23 07:00 - 02893312 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-05-11 08:57 - 2016-04-23 07:00 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2016-05-11 08:57 - 2016-04-23 07:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2016-05-11 08:57 - 2016-04-23 07:00 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2016-05-11 08:57 - 2016-04-23 07:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2016-05-11 08:57 - 2016-04-23 06:52 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2016-05-11 08:57 - 2016-04-23 06:51 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2016-05-11 08:57 - 2016-04-23 06:48 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2016-05-11 08:57 - 2016-04-23 06:47 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2016-05-11 08:57 - 2016-04-23 06:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2016-05-11 08:57 - 2016-04-23 06:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2016-05-11 08:57 - 2016-04-23 06:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2016-05-11 08:57 - 2016-04-23 06:46 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2016-05-11 08:57 - 2016-04-23 06:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2016-05-11 08:57 - 2016-04-23 06:36 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2016-05-11 08:57 - 2016-04-23 06:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2016-05-11 08:57 - 2016-04-23 06:27 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2016-05-11 08:57 - 2016-04-23 06:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2016-05-11 08:57 - 2016-04-23 06:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2016-05-11 08:57 - 2016-04-23 06:21 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2016-05-11 08:57 - 2016-04-23 06:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2016-05-11 08:57 - 2016-04-23 06:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2016-05-11 08:57 - 2016-04-23 06:11 - 20350464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2016-05-11 08:57 - 2016-04-23 06:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2016-05-11 08:57 - 2016-04-23 06:08 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2016-05-11 08:57 - 2016-04-23 06:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2016-05-11 08:57 - 2016-04-23 06:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2016-05-11 08:57 - 2016-04-23 06:07 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2016-05-11 08:57 - 2016-04-23 06:07 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2016-05-11 08:57 - 2016-04-23 06:07 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2016-05-11 08:57 - 2016-04-23 06:06 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2016-05-11 08:57 - 2016-04-23 06:06 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2016-05-11 08:57 - 2016-04-23 06:05 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2016-05-11 08:57 - 2016-04-23 06:04 - 02285568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2016-05-11 08:57 - 2016-04-23 06:02 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2016-05-11 08:57 - 2016-04-23 06:01 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2016-05-11 08:57 - 2016-04-23 06:00 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-05-11 08:57 - 2016-04-23 05:59 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2016-05-11 08:57 - 2016-04-23 05:58 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2016-05-11 08:57 - 2016-04-23 05:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2016-05-11 08:57 - 2016-04-23 05:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2016-05-11 08:57 - 2016-04-23 05:51 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2016-05-11 08:57 - 2016-04-23 05:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2016-05-11 08:57 - 2016-04-23 05:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2016-05-11 08:57 - 2016-04-23 05:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2016-05-11 08:57 - 2016-04-23 05:43 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2016-05-11 08:57 - 2016-04-23 05:41 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2016-05-11 08:57 - 2016-04-23 05:40 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2016-05-11 08:57 - 2016-04-23 05:39 - 01547776 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2016-05-11 08:57 - 2016-04-23 05:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2016-05-11 08:57 - 2016-04-23 05:36 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2016-05-11 08:57 - 2016-04-23 05:33 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2016-05-11 08:57 - 2016-04-23 05:31 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2016-05-11 08:57 - 2016-04-23 05:30 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2016-05-11 08:57 - 2016-04-23 05:30 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2016-05-11 08:57 - 2016-04-23 05:28 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2016-05-11 08:57 - 2016-04-23 05:26 - 13811200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2016-05-11 08:57 - 2016-04-23 05:12 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2016-05-11 08:57 - 2016-04-23 05:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2016-05-11 08:57 - 2016-04-23 05:07 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2016-05-11 08:57 - 2016-04-14 15:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2016-05-11 08:57 - 2016-04-14 15:21 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2016-05-11 08:57 - 2016-04-09 09:01 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2016-05-11 08:57 - 2016-04-09 09:01 - 00264936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2016-05-11 08:57 - 2016-04-09 08:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2016-05-11 08:57 - 2016-04-09 08:57 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2016-05-11 08:57 - 2016-04-09 08:57 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2016-05-11 08:57 - 2016-04-09 08:54 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2016-05-11 08:57 - 2016-04-09 08:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2016-05-11 08:57 - 2016-04-09 07:49 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2016-05-11 08:57 - 2016-04-06 17:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll 2016-05-11 08:57 - 2016-03-09 20:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2016-05-11 08:57 - 2016-03-09 20:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll 2016-05-11 08:56 - 2016-04-09 09:02 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2016-05-11 08:56 - 2016-04-09 09:01 - 05546216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2016-05-11 08:56 - 2016-04-09 09:01 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2016-05-11 08:56 - 2016-04-09 09:01 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2016-05-11 08:56 - 2016-04-09 09:01 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2016-05-11 08:56 - 2016-04-09 08:59 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2016-05-11 08:56 - 2016-04-09 08:59 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2016-05-11 08:56 - 2016-04-09 08:59 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2016-05-11 08:56 - 2016-04-09 08:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 07:52 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2016-05-11 08:56 - 2016-04-09 07:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2016-05-11 08:56 - 2016-04-09 07:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2016-05-11 08:56 - 2016-04-09 07:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2016-05-11 08:56 - 2016-04-09 07:48 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2016-05-11 08:56 - 2016-04-09 07:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2016-05-11 08:56 - 2016-04-09 07:44 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2016-05-11 08:56 - 2016-04-09 07:44 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2016-05-11 08:56 - 2016-04-09 07:44 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2016-05-11 08:56 - 2016-04-09 07:43 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2016-05-11 08:56 - 2016-04-09 07:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2016-05-11 08:56 - 2016-04-09 07:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2016-05-11 08:56 - 2016-04-09 07:38 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2016-05-11 08:56 - 2016-04-09 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2016-05-11 08:56 - 2016-04-09 07:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2016-05-11 08:56 - 2016-04-09 07:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2016-05-11 08:56 - 2016-04-09 07:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2016-05-11 08:56 - 2016-04-09 07:37 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 07:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 07:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 07:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2016-05-11 08:56 - 2016-04-09 06:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2016-05-11 08:56 - 2016-04-09 05:52 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-06-08 14:57 - 2014-12-16 15:04 - 00000000 ____D C:\Users\******\AppData\Local\ElevatedDiagnostics 2016-06-08 14:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF 2016-06-08 14:52 - 2015-05-04 09:21 - 00000000 ____D C:\Users\******\AppData\Local\CrashDumps 2016-06-08 14:42 - 2014-06-28 11:06 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-06-08 14:39 - 2014-08-01 13:15 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-06-08 14:21 - 2009-07-14 06:45 - 00031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-06-08 14:21 - 2009-07-14 06:45 - 00031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-06-08 09:03 - 2016-04-08 15:36 - 00000000 ____D C:\Users\******\AppData\Roaming\GitCredStore 2016-06-08 09:03 - 2014-08-01 11:45 - 00000000 ____D C:\Users\****** 2016-06-08 08:46 - 2015-05-04 08:11 - 00000000 ____D C:\Users\******\AppData\Local\Deployment 2016-06-08 08:39 - 2014-08-01 13:15 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-06-08 08:20 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Registration 2016-06-08 08:19 - 2016-04-13 15:10 - 00000000 ____D C:\Users\******\AppData\Local\sciebo 2016-06-08 08:17 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-06-04 11:36 - 2016-04-13 15:11 - 00000000 ____D C:\Users\******\sciebo 2016-06-03 12:07 - 2015-05-06 15:35 - 00000432 _____ C:\Users\******\Desktop\Neues Textdokument.txt 2016-06-03 10:57 - 2014-06-28 11:29 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2016-06-03 10:51 - 2014-06-28 11:29 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2016-06-03 10:29 - 2014-08-01 12:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-06-03 08:44 - 2015-07-14 08:22 - 00000000 ____D C:\Users\******\AppData\Local\TSVNCache 2016-06-02 10:01 - 2015-04-08 17:04 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2016-06-02 10:01 - 2015-04-08 17:04 - 00000000 ___SD C:\Windows\system32\GWX 2016-06-02 09:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2016-06-01 13:31 - 2014-06-28 11:08 - 00000000 ____D C:\ProgramData\Package Cache 2016-06-01 13:28 - 2015-11-24 14:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0 2016-06-01 13:20 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\MSBuild 2016-06-01 13:05 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared 2016-06-01 12:53 - 2015-11-24 14:55 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs 2016-06-01 12:19 - 2016-04-12 14:44 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 14.0 2016-06-01 12:19 - 2015-11-24 14:55 - 00000000 ____D C:\Windows\system32\1031 2016-06-01 12:13 - 2015-04-14 12:31 - 00000000 ____D C:\Windows\system32\1033 2016-06-01 11:50 - 2015-11-24 14:55 - 00000000 ____D C:\Windows\SysWOW64\1031 2016-06-01 09:10 - 2014-09-25 13:29 - 00000000 ____D C:\Users\******\.WebIde80 2016-06-01 09:10 - 2014-08-01 14:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JetBrains 2016-06-01 09:10 - 2014-08-01 14:05 - 00000000 ____D C:\Program Files (x86)\JetBrains 2016-05-25 11:34 - 2014-08-01 12:07 - 00000000 __SHD C:\Users\******\AppData\LocalLow\EmieSiteList 2016-05-25 11:34 - 2014-08-01 12:06 - 00000000 __SHD C:\Users\******\AppData\LocalLow\EmieUserList 2016-05-25 11:22 - 2016-01-11 09:47 - 00000000 ____D C:\Users\******\.oracle_jre_usage 2016-05-25 10:22 - 2014-06-28 11:34 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2016-05-23 14:11 - 2010-11-21 08:50 - 00730102 _____ C:\Windows\system32\perfh007.dat 2016-05-23 14:11 - 2010-11-21 08:50 - 00159428 _____ C:\Windows\system32\perfc007.dat 2016-05-23 14:11 - 2009-07-14 07:13 - 01687686 _____ C:\Windows\system32\PerfStringBackup.INI 2016-05-19 15:22 - 2014-08-01 16:39 - 00000000 ____D C:\Users\******\AppData\Roaming\Composer 2016-05-19 11:28 - 2015-12-10 17:08 - 00001237 _____ C:\Users\******\Desktop\PoC.lnk 2016-05-18 13:02 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2016-05-18 10:42 - 2014-06-28 11:06 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-05-18 10:42 - 2014-06-28 11:06 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-05-18 10:42 - 2014-06-28 11:06 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2016-05-18 10:00 - 2014-12-10 18:14 - 00000000 ____D C:\Windows\system32\appraiser 2016-05-18 09:41 - 2014-08-13 11:21 - 00002149 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-05-18 09:41 - 2014-08-13 11:21 - 00002137 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-05-18 09:10 - 2015-06-29 09:24 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2016-05-18 08:51 - 2009-07-14 06:45 - 00433136 _____ C:\Windows\system32\FNTCACHE.DAT 2016-05-11 16:53 - 2010-11-21 09:01 - 00000000 ____D C:\Program Files\Windows Journal 2016-05-11 10:22 - 2014-08-01 12:52 - 00000000 ____D C:\Windows\system32\MRT 2016-05-11 10:04 - 2014-08-01 12:52 - 139319312 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2016-05-11 08:34 - 2014-08-01 13:15 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2016-05-11 08:34 - 2014-08-01 13:15 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2016-05-10 14:17 - 2016-04-22 11:03 - 00000000 ____D C:\Users\******\ClionProjects ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-02-23 11:04 - 2015-02-23 11:04 - 0000580 _____ () C:\Users\******\AppData\Roaming\onecal.xml 2014-11-06 17:46 - 2015-06-10 17:04 - 0000600 _____ () C:\Users\******\AppData\Roaming\winscp.rnd 2015-04-14 11:36 - 2015-04-14 11:36 - 0000600 _____ () C:\Users\******\AppData\Local\PUTTY.RND 2014-12-11 12:07 - 2014-12-11 12:07 - 0007604 _____ () C:\Users\******\AppData\Local\Resmon.ResmonCfg ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-06-03 11:33 ==================== Ende von FRST.txt ============================ |
09.06.2016, 13:20 | #10 |
| Windows 7: Sehr langsam geworden Kannst Du ESET deinstallieren? Wenn ja, mache dies und versuche den Scan nochmal. Wenn nicht: Lade Dir bitte von hier Emsisoft Emergency Kit herunter.
__________________ Proud member of Unite |
Themen zu Windows 7: Sehr langsam geworden |
computer, defender, dnsapi.dll, explorer, flash player, google, helper, homepage, langsam, mozilla, nodejs, office 365, performance, prozesse, realtek, registry, rundll, scan, security, services.exe, software, svchost.exe, system, temp, udp, vista, visual c++ 2015, windows, wlan |