|
Plagegeister aller Art und deren Bekämpfung: Win10 Update oder Virus ??? Explorer langsam + weiße IconsWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
28.08.2016, 19:41 | #1 |
| Win10 Update oder Virus ??? Explorer langsam + weiße Icons Hallo guten Abend Ich bin das erste mal hier und von google auf das Forum gestoßen und ich hoffe auf Hilfe. Ich weiß nicht ob es ein Update ist oder ein Virus. Seid Freitag dem 26.8.2016 nach dem die letzte Update Suche um 12:00 stattfand spinnt mein PC TOTAL. Ich versuche es zu erklären. Mein Speicherstatus wird zwar angezeigt, jedoch braucht das System VIEL zu lange fast 10-15min oder auch gar nicht um mir meinen Explorer anzuzeigen (Festplatten etc) Externe Festplatten kann ich jedoch ohne Probleme, mit mühe und Not öffnen! Es befinden sich auch überall nur weiße Icons auf meinen Dateien. Videos, Bilder, Musik, Spiele, Dokumente kann ich jedoch alles öffnen. Aber es sind keine Details mehr zu sehen wie (größe, erstelldatum usw) Es ist aber so eingestellt! Ich habe zuerst vermutet das es ein Update sein könnte. Aber da ich leider nicht sehen kann WANN das letzte Update war kann ich demnach nichts machen. Ich habe dann versucht den PC auf den vorherigen Tag zurück zu setzen. Hat er NICHT getan! Gestern habe ich den AVG Tune up Zen die neuste Version durchlaufen lassen. (Hatte damit nie Probleme) Avira hab ich noch nicht ausprobiert und hab ich auch kein Geld für. Andere Viren programme kenne ich nicht Beim ersten Scan kam das der Virus NICHT entfernt werden konnte. Danach habe ich dann die 1 Klick Warung durchlaufen lassen von 13 Uhr an. Um 17 Uhr nach 4 Stunden war er immer noch nicht fertig mit der C festplatten defragmentieren x_x Also gehe ich zu 100% aus das es ein Virus ist. Leider habe ich absolut kein Geld da PC Reparatur Dienste immer sehr sehr teuer in unserem Ort sind. Für 1 Tag da lassen is man locker schon 100€ los und in Raten kann man nicht oder auf Rechnung. Leider habe ich keinen Fachmann zu Hause der sich das genauer angucken kann. Aber das sind die Sachen die ich selbst gemacht habe. Ich hoffe das ist Hilfreich. Hier noch einige Bilder. Meine Treiber und Grafik sind ALLE auf dem Neusten Stand!!! Ich hoffe sehr sie können mir helfen. Langsam nervt der Virus x_x Beispiel der weißen ICONS und langes laden vom Explorer! |
29.08.2016, 07:52 | #2 |
/// Malwareteam | Win10 Update oder Virus ??? Explorer langsam + weiße IconsMein Name ist Dennis und ich werde dir bei der Bereinigung helfen. Bitte beachte, dass es ein paar Regeln gibt:
Sollte ich nicht innerhalb von 48h antworten, schreibe mir eine PM! Posten in CODE-Tags Lesestoff: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Nur die Ruhe und tief durchatmen, wir schauen mal genauer nach Los gehts! Schritt # 1: FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Schritt # 2: Bitte Posten
__________________ |
29.08.2016, 09:35 | #3 |
| Win10 Update oder Virus ??? Explorer langsam + weiße Icons Hallo vielen dank für die schnelle Antwort und hiermit melde ich mich mit beiden Dateien zurück
__________________Ich hoffe es war so richtig diese Häkchen waren vorab gesetzt FIRST Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 28-08-2016 durchgeführt von Michiyo (Administrator) auf MICHIYO-PC (29-08-2016 10:18:34) Gestartet von C:\Users\Michiyo\Desktop Geladene Profile: Michiyo (Verfügbare Profile: Michiyo & DefaultAppPool) Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) () C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe (AMD) C:\Windows\System32\atiesrxx.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe (Microsoft Corporation) C:\Windows\System32\mqsvc.exe () C:\Windows\System32\atwtusb.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe (pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe (AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.4\ToolbarUpdater.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe (© pdfforge GmbH.) C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe () C:\Program Files\CyberLink\Shared files\RichVideo64.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe () C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe (HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe (AMD) C:\Windows\System32\atieclxx.exe () C:\Windows\System32\atwtusb.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () C:\Windows\System32\AtwtusbIcon.exe (Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe () C:\Program Files (x86)\AVG Web TuneUp\vprot.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe (Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\40.3.4\ScriptHelper.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor) HKLM\...\Run: [AtwtusbIcon] => C:\WINDOWS\system32\AtwtusbIcon.exe [3593728 2012-09-10] () HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [6613896 2016-06-24] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Live! Central] => C:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central\CTLVCentral.exe [438381 2009-06-05] (Creative Technology Ltd.) HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [917112 2015-10-08] (BlueStack Systems, Inc.) HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [56080 2015-12-12] (Raptr, Inc) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [204560 2016-08-18] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [SunJavaUpdateSched] => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [6709008 2016-07-28] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2178120 2016-08-27] () HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\Run: [AnyDVD] => C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe [4886136 2011-03-07] (SlySoft, Inc.) HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd) HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64" IFEO\DatamngrCoordinator.exe: [Debugger] tasklist.exe ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\buShell.dll Keine Datei ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\buShell.dll Keine Datei ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\buShell.dll Keine Datei ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] () ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] () ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] () ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] () ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] () ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2016-01-06] ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) Startup: C:\Users\Michiyo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IML.lnk [2014-12-13] ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{86916325-c1ab-4869-a177-2fbf32564dab}: [DhcpNameServer] 192.168.2.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_lvrms_16_27¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StDtAzztA0DyEzztBtGyB0D0B0CtGzyyE0BtBtGtC0EyD0CtGyCtD0BtAyD0ByEyCyBtCzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtA0CzztB0ByE0FtGyCyDyCyBtGyEtBtB0FtGzz0C0A0AtGtCyB0ByC0F0C0B0E0EtCyBzz2QtN0A0LzuyE%26cr%3D1771641347%26a%3Dwncy_lvrms_16_27%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_lvrms_16_27¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StDtAzztA0DyEzztBtGyB0D0B0CtGzyyE0BtBtGtC0EyD0CtGyCtD0BtAyD0ByEyCyBtCzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtA0CzztB0ByE0FtGyCyDyCyBtGyEtBtB0FtGzz0C0A0AtGtCyB0ByC0F0C0B0E0EtCyBzz2QtN0A0LzuyE%26cr%3D1771641347%26a%3Dwncy_lvrms_16_27%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1415623352&from=smt&uid=ST1000DM003-1CH162_Z1D8NH1PXXXXZ1D8NH1P&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://isearch.omiga-plus.com/?type=hp&ts=1415623352&from=smt&uid=ST1000DM003-1CH162_Z1D8NH1PXXXXZ1D8NH1P HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1415623352&from=smt&uid=ST1000DM003-1CH162_Z1D8NH1PXXXXZ1D8NH1P&q={searchTerms} HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130859355493535952&GUID=9EC4EDB1-5F00-4682-8EB6-D81E4A9B890C HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com/?cid={761D6F70-819C-43ED-AF67-A4EE55D0A33D}&mid=d34487a0d9ba47ccb850a59d73d1869f-04f99b185149844fb42273afbf5d96e39a056fc0&lang=de&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-08-27 10:34:14&v=4.3.4.122&pid=wtu&sg=&sap=hp HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://isearch.omiga-plus.com/?type=hp&ts=1415623352&from=smt&uid=ST1000DM003-1CH162_Z1D8NH1PXXXXZ1D8NH1P HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.hyrican.de HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.hyrican.de HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?pc=UE01&ocid=UE01DHP URLSearchHook: HKU\S-1-5-21-1262878346-956153297-733536101-1001 - (Kein Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - Keine Datei SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKLM -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_lvrms_16_27¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StDtAzztA0DyEzztBtGyB0D0B0CtGzyyE0BtBtGtC0EyD0CtGyCtD0BtAyD0ByEyCyBtCzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtA0CzztB0ByE0FtGyCyDyCyBtGyEtBtB0FtGzz0C0A0AtGtCyB0ByC0F0C0B0E0EtCyBzz2QtN0A0LzuyE%26cr%3D1771641347%26a%3Dwncy_lvrms_16_27%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKLM -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox SearchScopes: HKLM -> {A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1415623352&from=smt&uid=ST1000DM003-1CH162_Z1D8NH1PXXXXZ1D8NH1P&q={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_lvrms_16_27¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StDtAzztA0DyEzztBtGyB0D0B0CtGzyyE0BtBtGtC0EyD0CtGyCtD0BtAyD0ByEyCyBtCzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtA0CzztB0ByE0FtGyCyDyCyBtGyEtBtB0FtGzz0C0A0AtGtCyB0ByC0F0C0B0E0EtCyBzz2QtN0A0LzuyE%26cr%3D1771641347%26a%3Dwncy_lvrms_16_27%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKLM-x32 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_lvrms_16_27¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StDtAzztA0DyEzztBtGyB0D0B0CtGzyyE0BtBtGtC0EyD0CtGyCtD0BtAyD0ByEyCyBtCzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtA0CzztB0ByE0FtGyCyDyCyBtGyEtBtB0FtGzz0C0A0AtGtCyB0ByC0F0C0B0E0EtCyBzz2QtN0A0LzuyE%26cr%3D1771641347%26a%3Dwncy_lvrms_16_27%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKLM-x32 -> {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://start.iminent.com/?appId=8CF6A15D-677F-4B48-9B65-61B3FAB6F25C&ref=toolbox&q={searchTerms} SearchScopes: HKLM-x32 -> {F66BFC25-B41D-4A17-A66C-2D338F452675} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox SearchScopes: HKU\.DEFAULT -> {e4a1ece8-ed94-4f93-80ea-75f978ceaf24} URL = SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={761D6F70-819C-43ED-AF67-A4EE55D0A33D}&mid=d34487a0d9ba47ccb850a59d73d1869f-04f99b185149844fb42273afbf5d96e39a056fc0&lang=de&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-08-27 10:34:14&v=4.3.4.122&pid=wtu&sg=&sap=dsp&q={searchTerms} SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://start.iminent.com/?appId=8CF6A15D-677F-4B48-9B65-61B3FAB6F25C&ref=toolbox&q={searchTerms} SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {6ECB41EC-A7AC-4224-8D1E-44C44B4639E2} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8 SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={761D6F70-819C-43ED-AF67-A4EE55D0A33D}&mid=d34487a0d9ba47ccb850a59d73d1869f-04f99b185149844fb42273afbf5d96e39a056fc0&lang=de&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-08-27 10:34:14&v=4.3.4.122&pid=wtu&sg=&sap=dsp&q={searchTerms} SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1415623352&from=smt&uid=ST1000DM003-1CH162_Z1D8NH1PXXXXZ1D8NH1P&q={searchTerms} SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {AEEDE363-46A7-4B7A-9092-EEDB31E079DE} URL = hxxps://www.google.com/search?q={searchTerms} SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxps://nortonsafe.search.ask.com/web?q={searchTerms}&o=APN11913&l=dis&prt=NS&chn=oem&geo=DE&ver=22&locale=de_DE&gct=kwd&qsrc=2869 SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {C2EE27DF-5090-4D18-8930-B7403474FB06} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8 SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {C8ABDA6A-F499-4674-8C39-FDE573ABBEDE} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8 SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {D16EFC19-2554-4D94-B6A1-7B098BFCBD25} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8 SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {e4a1ece8-ed94-4f93-80ea-75f978ceaf24} URL = BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\coIEPlg.dll => Keine Datei BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_102\bin\ssv.dll [2016-08-27] (Oracle Corporation) BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.3.4.122\AVG Web TuneUp.dll [2016-08-27] (AVG) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_102\bin\jp2ssv.dll [2016-08-27] (Oracle Corporation) BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> Keine Datei BHO-x32: PDF Architect 4 Helper -> {38279E1A-7019-40C1-B579-E99DFB3312E8} -> C:\Program Files (x86)\PDF Architect 4\creator-ie-helper.dll [2016-01-15] (pdfforge GmbH) BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\coIEPlg.dll => Keine Datei BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> Keine Datei BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\ssv.dll [2016-08-27] (Oracle Corporation) BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.3.4.122\AVG Web TuneUp.dll [2016-08-27] (AVG) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\jp2ssv.dll [2016-08-27] (Oracle Corporation) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\coIEPlg.dll Keine Datei Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\coIEPlg.dll Keine Datei Toolbar: HKLM-x32 - PDF Architect 4 Toolbar - {23FD9C33-A9E1-48A1-8404-E5925CF1C8E1} - C:\Program Files (x86)\PDF Architect 4\creator-ie-plugin.dll [2016-01-15] (pdfforge GmbH) IE Session Restore: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> ist aktiviert. Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - Keine Datei Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - Keine Datei Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation) StartMenuInternet: IEXPLORE.EXE - iexplore.exe Edge: ====== Edge HomeButtonPage: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> hxxp://go.web.de/tb/ie_startpage FireFox: ======== FF ProfilePath: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default FF DefaultSearchEngine: Yahoo! Powered FF SelectedSearchEngine: Yahoo! Powered FF Homepage: hxxps://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_lvrms_16_27¶m1=1¶m2=f%3D1%26b%3DFirefox%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StDtAzztA0DyEzztBtGyB0D0B0CtGzyyE0BtBtGtC0EyD0CtGyCtD0BtAyD0ByEyCyBtCzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtA0CzztB0ByE0FtGyCyDyCyBtGyEtBtB0FtGzz0C0A0AtGtCyB0ByC0F0C0B0E0EtCyBzz2QtN0A0LzuyE%26cr%3D1771641347%26a%3Dwncy_lvrms_16_27%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome FF Keyword.URL: user_pref("keyword.URL", true); FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-08-27] () FF Plugin: @java.com/DTPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\dtplugin\npDeployJava1.dll [2016-08-27] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\plugin2\npjp2.dll [2016-08-27] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-08-27] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw.dll [2016-02-19] (Adobe Systems, Inc.) FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.3.4\\npsitesafety.dll [Keine Datei] FF Plugin-x32: @java.com/DTPlugin,version=11.102.2 -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\dtplugin\npDeployJava1.dll [2016-08-27] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.102.2 -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\plugin2\npjp2.dll [2016-08-27] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-1262878346-956153297-733536101-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Michiyo\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-08] (Unity Technologies ApS) FF user.js: detected! => C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\user.js [2015-03-18] FF SearchPlugin: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\searchplugins\avg-secure-search.xml [2016-08-27] FF SearchPlugin: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\searchplugins\yahoo! powered.xml [2016-08-25] FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\StartWeb.xml [2014-10-30] FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2016-08-27] FF Extension: (AVG Web TuneUp) - C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\Extensions\avg@toolbar.xpi [2016-08-27] FF Extension: (DVDVideoSoft YouTube MP3 and Video Download) - C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2015-11-17] [ist nicht signiert] FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon FF Extension: (Norton Identity Safe) - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon [2016-08-12] FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension FF Extension: (PDF Architect 4 Creator) - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2016-03-06] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon StartMenuInternet: FIREFOX.EXE - firefox.exe Chrome: ======= CHR HomePage: Default -> mysearch.avg.com/?rvt=1 CHR StartupUrls: Default -> "hxxp://www.google.de/","hxxp://start.mysearchdial.com/?f=1&a=dsites_14_12_ch&cd=2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyBtCzy0A0EyD0ByEtG0DzztA0EtG0Azz0EtAtGyD0F0EzztGyC0FyBtCtD0BtAtB0DtCtByC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAyC0E0DyDtC0F0DtG0EtC0BtBtGyE0EyC0DtGzztD0AyEtGtAtA0E0F0BzyyC0BzyyDyDyE2Q&cr=1732920521&ir=","hxxp://www.mystartsearch.com/?type=hp&ts=1429528029&from=cor&uid=HGSTXHTS545050A7E680_TM8514TFHB0T4RHB0T4RX","hxxp://de.search.yahoo.com/?fr=hp-ddc-bd&type=bg_276_bl-is-21__alt__ddc_dsssyc_bd_com","hxxp://www.yessearches.com/?mode=nnnb&ptid=dam&uid=53A9CC2763490B4B37942D2A338B992E&v=20160108&ts=AHEpAXYoAH8nAE.." CHR Profile: C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Unblock embedded Youtube videos) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aajjpnimaghinaladfeongfnojpooegf [2016-03-11] CHR Extension: (Google Drive) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22] CHR Extension: (YouTube) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (AVG Secure Search) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn [2016-08-27] CHR Extension: (Google-Suche) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27] CHR Extension: (Google Docs Offline) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15] CHR Extension: (Proxmate) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifalmiidchkjjmkkbkoaibpmoeichmki [2016-08-25] CHR Extension: (Norton Identity Safe) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2015-03-18] CHR Extension: (Skype) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-08-12] CHR Extension: (Pink Lake) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkikaplkcnkehkocaeaddjiicklloajh [2016-03-12] CHR Extension: (TumTaster) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nanfbkacbckngfcklahdgfagjlghfbgm [2016-03-11] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-01] CHR Extension: (Google Mail) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29] CHR Extension: (Chrome Media Router) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-19] CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\Exts\Chrome.crx <nicht gefunden> CHR HKLM\...\Chrome\Extension: [edlomhpkphiongfmegcmaamkbadecnkd] - hxxps://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-1262878346-956153297-733536101-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-1262878346-956153297-733536101-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\Exts\Chrome.crx <nicht gefunden> CHR HKLM-x32\...\Chrome\Extension: [edlomhpkphiongfmegcmaamkbadecnkd] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx Opera: ======= OPR Extension: (YouTube Unblocker) - C:\Users\Michiyo\AppData\Roaming\Opera Software\Opera Stable\Extensions\npnkeeiehehhefofiekoflfedgehcdhl [2016-05-10] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [138752 2016-06-24] () [Datei ist nicht signiert] S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [674552 2016-07-28] (AVG Technologies CZ, s.r.o.) R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5267456 2016-07-28] (AVG Technologies CZ, s.r.o.) R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1097488 2016-08-18] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [760024 2016-07-28] (AVG Technologies CZ, s.r.o.) S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [437880 2015-10-08] (BlueStack Systems, Inc.) S3 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [417400 2015-10-08] (BlueStack Systems, Inc.) S3 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [855672 2015-10-08] (BlueStack Systems, Inc.) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation) R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [382312 2015-11-17] (Digital Wave Ltd.) S4 GlobalUpdater; C:\Program Files (x86)\Common Files\IMGUpdater\IMGUpdater.exe [378152 2014-10-30] () [Datei ist nicht signiert] R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29760 2016-07-04] (HP Inc.) S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [Datei ist nicht signiert] S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert] S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert] S2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\22.7.1.32\NIS.exe [289080 2016-08-16] (Symantec Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119688 2016-03-29] (Electronic Arts) S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2417376 2016-01-15] (pdfforge GmbH) S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2016-01-15] (pdfforge GmbH) R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2016-01-15] (pdfforge GmbH) R2 PDF Architect 4 Manager; C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [959248 2015-10-05] (© pdfforge GmbH.) R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert] R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390672 2012-12-21] () S4 SProtection; C:\Program Files (x86)\Common Files\Umbrella\Umbrella260.exe [3797664 2014-10-30] () [Datei ist nicht signiert] S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert] R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5611280 2015-08-07] (TeamViewer GmbH) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [4878096 2016-08-19] (AVG Technologies CZ, s.r.o.) S3 vmicvss; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation) R2 vToolbarUpdater40.3.4; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.4\ToolbarUpdater.exe [1347144 2016-08-27] (AVG Secure Search) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-07-01] (Microsoft Corporation) R2 WTService; C:\WINDOWS\system32\atwtusb.exe [581120 2012-10-19] () [Datei ist nicht signiert] R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [980040 2016-08-27] () ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 amdacpksd; C:\WINDOWS\system32\drivers\amdacpksd.sys [305392 2016-01-22] (Advanced Micro Devices) S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [40720 2015-07-28] (Advanced Micro Devices, Inc.) S3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [125512 2010-12-01] (SlySoft, Inc.) S3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [125512 2010-12-01] (SlySoft, Inc.) R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices) R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-09-18] (Advanced Micro Devices) S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [21632 2016-01-07] (AVG Technologies CZ, s.r.o.) R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [163072 2016-05-13] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [314112 2016-06-30] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [261376 2016-06-01] (AVG Technologies CZ, s.r.o.) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [260352 2016-06-01] (AVG Technologies CZ, s.r.o.) R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.) R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [261888 2016-07-19] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [52992 2016-06-01] (AVG Technologies CZ, s.r.o.) R0 avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [77056 2016-06-20] (AVG Technologies CZ, s.r.o.) R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [313088 2016-07-20] (AVG Technologies CZ, s.r.o.) R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\BASHDefs\20150521.001\BHDrvx64.sys [1640152 2015-06-04] (Symantec Corporation) R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [146040 2015-10-08] (BlueStack Systems) R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1607010.020\ccSetx64.sys [174328 2016-06-02] (Symantec Corporation) R1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink) S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2015-08-07] (Windows (R) Win 7 DDK provider) S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2015-08-07] (Windows (R) Win 7 DDK provider) R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-11-10] (Disc Soft Ltd) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [498512 2015-06-16] (Symantec Corporation) S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [153936 2015-06-16] (Symantec Corporation) S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [637360 2011-12-19] (Intel Corporation) R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\IPSDefs\20150519.100\IDSVia64.sys [684248 2015-06-04] (Symantec Corporation) S3 INIDVD; C:\Windows\System32\drivers\inidvd.sys [19488 2012-11-02] (Initio Corporation) R3 moufiltr; C:\Windows\System32\drivers\moufiltr.sys [7680 2009-03-08] (Windows (R) Codename Longhorn DDK provider) S3 PciIsaSerial; C:\Windows\system32\drivers\PciIsaSerial.sys [68608 2008-12-19] (Windows (R) Codename Longhorn DDK provider) S3 PciPPorts; C:\Windows\system32\drivers\PciPPorts.sys [96768 2009-07-23] () S3 PciSPorts; C:\Windows\system32\drivers\PciSPorts.sys [122880 2008-12-19] () R3 RLDesignVirtualAudioCableWdm; C:\Windows\system32\DRIVERS\livecamv.sys [49664 2007-02-05] () S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1607010.020\SRTSP64.SYS [773360 2016-08-10] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1607010.020\SRTSPX64.SYS [48888 2016-06-02] (Symantec Corporation) R0 SymEFASI; C:\Windows\System32\drivers\NISx64\1607010.020\SYMEFASI64.SYS [1627352 2016-06-02] (Symantec Corporation) S4 SymELAM; C:\Windows\system32\drivers\NISx64\1607010.020\SymELAM.sys [24192 2015-07-11] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [101112 2016-08-11] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\NISx64\1607010.020\Ironx64.SYS [291056 2016-06-02] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1607010.020\SYMNETS.SYS [567536 2016-06-02] (Symantec Corporation) S3 TabletFilter; C:\Windows\System32\drivers\TabletFilter.sys [7680 2012-08-15] (Windows (R) Win 7 DDK provider) R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [32304 2016-02-15] (AVG Netherlands B.V.) R3 V0540Dev; C:\Windows\system32\DRIVERS\V0540Vid.sys [321376 2009-06-15] (Creative Technology Ltd.) R3 vhidmini; C:\Windows\System32\drivers\walvhid.sys [7552 2009-08-26] (Windows (R) Win 7 DDK provider) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) U3 idsvc; kein ImagePath S3 NAVENG; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\VirusDefs\20150714.024\ENG64.SYS [X] S3 NAVEX15; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\VirusDefs\20150714.024\EX64.SYS [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-08-29 10:18 - 2016-08-29 10:19 - 00043219 _____ C:\Users\Michiyo\Desktop\FRST.txt 2016-08-29 10:17 - 2016-08-29 10:18 - 00000000 ____D C:\FRST 2016-08-29 10:17 - 2016-08-29 10:17 - 02396672 _____ (Farbar) C:\Users\Michiyo\Desktop\FRST64.exe 2016-08-28 01:14 - 2016-08-28 17:28 - 2613934989 _____ C:\Users\Michiyo\Downloads\[SOFCJ-Raws] Dragon Ball Z Resurrection F – Future Trunks Special Edition Extended (SUT 1280x720 x264 10bit AAC).mp4 2016-08-27 12:49 - 2016-08-27 12:49 - 03143504 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Michiyo\Documents\AVG_Protection_Free_1606.exe 2016-08-27 12:34 - 2016-08-27 12:35 - 00000000 ____D C:\Users\Michiyo\AppData\Local\AVG Web TuneUp 2016-08-27 12:34 - 2016-08-27 12:34 - 00000000 ____D C:\Program Files\Common Files\AVG Secure Search 2016-08-27 12:32 - 2016-08-27 12:36 - 00000000 ____D C:\ProgramData\AVG Web TuneUp 2016-08-27 12:32 - 2016-08-27 12:32 - 00000000 ____D C:\Program Files\AVG Web TuneUp 2016-08-27 12:31 - 2016-08-27 12:32 - 00000000 ____D C:\Program Files (x86)\AVG Web TuneUp 2016-08-27 11:18 - 2016-08-27 12:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2016-08-27 11:18 - 2016-08-27 11:18 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\AVG 2016-08-27 11:17 - 2016-08-27 11:17 - 00000000 ___HD C:\$AVG 2016-08-27 11:16 - 2016-08-29 10:05 - 00000000 ____D C:\ProgramData\MFAData 2016-08-27 11:16 - 2016-08-27 11:16 - 00000000 ____D C:\Users\Michiyo\AppData\Local\MFAData 2016-08-27 11:00 - 2016-08-29 02:54 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2016-08-27 11:00 - 2016-08-27 11:00 - 01198049 _____ C:\WINDOWS\unins000.exe 2016-08-27 11:00 - 2016-08-27 11:00 - 00010826 _____ C:\WINDOWS\unins000.dat 2016-08-27 11:00 - 2016-08-27 11:00 - 00003860 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2016-08-27 11:00 - 2016-08-27 11:00 - 00001409 _____ C:\AiOLog.txt 2016-08-27 11:00 - 2016-08-27 11:00 - 00000000 ____D C:\WINDOWS\SysWOW64\Adobe 2016-08-27 11:00 - 2016-01-28 18:44 - 01261568 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\libeay32.dll 2016-08-27 11:00 - 2016-01-28 18:44 - 00297472 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\ssleay32.dll 2016-08-27 11:00 - 2016-01-28 18:44 - 00297472 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\libssl32.dll 2016-08-27 11:00 - 2015-07-10 10:51 - 00456008 _____ (AutoIt Team) C:\WINDOWS\system32\autoitx3.dll 2016-08-27 11:00 - 2015-07-08 09:29 - 03477818 _____ (Red Hat) C:\WINDOWS\system32\cygwin1.dll 2016-08-27 11:00 - 2014-01-31 02:14 - 01055676 _____ (Free Software Foundation) C:\WINDOWS\system32\libiconv2.dll 2016-08-27 11:00 - 2014-01-25 13:30 - 00131072 _____ (Sereby Corporation) C:\WINDOWS\system32\AiORuntimes.dll 2016-08-27 11:00 - 2013-12-23 14:44 - 00163480 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 01070232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscomctl.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00660120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscomct2.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00617896 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00444328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshflxgd.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00416408 _____ (Microsoft Corporation ) C:\WINDOWS\system32\comct332.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00279192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdatgrd.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00259736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msflxgrd.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00253080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdatlst.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00222360 _____ (Microsoft Corporation) C:\WINDOWS\system32\tabctl32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00219288 _____ (Microsoft Corporation) C:\WINDOWS\system32\richtx32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00218776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dblist32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00212112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mci32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00179352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmask32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00170920 _____ (Microsoft Corporation) C:\WINDOWS\system32\comct232.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00131728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinet.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00130712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msstdfmt.dll 2016-08-27 11:00 - 2013-12-20 00:48 - 00127640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswinsck.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00119960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscomm32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00108696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msstkprp.dll 2016-08-27 11:00 - 2013-12-20 00:48 - 00104088 _____ (Microsoft Corporation) C:\WINDOWS\system32\picclp32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00084624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysinfo.ocx 2016-08-27 11:00 - 2012-06-14 14:36 - 00107520 _____ C:\WINDOWS\system32\zlib1.dll 2016-08-27 11:00 - 2012-04-03 16:11 - 00138752 _____ C:\WINDOWS\system32\libpng15.dll 2016-08-27 11:00 - 2011-10-12 03:09 - 04033440 _____ (Intel Corporation) C:\WINDOWS\system32\libmmd.dll 2016-08-27 11:00 - 2011-10-01 08:16 - 00445016 _____ (Creative Labs) C:\WINDOWS\system32\wrap_oal.dll 2016-08-27 11:00 - 2011-10-01 08:16 - 00109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\system32\openal32.dll 2016-08-27 11:00 - 2011-01-12 13:36 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71u.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71DEU.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ITA.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71FRA.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ESP.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ENU.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71KOR.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71JPN.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71CHT.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71CHS.dll 2016-08-27 11:00 - 2011-01-12 13:19 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71.dll 2016-08-27 11:00 - 2011-01-12 12:53 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl71.dll 2016-08-27 11:00 - 2010-06-27 17:44 - 00053248 _____ (Adobe Systems, Incorporated) C:\WINDOWS\system\plugin.dll 2016-08-27 11:00 - 2010-03-18 20:21 - 00799568 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdia100.dll 2016-08-27 11:00 - 2008-08-26 06:40 - 00162304 _____ C:\WINDOWS\system32\libpng13.dll 2016-08-27 11:00 - 2007-02-01 22:13 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp71.dll 2016-08-27 11:00 - 2007-02-01 19:11 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr71.dll 2016-08-27 11:00 - 2007-01-30 22:04 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr70.dll 2016-08-27 11:00 - 2006-08-26 00:28 - 01017344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70u.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ITA.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70FRA.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ESP.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70DEU.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ENU.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70KOR.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70JPN.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70CHT.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70CHS.dll 2016-08-27 11:00 - 2006-08-26 00:07 - 01024000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70.dll 2016-08-27 11:00 - 2006-08-25 23:17 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl70.dll 2016-08-27 11:00 - 2005-05-06 13:52 - 00103424 _____ (GNU <www.gnu.org>) C:\WINDOWS\system32\libintl3.dll 2016-08-27 11:00 - 2005-01-20 19:25 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvci70.dll 2016-08-27 11:00 - 2002-01-05 05:40 - 00487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp70.dll 2016-08-27 11:00 - 1996-01-12 03:00 - 00935632 _____ (Microsoft Corporation) C:\WINDOWS\system\vb40016.dll 2016-08-27 11:00 - 1996-01-12 03:00 - 00722192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vb40032.dll 2016-08-27 11:00 - 1994-11-17 13:00 - 00210944 _____ C:\WINDOWS\system\msvcrt10.dll 2016-08-27 11:00 - 1993-05-11 19:00 - 00398416 _____ (Microsoft Corporation) C:\WINDOWS\system\vbrun300.dll 2016-08-27 11:00 - 1992-10-21 00:00 - 00356992 _____ (Microsoft Corporation) C:\WINDOWS\system\vbrun200.dll 2016-08-27 11:00 - 1991-05-10 01:00 - 00271264 _____ C:\WINDOWS\system\vbrun100.dll 2016-08-27 10:57 - 2016-08-27 10:57 - 00110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll 2016-08-27 10:56 - 2016-08-27 10:56 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Sun 2016-08-27 10:56 - 2016-08-27 10:56 - 00000000 ____D C:\ProgramData\Oracle 2016-08-27 10:56 - 2016-08-27 10:56 - 00000000 ____D C:\Program Files\Java 2016-08-27 10:53 - 2016-08-27 11:01 - 00632904 _____ (O&O Software GmbH) C:\Users\Michiyo\Documents\OOSU10.exe 2016-08-27 10:49 - 2016-08-27 10:49 - 00203114 _____ C:\Users\Michiyo\Documents\OOSU10.zip 2016-08-27 10:48 - 2016-08-27 10:53 - 377130076 _____ (Sereby Corporation) C:\Users\Michiyo\Documents\aio-runtimes_v2.3.8.exe 2016-08-26 16:16 - 2016-08-26 16:16 - 00000000 ____D C:\$SysReset 2016-08-26 15:34 - 2016-08-26 15:34 - 00000017 _____ C:\Users\Michiyo\AppData\Local\resmon.resmoncfg 2016-08-26 13:18 - 2016-08-26 15:24 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job 2016-08-26 11:10 - 2016-08-26 11:10 - 00003340 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task 2016-08-26 10:29 - 2016-08-26 10:29 - 00003404 _____ C:\WINDOWS\System32\Tasks\Norton WSC Integration 2016-08-26 10:28 - 2016-08-26 10:28 - 00280764 _____ C:\WINDOWS\Minidump\082616-97187-01.dmp 2016-08-23 09:34 - 2012-01-01 17:18 - 00000000 ____D C:\Users\Michiyo\Desktop\[Yaoi Fangirl] Lent - Death Note Doujin 2016-08-22 17:22 - 2016-08-22 18:07 - 00327998 _____ C:\Users\Michiyo\Documents\Digimon Adventure - Leb deine Träume.pds 2016-08-20 00:00 - 2016-08-20 00:00 - 79449510 _____ C:\Users\Michiyo\Desktop\『HiGH&LOW THE MOVIE』Best Action Scenes Special Trailer.mp4 2016-08-13 10:23 - 2016-08-13 10:26 - 00000000 ____D C:\Users\Michiyo\Documents\Die Sims 4 2016-08-12 18:08 - 2016-08-12 18:11 - 42013312 _____ (Skype Technologies S.A.) C:\Users\Michiyo\Documents\SkypeSetupFull.exe 2016-08-12 16:58 - 2016-08-26 10:27 - 739168023 _____ C:\WINDOWS\MEMORY.DMP 2016-08-12 11:13 - 2016-08-13 19:24 - 00000000 ____D C:\Users\Michiyo\Desktop\Die Sims 4 2016-08-12 09:02 - 2016-08-12 09:05 - 00002503 _____ C:\Users\Michiyo\Documents\Norton Internet Security.lnk 2016-08-12 01:07 - 2016-08-12 01:07 - 08892696 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 08738920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 07115928 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00479368 _____ C:\WINDOWS\system32\amdmiracast.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00164280 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00159088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00154920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00138688 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00138176 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00123120 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00123104 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00105344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00105344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 48819200 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 38266368 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 32555512 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 27489280 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl12cl64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 26639360 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 21641216 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl12cl.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 15729152 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 14320128 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 08830456 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdvlk64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 08627704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmantle64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 07076352 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdvlk32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 06956032 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmantle32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 02376704 _____ C:\WINDOWS\system32\amdoclvp9lib64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 02286584 _____ C:\WINDOWS\SysWOW64\amdoclvp9lib32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 02147328 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 01837568 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00991232 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00991232 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00883192 _____ (AMD) C:\WINDOWS\system32\coinst_16.30.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00751616 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00627192 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00459776 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00402944 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe 2016-08-12 01:06 - 2016-08-12 01:06 - 00350208 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODE.exe 2016-08-12 01:06 - 2016-08-12 01:06 - 00292352 _____ C:\WINDOWS\system32\dgtrayicon.exe 2016-08-12 01:06 - 2016-08-12 01:06 - 00287744 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00275968 _____ C:\WINDOWS\system32\GameManager64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00270336 _____ C:\WINDOWS\system32\clinfo.exe 2016-08-12 01:06 - 2016-08-12 01:06 - 00268792 _____ C:\WINDOWS\system32\hsa-thunk64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00249336 _____ C:\WINDOWS\system32\amdgfxinfo64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00241152 _____ C:\WINDOWS\SysWOW64\GameManager32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00234496 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00231424 _____ C:\WINDOWS\system32\atieah64.exe 2016-08-12 01:06 - 2016-08-12 01:06 - 00222208 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00209408 _____ C:\WINDOWS\SysWOW64\atieah32.exe 2016-08-12 01:06 - 2016-08-12 01:06 - 00202744 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00201728 _____ C:\WINDOWS\system32\amdhdl64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00181760 _____ C:\WINDOWS\SysWOW64\amdhdl32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00176640 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00159736 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00137208 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00135168 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00130560 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00123896 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00118784 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00113664 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00111616 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00109568 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00108544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00108544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00104448 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00083960 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00079864 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00073216 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00069632 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00068608 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODCLI.exe 2016-08-12 01:06 - 2016-08-12 01:06 - 00068096 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00067584 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00066560 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00060920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00055800 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmmcl.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00021496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll 2016-08-11 14:38 - 2016-08-11 14:38 - 00000000 ____D C:\Users\Michiyo\Documents\Electronic Arts 2016-08-11 14:26 - 2016-08-28 19:05 - 00002187 _____ C:\Users\Michiyo\Desktop\Die Sims 4 Digital Deluxe Edition 64 Bit.lnk 2016-08-11 14:07 - 2016-08-27 12:15 - 00000000 ____D C:\Program Files (x86)\Die Sims 4 2016-08-11 13:58 - 2016-08-11 14:02 - 00000000 ____D C:\Users\Michiyo\Downloads\Die Sims 4 Gaumenfreuden DLC Incl. Update 14 MULTi2 2016-08-11 12:39 - 2016-08-03 12:36 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2016-08-11 12:39 - 2016-08-03 12:30 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2016-08-11 12:39 - 2016-08-03 12:23 - 00693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2016-08-11 12:39 - 2016-08-03 12:23 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2016-08-11 12:39 - 2016-08-03 12:22 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2016-08-11 12:39 - 2016-08-03 12:22 - 00465248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2016-08-11 12:39 - 2016-08-03 12:22 - 00331616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2016-08-11 12:39 - 2016-08-03 12:21 - 03675512 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2016-08-11 12:39 - 2016-08-03 12:21 - 00566112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2016-08-11 12:39 - 2016-08-03 12:20 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2016-08-11 12:39 - 2016-08-03 12:20 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll 2016-08-11 12:39 - 2016-08-03 12:19 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2016-08-11 12:39 - 2016-08-03 12:19 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2016-08-11 12:39 - 2016-08-03 12:13 - 01988448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2016-08-11 12:39 - 2016-08-03 12:13 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2016-08-11 12:39 - 2016-08-03 12:13 - 00393056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2016-08-11 12:39 - 2016-08-03 11:51 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2016-08-11 12:39 - 2016-08-03 11:44 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2016-08-11 12:39 - 2016-08-03 11:44 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2016-08-11 12:39 - 2016-08-03 11:43 - 16985088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2016-08-11 12:39 - 2016-08-03 11:40 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2016-08-11 12:39 - 2016-08-03 11:40 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll 2016-08-11 12:39 - 2016-08-03 11:39 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2016-08-11 12:39 - 2016-08-03 11:38 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2016-08-11 12:39 - 2016-08-03 11:36 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2016-08-11 12:39 - 2016-08-03 11:36 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2016-08-11 12:39 - 2016-08-03 11:35 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll 2016-08-11 12:39 - 2016-08-03 11:31 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe 2016-08-11 12:39 - 2016-08-03 11:30 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2016-08-11 12:39 - 2016-08-03 11:29 - 14252544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2016-08-11 12:39 - 2016-08-03 11:29 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe 2016-08-11 12:39 - 2016-08-03 11:29 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2016-08-11 12:39 - 2016-08-03 11:28 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2016-08-11 12:39 - 2016-08-03 11:27 - 07536640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2016-08-11 12:39 - 2016-08-03 11:27 - 01717760 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2016-08-11 12:39 - 2016-08-03 11:18 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2016-08-11 12:39 - 2016-08-03 11:18 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2016-08-11 12:39 - 2016-08-03 11:16 - 05123072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2016-08-11 12:39 - 2016-08-03 11:16 - 03589120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2016-08-11 12:39 - 2016-08-03 11:16 - 01732096 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-08-11 12:39 - 2016-08-03 11:14 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll 2016-08-11 12:39 - 2016-08-03 11:13 - 03025920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2016-08-11 12:39 - 2016-08-03 11:13 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2016-08-11 12:39 - 2016-08-03 11:11 - 04171264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2016-08-11 12:39 - 2016-08-03 07:52 - 00034088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll 2016-08-11 12:39 - 2016-08-03 07:34 - 00501592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2016-08-11 12:39 - 2016-08-03 07:34 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2016-08-11 12:39 - 2016-08-03 07:33 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll 2016-08-11 12:39 - 2016-08-03 07:31 - 02921368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2016-08-11 12:39 - 2016-08-03 07:31 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2016-08-11 12:39 - 2016-08-03 07:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2016-08-11 12:39 - 2016-08-03 06:57 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdlrecover.exe 2016-08-11 12:39 - 2016-08-03 06:48 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll 2016-08-11 12:39 - 2016-08-03 06:47 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2016-08-11 12:39 - 2016-08-03 06:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll 2016-08-11 12:39 - 2016-08-03 06:44 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll 2016-08-11 12:39 - 2016-08-03 06:42 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll 2016-08-11 12:39 - 2016-08-03 06:37 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2016-08-11 12:39 - 2016-08-03 06:35 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe 2016-08-11 12:39 - 2016-08-03 06:34 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2016-08-11 12:39 - 2016-08-03 06:32 - 12585984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2016-08-11 12:39 - 2016-08-03 06:32 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2016-08-11 12:39 - 2016-08-03 06:32 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2016-08-11 12:39 - 2016-08-03 06:31 - 06743040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2016-08-11 12:39 - 2016-08-03 06:31 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2016-08-11 12:39 - 2016-08-03 06:25 - 04078080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2016-08-11 12:39 - 2016-08-03 06:19 - 02180096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll 2016-08-11 12:38 - 2016-08-03 13:14 - 01505984 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2016-08-11 12:38 - 2016-08-03 13:14 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2016-08-11 12:38 - 2016-08-03 13:14 - 00050368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2016-08-11 12:38 - 2016-08-03 12:36 - 07469408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-08-11 12:38 - 2016-08-03 12:36 - 00037744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll 2016-08-11 12:38 - 2016-08-03 12:22 - 01322760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2016-08-11 12:38 - 2016-08-03 12:22 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll 2016-08-11 12:38 - 2016-08-03 12:21 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2016-08-11 12:38 - 2016-08-03 12:21 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe 2016-08-11 12:38 - 2016-08-03 12:11 - 00422744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2016-08-11 12:38 - 2016-08-03 11:51 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe 2016-08-11 12:38 - 2016-08-03 11:46 - 22384128 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-08-11 12:38 - 2016-08-03 11:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll 2016-08-11 12:38 - 2016-08-03 11:41 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll 2016-08-11 12:38 - 2016-08-03 11:41 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll 2016-08-11 12:38 - 2016-08-03 11:40 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll 2016-08-11 12:38 - 2016-08-03 11:40 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll 2016-08-11 12:38 - 2016-08-03 11:39 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll 2016-08-11 12:38 - 2016-08-03 11:38 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2016-08-11 12:38 - 2016-08-03 11:37 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll 2016-08-11 12:38 - 2016-08-03 11:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2016-08-11 12:38 - 2016-08-03 11:35 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-08-11 12:38 - 2016-08-03 11:34 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2016-08-11 12:38 - 2016-08-03 11:33 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2016-08-11 12:38 - 2016-08-03 11:33 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll 2016-08-11 12:38 - 2016-08-03 11:31 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll 2016-08-11 12:38 - 2016-08-03 11:31 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2016-08-11 12:38 - 2016-08-03 11:30 - 24613888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-08-11 12:38 - 2016-08-03 11:30 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2016-08-11 12:38 - 2016-08-03 11:29 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2016-08-11 12:38 - 2016-08-03 11:29 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2016-08-11 12:38 - 2016-08-03 11:28 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2016-08-11 12:38 - 2016-08-03 11:28 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2016-08-11 12:38 - 2016-08-03 11:27 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2016-08-11 12:38 - 2016-08-03 11:27 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2016-08-11 12:38 - 2016-08-03 11:20 - 13390336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-08-11 12:38 - 2016-08-03 11:18 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2016-08-11 12:38 - 2016-08-03 11:17 - 02175488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2016-08-11 12:38 - 2016-08-03 11:16 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2016-08-11 12:38 - 2016-08-03 11:15 - 07833088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-08-11 12:38 - 2016-08-03 11:14 - 04895232 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-08-11 12:38 - 2016-08-03 11:12 - 02746368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll 2016-08-11 12:38 - 2016-08-03 07:30 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2016-08-11 12:38 - 2016-08-03 07:30 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2016-08-11 12:38 - 2016-08-03 07:30 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe 2016-08-11 12:38 - 2016-08-03 06:40 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll 2016-08-11 12:38 - 2016-08-03 06:39 - 19351040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-08-11 12:38 - 2016-08-03 06:37 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2016-08-11 12:38 - 2016-08-03 06:35 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2016-08-11 12:38 - 2016-08-03 06:34 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2016-08-11 12:38 - 2016-08-03 06:33 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-08-11 12:38 - 2016-08-03 06:33 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2016-08-11 12:38 - 2016-08-03 06:33 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2016-08-11 12:38 - 2016-08-03 06:32 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2016-08-11 12:38 - 2016-08-03 06:29 - 12133376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-08-11 12:38 - 2016-08-03 06:28 - 03663360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-08-11 12:38 - 2016-08-03 06:25 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2016-08-11 12:38 - 2016-08-03 06:23 - 05660672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-08-11 12:38 - 2016-08-03 06:23 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2016-08-11 12:38 - 2016-08-03 06:22 - 02501120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2016-08-11 12:38 - 2016-08-03 06:22 - 01502208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-08-11 12:38 - 2016-08-03 06:21 - 01708032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll 2016-08-11 11:35 - 2016-08-11 11:46 - 00000000 ____D C:\Users\Michiyo\Downloads\Die Sims 4 Digital Deluxe Edition ReRelease Incl. Update 14 MULTi2 2016-08-08 12:51 - 2016-08-08 12:53 - 1266484522 _____ C:\Users\Michiyo\Documents\PhotoImpact.13.1.rar 2016-08-07 23:09 - 2016-08-07 23:17 - 529480482 _____ C:\Users\Michiyo\Downloads\[Leopard-Raws] Dragon Ball Super - 054 RAW (THK 1280x720 x264 AAC).mp4 2016-08-07 23:09 - 2016-08-07 23:10 - 389781623 _____ C:\Users\Michiyo\Downloads\[Leopard-Raws] Dragon Ball Super - 053 RAW (THK 1280x720 x264 AAC).mp4 2016-08-06 11:03 - 2016-08-06 11:03 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\29030 ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-08-29 10:19 - 2014-11-08 19:05 - 00001140 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2016-08-29 10:15 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-08-29 10:14 - 2016-04-18 09:31 - 00004162 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{AE24DCEB-E6C7-487B-AFB9-782C90AB2FBD} 2016-08-29 10:07 - 2014-11-08 19:05 - 00001136 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2016-08-29 10:05 - 2009-07-14 04:34 - 00000555 _____ C:\WINDOWS\win.ini 2016-08-29 02:57 - 2014-11-09 15:20 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\AbiSuite 2016-08-29 02:57 - 2014-11-08 15:38 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\vlc 2016-08-29 01:26 - 2014-11-08 14:42 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Skype 2016-08-28 21:06 - 2014-12-03 10:18 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\uTorrent 2016-08-28 19:05 - 2016-06-11 11:49 - 00002039 _____ C:\Users\Michiyo\Desktop\Dragonball Xenoverse.lnk 2016-08-28 17:57 - 2016-04-04 18:53 - 00000000 ____D C:\Users\Michiyo\Desktop\gucken heute 2016-08-28 12:39 - 2014-11-13 20:23 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Audacity 2016-08-28 10:47 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps 2016-08-27 17:08 - 2015-12-21 13:41 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-08-27 17:08 - 2015-12-21 13:18 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin 2016-08-27 17:08 - 2015-10-30 08:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI 2016-08-27 13:06 - 2016-06-05 15:29 - 00000000 ____D C:\WINDOWS\Minidump 2016-08-27 13:06 - 2016-01-06 07:27 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\HpUpdate 2016-08-27 12:52 - 2016-03-11 18:36 - 00000000 ____D C:\Users\Michiyo\AppData\Local\AvgSetupLog 2016-08-27 12:34 - 2014-11-12 18:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-08-27 12:31 - 2014-12-26 18:22 - 00000000 ____D C:\Users\Michiyo\Documents\AnyDVD HD 6.7.9.0 Fimal 2016-08-27 11:20 - 2015-10-30 08:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM 2016-08-27 11:18 - 2016-03-11 18:36 - 00000000 ____D C:\Users\Michiyo\AppData\Local\Avg 2016-08-27 11:18 - 2014-11-12 18:13 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\TuneUp Software 2016-08-27 11:17 - 2016-03-11 18:37 - 00000000 ____D C:\ProgramData\Avg 2016-08-27 11:17 - 2016-03-11 18:37 - 00000000 ____D C:\Program Files (x86)\AVG 2016-08-27 11:17 - 2015-10-30 09:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP 2016-08-27 11:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2016-08-27 11:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\System 2016-08-27 10:59 - 2015-12-21 13:18 - 00000000 ____D C:\ProgramData\Package Cache 2016-08-27 10:59 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\Macromed 2016-08-27 10:57 - 2015-03-18 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2016-08-27 10:56 - 2015-03-18 13:45 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2016-08-27 10:55 - 2015-03-18 13:45 - 00000000 ____D C:\Program Files (x86)\Java 2016-08-26 16:47 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-08-26 16:16 - 2014-11-12 17:49 - 00000000 ____D C:\Users\Michiyo\AppData\Local\CrashDumps 2016-08-26 13:17 - 2014-11-25 15:51 - 00000000 ____D C:\WINDOWS\pss 2016-08-26 12:45 - 2016-07-16 17:15 - 00000000 ____D C:\Users\Michiyo\Downloads\Seisei Suruhodo, Aishiteru 2016-08-26 11:25 - 2016-07-16 17:15 - 00000000 ____D C:\Users\Michiyo\Downloads\Ie Uru Onna 2016-08-26 11:10 - 2015-08-04 11:18 - 00002437 _____ C:\Users\Michiyo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-08-26 11:10 - 2015-08-04 11:18 - 00000000 ___RD C:\Users\Michiyo\OneDrive 2016-08-26 10:30 - 2013-12-16 20:32 - 00000000 ____D C:\WINDOWS\system32\Drivers\NISx64 2016-08-25 21:34 - 2014-11-11 20:14 - 00000132 _____ C:\Users\Michiyo\AppData\Roaming\Adobe PNG Format CS5 Prefs 2016-08-25 16:56 - 2016-03-30 09:53 - 00000000 ____D C:\WINDOWS\System32\Tasks\Remediation 2016-08-24 13:18 - 2016-03-11 18:39 - 00002549 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp.lnk 2016-08-23 07:41 - 2015-05-11 12:42 - 00000000 ____D C:\Users\Michiyo\FanFics - Geschichten 2016-08-21 20:02 - 2016-06-08 11:33 - 00000000 ____D C:\Users\Michiyo\Desktop\Video 2016-08-21 10:27 - 2015-12-21 13:18 - 00000000 ____D C:\ProgramData\AMD 2016-08-19 16:35 - 2016-03-11 18:39 - 00053008 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\TURegOpt.exe 2016-08-16 20:19 - 2016-07-16 17:15 - 00000000 ____D C:\Users\Michiyo\Downloads\Suki na Hito ga Iru Koto 2016-08-14 15:38 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache 2016-08-14 01:43 - 2015-12-21 13:21 - 02086168 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-08-14 01:43 - 2015-10-30 20:35 - 00888008 _____ C:\WINDOWS\system32\perfh007.dat 2016-08-14 01:43 - 2015-10-30 20:35 - 00197092 _____ C:\WINDOWS\system32\perfc007.dat 2016-08-14 01:43 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF 2016-08-13 17:25 - 2015-08-04 11:15 - 00000000 ____D C:\Users\Michiyo\AppData\Local\Packages 2016-08-13 01:07 - 2015-12-21 13:22 - 00000000 ____D C:\Users\Michiyo 2016-08-12 18:11 - 2014-11-08 14:41 - 00000000 ____D C:\ProgramData\Skype 2016-08-12 15:05 - 2014-11-08 19:10 - 00000000 ____D C:\Program Files (x86)\AMD 2016-08-12 15:02 - 2015-12-21 13:17 - 00000000 ____D C:\Program Files\AMD 2016-08-12 14:29 - 2015-07-01 22:23 - 00000000 ____D C:\Users\Michiyo\AppData\Local\JDownloader 2.0 2016-08-12 09:08 - 2015-08-04 11:15 - 00000000 __RHD C:\Users\Public\AccountPictures 2016-08-12 09:05 - 2015-07-15 19:34 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security 2016-08-12 09:01 - 2015-10-30 20:44 - 00000000 ____D C:\Program Files\Windows Journal 2016-08-12 09:01 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2016-08-12 09:01 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-08-12 01:07 - 2016-01-22 14:05 - 07258160 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll 2016-08-12 01:07 - 2016-01-22 14:04 - 00137224 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll 2016-08-12 01:07 - 2015-12-16 21:06 - 09340136 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll 2016-08-12 01:07 - 2015-12-16 21:06 - 09131736 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll 2016-08-12 01:07 - 2015-12-16 21:06 - 01273928 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll 2016-08-12 01:07 - 2015-12-16 21:06 - 00152800 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll 2016-08-12 01:07 - 2015-10-07 17:19 - 10995344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll 2016-08-12 01:07 - 2015-10-07 17:19 - 10317568 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll 2016-08-12 01:07 - 2015-10-07 17:19 - 01547544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll 2016-08-12 01:07 - 2015-10-07 17:19 - 00183952 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll 2016-08-12 01:06 - 2016-01-22 14:00 - 00521728 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe 2016-08-12 01:06 - 2016-01-22 14:00 - 00287232 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe 2016-08-12 01:06 - 2016-01-22 13:59 - 01323008 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll 2016-08-12 01:06 - 2015-10-07 17:19 - 26706432 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys 2016-08-12 01:06 - 2015-10-07 17:19 - 00518656 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys 2016-08-11 17:19 - 2013-12-16 20:33 - 00101112 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS 2016-08-11 17:19 - 2013-12-16 20:33 - 00008270 _____ C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT 2016-08-11 16:01 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2016-08-11 16:01 - 2013-12-17 10:23 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-08-11 15:53 - 2013-12-17 10:23 - 147640136 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-08-09 08:20 - 2014-11-08 19:05 - 00002483 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-08-09 08:20 - 2014-11-08 19:05 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-08-08 22:13 - 2015-01-02 15:06 - 00000000 ____D C:\ProgramData\Electronic Arts 2016-08-08 11:25 - 2014-11-08 15:27 - 00000000 ___RD C:\Program Files (x86)\Skype 2016-08-03 21:08 - 2016-03-11 18:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen 2016-08-03 17:31 - 2016-03-06 14:20 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-07-31 17:30 - 2016-05-19 17:32 - 00000000 ____D C:\Users\Michiyo\Downloads\extracted ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-08-04 11:23 - 2015-08-04 11:23 - 0000000 _____ () C:\Program Files (x86)\Common Files\AMD 2014-11-11 20:14 - 2016-08-25 21:34 - 0000132 _____ () C:\Users\Michiyo\AppData\Roaming\Adobe PNG Format CS5 Prefs 2014-12-24 02:38 - 2014-12-24 02:38 - 0003584 _____ () C:\Users\Michiyo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2016-08-26 15:34 - 2016-08-26 15:34 - 0000017 _____ () C:\Users\Michiyo\AppData\Local\resmon.resmoncfg 2014-12-26 19:39 - 2014-12-26 19:39 - 0000040 ___SH () C:\ProgramData\.zreglib 2014-12-26 19:46 - 2014-12-26 19:46 - 0028672 _____ () C:\ProgramData\data.dll 2011-05-22 15:09 - 2011-05-22 15:09 - 0019624 _____ () C:\ProgramData\iml.xml 2011-05-22 15:09 - 2011-05-22 15:09 - 0019624 _____ () C:\ProgramData\winiml.dat Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\ProgramData\data.dll C:\ProgramData\winiml.dat C:\Users\Michiyo\VisualBoyAdvance.exe ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-08-20 15:54 ==================== Ende von FRST.txt ============================ |
29.08.2016, 09:35 | #4 |
| Win10 Update oder Virus ??? Explorer langsam + weiße Icons Addition Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 28-08-2016 durchgeführt von Michiyo (29-08-2016 10:19:59) Gestartet von C:\Users\Michiyo\Desktop Windows 10 Home Version 1511 (X64) (2015-12-21 11:45:04) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-1262878346-956153297-733536101-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-1262878346-956153297-733536101-503 - Limited - Disabled) Gast (S-1-5-21-1262878346-956153297-733536101-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1262878346-956153297-733536101-1003 - Limited - Enabled) Michiyo (S-1-5-21-1262878346-956153297-733536101-1001 - Administrator - Enabled) => C:\Users\Michiyo ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: AVG AntiVirus Free Edition (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: AVG AntiVirus Free Edition (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) @BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.30 - GIGABYTE) µTorrent (HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\uTorrent) (Version: 3.4.8.42449 - BitTorrent Inc.) 64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden AbiWord 2.9.4 (HKLM-x32\...\AbiWord2) (Version: 2.9.4 - AbiSource Developers) ACP Application (Version: 2015.1204.1152.59 - Advanced Micro Devices, Inc.) Hidden Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.017.20053 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.) Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated) Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated) Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated) Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated) Adobe Shockwave Player 12.2 (HKLM-x32\...\{C1F3739C-D31D-4062-8788-29261C4A2A68}) (Version: 12.2.4.194 - Adobe Systems, Inc) Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd) AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.5.0 - Sereby Corporation) AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 5.00 - Advanced Micro Devices, Inc.) AnyDVD (HKLM-x32\...\AnyDVD) (Version: 6.7.9.0 - SlySoft) ASUS Turbo Engine v1.7 (HKLM-x32\...\ASUS Turbo Engine_is1) (Version: - ASUS) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.7 - Atheros Communications Inc.) aTube Catcher Version 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp) Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team) AutoGreen B12.1220.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE) AutoGreen B12.1220.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden AVG (HKLM\...\AvgZen) (Version: 1.82.2.30772 - AVG Technologies) AVG (Version: 16.101.7752 - AVG Technologies) Hidden AVG 2016 (Version: 16.0.4649 - AVG Technologies) Hidden AVG PC TuneUp (HKLM-x32\...\AVG PC TuneUp) (Version: 16.52.2.34122 - AVG Technologies) AVG PC TuneUp (x32 Version: 16.52.2 - AVG Technologies) Hidden AVG Protection (HKLM\...\AVG) (Version: 2016.101.7752 - AVG Technologies) AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.3.4.122 - AVG Technologies) AVG Zen (Version: 1.82.2 - AVG Technologies) Hidden BlueStacks App Player (HKLM-x32\...\{D7E3588F-25E6-4A93-8B1C-596F7951CA38}) (Version: 0.10.7.5601 - BlueStack Systems, Inc.) BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden Catalyst Control Center Next Localization BR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHS (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHT (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CS (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DA (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DE (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization EL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization ES (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FI (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization HU (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization IT (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization JA (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization KO (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NO (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization PL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization RU (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization SV (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TH (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version: - Cheat Engine) Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version: - Cheat Engine) Copy (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden Creative Live! Cam Video IM/Video Chat (VF0540) (1.01.03.00) (HKLM\...\Creative VF0540) (Version: - ) Creative Live! Central (HKLM-x32\...\Creative Live! Central) (Version: 1.00 - Creative Technology Limited) CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.2014 - CyberLink Corp.) CyberLink PowerDirector 11 (HKLM-x32\...\InstallShield_{551F492A-01B0-4DC4-866F-875EC4EDC0A8}) (Version: 11.0.0.3625 - CyberLink Corp.) CyberLink PowerDirector 11 (Version: 11.0.0.3625 - Ihr Firmenname) Hidden CyberLink PowerDirector 11 Content Pack Essential (HKLM-x32\...\InstallShield_{03AD770A-1530-437E-967F-ADD4E5B23164}) (Version: 11 - CyberLink Corp.) CyberLink PowerDirector 11 Content Pack Premium (HKLM-x32\...\InstallShield_{37672760-7930-4911-9685-227E29AE2C55}) (Version: 11 - CyberLink Corp.) CyberLink WaveEditor 2 (HKLM-x32\...\InstallShield_{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}) (Version: 2.0.3206 - CyberLink Corp.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd) Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation) Die Sims 4 Digital Deluxe Edition ReRelease Incl. Update 14 MULTi2 1.20.60.1020 (HKLM-x32\...\Die Sims 4 Digital Deluxe Edition ReRelease Incl. Update 14 MULTi2 1.20.60.1020) (Version: - ) Die Sims 4 Gaumenfreuden DLC Incl. Update 14 MULTi2 1.20.60.1020 (HKLM-x32\...\Die Sims 4 Gaumenfreuden DLC Incl. Update 14 MULTi2 1.20.60.1020) (Version: - ) DJ_AIO_NS_LP_DocCD (x32 Version: 90.0.222.000 - Hewlett-Packard) Hidden DJ_AIO_ProductContext (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden DJ_AIO_Software (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden DJ_AIO_Software_min (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden Dragonball Xenoverse Incl. Update 7 MULTi2 1.0 (HKLM-x32\...\Dragonball Xenoverse Incl. Update 7 MULTi2 1.0) (Version: - ) DVDFab 9.1.8.5 (24/01/2015) (HKLM-x32\...\DVDFab 9_is1) (Version: - Fengtao Software Inc.) Easy Tune 6 B13.0125.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE) Easy Tune 6 B13.0125.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden F4100 (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden F4100_Help (x32 Version: 90.0.222.000 - Hewlett-Packard) Hidden FileZilla Client 3.17.0 (HKLM-x32\...\FileZilla Client) (Version: 3.17.0 - Tim Kosse) FMW 1 (Version: 1.122.3 - AVG Technologies) Hidden Free NicoVideo Download (HKLM-x32\...\Free NicoVideo Download_is1) (Version: 1.0.25.1117 - DVDVideoSoft Ltd.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.) Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP) HP Deskjet All-In-One Software (HKLM\...\{2CB8566A-8EA6-417A-BAB1-1B10A88C79BB}) (Version: 14.0 - HP) HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP) HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP) HP Support Solutions Framework (HKLM-x32\...\{B1AD4FFB-DD17-43EC-8C30-B9E71EAD9132}) (Version: 12.5.26.37 - Hewlett-Packard Company) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden HPSSupply (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden IM Lock (HKLM-x32\...\IMLock) (Version: - Comvigo, Inc.) Java 7 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.450 - Oracle) Java 8 Update 102 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180102F0}) (Version: 8.0.1020.14 - Oracle Corporation) Java 8 Update 102 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180102F0}) (Version: 8.0.1020.14 - Oracle Corporation) JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH) JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH) JDownloader 2 (HKLM\...\jdownloader2-1) (Version: 2.0 - AppWork GmbH) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Leawo Blu-ray Player version 1.9.1.4 (HKLM-x32\...\{CF7F52BF-DEE0-44CD-A7E1-AADD5CCECCDD}_is1) (Version: 1.9.1.4 - leawo Software) Manager (x32 Version: 4.0.1.25166 - 2015 pdfforge GmbH. All rights reserved) Hidden MarketResearch (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation) Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation) Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Mozilla Firefox 36.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 36.0.1 (x86 de)) (Version: 36.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 36.0.1 - Mozilla) MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Newblue Art Effects for PowerDirector (HKLM\...\NewBlue Art Effects for PowerDirector) (Version: 2.0 - NewBlue) OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP) OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation) Opera Stable 31.0.1889.99 (HKLM-x32\...\Opera 31.0.1889.99) (Version: 31.0.1889.99 - Opera Software) Origin (HKLM-x32\...\Origin) (Version: 9.2.1.4399 - Electronic Arts, Inc.) PDF Architect 4 (HKLM-x32\...\PDF Architect 4) (Version: 4.0.34.26215 - pdfforge GmbH) PDF Architect 4 Create Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden PDF Architect 4 Edit Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden PDF Architect 4 View Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.3.0 - pdfforge GmbH) PowerDirector (Version: 11.0 - Ihr Firmenname) Hidden Raptr (HKLM-x32\...\Raptr) (Version: - ) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.) Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP) Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.3.0.9150 - Microsoft Corporation) Skype™ 7.26 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.26.101 - Skype Technologies S.A.) SmartSound Quicktracks 5 (HKLM-x32\...\InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.) SmartSound Quicktracks 5 (x32 Version: 5.1.8 - SmartSound Software Inc.) Hidden SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden Stellarium 0.13.3 (HKLM\...\Stellarium_is1) (Version: 0.13.3 - Stellarium team) TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.45862 - TeamViewer) Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden Trust tablet driver (HKLM\...\RmTablet) (Version: 5.01 - ) Ulead PhotoImpact X3 (HKLM-x32\...\InstallShield_{15803703-25FA-4C01-A062-3F4A59937E87}) (Version: 1.00.0000 - Corel) Ulead PhotoImpact X3 (x32 Version: 1.00.0000 - Corel) Hidden Unity Web Player (HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS) UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN) WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation) WinRAR 5.11 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-1262878346-956153297-733536101-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileCoAuth.exe (Microsoft Corporation) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {05F213C0-8C4B-4FA4-82DA-1EEB9D4D3080} - System32\Tasks\{1A9A6131-380F-4468-B9CE-9CB2C1E842E5} => pcalua.exe -a C:\Users\Michiyo\AppData\Roaming\omiga-plus\UninstallManager.exe -c -ptid=smt <==== ACHTUNG Task: {114F22A2-008C-4777-A2C0-39BF9609C446} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG Task: {156382D6-023F-4200-818B-A8C53B69CD19} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {1A4A388B-F3AB-4AC7-B9A6-669C6008A48D} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {1C4978E1-2E14-4A7A-BC9C-758E656E4656} - \Norton Internet Security\Norton Error Analyzer -> Keine Datei <==== ACHTUNG Task: {1DEA7791-1707-4D85-BF6D-D02ACACA92EC} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG Task: {25938094-632A-4E2E-8C88-2856D095BEBF} - System32\Tasks\TweakBit\FixMyPC\Start FixMyPC оn logon => C:\Program Files (x86)\TweakBit\FixMyPC\FixMyPC.exe <==== ACHTUNG Task: {2A0BC7CA-71EA-4564-8D16-0AD4D006FFF5} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG Task: {2B3BBE82-93F6-42D2-96E9-0D7F95A78A30} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe Task: {30E18F1A-840E-493F-8C2A-A0562A662BB2} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [2016-06-17] (Symantec Corporation) Task: {3F457ABC-9367-4B7A-AB11-BBDFE4017628} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-08-03] (HP Inc.) Task: {40E7B9D3-FE28-4702-B207-46CA68F181B1} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe Task: {4D01937F-EC23-4931-A1C1-6B87C463F2A5} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe Task: {4E44534B-1E72-48D6-A063-A08E0E920281} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe Task: {50F00039-E0F3-49B0-922B-C5A6C9330F08} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe Task: {57E85502-A525-4DAB-89C7-46C9B6DFEC65} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.) Task: {5833E409-3661-4B4C-B954-201CBCB3EB7D} - System32\Tasks\MichiyoNobbleAbsorbsV2 => Rundll32.exe NonrealisticPredefining.dll,main 7 1 <==== ACHTUNG Task: {5A73ADF3-9DC8-41A2-B2EA-261BA2BF6B5F} - \Norton Internet Security\Norton Autofix -> Keine Datei <==== ACHTUNG Task: {5FCAE671-3B9B-4E62-A9B4-11AA571E0E37} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe Task: {6237CAC7-95D3-40D3-B9D6-6E077B097F39} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-08-27] (Adobe Systems Incorporated) Task: {63566AF3-8C0F-451C-A91F-A4D4F1517C3D} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe [2016-08-19] (AVG Technologies CZ, s.r.o.) Task: {6CF5E4AB-2BE4-4FAD-94BC-D7F1FF8E6BB2} - \Norton Internet Security\Norton Error Processor -> Keine Datei <==== ACHTUNG Task: {73C2C45F-6FBE-4AA2-A153-D20B51FB945C} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe Task: {78A1B497-0AE3-4BEB-BAC5-4B0F0834FF38} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe Task: {882B1AC2-CD97-408D-9B9A-F363612D003D} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe [2016-08-26] (Microsoft Corporation) Task: {88C74DEC-81D9-4D55-A994-75A890B64031} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe Task: {8C83C740-F7D0-48D7-AF62-2F37C5647466} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe Task: {8E71E3D0-2229-4D0F-B27D-7850216D032B} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe Task: {90FB9E3A-4B05-4D38-9AB0-11680FD3CBBC} - System32\Tasks\AdobeAAMUpdater-1.0-Michiyo-PC-Michiyo => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated) Task: {93809E8D-BB23-4EEB-820D-B1038C55C50A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-05-09] (Hewlett-Packard) Task: {9457E5B4-5BE3-4414-A28F-15283228C6A7} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe Task: {99957B8C-4043-4E0B-A914-B718431B4C7F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG Task: {9A9FED19-87AD-437F-8FB4-6F45611583C1} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG Task: {9D2AB2E1-52CE-4CA1-B679-0F669C197FCC} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {9D5B28AB-351C-43D9-A864-101793D47D0C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe Task: {A2462474-1AE8-4826-844B-F64E50DD95B2} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG Task: {A413446E-0712-47A0-847D-9C734E4E630C} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe Task: {AA0AD042-E156-4899-8EAF-A907A006AFE4} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe Task: {AA690441-0189-4210-8C48-4857BBE1D7F2} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG Task: {C0206B5E-CA90-4063-8AD7-2F284EC041AF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.) Task: {CCEFE2EE-FD56-483C-9D3A-21EC8CEF3FCB} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2015-12-04] (Advanced Micro Devices, Inc.) Task: {CFB5EFD0-3189-4BD1-97C9-52182EE4ABBA} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe Task: {D7BB176A-0F3D-4ED5-9858-BA65E1A028A1} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG Task: {D7F60755-A8DE-4410-A10B-6E2B64ED5DC0} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-08-11] (Microsoft Corporation) Task: {D81E9C19-3B27-4E71-B75F-BD8E87F12E37} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-06-25] (Adobe Systems Incorporated) Task: {D96D743A-70BF-418E-95D0-77B4D1E4E08B} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe Task: {E77A538F-F474-412E-AFE1-F0E2124E2489} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe Task: {EEE72BC1-DBA0-4589-B26A-F6DA943FC712} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {F5E89F4E-0776-4E82-9333-7DD6C14DD704} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG Task: {F849ADF7-109E-4E9E-976D-6E53D206242C} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG Task: {F9F3025F-A4E1-4A71-B5B0-7EF73B9DD3DC} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG Task: {FC29C333-5ADA-498F-B64B-5C20E950F184} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Verknüpfungen ============================= (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://isearch.omiga-plus.com/?type=sc&ts=1415623352&from=smt&uid=ST1000DM003-1CH162_Z1D8NH1PXXXXZ1D8NH1P ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2016-08-27 12:31 - 2016-08-27 12:29 - 00980040 ____N () C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe 2016-01-22 14:53 - 2012-10-19 12:01 - 00581120 _____ () C:\WINDOWS\system32\atwtusb.exe 2014-11-17 20:32 - 2012-12-21 11:42 - 00390672 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe 2016-06-24 12:51 - 2016-06-24 12:51 - 00138752 _____ () C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe 2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2016-07-13 10:13 - 2016-07-01 06:48 - 02656408 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2016-07-13 10:13 - 2016-07-01 06:48 - 02656408 _____ () C:\WINDOWS\System32\CoreUIComponents.dll 2016-08-26 11:09 - 2016-08-26 11:09 - 01864384 _____ () C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll 2014-05-01 16:13 - 2014-05-01 16:13 - 00470016 _____ () C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll 2016-04-22 15:15 - 2016-04-22 15:15 - 00052912 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll 2015-12-21 16:23 - 2015-12-07 06:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll 2016-07-13 10:15 - 2016-07-01 05:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2016-07-13 10:13 - 2016-07-01 05:27 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2016-07-13 10:13 - 2016-07-01 05:21 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2016-07-13 10:13 - 2016-07-01 05:22 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2016-07-13 10:13 - 2016-07-01 05:24 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2016-01-22 14:53 - 2012-09-10 14:54 - 03593728 _____ () C:\Windows\System32\AtwtusbIcon.exe 2015-06-25 17:34 - 2015-06-25 17:34 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll 2015-06-25 17:37 - 2015-06-25 17:37 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll 2015-06-25 17:35 - 2015-06-25 17:35 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll 2015-06-25 17:38 - 2015-06-25 17:38 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll 2015-06-25 16:53 - 2015-06-25 16:53 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll 2015-06-25 16:51 - 2015-06-25 16:51 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll 2016-08-27 12:32 - 2016-08-27 12:29 - 02178120 _____ () C:\Program Files (x86)\AVG Web TuneUp\vprot.exe 2015-11-19 13:56 - 2015-11-17 15:34 - 00253800 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\collector.dll 2015-11-19 13:56 - 2015-11-17 15:34 - 00110952 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll 2015-11-19 13:56 - 2015-11-17 15:34 - 00295272 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\stat.dll 2015-11-19 13:56 - 2015-11-17 15:34 - 00020328 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll 2015-11-19 13:56 - 2015-11-17 15:34 - 00104296 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll 2015-11-19 13:56 - 2015-11-17 15:34 - 00044392 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll 2016-08-26 11:09 - 2016-08-26 11:09 - 01383616 _____ () C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\ClientTelemetry.dll 2014-05-01 16:15 - 2014-05-01 16:15 - 00463360 _____ () C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX32.dll 2016-08-09 08:20 - 2016-08-03 02:24 - 01771336 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libglesv2.dll 2016-08-09 08:20 - 2016-08-03 02:23 - 00094024 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libegl.dll 2016-03-11 18:37 - 2016-04-08 18:54 - 40500224 _____ () C:\Program Files (x86)\AVG\UiDll\2171\libcef.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-1262878346-956153297-733536101-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Michiyo\Desktop\01082016\231041.jpg DNS Servers: 192.168.2.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) MSCONFIG\Services: MozillaMaintenance => 3 MSCONFIG\Services: RichVideo64 => 2 MSCONFIG\Services: SProtection => 2 MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^IML.lnk => C:\Windows\pss\IML.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^IML64.lnk => C:\Windows\pss\IML64.lnk.CommonStartup MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin MSCONFIG\startupreg: CLMLServer_For_P2G8 => "C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe" MSCONFIG\startupreg: CLVirtualDrive => "C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe MSCONFIG\startupreg: hpqSRMon => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe MSCONFIG\startupreg: Power2GoExpress8 => "C:\Program Files (x86)\CyberLink\Power2Go8\Power2GoExpress8.exe" MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe MSCONFIG\startupreg: Ulead AutoDetector v2 => C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe HKLM\...\StartupApproved\Run32: => "Live! Central" HKLM\...\StartupApproved\Run32: => "FileZilla Server Interface" HKLM\...\StartupApproved\Run32: => "BlueStacks Agent" HKLM\...\StartupApproved\Run32: => "HP Software Update" HKLM\...\StartupApproved\Run32: => "Raptr" HKLM\...\StartupApproved\Run32: => "AvgUi" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "AnyDVD" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "DAEMON Tools Lite" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "icq" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_9777924208C03F797011CE1DAB92CB56" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "Personal ID" ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808 FirewallRules: [{D0FBAFBD-0C72-4261-A5E0-B5ECB2EB6EC8}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe FirewallRules: [{E7CBC7D0-F0F2-4876-8985-C348676E853C}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe FirewallRules: [{6004C78D-ABFB-4116-B0D6-A1A574D92520}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe FirewallRules: [{02E44320-95BD-4B1B-997F-B80AD473D6E0}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe FirewallRules: [{9F2C7241-816D-4F77-B075-DCFBF6159026}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{B3D42658-1286-4DCA-A59C-9B3CDF05CA90}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{8436D99B-5C5D-4FC2-8839-DAA7AE3DB3FC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{E646E7D0-5D5B-4EEC-BB7E-AEFDB51777F8}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{3D453ED9-496F-400A-86B0-EB0553854E09}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{8FFD106B-08E5-47DB-8900-B6298CCDD4C5}] => (Allow) LPort=2869 FirewallRules: [{C4405D1C-BC91-4C20-83AE-3D41523A4ADE}] => (Allow) LPort=1900 FirewallRules: [{6338CFAF-E4B1-497E-95E9-81813A677419}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe FirewallRules: [{4C09832E-4F03-4D28-8DFE-C87B1FCC8C4C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{C5913D20-818C-4863-AF82-EB6D927CFAEC}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe FirewallRules: [{4DA5816D-9F79-419B-882A-AE878A51BCB8}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe FirewallRules: [{18346353-AB38-47B0-A2AE-8EA98C08E9D1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe FirewallRules: [{19D7A7E7-FFB2-44C6-B467-70B7447D79B1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe FirewallRules: [{4F0C38F4-E147-4B2E-A41F-13ACFD66846C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe FirewallRules: [{0D273B1E-0510-4D4C-846F-6897007891B7}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe FirewallRules: [{9EA3948C-015A-41DE-8A52-7E745A26D93F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqnrs08.exe FirewallRules: [{66BFDCC1-C966-409A-9275-EC456450877D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe FirewallRules: [{F8102547-AAE8-4047-B31C-2526E4DCE2AD}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe FirewallRules: [{7CEB103D-4F3E-4FB5-B937-529B17142D07}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe FirewallRules: [{E006F2C7-201B-45B2-864A-4D0BB6B2565B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe FirewallRules: [{2BB1C4E2-C3A5-43A4-8314-B9A78AE17FF6}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe FirewallRules: [{C6459F07-FF33-4D00-ABB9-3DE2D77EDE84}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe FirewallRules: [TCP Query User{4C3FED9B-A0AC-495A-88FF-2EF1C65D662A}C:\users\michiyo\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\michiyo\appdata\roaming\utorrent\utorrent.exe FirewallRules: [UDP Query User{EA8A8D48-F52E-4B0F-928A-8569189F3E63}C:\users\michiyo\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\michiyo\appdata\roaming\utorrent\utorrent.exe FirewallRules: [TCP Query User{18FC0646-1B06-4EEB-AA7F-17C9AEEB1EAF}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe FirewallRules: [UDP Query User{3AD55A9F-304A-42C1-BC01-DD5D7B57B3C9}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe FirewallRules: [{26D33A50-2DD0-4ACC-AD51-2FEDA1348156}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{6EBD68AE-6A13-4F28-A6A6-EC1C61123163}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{B464FBBC-8487-499E-B0F6-883EAF4BE6ED}C:\program files (x86)\leawo\blu-ray player\leawo blu-ray player.exe] => (Block) C:\program files (x86)\leawo\blu-ray player\leawo blu-ray player.exe FirewallRules: [UDP Query User{E5F2ACE9-652E-4E32-ABB6-0A30EF8ED3D8}C:\program files (x86)\leawo\blu-ray player\leawo blu-ray player.exe] => (Block) C:\program files (x86)\leawo\blu-ray player\leawo blu-ray player.exe FirewallRules: [{04D296A4-0F50-471C-853F-AC0936BBA54B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{470C85BD-8FD9-4B98-B572-F643C9D04ADB}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe FirewallRules: [{200ED56F-AD5A-4313-9EAF-59976246ABDE}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe FirewallRules: [{734CBD21-7773-43C9-9DEE-E9E506E6E10B}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe FirewallRules: [{3F4F6F8D-A1B3-430A-BCD4-85F0825107D6}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe FirewallRules: [{74B5BF7E-FB48-4F62-80C2-EBE4C931B8C7}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe FirewallRules: [{FC923AFA-D2A7-494A-B507-47EB9E3DAA60}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe FirewallRules: [{FD9A1542-6144-4842-A440-53C9A38EA97A}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe FirewallRules: [{69204468-35D6-4012-9E88-EC1738F49588}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe ==================== Wiederherstellungspunkte ========================= 28-08-2016 15:39:55 Geplanter Prüfpunkt ==================== Fehlerhafte Geräte im Gerätemanager ============= ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (08/29/2016 10:20:45 AM) (Source: ESENT) (EventID: 454) (User: ) Description: SearchIndexer (788) Windows: Unerwarteter Fehler "-551" bei der Datenbankwiederherstellung. Error: (08/29/2016 10:20:45 AM) (Source: ESENT) (EventID: 517) (User: ) Description: SearchIndexer (788) Windows: Der Vorgang zur Datenbankwiederherstellung wird mit Fehler -551 beendet, da Verweise auf Datenbank "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" festgestellt wurden, die nicht den aktuellen Protokollen entsprechen. Das Datenbankmodul lässt den Abschluss des Wiederherstellungsvorgangs für diese Instanz erst dann zu, wenn die Datenbank mit der fehlenden Übereinstimmung wieder verfügbar gemacht wird. Wenn die Datenbank tatsächlich nicht mehr verfügbar und auch nicht mehr erforderlich ist, finden Sie Informationen zu den Wiederherstellungsverfahren in der Microsoft Knowledge Base oder unter dem Link "Weitere Informationen" am Ende dieser Meldung. Error: (08/29/2016 10:20:15 AM) (Source: ESENT) (EventID: 454) (User: ) Description: SearchIndexer (1392) Windows: Unerwarteter Fehler "-551" bei der Datenbankwiederherstellung. Error: (08/29/2016 10:20:15 AM) (Source: ESENT) (EventID: 517) (User: ) Description: SearchIndexer (1392) Windows: Der Vorgang zur Datenbankwiederherstellung wird mit Fehler -551 beendet, da Verweise auf Datenbank "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" festgestellt wurden, die nicht den aktuellen Protokollen entsprechen. Das Datenbankmodul lässt den Abschluss des Wiederherstellungsvorgangs für diese Instanz erst dann zu, wenn die Datenbank mit der fehlenden Übereinstimmung wieder verfügbar gemacht wird. Wenn die Datenbank tatsächlich nicht mehr verfügbar und auch nicht mehr erforderlich ist, finden Sie Informationen zu den Wiederherstellungsverfahren in der Microsoft Knowledge Base oder unter dem Link "Weitere Informationen" am Ende dieser Meldung. Error: (08/29/2016 10:19:45 AM) (Source: ESENT) (EventID: 454) (User: ) Description: SearchIndexer (7028) Windows: Unerwarteter Fehler "-551" bei der Datenbankwiederherstellung. Error: (08/29/2016 10:19:45 AM) (Source: ESENT) (EventID: 517) (User: ) Description: SearchIndexer (7028) Windows: Der Vorgang zur Datenbankwiederherstellung wird mit Fehler -551 beendet, da Verweise auf Datenbank "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" festgestellt wurden, die nicht den aktuellen Protokollen entsprechen. Das Datenbankmodul lässt den Abschluss des Wiederherstellungsvorgangs für diese Instanz erst dann zu, wenn die Datenbank mit der fehlenden Übereinstimmung wieder verfügbar gemacht wird. Wenn die Datenbank tatsächlich nicht mehr verfügbar und auch nicht mehr erforderlich ist, finden Sie Informationen zu den Wiederherstellungsverfahren in der Microsoft Knowledge Base oder unter dem Link "Weitere Informationen" am Ende dieser Meldung. Error: (08/29/2016 10:19:15 AM) (Source: ESENT) (EventID: 454) (User: ) Description: SearchIndexer (7160) Windows: Unerwarteter Fehler "-551" bei der Datenbankwiederherstellung. Error: (08/29/2016 10:19:15 AM) (Source: ESENT) (EventID: 517) (User: ) Description: SearchIndexer (7160) Windows: Der Vorgang zur Datenbankwiederherstellung wird mit Fehler -551 beendet, da Verweise auf Datenbank "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" festgestellt wurden, die nicht den aktuellen Protokollen entsprechen. Das Datenbankmodul lässt den Abschluss des Wiederherstellungsvorgangs für diese Instanz erst dann zu, wenn die Datenbank mit der fehlenden Übereinstimmung wieder verfügbar gemacht wird. Wenn die Datenbank tatsächlich nicht mehr verfügbar und auch nicht mehr erforderlich ist, finden Sie Informationen zu den Wiederherstellungsverfahren in der Microsoft Knowledge Base oder unter dem Link "Weitere Informationen" am Ende dieser Meldung. Error: (08/29/2016 10:18:45 AM) (Source: Windows Search Service) (EventID: 7010) (User: ) Description: Der Index kann nicht initialisiert werden. Details: Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06) Error: (08/29/2016 10:18:45 AM) (Source: Windows Search Service) (EventID: 3058) (User: ) Description: Die Anwendung kann nicht initialisiert werden. Kontext: Windows Anwendung Details: Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06) Systemfehler: ============= Error: (08/29/2016 10:20:45 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1286 Mal passiert. Error: (08/29/2016 10:20:45 AM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Windows Search" wurde mit dem folgenden dienstspezifischen Fehler beendet: %%2147749126 Error: (08/29/2016 10:20:15 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1285 Mal passiert. Error: (08/29/2016 10:20:15 AM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Windows Search" wurde mit dem folgenden dienstspezifischen Fehler beendet: %%2147749126 Error: (08/29/2016 10:20:00 AM) (Source: DCOM) (EventID: 10005) (User: Michiyo-PC) Description: Fehler "1053" in DCOM, als der Dienst "WSearch" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden: {B52D54BB-4818-4EB9-AA80-F9EACD371DF8} Error: (08/29/2016 10:20:00 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung. Error: (08/29/2016 10:20:00 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht. Error: (08/29/2016 10:19:55 AM) (Source: DCOM) (EventID: 10005) (User: Michiyo-PC) Description: Fehler "1053" in DCOM, als der Dienst "WSearch" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden: {B52D54BB-4818-4EB9-AA80-F9EACD371DF8} Error: (08/29/2016 10:19:55 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung. Error: (08/29/2016 10:19:55 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht. CodeIntegrity: =================================== Date: 2016-08-27 12:54:29.036 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-08-27 10:53:11.017 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-27 10:53:10.998 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-27 10:53:10.976 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-27 10:53:10.939 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-27 10:53:10.920 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-27 10:53:10.882 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-27 10:53:10.828 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-27 10:53:10.808 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-27 10:53:10.785 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Speicherinformationen =========================== Prozessor: AMD FX(tm)-6300 Six-Core Processor Prozentuale Nutzung des RAM: 39% Installierter physikalischer RAM: 8189.53 MB Verfügbarer physikalischer RAM: 4972.27 MB Summe virtueller Speicher: 16381.53 MB Verfügbarer virtueller Speicher: 12936.19 MB ==================== Laufwerke ================================ Drive c: (Windows) (Fixed) (Total:918.97 GB) (Free:294.16 GB) NTFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 0049F0A3) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=919 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=450 MB) - (Type=27) Partition 4: (Not Active) - (Size=11 GB) - (Type=27) ==================== Ende von Addition.txt ============================ |
29.08.2016, 15:12 | #5 |
/// Malwareteam | Win10 Update oder Virus ??? Explorer langsam + weiße Icons Hi, Schritt # 1: AdwCleaner Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schritt # 2: FRST Bitte noch ein frisches FRST-Log. Schritt # 3: Bitte Posten
|
29.08.2016, 16:28 | #6 |
| Win10 Update oder Virus ??? Explorer langsam + weiße Icons ADW Cleaner Code:
ATTFilter # AdwCleaner v6.010 - Bericht erstellt am 29/08/2016 um 17:16:27 # Aktualisiert am 12/08/2016 von ToolsLib # Datenbank : 2016-08-28.2 [Server] # Betriebssystem : Windows 10 Home (X64) # Benutzername : Michiyo - MICHIYO-PC # Gestartet von : C:\Users\Michiyo\Desktop\AdwCleaner_6.010.exe # Modus: Löschen # Unterstützung : https://toolslib.net/forum ***** [ Dienste ] ***** [-] Dienst gelöscht: vToolbarUpdater40.3.4 [-] Dienst gelöscht: GlobalUpdater [-] Dienst gelöscht: SProtection [-] Dienst gelöscht: WtuSystemSupport ***** [ Ordner ] ***** [-] Ordner gelöscht: C:\Users\Michiyo\AppData\Local\avg web tuneup [-] Ordner gelöscht: C:\Users\Michiyo\AppData\Roaming\OpenCandy [-] Ordner gelöscht: C:\Users\Michiyo\AppData\Roaming\Yahoo!\Companion [-] Ordner gelöscht: C:\Program Files\avg web tuneup [-] Ordner gelöscht: C:\Program Files\Common Files\AVG Secure Search [-] Ordner gelöscht: C:\WINDOWS\SysNative\Tasks\TweakBit [#] Ordner mit Neustart gelöscht: C:\WINDOWS\SysNative\Tasks\TweakBit [-] Ordner gelöscht: C:\ProgramData\apn [-] Ordner gelöscht: C:\ProgramData\TweakBit [-] Ordner gelöscht: C:\ProgramData\avg web tuneup [-] Ordner gelöscht: C:\Program Files (x86)\Iminent [-] Ordner gelöscht: C:\Program Files (x86)\avg web tuneup [-] Ordner gelöscht: C:\Program Files (x86)\Common Files\AVG Secure Search [-] Ordner gelöscht: C:\Program Files (x86)\Common Files\IMGUpdater [-] Ordner gelöscht: C:\Program Files (x86)\Common Files\Umbrella [-] Ordner gelöscht: C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn ***** [ Dateien ] ***** [-] Datei gelöscht: C:\WINDOWS\SysNative\roboot64.exe [-] Datei gelöscht: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\extensions\{b64d9b05-48e1-4ceb-bf58-e0643994e900}.xpi [-] Datei gelöscht: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\extensions\Avg@toolbar.xpi [-] Datei gelöscht: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\searchplugins\avg-secure-search.xml [-] Datei gelöscht: C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\StartWeb.xml [-] Datei gelöscht: C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml [-] Datei gelöscht: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\searchplugins\yahoo! powered.xml [#] Datei gelöscht: C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\StartWeb.xml [#] Datei gelöscht: C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml [#] Datei gelöscht: C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\StartWeb.xml [#] Datei gelöscht: C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml [-] Datei gelöscht: C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ehhlaekjfiiojlddgndcnefflngfmhen_0.localstorage [-] Datei gelöscht: C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage [-] Datei gelöscht: C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_chfdnecihphmhljaaejmgoiahnihplgn_0.localstorage [-] Datei gelöscht: C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_chfdnecihphmhljaaejmgoiahnihplgn_0.localstorage-journal [-] Datei gelöscht: C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jdkokpcldhneihjdhigfjmoeojkdcbmg_0.localstorage ***** [ DLL ] ***** ***** [ WMI ] ***** ***** [ Verknüpfungen ] ***** ***** [ Aufgabenplanung ] ***** ***** [ Registrierungsdatenbank ] ***** [-] Schlüssel gelöscht: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\IePluginServices [-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\SProtection [-] Schlüssel gelöscht: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\WindowsMangerProtect [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd.1 [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi.1 [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1 [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj.1 [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar.1 [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\YMERemote.YMECompPlugin [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\YMERemote.YMECompPlugin.1 [-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} [-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6} [-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} [-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8} [-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6} [-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\Interface\{8233093C-178B-484B-979E-3C6B5B147DBC} [-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} [-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A} [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\AppID\{7D831388-D405-4272-9511-A07440AD2927} [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3} [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6} [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A} [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{CA3A5461-96B5-46DD-9341-5350D3C94615} [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{F51C15D4-3D0A-4DBA-A095-EBCC09F24DA2} [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8} [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6} [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{8233093C-178B-484B-979E-3C6B5B147DBC} [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94} [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\TypeLib\{4BC8AD89-AC5F-4DBD-A38F-C355C7DD33D7} [-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} [-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} [-] Schlüssel gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} [-] Schlüssel gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233} [-] Schlüssel gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} [-] Schlüssel gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233} [-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670} [-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88} [-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A} [-] Wert gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}] [-] Wert gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{58124A0B-DC32-4180-9BFF-E0E21AE34026}] [-] Wert gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{977AE9CC-AF83-45E8-9E03-E2798216E2D5}] [-] Wert gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}] [-] Wert gelöscht: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{84FF7BD6-B47F-46F8-9130-01B2696B36CB}] [-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Iminent [-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\OCS [-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\PRODUCTSETUP [-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Softonic [-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\SupHpUISoft [-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Yahoo\Companion [-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Yahoo\YFriendsBar [-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\csastats [-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\AppDataLow\Software\Yahoo\Companion [#] Schlüssel mit Neustart gelöscht: HKCU\Software\Iminent [#] Schlüssel mit Neustart gelöscht: HKCU\Software\OCS [#] Schlüssel mit Neustart gelöscht: HKCU\Software\PRODUCTSETUP [#] Schlüssel mit Neustart gelöscht: HKCU\Software\Softonic [#] Schlüssel mit Neustart gelöscht: HKCU\Software\SupHpUISoft [#] Schlüssel mit Neustart gelöscht: HKCU\Software\Yahoo\Companion [#] Schlüssel mit Neustart gelöscht: HKCU\Software\Yahoo\YFriendsBar [#] Schlüssel mit Neustart gelöscht: HKCU\Software\csastats [-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Iminent [#] Schlüssel mit Neustart gelöscht: HKCU\Software\AppDataLow\Software\Yahoo\Companion [-] Schlüssel gelöscht: HKLM\SOFTWARE\IMGUPDATER [-] Schlüssel gelöscht: HKLM\SOFTWARE\Iminent [-] Schlüssel gelöscht: HKLM\SOFTWARE\omiga-plusSoftware [-] Schlüssel gelöscht: HKLM\SOFTWARE\SupDp [-] Schlüssel gelöscht: HKLM\SOFTWARE\SupTab [-] Schlüssel gelöscht: HKLM\SOFTWARE\supWindowsMangerProtect [-] Schlüssel gelöscht: HKLM\SOFTWARE\Umbrella [-] Schlüssel gelöscht: HKLM\SOFTWARE\Yahoo\Companion [-] Schlüssel gelöscht: HKLM\SOFTWARE\AVG Tuneup [#] Schlüssel mit Neustart gelöscht: HKLM\SOFTWARE\SUPDP [#] Schlüssel mit Neustart gelöscht: HKLM\SOFTWARE\SUPTAB [-] Schlüssel gelöscht: HKLM\SOFTWARE\TWEAKBIT [-] Daten wiederhergestellt: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] [-] Daten wiederhergestellt: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] [-] Daten wiederhergestellt: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] [-] Daten wiederhergestellt: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] [-] Daten wiederhergestellt: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main [Start Page] [-] Daten wiederhergestellt: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] [-] Daten wiederhergestellt: HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] [-] Daten wiederhergestellt: HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] [-] Daten wiederhergestellt: HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] [-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2f23ab71-4ac6-41f2-a955-ea576e553146} [-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9} [-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} [-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB} [-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} [-] Daten wiederhergestellt: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] [-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\SearchScopes\{A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9} [-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} [#] Schlüssel mit Neustart gelöscht: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} [#] Schlüssel mit Neustart gelöscht: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB} [#] Schlüssel mit Neustart gelöscht: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} [-] Daten wiederhergestellt: HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] [#] Schlüssel mit Neustart gelöscht: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9} [#] Schlüssel mit Neustart gelöscht: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} [-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} [-] Daten wiederhergestellt: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope] [-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} [-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com [-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com [-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\watch4.de [-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.watch4.de [-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\isearch.omiga-plus.com [-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\omiga-plus.com [-] Wert gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 [vProt] [-] Wert gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt] [-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\AppID\YMERemote.DLL [-] Schlüssel gelöscht: HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\avgsh [-] Schlüssel gelöscht: HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin [-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\datamngrCoordinator.exe [-] Schlüssel gelöscht: HKCU\Software\Google\Chrome\Extensions\chfdnecihphmhljaaejmgoiahnihplgn [-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\pilplloabdedfmialnfchjomjmpjcoej [-] Schlüssel gelöscht: HKCU\Software\Google\Chrome\Extensions\pilplloabdedfmialnfchjomjmpjcoej [-] Schlüssel gelöscht: HKLM\SOFTWARE\Google\Chrome\Extensions\pilplloabdedfmialnfchjomjmpjcoej ***** [ Browser ] ***** [-] Firefox Einstellungen bereinigt: "browser.search.defaultenginename" - "Yahoo! Powered" [-] Firefox Einstellungen bereinigt: "browser.search.selectedEngine" - "Yahoo! Powered" [-] Firefox Einstellungen bereinigt: "browser.startup.homepage" - "hxxps://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_lvrms_16_27¶m1=1¶m2=f%3D1%26b%3DFirefox%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StDtAzztA0DyEzztBtGyB0D0B0CtGzyyE0BtBtGtC0EyD0CtGyCtD0BtAyD0ByEyCyBtCzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtA0CzztB0ByE0FtGyCyDyCyBtGyEtBtB0FtGzz0C0A0AtGtCyB0ByC0F0C0B0E0EtCyBzz2QtN0A0LzuyE%26cr%3D1771641347%26a%3Dwncy_lvrms_16_27%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome" [-] [omiga-plus] [Search Provider] Gelöscht: omiga-plus [-] [mystartsearch] [Search Provider] Gelöscht: mystartsearch [-] [de.search.yahoo.com] [Search Provider] Gelöscht: de.search.yahoo.com [-] [C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default] [startup_urls] Gelöscht: hxxp://start.mysearchdial.com/?f=1&a=dsites_14_12_ch&cd=2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyBtCzy0A0EyD0ByEtG0DzztA0EtG0Azz0EtAtGyD0F0EzztGyC0FyBtCtD0BtAtB0DtCtByC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAyC0E0DyDtC0F0DtG0EtC0BtBtGyE0EyC0DtGzztD0AyEtGtAtA0E0F0BzyyC0BzyyDyDyE2Q&cr=1732920521&ir= [-] [C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default] [startup_urls] Gelöscht: hxxp://www.mystartsearch.com/?type=hp&ts=1429528029&from=cor&uid=HGSTXHTS545050A7E680_TM8514TFHB0T4RHB0T4RX [-] [C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default] [startup_urls] Gelöscht: hxxp://www.yessearches.com/?mode=nnnb&ptid=dam&uid=53A9CC2763490B4B37942D2A338B992E&v=20160108&ts=AHEpAXYoAH8nAE.. [-] [C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default] [extension] Gelöscht: chfdnecihphmhljaaejmgoiahnihplgn [-] [C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default] [extension] Gelöscht: pilplloabdedfmialnfchjomjmpjcoej [-] [C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default] [homepage] Gelöscht: hxxp://search.conduit.com/?ctid=CT3324066&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SPA51CF372-557D-48F6-A8C8-1B1291C8F399&SSPV= ************************* :: "Tracing" Schlüssel gelöscht :: Winsock Einstellungen zurückgesetzt :: Proxy Einstellungen zurückgesetzt :: Internet Explorer Richtlinien gelöscht :: Chrome Richtlinien gelöscht ************************* C:\AdwCleaner\AdwCleaner[C0].txt - [18992 Bytes] - [29/08/2016 17:16:27] C:\AdwCleaner\AdwCleaner[R0].txt - [41053 Bytes] - [13/03/2014 12:37:27] C:\AdwCleaner\AdwCleaner[R1].txt - [4594 Bytes] - [22/03/2014 20:48:19] C:\AdwCleaner\AdwCleaner[S0].txt - [35124 Bytes] - [13/03/2014 12:39:56] C:\AdwCleaner\AdwCleaner[S1].txt - [3267 Bytes] - [22/03/2014 20:51:46] C:\AdwCleaner\AdwCleaner[S2].txt - [19122 Bytes] - [29/08/2016 17:12:19] ########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [19434 Bytes] ########## Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 28-08-2016 durchgeführt von Michiyo (Administrator) auf MICHIYO-PC (29-08-2016 17:25:51) Gestartet von C:\Users\Michiyo\Desktop Geladene Profile: Michiyo (Verfügbare Profile: Michiyo & DefaultAppPool) Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) () C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe (Microsoft Corporation) C:\Windows\System32\mqsvc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe (© pdfforge GmbH.) C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe () C:\Program Files\CyberLink\Shared files\RichVideo64.exe (pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe () C:\Windows\System32\atwtusb.exe (AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.4\ToolbarUpdater.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe () C:\Windows\System32\atwtusb.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe () C:\ProgramData\Avg_Update_0516piz\AVG-Secure-Search-Update_0516piz.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe () C:\ProgramData\Avg_Update_0516piz\AVG-Secure-Search-Update_0516piz.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () C:\Windows\System32\AtwtusbIcon.exe (Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\CNext\CCCSlim\MOM.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\CNext\CCCSlim\CCC.exe () C:\Program Files (x86)\AVG Web TuneUp\vprot.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe (Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe () C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe (HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10586.486_none_7640e086266ea227\TiWorker.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor) HKLM\...\Run: [AtwtusbIcon] => C:\WINDOWS\system32\AtwtusbIcon.exe [3593728 2012-09-10] () HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [6613896 2016-06-24] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Live! Central] => C:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central\CTLVCentral.exe [438381 2009-06-05] (Creative Technology Ltd.) HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [917112 2015-10-08] (BlueStack Systems, Inc.) HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [56080 2015-12-12] (Raptr, Inc) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [204560 2016-08-18] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [SunJavaUpdateSched] => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [6709008 2016-07-28] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2178120 2016-08-29] () HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\Run: [AnyDVD] => C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe [4886136 2011-03-07] (SlySoft, Inc.) HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd) HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64" ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\buShell.dll Keine Datei ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\buShell.dll Keine Datei ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\buShell.dll Keine Datei ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] () ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] () ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] () ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] () ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] () ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2016-01-06] ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) Startup: C:\Users\Michiyo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IML.lnk [2014-12-13] ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{86916325-c1ab-4869-a177-2fbf32564dab}: [DhcpNameServer] 192.168.2.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130859355493535952&GUID=9EC4EDB1-5F00-4682-8EB6-D81E4A9B890C HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com/?cid={761D6F70-819C-43ED-AF67-A4EE55D0A33D}&mid=d34487a0d9ba47ccb850a59d73d1869f-04f99b185149844fb42273afbf5d96e39a056fc0&lang=de&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-08-27 10:34:14&v=4.3.4.122&pid=wtu&sg=&sap=hp HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.hyrican.de HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.hyrican.de HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?pc=UE01&ocid=UE01DHP SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKLM -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox SearchScopes: HKLM-x32 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM-x32 -> {F66BFC25-B41D-4A17-A66C-2D338F452675} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox SearchScopes: HKU\.DEFAULT -> {e4a1ece8-ed94-4f93-80ea-75f978ceaf24} URL = SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {6ECB41EC-A7AC-4224-8D1E-44C44B4639E2} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8 SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {AEEDE363-46A7-4B7A-9092-EEDB31E079DE} URL = hxxps://www.google.com/search?q={searchTerms} SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {C2EE27DF-5090-4D18-8930-B7403474FB06} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8 SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {C8ABDA6A-F499-4674-8C39-FDE573ABBEDE} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8 SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {D16EFC19-2554-4D94-B6A1-7B098BFCBD25} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8 SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {e4a1ece8-ed94-4f93-80ea-75f978ceaf24} URL = BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\coIEPlg.dll => Keine Datei BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_102\bin\ssv.dll [2016-08-27] (Oracle Corporation) BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.3.4.122\AVG Web TuneUp.dll [2016-08-29] (AVG) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_102\bin\jp2ssv.dll [2016-08-27] (Oracle Corporation) BHO-x32: PDF Architect 4 Helper -> {38279E1A-7019-40C1-B579-E99DFB3312E8} -> C:\Program Files (x86)\PDF Architect 4\creator-ie-helper.dll [2016-01-15] (pdfforge GmbH) BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\coIEPlg.dll => Keine Datei BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> Keine Datei BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\ssv.dll [2016-08-27] (Oracle Corporation) BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.3.4.122\AVG Web TuneUp.dll [2016-08-29] (AVG) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\jp2ssv.dll [2016-08-27] (Oracle Corporation) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\coIEPlg.dll Keine Datei Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\coIEPlg.dll Keine Datei Toolbar: HKLM-x32 - PDF Architect 4 Toolbar - {23FD9C33-A9E1-48A1-8404-E5925CF1C8E1} - C:\Program Files (x86)\PDF Architect 4\creator-ie-plugin.dll [2016-01-15] (pdfforge GmbH) IE Session Restore: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> ist aktiviert. Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - Keine Datei Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - Keine Datei Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation) StartMenuInternet: IEXPLORE.EXE - iexplore.exe Edge: ====== Edge HomeButtonPage: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> hxxp://go.web.de/tb/ie_startpage FireFox: ======== FF ProfilePath: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default FF SelectedSearchEngine: Yahoo! Powered FF Homepage: hxxps://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_lvrms_16_27¶m1=1¶m2=f%3D1%26b%3DFirefox%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StDtAzztA0DyEzztBtGyB0D0B0CtGzyyE0BtBtGtC0EyD0CtGyCtD0BtAyD0ByEyCyBtCzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtA0CzztB0ByE0FtGyCyDyCyBtGyEtBtB0FtGzz0C0A0AtGtCyB0ByC0F0C0B0E0EtCyBzz2QtN0A0LzuyE%26cr%3D1771641347%26a%3Dwncy_lvrms_16_27%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome FF Keyword.URL: user_pref("keyword.URL", true); FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-08-27] () FF Plugin: @java.com/DTPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\dtplugin\npDeployJava1.dll [2016-08-27] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\plugin2\npjp2.dll [2016-08-27] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-08-27] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw.dll [2016-02-19] (Adobe Systems, Inc.) FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.3.4\\npsitesafety.dll [Keine Datei] FF Plugin-x32: @java.com/DTPlugin,version=11.102.2 -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\dtplugin\npDeployJava1.dll [2016-08-27] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.102.2 -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\plugin2\npjp2.dll [2016-08-27] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-1262878346-956153297-733536101-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Michiyo\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-08] (Unity Technologies ApS) FF user.js: detected! => C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\user.js [2015-03-18] FF SearchPlugin: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\searchplugins\avg-secure-search.xml [2016-08-29] FF Extension: (AVG Web TuneUp) - C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\Extensions\avg@toolbar.xpi [2016-08-29] FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon FF Extension: (Norton Identity Safe) - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon [2016-08-12] FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension FF Extension: (PDF Architect 4 Creator) - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2016-03-06] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon StartMenuInternet: FIREFOX.EXE - firefox.exe Chrome: ======= CHR HomePage: Default -> mysearch.avg.com/?rvt=1 CHR Profile: C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Unblock embedded Youtube videos) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aajjpnimaghinaladfeongfnojpooegf [2016-03-11] CHR Extension: (Google Drive) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22] CHR Extension: (YouTube) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (AVG Secure Search) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn [2016-08-29] CHR Extension: (Google-Suche) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27] CHR Extension: (Google Docs Offline) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15] CHR Extension: (Proxmate) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifalmiidchkjjmkkbkoaibpmoeichmki [2016-08-25] CHR Extension: (Norton Identity Safe) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2015-03-18] CHR Extension: (Skype) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-08-12] CHR Extension: (Pink Lake) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkikaplkcnkehkocaeaddjiicklloajh [2016-03-12] CHR Extension: (TumTaster) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nanfbkacbckngfcklahdgfagjlghfbgm [2016-03-11] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-01] CHR Extension: (Google Mail) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29] CHR Extension: (Chrome Media Router) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-19] CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\Exts\Chrome.crx <nicht gefunden> CHR HKLM\...\Chrome\Extension: [edlomhpkphiongfmegcmaamkbadecnkd] - hxxps://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-1262878346-956153297-733536101-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\Exts\Chrome.crx <nicht gefunden> CHR HKLM-x32\...\Chrome\Extension: [edlomhpkphiongfmegcmaamkbadecnkd] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx Opera: ======= OPR Extension: (YouTube Unblocker) - C:\Users\Michiyo\AppData\Roaming\Opera Software\Opera Stable\Extensions\npnkeeiehehhefofiekoflfedgehcdhl [2016-05-10] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [138752 2016-06-24] () [Datei ist nicht signiert] S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [674552 2016-07-28] (AVG Technologies CZ, s.r.o.) R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5267456 2016-07-28] (AVG Technologies CZ, s.r.o.) R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1097488 2016-08-18] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [760024 2016-07-28] (AVG Technologies CZ, s.r.o.) S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [437880 2015-10-08] (BlueStack Systems, Inc.) S3 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [417400 2015-10-08] (BlueStack Systems, Inc.) S3 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [855672 2015-10-08] (BlueStack Systems, Inc.) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation) R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [382312 2015-11-17] (Digital Wave Ltd.) R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29760 2016-07-04] (HP Inc.) S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [Datei ist nicht signiert] S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert] R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert] S2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\22.7.1.32\NIS.exe [289080 2016-08-16] (Symantec Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119688 2016-03-29] (Electronic Arts) S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2417376 2016-01-15] (pdfforge GmbH) S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2016-01-15] (pdfforge GmbH) R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2016-01-15] (pdfforge GmbH) R2 PDF Architect 4 Manager; C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [959248 2015-10-05] (© pdfforge GmbH.) R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert] R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390672 2012-12-21] () S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert] R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5611280 2015-08-07] (TeamViewer GmbH) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [4878096 2016-08-19] (AVG Technologies CZ, s.r.o.) S3 vmicvss; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation) R2 vToolbarUpdater40.3.4; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.4\ToolbarUpdater.exe [1347144 2016-08-29] (AVG Secure Search) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-07-01] (Microsoft Corporation) R2 WTService; C:\WINDOWS\system32\atwtusb.exe [581120 2012-10-19] () [Datei ist nicht signiert] R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [980040 2016-08-29] () ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 amdacpksd; C:\WINDOWS\system32\drivers\amdacpksd.sys [305392 2016-01-22] (Advanced Micro Devices) S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [40720 2015-07-28] (Advanced Micro Devices, Inc.) S3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [125512 2010-12-01] (SlySoft, Inc.) S3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [125512 2010-12-01] (SlySoft, Inc.) R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices) R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-09-18] (Advanced Micro Devices) S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [21632 2016-01-07] (AVG Technologies CZ, s.r.o.) R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [163072 2016-05-13] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [314112 2016-06-30] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [261376 2016-06-01] (AVG Technologies CZ, s.r.o.) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [260352 2016-06-01] (AVG Technologies CZ, s.r.o.) R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.) R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [261888 2016-07-19] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [52992 2016-06-01] (AVG Technologies CZ, s.r.o.) R0 avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [77056 2016-06-20] (AVG Technologies CZ, s.r.o.) R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [313088 2016-07-20] (AVG Technologies CZ, s.r.o.) R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\BASHDefs\20150521.001\BHDrvx64.sys [1640152 2015-06-04] (Symantec Corporation) R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [146040 2015-10-08] (BlueStack Systems) R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1607010.020\ccSetx64.sys [174328 2016-06-02] (Symantec Corporation) R1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink) S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2015-08-07] (Windows (R) Win 7 DDK provider) S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2015-08-07] (Windows (R) Win 7 DDK provider) R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-11-10] (Disc Soft Ltd) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [498512 2015-06-16] (Symantec Corporation) S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [153936 2015-06-16] (Symantec Corporation) S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [637360 2011-12-19] (Intel Corporation) R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\IPSDefs\20150519.100\IDSVia64.sys [684248 2015-06-04] (Symantec Corporation) S3 INIDVD; C:\Windows\System32\drivers\inidvd.sys [19488 2012-11-02] (Initio Corporation) R3 moufiltr; C:\Windows\System32\drivers\moufiltr.sys [7680 2009-03-08] (Windows (R) Codename Longhorn DDK provider) S3 PciIsaSerial; C:\Windows\system32\drivers\PciIsaSerial.sys [68608 2008-12-19] (Windows (R) Codename Longhorn DDK provider) S3 PciPPorts; C:\Windows\system32\drivers\PciPPorts.sys [96768 2009-07-23] () S3 PciSPorts; C:\Windows\system32\drivers\PciSPorts.sys [122880 2008-12-19] () R3 RLDesignVirtualAudioCableWdm; C:\Windows\system32\DRIVERS\livecamv.sys [49664 2007-02-05] () S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1607010.020\SRTSP64.SYS [773360 2016-08-10] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1607010.020\SRTSPX64.SYS [48888 2016-06-02] (Symantec Corporation) R0 SymEFASI; C:\Windows\System32\drivers\NISx64\1607010.020\SYMEFASI64.SYS [1627352 2016-06-02] (Symantec Corporation) S4 SymELAM; C:\Windows\system32\drivers\NISx64\1607010.020\SymELAM.sys [24192 2015-07-11] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [101112 2016-08-11] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\NISx64\1607010.020\Ironx64.SYS [291056 2016-06-02] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1607010.020\SYMNETS.SYS [567536 2016-06-02] (Symantec Corporation) S3 TabletFilter; C:\Windows\System32\drivers\TabletFilter.sys [7680 2012-08-15] (Windows (R) Win 7 DDK provider) R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [32304 2016-02-15] (AVG Netherlands B.V.) R3 V0540Dev; C:\Windows\system32\DRIVERS\V0540Vid.sys [321376 2009-06-15] (Creative Technology Ltd.) R3 vhidmini; C:\Windows\System32\drivers\walvhid.sys [7552 2009-08-26] (Windows (R) Win 7 DDK provider) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) U3 idsvc; kein ImagePath S3 NAVENG; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\VirusDefs\20150714.024\ENG64.SYS [X] S3 NAVEX15; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\VirusDefs\20150714.024\EX64.SYS [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-08-29 17:25 - 2016-08-29 17:26 - 00035882 _____ C:\Users\Michiyo\Desktop\FRST.txt 2016-08-29 17:16 - 2016-08-29 17:16 - 00000000 ____D C:\Users\Michiyo\AppData\Local\AVG Web TuneUp 2016-08-29 17:16 - 2016-08-29 17:16 - 00000000 ____D C:\ProgramData\AVG Web TuneUp 2016-08-29 17:16 - 2016-08-29 17:16 - 00000000 ____D C:\Program Files\Common Files\AVG Secure Search 2016-08-29 17:16 - 2016-08-29 17:16 - 00000000 ____D C:\Program Files\AVG Web TuneUp 2016-08-29 17:16 - 2016-08-29 17:16 - 00000000 ____D C:\Program Files (x86)\AVG Web TuneUp 2016-08-29 17:15 - 2016-08-29 17:15 - 00003738 _____ C:\WINDOWS\System32\Tasks\AVG-SSU_0516piz_DELETE 2016-08-29 17:15 - 2016-08-29 17:15 - 00003180 _____ C:\WINDOWS\System32\Tasks\AVG-SSU_0516piz 2016-08-29 17:15 - 2016-08-29 17:15 - 00000000 ____D C:\ProgramData\Avg_Update_0516piz 2016-08-29 17:07 - 2016-08-29 17:08 - 03826240 _____ C:\Users\Michiyo\Desktop\AdwCleaner_6.010.exe 2016-08-29 10:38 - 2016-08-29 10:47 - 00000000 ____D C:\Users\Michiyo\Desktop\HIGH & LOW THE LIVE 2016-08-29 10:17 - 2016-08-29 17:25 - 00000000 ____D C:\FRST 2016-08-29 10:17 - 2016-08-29 10:17 - 02396672 _____ (Farbar) C:\Users\Michiyo\Desktop\FRST64.exe 2016-08-28 01:14 - 2016-08-28 17:28 - 2613934989 _____ C:\Users\Michiyo\Downloads\[SOFCJ-Raws] Dragon Ball Z Resurrection F – Future Trunks Special Edition Extended (SUT 1280x720 x264 10bit AAC).mp4 2016-08-27 12:49 - 2016-08-27 12:49 - 03143504 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Michiyo\Documents\AVG_Protection_Free_1606.exe 2016-08-27 11:18 - 2016-08-27 12:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2016-08-27 11:18 - 2016-08-27 11:18 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\AVG 2016-08-27 11:17 - 2016-08-27 11:17 - 00000000 ___HD C:\$AVG 2016-08-27 11:16 - 2016-08-29 17:19 - 00000000 ____D C:\ProgramData\MFAData 2016-08-27 11:16 - 2016-08-27 11:16 - 00000000 ____D C:\Users\Michiyo\AppData\Local\MFAData 2016-08-27 11:00 - 2016-08-29 16:54 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2016-08-27 11:00 - 2016-08-27 11:00 - 01198049 _____ C:\WINDOWS\unins000.exe 2016-08-27 11:00 - 2016-08-27 11:00 - 00010826 _____ C:\WINDOWS\unins000.dat 2016-08-27 11:00 - 2016-08-27 11:00 - 00003860 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2016-08-27 11:00 - 2016-08-27 11:00 - 00001409 _____ C:\AiOLog.txt 2016-08-27 11:00 - 2016-08-27 11:00 - 00000000 ____D C:\WINDOWS\SysWOW64\Adobe 2016-08-27 11:00 - 2016-01-28 18:44 - 01261568 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\libeay32.dll 2016-08-27 11:00 - 2016-01-28 18:44 - 00297472 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\ssleay32.dll 2016-08-27 11:00 - 2016-01-28 18:44 - 00297472 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\libssl32.dll 2016-08-27 11:00 - 2015-07-10 10:51 - 00456008 _____ (AutoIt Team) C:\WINDOWS\system32\autoitx3.dll 2016-08-27 11:00 - 2015-07-08 09:29 - 03477818 _____ (Red Hat) C:\WINDOWS\system32\cygwin1.dll 2016-08-27 11:00 - 2014-01-31 02:14 - 01055676 _____ (Free Software Foundation) C:\WINDOWS\system32\libiconv2.dll 2016-08-27 11:00 - 2014-01-25 13:30 - 00131072 _____ (Sereby Corporation) C:\WINDOWS\system32\AiORuntimes.dll 2016-08-27 11:00 - 2013-12-23 14:44 - 00163480 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 01070232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscomctl.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00660120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscomct2.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00617896 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00444328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshflxgd.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00416408 _____ (Microsoft Corporation ) C:\WINDOWS\system32\comct332.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00279192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdatgrd.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00259736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msflxgrd.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00253080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdatlst.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00222360 _____ (Microsoft Corporation) C:\WINDOWS\system32\tabctl32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00219288 _____ (Microsoft Corporation) C:\WINDOWS\system32\richtx32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00218776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dblist32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00212112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mci32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00179352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmask32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00170920 _____ (Microsoft Corporation) C:\WINDOWS\system32\comct232.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00131728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinet.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00130712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msstdfmt.dll 2016-08-27 11:00 - 2013-12-20 00:48 - 00127640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswinsck.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00119960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscomm32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00108696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msstkprp.dll 2016-08-27 11:00 - 2013-12-20 00:48 - 00104088 _____ (Microsoft Corporation) C:\WINDOWS\system32\picclp32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00084624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysinfo.ocx 2016-08-27 11:00 - 2012-06-14 14:36 - 00107520 _____ C:\WINDOWS\system32\zlib1.dll 2016-08-27 11:00 - 2012-04-03 16:11 - 00138752 _____ C:\WINDOWS\system32\libpng15.dll 2016-08-27 11:00 - 2011-10-12 03:09 - 04033440 _____ (Intel Corporation) C:\WINDOWS\system32\libmmd.dll 2016-08-27 11:00 - 2011-10-01 08:16 - 00445016 _____ (Creative Labs) C:\WINDOWS\system32\wrap_oal.dll 2016-08-27 11:00 - 2011-10-01 08:16 - 00109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\system32\openal32.dll 2016-08-27 11:00 - 2011-01-12 13:36 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71u.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71DEU.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ITA.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71FRA.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ESP.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ENU.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71KOR.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71JPN.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71CHT.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71CHS.dll 2016-08-27 11:00 - 2011-01-12 13:19 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71.dll 2016-08-27 11:00 - 2011-01-12 12:53 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl71.dll 2016-08-27 11:00 - 2010-06-27 17:44 - 00053248 _____ (Adobe Systems, Incorporated) C:\WINDOWS\system\plugin.dll 2016-08-27 11:00 - 2010-03-18 20:21 - 00799568 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdia100.dll 2016-08-27 11:00 - 2008-08-26 06:40 - 00162304 _____ C:\WINDOWS\system32\libpng13.dll 2016-08-27 11:00 - 2007-02-01 22:13 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp71.dll 2016-08-27 11:00 - 2007-02-01 19:11 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr71.dll 2016-08-27 11:00 - 2007-01-30 22:04 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr70.dll 2016-08-27 11:00 - 2006-08-26 00:28 - 01017344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70u.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ITA.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70FRA.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ESP.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70DEU.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ENU.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70KOR.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70JPN.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70CHT.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70CHS.dll 2016-08-27 11:00 - 2006-08-26 00:07 - 01024000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70.dll 2016-08-27 11:00 - 2006-08-25 23:17 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl70.dll 2016-08-27 11:00 - 2005-05-06 13:52 - 00103424 _____ (GNU <www.gnu.org>) C:\WINDOWS\system32\libintl3.dll 2016-08-27 11:00 - 2005-01-20 19:25 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvci70.dll 2016-08-27 11:00 - 2002-01-05 05:40 - 00487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp70.dll 2016-08-27 11:00 - 1996-01-12 03:00 - 00935632 _____ (Microsoft Corporation) C:\WINDOWS\system\vb40016.dll 2016-08-27 11:00 - 1996-01-12 03:00 - 00722192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vb40032.dll 2016-08-27 11:00 - 1994-11-17 13:00 - 00210944 _____ C:\WINDOWS\system\msvcrt10.dll 2016-08-27 11:00 - 1993-05-11 19:00 - 00398416 _____ (Microsoft Corporation) C:\WINDOWS\system\vbrun300.dll 2016-08-27 11:00 - 1992-10-21 00:00 - 00356992 _____ (Microsoft Corporation) C:\WINDOWS\system\vbrun200.dll 2016-08-27 11:00 - 1991-05-10 01:00 - 00271264 _____ C:\WINDOWS\system\vbrun100.dll 2016-08-27 10:57 - 2016-08-27 10:57 - 00110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll 2016-08-27 10:56 - 2016-08-27 10:56 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Sun 2016-08-27 10:56 - 2016-08-27 10:56 - 00000000 ____D C:\ProgramData\Oracle 2016-08-27 10:56 - 2016-08-27 10:56 - 00000000 ____D C:\Program Files\Java 2016-08-27 10:53 - 2016-08-27 11:01 - 00632904 _____ (O&O Software GmbH) C:\Users\Michiyo\Documents\OOSU10.exe 2016-08-27 10:49 - 2016-08-27 10:49 - 00203114 _____ C:\Users\Michiyo\Documents\OOSU10.zip 2016-08-27 10:48 - 2016-08-27 10:53 - 377130076 _____ (Sereby Corporation) C:\Users\Michiyo\Documents\aio-runtimes_v2.3.8.exe 2016-08-26 16:16 - 2016-08-26 16:16 - 00000000 ____D C:\$SysReset 2016-08-26 15:34 - 2016-08-26 15:34 - 00000017 _____ C:\Users\Michiyo\AppData\Local\resmon.resmoncfg 2016-08-26 13:18 - 2016-08-26 15:24 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job 2016-08-26 11:10 - 2016-08-26 11:10 - 00003340 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task 2016-08-26 10:29 - 2016-08-26 10:29 - 00003404 _____ C:\WINDOWS\System32\Tasks\Norton WSC Integration 2016-08-26 10:28 - 2016-08-26 10:28 - 00280764 _____ C:\WINDOWS\Minidump\082616-97187-01.dmp 2016-08-23 09:34 - 2012-01-01 17:18 - 00000000 ____D C:\Users\Michiyo\Desktop\[Yaoi Fangirl] Lent - Death Note Doujin 2016-08-22 17:22 - 2016-08-22 18:07 - 00327998 _____ C:\Users\Michiyo\Documents\Digimon Adventure - Leb deine Träume.pds 2016-08-20 00:00 - 2016-08-20 00:00 - 79449510 _____ C:\Users\Michiyo\Desktop\『HiGH&LOW THE MOVIE』Best Action Scenes Special Trailer.mp4 2016-08-13 10:23 - 2016-08-13 10:26 - 00000000 ____D C:\Users\Michiyo\Documents\Die Sims 4 2016-08-12 18:08 - 2016-08-12 18:11 - 42013312 _____ (Skype Technologies S.A.) C:\Users\Michiyo\Documents\SkypeSetupFull.exe 2016-08-12 16:58 - 2016-08-26 10:27 - 739168023 _____ C:\WINDOWS\MEMORY.DMP 2016-08-12 11:13 - 2016-08-13 19:24 - 00000000 ____D C:\Users\Michiyo\Desktop\Die Sims 4 2016-08-12 09:02 - 2016-08-12 09:05 - 00002503 _____ C:\Users\Michiyo\Documents\Norton Internet Security.lnk 2016-08-12 01:07 - 2016-08-12 01:07 - 08892696 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 08738920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 07115928 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00479368 _____ C:\WINDOWS\system32\amdmiracast.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00164280 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00159088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00154920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00138688 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00138176 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00123120 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00123104 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00105344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00105344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 48819200 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 38266368 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 32555512 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 27489280 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl12cl64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 26639360 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 21641216 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl12cl.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 15729152 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 14320128 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 08830456 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdvlk64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 08627704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmantle64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 07076352 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdvlk32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 06956032 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmantle32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 02376704 _____ C:\WINDOWS\system32\amdoclvp9lib64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 02286584 _____ C:\WINDOWS\SysWOW64\amdoclvp9lib32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 02147328 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 01837568 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00991232 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00991232 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00883192 _____ (AMD) C:\WINDOWS\system32\coinst_16.30.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00751616 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00627192 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00459776 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00402944 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe 2016-08-12 01:06 - 2016-08-12 01:06 - 00350208 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODE.exe 2016-08-12 01:06 - 2016-08-12 01:06 - 00292352 _____ C:\WINDOWS\system32\dgtrayicon.exe 2016-08-12 01:06 - 2016-08-12 01:06 - 00287744 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00275968 _____ C:\WINDOWS\system32\GameManager64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00270336 _____ C:\WINDOWS\system32\clinfo.exe 2016-08-12 01:06 - 2016-08-12 01:06 - 00268792 _____ C:\WINDOWS\system32\hsa-thunk64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00249336 _____ C:\WINDOWS\system32\amdgfxinfo64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00241152 _____ C:\WINDOWS\SysWOW64\GameManager32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00234496 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00231424 _____ C:\WINDOWS\system32\atieah64.exe 2016-08-12 01:06 - 2016-08-12 01:06 - 00222208 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00209408 _____ C:\WINDOWS\SysWOW64\atieah32.exe 2016-08-12 01:06 - 2016-08-12 01:06 - 00202744 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00201728 _____ C:\WINDOWS\system32\amdhdl64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00181760 _____ C:\WINDOWS\SysWOW64\amdhdl32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00176640 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00159736 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00137208 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00135168 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00130560 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00123896 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00118784 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00113664 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00111616 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00109568 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00108544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00108544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00104448 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00083960 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00079864 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00073216 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00069632 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00068608 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODCLI.exe 2016-08-12 01:06 - 2016-08-12 01:06 - 00068096 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00067584 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00066560 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00060920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00055800 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmmcl.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00021496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll 2016-08-11 14:38 - 2016-08-11 14:38 - 00000000 ____D C:\Users\Michiyo\Documents\Electronic Arts 2016-08-11 14:26 - 2016-08-28 19:05 - 00002187 _____ C:\Users\Michiyo\Desktop\Die Sims 4 Digital Deluxe Edition 64 Bit.lnk 2016-08-11 14:07 - 2016-08-27 12:15 - 00000000 ____D C:\Program Files (x86)\Die Sims 4 2016-08-11 13:58 - 2016-08-11 14:02 - 00000000 ____D C:\Users\Michiyo\Downloads\Die Sims 4 Gaumenfreuden DLC Incl. Update 14 MULTi2 2016-08-11 12:39 - 2016-08-03 12:36 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2016-08-11 12:39 - 2016-08-03 12:30 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2016-08-11 12:39 - 2016-08-03 12:23 - 00693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2016-08-11 12:39 - 2016-08-03 12:23 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2016-08-11 12:39 - 2016-08-03 12:22 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2016-08-11 12:39 - 2016-08-03 12:22 - 00465248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2016-08-11 12:39 - 2016-08-03 12:22 - 00331616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2016-08-11 12:39 - 2016-08-03 12:21 - 03675512 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2016-08-11 12:39 - 2016-08-03 12:21 - 00566112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2016-08-11 12:39 - 2016-08-03 12:20 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2016-08-11 12:39 - 2016-08-03 12:20 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll 2016-08-11 12:39 - 2016-08-03 12:19 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2016-08-11 12:39 - 2016-08-03 12:19 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2016-08-11 12:39 - 2016-08-03 12:13 - 01988448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2016-08-11 12:39 - 2016-08-03 12:13 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2016-08-11 12:39 - 2016-08-03 12:13 - 00393056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2016-08-11 12:39 - 2016-08-03 11:51 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2016-08-11 12:39 - 2016-08-03 11:44 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2016-08-11 12:39 - 2016-08-03 11:44 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2016-08-11 12:39 - 2016-08-03 11:43 - 16985088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2016-08-11 12:39 - 2016-08-03 11:40 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2016-08-11 12:39 - 2016-08-03 11:40 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll 2016-08-11 12:39 - 2016-08-03 11:39 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2016-08-11 12:39 - 2016-08-03 11:38 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2016-08-11 12:39 - 2016-08-03 11:36 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2016-08-11 12:39 - 2016-08-03 11:36 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2016-08-11 12:39 - 2016-08-03 11:35 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll 2016-08-11 12:39 - 2016-08-03 11:31 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe 2016-08-11 12:39 - 2016-08-03 11:30 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2016-08-11 12:39 - 2016-08-03 11:29 - 14252544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2016-08-11 12:39 - 2016-08-03 11:29 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe 2016-08-11 12:39 - 2016-08-03 11:29 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2016-08-11 12:39 - 2016-08-03 11:28 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2016-08-11 12:39 - 2016-08-03 11:27 - 07536640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2016-08-11 12:39 - 2016-08-03 11:27 - 01717760 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2016-08-11 12:39 - 2016-08-03 11:18 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2016-08-11 12:39 - 2016-08-03 11:18 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2016-08-11 12:39 - 2016-08-03 11:16 - 05123072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2016-08-11 12:39 - 2016-08-03 11:16 - 03589120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2016-08-11 12:39 - 2016-08-03 11:16 - 01732096 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-08-11 12:39 - 2016-08-03 11:14 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll 2016-08-11 12:39 - 2016-08-03 11:13 - 03025920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2016-08-11 12:39 - 2016-08-03 11:13 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2016-08-11 12:39 - 2016-08-03 11:11 - 04171264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2016-08-11 12:39 - 2016-08-03 07:52 - 00034088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll 2016-08-11 12:39 - 2016-08-03 07:34 - 00501592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2016-08-11 12:39 - 2016-08-03 07:34 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2016-08-11 12:39 - 2016-08-03 07:33 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll 2016-08-11 12:39 - 2016-08-03 07:31 - 02921368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2016-08-11 12:39 - 2016-08-03 07:31 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2016-08-11 12:39 - 2016-08-03 07:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2016-08-11 12:39 - 2016-08-03 06:57 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdlrecover.exe 2016-08-11 12:39 - 2016-08-03 06:48 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll 2016-08-11 12:39 - 2016-08-03 06:47 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2016-08-11 12:39 - 2016-08-03 06:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll 2016-08-11 12:39 - 2016-08-03 06:44 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll 2016-08-11 12:39 - 2016-08-03 06:42 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll 2016-08-11 12:39 - 2016-08-03 06:37 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2016-08-11 12:39 - 2016-08-03 06:35 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe 2016-08-11 12:39 - 2016-08-03 06:34 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2016-08-11 12:39 - 2016-08-03 06:32 - 12585984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2016-08-11 12:39 - 2016-08-03 06:32 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2016-08-11 12:39 - 2016-08-03 06:32 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2016-08-11 12:39 - 2016-08-03 06:31 - 06743040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2016-08-11 12:39 - 2016-08-03 06:31 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2016-08-11 12:39 - 2016-08-03 06:25 - 04078080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2016-08-11 12:39 - 2016-08-03 06:19 - 02180096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll 2016-08-11 12:38 - 2016-08-03 13:14 - 01505984 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2016-08-11 12:38 - 2016-08-03 13:14 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2016-08-11 12:38 - 2016-08-03 13:14 - 00050368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2016-08-11 12:38 - 2016-08-03 12:36 - 07469408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-08-11 12:38 - 2016-08-03 12:36 - 00037744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll 2016-08-11 12:38 - 2016-08-03 12:22 - 01322760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2016-08-11 12:38 - 2016-08-03 12:22 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll 2016-08-11 12:38 - 2016-08-03 12:21 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2016-08-11 12:38 - 2016-08-03 12:21 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe 2016-08-11 12:38 - 2016-08-03 12:11 - 00422744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2016-08-11 12:38 - 2016-08-03 11:51 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe 2016-08-11 12:38 - 2016-08-03 11:46 - 22384128 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-08-11 12:38 - 2016-08-03 11:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll 2016-08-11 12:38 - 2016-08-03 11:41 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll 2016-08-11 12:38 - 2016-08-03 11:41 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll 2016-08-11 12:38 - 2016-08-03 11:40 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll 2016-08-11 12:38 - 2016-08-03 11:40 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll 2016-08-11 12:38 - 2016-08-03 11:39 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll 2016-08-11 12:38 - 2016-08-03 11:38 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2016-08-11 12:38 - 2016-08-03 11:37 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll 2016-08-11 12:38 - 2016-08-03 11:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2016-08-11 12:38 - 2016-08-03 11:35 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-08-11 12:38 - 2016-08-03 11:34 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2016-08-11 12:38 - 2016-08-03 11:33 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2016-08-11 12:38 - 2016-08-03 11:33 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll 2016-08-11 12:38 - 2016-08-03 11:31 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll 2016-08-11 12:38 - 2016-08-03 11:31 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2016-08-11 12:38 - 2016-08-03 11:30 - 24613888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-08-11 12:38 - 2016-08-03 11:30 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2016-08-11 12:38 - 2016-08-03 11:29 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2016-08-11 12:38 - 2016-08-03 11:29 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2016-08-11 12:38 - 2016-08-03 11:28 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2016-08-11 12:38 - 2016-08-03 11:28 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2016-08-11 12:38 - 2016-08-03 11:27 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2016-08-11 12:38 - 2016-08-03 11:27 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2016-08-11 12:38 - 2016-08-03 11:20 - 13390336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-08-11 12:38 - 2016-08-03 11:18 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2016-08-11 12:38 - 2016-08-03 11:17 - 02175488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2016-08-11 12:38 - 2016-08-03 11:16 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2016-08-11 12:38 - 2016-08-03 11:15 - 07833088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-08-11 12:38 - 2016-08-03 11:14 - 04895232 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-08-11 12:38 - 2016-08-03 11:12 - 02746368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll 2016-08-11 12:38 - 2016-08-03 07:30 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2016-08-11 12:38 - 2016-08-03 07:30 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2016-08-11 12:38 - 2016-08-03 07:30 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe 2016-08-11 12:38 - 2016-08-03 06:40 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll 2016-08-11 12:38 - 2016-08-03 06:39 - 19351040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-08-11 12:38 - 2016-08-03 06:37 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2016-08-11 12:38 - 2016-08-03 06:35 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2016-08-11 12:38 - 2016-08-03 06:34 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2016-08-11 12:38 - 2016-08-03 06:33 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-08-11 12:38 - 2016-08-03 06:33 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2016-08-11 12:38 - 2016-08-03 06:33 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2016-08-11 12:38 - 2016-08-03 06:32 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2016-08-11 12:38 - 2016-08-03 06:29 - 12133376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-08-11 12:38 - 2016-08-03 06:28 - 03663360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-08-11 12:38 - 2016-08-03 06:25 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2016-08-11 12:38 - 2016-08-03 06:23 - 05660672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-08-11 12:38 - 2016-08-03 06:23 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2016-08-11 12:38 - 2016-08-03 06:22 - 02501120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2016-08-11 12:38 - 2016-08-03 06:22 - 01502208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-08-11 12:38 - 2016-08-03 06:21 - 01708032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll 2016-08-11 11:35 - 2016-08-11 11:46 - 00000000 ____D C:\Users\Michiyo\Downloads\Die Sims 4 Digital Deluxe Edition ReRelease Incl. Update 14 MULTi2 2016-08-08 12:51 - 2016-08-08 12:53 - 1266484522 _____ C:\Users\Michiyo\Documents\PhotoImpact.13.1.rar 2016-08-07 23:09 - 2016-08-07 23:17 - 529480482 _____ C:\Users\Michiyo\Downloads\[Leopard-Raws] Dragon Ball Super - 054 RAW (THK 1280x720 x264 AAC).mp4 2016-08-07 23:09 - 2016-08-07 23:10 - 389781623 _____ C:\Users\Michiyo\Downloads\[Leopard-Raws] Dragon Ball Super - 053 RAW (THK 1280x720 x264 AAC).mp4 2016-08-06 11:03 - 2016-08-06 11:03 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\29030 ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-08-29 17:25 - 2014-11-08 14:42 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Skype 2016-08-29 17:20 - 2014-11-08 19:05 - 00001136 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2016-08-29 17:18 - 2015-12-21 13:41 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-08-29 17:18 - 2009-07-14 04:34 - 00000555 _____ C:\WINDOWS\win.ini 2016-08-29 17:17 - 2015-12-21 13:18 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin 2016-08-29 17:17 - 2015-10-30 08:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI 2016-08-29 17:16 - 2016-07-05 17:34 - 00000008 __RSH C:\ProgramData\ntuser.pol 2016-08-29 17:16 - 2014-03-13 12:37 - 00000000 ____D C:\AdwCleaner 2016-08-29 17:15 - 2014-11-11 15:00 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Yahoo! 2016-08-29 16:21 - 2016-04-18 09:31 - 00004162 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{AE24DCEB-E6C7-487B-AFB9-782C90AB2FBD} 2016-08-29 16:18 - 2014-11-08 19:05 - 00001140 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2016-08-29 15:25 - 2014-11-09 15:20 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\AbiSuite 2016-08-29 12:59 - 2014-11-08 15:38 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\vlc 2016-08-29 10:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-08-28 21:06 - 2014-12-03 10:18 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\uTorrent 2016-08-28 19:05 - 2016-06-11 11:49 - 00002039 _____ C:\Users\Michiyo\Desktop\Dragonball Xenoverse.lnk 2016-08-28 17:57 - 2016-04-04 18:53 - 00000000 ____D C:\Users\Michiyo\Desktop\gucken heute 2016-08-28 12:39 - 2014-11-13 20:23 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Audacity 2016-08-28 10:47 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps 2016-08-27 13:06 - 2016-06-05 15:29 - 00000000 ____D C:\WINDOWS\Minidump 2016-08-27 13:06 - 2016-01-06 07:27 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\HpUpdate 2016-08-27 12:52 - 2016-03-11 18:36 - 00000000 ____D C:\Users\Michiyo\AppData\Local\AvgSetupLog 2016-08-27 12:34 - 2014-11-12 18:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-08-27 12:31 - 2014-12-26 18:22 - 00000000 ____D C:\Users\Michiyo\Documents\AnyDVD HD 6.7.9.0 Fimal 2016-08-27 11:20 - 2015-10-30 08:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM 2016-08-27 11:18 - 2016-03-11 18:36 - 00000000 ____D C:\Users\Michiyo\AppData\Local\Avg 2016-08-27 11:18 - 2014-11-12 18:13 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\TuneUp Software 2016-08-27 11:17 - 2016-03-11 18:37 - 00000000 ____D C:\ProgramData\Avg 2016-08-27 11:17 - 2016-03-11 18:37 - 00000000 ____D C:\Program Files (x86)\AVG 2016-08-27 11:17 - 2015-10-30 09:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP 2016-08-27 11:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2016-08-27 11:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\System 2016-08-27 10:59 - 2015-12-21 13:18 - 00000000 ____D C:\ProgramData\Package Cache 2016-08-27 10:59 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\Macromed 2016-08-27 10:57 - 2015-03-18 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2016-08-27 10:56 - 2015-03-18 13:45 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2016-08-27 10:55 - 2015-03-18 13:45 - 00000000 ____D C:\Program Files (x86)\Java 2016-08-26 16:47 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-08-26 16:16 - 2014-11-12 17:49 - 00000000 ____D C:\Users\Michiyo\AppData\Local\CrashDumps 2016-08-26 13:17 - 2014-11-25 15:51 - 00000000 ____D C:\WINDOWS\pss 2016-08-26 12:45 - 2016-07-16 17:15 - 00000000 ____D C:\Users\Michiyo\Downloads\Seisei Suruhodo, Aishiteru 2016-08-26 11:25 - 2016-07-16 17:15 - 00000000 ____D C:\Users\Michiyo\Downloads\Ie Uru Onna 2016-08-26 11:10 - 2015-08-04 11:18 - 00002437 _____ C:\Users\Michiyo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-08-26 11:10 - 2015-08-04 11:18 - 00000000 ___RD C:\Users\Michiyo\OneDrive 2016-08-26 10:30 - 2013-12-16 20:32 - 00000000 ____D C:\WINDOWS\system32\Drivers\NISx64 2016-08-25 21:34 - 2014-11-11 20:14 - 00000132 _____ C:\Users\Michiyo\AppData\Roaming\Adobe PNG Format CS5 Prefs 2016-08-25 16:56 - 2016-03-30 09:53 - 00000000 ____D C:\WINDOWS\System32\Tasks\Remediation 2016-08-24 13:18 - 2016-03-11 18:39 - 00002549 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp.lnk 2016-08-23 07:41 - 2015-05-11 12:42 - 00000000 ____D C:\Users\Michiyo\FanFics - Geschichten 2016-08-21 20:02 - 2016-06-08 11:33 - 00000000 ____D C:\Users\Michiyo\Desktop\Video 2016-08-21 10:27 - 2015-12-21 13:18 - 00000000 ____D C:\ProgramData\AMD 2016-08-19 16:35 - 2016-03-11 18:39 - 00053008 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\TURegOpt.exe 2016-08-16 20:19 - 2016-07-16 17:15 - 00000000 ____D C:\Users\Michiyo\Downloads\Suki na Hito ga Iru Koto 2016-08-14 15:38 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache 2016-08-14 01:43 - 2015-12-21 13:21 - 02086168 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-08-14 01:43 - 2015-10-30 20:35 - 00888008 _____ C:\WINDOWS\system32\perfh007.dat 2016-08-14 01:43 - 2015-10-30 20:35 - 00197092 _____ C:\WINDOWS\system32\perfc007.dat 2016-08-14 01:43 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF 2016-08-13 17:25 - 2015-08-04 11:15 - 00000000 ____D C:\Users\Michiyo\AppData\Local\Packages 2016-08-13 01:07 - 2015-12-21 13:22 - 00000000 ____D C:\Users\Michiyo 2016-08-12 18:11 - 2014-11-08 14:41 - 00000000 ____D C:\ProgramData\Skype 2016-08-12 15:05 - 2014-11-08 19:10 - 00000000 ____D C:\Program Files (x86)\AMD 2016-08-12 15:02 - 2015-12-21 13:17 - 00000000 ____D C:\Program Files\AMD 2016-08-12 14:29 - 2015-07-01 22:23 - 00000000 ____D C:\Users\Michiyo\AppData\Local\JDownloader 2.0 2016-08-12 09:08 - 2015-08-04 11:15 - 00000000 __RHD C:\Users\Public\AccountPictures 2016-08-12 09:05 - 2015-07-15 19:34 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security 2016-08-12 09:01 - 2015-10-30 20:44 - 00000000 ____D C:\Program Files\Windows Journal 2016-08-12 09:01 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2016-08-12 09:01 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-08-12 01:07 - 2016-01-22 14:05 - 07258160 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll 2016-08-12 01:07 - 2016-01-22 14:04 - 00137224 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll 2016-08-12 01:07 - 2015-12-16 21:06 - 09340136 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll 2016-08-12 01:07 - 2015-12-16 21:06 - 09131736 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll 2016-08-12 01:07 - 2015-12-16 21:06 - 01273928 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll 2016-08-12 01:07 - 2015-12-16 21:06 - 00152800 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll 2016-08-12 01:07 - 2015-10-07 17:19 - 10995344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll 2016-08-12 01:07 - 2015-10-07 17:19 - 10317568 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll 2016-08-12 01:07 - 2015-10-07 17:19 - 01547544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll 2016-08-12 01:07 - 2015-10-07 17:19 - 00183952 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll 2016-08-12 01:06 - 2016-01-22 14:00 - 00521728 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe 2016-08-12 01:06 - 2016-01-22 14:00 - 00287232 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe 2016-08-12 01:06 - 2016-01-22 13:59 - 01323008 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll 2016-08-12 01:06 - 2015-10-07 17:19 - 26706432 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys 2016-08-12 01:06 - 2015-10-07 17:19 - 00518656 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys 2016-08-11 17:19 - 2013-12-16 20:33 - 00101112 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS 2016-08-11 17:19 - 2013-12-16 20:33 - 00008270 _____ C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT 2016-08-11 16:01 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2016-08-11 16:01 - 2013-12-17 10:23 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-08-11 15:53 - 2013-12-17 10:23 - 147640136 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-08-09 08:20 - 2014-11-08 19:05 - 00002483 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-08-09 08:20 - 2014-11-08 19:05 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-08-08 22:13 - 2015-01-02 15:06 - 00000000 ____D C:\ProgramData\Electronic Arts 2016-08-08 11:25 - 2014-11-08 15:27 - 00000000 ___RD C:\Program Files (x86)\Skype 2016-08-03 21:08 - 2016-03-11 18:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen 2016-08-03 17:31 - 2016-03-06 14:20 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-07-31 17:30 - 2016-05-19 17:32 - 00000000 ____D C:\Users\Michiyo\Downloads\extracted ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-08-04 11:23 - 2015-08-04 11:23 - 0000000 _____ () C:\Program Files (x86)\Common Files\AMD 2014-11-11 20:14 - 2016-08-25 21:34 - 0000132 _____ () C:\Users\Michiyo\AppData\Roaming\Adobe PNG Format CS5 Prefs 2014-12-24 02:38 - 2014-12-24 02:38 - 0003584 _____ () C:\Users\Michiyo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2016-08-26 15:34 - 2016-08-26 15:34 - 0000017 _____ () C:\Users\Michiyo\AppData\Local\resmon.resmoncfg 2014-12-26 19:39 - 2014-12-26 19:39 - 0000040 ___SH () C:\ProgramData\.zreglib 2014-12-26 19:46 - 2014-12-26 19:46 - 0028672 _____ () C:\ProgramData\data.dll 2011-05-22 15:09 - 2011-05-22 15:09 - 0019624 _____ () C:\ProgramData\iml.xml 2011-05-22 15:09 - 2011-05-22 15:09 - 0019624 _____ () C:\ProgramData\winiml.dat Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\ProgramData\data.dll C:\ProgramData\winiml.dat C:\Users\Michiyo\VisualBoyAdvance.exe Einige Dateien in TEMP: ==================== C:\Users\Michiyo\AppData\Local\Temp\libeay32.dll C:\Users\Michiyo\AppData\Local\Temp\msvcr120.dll C:\Users\Michiyo\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-08-20 15:54 ==================== Ende von FRST.txt ============================ |
29.08.2016, 16:29 | #7 |
| Win10 Update oder Virus ??? Explorer langsam + weiße Icons Addition Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 28-08-2016 durchgeführt von Michiyo (29-08-2016 17:26:57) Gestartet von C:\Users\Michiyo\Desktop Windows 10 Home Version 1511 (X64) (2015-12-21 11:45:04) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-1262878346-956153297-733536101-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-1262878346-956153297-733536101-503 - Limited - Disabled) Gast (S-1-5-21-1262878346-956153297-733536101-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1262878346-956153297-733536101-1003 - Limited - Enabled) Michiyo (S-1-5-21-1262878346-956153297-733536101-1001 - Administrator - Enabled) => C:\Users\Michiyo ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: AVG AntiVirus Free Edition (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: AVG AntiVirus Free Edition (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) @BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.30 - GIGABYTE) µTorrent (HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\uTorrent) (Version: 3.4.8.42449 - BitTorrent Inc.) 64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden AbiWord 2.9.4 (HKLM-x32\...\AbiWord2) (Version: 2.9.4 - AbiSource Developers) ACP Application (Version: 2015.1204.1152.59 - Advanced Micro Devices, Inc.) Hidden Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.017.20053 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.) Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated) Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated) Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated) Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated) Adobe Shockwave Player 12.2 (HKLM-x32\...\{C1F3739C-D31D-4062-8788-29261C4A2A68}) (Version: 12.2.4.194 - Adobe Systems, Inc) Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd) AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.5.0 - Sereby Corporation) AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 5.00 - Advanced Micro Devices, Inc.) AnyDVD (HKLM-x32\...\AnyDVD) (Version: 6.7.9.0 - SlySoft) ASUS Turbo Engine v1.7 (HKLM-x32\...\ASUS Turbo Engine_is1) (Version: - ASUS) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.7 - Atheros Communications Inc.) aTube Catcher Version 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp) Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team) AutoGreen B12.1220.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE) AutoGreen B12.1220.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden AVG (HKLM\...\AvgZen) (Version: 1.82.2.30772 - AVG Technologies) AVG (Version: 16.101.7752 - AVG Technologies) Hidden AVG 2016 (Version: 16.0.4649 - AVG Technologies) Hidden AVG PC TuneUp (HKLM-x32\...\AVG PC TuneUp) (Version: 16.52.2.34122 - AVG Technologies) AVG PC TuneUp (x32 Version: 16.52.2 - AVG Technologies) Hidden AVG Protection (HKLM\...\AVG) (Version: 2016.101.7752 - AVG Technologies) AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.3.4.122 - AVG Technologies) AVG Zen (Version: 1.82.2 - AVG Technologies) Hidden BlueStacks App Player (HKLM-x32\...\{D7E3588F-25E6-4A93-8B1C-596F7951CA38}) (Version: 0.10.7.5601 - BlueStack Systems, Inc.) BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden Catalyst Control Center Next Localization BR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHS (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHT (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CS (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DA (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DE (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization EL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization ES (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FI (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization HU (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization IT (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization JA (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization KO (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NO (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization PL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization RU (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization SV (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TH (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version: - Cheat Engine) Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version: - Cheat Engine) Copy (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden Creative Live! Cam Video IM/Video Chat (VF0540) (1.01.03.00) (HKLM\...\Creative VF0540) (Version: - ) Creative Live! Central (HKLM-x32\...\Creative Live! Central) (Version: 1.00 - Creative Technology Limited) CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.2014 - CyberLink Corp.) CyberLink PowerDirector 11 (HKLM-x32\...\InstallShield_{551F492A-01B0-4DC4-866F-875EC4EDC0A8}) (Version: 11.0.0.3625 - CyberLink Corp.) CyberLink PowerDirector 11 (Version: 11.0.0.3625 - Ihr Firmenname) Hidden CyberLink PowerDirector 11 Content Pack Essential (HKLM-x32\...\InstallShield_{03AD770A-1530-437E-967F-ADD4E5B23164}) (Version: 11 - CyberLink Corp.) CyberLink PowerDirector 11 Content Pack Premium (HKLM-x32\...\InstallShield_{37672760-7930-4911-9685-227E29AE2C55}) (Version: 11 - CyberLink Corp.) CyberLink WaveEditor 2 (HKLM-x32\...\InstallShield_{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}) (Version: 2.0.3206 - CyberLink Corp.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd) Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation) Die Sims 4 Digital Deluxe Edition ReRelease Incl. Update 14 MULTi2 1.20.60.1020 (HKLM-x32\...\Die Sims 4 Digital Deluxe Edition ReRelease Incl. Update 14 MULTi2 1.20.60.1020) (Version: - ) Die Sims 4 Gaumenfreuden DLC Incl. Update 14 MULTi2 1.20.60.1020 (HKLM-x32\...\Die Sims 4 Gaumenfreuden DLC Incl. Update 14 MULTi2 1.20.60.1020) (Version: - ) DJ_AIO_NS_LP_DocCD (x32 Version: 90.0.222.000 - Hewlett-Packard) Hidden DJ_AIO_ProductContext (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden DJ_AIO_Software (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden DJ_AIO_Software_min (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden Dragonball Xenoverse Incl. Update 7 MULTi2 1.0 (HKLM-x32\...\Dragonball Xenoverse Incl. Update 7 MULTi2 1.0) (Version: - ) DVDFab 9.1.8.5 (24/01/2015) (HKLM-x32\...\DVDFab 9_is1) (Version: - Fengtao Software Inc.) Easy Tune 6 B13.0125.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE) Easy Tune 6 B13.0125.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden F4100 (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden F4100_Help (x32 Version: 90.0.222.000 - Hewlett-Packard) Hidden FileZilla Client 3.17.0 (HKLM-x32\...\FileZilla Client) (Version: 3.17.0 - Tim Kosse) FMW 1 (Version: 1.122.3 - AVG Technologies) Hidden Free NicoVideo Download (HKLM-x32\...\Free NicoVideo Download_is1) (Version: 1.0.25.1117 - DVDVideoSoft Ltd.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.) Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP) HP Deskjet All-In-One Software (HKLM\...\{2CB8566A-8EA6-417A-BAB1-1B10A88C79BB}) (Version: 14.0 - HP) HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP) HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP) HP Support Solutions Framework (HKLM-x32\...\{B1AD4FFB-DD17-43EC-8C30-B9E71EAD9132}) (Version: 12.5.26.37 - Hewlett-Packard Company) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden HPSSupply (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden IM Lock (HKLM-x32\...\IMLock) (Version: - Comvigo, Inc.) Java 7 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.450 - Oracle) Java 8 Update 102 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180102F0}) (Version: 8.0.1020.14 - Oracle Corporation) Java 8 Update 102 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180102F0}) (Version: 8.0.1020.14 - Oracle Corporation) JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH) JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH) JDownloader 2 (HKLM\...\jdownloader2-1) (Version: 2.0 - AppWork GmbH) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Leawo Blu-ray Player version 1.9.1.4 (HKLM-x32\...\{CF7F52BF-DEE0-44CD-A7E1-AADD5CCECCDD}_is1) (Version: 1.9.1.4 - leawo Software) Manager (x32 Version: 4.0.1.25166 - 2015 pdfforge GmbH. All rights reserved) Hidden MarketResearch (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation) Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation) Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Mozilla Firefox 36.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 36.0.1 (x86 de)) (Version: 36.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 36.0.1 - Mozilla) MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Newblue Art Effects for PowerDirector (HKLM\...\NewBlue Art Effects for PowerDirector) (Version: 2.0 - NewBlue) OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP) OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation) Opera Stable 31.0.1889.99 (HKLM-x32\...\Opera 31.0.1889.99) (Version: 31.0.1889.99 - Opera Software) Origin (HKLM-x32\...\Origin) (Version: 9.2.1.4399 - Electronic Arts, Inc.) PDF Architect 4 (HKLM-x32\...\PDF Architect 4) (Version: 4.0.34.26215 - pdfforge GmbH) PDF Architect 4 Create Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden PDF Architect 4 Edit Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden PDF Architect 4 View Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.3.0 - pdfforge GmbH) PowerDirector (Version: 11.0 - Ihr Firmenname) Hidden Raptr (HKLM-x32\...\Raptr) (Version: - ) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.) Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP) Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.3.0.9150 - Microsoft Corporation) Skype™ 7.26 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.26.101 - Skype Technologies S.A.) SmartSound Quicktracks 5 (HKLM-x32\...\InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.) SmartSound Quicktracks 5 (x32 Version: 5.1.8 - SmartSound Software Inc.) Hidden SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden Stellarium 0.13.3 (HKLM\...\Stellarium_is1) (Version: 0.13.3 - Stellarium team) TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.45862 - TeamViewer) Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden Trust tablet driver (HKLM\...\RmTablet) (Version: 5.01 - ) Ulead PhotoImpact X3 (HKLM-x32\...\InstallShield_{15803703-25FA-4C01-A062-3F4A59937E87}) (Version: 1.00.0000 - Corel) Ulead PhotoImpact X3 (x32 Version: 1.00.0000 - Corel) Hidden Unity Web Player (HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS) UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN) WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation) WinRAR 5.11 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-1262878346-956153297-733536101-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileCoAuth.exe (Microsoft Corporation) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {114F22A2-008C-4777-A2C0-39BF9609C446} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG Task: {156382D6-023F-4200-818B-A8C53B69CD19} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {1A4A388B-F3AB-4AC7-B9A6-669C6008A48D} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {1C4978E1-2E14-4A7A-BC9C-758E656E4656} - \Norton Internet Security\Norton Error Analyzer -> Keine Datei <==== ACHTUNG Task: {1DEA7791-1707-4D85-BF6D-D02ACACA92EC} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG Task: {25938094-632A-4E2E-8C88-2856D095BEBF} - \TweakBit\FixMyPC\Start FixMyPC оn logon -> Keine Datei <==== ACHTUNG Task: {2A0BC7CA-71EA-4564-8D16-0AD4D006FFF5} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG Task: {2B3BBE82-93F6-42D2-96E9-0D7F95A78A30} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe Task: {30E18F1A-840E-493F-8C2A-A0562A662BB2} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [2016-06-17] (Symantec Corporation) Task: {3F457ABC-9367-4B7A-AB11-BBDFE4017628} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-08-03] (HP Inc.) Task: {40E7B9D3-FE28-4702-B207-46CA68F181B1} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe Task: {4D01937F-EC23-4931-A1C1-6B87C463F2A5} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe Task: {4E44534B-1E72-48D6-A063-A08E0E920281} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe Task: {50F00039-E0F3-49B0-922B-C5A6C9330F08} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe Task: {57E85502-A525-4DAB-89C7-46C9B6DFEC65} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.) Task: {5833E409-3661-4B4C-B954-201CBCB3EB7D} - System32\Tasks\MichiyoNobbleAbsorbsV2 => Rundll32.exe NonrealisticPredefining.dll,main 7 1 <==== ACHTUNG Task: {5A73ADF3-9DC8-41A2-B2EA-261BA2BF6B5F} - \Norton Internet Security\Norton Autofix -> Keine Datei <==== ACHTUNG Task: {5FCAE671-3B9B-4E62-A9B4-11AA571E0E37} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe Task: {6237CAC7-95D3-40D3-B9D6-6E077B097F39} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-08-27] (Adobe Systems Incorporated) Task: {63566AF3-8C0F-451C-A91F-A4D4F1517C3D} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe [2016-08-19] (AVG Technologies CZ, s.r.o.) Task: {6CF5E4AB-2BE4-4FAD-94BC-D7F1FF8E6BB2} - \Norton Internet Security\Norton Error Processor -> Keine Datei <==== ACHTUNG Task: {73C2C45F-6FBE-4AA2-A153-D20B51FB945C} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe Task: {78A1B497-0AE3-4BEB-BAC5-4B0F0834FF38} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe Task: {7FD9DBB4-266E-464D-803D-C602BD65E742} - System32\Tasks\AVG-SSU_0516piz_DELETE => C:\ProgramData\Avg_Update_0516piz\AVG-Secure-Search-Update_0516piz.exe [2016-05-03] () Task: {882B1AC2-CD97-408D-9B9A-F363612D003D} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe [2016-08-26] (Microsoft Corporation) Task: {88C74DEC-81D9-4D55-A994-75A890B64031} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe Task: {8C83C740-F7D0-48D7-AF62-2F37C5647466} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe Task: {8E71E3D0-2229-4D0F-B27D-7850216D032B} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe Task: {90FB9E3A-4B05-4D38-9AB0-11680FD3CBBC} - System32\Tasks\AdobeAAMUpdater-1.0-Michiyo-PC-Michiyo => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated) Task: {93809E8D-BB23-4EEB-820D-B1038C55C50A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-05-09] (Hewlett-Packard) Task: {9457E5B4-5BE3-4414-A28F-15283228C6A7} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe Task: {99957B8C-4043-4E0B-A914-B718431B4C7F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG Task: {9A9FED19-87AD-437F-8FB4-6F45611583C1} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG Task: {9D2AB2E1-52CE-4CA1-B679-0F669C197FCC} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {9D5B28AB-351C-43D9-A864-101793D47D0C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe Task: {A2462474-1AE8-4826-844B-F64E50DD95B2} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG Task: {A413446E-0712-47A0-847D-9C734E4E630C} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe Task: {AA0AD042-E156-4899-8EAF-A907A006AFE4} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe Task: {AA690441-0189-4210-8C48-4857BBE1D7F2} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG Task: {C0206B5E-CA90-4063-8AD7-2F284EC041AF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.) Task: {CCEFE2EE-FD56-483C-9D3A-21EC8CEF3FCB} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2015-12-04] (Advanced Micro Devices, Inc.) Task: {CE94F35A-66F0-41A5-9B61-1DBE024AFFEC} - System32\Tasks\AVG-SSU_0516piz => C:\ProgramData\Avg_Update_0516piz\AVG-Secure-Search-Update_0516piz.exe [2016-05-03] () Task: {CFB5EFD0-3189-4BD1-97C9-52182EE4ABBA} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe Task: {D7BB176A-0F3D-4ED5-9858-BA65E1A028A1} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG Task: {D7F60755-A8DE-4410-A10B-6E2B64ED5DC0} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-08-11] (Microsoft Corporation) Task: {D81E9C19-3B27-4E71-B75F-BD8E87F12E37} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-06-25] (Adobe Systems Incorporated) Task: {D96D743A-70BF-418E-95D0-77B4D1E4E08B} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe Task: {E77A538F-F474-412E-AFE1-F0E2124E2489} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe Task: {EEE72BC1-DBA0-4589-B26A-F6DA943FC712} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {F5E89F4E-0776-4E82-9333-7DD6C14DD704} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG Task: {F849ADF7-109E-4E9E-976D-6E53D206242C} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG Task: {F9F3025F-A4E1-4A71-B5B0-7EF73B9DD3DC} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG Task: {FC29C333-5ADA-498F-B64B-5C20E950F184} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Verknüpfungen ============================= (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://isearch.omiga-plus.com/?type=sc&ts=1415623352&from=smt&uid=ST1000DM003-1CH162_Z1D8NH1PXXXXZ1D8NH1P ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2016-08-29 17:16 - 2016-08-29 17:16 - 00980040 ____N () C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe 2014-11-17 20:32 - 2012-12-21 11:42 - 00390672 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe 2016-01-22 14:53 - 2012-10-19 12:01 - 00581120 _____ () C:\WINDOWS\system32\atwtusb.exe 2016-07-13 10:13 - 2016-07-01 06:48 - 02656408 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2016-08-29 17:15 - 2016-05-03 09:53 - 01986632 _____ () C:\ProgramData\Avg_Update_0516piz\AVG-Secure-Search-Update_0516piz.exe 2016-07-13 10:13 - 2016-07-01 06:48 - 02656408 _____ () C:\WINDOWS\System32\CoreUIComponents.dll 2016-08-26 11:09 - 2016-08-26 11:09 - 01864384 _____ () C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll 2014-05-01 16:13 - 2014-05-01 16:13 - 00470016 _____ () C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll 2016-04-22 15:15 - 2016-04-22 15:15 - 00052912 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll 2015-12-21 16:23 - 2015-12-07 06:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll 2016-07-13 10:15 - 2016-07-01 05:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2016-07-13 10:13 - 2016-07-01 05:27 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2016-07-13 10:13 - 2016-07-01 05:21 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2016-07-13 10:13 - 2016-07-01 05:22 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2016-07-13 10:13 - 2016-07-01 05:24 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2016-01-22 14:53 - 2012-09-10 14:54 - 03593728 _____ () C:\Windows\System32\AtwtusbIcon.exe 2015-06-25 17:34 - 2015-06-25 17:34 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll 2015-06-25 17:37 - 2015-06-25 17:37 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll 2015-06-25 17:35 - 2015-06-25 17:35 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll 2015-06-25 17:38 - 2015-06-25 17:38 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll 2015-06-25 16:53 - 2015-06-25 16:53 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll 2015-06-25 16:51 - 2015-06-25 16:51 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll 2016-06-24 12:51 - 2016-06-24 12:51 - 00017408 _____ () C:\Program Files\ATI Technologies\ATI.ACE\a4\AS4.NativeProxy.dll 2016-08-29 17:16 - 2016-08-29 17:16 - 02178120 _____ () C:\Program Files (x86)\AVG Web TuneUp\vprot.exe 2016-06-24 12:51 - 2016-06-24 12:51 - 00138752 _____ () C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe 2016-04-19 10:52 - 2016-04-19 10:52 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe 2015-11-19 13:56 - 2015-11-17 15:34 - 00253800 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\collector.dll 2015-11-19 13:56 - 2015-11-17 15:34 - 00110952 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll 2015-11-19 13:56 - 2015-11-17 15:34 - 00295272 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\stat.dll 2015-11-19 13:56 - 2015-11-17 15:34 - 00104296 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll 2015-11-19 13:56 - 2015-11-17 15:34 - 00020328 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll 2015-11-19 13:56 - 2015-11-17 15:34 - 00044392 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll 2016-08-09 08:20 - 2016-08-03 02:24 - 01771336 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libglesv2.dll 2016-08-09 08:20 - 2016-08-03 02:23 - 00094024 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libegl.dll 2016-04-19 10:52 - 2016-04-19 10:52 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll 2016-04-19 10:52 - 2016-04-19 10:52 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-1262878346-956153297-733536101-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Michiyo\Desktop\01082016\231041.jpg DNS Servers: 192.168.2.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) MSCONFIG\Services: MozillaMaintenance => 3 MSCONFIG\Services: RichVideo64 => 2 MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^IML.lnk => C:\Windows\pss\IML.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^IML64.lnk => C:\Windows\pss\IML64.lnk.CommonStartup MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin MSCONFIG\startupreg: CLMLServer_For_P2G8 => "C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe" MSCONFIG\startupreg: CLVirtualDrive => "C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe MSCONFIG\startupreg: hpqSRMon => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe MSCONFIG\startupreg: Power2GoExpress8 => "C:\Program Files (x86)\CyberLink\Power2Go8\Power2GoExpress8.exe" MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe MSCONFIG\startupreg: Ulead AutoDetector v2 => C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe HKLM\...\StartupApproved\Run32: => "Live! Central" HKLM\...\StartupApproved\Run32: => "FileZilla Server Interface" HKLM\...\StartupApproved\Run32: => "BlueStacks Agent" HKLM\...\StartupApproved\Run32: => "HP Software Update" HKLM\...\StartupApproved\Run32: => "Raptr" HKLM\...\StartupApproved\Run32: => "AvgUi" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "AnyDVD" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "DAEMON Tools Lite" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "icq" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_9777924208C03F797011CE1DAB92CB56" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "Personal ID" ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808 FirewallRules: [{D0FBAFBD-0C72-4261-A5E0-B5ECB2EB6EC8}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe FirewallRules: [{E7CBC7D0-F0F2-4876-8985-C348676E853C}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe FirewallRules: [{6004C78D-ABFB-4116-B0D6-A1A574D92520}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe FirewallRules: [{02E44320-95BD-4B1B-997F-B80AD473D6E0}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe FirewallRules: [{9F2C7241-816D-4F77-B075-DCFBF6159026}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{B3D42658-1286-4DCA-A59C-9B3CDF05CA90}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{8436D99B-5C5D-4FC2-8839-DAA7AE3DB3FC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{E646E7D0-5D5B-4EEC-BB7E-AEFDB51777F8}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{3D453ED9-496F-400A-86B0-EB0553854E09}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{8FFD106B-08E5-47DB-8900-B6298CCDD4C5}] => (Allow) LPort=2869 FirewallRules: [{C4405D1C-BC91-4C20-83AE-3D41523A4ADE}] => (Allow) LPort=1900 FirewallRules: [{6338CFAF-E4B1-497E-95E9-81813A677419}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe FirewallRules: [{4C09832E-4F03-4D28-8DFE-C87B1FCC8C4C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{C5913D20-818C-4863-AF82-EB6D927CFAEC}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe FirewallRules: [{4DA5816D-9F79-419B-882A-AE878A51BCB8}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe FirewallRules: [{18346353-AB38-47B0-A2AE-8EA98C08E9D1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe FirewallRules: [{19D7A7E7-FFB2-44C6-B467-70B7447D79B1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe FirewallRules: [{4F0C38F4-E147-4B2E-A41F-13ACFD66846C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe FirewallRules: [{0D273B1E-0510-4D4C-846F-6897007891B7}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe FirewallRules: [{9EA3948C-015A-41DE-8A52-7E745A26D93F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqnrs08.exe FirewallRules: [{66BFDCC1-C966-409A-9275-EC456450877D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe FirewallRules: [{F8102547-AAE8-4047-B31C-2526E4DCE2AD}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe FirewallRules: [{7CEB103D-4F3E-4FB5-B937-529B17142D07}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe FirewallRules: [{E006F2C7-201B-45B2-864A-4D0BB6B2565B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe FirewallRules: [{2BB1C4E2-C3A5-43A4-8314-B9A78AE17FF6}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe FirewallRules: [{C6459F07-FF33-4D00-ABB9-3DE2D77EDE84}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe FirewallRules: [TCP Query User{4C3FED9B-A0AC-495A-88FF-2EF1C65D662A}C:\users\michiyo\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\michiyo\appdata\roaming\utorrent\utorrent.exe FirewallRules: [UDP Query User{EA8A8D48-F52E-4B0F-928A-8569189F3E63}C:\users\michiyo\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\michiyo\appdata\roaming\utorrent\utorrent.exe FirewallRules: [TCP Query User{18FC0646-1B06-4EEB-AA7F-17C9AEEB1EAF}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe FirewallRules: [UDP Query User{3AD55A9F-304A-42C1-BC01-DD5D7B57B3C9}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe FirewallRules: [{26D33A50-2DD0-4ACC-AD51-2FEDA1348156}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{6EBD68AE-6A13-4F28-A6A6-EC1C61123163}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{B464FBBC-8487-499E-B0F6-883EAF4BE6ED}C:\program files (x86)\leawo\blu-ray player\leawo blu-ray player.exe] => (Block) C:\program files (x86)\leawo\blu-ray player\leawo blu-ray player.exe FirewallRules: [UDP Query User{E5F2ACE9-652E-4E32-ABB6-0A30EF8ED3D8}C:\program files (x86)\leawo\blu-ray player\leawo blu-ray player.exe] => (Block) C:\program files (x86)\leawo\blu-ray player\leawo blu-ray player.exe FirewallRules: [{04D296A4-0F50-471C-853F-AC0936BBA54B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{470C85BD-8FD9-4B98-B572-F643C9D04ADB}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe FirewallRules: [{200ED56F-AD5A-4313-9EAF-59976246ABDE}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe FirewallRules: [{734CBD21-7773-43C9-9DEE-E9E506E6E10B}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe FirewallRules: [{3F4F6F8D-A1B3-430A-BCD4-85F0825107D6}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe FirewallRules: [{74B5BF7E-FB48-4F62-80C2-EBE4C931B8C7}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe FirewallRules: [{FC923AFA-D2A7-494A-B507-47EB9E3DAA60}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe FirewallRules: [{FD9A1542-6144-4842-A440-53C9A38EA97A}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe FirewallRules: [{69204468-35D6-4012-9E88-EC1738F49588}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe ==================== Wiederherstellungspunkte ========================= 28-08-2016 15:39:55 Geplanter Prüfpunkt ==================== Fehlerhafte Geräte im Gerätemanager ============= ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (08/29/2016 05:27:31 PM) (Source: ESENT) (EventID: 454) (User: ) Description: SearchIndexer (4240) Windows: Unerwarteter Fehler "-551" bei der Datenbankwiederherstellung. Error: (08/29/2016 05:27:31 PM) (Source: ESENT) (EventID: 517) (User: ) Description: SearchIndexer (4240) Windows: Der Vorgang zur Datenbankwiederherstellung wird mit Fehler -551 beendet, da Verweise auf Datenbank "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" festgestellt wurden, die nicht den aktuellen Protokollen entsprechen. Das Datenbankmodul lässt den Abschluss des Wiederherstellungsvorgangs für diese Instanz erst dann zu, wenn die Datenbank mit der fehlenden Übereinstimmung wieder verfügbar gemacht wird. Wenn die Datenbank tatsächlich nicht mehr verfügbar und auch nicht mehr erforderlich ist, finden Sie Informationen zu den Wiederherstellungsverfahren in der Microsoft Knowledge Base oder unter dem Link "Weitere Informationen" am Ende dieser Meldung. Error: (08/29/2016 05:27:01 PM) (Source: ESENT) (EventID: 454) (User: ) Description: SearchIndexer (7220) Windows: Unerwarteter Fehler "-551" bei der Datenbankwiederherstellung. Error: (08/29/2016 05:27:01 PM) (Source: ESENT) (EventID: 517) (User: ) Description: SearchIndexer (7220) Windows: Der Vorgang zur Datenbankwiederherstellung wird mit Fehler -551 beendet, da Verweise auf Datenbank "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" festgestellt wurden, die nicht den aktuellen Protokollen entsprechen. Das Datenbankmodul lässt den Abschluss des Wiederherstellungsvorgangs für diese Instanz erst dann zu, wenn die Datenbank mit der fehlenden Übereinstimmung wieder verfügbar gemacht wird. Wenn die Datenbank tatsächlich nicht mehr verfügbar und auch nicht mehr erforderlich ist, finden Sie Informationen zu den Wiederherstellungsverfahren in der Microsoft Knowledge Base oder unter dem Link "Weitere Informationen" am Ende dieser Meldung. Error: (08/29/2016 05:26:31 PM) (Source: ESENT) (EventID: 454) (User: ) Description: SearchIndexer (8724) Windows: Unerwarteter Fehler "-551" bei der Datenbankwiederherstellung. Error: (08/29/2016 05:26:31 PM) (Source: ESENT) (EventID: 517) (User: ) Description: SearchIndexer (8724) Windows: Der Vorgang zur Datenbankwiederherstellung wird mit Fehler -551 beendet, da Verweise auf Datenbank "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" festgestellt wurden, die nicht den aktuellen Protokollen entsprechen. Das Datenbankmodul lässt den Abschluss des Wiederherstellungsvorgangs für diese Instanz erst dann zu, wenn die Datenbank mit der fehlenden Übereinstimmung wieder verfügbar gemacht wird. Wenn die Datenbank tatsächlich nicht mehr verfügbar und auch nicht mehr erforderlich ist, finden Sie Informationen zu den Wiederherstellungsverfahren in der Microsoft Knowledge Base oder unter dem Link "Weitere Informationen" am Ende dieser Meldung. Error: (08/29/2016 05:26:01 PM) (Source: ESENT) (EventID: 454) (User: ) Description: SearchIndexer (6500) Windows: Unerwarteter Fehler "-551" bei der Datenbankwiederherstellung. Error: (08/29/2016 05:26:01 PM) (Source: ESENT) (EventID: 517) (User: ) Description: SearchIndexer (6500) Windows: Der Vorgang zur Datenbankwiederherstellung wird mit Fehler -551 beendet, da Verweise auf Datenbank "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" festgestellt wurden, die nicht den aktuellen Protokollen entsprechen. Das Datenbankmodul lässt den Abschluss des Wiederherstellungsvorgangs für diese Instanz erst dann zu, wenn die Datenbank mit der fehlenden Übereinstimmung wieder verfügbar gemacht wird. Wenn die Datenbank tatsächlich nicht mehr verfügbar und auch nicht mehr erforderlich ist, finden Sie Informationen zu den Wiederherstellungsverfahren in der Microsoft Knowledge Base oder unter dem Link "Weitere Informationen" am Ende dieser Meldung. Error: (08/29/2016 05:25:31 PM) (Source: ESENT) (EventID: 454) (User: ) Description: SearchIndexer (8060) Windows: Unerwarteter Fehler "-551" bei der Datenbankwiederherstellung. Error: (08/29/2016 05:25:31 PM) (Source: ESENT) (EventID: 517) (User: ) Description: SearchIndexer (8060) Windows: Der Vorgang zur Datenbankwiederherstellung wird mit Fehler -551 beendet, da Verweise auf Datenbank "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" festgestellt wurden, die nicht den aktuellen Protokollen entsprechen. Das Datenbankmodul lässt den Abschluss des Wiederherstellungsvorgangs für diese Instanz erst dann zu, wenn die Datenbank mit der fehlenden Übereinstimmung wieder verfügbar gemacht wird. Wenn die Datenbank tatsächlich nicht mehr verfügbar und auch nicht mehr erforderlich ist, finden Sie Informationen zu den Wiederherstellungsverfahren in der Microsoft Knowledge Base oder unter dem Link "Weitere Informationen" am Ende dieser Meldung. Systemfehler: ============= Error: (08/29/2016 05:27:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 16 Mal passiert. Error: (08/29/2016 05:27:32 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Windows Search" wurde mit dem folgenden dienstspezifischen Fehler beendet: %%2147749126 Error: (08/29/2016 05:27:01 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 15 Mal passiert. Error: (08/29/2016 05:27:01 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Windows Search" wurde mit dem folgenden dienstspezifischen Fehler beendet: %%2147749126 Error: (08/29/2016 05:26:31 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 14 Mal passiert. Error: (08/29/2016 05:26:31 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Windows Search" wurde mit dem folgenden dienstspezifischen Fehler beendet: %%2147749126 Error: (08/29/2016 05:26:01 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 13 Mal passiert. Error: (08/29/2016 05:26:01 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Windows Search" wurde mit dem folgenden dienstspezifischen Fehler beendet: %%2147749126 Error: (08/29/2016 05:25:31 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 12 Mal passiert. Error: (08/29/2016 05:25:31 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Windows Search" wurde mit dem folgenden dienstspezifischen Fehler beendet: %%2147749126 CodeIntegrity: =================================== Date: 2016-08-27 12:54:29.036 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-08-27 10:53:11.017 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-27 10:53:10.998 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-27 10:53:10.976 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-27 10:53:10.939 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-27 10:53:10.920 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-27 10:53:10.882 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-27 10:53:10.828 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-27 10:53:10.808 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-27 10:53:10.785 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Speicherinformationen =========================== Prozessor: AMD FX(tm)-6300 Six-Core Processor Prozentuale Nutzung des RAM: 37% Installierter physikalischer RAM: 8189.53 MB Verfügbarer physikalischer RAM: 5093.91 MB Summe virtueller Speicher: 16381.53 MB Verfügbarer virtueller Speicher: 13194.98 MB ==================== Laufwerke ================================ Drive c: (Windows) (Fixed) (Total:918.97 GB) (Free:293.97 GB) NTFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 0049F0A3) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=919 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=450 MB) - (Type=27) Partition 4: (Not Active) - (Size=11 GB) - (Type=27) ==================== Ende von Addition.txt ============================ |
30.08.2016, 08:01 | #8 |
/// Malwareteam | Win10 Update oder Virus ??? Explorer langsam + weiße Icons Hi, Schritt # 1: MBAM Lade dir, falls nicht schon vorhanden, Malwarebytes Anti-Malware herunter, installiere und starte es.
Das Log findest du hier. Schritt # 2: ESET ESET Online Scanner
Schritt # 3: FRST Und noch ein frisches FRST-Log bitte. Schritt # 4: Bitte Posten
|
30.08.2016, 14:41 | #9 |
| Win10 Update oder Virus ??? Explorer langsam + weiße Icons Schritt # 1: MBAM Schritt2 befindet sich noch im Scan und kommt gegen 15/16 Uhr Bei mir sieht das ganze ein bisschen anders aus. Es sind 2 Berichte die ich in 2 txt Dateien abgespeichert habe. Maleware Scan Protokoll Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 30.08.2016 Suchlaufzeit: 12:04 Protokolldatei: Maleware1.txt Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2016.08.30.05 Rootkit-Datenbank: v2016.08.15.01 Lizenz: Testversion Malware-Schutz: Aktiviert Schutz vor bösartigen Websites: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 10 CPU: x64 Dateisystem: NTFS Benutzer: Michiyo Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 406840 Abgelaufene Zeit: 26 Min., 34 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Aktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 5 PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}, In Quarantäne, [b18c1f3267334aec0a2f6c2426dc718f], PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, In Quarantäne, [132a18393c5eb482112d731d887a629e], PUP.Optional.TweakBit, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{25938094-632A-4E2E-8C88-2856D095BEBF}, Löschen bei Neustart, [8faec1903a606fc784657a82996af808], PUP.Optional.StartPage, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Sparta 05, Löschen bei Neustart, [1627be93049688aed361369cef13f60a], PUP.Optional.TweakBit, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\TWEAKBIT\FIXMYPC\Start FixMyPC ?n logon, Löschen bei Neustart, [ea532e2383170d29b03a5ba141c2837d], Registrierungswerte: 1 PUP.Optional.TweakBit, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{25938094-632A-4E2E-8C88-2856D095BEBF}|Path, \TweakBit\FixMyPC\Start FixMyPC ?n logon, Löschen bei Neustart, [8faec1903a606fc784657a82996af808] Registrierungsdaten: 1 PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[ab920d44a9f11e18a341690dab5941bf] Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 11 PUP.Optional.OpenCandy, C:\Users\Michiyo\Documents\CheatEngine63.exe, In Quarantäne, [c479a6abfb9fbe78b94308847889c838], PUP.Optional.ChipDigital, C:\Users\Michiyo\Documents\PhotoFiltre - CHIP-Installer.exe, In Quarantäne, [42fbeb66bfdb2f07a8a9d27cd13348b8], PUP.Optional.OpenCandy, C:\Users\Michiyo\Documents\DTLite4491-0356.exe, In Quarantäne, [5ce184cd2b6f1c1a99397f0a6f956e92], CheatTool.CETTrainer, C:\Users\Michiyo\Documents\Fv2 TeamPro Trainer v2.0.exe, In Quarantäne, [ac91e66b0b8f0630d3613791ff023ec2], CheatTool.CETTrainer, C:\Users\Michiyo\Documents\Fv2 TeamPro Trainer v2.0.zip, In Quarantäne, [c77687cac2d8b185d85cd7f1f30ea65a], CheatTool.CETTrainer, C:\Users\Michiyo\Documents\Fv2 TeamPro Trainer v3.0.zip, In Quarantäne, [97a630214a50e155a78de5e3dd24d927], CheatTool.CETTrainer, C:\Users\Michiyo\Documents\FV2 TRAINER TEAM PRO V3.0.EXE, In Quarantäne, [9da0a5acc6d42b0b74c0efd9f70aaf51], CheatTool.CETTrainer, C:\Users\Michiyo\Documents\Fv2-XsonicX-5.0.zip, In Quarantäne, [7fbe5001c2d8e551a094eeda8f726d93], PUP.Optional.OmigaPlus.ShrtCln, C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_isearch.omiga-plus.com_0.localstorage, In Quarantäne, [25180c45faa0b2847019637cca387b85], PUP.Optional.OmigaPlus.ShrtCln, C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_isearch.omiga-plus.com_0.localstorage-journal, In Quarantäne, [72cbb8992d6dbb7b088121be8979966a], PUP.Optional.WinYahoo, C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\prefs.js, Gut: (user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Schlecht: (user_pref("browser.startup.homepage", "https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy), Ersetzt,[f14cf75a0c8e8fa7099a7e2119eb17e9] Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Protection, 30.08.2016 12:03, SYSTEM, MICHIYO-PC, Protection, Malware Protection, Starting, Protection, 30.08.2016 12:03, SYSTEM, MICHIYO-PC, Protection, Malware Protection, Started, Protection, 30.08.2016 12:03, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Starting, Protection, 30.08.2016 12:03, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Started, Update, 30.08.2016 12:03, SYSTEM, MICHIYO-PC, Manual, Remediation Database, 2016.2.12.1, 2016.8.15.2, Update, 30.08.2016 12:03, SYSTEM, MICHIYO-PC, Manual, Rootkit Database, 2016.2.8.1, 2016.8.15.1, Update, 30.08.2016 12:03, SYSTEM, MICHIYO-PC, Manual, IP Database, 2016.2.8.1, 2016.8.29.1, Update, 30.08.2016 12:04, SYSTEM, MICHIYO-PC, Manual, Domain Database, 2016.2.16.8, 2016.8.29.7, Update, 30.08.2016 12:04, SYSTEM, MICHIYO-PC, Manual, Malware Database, 2016.2.16.6, 2016.8.30.5, Protection, 30.08.2016 12:04, SYSTEM, MICHIYO-PC, Protection, Refresh, Starting, Protection, 30.08.2016 12:04, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Stopping, Protection, 30.08.2016 12:04, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Stopped, Protection, 30.08.2016 12:04, SYSTEM, MICHIYO-PC, Protection, Refresh, Success, Protection, 30.08.2016 12:04, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Starting, Protection, 30.08.2016 12:04, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Started, Scan, 30.08.2016 12:36, SYSTEM, MICHIYO-PC, Manual, Start: 30.08.2016 12:04, Dauer: 26 Min. 34 Sek., Bedrohungssuchlauf, Abgeschlossen, 10 Malware-Erkennung, 26 Nicht-Malware-Erkennungen, Protection, 30.08.2016 12:39, SYSTEM, MICHIYO-PC, Protection, Malware Protection, Starting, Protection, 30.08.2016 12:39, SYSTEM, MICHIYO-PC, Protection, Malware Protection, Started, Protection, 30.08.2016 12:39, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Starting, Protection, 30.08.2016 12:39, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Started, Update, 30.08.2016 13:04, SYSTEM, MICHIYO-PC, Scheduler, Domain Database, 2016.8.29.7, 2016.8.30.1, Update, 30.08.2016 13:04, SYSTEM, MICHIYO-PC, Scheduler, Malware Database, 2016.8.30.5, 2016.8.30.6, Protection, 30.08.2016 13:04, SYSTEM, MICHIYO-PC, Protection, Refresh, Starting, Protection, 30.08.2016 13:04, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Stopping, Protection, 30.08.2016 13:04, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Stopped, Protection, 30.08.2016 13:05, SYSTEM, MICHIYO-PC, Protection, Refresh, Success, Protection, 30.08.2016 13:05, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Starting, Protection, 30.08.2016 13:05, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Started, (end) Code:
ATTFilter ESETSmartInstaller@High as downloader log: Can not open internetESETSmartInstaller@High as downloader log: Can not open internet# product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=499db2cb81f1ca4db5863e8d341bf887 # end=init # utc_time=2016-08-30 11:19:44 # local_time=2016-08-30 01:19:44 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # osver=6.2.9200 NT Update Init Update Download Update Finalize Updated modules version: 30585 # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=499db2cb81f1ca4db5863e8d341bf887 # end=updated # utc_time=2016-08-30 11:22:59 # local_time=2016-08-30 01:22:59 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # osver=6.2.9200 NT # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7777 # api_version=3.1.1 # EOSSerial=499db2cb81f1ca4db5863e8d341bf887 # engine=30585 # end=finished # remove_checked=true # archives_checked=false # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2016-08-30 01:12:48 # local_time=2016-08-30 03:12:48 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1031 # osver=6.2.9200 NT # compatibility_mode_1='AVG AntiVirus Free Edition' # compatibility_mode=1057 16777213 100 88 104813 2871208 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776574 100 94 332482 26376911 0 0 # scanned=399085 # found=38 # cleaned=38 # scan_time=6588 sh=DE7CC769ED24606C67E0921A7A13F41C7C226CC2 ft=1 fh=3a4703d37e51fe00 vn="Variante von Win32/Toolbar.CrossRider.T evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-8.1\Plus-HD-8.1-bg.exe.vir" sh=38CEDA7702701713FA821C916BF27F23E18E6A65 ft=1 fh=d0e2982836bf8ab7 vn="Win64/Toolbar.Crossrider.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-8.1\Plus-HD-8.1-bho64.dll.vir" sh=543A95E3D4C050288908B937FA9CCE5450E6AFDE ft=1 fh=5fee560ec51f2e7b vn="Variante von Win32/Toolbar.CrossRider.BP evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-8.1\Uninstall.exe.vir" sh=140F1BA4DD591202E50DEA5DE4EF46612C059BD0 ft=1 fh=906b6d7a397ba4c9 vn="Variante von MSIL/Adware.PullUpdate.A Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\InternetUpdater\InternetUpdaterService.exe.vir" sh=56D877C9852ADC4A958663231C44C1839C25CAA0 ft=1 fh=c71c001140362052 vn="Variante von Win32/Adware.PullUpdate.G Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\InternetUpdater\Uninstall.exe.vir" sh=559637F0567C7A95BD4881D7BAF0B284D640215A ft=1 fh=c2f893dd822f18f6 vn="Variante von Win32/ELEX.AE evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\WPM\wprotectmanager.exe.vir" sh=9F82BB5DC8D4EC6B8B2BB47CB6C329B8AF1C14CE ft=1 fh=c92ed1f3ca58c043 vn="Win32/InstallCore.AZ evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z\Image Editor Packages\uninstaller.exe.vir" sh=C5D5BE4D875D869C0736332C9739983D8664B182 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\chrome\content\core\xhr.js.vir" sh=A8BA4E33B30E22D5D23E01A6B0D52F21CF7181FB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\102_dealply_m.js.vir" sh=A1A2EC28719D19EC77B6A46A980A71FDE5E500AE ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\104_jollywallet_m.js.vir" sh=ADB5D656E327D79C167FB53F0C9E8567AC7D297E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\123_intext_adv_m.js.vir" sh=07E7242E737B1924CA063AD8A18577661B6879A3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.O evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\14_CrossriderUtils.js.vir" sh=73D7B96272D6B2775D77D0FCD72450BBC9C497D4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\155_ibario_pops_m.js.vir" sh=EB19F8211D7B4D646A460A9F060325A8845EEF22 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\178_revizer_ws_dynamic_m.js.vir" sh=7EF151342936737A0EE87FF356E947372CE76900 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\180_bpo_serp_m.js.vir" sh=06107E2CB2818761C26753E71FE096DFDE882F3F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\190_pops_5_m.js.vir" sh=8BB92307AA4FF9E470AF67130210F6B680E66B07 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\191_ciuvo_m.js.vir" sh=422ADC32103BA63A199F74837A656FC5EF4FC677 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\195_icm_convertmedia_m.js.vir" sh=0A8B1205F5D538FAB8D45F743262312C198E08B6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\198_superfish_no_search_no_coupons_plushd_m.js.vir" sh=63D3217BF16BFB37091DD90C82E573D8CA13F08E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\1_base.js.vir" sh=E11D14A642EC31DFC4D17283F637FEA4FD1946A2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\213_dealply_no_google_m.js.vir" sh=5902FC10054355A5B8B9CC41620445BAA0F1D0AB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\21_debug.js.vir" sh=AB37C567C86E950E0EEFC156AA3D9CB665729C40 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\220_icm_base_m.js.vir" sh=C27C02D1ADA6C7E2101718BA2B2F4F359CA5C793 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\226_set_campaign_id_m.js.vir" sh=9968E7101A0C09D5340EE60D45B074AB1C8302C2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.S evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\22_resources.js.vir" sh=C0B915618574606A23096387B44820AA877C6006 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\236_sl_mobile_m.js.vir" sh=096360E528F6964EAA30051DDE841A0C8E63849B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\246_setup.js.vir" sh=57F2136CD86B69E88017E3346CF16BE0C2A51A2B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\28_initializer.js.vir" sh=2EBC101982648313FFE20510A6C6754410F9D89B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.M evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\47_resources_background.js.vir" sh=148CA44D7C0A3E2F5E2A3D38EFC5D999D2701A84 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.P evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\64_appApiMessage.js.vir" sh=202C1899F9B92EF86E40333C701C620BB16CE1F2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\91_monetizationLoader.js.js.vir" sh=82375A6153BE4F1F134E2E0A6077B67597E7F382 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\93_superfish_no_coupons_m.js.vir" sh=464FD963183897BB987030A2097E759ED613A79C ft=1 fh=d1e1cc77b7d23939 vn="Variante von Win32/Thinknice.B evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\SupTab\SupTab.dll.vir" sh=476063885747EDD774A6B8CB2790703503A75A55 ft=1 fh=d7bb79193adaee2e vn="Win32/Systweak.G evtl. unerwünschte Anwendung (gelöscht)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Systweak\ssd\SSDPTstub.exe.vir" sh=74C1E18392B94E3ECB392A1AD14ED9945F117F19 ft=1 fh=3cf3838aeba011dd vn="Variante von Win32/Adware.CognosAds.A Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\files\ftkfkhefogstfbacoebwqgcursnfzbej\inst\Bootstrapper\uninstall.exe" sh=02E1E58BE25BC656589C5DC5AF311B9F2E5EA6E2 ft=1 fh=a94b1d23b6435b2a vn="Win32/Toolbar.Iminent.G evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\files\rerrmpqdrnzrbdgwhcdpfixfpxdbszdf\IMGUpdater.exe" sh=C75525227535F3271E4FBAF2314B654029E705A0 ft=1 fh=74ab7846da60b139 vn="Variante von Win32/Toolbar.Iminent.J evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\files\tgradrdpadjqcvrntqzkrdfzyhwugxku\Umbrella260.exe" sh=552464E3A61B57248E7ABBB9E78047923105E150 ft=1 fh=8e19f37ab9b5e3fe vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung (gelöscht)" ac=C fn="C:\Users\Michiyo\Documents\PDFCreator-2_3_0-Setup.exe" Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 29-08-2016 durchgeführt von Michiyo (Administrator) auf MICHIYO-PC (30-08-2016 15:38:08) Gestartet von C:\Users\Michiyo\Desktop Geladene Profile: Michiyo (Verfügbare Profile: Michiyo & DefaultAppPool) Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) () C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Microsoft Corporation) C:\Windows\System32\mqsvc.exe (Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe () C:\Windows\System32\atwtusb.exe (AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.4\ToolbarUpdater.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe () C:\Program Files\CyberLink\Shared files\RichVideo64.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (© pdfforge GmbH.) C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe () C:\Windows\System32\atwtusb.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe () C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe (HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () C:\Windows\System32\AtwtusbIcon.exe (Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe () C:\Program Files (x86)\AVG Web TuneUp\vprot.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe (Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1608.2213.0_x64__8wekyb3d8bbwe\Calculator.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor) HKLM\...\Run: [AtwtusbIcon] => C:\WINDOWS\system32\AtwtusbIcon.exe [3593728 2012-09-10] () HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [6613896 2016-06-24] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Live! Central] => C:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central\CTLVCentral.exe [438381 2009-06-05] (Creative Technology Ltd.) HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [917112 2015-10-08] (BlueStack Systems, Inc.) HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [56080 2015-12-12] (Raptr, Inc) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [204560 2016-08-18] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [SunJavaUpdateSched] => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [6709008 2016-07-28] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2178120 2016-08-30] () HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\Run: [AnyDVD] => C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe [4886136 2011-03-07] (SlySoft, Inc.) HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd) HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64" HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64" ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\buShell.dll Keine Datei ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\buShell.dll Keine Datei ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\buShell.dll Keine Datei ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] () ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] () ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] () ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] () ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] () ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2016-08-30] ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) Startup: C:\Users\Michiyo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IML.lnk [2016-08-30] ShortcutTarget: IML.lnk -> (Keine Datei) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{86916325-c1ab-4869-a177-2fbf32564dab}: [DhcpNameServer] 192.168.2.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130859355493535952&GUID=9EC4EDB1-5F00-4682-8EB6-D81E4A9B890C HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com/?cid={761D6F70-819C-43ED-AF67-A4EE55D0A33D}&mid=d34487a0d9ba47ccb850a59d73d1869f-04f99b185149844fb42273afbf5d96e39a056fc0&lang=de&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-08-27 10:34:14&v=4.3.4.122&pid=wtu&sg=&sap=hp HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.hyrican.de HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.hyrican.de HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?pc=UE01&ocid=UE01DHP SearchScopes: HKLM -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox SearchScopes: HKLM-x32 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM-x32 -> {F66BFC25-B41D-4A17-A66C-2D338F452675} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox SearchScopes: HKU\.DEFAULT -> {e4a1ece8-ed94-4f93-80ea-75f978ceaf24} URL = SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={761D6F70-819C-43ED-AF67-A4EE55D0A33D}&mid=d34487a0d9ba47ccb850a59d73d1869f-04f99b185149844fb42273afbf5d96e39a056fc0&lang=de&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-08-27 10:34:14&v=4.3.4.122&pid=wtu&sg=&sap=dsp&q={searchTerms} SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {6ECB41EC-A7AC-4224-8D1E-44C44B4639E2} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8 SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={761D6F70-819C-43ED-AF67-A4EE55D0A33D}&mid=d34487a0d9ba47ccb850a59d73d1869f-04f99b185149844fb42273afbf5d96e39a056fc0&lang=de&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-08-27 10:34:14&v=4.3.4.122&pid=wtu&sg=&sap=dsp&q={searchTerms} SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {AEEDE363-46A7-4B7A-9092-EEDB31E079DE} URL = hxxps://www.google.com/search?q={searchTerms} SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {C2EE27DF-5090-4D18-8930-B7403474FB06} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8 SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {C8ABDA6A-F499-4674-8C39-FDE573ABBEDE} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8 SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {D16EFC19-2554-4D94-B6A1-7B098BFCBD25} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8 SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {e4a1ece8-ed94-4f93-80ea-75f978ceaf24} URL = BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\coIEPlg.dll => Keine Datei BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_102\bin\ssv.dll [2016-08-27] (Oracle Corporation) BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.3.4.122\AVG Web TuneUp.dll [2016-08-30] (AVG) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_102\bin\jp2ssv.dll [2016-08-27] (Oracle Corporation) BHO-x32: PDF Architect 4 Helper -> {38279E1A-7019-40C1-B579-E99DFB3312E8} -> C:\Program Files (x86)\PDF Architect 4\creator-ie-helper.dll [2016-01-15] (pdfforge GmbH) BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\coIEPlg.dll => Keine Datei BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> Keine Datei BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\ssv.dll [2016-08-27] (Oracle Corporation) BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.3.4.122\AVG Web TuneUp.dll [2016-08-30] (AVG) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\jp2ssv.dll [2016-08-27] (Oracle Corporation) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\coIEPlg.dll Keine Datei Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\coIEPlg.dll Keine Datei Toolbar: HKLM-x32 - PDF Architect 4 Toolbar - {23FD9C33-A9E1-48A1-8404-E5925CF1C8E1} - C:\Program Files (x86)\PDF Architect 4\creator-ie-plugin.dll [2016-01-15] (pdfforge GmbH) IE Session Restore: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> ist aktiviert. Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - Keine Datei Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - Keine Datei Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation) StartMenuInternet: IEXPLORE.EXE - iexplore.exe Edge: ====== Edge HomeButtonPage: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> hxxp://go.web.de/tb/ie_startpage FireFox: ======== FF ProfilePath: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default FF SelectedSearchEngine: Yahoo! Powered FF Homepage: hxxps://www.malwarebytes.org/restorebrowser/_lvrms_16_27¶m1=1¶m2=f%3D1%26b%3DFirefox%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StDtAzztA0DyEzztBtGyB0D0B0CtGzyyE0BtBtGtC0EyD0CtGyCtD0BtAyD0ByEyCyBtCzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtA0CzztB0ByE0FtGyCyDyCyBtGyEtBtB0FtGzz0C0A0AtGtCyB0ByC0F0C0B0E0EtCyBzz2QtN0A0LzuyE%26cr%3D1771641347%26a%3Dwncy_lvrms_16_27%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome FF Keyword.URL: user_pref("keyword.URL", true); FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-08-27] () FF Plugin: @java.com/DTPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\dtplugin\npDeployJava1.dll [2016-08-27] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\plugin2\npjp2.dll [2016-08-27] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-08-27] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw.dll [2016-02-19] (Adobe Systems, Inc.) FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.3.4\\npsitesafety.dll [Keine Datei] FF Plugin-x32: @java.com/DTPlugin,version=11.102.2 -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\dtplugin\npDeployJava1.dll [2016-08-27] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.102.2 -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\plugin2\npjp2.dll [2016-08-27] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-1262878346-956153297-733536101-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Michiyo\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-08] (Unity Technologies ApS) FF user.js: detected! => C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\user.js [2015-03-18] FF SearchPlugin: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\searchplugins\avg-secure-search.xml [2016-08-30] FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2016-08-30] FF Extension: (AVG Web TuneUp) - C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\Extensions\avg@toolbar.xpi [2016-08-30] FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon FF Extension: (Norton Identity Safe) - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon [2016-08-12] FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension FF Extension: (PDF Architect 4 Creator) - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2016-03-06] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon StartMenuInternet: FIREFOX.EXE - firefox.exe Chrome: ======= CHR Profile: C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Unblock embedded Youtube videos) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aajjpnimaghinaladfeongfnojpooegf [2016-03-11] CHR Extension: (Google Drive) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22] CHR Extension: (YouTube) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (Google-Suche) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27] CHR Extension: (Google Docs Offline) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15] CHR Extension: (Proxmate) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifalmiidchkjjmkkbkoaibpmoeichmki [2016-08-25] CHR Extension: (Norton Identity Safe) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2015-03-18] CHR Extension: (Skype) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-08-12] CHR Extension: (Pink Lake) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkikaplkcnkehkocaeaddjiicklloajh [2016-03-12] CHR Extension: (TumTaster) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nanfbkacbckngfcklahdgfagjlghfbgm [2016-03-11] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-01] CHR Extension: (Google Mail) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29] CHR Extension: (Chrome Media Router) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-30] CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\Exts\Chrome.crx <nicht gefunden> CHR HKLM\...\Chrome\Extension: [edlomhpkphiongfmegcmaamkbadecnkd] - hxxps://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\Exts\Chrome.crx <nicht gefunden> CHR HKLM-x32\...\Chrome\Extension: [edlomhpkphiongfmegcmaamkbadecnkd] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx Opera: ======= OPR Extension: (YouTube Unblocker) - C:\Users\Michiyo\AppData\Roaming\Opera Software\Opera Stable\Extensions\npnkeeiehehhefofiekoflfedgehcdhl [2016-05-10] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [138752 2016-06-24] () [Datei ist nicht signiert] S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [674552 2016-07-28] (AVG Technologies CZ, s.r.o.) R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5267456 2016-07-28] (AVG Technologies CZ, s.r.o.) R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1097488 2016-08-18] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [760024 2016-07-28] (AVG Technologies CZ, s.r.o.) S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [437880 2015-10-08] (BlueStack Systems, Inc.) S3 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [417400 2015-10-08] (BlueStack Systems, Inc.) S3 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [855672 2015-10-08] (BlueStack Systems, Inc.) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation) R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [382312 2015-11-17] (Digital Wave Ltd.) R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29760 2016-07-04] (HP Inc.) S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [Datei ist nicht signiert] S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert] R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes) R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert] S2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\22.7.1.32\NIS.exe [289080 2016-08-16] (Symantec Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119688 2016-03-29] (Electronic Arts) S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2417376 2016-01-15] (pdfforge GmbH) S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2016-01-15] (pdfforge GmbH) R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2016-01-15] (pdfforge GmbH) R2 PDF Architect 4 Manager; C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [959248 2015-10-05] (© pdfforge GmbH.) R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert] R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390672 2012-12-21] () S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert] R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5611280 2015-08-07] (TeamViewer GmbH) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [4878096 2016-08-19] (AVG Technologies CZ, s.r.o.) S3 vmicvss; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation) R2 vToolbarUpdater40.3.4; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.4\ToolbarUpdater.exe [1347144 2016-08-30] (AVG Secure Search) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-07-01] (Microsoft Corporation) R2 WTService; C:\WINDOWS\system32\atwtusb.exe [581120 2012-10-19] () [Datei ist nicht signiert] R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [980040 2016-08-30] () ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 amdacpksd; C:\WINDOWS\system32\drivers\amdacpksd.sys [305392 2016-01-22] (Advanced Micro Devices) S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [40720 2015-07-28] (Advanced Micro Devices, Inc.) S3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [125512 2010-12-01] (SlySoft, Inc.) S3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [125512 2010-12-01] (SlySoft, Inc.) R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices) R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-09-18] (Advanced Micro Devices) S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [21632 2016-01-07] (AVG Technologies CZ, s.r.o.) R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [163072 2016-05-13] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [314112 2016-06-30] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [261376 2016-06-01] (AVG Technologies CZ, s.r.o.) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [260352 2016-06-01] (AVG Technologies CZ, s.r.o.) R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.) R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [261888 2016-07-19] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [52992 2016-06-01] (AVG Technologies CZ, s.r.o.) R0 avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [77056 2016-06-20] (AVG Technologies CZ, s.r.o.) R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [313088 2016-07-20] (AVG Technologies CZ, s.r.o.) R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\BASHDefs\20150521.001\BHDrvx64.sys [1640152 2015-06-04] (Symantec Corporation) R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [146040 2015-10-08] (BlueStack Systems) R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1607010.020\ccSetx64.sys [174328 2016-06-02] (Symantec Corporation) R1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink) S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2015-08-07] (Windows (R) Win 7 DDK provider) S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2015-08-07] (Windows (R) Win 7 DDK provider) R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-11-10] (Disc Soft Ltd) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [498512 2015-06-16] (Symantec Corporation) S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [153936 2015-06-16] (Symantec Corporation) S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [637360 2011-12-19] (Intel Corporation) R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\IPSDefs\20150519.100\IDSVia64.sys [684248 2015-06-04] (Symantec Corporation) S3 INIDVD; C:\Windows\System32\drivers\inidvd.sys [19488 2012-11-02] (Initio Corporation) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-08-30] (Malwarebytes) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation) R3 moufiltr; C:\Windows\System32\drivers\moufiltr.sys [7680 2009-03-08] (Windows (R) Codename Longhorn DDK provider) S3 PciIsaSerial; C:\Windows\system32\drivers\PciIsaSerial.sys [68608 2008-12-19] (Windows (R) Codename Longhorn DDK provider) S3 PciPPorts; C:\Windows\system32\drivers\PciPPorts.sys [96768 2009-07-23] () S3 PciSPorts; C:\Windows\system32\drivers\PciSPorts.sys [122880 2008-12-19] () R3 RLDesignVirtualAudioCableWdm; C:\Windows\system32\DRIVERS\livecamv.sys [49664 2007-02-05] () S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1607010.020\SRTSP64.SYS [773360 2016-08-10] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1607010.020\SRTSPX64.SYS [48888 2016-06-02] (Symantec Corporation) R0 SymEFASI; C:\Windows\System32\drivers\NISx64\1607010.020\SYMEFASI64.SYS [1627352 2016-06-02] (Symantec Corporation) S4 SymELAM; C:\Windows\system32\drivers\NISx64\1607010.020\SymELAM.sys [24192 2015-07-11] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [101112 2016-08-11] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\NISx64\1607010.020\Ironx64.SYS [291056 2016-06-02] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1607010.020\SYMNETS.SYS [567536 2016-06-02] (Symantec Corporation) S3 TabletFilter; C:\Windows\System32\drivers\TabletFilter.sys [7680 2012-08-15] (Windows (R) Win 7 DDK provider) R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [32304 2016-02-15] (AVG Netherlands B.V.) R3 V0540Dev; C:\Windows\system32\DRIVERS\V0540Vid.sys [321376 2009-06-15] (Creative Technology Ltd.) R3 vhidmini; C:\Windows\System32\drivers\walvhid.sys [7552 2009-08-26] (Windows (R) Win 7 DDK provider) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) U3 idsvc; kein ImagePath S3 NAVENG; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\VirusDefs\20150714.024\ENG64.SYS [X] S3 NAVEX15; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\VirusDefs\20150714.024\EX64.SYS [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-08-30 15:38 - 2016-08-30 15:38 - 00036645 _____ C:\Users\Michiyo\Desktop\FRST.txt 2016-08-30 15:37 - 2016-08-30 15:37 - 00000000 ____D C:\Users\Michiyo\Desktop\FRST-OlderVersion 2016-08-30 13:18 - 2016-08-30 13:18 - 00000000 ____D C:\Program Files (x86)\ESET 2016-08-30 12:03 - 2016-08-30 14:49 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2016-08-30 12:03 - 2016-08-30 12:50 - 00001172 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2016-08-30 12:03 - 2016-08-30 12:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2016-08-30 12:03 - 2016-08-30 12:03 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-08-30 12:03 - 2016-08-30 12:03 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-08-30 12:03 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2016-08-30 12:03 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2016-08-30 12:03 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2016-08-30 11:06 - 2016-08-30 11:13 - 22851472 _____ (Malwarebytes ) C:\Users\Michiyo\Desktop\mbam-setup-2.2.1.1043.exe 2016-08-29 21:16 - 2016-08-29 21:24 - 00000000 ____D C:\Users\Michiyo\Desktop\Neuer Ordner 2016-08-29 21:09 - 2016-08-29 21:09 - 00000000 ____D C:\Users\Michiyo\Desktop\Mandala 2016-08-29 17:16 - 2016-08-30 10:12 - 00000000 ____D C:\ProgramData\AVG Web TuneUp 2016-08-29 17:16 - 2016-08-30 10:12 - 00000000 ____D C:\Program Files (x86)\AVG Web TuneUp 2016-08-29 17:16 - 2016-08-29 17:16 - 00000000 ____D C:\Users\Michiyo\AppData\Local\AVG Web TuneUp 2016-08-29 17:16 - 2016-08-29 17:16 - 00000000 ____D C:\Program Files\Common Files\AVG Secure Search 2016-08-29 17:16 - 2016-08-29 17:16 - 00000000 ____D C:\Program Files\AVG Web TuneUp 2016-08-29 17:07 - 2016-08-29 17:08 - 03826240 _____ C:\Users\Michiyo\Desktop\AdwCleaner_6.010.exe 2016-08-29 10:38 - 2016-08-29 10:47 - 00000000 ____D C:\Users\Michiyo\Desktop\HIGH & LOW THE LIVE 2016-08-29 10:17 - 2016-08-30 15:38 - 00000000 ____D C:\FRST 2016-08-29 10:17 - 2016-08-30 15:37 - 02397696 _____ (Farbar) C:\Users\Michiyo\Desktop\FRST64.exe 2016-08-28 01:14 - 2016-08-28 17:28 - 2613934989 _____ C:\Users\Michiyo\Downloads\[SOFCJ-Raws] Dragon Ball Z Resurrection F – Future Trunks Special Edition Extended (SUT 1280x720 x264 10bit AAC).mp4 2016-08-27 12:49 - 2016-08-27 12:49 - 03143504 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Michiyo\Documents\AVG_Protection_Free_1606.exe 2016-08-27 11:18 - 2016-08-27 12:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2016-08-27 11:18 - 2016-08-27 11:18 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\AVG 2016-08-27 11:17 - 2016-08-27 11:17 - 00000000 ___HD C:\$AVG 2016-08-27 11:16 - 2016-08-30 12:39 - 00000000 ____D C:\ProgramData\MFAData 2016-08-27 11:16 - 2016-08-27 11:16 - 00000000 ____D C:\Users\Michiyo\AppData\Local\MFAData 2016-08-27 11:00 - 2016-08-30 14:54 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2016-08-27 11:00 - 2016-08-27 11:00 - 01198049 _____ C:\WINDOWS\unins000.exe 2016-08-27 11:00 - 2016-08-27 11:00 - 00010826 _____ C:\WINDOWS\unins000.dat 2016-08-27 11:00 - 2016-08-27 11:00 - 00003860 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2016-08-27 11:00 - 2016-08-27 11:00 - 00001409 _____ C:\AiOLog.txt 2016-08-27 11:00 - 2016-08-27 11:00 - 00000000 ____D C:\WINDOWS\SysWOW64\Adobe 2016-08-27 11:00 - 2016-01-28 18:44 - 01261568 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\libeay32.dll 2016-08-27 11:00 - 2016-01-28 18:44 - 00297472 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\ssleay32.dll 2016-08-27 11:00 - 2016-01-28 18:44 - 00297472 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\libssl32.dll 2016-08-27 11:00 - 2015-07-10 10:51 - 00456008 _____ (AutoIt Team) C:\WINDOWS\system32\autoitx3.dll 2016-08-27 11:00 - 2015-07-08 09:29 - 03477818 _____ (Red Hat) C:\WINDOWS\system32\cygwin1.dll 2016-08-27 11:00 - 2014-01-31 02:14 - 01055676 _____ (Free Software Foundation) C:\WINDOWS\system32\libiconv2.dll 2016-08-27 11:00 - 2014-01-25 13:30 - 00131072 _____ (Sereby Corporation) C:\WINDOWS\system32\AiORuntimes.dll 2016-08-27 11:00 - 2013-12-23 14:44 - 00163480 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 01070232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscomctl.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00660120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscomct2.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00617896 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00444328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshflxgd.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00416408 _____ (Microsoft Corporation ) C:\WINDOWS\system32\comct332.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00279192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdatgrd.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00259736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msflxgrd.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00253080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdatlst.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00222360 _____ (Microsoft Corporation) C:\WINDOWS\system32\tabctl32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00219288 _____ (Microsoft Corporation) C:\WINDOWS\system32\richtx32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00218776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dblist32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00212112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mci32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00179352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmask32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00170920 _____ (Microsoft Corporation) C:\WINDOWS\system32\comct232.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00131728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinet.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00130712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msstdfmt.dll 2016-08-27 11:00 - 2013-12-20 00:48 - 00127640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswinsck.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00119960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscomm32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00108696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msstkprp.dll 2016-08-27 11:00 - 2013-12-20 00:48 - 00104088 _____ (Microsoft Corporation) C:\WINDOWS\system32\picclp32.ocx 2016-08-27 11:00 - 2013-12-20 00:48 - 00084624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysinfo.ocx 2016-08-27 11:00 - 2012-06-14 14:36 - 00107520 _____ C:\WINDOWS\system32\zlib1.dll 2016-08-27 11:00 - 2012-04-03 16:11 - 00138752 _____ C:\WINDOWS\system32\libpng15.dll 2016-08-27 11:00 - 2011-10-12 03:09 - 04033440 _____ (Intel Corporation) C:\WINDOWS\system32\libmmd.dll 2016-08-27 11:00 - 2011-10-01 08:16 - 00445016 _____ (Creative Labs) C:\WINDOWS\system32\wrap_oal.dll 2016-08-27 11:00 - 2011-10-01 08:16 - 00109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\system32\openal32.dll 2016-08-27 11:00 - 2011-01-12 13:36 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71u.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71DEU.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ITA.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71FRA.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ESP.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ENU.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71KOR.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71JPN.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71CHT.dll 2016-08-27 11:00 - 2011-01-12 13:25 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71CHS.dll 2016-08-27 11:00 - 2011-01-12 13:19 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71.dll 2016-08-27 11:00 - 2011-01-12 12:53 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl71.dll 2016-08-27 11:00 - 2010-06-27 17:44 - 00053248 _____ (Adobe Systems, Incorporated) C:\WINDOWS\system\plugin.dll 2016-08-27 11:00 - 2010-03-18 20:21 - 00799568 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdia100.dll 2016-08-27 11:00 - 2008-08-26 06:40 - 00162304 _____ C:\WINDOWS\system32\libpng13.dll 2016-08-27 11:00 - 2007-02-01 22:13 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp71.dll 2016-08-27 11:00 - 2007-02-01 19:11 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr71.dll 2016-08-27 11:00 - 2007-01-30 22:04 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr70.dll 2016-08-27 11:00 - 2006-08-26 00:28 - 01017344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70u.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ITA.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70FRA.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ESP.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70DEU.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ENU.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70KOR.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70JPN.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70CHT.dll 2016-08-27 11:00 - 2006-08-26 00:15 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70CHS.dll 2016-08-27 11:00 - 2006-08-26 00:07 - 01024000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70.dll 2016-08-27 11:00 - 2006-08-25 23:17 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl70.dll 2016-08-27 11:00 - 2005-05-06 13:52 - 00103424 _____ (GNU <www.gnu.org>) C:\WINDOWS\system32\libintl3.dll 2016-08-27 11:00 - 2005-01-20 19:25 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvci70.dll 2016-08-27 11:00 - 2002-01-05 05:40 - 00487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp70.dll 2016-08-27 11:00 - 1996-01-12 03:00 - 00935632 _____ (Microsoft Corporation) C:\WINDOWS\system\vb40016.dll 2016-08-27 11:00 - 1996-01-12 03:00 - 00722192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vb40032.dll 2016-08-27 11:00 - 1994-11-17 13:00 - 00210944 _____ C:\WINDOWS\system\msvcrt10.dll 2016-08-27 11:00 - 1993-05-11 19:00 - 00398416 _____ (Microsoft Corporation) C:\WINDOWS\system\vbrun300.dll 2016-08-27 11:00 - 1992-10-21 00:00 - 00356992 _____ (Microsoft Corporation) C:\WINDOWS\system\vbrun200.dll 2016-08-27 11:00 - 1991-05-10 01:00 - 00271264 _____ C:\WINDOWS\system\vbrun100.dll 2016-08-27 10:57 - 2016-08-27 10:57 - 00110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll 2016-08-27 10:56 - 2016-08-27 10:56 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Sun 2016-08-27 10:56 - 2016-08-27 10:56 - 00000000 ____D C:\ProgramData\Oracle 2016-08-27 10:56 - 2016-08-27 10:56 - 00000000 ____D C:\Program Files\Java 2016-08-27 10:53 - 2016-08-27 11:01 - 00632904 _____ (O&O Software GmbH) C:\Users\Michiyo\Documents\OOSU10.exe 2016-08-27 10:49 - 2016-08-27 10:49 - 00203114 _____ C:\Users\Michiyo\Documents\OOSU10.zip 2016-08-27 10:48 - 2016-08-27 10:53 - 377130076 _____ (Sereby Corporation) C:\Users\Michiyo\Documents\aio-runtimes_v2.3.8.exe 2016-08-26 16:16 - 2016-08-26 16:16 - 00000000 ____D C:\$SysReset 2016-08-26 15:34 - 2016-08-26 15:34 - 00000017 _____ C:\Users\Michiyo\AppData\Local\resmon.resmoncfg 2016-08-26 13:18 - 2016-08-26 15:24 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job 2016-08-26 11:10 - 2016-08-26 11:10 - 00003340 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task 2016-08-26 10:29 - 2016-08-26 10:29 - 00003404 _____ C:\WINDOWS\System32\Tasks\Norton WSC Integration 2016-08-26 10:28 - 2016-08-26 10:28 - 00280764 _____ C:\WINDOWS\Minidump\082616-97187-01.dmp 2016-08-23 09:34 - 2012-01-01 17:18 - 00000000 ____D C:\Users\Michiyo\Desktop\[Yaoi Fangirl] Lent - Death Note Doujin 2016-08-22 17:22 - 2016-08-22 18:07 - 00327998 _____ C:\Users\Michiyo\Documents\Digimon Adventure - Leb deine Träume.pds 2016-08-20 00:00 - 2016-08-20 00:00 - 79449510 _____ C:\Users\Michiyo\Desktop\『HiGH&LOW THE MOVIE』Best Action Scenes Special Trailer.mp4 2016-08-13 10:23 - 2016-08-13 10:26 - 00000000 ____D C:\Users\Michiyo\Documents\Die Sims 4 2016-08-12 18:08 - 2016-08-12 18:11 - 42013312 _____ (Skype Technologies S.A.) C:\Users\Michiyo\Documents\SkypeSetupFull.exe 2016-08-12 16:58 - 2016-08-26 10:27 - 739168023 _____ C:\WINDOWS\MEMORY.DMP 2016-08-12 11:13 - 2016-08-13 19:24 - 00000000 ____D C:\Users\Michiyo\Desktop\Die Sims 4 2016-08-12 09:02 - 2016-08-12 09:05 - 00002503 _____ C:\Users\Michiyo\Documents\Norton Internet Security.lnk 2016-08-12 01:07 - 2016-08-12 01:07 - 08892696 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 08738920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 07115928 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00479368 _____ C:\WINDOWS\system32\amdmiracast.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00164280 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00159088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00154920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00138688 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00138176 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00123120 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00123104 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00105344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll 2016-08-12 01:07 - 2016-08-12 01:07 - 00105344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 48819200 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 38266368 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 32555512 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 27489280 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl12cl64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 26639360 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 21641216 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl12cl.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 15729152 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 14320128 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 08830456 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdvlk64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 08627704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmantle64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 07076352 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdvlk32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 06956032 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmantle32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 02376704 _____ C:\WINDOWS\system32\amdoclvp9lib64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 02286584 _____ C:\WINDOWS\SysWOW64\amdoclvp9lib32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 02147328 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 01837568 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00991232 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00991232 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00883192 _____ (AMD) C:\WINDOWS\system32\coinst_16.30.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00751616 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00627192 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00459776 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00402944 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe 2016-08-12 01:06 - 2016-08-12 01:06 - 00350208 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODE.exe 2016-08-12 01:06 - 2016-08-12 01:06 - 00292352 _____ C:\WINDOWS\system32\dgtrayicon.exe 2016-08-12 01:06 - 2016-08-12 01:06 - 00287744 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00275968 _____ C:\WINDOWS\system32\GameManager64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00270336 _____ C:\WINDOWS\system32\clinfo.exe 2016-08-12 01:06 - 2016-08-12 01:06 - 00268792 _____ C:\WINDOWS\system32\hsa-thunk64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00249336 _____ C:\WINDOWS\system32\amdgfxinfo64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00241152 _____ C:\WINDOWS\SysWOW64\GameManager32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00234496 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00231424 _____ C:\WINDOWS\system32\atieah64.exe 2016-08-12 01:06 - 2016-08-12 01:06 - 00222208 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00209408 _____ C:\WINDOWS\SysWOW64\atieah32.exe 2016-08-12 01:06 - 2016-08-12 01:06 - 00202744 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00201728 _____ C:\WINDOWS\system32\amdhdl64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00181760 _____ C:\WINDOWS\SysWOW64\amdhdl32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00176640 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00159736 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00137208 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00135168 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00130560 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00123896 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00118784 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00113664 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00111616 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00109568 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00108544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00108544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00104448 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00083960 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00079864 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00073216 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00069632 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00068608 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODCLI.exe 2016-08-12 01:06 - 2016-08-12 01:06 - 00068096 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00067584 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00066560 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00060920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00055800 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmmcl.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll 2016-08-12 01:06 - 2016-08-12 01:06 - 00021496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll 2016-08-11 14:38 - 2016-08-11 14:38 - 00000000 ____D C:\Users\Michiyo\Documents\Electronic Arts 2016-08-11 14:26 - 2016-08-30 13:13 - 00002187 _____ C:\Users\Michiyo\Desktop\Die Sims 4 Digital Deluxe Edition 64 Bit.lnk 2016-08-11 14:07 - 2016-08-27 12:15 - 00000000 ____D C:\Program Files (x86)\Die Sims 4 2016-08-11 13:58 - 2016-08-11 14:02 - 00000000 ____D C:\Users\Michiyo\Downloads\Die Sims 4 Gaumenfreuden DLC Incl. Update 14 MULTi2 2016-08-11 12:39 - 2016-08-03 12:36 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2016-08-11 12:39 - 2016-08-03 12:30 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2016-08-11 12:39 - 2016-08-03 12:23 - 00693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2016-08-11 12:39 - 2016-08-03 12:23 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2016-08-11 12:39 - 2016-08-03 12:22 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2016-08-11 12:39 - 2016-08-03 12:22 - 00465248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2016-08-11 12:39 - 2016-08-03 12:22 - 00331616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2016-08-11 12:39 - 2016-08-03 12:21 - 03675512 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2016-08-11 12:39 - 2016-08-03 12:21 - 00566112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2016-08-11 12:39 - 2016-08-03 12:20 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2016-08-11 12:39 - 2016-08-03 12:20 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll 2016-08-11 12:39 - 2016-08-03 12:19 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2016-08-11 12:39 - 2016-08-03 12:19 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2016-08-11 12:39 - 2016-08-03 12:13 - 01988448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2016-08-11 12:39 - 2016-08-03 12:13 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2016-08-11 12:39 - 2016-08-03 12:13 - 00393056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2016-08-11 12:39 - 2016-08-03 11:51 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2016-08-11 12:39 - 2016-08-03 11:44 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2016-08-11 12:39 - 2016-08-03 11:44 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2016-08-11 12:39 - 2016-08-03 11:43 - 16985088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2016-08-11 12:39 - 2016-08-03 11:40 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2016-08-11 12:39 - 2016-08-03 11:40 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll 2016-08-11 12:39 - 2016-08-03 11:39 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2016-08-11 12:39 - 2016-08-03 11:38 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2016-08-11 12:39 - 2016-08-03 11:36 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2016-08-11 12:39 - 2016-08-03 11:36 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2016-08-11 12:39 - 2016-08-03 11:35 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll 2016-08-11 12:39 - 2016-08-03 11:31 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe 2016-08-11 12:39 - 2016-08-03 11:30 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2016-08-11 12:39 - 2016-08-03 11:29 - 14252544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2016-08-11 12:39 - 2016-08-03 11:29 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe 2016-08-11 12:39 - 2016-08-03 11:29 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2016-08-11 12:39 - 2016-08-03 11:28 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2016-08-11 12:39 - 2016-08-03 11:27 - 07536640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2016-08-11 12:39 - 2016-08-03 11:27 - 01717760 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2016-08-11 12:39 - 2016-08-03 11:18 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2016-08-11 12:39 - 2016-08-03 11:18 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2016-08-11 12:39 - 2016-08-03 11:16 - 05123072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2016-08-11 12:39 - 2016-08-03 11:16 - 03589120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2016-08-11 12:39 - 2016-08-03 11:16 - 01732096 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-08-11 12:39 - 2016-08-03 11:14 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll 2016-08-11 12:39 - 2016-08-03 11:13 - 03025920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2016-08-11 12:39 - 2016-08-03 11:13 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2016-08-11 12:39 - 2016-08-03 11:11 - 04171264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2016-08-11 12:39 - 2016-08-03 07:52 - 00034088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll 2016-08-11 12:39 - 2016-08-03 07:34 - 00501592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2016-08-11 12:39 - 2016-08-03 07:34 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2016-08-11 12:39 - 2016-08-03 07:33 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll 2016-08-11 12:39 - 2016-08-03 07:31 - 02921368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2016-08-11 12:39 - 2016-08-03 07:31 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2016-08-11 12:39 - 2016-08-03 07:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2016-08-11 12:39 - 2016-08-03 06:57 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdlrecover.exe 2016-08-11 12:39 - 2016-08-03 06:48 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll 2016-08-11 12:39 - 2016-08-03 06:47 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2016-08-11 12:39 - 2016-08-03 06:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll 2016-08-11 12:39 - 2016-08-03 06:44 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll 2016-08-11 12:39 - 2016-08-03 06:42 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll 2016-08-11 12:39 - 2016-08-03 06:37 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2016-08-11 12:39 - 2016-08-03 06:35 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe 2016-08-11 12:39 - 2016-08-03 06:34 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2016-08-11 12:39 - 2016-08-03 06:32 - 12585984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2016-08-11 12:39 - 2016-08-03 06:32 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2016-08-11 12:39 - 2016-08-03 06:32 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2016-08-11 12:39 - 2016-08-03 06:31 - 06743040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2016-08-11 12:39 - 2016-08-03 06:31 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2016-08-11 12:39 - 2016-08-03 06:25 - 04078080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2016-08-11 12:39 - 2016-08-03 06:19 - 02180096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll 2016-08-11 12:38 - 2016-08-03 13:14 - 01505984 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2016-08-11 12:38 - 2016-08-03 13:14 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2016-08-11 12:38 - 2016-08-03 13:14 - 00050368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2016-08-11 12:38 - 2016-08-03 12:36 - 07469408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-08-11 12:38 - 2016-08-03 12:36 - 00037744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll 2016-08-11 12:38 - 2016-08-03 12:22 - 01322760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2016-08-11 12:38 - 2016-08-03 12:22 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll 2016-08-11 12:38 - 2016-08-03 12:21 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2016-08-11 12:38 - 2016-08-03 12:21 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe 2016-08-11 12:38 - 2016-08-03 12:11 - 00422744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2016-08-11 12:38 - 2016-08-03 11:51 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe 2016-08-11 12:38 - 2016-08-03 11:46 - 22384128 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-08-11 12:38 - 2016-08-03 11:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll 2016-08-11 12:38 - 2016-08-03 11:41 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll 2016-08-11 12:38 - 2016-08-03 11:41 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll 2016-08-11 12:38 - 2016-08-03 11:40 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll 2016-08-11 12:38 - 2016-08-03 11:40 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll 2016-08-11 12:38 - 2016-08-03 11:39 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll 2016-08-11 12:38 - 2016-08-03 11:38 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2016-08-11 12:38 - 2016-08-03 11:37 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll 2016-08-11 12:38 - 2016-08-03 11:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2016-08-11 12:38 - 2016-08-03 11:35 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-08-11 12:38 - 2016-08-03 11:34 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2016-08-11 12:38 - 2016-08-03 11:33 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2016-08-11 12:38 - 2016-08-03 11:33 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll 2016-08-11 12:38 - 2016-08-03 11:31 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll 2016-08-11 12:38 - 2016-08-03 11:31 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2016-08-11 12:38 - 2016-08-03 11:30 - 24613888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-08-11 12:38 - 2016-08-03 11:30 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2016-08-11 12:38 - 2016-08-03 11:29 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2016-08-11 12:38 - 2016-08-03 11:29 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2016-08-11 12:38 - 2016-08-03 11:28 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2016-08-11 12:38 - 2016-08-03 11:28 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2016-08-11 12:38 - 2016-08-03 11:27 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2016-08-11 12:38 - 2016-08-03 11:27 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2016-08-11 12:38 - 2016-08-03 11:20 - 13390336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-08-11 12:38 - 2016-08-03 11:18 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2016-08-11 12:38 - 2016-08-03 11:17 - 02175488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2016-08-11 12:38 - 2016-08-03 11:16 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2016-08-11 12:38 - 2016-08-03 11:15 - 07833088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-08-11 12:38 - 2016-08-03 11:14 - 04895232 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-08-11 12:38 - 2016-08-03 11:12 - 02746368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll 2016-08-11 12:38 - 2016-08-03 07:30 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2016-08-11 12:38 - 2016-08-03 07:30 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2016-08-11 12:38 - 2016-08-03 07:30 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe 2016-08-11 12:38 - 2016-08-03 06:40 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll 2016-08-11 12:38 - 2016-08-03 06:39 - 19351040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-08-11 12:38 - 2016-08-03 06:37 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2016-08-11 12:38 - 2016-08-03 06:35 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2016-08-11 12:38 - 2016-08-03 06:34 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2016-08-11 12:38 - 2016-08-03 06:33 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-08-11 12:38 - 2016-08-03 06:33 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2016-08-11 12:38 - 2016-08-03 06:33 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2016-08-11 12:38 - 2016-08-03 06:32 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2016-08-11 12:38 - 2016-08-03 06:29 - 12133376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-08-11 12:38 - 2016-08-03 06:28 - 03663360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-08-11 12:38 - 2016-08-03 06:25 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2016-08-11 12:38 - 2016-08-03 06:23 - 05660672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-08-11 12:38 - 2016-08-03 06:23 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2016-08-11 12:38 - 2016-08-03 06:22 - 02501120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2016-08-11 12:38 - 2016-08-03 06:22 - 01502208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-08-11 12:38 - 2016-08-03 06:21 - 01708032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll 2016-08-11 11:35 - 2016-08-11 11:46 - 00000000 ____D C:\Users\Michiyo\Downloads\Die Sims 4 Digital Deluxe Edition ReRelease Incl. Update 14 MULTi2 2016-08-08 12:51 - 2016-08-08 12:53 - 1266484522 _____ C:\Users\Michiyo\Documents\PhotoImpact.13.1.rar 2016-08-07 23:09 - 2016-08-07 23:17 - 529480482 _____ C:\Users\Michiyo\Downloads\[Leopard-Raws] Dragon Ball Super - 054 RAW (THK 1280x720 x264 AAC).mp4 2016-08-07 23:09 - 2016-08-07 23:10 - 389781623 _____ C:\Users\Michiyo\Downloads\[Leopard-Raws] Dragon Ball Super - 053 RAW (THK 1280x720 x264 AAC).mp4 2016-08-06 11:03 - 2016-08-06 11:03 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\29030 ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-08-30 15:33 - 2014-11-08 14:42 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Skype 2016-08-30 15:18 - 2014-11-08 19:05 - 00001140 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2016-08-30 13:13 - 2016-06-11 11:49 - 00002039 _____ C:\Users\Michiyo\Desktop\Dragonball Xenoverse.lnk 2016-08-30 12:50 - 2016-03-11 18:39 - 00002549 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp.lnk 2016-08-30 12:50 - 2016-03-06 14:20 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-08-30 12:50 - 2016-01-06 07:26 - 00001080 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR-Registrierung.lnk 2016-08-30 12:50 - 2015-12-21 13:30 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-08-30 12:50 - 2015-08-21 22:45 - 00001119 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk 2016-08-30 12:50 - 2015-03-18 13:45 - 00002008 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader.lnk 2016-08-30 12:50 - 2015-03-18 13:45 - 00001997 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Deinstallationsprogramm.lnk 2016-08-30 12:50 - 2015-03-18 13:45 - 00001931 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk 2016-08-30 12:50 - 2014-11-13 20:23 - 00001026 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk 2016-08-30 12:50 - 2014-11-12 18:24 - 00001166 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2016-08-30 12:50 - 2014-11-11 12:34 - 00001214 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS5.lnk 2016-08-30 12:50 - 2014-11-11 12:34 - 00001126 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS5 (64 Bit).lnk 2016-08-30 12:50 - 2014-11-11 12:32 - 00001269 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS5.lnk 2016-08-30 12:50 - 2014-11-11 12:32 - 00001176 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS5.lnk 2016-08-30 12:50 - 2014-11-11 12:31 - 00001526 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS5.lnk 2016-08-30 12:50 - 2014-11-11 12:31 - 00001360 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS5.lnk 2016-08-30 12:50 - 2014-11-11 12:30 - 00001004 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk 2016-08-30 12:50 - 2014-11-08 19:05 - 00002271 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-08-30 12:50 - 2014-11-08 19:05 - 00002253 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-08-30 12:50 - 2014-11-08 15:41 - 00001127 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2016-08-30 12:50 - 2013-12-16 17:02 - 00001987 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office.lnk 2016-08-30 12:50 - 2013-12-16 17:00 - 00001381 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk 2016-08-30 12:50 - 2013-12-16 17:00 - 00001312 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk 2016-08-30 12:50 - 2013-12-16 16:59 - 00001465 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk 2016-08-30 12:49 - 2016-01-06 07:27 - 00001441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\HP Solution Center.lnk 2016-08-30 12:49 - 2015-12-17 12:05 - 00001250 _____ C:\Users\Michiyo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CNext.lnk 2016-08-30 12:49 - 2015-08-04 11:19 - 00001054 _____ C:\Users\Michiyo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Optionale Features.lnk 2016-08-30 12:49 - 2015-08-04 11:18 - 00002437 _____ C:\Users\Michiyo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-08-30 12:49 - 2014-12-03 10:20 - 00000843 _____ C:\Users\Michiyo\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2016-08-30 12:49 - 2014-11-09 14:25 - 00001018 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk 2016-08-30 12:48 - 2014-11-08 19:05 - 00001136 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2016-08-30 12:38 - 2015-12-21 13:41 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-08-30 12:38 - 2009-07-14 04:34 - 00000555 _____ C:\WINDOWS\win.ini 2016-08-30 12:37 - 2015-12-21 13:18 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin 2016-08-30 12:37 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Web 2016-08-30 12:37 - 2015-10-30 08:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI 2016-08-30 10:19 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-08-30 10:13 - 2016-04-18 09:31 - 00004162 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{AE24DCEB-E6C7-487B-AFB9-782C90AB2FBD} 2016-08-30 00:50 - 2014-11-08 15:38 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\vlc 2016-08-29 23:34 - 2014-11-13 20:23 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Audacity 2016-08-29 23:00 - 2014-11-11 20:14 - 00000132 _____ C:\Users\Michiyo\AppData\Roaming\Adobe PNG Format CS5 Prefs 2016-08-29 22:18 - 2016-04-04 18:53 - 00000000 ____D C:\Users\Michiyo\Desktop\gucken heute 2016-08-29 22:03 - 2014-11-09 15:20 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\AbiSuite 2016-08-29 17:35 - 2016-05-23 10:38 - 00000000 ____D C:\Users\Michiyo\Downloads\One.Piece.E103.Um.8.in.Spiders.Cafe.UNCUT.German.Dubbed.1999.ANiME.DVDRiP.XviD-STARS 2016-08-29 17:16 - 2016-07-05 17:34 - 00000008 __RSH C:\ProgramData\ntuser.pol 2016-08-29 17:16 - 2014-03-13 12:37 - 00000000 ____D C:\AdwCleaner 2016-08-29 17:15 - 2014-11-11 15:00 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Yahoo! 2016-08-28 21:06 - 2014-12-03 10:18 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\uTorrent 2016-08-28 10:47 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps 2016-08-27 13:06 - 2016-06-05 15:29 - 00000000 ____D C:\WINDOWS\Minidump 2016-08-27 13:06 - 2016-01-06 07:27 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\HpUpdate 2016-08-27 12:52 - 2016-03-11 18:36 - 00000000 ____D C:\Users\Michiyo\AppData\Local\AvgSetupLog 2016-08-27 12:34 - 2014-11-12 18:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-08-27 12:31 - 2014-12-26 18:22 - 00000000 ____D C:\Users\Michiyo\Documents\AnyDVD HD 6.7.9.0 Fimal 2016-08-27 11:20 - 2015-10-30 08:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM 2016-08-27 11:18 - 2016-03-11 18:36 - 00000000 ____D C:\Users\Michiyo\AppData\Local\Avg 2016-08-27 11:18 - 2014-11-12 18:13 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\TuneUp Software 2016-08-27 11:17 - 2016-03-11 18:37 - 00000000 ____D C:\ProgramData\Avg 2016-08-27 11:17 - 2016-03-11 18:37 - 00000000 ____D C:\Program Files (x86)\AVG 2016-08-27 11:17 - 2015-10-30 09:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP 2016-08-27 11:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2016-08-27 11:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\System 2016-08-27 10:59 - 2015-12-21 13:18 - 00000000 ____D C:\ProgramData\Package Cache 2016-08-27 10:59 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\Macromed 2016-08-27 10:57 - 2015-03-18 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2016-08-27 10:56 - 2015-03-18 13:45 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2016-08-27 10:55 - 2015-03-18 13:45 - 00000000 ____D C:\Program Files (x86)\Java 2016-08-26 16:47 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-08-26 16:16 - 2014-11-12 17:49 - 00000000 ____D C:\Users\Michiyo\AppData\Local\CrashDumps 2016-08-26 13:17 - 2014-11-25 15:51 - 00000000 ____D C:\WINDOWS\pss 2016-08-26 12:45 - 2016-07-16 17:15 - 00000000 ____D C:\Users\Michiyo\Downloads\Seisei Suruhodo, Aishiteru 2016-08-26 11:25 - 2016-07-16 17:15 - 00000000 ____D C:\Users\Michiyo\Downloads\Ie Uru Onna 2016-08-26 11:10 - 2015-08-04 11:18 - 00000000 ___RD C:\Users\Michiyo\OneDrive 2016-08-26 10:30 - 2013-12-16 20:32 - 00000000 ____D C:\WINDOWS\system32\Drivers\NISx64 2016-08-25 16:56 - 2016-03-30 09:53 - 00000000 ____D C:\WINDOWS\System32\Tasks\Remediation 2016-08-23 07:41 - 2015-05-11 12:42 - 00000000 ____D C:\Users\Michiyo\FanFics - Geschichten 2016-08-21 20:02 - 2016-06-08 11:33 - 00000000 ____D C:\Users\Michiyo\Desktop\Video 2016-08-21 10:27 - 2015-12-21 13:18 - 00000000 ____D C:\ProgramData\AMD 2016-08-19 16:35 - 2016-03-11 18:39 - 00053008 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\TURegOpt.exe 2016-08-16 20:19 - 2016-07-16 17:15 - 00000000 ____D C:\Users\Michiyo\Downloads\Suki na Hito ga Iru Koto 2016-08-14 15:38 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache 2016-08-14 01:43 - 2015-12-21 13:21 - 02086168 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-08-14 01:43 - 2015-10-30 20:35 - 00888008 _____ C:\WINDOWS\system32\perfh007.dat 2016-08-14 01:43 - 2015-10-30 20:35 - 00197092 _____ C:\WINDOWS\system32\perfc007.dat 2016-08-14 01:43 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF 2016-08-13 17:25 - 2015-08-04 11:15 - 00000000 ____D C:\Users\Michiyo\AppData\Local\Packages 2016-08-13 01:07 - 2015-12-21 13:22 - 00000000 ____D C:\Users\Michiyo 2016-08-12 18:11 - 2014-11-08 14:41 - 00000000 ____D C:\ProgramData\Skype 2016-08-12 15:05 - 2014-11-08 19:10 - 00000000 ____D C:\Program Files (x86)\AMD 2016-08-12 15:02 - 2015-12-21 13:17 - 00000000 ____D C:\Program Files\AMD 2016-08-12 14:29 - 2015-07-01 22:23 - 00000000 ____D C:\Users\Michiyo\AppData\Local\JDownloader 2.0 2016-08-12 09:08 - 2015-08-04 11:15 - 00000000 __RHD C:\Users\Public\AccountPictures 2016-08-12 09:05 - 2015-07-15 19:34 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security 2016-08-12 09:01 - 2015-10-30 20:44 - 00000000 ____D C:\Program Files\Windows Journal 2016-08-12 09:01 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2016-08-12 09:01 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-08-12 01:07 - 2016-01-22 14:05 - 07258160 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll 2016-08-12 01:07 - 2016-01-22 14:04 - 00137224 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll 2016-08-12 01:07 - 2015-12-16 21:06 - 09340136 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll 2016-08-12 01:07 - 2015-12-16 21:06 - 09131736 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll 2016-08-12 01:07 - 2015-12-16 21:06 - 01273928 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll 2016-08-12 01:07 - 2015-12-16 21:06 - 00152800 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll 2016-08-12 01:07 - 2015-10-07 17:19 - 10995344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll 2016-08-12 01:07 - 2015-10-07 17:19 - 10317568 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll 2016-08-12 01:07 - 2015-10-07 17:19 - 01547544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll 2016-08-12 01:07 - 2015-10-07 17:19 - 00183952 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll 2016-08-12 01:06 - 2016-01-22 14:00 - 00521728 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe 2016-08-12 01:06 - 2016-01-22 14:00 - 00287232 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe 2016-08-12 01:06 - 2016-01-22 13:59 - 01323008 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll 2016-08-12 01:06 - 2015-10-07 17:19 - 26706432 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys 2016-08-12 01:06 - 2015-10-07 17:19 - 00518656 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys 2016-08-11 17:19 - 2013-12-16 20:33 - 00101112 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS 2016-08-11 17:19 - 2013-12-16 20:33 - 00008270 _____ C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT 2016-08-11 16:01 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2016-08-11 16:01 - 2013-12-17 10:23 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-08-11 15:53 - 2013-12-17 10:23 - 147640136 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-08-08 22:13 - 2015-01-02 15:06 - 00000000 ____D C:\ProgramData\Electronic Arts 2016-08-08 11:25 - 2014-11-08 15:27 - 00000000 ___RD C:\Program Files (x86)\Skype 2016-08-03 21:08 - 2016-03-11 18:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen 2016-07-31 17:30 - 2016-05-19 17:32 - 00000000 ____D C:\Users\Michiyo\Downloads\extracted ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-08-04 11:23 - 2015-08-04 11:23 - 0000000 _____ () C:\Program Files (x86)\Common Files\AMD 2014-11-11 20:14 - 2016-08-29 23:00 - 0000132 _____ () C:\Users\Michiyo\AppData\Roaming\Adobe PNG Format CS5 Prefs 2014-12-24 02:38 - 2014-12-24 02:38 - 0003584 _____ () C:\Users\Michiyo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2016-08-26 15:34 - 2016-08-26 15:34 - 0000017 _____ () C:\Users\Michiyo\AppData\Local\resmon.resmoncfg 2014-12-26 19:39 - 2014-12-26 19:39 - 0000040 ___SH () C:\ProgramData\.zreglib 2014-12-26 19:46 - 2014-12-26 19:46 - 0028672 _____ () C:\ProgramData\data.dll 2011-05-22 15:09 - 2011-05-22 15:09 - 0019624 _____ () C:\ProgramData\iml.xml 2011-05-22 15:09 - 2011-05-22 15:09 - 0019624 _____ () C:\ProgramData\winiml.dat Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\ProgramData\data.dll C:\ProgramData\winiml.dat C:\Users\Michiyo\VisualBoyAdvance.exe Einige Dateien in TEMP: ==================== C:\Users\Michiyo\AppData\Local\Temp\libeay32.dll C:\Users\Michiyo\AppData\Local\Temp\msvcr120.dll C:\Users\Michiyo\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-08-30 14:12 ==================== Ende von FRST.txt ============================ Geändert von DanielaS (30.08.2016 um 12:32 Uhr) |
30.08.2016, 14:47 | #10 |
| Win10 Update oder Virus ??? Explorer langsam + weiße Icons Ich hoffe ich mache bis jetzt alles richtig |
31.08.2016, 08:47 | #11 |
/// Malwareteam | Win10 Update oder Virus ??? Explorer langsam + weiße Icons Hi, ja alles super gemacht Bestehen die Probleme noch? |
31.08.2016, 09:13 | #12 |
| Win10 Update oder Virus ??? Explorer langsam + weiße Icons Hallo ja das Problem ist dennoch LEIDER immer noch da. Er ist nur etwas schneller geworden also er braucht wenigstens keine 10min mehr um was an zu zeigen Sagen wir 2-3min Weiße Icons sind aber noch da Keine Vorschau mehr in Bilder und immer noch keine Detail Anzeige Explorer braucht eben noch etwas lange bis er mal komplett fertig geladen hat uu" Neue Ordner benennt er nicht um ;/ Geändert von DanielaS (31.08.2016 um 09:19 Uhr) |
31.08.2016, 14:29 | #13 |
/// Malwareteam | Win10 Update oder Virus ??? Explorer langsam + weiße Icons |
31.08.2016, 17:11 | #14 |
| Win10 Update oder Virus ??? Explorer langsam + weiße Icons Ich bin mittlerweile bei Punkt 5 Wiederherstellung Was genau wird wieder hergestellt? Doch nicht der ganze PC das alles weg ist? O_O Und wie lange dauert das ungefair? |
31.08.2016, 17:14 | #15 |
/// Malwareteam | Win10 Update oder Virus ??? Explorer langsam + weiße Icons Also wenn du der Anleitung richtig folgst solltest du keine Daten verlieren. Das ganze läuft in etwa 1 Stunde in der Regel, kann aber länger oder kürzer auch dauern. |
Themen zu Win10 Update oder Virus ??? Explorer langsam + weiße Icons |
100%, avg, defragmentieren, explorer, festplatte, forum, geld, google, icon, icons, langes laden, langsam, musik, probleme, programme, scan, spiele, suche, system, tiere, treiber, tune up, update, viren, virus |