| |
| |||||||
Log-Analyse und Auswertung: AdwCleaner, Registryeinträge die sich nicht löschen lassenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
| |
06.11.2016, 16:56
| #1 |
 |  AdwCleaner, Registryeinträge die sich nicht löschen lassen Hallo, ich habe Emisoft auf dem Rechner installiert und benutze zusätzlich HitmanPro und Antimalwarebytes Premium. Vor ein paar Tagen habe ich den AdwCleaner mal laufen lassen um zu schauen ob alles ok ist. Bekomme immer wieder die gleichen 6 Registryeinträge die sich nicht löschen lassen. Emisoft hat mich an Anitmalwarebytes verwiesen da der AdwCleaner jetzt dazu gehört. Ein Helfer von Animalwarbytes riet mir als erstes ich sollte den HitmanPro im Taskmanager ausschalten um zu schauen ob die Fehler immer noch da sind, sie sind weiter vorhanden. Dann übersandte er mir eine Mail mit dem Hinweis, ich sollte Eingaben in der Registy vornehmen aber ehrlich gesagt alles nur auf English. Das war mir zu heikel. Hoffe Ihr könnte mir weiterhelfen?! MfG Hier ist die Mail: Subject: Malwarebytes bought and use AdwCleaner This message was sent to xxxxxxxxxxxxxxxx in reference to Case #: 1135103. NOV 06, 2016 | 04:40AM PST Larry replied: Step 1: Click the Start button on the bottom-left corner, type regedit in the empty search box and tap regedit in the results. Step 2: Select Yes in the User Account Control dialog. Make sure “My Computer” is highlighted Click "Edit"> “Find” Type or use Copy/Paste in 0A167702A96FE1D4DA3296FCA77354D9 tap Enter Key. Right Click on the file if found and select “Delete” Tap the “F3” Key to find the next entry of the file. Continue using the “F3” Key until it’s finished searching. Close Regedit. Restart the pc and run a new AdwCleaner scan Let me know if that solved the issues Code:
ATTFilter # AdwCleaner v6.030 - Bericht erstellt am 06/11/2016 um 13:20:52
# Aktualisiert am 19/10/2016 von Malwarebytes
# Datenbank : 2016-11-05.1 [Server]
# Betriebssystem : Windows 8.1 (X64)
# Benutzername : Susanne - SUSANNE
# Gestartet von : C:\Users\Susanne\Desktop\AdwCleaner.exe
# Modus: Löschen
# Unterstützung : hxxps://www.malwarebytes.com/support
***** [ Dienste ] *****
***** [ Ordner ] *****
***** [ Dateien ] *****
***** [ DLL ] *****
***** [ WMI ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
***** [ Registrierungsdatenbank ] *****
[#] Schlüssel mit Neustart gelöscht: HKLM\SOFTWARE\Classes\Installer\Features\0A167702A96FE1D4DA3296FCA77354D9
[#] Schlüssel mit Neustart gelöscht: HKLM\SOFTWARE\Classes\Installer\Products\0A167702A96FE1D4DA3296FCA77354D9
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0A167702A96FE1D4DA3296FCA77354D9
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0A167702A96FE1D4DA3296FCA77354D9
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\Installer\Features\0A167702A96FE1D4DA3296FCA77354D9
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\Installer\Products\0A167702A96FE1D4DA3296FCA77354D9
***** [ Browser ] *****
*************************
:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
*************************
C:\AdwCleaner\AdwCleaner[C2].txt - [4339 Bytes] - [04/11/2016 12:55:10]
C:\AdwCleaner\AdwCleaner[C3].txt - [1654 Bytes] - [06/11/2016 13:20:52]
C:\AdwCleaner\AdwCleaner[C4].txt - [3065 Bytes] - [03/11/2016 14:52:05]
C:\AdwCleaner\AdwCleaner[S0].txt - [4335 Bytes] - [04/11/2016 12:52:29]
C:\AdwCleaner\AdwCleaner[S1].txt - [2167 Bytes] - [04/11/2016 19:09:00]
C:\AdwCleaner\AdwCleaner[S2].txt - [2240 Bytes] - [06/11/2016 13:20:28]
########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt - [2019 Bytes] ##########
Geändert von JSM (06.11.2016 um 16:57 Uhr) Grund: Falsche Copy |
|
06.11.2016, 16:56
| #2 |
| | AdwCleaner, Registryeinträge die sich nicht löschen lassenCode:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 04-11-2016 durchgeführt von Susanne (Administrator) auf SUSANNE (06-11-2016 16:17:06) Gestartet von C:\Users\Susanne\Desktop Geladene Profile: Susanne (Verfügbare Profile: Susanne & Gast) Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Code Sector) C:\Program Files\TeraCopy\TeraCopyService.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2service.exe (SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe (ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe (Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe () C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_bg.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\HSSCP.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2guard.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (ZTE) C:\Program Files (x86)\congstar\Internet-Manager\Bin\mcserver.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe () C:\Program Files (x86)\congstar\Internet-Manager\Bin\dbus-daemon.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe () C:\Program Files (x86)\congstar\Internet-Manager\Bin\db_daemon.exe (cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2start.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_23_0_0_205.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_23_0_0_205.exe ==================== Registry (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13877464 2000-01-01] (Realtek Semiconductor) HKLM\...\Run: [Corel Update Helper] => c:\Program Files\Corel\Corel PaintShop Pro X7 (64-bit)\pua.exe [2004312 2015-05-19] (Corel Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397752 2016-03-24] (NVIDIA Corporation) HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [7818040 2013-09-19] (Motorola Solutions, Inc.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation) HKLM\...\Run: [emsisoft anti-malware] => c:\program files\emsisoft internet security\a2guard.exe [7838392 2016-10-29] (Emsisoft Ltd) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2016-09-09] (Apple Inc.) HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.) HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [25424008 2016-10-24] (Dropbox, Inc.) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [210432 2016-07-05] (Geek Software GmbH) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation) Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [131712 2013-01-25] (Atheros Communications) HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\Run: [Schmaili] => C:\Schmaili90\schmaili.exe [536576 2007-08-03] (Marc Waesche Services) HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.) HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\MountPoints2: {25215d21-71fb-11e6-bf71-24fd52f78824} - "F:\windows\Data\setup.exe" AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [186136 2016-04-21] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [164696 2016-04-21] (NVIDIA Corporation) ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] () ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.1.0.dll [2016-10-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.1.0.dll [2016-10-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.1.0.dll [2016-10-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.1.0.dll [2016-10-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.1.0.dll [2016-10-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.1.0.dll [2016-10-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.1.0.dll [2016-10-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.1.0.dll [2016-10-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.1.0.dll [2016-10-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.1.0.dll [2016-10-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => Keine Datei ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => Keine Datei ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => Keine Datei ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => Keine Datei ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => Keine Datei ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => Keine Datei Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MCtlSvc.lnk [2016-09-06] ShortcutTarget: MCtlSvc.lnk -> C:\Program Files (x86)\congstar\Internet-Manager\Bin\mcserver.exe (ZTE) Startup: C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2015-08-26] ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Hosts Datei wurde nicht im Standardordner gefunden Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{1E5210DC-85FF-4E1C-98B0-40CB3565919B}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{4C2CE82A-EBAB-4312-8E71-DF116B2A940E}: [DhcpNameServer] 8.8.8.8 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> DefaultScope {70D443E2-171A-419A-A51C-BCCF5FA9F887} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> {56EE4669-C5D3-4789-8C16-4DB4464DAD46} URL = hxxps://de.search.yahoo.com/search?fr=mcafee&type=C011DE885D20150813&p={searchTerms} SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> {70D443E2-171A-419A-A51C-BCCF5FA9F887} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2013-01-25] (Qualcomm Atheros Commnucations) BHO-x32: Kein Name -> {451C804F-C205-4F03-B48E-537EC94937BF} -> Keine Datei BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-24] (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-24] (Oracle Corporation) Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 - Keine Datei FireFox: ======== FF DefaultProfile: y9p501c2.default FF ProfilePath: C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default [2016-11-06] FF Homepage: Mozilla\Firefox\Profiles\y9p501c2.default -> hxxp://www.ferienwohnung-schifferstadt.de/ hxxp://www.gmx.net/logoutlounge/?p=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 hxxps://www.google.com/webhp?hl=de&sa=X&ved=0ahUKEwi5iaqh1IzQAhVJzRQKHZIbDPgQPAgD hxxps://accounts.google.com/AccountChooser?continue=https%3A%2F%2Fgroups.google.com%2Fd%2Fmyforums&hl=de&service=groups2 hxxps://login.yahoo.com/config/login?.src=ygrp&.intl=de&.lang=de-DE&.done=hxxps://de.groups.yahoo.com/neo hxxps://translate.google.de/?hl=de&tab=TT#de/en/Fehler%20der%20Registrierungsdatenbank.%20L%C3%B6sche%20diese%20aber%20beim%20n%C3%A4chsten%20Start%20und%20durchsuchen%2C%20sind%20die%20Fehler%20wieder%20da.%20K%C3%B6nnen%20Sie%20mir%20weiterhelfen%3F hxxps://kabel.vodafone.de/logout hxxps://www.1und1.de/login hxxps://polizei.brandenburg.de/konto/login hxxps://www.bussgeldkatalog.org/raser/ hxxps://www.paypal.de/einkaufswelt/ hxxps://www.congstar.de/meincongstar/ hxxps://www.dropbox.com/login?src=logout hxxps://www.wesendit.com/ hxxp://heilkraeuter.de/lexikon/huflat.htm hxxp://www.netdoktor.de/heilpflanzen/koenigskerze/ hxxp://swheattutorials.blogspot.de/2015/12/blog-post_74.html hxxp://www.wheatcreations.com/SWHEATTUTORIALS/BJChristmas/BJChristmas.htm hxxp://bienespspplace.bplaced.net/Tutorials/Saison/wintermagic/ hxxp://www.marinettedesings.be/winter_magic_engels.htm hxxps://www.adac.de/Produkte/autovermietung/EmptyPage.aspx hxxp://www.elv.de/output/controller.aspx?cid=74&detail=1&detail2=1360 hxxps://www.conrad.de/de/Search.html?search=elektronisches%20heizk%C3%B6rperthermostat%20Danfoss&searchType=REGULAR&category=%1FGeb%25C3%25A4udetechnik%1FL%25C3%25BCftung%252C%2BHeizung%252C%2BKlima hxxp://www.animationfactory.com/de/search/index.html?s=76&spage=4&raw_q=halloween&CURRENCY=USD&category_id=E1&q=halloween&b=k&cid=E1&bl=%252Fde%252Fsearch%252Findex.html%253Fq%253Dhalloween%2526cid%253DE1%2526s%253D51%2526b%253Dk%2526t%253D244%2526ppage%253D3&t=244 FF Extension: (Webmail Ad Blocker) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\gmailnoads@mywebber.com.xpi [2015-08-15] FF Extension: (Mailvelope) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\jid1-AQqSMBYb0a8ADg@jetpack.xpi [2016-04-08] FF Extension: (Open about:permissons) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\open.about.permissions@jasnapaka.com.xpi [2016-06-07] FF Extension: (S3.Google Translator) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\s3google@translator.xpi [2015-12-13] FF Extension: (translator) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\translator@dontfollowme.net.xpi [2016-01-09] FF Extension: (Google Translator for Firefox) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\translator@zoli.bod.xpi [2015-12-21] FF Extension: (NoScript) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-08-15] FF Extension: (WOT) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-08-15] FF Extension: (Video DownloadHelper) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-02-20] FF Extension: (Adblock Plus) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-08-15] FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files (x86)\congstar\Internet-Manager\Bin\addon FF Extension: (Bytemobile Optimization Client) - C:\Program Files (x86)\congstar\Internet-Manager\Bin\addon [2010-04-01] [ist nicht signiert] FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_205.dll [2016-10-27] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [Keine Datei] FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_205.dll [2016-10-27] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1222172.dll [2015-11-19] (Adobe Systems, Inc.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-24] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-24] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> C:\Program Files (x86)\Winamp Detect\npwachk.dll [Keine Datei] FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-10-12] () FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [Keine Datei] FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei] ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 a2AntiMalware; C:\Program Files\Emsisoft Internet Security\a2service.exe [9388576 2016-10-29] (Emsisoft Ltd) S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2015-08-26] (Adobe Systems) [Datei ist nicht signiert] R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [669872 2015-09-15] (Adobe Systems Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2207960 2016-09-26] (Adobe Systems, Incorporated) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-08-05] (Apple Inc.) R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227456 2013-01-25] (Qualcomm Atheros Commnucations) [Datei ist nicht signiert] S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-03-07] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-03-07] (Dropbox, Inc.) R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [41576 2016-10-24] (Dropbox, Inc.) R2 ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [416408 2016-03-09] () R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164856 2016-03-24] (NVIDIA Corporation) R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [135496 2016-09-26] (SurfRight B.V.) R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [2710648 2016-08-24] (AnchorFree Inc.) S3 HssTrayService; C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE [103168 2016-08-24] () R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation) R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-03-24] (NVIDIA Corporation) R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2013-09-13] (arvato digital services llc) R2 SystemUsageReportSvc_WILLAMETTE; C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe [118424 2016-03-09] () R2 TeraCopyService; C:\Program Files\TeraCopy\TeraCopyService.exe [92160 2015-02-17] (Code Sector) [Datei ist nicht signiert] R2 Unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [254232 2016-08-23] (RaMMicHaeL) S3 USER_ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [416408 2016-03-09] () S3 vmicguestinterface; C:\WINDOWS\System32\ICSvc.dll [524800 2014-11-21] (Microsoft Corporation) S3 vmicheartbeat; C:\WINDOWS\System32\ICSvc.dll [524800 2014-11-21] (Microsoft Corporation) S3 vmickvpexchange; C:\WINDOWS\System32\ICSvc.dll [524800 2014-11-21] (Microsoft Corporation) S3 vmicshutdown; C:\WINDOWS\System32\ICSvc.dll [524800 2014-11-21] (Microsoft Corporation) S3 vmictimesync; C:\WINDOWS\System32\ICSvc.dll [524800 2014-11-21] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation) R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-01-25] (Atheros) [Datei ist nicht signiert] ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R1 adgnetworkwfpdrv; C:\WINDOWS\System32\drivers\adgnetworkwfpdrv.sys [55800 2015-06-02] () R3 athr; C:\WINDOWS\system32\DRIVERS\athwbx.sys [3837440 2013-08-14] (Qualcomm Atheros Communications, Inc.) R3 ATP; C:\WINDOWS\System32\drivers\AsusTP.sys [65784 2013-04-16] (ASUS Corporation) R0 BMLoad; C:\WINDOWS\System32\drivers\BMLoad.sys [16512 2009-12-15] (Bytemobile, Inc.) [Datei ist nicht signiert] S3 BTATH_LWFLT; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-25] (Qualcomm Atheros) R3 btmaux; C:\WINDOWS\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.) S0 ebdrv; C:\WINDOWS\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation) R1 epp; C:\PROGRAM FILES\EMSISOFT INTERNET SECURITY\epp.sys [124304 2016-10-05] (Emsisoft Ltd) R1 FWNDIS_LWF; C:\WINDOWS\system32\DRIVERS\fwndislwf64.sys [212560 2016-10-21] () R1 fwwfp; C:\Program Files\Emsisoft Internet Security\fwwfp764.sys [152776 2016-10-21] () S3 HSPADataCardusbmdm; C:\WINDOWS\system32\DRIVERS\HSPADataCardusbmdm.sys [122752 2011-08-19] (HSPADataCard Incorporated) S3 HSPADataCardusbnmea; C:\WINDOWS\system32\DRIVERS\HSPADataCardusbnmea.sys [122752 2011-08-19] (HSPADataCard Incorporated) S3 HSPADataCardusbser; C:\WINDOWS\system32\DRIVERS\HSPADataCardusbser.sys [122752 2011-08-19] (HSPADataCard Incorporated) R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( ) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-11-06] (Malwarebytes) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation) S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [80920 2015-07-02] (McAfee, Inc.) R3 semav6msr64; C:\WINDOWS\system32\drivers\semav6msr64.sys [21984 2016-03-09] () R3 taphss6; C:\WINDOWS\system32\DRIVERS\taphss6.sys [42088 2015-06-04] (Anchorfree Inc.) R1 tcpipBM; C:\WINDOWS\system32\drivers\tcpipBM.sys [39552 2009-12-15] (Bytemobile, Inc.) [Datei ist nicht signiert] S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation) S3 dbx; system32\DRIVERS\dbx.sys [X] S4 nvvad_WaveExtensible; \SystemRoot\system32\drivers\nvvad64v.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-11-06 16:17 - 2016-11-06 16:17 - 00032407 _____ C:\Users\Susanne\Desktop\FRST.txt 2016-11-06 16:16 - 2016-11-06 16:16 - 00000000 ____D C:\Users\Susanne\Desktop\FRST-OlderVersion 2016-11-06 13:24 - 2016-11-06 13:24 - 00002117 _____ C:\Users\Susanne\Desktop\AdwCleaner[C3].txt 2016-11-06 13:23 - 2016-11-06 13:23 - 00000000 ___RD C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2016-11-06 13:14 - 2016-11-06 13:15 - 00000000 ____D C:\Users\Susanne\Desktop\AM_VintageChristmas 2016-11-06 13:14 - 2016-11-06 13:14 - 19102226 _____ C:\Users\Susanne\Desktop\ccd_LilChristmasFairy_ts.zip 2016-11-06 13:13 - 2016-11-06 13:14 - 18570236 _____ C:\Users\Susanne\Desktop\AM_VictorianChristmas.rar 2016-11-06 13:13 - 2016-11-06 13:13 - 19531983 _____ C:\Users\Susanne\Desktop\AM_VintageChristmas.rar 2016-11-05 18:01 - 2016-11-05 18:01 - 00026524 _____ C:\Users\Susanne\Desktop\adobe photoshop cs3 10942.89.88.38.106.2356969311 2016-11-05 14:44 - 2016-11-05 14:44 - 00003267 _____ C:\Users\Susanne\Desktop\image.htm 2016-11-04 19:51 - 2016-11-04 19:52 - 00000000 ____D C:\Users\Susanne\Desktop\Inna 2016-11-04 18:38 - 2016-11-06 16:16 - 02410496 _____ (Farbar) C:\Users\Susanne\Desktop\FRST64.exe 2016-11-01 14:40 - 2016-11-01 14:41 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_HUN_NewYearswish 2016-10-30 18:56 - 2016-10-30 18:56 - 00000000 ____D C:\Users\Susanne\Downloads\DanielaE Design 2016-10-30 17:56 - 2016-10-30 17:56 - 00000000 ____D C:\Users\Susanne\Downloads\Spooktacular 2016-10-30 17:55 - 2016-10-30 17:55 - 00000000 ____D C:\Users\Susanne\Downloads\Tasha´s Playground 2016-10-28 11:37 - 2016-10-28 11:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2016-10-27 18:01 - 2016-10-27 18:03 - 00000000 ____D C:\Users\Susanne\Downloads\HappyPumpkinStudio 2016-10-27 17:48 - 2016-10-27 17:54 - 25604688 _____ C:\Users\Susanne\Downloads\PATICIPANT.rar 2016-10-27 17:34 - 2016-10-27 17:34 - 00000000 ____D C:\Users\Susanne\Downloads\TonyTzanoukakis Vampiress 2016-10-27 17:33 - 2016-10-27 17:33 - 00000000 ____D C:\Users\Susanne\Downloads\TonyTzanoukakis Alessia 2016-10-27 16:47 - 2016-10-27 16:47 - 36002172 _____ C:\Users\Susanne\Downloads\Kit_PHF_Ravenworld2016.rar 2016-10-27 15:45 - 2016-10-27 15:45 - 00000000 ____D C:\Users\Susanne\Downloads\Origash MissAutumn 2016-10-27 15:34 - 2016-10-27 15:34 - 00000000 ____D C:\Users\Susanne\Downloads\Zebrush Lilian 2016-10-24 19:02 - 2016-10-24 19:02 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_VN_Mermaid 2016-10-24 18:42 - 2016-10-24 18:42 - 26095371 _____ C:\Users\Susanne\Downloads\LMB_OnTheHunt.rar 2016-10-24 14:06 - 2016-10-24 14:06 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys 2016-10-24 14:06 - 2016-10-24 14:06 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys 2016-10-24 14:06 - 2016-10-24 14:06 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys 2016-10-24 14:06 - 2016-10-24 14:06 - 00041576 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe 2016-10-24 10:57 - 2016-10-24 10:57 - 00000000 ____D C:\Users\Susanne\AppData\Roaming\Oracle 2016-10-22 19:41 - 2016-10-24 18:51 - 00000000 ____D C:\Users\Susanne\Downloads\Julia Fox 2016-10-22 19:35 - 2016-10-22 19:35 - 00000000 ____D C:\Users\Susanne\Downloads\GraphFreaks 2016-10-21 14:54 - 2016-10-21 14:54 - 00000831 _____ C:\WINDOWS\system32\Drivers\etc\hosts.txt 2016-10-20 19:22 - 2016-10-20 19:22 - 03910208 _____ C:\Users\Susanne\Desktop\AdwCleaner.exe 2016-10-18 16:13 - 2016-10-22 19:45 - 00000000 ____D C:\Users\Susanne\Downloads\KrystalDesign 2016-10-18 15:37 - 2016-10-18 15:37 - 03382219 _____ C:\Users\Susanne\Downloads\SNC-KIWI-SEXY RED TUBE.psd 2016-10-18 14:04 - 2016-10-18 15:04 - 00000000 ____D C:\Users\Susanne\Downloads\horseplayspasturedesigns 2016-10-17 19:22 - 2016-10-17 19:23 - 00000000 ____D C:\Users\Susanne\Downloads\SNC Mariel Fairy Forest in Fall+ 2016-10-17 13:07 - 2016-10-17 13:08 - 00000000 ____D C:\Users\Susanne\Downloads\Sandy Design 2016-10-17 13:03 - 2016-10-17 13:03 - 07836732 _____ C:\Users\Susanne\Downloads\AP Forbidden.rar 2016-10-17 12:00 - 2016-10-17 12:01 - 222214445 _____ C:\Users\Susanne\Downloads\Noch_Straha.zip 2016-10-17 11:29 - 2016-10-17 11:31 - 00000000 ____D C:\Users\Susanne\Downloads\CSDesigns 2016-10-17 11:08 - 2016-10-17 11:08 - 00000000 ____D C:\Users\Susanne\Downloads\Melissa Dawn Pck 3 2016-10-17 11:02 - 2016-10-17 11:02 - 00000000 ____D C:\Users\Susanne\Downloads\SNC AC Wickedness 2016-10-16 15:02 - 2016-11-03 16:13 - 00000000 ____D C:\Users\Susanne\Desktop\Zum Senden 2016-10-16 14:56 - 2016-11-01 19:27 - 00000000 ____D C:\Users\Susanne\Desktop\tutorial 2016-10-16 13:31 - 2016-10-16 13:31 - 00830935 _____ C:\Users\Susanne\Downloads\Liza tube 339.psp 2016-10-16 10:23 - 2016-10-23 19:15 - 00000000 ____D C:\Users\Susanne\Documents\Emisoft Verlängerung 2016-10-14 20:13 - 2016-10-21 19:20 - 00000000 ____D C:\Users\Susanne\Desktop\Downloads from Friends 2016-10-14 19:48 - 2016-10-14 19:51 - 00000000 ____D C:\Users\Susanne\Downloads\Flower Mohn Poppy 2016-10-14 18:56 - 2016-10-14 18:57 - 00000000 ____D C:\Users\Susanne\Downloads\Symphonie Verde Blu 2016-10-14 18:50 - 2016-10-14 18:50 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_DL_ Ginger+ 2016-10-13 18:52 - 2016-10-29 17:03 - 00000000 ____D C:\Users\Susanne\Downloads\IS Design 2016-10-12 09:26 - 2016-10-01 01:22 - 07444312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-10-12 09:26 - 2016-09-30 08:55 - 25765376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-10-12 09:26 - 2016-09-30 07:25 - 02895360 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2016-10-12 09:26 - 2016-09-30 07:25 - 00576000 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2016-10-12 09:26 - 2016-09-30 07:12 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2016-10-12 09:26 - 2016-09-30 07:09 - 06048256 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-10-12 09:26 - 2016-09-30 06:47 - 20306944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-10-12 09:26 - 2016-09-30 06:42 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2016-10-12 09:26 - 2016-09-30 06:41 - 01033216 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2016-10-12 09:26 - 2016-09-30 06:38 - 02286592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2016-10-12 09:26 - 2016-09-30 06:33 - 00724992 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2016-10-12 09:26 - 2016-09-30 06:33 - 00378880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2016-10-12 09:26 - 2016-09-30 06:32 - 00806912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2016-10-12 09:26 - 2016-09-30 06:32 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2016-10-12 09:26 - 2016-09-30 06:31 - 02131456 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2016-10-12 09:26 - 2016-09-30 06:21 - 15257088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-10-12 09:26 - 2016-09-30 06:17 - 02920960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2016-10-12 09:26 - 2016-09-30 06:12 - 04608512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-10-12 09:26 - 2016-09-30 06:11 - 00880640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2016-10-12 09:26 - 2016-09-30 06:06 - 00330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2016-10-12 09:26 - 2016-09-30 06:05 - 02055680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2016-10-12 09:26 - 2016-09-30 06:05 - 01544192 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-10-12 09:26 - 2016-09-30 06:05 - 00693248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2016-10-12 09:26 - 2016-09-30 06:03 - 13653504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-10-12 09:26 - 2016-09-30 05:54 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2016-10-12 09:26 - 2016-09-30 05:46 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2016-10-12 09:26 - 2016-09-30 05:43 - 01312768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-10-12 09:26 - 2016-09-30 05:42 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2016-10-12 09:26 - 2016-09-17 19:16 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsmsext.dll 2016-10-12 09:26 - 2016-09-17 18:53 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll 2016-10-12 09:26 - 2016-09-17 18:21 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsmsext.dll 2016-10-12 09:26 - 2016-09-17 18:03 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll 2016-10-12 09:26 - 2016-09-17 18:02 - 01446400 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2016-10-12 09:26 - 2016-09-14 02:53 - 01663184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2016-10-12 09:26 - 2016-09-14 02:53 - 01523208 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2016-10-12 09:26 - 2016-09-14 02:53 - 01490112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2016-10-12 09:26 - 2016-09-14 02:53 - 01358952 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2016-10-12 09:26 - 2016-09-13 00:48 - 00085680 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2016-10-12 09:26 - 2016-09-12 23:03 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll 2016-10-12 09:26 - 2016-09-12 22:01 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll 2016-10-12 09:26 - 2016-09-09 15:17 - 04170752 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2016-10-12 09:26 - 2016-09-09 14:38 - 01629184 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2016-10-12 09:26 - 2016-09-09 14:38 - 01226752 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2016-10-12 09:26 - 2016-09-09 14:38 - 00586752 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2016-10-12 09:26 - 2016-09-09 14:38 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2016-10-12 09:26 - 2016-09-09 14:38 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2016-10-12 09:26 - 2016-09-09 14:38 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\centel.dll 2016-10-12 09:26 - 2016-09-09 14:38 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2016-10-12 09:26 - 2016-09-09 14:38 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2016-10-12 09:26 - 2016-09-08 21:41 - 00121176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys 2016-10-12 09:26 - 2016-09-08 15:00 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2016-10-12 09:26 - 2016-09-08 15:00 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys 2016-10-12 09:26 - 2016-09-07 23:07 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2016-10-12 09:26 - 2016-09-07 22:59 - 01754112 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2016-10-12 09:26 - 2016-09-07 22:59 - 01377792 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2016-10-12 09:26 - 2016-09-07 22:57 - 01560064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2016-10-12 09:26 - 2016-09-07 22:56 - 01491456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2016-10-12 09:26 - 2016-08-31 18:22 - 03754496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll 2016-10-12 09:26 - 2016-08-31 17:33 - 02410496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll 2016-10-12 09:26 - 2016-08-27 17:33 - 02881536 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2016-10-12 09:26 - 2016-08-27 17:11 - 01049600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2016-10-12 09:26 - 2016-08-25 21:50 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll 2016-10-12 09:26 - 2016-08-25 20:40 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll 2016-10-12 09:26 - 2016-08-13 01:05 - 09323008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL 2016-10-12 09:26 - 2016-08-13 01:03 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifibus.sys 2016-10-12 09:26 - 2016-08-13 01:02 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys 2016-10-12 09:26 - 2016-08-13 01:01 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys 2016-10-12 09:26 - 2016-08-12 23:35 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll 2016-10-12 09:26 - 2016-08-12 23:19 - 09323008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL 2016-10-12 09:26 - 2016-08-12 22:47 - 15431168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2016-10-12 09:26 - 2016-08-12 22:17 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll 2016-10-12 09:26 - 2016-08-12 21:52 - 13317120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2016-10-12 09:26 - 2016-08-12 02:58 - 02315496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2016-10-12 09:26 - 2016-08-12 02:58 - 01946176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2016-10-12 09:26 - 2016-08-11 19:33 - 00096256 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\parport.sys 2016-10-12 09:26 - 2016-08-11 19:33 - 00083456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serial.sys 2016-10-12 09:26 - 2016-08-11 19:33 - 00023040 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serenum.sys 2016-10-12 09:26 - 2016-08-11 18:17 - 01574912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe 2016-10-12 09:26 - 2016-08-11 14:39 - 00445765 _____ C:\WINDOWS\system32\ApnDatabase.xml 2016-10-12 09:26 - 2016-08-11 06:46 - 00420184 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2016-10-12 09:26 - 2016-08-03 16:42 - 01317888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2016-10-12 09:26 - 2016-08-03 16:36 - 01102848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2016-10-12 09:26 - 2016-08-03 16:36 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll 2016-10-12 09:26 - 2016-08-03 16:33 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll 2016-10-12 09:26 - 2016-07-30 18:12 - 02896384 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll 2016-10-12 09:26 - 2016-07-30 17:36 - 02537472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll 2016-10-12 09:26 - 2016-07-26 14:40 - 00162850 _____ C:\WINDOWS\SysWOW64\C_932.NLS 2016-10-12 09:26 - 2016-07-26 14:40 - 00162850 _____ C:\WINDOWS\system32\C_932.NLS 2016-10-12 09:26 - 2016-07-23 19:18 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2016-10-12 09:26 - 2016-07-23 19:12 - 00954880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2016-10-12 09:24 - 2016-08-27 20:44 - 22360288 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2016-10-12 09:24 - 2016-08-27 20:44 - 02755504 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2016-10-12 09:24 - 2016-08-27 20:44 - 00133256 _____ (Microsoft Corporation) C:\WINDOWS\system32\RestoreOptIn.exe 2016-10-12 09:24 - 2016-08-27 19:26 - 19789232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2016-10-12 09:24 - 2016-08-27 19:26 - 02411048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2016-10-12 09:24 - 2016-08-27 19:26 - 00113656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RestoreOptIn.exe 2016-10-12 09:24 - 2016-08-27 17:09 - 14466560 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2016-10-12 09:24 - 2016-08-27 16:55 - 12879360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2016-10-12 09:24 - 2016-08-20 23:24 - 02778624 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2016-10-12 09:24 - 2016-08-20 23:12 - 02463744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2016-10-10 17:45 - 2016-10-10 17:45 - 00000000 ____D C:\Users\Susanne\Downloads\OrigaSh DreamCatcher 2016-10-10 13:26 - 2016-10-10 13:26 - 00000000 ____D C:\Users\Susanne\Downloads\SNC-AUTHERECOLLA-GJ_CUS 2016-10-09 18:36 - 2016-10-09 18:37 - 00000000 ____D C:\Users\Susanne\Downloads\OglArt September Girl 2016-10-09 18:35 - 2016-10-09 18:40 - 124614710 _____ C:\Users\Susanne\Downloads\SNC-AUTHERECOLLA-GJ_CUS.rar 2016-10-09 17:31 - 2016-10-09 18:03 - 00000000 ____D C:\Users\Susanne\Downloads\SATC DL GlamGirl 2016-10-09 15:09 - 2016-10-09 17:03 - 00000000 ____D C:\Users\Susanne\graphicriver-9085825-stardust-photoshop-action 2016-10-07 19:46 - 2016-10-08 17:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2016-10-07 18:50 - 2016-10-07 18:50 - 26013296 _____ C:\Users\Susanne\Downloads\Magik_SwagAlleyBluesFTU.zip ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-11-06 16:17 - 2015-11-15 17:25 - 00000000 ____D C:\FRST 2016-11-06 16:13 - 2015-11-23 18:19 - 00000000 ____D C:\Program Files\Emsisoft Internet Security 2016-11-06 15:39 - 2015-08-24 17:40 - 00001232 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job 2016-11-06 15:29 - 2015-12-08 11:14 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2016-11-06 13:39 - 2015-08-24 17:40 - 00001228 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job 2016-11-06 13:29 - 2015-08-13 17:26 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2016-11-06 13:29 - 2014-11-21 04:35 - 01780340 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-11-06 13:29 - 2014-11-21 03:45 - 00766620 _____ C:\WINDOWS\system32\perfh007.dat 2016-11-06 13:29 - 2014-11-21 03:45 - 00159902 _____ C:\WINDOWS\system32\perfc007.dat 2016-11-06 13:29 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\Inf 2016-11-06 13:24 - 2015-09-20 15:03 - 00000000 ____D C:\AdwCleaner 2016-11-06 13:23 - 2015-08-24 17:45 - 00000000 ___RD C:\Users\Susanne\Dropbox 2016-11-06 13:22 - 2015-08-12 20:13 - 00000073 _____ C:\Users\Susanne\AppData\Roaming\sp_data.sys 2016-11-06 13:22 - 2014-03-01 11:33 - 00000868 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job 2016-11-06 13:22 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-11-06 12:12 - 2016-08-23 11:11 - 00003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1 2016-11-06 12:12 - 2015-08-15 12:15 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2 2016-11-06 12:04 - 2015-08-18 14:16 - 00003934 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{4A105045-E9F4-48C6-AC0D-2E7F7A2F8B9E} 2016-11-05 20:50 - 2015-08-28 18:37 - 00000000 ____D C:\Program Files\CCleaner 2016-11-05 18:48 - 2016-01-03 13:06 - 00000000 ____D C:\Users\Susanne\Downloads\Alehandra Vanhek 2016-11-05 15:54 - 2015-11-30 19:54 - 00000000 ____D C:\Users\Susanne\Desktop\Filme 2016-11-05 13:34 - 2015-08-24 17:40 - 00004204 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineUA 2016-11-05 13:34 - 2015-08-24 17:40 - 00003968 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineCore 2016-11-04 19:58 - 2015-10-24 17:18 - 00000000 ____D C:\Users\Susanne\Downloads\Verymany 2016-11-04 19:55 - 2016-05-25 18:18 - 00000000 ____D C:\Users\Susanne\Downloads\Alec Rud-LightartistXXX Emma 2016-11-04 19:48 - 2015-10-18 17:19 - 00000000 ____D C:\Users\Susanne\Downloads\Zlata M 2016-11-04 19:47 - 2015-11-02 17:34 - 00000000 ____D C:\Users\Susanne\Downloads\Hania Designs 2016-11-04 19:42 - 2016-01-03 13:05 - 00000000 ____D C:\Users\Susanne\Downloads\Ellie Milk 2016-11-04 18:37 - 2015-10-10 18:25 - 00000000 ____D C:\Users\Susanne\AppData\Roaming\vlc 2016-11-04 18:04 - 2015-08-12 20:19 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1794304933-3207535254-2068445666-1002 2016-11-04 16:41 - 2015-10-24 15:45 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-11-04 10:50 - 2014-03-01 11:33 - 00000870 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job 2016-11-03 16:33 - 2016-02-06 19:06 - 00000000 ____D C:\Users\Susanne\Downloads\Toxic Desirez 2016-11-03 14:21 - 2015-08-13 17:30 - 00000000 ____D C:\Users\Susanne\Desktop\Programme 2016-11-01 18:52 - 2016-01-03 13:54 - 00000000 ____D C:\Users\Susanne\Downloads\Vadis 2016-11-01 18:51 - 2016-01-03 13:51 - 00000000 ____D C:\Users\Susanne\Downloads\Trinita 2016-11-01 17:49 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI 2016-11-01 16:52 - 2015-10-13 09:21 - 00000000 ____D C:\Users\Susanne\Downloads\Halloween 2016-11-01 16:04 - 2016-02-14 13:29 - 00000000 ____D C:\Users\Susanne\Downloads\Laguna 2016-11-01 15:46 - 2016-02-18 20:07 - 00000000 ____D C:\Users\Susanne\Downloads\Tais 2016-11-01 15:46 - 2015-11-02 14:12 - 00000000 ____D C:\Users\Susanne\Downloads\Bella Caribean 2016-11-01 15:18 - 2015-10-17 18:28 - 00000000 ____D C:\Users\Susanne\Downloads\Keith Garvey 2016-11-01 15:14 - 2016-04-25 18:17 - 00000000 ____D C:\Users\Susanne\Downloads\Thammys Welt 2016-10-31 19:43 - 2014-04-15 19:11 - 00000000 ____D C:\Users\Susanne\My PSP Files 2016-10-31 18:01 - 2015-10-17 18:18 - 00000000 ____D C:\Users\Susanne\Downloads\Elias Chatzoudis 2016-10-30 20:19 - 2016-02-21 14:49 - 00000000 ____D C:\Users\Susanne\Downloads\Misticheskaya 2016-10-30 20:18 - 2016-02-06 18:26 - 00000000 ____D C:\Users\Susanne\Downloads\DiHalim 2016-10-30 19:28 - 2015-12-07 16:26 - 00000000 ____D C:\Users\Susanne\Downloads\Chris Pastel 2016-10-30 19:19 - 2015-11-16 15:01 - 00000000 ____D C:\Users\Susanne\Downloads\Barbara Jensen 2016-10-30 19:04 - 2015-11-23 19:10 - 00000000 ____D C:\Users\Susanne\Downloads\Alfadesire 2016-10-30 19:02 - 2016-02-21 15:04 - 00000000 ____D C:\Users\Susanne\Downloads\GoF Designs 2016-10-30 19:01 - 2016-06-01 16:50 - 00000000 ____D C:\Users\Susanne\Downloads\JoJo Kits 2016-10-30 18:59 - 2016-01-03 13:15 - 00000000 ____D C:\Users\Susanne\Downloads\Fedor 2016-10-30 18:59 - 2015-10-05 18:13 - 00000000 ____D C:\Users\Susanne\Downloads\RD_Rienike Designs 2016-10-30 18:45 - 2015-10-17 15:10 - 00000000 ____D C:\Users\Susanne\Downloads\Eugene Rzhevskii 2016-10-30 18:44 - 2016-08-12 18:28 - 00000000 ____D C:\Users\Susanne\Downloads\Nusha Lypina 2016-10-30 18:42 - 2015-10-22 18:37 - 00000000 ____D C:\Users\Susanne\Downloads\KBK 2016-10-30 18:37 - 2016-01-03 13:33 - 00000000 ____D C:\Users\Susanne\Downloads\Lorri Kajenna 2016-10-30 18:18 - 2016-04-23 18:38 - 00000000 ____D C:\Users\Susanne\Downloads\Mariel Designs 2016-10-30 18:17 - 2015-11-28 15:12 - 00000000 ____D C:\Users\Susanne\Downloads\PinkParadoxProduktions 2016-10-30 18:16 - 2016-02-06 18:14 - 00000000 ____D C:\Users\Susanne\Downloads\DN Scraps 2016-10-30 18:15 - 2015-10-15 17:45 - 00000000 ____D C:\Users\Susanne\Downloads\Arthur Crowe 2016-10-30 18:12 - 2015-10-05 19:49 - 00000000 ____D C:\Users\Susanne\Downloads\Bibi´s Collection 2016-10-30 18:11 - 2016-01-03 13:36 - 00000000 ____D C:\Users\Susanne\Downloads\Nocturne 2016-10-30 18:09 - 2016-01-08 20:15 - 00000000 ____D C:\Users\Susanne\Downloads\Disturbed Scraps 2016-10-30 17:54 - 2016-01-29 19:45 - 00000000 ____D C:\Users\Susanne\Downloads\Tiny Turtles Designs 2016-10-30 16:18 - 2016-04-18 19:08 - 00000000 ____D C:\Users\Susanne\Downloads\KatNKDA 2016-10-30 16:17 - 2016-01-03 15:47 - 00000000 ____D C:\Users\Susanne\Downloads\Angelica S 2016-10-30 14:28 - 2016-03-06 20:12 - 00000000 ____D C:\Users\Susanne\Downloads\Jennifer Janesko 2016-10-30 14:12 - 2016-01-03 15:46 - 00000000 ____D C:\Users\Susanne\Downloads\Stella Felice 2016-10-29 19:43 - 2016-08-22 15:53 - 00000000 ____D C:\Users\Susanne\Downloads\Mary Designs 2016-10-29 19:25 - 2016-03-18 12:08 - 00000000 ____D C:\Users\Susanne\Downloads\Grafik 2016-10-29 16:39 - 2015-10-15 19:04 - 00000000 ____D C:\Users\Susanne\Downloads\Comics 2016-10-29 16:34 - 2015-10-30 13:07 - 00000000 ____D C:\Users\Susanne\Downloads\Anna Liwanag 2016-10-29 13:24 - 2012-07-26 08:59 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-10-28 11:38 - 2015-08-24 17:40 - 00000000 ____D C:\Program Files (x86)\Dropbox 2016-10-27 18:22 - 2016-01-03 13:33 - 00000000 ____D C:\Users\Susanne\Downloads\Lysisange 2016-10-27 18:21 - 2015-10-25 20:18 - 00000000 ____D C:\Users\Susanne\Downloads\Souldesigner 2016-10-27 18:08 - 2015-10-17 18:08 - 00000000 ____D C:\Users\Susanne\Downloads\cm scraps 2016-10-27 18:06 - 2016-03-05 19:10 - 00000000 ____D C:\Users\Susanne\Downloads\Velerie 2016-10-27 18:01 - 2016-09-10 18:08 - 00000000 ____D C:\Users\Susanne\Downloads\Edelweiss Design 2016-10-27 17:38 - 2015-11-07 18:32 - 00000000 ____D C:\Users\Susanne\Downloads\Katharine 2016-10-27 15:57 - 2015-12-29 19:21 - 00000000 ____D C:\Users\Susanne\Downloads\Alex Prihodko 2016-10-27 15:48 - 2015-11-15 15:26 - 00000000 ____D C:\Users\Susanne\Downloads\DB Joan 2016-10-27 15:39 - 2016-05-22 17:36 - 00000000 ____D C:\Users\Susanne\Downloads\Chili Designz 2016-10-27 15:36 - 2016-05-21 19:01 - 00000000 ____D C:\Users\Susanne\Downloads\Wicked Creationz Scraps 2016-10-27 15:35 - 2016-04-19 19:08 - 00000000 ____D C:\Users\Susanne\Downloads\Irish Princess Designs IPD 2016-10-27 13:55 - 2016-07-11 13:37 - 00000000 ____D C:\Users\Susanne\Downloads\DevilishDezines 2016-10-27 10:29 - 2015-12-08 11:14 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2016-10-27 10:29 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2016-10-27 10:29 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Macromed 2016-10-25 18:44 - 2015-11-24 19:21 - 00000000 ____D C:\Users\Susanne\Downloads\Alicia Mujica 2016-10-24 22:54 - 2014-11-21 12:01 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2016-10-24 22:54 - 2014-11-21 12:01 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2016-10-24 19:29 - 2015-08-16 18:59 - 00000000 ____D C:\Users\Susanne\AppData\Local\CrashDumps 2016-10-24 18:55 - 2015-10-22 18:34 - 00000000 ____D C:\Users\Susanne\Downloads\Stan Dudin 2016-10-24 18:51 - 2016-01-03 13:23 - 00000000 ____D C:\Users\Susanne\Downloads\Jose Cano 2016-10-24 10:44 - 2015-08-28 15:41 - 00000000 ____D C:\ProgramData\Oracle 2016-10-24 10:39 - 2015-08-28 15:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2016-10-24 10:39 - 2015-08-28 15:43 - 00000000 ____D C:\Program Files (x86)\Java 2016-10-24 10:38 - 2015-08-28 15:43 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2016-10-24 10:38 - 2015-08-25 19:01 - 00000000 ____D C:\ProgramData\Unchecky 2016-10-22 19:46 - 2015-11-02 13:38 - 00000000 ____D C:\Users\Susanne\Downloads\Sophisticat 2016-10-22 19:42 - 2016-03-05 16:16 - 00000000 ____D C:\Users\Susanne\Downloads\Avroraart 2016-10-22 19:36 - 2016-04-22 19:44 - 00000000 ____D C:\Users\Susanne\Downloads\Spazz 2016-10-22 18:07 - 2016-02-27 18:49 - 00000000 ____D C:\Users\Susanne\Downloads\Maryline Cazenave 2016-10-22 18:03 - 2015-10-17 14:28 - 00000000 ____D C:\Users\Susanne\Downloads\PinUpToons 2016-10-21 13:41 - 2012-07-26 06:26 - 00003255 _____ C:\WINDOWS\system32\Drivers\etc\Hosts.old 2016-10-21 13:27 - 2016-05-24 12:43 - 00212560 _____ C:\WINDOWS\system32\Drivers\fwndislwf64.sys 2016-10-20 18:30 - 2015-11-28 14:34 - 00000000 ____D C:\Users\Susanne\Downloads\ZindyNielsen 2016-10-20 18:29 - 2014-03-01 11:45 - 00000000 ____D C:\ProgramData\Temp 2016-10-18 19:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-10-18 16:11 - 2016-07-04 18:39 - 00000000 ____D C:\Users\Susanne\Downloads\Ginnybug Designz 2016-10-18 13:40 - 2016-03-05 18:04 - 00000000 ____D C:\Users\Susanne\Downloads\Ismael RAC 2016-10-17 13:04 - 2016-10-03 19:36 - 00000000 ____D C:\Users\Susanne\Downloads\Mysterfeerie Creation 2016-10-17 11:31 - 2016-03-05 17:47 - 00000000 ____D C:\Users\Susanne\Downloads\Lady Mishka 2016-10-16 15:30 - 2016-01-21 16:24 - 00000000 ____D C:\Users\Susanne\Downloads\Karneval 2016-10-16 13:29 - 2015-10-17 12:38 - 00000000 ____D C:\Users\Susanne\Downloads\X Mas 2016-10-14 08:45 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache 2016-10-13 13:24 - 2015-08-22 19:35 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2016-10-13 13:24 - 2015-08-22 19:35 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2016-10-13 13:24 - 2013-08-22 15:44 - 00462016 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-10-12 20:11 - 2015-11-24 11:02 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-10-12 20:11 - 2014-11-21 11:51 - 00000000 ___SD C:\WINDOWS\system32\CompatTel 2016-10-12 20:11 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData 2016-10-12 18:07 - 2015-10-15 07:11 - 00004476 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2016-10-12 17:04 - 2016-07-21 14:47 - 00474112 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2016-10-12 17:03 - 2015-08-13 17:18 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-10-12 17:00 - 2015-08-13 17:18 - 143495576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-10-12 16:58 - 2015-08-22 19:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2016-10-12 16:36 - 2016-01-12 18:08 - 00000000 ____D C:\Users\Susanne\Downloads\Blings 2016-10-12 15:48 - 2015-10-15 15:00 - 00000000 ____D C:\Users\Susanne\Downloads\WordArt 2016-10-10 14:21 - 2015-10-17 18:16 - 00000000 ____D C:\Users\Susanne\Downloads\Dominic Marco 2016-10-09 18:42 - 2016-01-03 13:06 - 00000000 ____D C:\Users\Susanne\Downloads\AmyMarieKits 2016-10-09 18:13 - 2016-06-13 18:44 - 00000000 ____D C:\Users\Susanne\Downloads\Moonshine Dezines 2016-10-09 18:04 - 2016-07-26 18:48 - 00000000 ____D C:\Users\Susanne\Downloads\SATC DL Parca 2016-10-09 17:22 - 2016-01-03 13:34 - 00000000 ____D C:\Users\Susanne\Downloads\Marika 2016-10-09 17:04 - 2015-11-23 16:06 - 00000000 ____D C:\Users\Susanne 2016-10-09 16:57 - 2015-11-02 14:14 - 00000000 ____D C:\Users\Susanne\Downloads\Celinart 2016-10-09 10:39 - 2015-08-12 20:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-10-09 10:39 - 2013-08-22 16:43 - 00000000 ____D C:\WINDOWS\DigitalLocker ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-08-29 17:04 - 2015-08-29 17:04 - 3585654 _____ () C:\Users\Susanne\AppData\Roaming\SageThumbs wallpaper.bmp 2015-08-12 20:13 - 2016-11-06 13:22 - 0000073 _____ () C:\Users\Susanne\AppData\Roaming\sp_data.sys 2016-01-17 14:35 - 2016-03-11 19:57 - 0005120 _____ () C:\Users\Susanne\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2016-06-02 17:27 - 2016-06-02 17:27 - 0007600 _____ () C:\Users\Susanne\AppData\Local\Resmon.ResmonCfg 2015-08-28 17:48 - 2015-11-13 20:12 - 4969472 _____ () C:\Users\Susanne\AppData\Local\SageThumbs.db3 2016-04-03 17:22 - 2016-04-03 17:22 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2015-10-28 07:07 - 2015-10-28 07:07 - 0000261 _____ () C:\ProgramData\fontcacheev1.dat 2015-11-29 18:31 - 2015-11-29 18:31 - 0004943 _____ () C:\ProgramData\rxsmznjf.zcp Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\ProgramData\fontcacheev1.dat C:\Users\Susanne\359.06-notebook-win8-win7-64bit-international-whql.exe Einige Dateien in TEMP: ==================== C:\Users\Susanne\AppData\Local\Temp\libeay32.dll C:\Users\Susanne\AppData\Local\Temp\msvcr120.dll C:\Users\Susanne\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-11-01 16:57 ==================== Ende von FRST.txt ============================ |
|
06.11.2016, 16:58
| #3 |
| | AdwCleaner, Registryeinträge die sich nicht löschen lassenCode:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 04-11-2016
durchgeführt von Susanne (06-11-2016 16:17:58)
Gestartet von C:\Users\Susanne\Desktop
Windows 8.1 (Update) (X64) (2015-11-23 16:34:54)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-1794304933-3207535254-2068445666-500 - Administrator - Disabled)
Gast (S-1-5-21-1794304933-3207535254-2068445666-501 - Limited - Disabled) => C:\Users\Gast
Susanne (S-1-5-21-1794304933-3207535254-2068445666-1002 - Administrator - Enabled) => C:\Users\Susanne
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Emsisoft Internet Security (Enabled - Up to date) {701CB209-EBBC-AADC-11E6-DE73E7AF4C9D}
AS: Emsisoft Internet Security (Enabled - Up to date) {CB7D53ED-CD86-A552-2B56-E5019C280620}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Emsisoft Internet Security (Enabled) {4827332C-A1D3-AB84-3AB9-7746197C0BE6}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.205 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.2.172 - Adobe Systems, Inc.)
Alien Skin Blow Up (HKLM-x32\...\Blow Up) (Version: - )
Alien Skin Exposure (HKLM-x32\...\Exposure) (Version: - )
Alien Skin Eye Candy 5 Nature (HKLM-x32\...\EyeCandy5Nature) (Version: - )
Alien Skin Eye Candy 5 Textures (HKLM-x32\...\EyeCandy5Textures) (Version: - )
Alien Skin Eye Candy 7 (HKLM\...\Alien Skin Eye Candy 7) (Version: - Alien Skin)
Alien Skin Image Doctor 2 (HKLM-x32\...\Image Doctor 2) (Version: - )
Alien Skin Snap Art (HKLM-x32\...\Snap Art) (Version: - )
Apowersoft Smartphone Manager Version 2.7.1 (HKLM-x32\...\{4A00E3C4-2D0F-4AE7-9F2A-74870BE09EF8}_is1) (Version: 2.7.1 - APOWERSOFT LIMITED)
Apple Application Support (32-Bit) (HKLM-x32\...\{29DB9165-5FC1-48F0-9188-26123F526848}) (Version: 5.0.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{5905C8CF-1C88-4478-A48E-4E458AD1BC7E}) (Version: 5.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{D4D86CB2-2370-4691-8272-3869EDED6C64}) (Version: 10.0.0.18 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
ASUS InstantOn (HKLM-x32\...\{749F674B-2674-47E8-879C-5626A06B2A91}) (Version: 3.0.6 - ASUS)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.1.13 - ASUS)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.4 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 2.1.7 - ASUS)
ASUS Screen Saver (HKLM\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 1.0.1 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.1.3 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 2.01.0005 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 2.1.5 - ASUS)
ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4924.52 - CyberLink Corp.)
ASUSDVD (x32 Version: 10.0.4924.52 - CyberLink Corp.) Hidden
AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.309 - ASUSTEK)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0027 - ASUS)
AVS Video Converter 9.1 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: 9.1.4.574 - Online Media Technologies Ltd.)
Azteca (x32 Version: 2.2.0.97 - WildTangent) Hidden
Bejeweled 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.23 - Piriform)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
congstar Internet-Manager (HKLM-x32\...\{27D28586-BEF1-4E06-8787-3B1FC3A41489}) (Version: 1.0.0.3 - ZTE CORPORATION)
Contents (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
CopyTrans Control Center deinstallieren (HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\CopyTrans Suite) (Version: 4.004 - WindSolutions)
Corel FastFlick (HKLM-x32\...\_{10EC8494-8A92-49D8-9677-2483EB01F7F1}) (Version: 1.0.0.101 - Corel Corporation)
Corel KPT Collection (HKLM-x32\...\_{B16DC136-9583-4C54-BE27-F001BBC546B1}) (Version: 1.0.0.109 - Corel Corporation)
Corel KPT Collection (x32 Version: 1.0.0.109 - Ihr Firmenname) Hidden
Corel PaintShop Pro X7 (HKLM-x32\...\_{176F50D6-6857-49CE-B731-65F757EE3F0D}) (Version: 17.3.0.30 - Corel Corporation)
Corel PaintShop Pro X7 (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
Creative Content (x32 Version: 1.0.0.114 - Corel Corporation) Hidden
Creative Content (x32 Version: 1.0.0.114 - Ihr Firmenname) Hidden
CrystalDiskInfo 6.5.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.5.2 - Crystal Dew World)
Cut the Rope (x32 Version: 3.0.2.38 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 13.4.21 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.51.1 - Dropbox, Inc.) Hidden
Emsisoft Internet Security (HKLM\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 11.0 - Emsisoft Ltd.)
Filters Unlimited 2.0 (HKLM-x32\...\Filters Unlimited_is1) (Version: - )
Filzip 3.06 (HKLM-x32\...\Filzip 3.0.6.93_is1) (Version: 3.0.6 - Philipp Engel)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.14.280 - SurfRight B.V.)
Hotspot Shield 5.4.11 (HKLM-x32\...\HotspotShield) (Version: 5.4.11 - AnchorFree Inc.)
Hotspot Shield 5.4.11 Embedded (x32 Version: 5.4.11.9772 - Buildbot) Hidden
ICA (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
ICA (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
Intel(R) Driver Update Utility 2.4 (x32 Version: 2.4.0.15 - Intel) Hidden
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.36354 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation)
Intel(R) Product Improvement Program (x32 Version: 2.1.27.3 - Intel) Hidden
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{302600C1-6BDF-4FD1-1309-148929CC1385}) (Version: 3.1.1309.0390 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.27 - Intel(R) Corporation) Hidden
Intel® Driver Update Utility (HKLM-x32\...\{1b09c4de-9cae-4122-b17c-65d395062b50}) (Version: 2.4.0.15 - Intel)
IPM_PSP_COM (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
IPM_PSP_COM64 (Version: 17.3.0.30 - Corel Corporation) Hidden
IPM_VS_Pro (x32 Version: 1.0 - Corel Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
iTunes (HKLM\...\{9946A4F7-E0FD-4A33-82D1-06CBFFBBB9F9}) (Version: 12.5.1.21 - Apple Inc.)
Jasc Animation Shop 3 (HKLM-x32\...\{7C4196CA-CA41-4F34-9C08-7724E7705D52}) (Version: 3.11 - Ihr Firmenname)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2-1) (Version: 2.0 - AppWork GmbH)
LockHunter 3.1, 32/64 bit (HKLM\...\LockHunter_is1) (Version: - Crystal Rich Ltd)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 41.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 41.0.2 (x86 de)) (Version: 41.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.4.0.6115 - Mozilla)
Mozilla Thunderbird 45.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.4.0 (x86 de)) (Version: 45.4.0 - Mozilla)
MultiTranse European 6.6 special build (HKLM-x32\...\MultiTranse European_is1) (Version: - Tialsoft Software)
MyBitCast 2.0 (HKLM-x32\...\MyBitCast) (Version: 2.0 - ASUS)
NewBlue Video Essentials for Windows (HKLM-x32\...\NewBlue Video Essentials for Windows) (Version: 3.0 - NewBlue)
NVIDIA GeForce Experience 2.11.2.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.2.46 - NVIDIA Corporation)
NVIDIA Grafiktreiber 359.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 359.46 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
PDF24 Creator 7.9.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Peggle (x32 Version: 2.2.0.95 - WildTangent) Hidden
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plugin Commander Light 1.62 (HKLM-x32\...\Plugin Commander Light 1.62_is1) (Version: 1.60 - The Plugin Site)
PSPPContent (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
PSPPHelp (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
PSPPro64 (Version: 17.3.0.30 - Corel Corporation) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.220 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Raccolta foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.38.115.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7514 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39029 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.52 - Piriform)
Revo Uninstaller Pro 3.1.6 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.6 - VS Revo Group, Ltd.)
Schmaili 9.0 (HKLM-x32\...\Schmaili_is1) (Version: - )
Setup (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
Setup (x32 Version: 17.3.0.30 - Ihr Firmenname) Hidden
Share (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
SpywareBlaster 5.2 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.2.0 - BrightFort LLC)
Sqirlz Morph (HKLM-x32\...\Sqirlz Morph) (Version: 2.1 - xiberpix)
Sqirlz Water Reflections (HKLM-x32\...\Sqirlz Water Reflections) (Version: 2.6 - xiberpix)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden
TeraCopy 2.3 (HKLM\...\TeraCopy_is1) (Version: - Code Sector)
Toon Boom Studio 8.1 (HKLM-x32\...\{A3A336BA-61CF-4B0F-83D7-690A8FB23A5D}) (Version: - Toon Boom Animation Inc.)
Unchecky v1.0.1 (HKLM-x32\...\Unchecky) (Version: 1.0.1 - RaMMicHaeL)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VSClassic (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
VSPro (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
Vulkan Run Time Libraries 1.0.5.1 (HKLM\...\VulkanRT1.0.5.1) (Version: 1.0.5.1 - LunarG, Inc.)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.0.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden
Windows Driver Package - ASUS (ATP) Mouse (01/10/2013 1.0.0.170) (HKLM\...\4A9DE1E9EBC800B7F01739D4DE7363EF6751BDF5) (Version: 01/10/2013 1.0.0.170 - ASUS)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
WinRAR 5.21 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {1584372C-BE27-42D3-9C29-0B7B050F0676} - System32\Tasks\{DFE56015-71E1-4F3C-B92C-4BC78BB43DCF} => pcalua.exe -a "C:\Users\Susanne\Desktop\SignatureCreator1.12\Signature Creator v1.12\signcrtr.exe" -d "C:\Users\Susanne\Desktop\SignatureCreator1.12\Signature Creator v1.12"
Task: {15922986-92BB-4514-B441-715A41DC784F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-09-16] (Adobe Systems Incorporated)
Task: {1DE75A1E-B3F6-410F-9D0A-6C724DC5D7BA} - System32\Tasks\{3A681209-9B28-4FB4-B434-90C78D19AA76} => pcalua.exe -a C:\Users\Susanne\Desktop\win64_153342.exe -d C:\Users\Susanne\Desktop
Task: {1F93A434-BC9F-4437-AA95-0868BAB8E7D1} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-09-28] (Piriform Ltd)
Task: {278FB095-70F3-41AF-86E1-ACDCC3DFCD4F} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2013-02-26] (ASUSTeK Computer Inc.)
Task: {37A4D3D1-A9C0-4F1F-A1E4-69F7106967AD} - System32\Tasks\{521DB96D-E9CC-4273-A927-56A7DF8BA731} => pcalua.exe -a "C:\ProgramData\SlimWare Utilities, Inc\DriverApp\Downloads\00F46400BE06BC2EF0051C27633897CA9F0000000015BC1B9E.exe"
Task: {384F7404-E4A7-4AF6-BFC2-0E966AB9A65A} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-07] (Dropbox, Inc.)
Task: {46CE1FA1-950E-4406-BE83-9B8278BE36FE} - System32\Tasks\Intel\Intel Telemetry 2 (x86) => C:\Program Files (x86)\Intel\Telemetry 2.0\lrio.exe [2016-03-17] (Intel Corporation)
Task: {4A0493F9-F5CF-45E0-BCBF-B791EF2C6690} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {568A8D83-61EE-417F-B2F4-D8E199F65D47} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {65E4B102-42C8-4272-BE24-C07ECF847106} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2013-01-04] ()
Task: {6C3DD3AD-739B-4B44-AEC6-9844F7E1D814} - System32\Tasks\{2175E4B1-B401-419C-B3FC-7F5CFDE77152} => pcalua.exe -a E:\SETUP.EXE -d E:\ -c /AUTORUN
Task: {7004ABEF-4FB5-4DB9-9D07-BBEE825C98A6} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-08-24] (ASUS)
Task: {749335FC-4206-4E47-864C-4C789D3DB14B} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-10-27] (Adobe Systems Incorporated)
Task: {7535A508-68C4-4552-B25C-041DB8F71935} - System32\Tasks\ASUS InstantOn Config => C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe [2013-01-22] (ASUS)
Task: {7BEB7A52-7115-44FE-983C-760FD41865A4} - System32\Tasks\{A7D58E18-1B4E-465F-B6ED-4EFE3829029A} => pcalua.exe -a C:\Users\Susanne\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=face
Task: {937F2797-535D-4D7E-865E-DF6460A3E660} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2012-11-28] (ASUS)
Task: {9C8D2AEE-2E56-486A-8603-FD26811BF306} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-07] (Dropbox, Inc.)
Task: {A143A7AF-E6A4-41CB-A24F-4682A328495A} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-09-18] (ASUSTek Computer Inc.)
Task: {A2668456-59ED-4A07-9421-09A7A3052F99} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {B500B226-A848-48AC-AD89-FC46DD40726A} - System32\Tasks\{C34BCC4B-E192-4B85-9591-5B9275232FC4} => pcalua.exe -a "F:\Susanne´s Dateien vom Läppi\Susanne\C\Schmaili\Schmaili90\unins000.exe" -d "F:\Susanne´s Dateien vom Läppi\Susanne\C\Schmaili\Schmaili90"
Task: {B78CA17D-3A08-43C7-AC90-44AF8F9116DF} - System32\Tasks\{825879E2-CC36-47E0-887E-8D5A3643532D} => pcalua.exe -a C:\Users\Susanne\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=pcs
Task: {D65C524D-CC2D-4D37-AB73-7D79DD3F9F7E} - System32\Tasks\ASUS Touchpad Launcher (x64) => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2013-04-16] (AsusTek)
Task: {DF4E779D-E89D-43BF-BFEA-92AFBD12A035} - System32\Tasks\USER_ESRV_SVC_WILLAMETTE => Wscript.exe //B //NoLogo "C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\task.vbs"
Task: {E7DB6F04-0E5F-49F6-82E1-C45912A304B9} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {E833CAEB-5DC4-47B3-8051-EF7AA579E8AD} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {EB9F98C6-FED1-40F0-BFD1-4272F4DE9576} - System32\Tasks\{D52E5E0D-7B83-453B-B34F-8346DD360FFF} => pcalua.exe -a "C:\Program Files\Realtek\Audio\HDA\RtlUpd64.exe" -c -r -m -nrg2709
Task: {EF2C2CD6-5F9B-43F9-A3B4-87DE57826197} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2015-02-12] ()
Task: {FE9FAC54-D116-4F35-8188-88E83F570501} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2000-01-01] (Realtek Semiconductor)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Meine Websites auf MSN\target.lnk -> hxxp://www.msnusers.com
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-11-23 16:01 - 2016-02-15 08:26 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-05-24 12:43 - 2016-10-21 13:27 - 01024968 _____ () C:\Program Files\Emsisoft Internet Security\fw64.dll
2015-09-11 19:02 - 2015-09-11 19:02 - 00803488 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2015-08-28 14:59 - 2012-01-20 13:55 - 00678400 _____ () C:\Program Files\TeraCopy\TeraCopyExt64.dll
2012-08-24 18:26 - 2012-08-24 18:26 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll
2016-09-01 17:12 - 2016-09-01 17:12 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-09-01 17:12 - 2016-09-01 17:12 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00118424 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe
2016-03-09 19:43 - 2016-03-09 19:43 - 00256152 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\analyzer.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00034968 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\AnalyzerTask.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00019096 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\DriverDetection.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00019688 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\DriverInfo.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00026856 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\IDUUDetection.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00460952 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv.exe
2016-04-28 14:08 - 2016-03-09 19:43 - 00709272 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_modeler.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00188568 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\foreground_window_input.dll
2013-01-25 01:09 - 2013-01-25 01:09 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-01-25 01:05 - 2013-01-25 01:05 - 00084992 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll
2013-10-01 12:02 - 2013-10-01 12:02 - 00094208 _____ () C:\Windows\system32\IccLibDll_x64.dll
2013-01-25 01:12 - 2013-01-25 01:12 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
2016-09-06 16:10 - 2011-11-07 09:52 - 00220944 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\dbus-daemon.exe
2016-09-06 16:10 - 2011-11-07 09:52 - 00036624 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\db_daemon.exe
2016-04-28 14:08 - 2016-03-09 19:43 - 00416408 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe
2016-04-28 14:08 - 2016-03-09 19:43 - 00130712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_process_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00025752 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_system_power_state_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00059544 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_quality_and_reliability_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00194712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\acpi_battery_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00159896 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\sema_thermal_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00158360 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\wifi_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00050840 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\devices_use_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00032920 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_disktrace_input.dll
2016-08-24 00:04 - 2016-08-24 00:04 - 00166520 _____ () C:\Program Files (x86)\Hotspot Shield\bin\CrashRpt1403.dll
2015-12-21 17:36 - 2016-03-24 06:35 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-09-06 16:10 - 2011-05-06 04:03 - 00594944 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\dbus-1.dll
2016-09-06 16:10 - 2011-11-07 09:39 - 00099328 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\itapi.dll
2016-09-06 16:10 - 2011-11-07 09:43 - 00020992 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\libctlsvr.dll
2016-09-06 16:10 - 2010-10-14 10:37 - 00971776 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\libxml2.dll
2016-09-06 16:10 - 2011-11-07 09:38 - 00035840 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\libConfig.dll
2016-09-06 16:10 - 2011-11-07 09:38 - 00027136 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\log.dll
2016-09-06 16:10 - 2011-11-07 09:38 - 00055296 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\coder.dll
2016-09-06 16:10 - 2011-11-07 09:39 - 00043008 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\audio.dll
2016-09-06 16:10 - 2010-10-14 10:37 - 00080688 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\zlib1.dll
2016-09-06 16:10 - 2007-09-09 16:07 - 00151552 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\libexpat.dll
2016-09-06 16:10 - 2011-05-06 04:02 - 00341504 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\sqlite3.dll
2016-05-21 16:03 - 2016-10-10 19:19 - 00035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2016-10-28 11:37 - 2016-10-10 19:19 - 00145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2016-10-28 11:37 - 2016-10-10 19:19 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
2016-10-28 11:37 - 2016-10-10 19:19 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2016-05-21 16:03 - 2016-10-10 19:19 - 00100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2016-05-21 15:57 - 2016-10-10 19:19 - 00018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2016-05-21 15:57 - 2016-10-24 14:16 - 00019760 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2016-05-21 15:57 - 2016-10-10 19:19 - 00694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2016-10-28 11:37 - 2016-10-24 14:15 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2016-05-21 16:03 - 2016-10-10 19:20 - 00123856 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2016-10-28 11:37 - 2016-10-24 14:15 - 01682760 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2016-10-28 11:37 - 2016-10-24 14:15 - 00020808 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2016-08-05 19:23 - 2016-10-24 14:16 - 00021312 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
2016-10-28 11:37 - 2016-10-24 14:15 - 00052024 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2016-10-28 11:37 - 2016-10-24 14:15 - 00038696 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2016-10-28 11:37 - 2016-10-10 19:19 - 00392144 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2016-10-28 11:37 - 2016-10-10 19:21 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2016-05-21 15:57 - 2016-10-24 14:16 - 00381752 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2016-08-05 19:23 - 2016-10-24 14:16 - 00025424 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2016-10-28 11:37 - 2016-10-24 14:15 - 00246592 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
2016-10-28 11:37 - 2016-10-24 14:15 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2016-08-05 19:23 - 2016-10-10 19:20 - 00241104 _____ () C:\Program Files (x86)\Dropbox\Client\_jpegtran.pyd
2016-10-28 11:37 - 2016-10-24 14:15 - 00020280 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2016-05-21 15:57 - 2016-10-24 14:16 - 00023376 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2016-05-21 15:57 - 2016-10-24 14:16 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi._winffi_iphlpapi.pyd
2016-05-21 15:57 - 2016-10-24 14:16 - 00019776 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror._winffi_winerror.pyd
2016-05-21 15:57 - 2016-10-24 14:16 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet._winffi_wininet.pyd
2016-05-21 16:03 - 2016-10-10 19:21 - 00350152 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2016-05-21 16:03 - 2016-10-24 14:16 - 00022352 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2016-10-28 11:37 - 2016-10-24 14:15 - 00024392 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2016-10-28 11:37 - 2016-10-10 19:17 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2016-10-28 11:37 - 2016-10-24 14:15 - 00084280 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2016-10-28 11:37 - 2016-10-24 14:15 - 01826096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2016-05-21 15:57 - 2016-10-10 19:19 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2016-10-28 11:37 - 2016-10-24 14:16 - 00531248 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2016-10-28 11:37 - 2016-10-24 14:16 - 03928880 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2016-10-28 11:37 - 2016-10-24 14:15 - 01972528 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2016-10-28 11:37 - 2016-10-24 14:16 - 00133424 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2016-10-28 11:37 - 2016-10-24 14:16 - 00224056 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2016-10-28 11:37 - 2016-10-24 14:16 - 00207672 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2016-08-05 19:23 - 2016-10-24 14:16 - 00020288 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32._winffi_user32.pyd
2016-10-28 11:37 - 2016-10-10 19:24 - 00017864 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.dll
2016-10-28 11:37 - 2016-10-10 19:24 - 01631184 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
2016-05-21 15:57 - 2016-10-10 19:21 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2016-08-05 19:23 - 2016-10-24 14:16 - 00024904 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd
2016-10-28 11:37 - 2016-10-24 14:16 - 00546096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2016-10-28 11:37 - 2016-10-24 14:16 - 00357680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2016-10-28 11:37 - 2016-10-24 14:16 - 00042808 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
2016-10-28 11:37 - 2016-10-24 14:16 - 00168760 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2014-03-01 11:32 - 2012-06-25 03:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [127]
AlternateDataStreams: C:\ProgramData\Temp:890CC2F3 [127]
AlternateDataStreams: C:\Users\Susanne\Downloads\CDO AnnaMarine-11-1+:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\CDO GlistenSnowFlakes:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\CDO WinterMagic:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\SNC_CUPIDO COLLAB:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\Sue PSP Stuff:com.dropbox.attributes [168]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Software\Classes\.exe: => <===== ACHTUNG
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0411dd.com -> 0411dd.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1001movie.com -> 1001movie.com
Da befinden sich 6091 mehr Seiten.
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Susanne\AppData\Local\Microsoft\Windows\Themes\Rainbows\DesktopBackground\rainbows7.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: GamesAppService => 3
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: nvUpdatusService => 2
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "egui"
HKLM\...\StartupApproved\Run: => "Corel Update Helper"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKLM\...\StartupApproved\Run32: => "Malwarebytes Anti-Exploit"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\StartupFolder: => "Adobe Gamma.lnk"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\Run: => "Digiarty_Software_AirPlayit"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\Run: => "Schmaili"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\Run: => "Skype"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{698A6761-A7D7-436A-828F-F5D0B9649607}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{725B442B-AA22-40A6-9A4C-C080895D11B3}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{43ED2D84-F0D6-4176-8654-2BF85E93929E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{A83C85B4-8237-4A7A-B5CF-F4548CE998C8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{B05144DD-2A59-4CE6-AC21-A487450C32BB}] => (Allow) LPort=1900
FirewallRules: [{6E10BE55-BF0B-41CB-874B-35BBAE2A6CC8}] => (Allow) LPort=2869
FirewallRules: [{6FB3AE7A-27BA-4EC1-8459-F674A66F398E}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5732DE92-F2E8-4EFA-8211-59D9C1216D9C}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{FB4B5D1F-46F4-4EE4-A9DD-1CC5A993E8B9}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{BEBD6992-F474-476F-AA99-813387C3315B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{12619529-46A3-401F-8C45-41DA4469E6B7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{75F78078-FA69-47CD-84C8-ABAF1E6028BA}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{5F08B6D7-908A-4C10-BE37-07290BAA1FC4}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{DC5EE5FD-A4A3-4403-A62A-E542DAC852F8}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\Apowersoft Phone Manager.exe
FirewallRules: [{0253E503-D67B-4A8C-AF6E-60B041B9957E}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\Apowersoft Phone Manager.exe
FirewallRules: [{07DB8C66-1A03-4036-B21D-E47878AE360E}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\ApowersoftAndroidDaemon.exe
FirewallRules: [{F8374132-09A8-413C-90AB-BBDB95A4DDB1}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\ApowersoftAndroidDaemon.exe
FirewallRules: [{43F41AD3-EA64-4AB5-861C-9B99C3F868C3}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\iOS Recorder.exe
FirewallRules: [{6E936865-405B-44EC-B6AB-CF8C8EE059DE}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\iOS Recorder.exe
FirewallRules: [{1B75F8F1-6B88-4172-9246-7564E7E451F6}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{7BAD37C1-5B00-4E99-B040-688BC81EE367}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
==================== Wiederherstellungspunkte =========================
21-10-2016 13:17:54 Geplanter Prüfpunkt
29-10-2016 13:23:01 Windows Update
06-11-2016 12:58:40 Geplanter Prüfpunkt
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: Bluetooth Audio Device
Description: Bluetooth Audio Device
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_A2DP
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: Virtual Bluetooth Support (Include Audio)
Description: Virtual Bluetooth Support (Include Audio)
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: AthBTPort
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Bluetooth LWFLT Device
Description: Bluetooth LWFLT Device
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_LWFLT
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (11/06/2016 01:22:23 PM) (Source: DbxSvc) (EventID: 320) (User: )
Description: Failed to connect to the driver: (-2147024894) Das System kann die angegebene Datei nicht finden.
Error: (11/04/2016 05:49:04 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 3.11.2016.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: ab8
Startzeit: 01d236bb56f4b741
Endzeit: 4294967295
Anwendungspfad: C:\Users\Susanne\Desktop\FRST64.exe
Berichts-ID: 97b38f14-a2ae-11e6-bf86-24fd52f78824
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (11/04/2016 05:46:34 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 3.11.2016.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 880
Startzeit: 01d236baff784b8d
Endzeit: 4294967295
Anwendungspfad: C:\Users\Susanne\Desktop\FRST-OlderVersion\FRST64.exe
Berichts-ID: 3e622c0a-a2ae-11e6-bf86-24fd52f78824
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (11/04/2016 05:44:44 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 3.11.2016.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: fc0
Startzeit: 01d236babc3e639c
Endzeit: 4294967295
Anwendungspfad: C:\Users\Susanne\Desktop\FRST64.exe
Berichts-ID: fc9b4de3-a2ad-11e6-bf86-24fd52f78824
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (11/04/2016 05:40:40 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 3.11.2016.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 12f0
Startzeit: 01d236ba2b205cfa
Endzeit: 4294967295
Anwendungspfad: C:\Users\Susanne\Desktop\FRST64.exe
Berichts-ID: 6b648462-a2ad-11e6-bf86-24fd52f78824
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (11/04/2016 05:39:42 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 3.11.2016.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1498
Startzeit: 01d236ba08a11e44
Endzeit: 4294967295
Anwendungspfad: C:\Users\Susanne\Desktop\FRST64.exe
Berichts-ID: 48e38e54-a2ad-11e6-bf86-24fd52f78824
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (11/04/2016 05:39:20 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 3.11.2016.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1a04
Startzeit: 01d236b9f89d131f
Endzeit: 4294967295
Anwendungspfad: C:\Users\Susanne\Desktop\FRST64.exe
Berichts-ID: 3a45b5c6-a2ad-11e6-bf86-24fd52f78824
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (11/04/2016 12:56:43 PM) (Source: DbxSvc) (EventID: 320) (User: )
Description: Failed to connect to the driver: (-2147024894) Das System kann die angegebene Datei nicht finden.
Error: (11/03/2016 02:53:35 PM) (Source: DbxSvc) (EventID: 320) (User: )
Description: Failed to connect to the driver: (-2147024894) Das System kann die angegebene Datei nicht finden.
Error: (11/03/2016 02:52:15 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.
Details:
Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06)
Systemfehler:
=============
Error: (11/06/2016 01:29:18 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Error: (11/06/2016 01:25:08 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: Susanne)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Error: (11/06/2016 01:22:36 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Error: (11/06/2016 01:22:34 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Error: (11/06/2016 01:22:25 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Error: (11/06/2016 01:22:20 PM) (Source: NETLOGON) (EventID: 3095) (User: )
Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als
Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser
Konfiguration nicht gestartet zu sein.
Error: (11/06/2016 01:21:00 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (11/06/2016 01:21:00 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Energy Server Service WILLAMETTE" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/06/2016 01:21:00 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/06/2016 01:21:00 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) ME Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
CodeIntegrity:
===================================
Date: 2016-07-23 18:39:48.072
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:47.369
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:45.338
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:44.853
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:41.649
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:38.959
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:36.146
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:35.615
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:33.629
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:33.176
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7-3630QM CPU @ 2.40GHz
Prozentuale Nutzung des RAM: 35%
Installierter physikalischer RAM: 8069.73 MB
Verfügbarer physikalischer RAM: 5186.49 MB
Summe virtueller Speicher: 10245.73 MB
Verfügbarer virtueller Speicher: 6461.94 MB
==================== Laufwerke ================================
Drive c: (OS) (Fixed) (Total:1117.37 GB) (Free:832.04 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (Data) (Fixed) (Total:1655.6 GB) (Free:1655.12 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 2794.5 GB) (Disk ID: A523CAED)
Partition: GPT.
==================== Ende von Addition.txt ============================
|
|
12.11.2016, 13:45
| #4 |
| /// TB-Ausbilder   | AdwCleaner, Registryeinträge die sich nicht löschen lassen Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen. Bitte beachte folgende Hinweise:
Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Danke für deine Mitarbeit! Schritt 1 Downloade Dir bitte  Malwarebytes Anti-Malware
Schritt 2 Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Schritt 3
Bitte poste mit deiner nächsten Antwort
|
|
13.11.2016, 17:17
| #5 |
| | Danke Matthias Hier sind die Logfiles: Habe übrigens Malwarebytes AntiMalware Premium. Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 13.11.2016 Suchlaufzeit: 15:37 Protokolldatei: mbamlog.txt Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2016.11.13.04 Rootkit-Datenbank: v2016.10.31.01 Lizenz: Premium-Version Malware-Schutz: Aktiviert Schutz vor bösartigen Websites: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: Susanne Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 375376 Abgelaufene Zeit: 25 Min., 30 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 0 (keine bösartigen Elemente erkannt) Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.9 (09.30.2016)
Operating System: Windows 8.1 x64
Ran by Susanne (Administrator) on 13.11.2016 at 16:54:16,48
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 4
Successfully deleted: C:\Users\Susanne\AppData\Local\crashrpt (Folder)
Successfully deleted: C:\WINDOWS\hgfs.sys (File)
Successfully deleted: C:\WINDOWS\prleth.sys (File)
Successfully deleted: C:\WINDOWS\wininit.ini (File)
Registry: 1
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} (Registry Key)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 13.11.2016 at 16:59:07,53
End of JRT log
FRST Logfile: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12-11-2016 durchgeführt von Susanne (Administrator) auf SUSANNE (13-11-2016 17:04:26) Gestartet von C:\Users\Susanne\Desktop Geladene Profile: Susanne (Verfügbare Profile: Susanne & Gast) Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Code Sector) C:\Program Files\TeraCopy\TeraCopyService.exe (Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2service.exe (SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe (Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe () C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe (RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2guard.exe (Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2start.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_bg.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13877464 2000-01-01] (Realtek Semiconductor) HKLM\...\Run: [Corel Update Helper] => c:\Program Files\Corel\Corel PaintShop Pro X7 (64-bit)\pua.exe [2004312 2015-05-19] (Corel Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397752 2016-03-24] (NVIDIA Corporation) HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation) HKLM\...\Run: [emsisoft anti-malware] => c:\program files\emsisoft internet security\a2guard.exe [7838392 2016-10-29] (Emsisoft Ltd) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2016-11-01] (Apple Inc.) HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.) HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [25673776 2016-11-07] (Dropbox, Inc.) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [210432 2016-07-05] (Geek Software GmbH) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation) Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [131712 2013-01-25] (Atheros Communications) HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\Run: [Schmaili] => C:\Schmaili90\schmaili.exe [536576 2007-08-03] (Marc Waesche Services) HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.) HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\MountPoints2: {25215d21-71fb-11e6-bf71-24fd52f78824} - "F:\windows\Data\setup.exe" AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [186136 2016-04-21] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [164696 2016-04-21] (NVIDIA Corporation) ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] () ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => Keine Datei ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => Keine Datei ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => Keine Datei ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => Keine Datei ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => Keine Datei ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => Keine Datei Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MCtlSvc.lnk [2016-09-06] ShortcutTarget: MCtlSvc.lnk -> C:\Program Files (x86)\congstar\Internet-Manager\Bin\mcserver.exe (ZTE) Startup: C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2015-08-26] ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Hosts Datei wurde nicht im Standardordner gefunden Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{1E5210DC-85FF-4E1C-98B0-40CB3565919B}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{4C2CE82A-EBAB-4312-8E71-DF116B2A940E}: [DhcpNameServer] 8.8.8.8 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> DefaultScope {70D443E2-171A-419A-A51C-BCCF5FA9F887} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> {56EE4669-C5D3-4789-8C16-4DB4464DAD46} URL = hxxps://de.search.yahoo.com/search?fr=mcafee&type=C011DE885D20150813&p={searchTerms} SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> {70D443E2-171A-419A-A51C-BCCF5FA9F887} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2013-01-25] (Qualcomm Atheros Commnucations) BHO-x32: Kein Name -> {451C804F-C205-4F03-B48E-537EC94937BF} -> Keine Datei BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-24] (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-24] (Oracle Corporation) Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 - Keine Datei FireFox: ======== FF DefaultProfile: y9p501c2.default FF ProfilePath: C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default [2016-11-13] FF Homepage: Mozilla\Firefox\Profiles\y9p501c2.default -> hxxp://www.ferienwohnung-schifferstadt.de/ hxxp://www.gmx.net/logoutlounge/?p=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 hxxps://www.google.com/webhp?hl=de&sa=X&ved=0ahUKEwi5iaqh1IzQAhVJzRQKHZIbDPgQPAgD hxxps://accounts.google.com/AccountChooser?continue=https%3A%2F%2Fgroups.google.com%2Fd%2Fmyforums&hl=de&service=groups2 hxxps://login.yahoo.com/config/login?.src=ygrp&.intl=de&.lang=de-DE&.done=hxxps://de.groups.yahoo.com/neo hxxps://translate.google.de/?hl=de&tab=TT#de/en/Fehler%20der%20Registrierungsdatenbank.%20L%C3%B6sche%20diese%20aber%20beim%20n%C3%A4chsten%20Start%20und%20durchsuchen%2C%20sind%20die%20Fehler%20wieder%20da.%20K%C3%B6nnen%20Sie%20mir%20weiterhelfen%3F hxxps://sso.kabelmail.de/portal/sites/messaging/inbox.aspx hxxps://www.1und1.de/login hxxps://polizei.brandenburg.de/konto/login hxxps://www.bussgeldkatalog.org/raser/ hxxps://www.congstar.de/meincongstar/ hxxps://www.dropbox.com/login?src=logout hxxps://www.wesendit.com/ hxxp://heilkraeuter.de/lexikon/huflat.htm hxxp://www.netdoktor.de/heilpflanzen/koenigskerze/ hxxp://swheattutorials.blogspot.de/2015/12/blog-post_74.html hxxp://www.wheatcreations.com/SWHEATTUTORIALS/BJChristmas/BJChristmas.htm hxxp://bienespspplace.bplaced.net/Tutorials/Saison/wintermagic/ hxxp://www.marinettedesings.be/winter_magic_engels.htm hxxps://www.adac.de/Produkte/autovermietung/EmptyPage.aspx hxxp://www.animationfactory.com/de/search/index.html?s=76&spage=4&raw_q=halloween&CURRENCY=USD&category_id=E1&q=halloween&b=k&cid=E1&bl=%252Fde%252Fsearch%252Findex.html%253Fq%253Dhalloween%2526cid%253DE1%2526s%253D51%2526b%253Dk%2526t%253D244%2526ppage%253D3&t=244 http://www.trojaner-board.de/182736-...en-lassen.html http://www.trojaner-board.de/72623-e...ml#post1621693 FF Extension: (Webmail Ad Blocker) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\gmailnoads@mywebber.com.xpi [2015-08-15] FF Extension: (Mailvelope) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\jid1-AQqSMBYb0a8ADg@jetpack.xpi [2016-04-08] FF Extension: (Open about:permissons) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\open.about.permissions@jasnapaka.com.xpi [2016-06-07] FF Extension: (S3.Google Translator) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\s3google@translator.xpi [2015-12-13] FF Extension: (translator) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\translator@dontfollowme.net.xpi [2016-01-09] FF Extension: (Google Translator for Firefox) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\translator@zoli.bod.xpi [2015-12-21] FF Extension: (NoScript) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-08-15] FF Extension: (WOT) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-08-15] FF Extension: (Video DownloadHelper) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-02-20] FF Extension: (Adblock Plus) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-08-15] FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files (x86)\congstar\Internet-Manager\Bin\addon FF Extension: (Bytemobile Optimization Client) - C:\Program Files (x86)\congstar\Internet-Manager\Bin\addon [2010-04-01] [ist nicht signiert] FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-08] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [Keine Datei] FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-08] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1222172.dll [2015-11-19] (Adobe Systems, Inc.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-24] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-24] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> C:\Program Files (x86)\Winamp Detect\npwachk.dll [Keine Datei] FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-10-12] () FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [Keine Datei] FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei] ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 a2AntiMalware; C:\Program Files\Emsisoft Internet Security\a2service.exe [9388576 2016-10-29] (Emsisoft Ltd) S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2015-08-26] (Adobe Systems) [Datei ist nicht signiert] R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [669872 2015-09-15] (Adobe Systems Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2207960 2016-09-26] (Adobe Systems, Incorporated) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.) R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227456 2013-01-25] (Qualcomm Atheros Commnucations) [Datei ist nicht signiert] S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-03-07] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-03-07] (Dropbox, Inc.) R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [42096 2016-11-07] (Dropbox, Inc.) R2 ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [416408 2016-03-09] () R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164856 2016-03-24] (NVIDIA Corporation) R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [135496 2016-11-11] (SurfRight B.V.) R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [2710648 2016-08-24] (AnchorFree Inc.) S3 HssTrayService; C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE [103168 2016-08-24] () R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation) R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-03-24] (NVIDIA Corporation) R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2013-09-13] (arvato digital services llc) R2 SystemUsageReportSvc_WILLAMETTE; C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe [118424 2016-03-09] () R2 TeraCopyService; C:\Program Files\TeraCopy\TeraCopyService.exe [92160 2015-02-17] (Code Sector) [Datei ist nicht signiert] R2 Unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [254232 2016-08-23] (RaMMicHaeL) S3 USER_ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [416408 2016-03-09] () S3 vmicvss; C:\WINDOWS\System32\ICSvc.dll [524800 2014-11-21] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation) R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-01-25] (Atheros) [Datei ist nicht signiert] ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R1 adgnetworkwfpdrv; C:\WINDOWS\System32\drivers\adgnetworkwfpdrv.sys [55800 2015-06-02] () R3 athr; C:\WINDOWS\system32\DRIVERS\athwbx.sys [3837440 2013-08-14] (Qualcomm Atheros Communications, Inc.) R3 ATP; C:\WINDOWS\System32\drivers\AsusTP.sys [65784 2013-04-16] (ASUS Corporation) R0 BMLoad; C:\WINDOWS\System32\drivers\BMLoad.sys [16512 2009-12-15] (Bytemobile, Inc.) [Datei ist nicht signiert] S3 BTATH_LWFLT; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-25] (Qualcomm Atheros) R3 btmaux; C:\WINDOWS\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.) S0 ebdrv; C:\WINDOWS\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation) R1 epp; C:\PROGRAM FILES\EMSISOFT INTERNET SECURITY\epp.sys [124304 2016-10-05] (Emsisoft Ltd) R1 FWNDIS_LWF; C:\WINDOWS\system32\DRIVERS\fwndislwf64.sys [212560 2016-10-21] () S1 fwwfp; C:\Program Files\Emsisoft Internet Security\fwwfp764.sys [152776 2016-10-21] () S3 HSPADataCardusbmdm; C:\WINDOWS\system32\DRIVERS\HSPADataCardusbmdm.sys [122752 2011-08-19] (HSPADataCard Incorporated) S3 HSPADataCardusbnmea; C:\WINDOWS\system32\DRIVERS\HSPADataCardusbnmea.sys [122752 2011-08-19] (HSPADataCard Incorporated) S3 HSPADataCardusbser; C:\WINDOWS\system32\DRIVERS\HSPADataCardusbser.sys [122752 2011-08-19] (HSPADataCard Incorporated) R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( ) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-11-13] (Malwarebytes) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation) S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [80920 2015-07-02] (McAfee, Inc.) R3 semav6msr64; C:\WINDOWS\system32\drivers\semav6msr64.sys [21984 2016-03-09] () R3 taphss6; C:\WINDOWS\system32\DRIVERS\taphss6.sys [42088 2015-06-04] (Anchorfree Inc.) R1 tcpipBM; C:\WINDOWS\system32\drivers\tcpipBM.sys [39552 2009-12-15] (Bytemobile, Inc.) [Datei ist nicht signiert] S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation) S3 dbx; system32\DRIVERS\dbx.sys [X] S4 nvvad_WaveExtensible; \SystemRoot\system32\drivers\nvvad64v.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-11-13 17:04 - 2016-11-13 17:04 - 00029009 _____ C:\Users\Susanne\Desktop\FRST.txt 2016-11-13 17:04 - 2016-11-13 17:04 - 00000000 ____D C:\Users\Susanne\Desktop\FRST-OlderVersion 2016-11-13 16:59 - 2016-11-13 16:59 - 00000908 _____ C:\Users\Susanne\Desktop\JRT.txt 2016-11-13 16:52 - 2016-11-13 16:52 - 01631928 _____ (Malwarebytes) C:\Users\Susanne\Desktop\JRT.exe 2016-11-13 16:36 - 2016-11-13 16:36 - 00001195 _____ C:\Users\Susanne\Desktop\mbamlog.txt 2016-11-13 15:36 - 2016-11-13 15:36 - 03910208 _____ C:\Users\Susanne\Desktop\adwcleaner_6.030.exe 2016-11-13 13:04 - 2016-11-13 13:04 - 00000000 ___RD C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2016-11-12 19:43 - 2016-11-12 19:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2016-11-11 21:10 - 2016-11-11 21:10 - 00002263 _____ C:\Users\Susanne\Desktop\AdwCleaner[C5].txt 2016-11-11 18:43 - 2016-10-28 22:04 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2016-11-11 18:43 - 2016-10-28 22:04 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2016-11-10 20:31 - 2016-11-10 20:31 - 00000000 ____D C:\Users\Susanne\Downloads\MMDesignz Garden Love 2016-11-10 20:26 - 2016-11-10 20:27 - 00000000 ____D C:\Users\Susanne\Downloads\Chachaz Creationz 2016-11-10 19:37 - 2016-11-10 19:37 - 03189746 _____ C:\Users\Susanne\Downloads\HDSDASummerNightFae.rar 2016-11-10 19:37 - 2016-11-10 19:37 - 01854417 _____ C:\Users\Susanne\Downloads\SNC-AC-PRINCESSICE.pspimage 2016-11-10 19:36 - 2016-11-10 19:36 - 03972990 _____ C:\Users\Susanne\Downloads\SNC-DL-Orange Mermaid.psd 2016-11-10 19:22 - 2016-11-10 19:22 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_AndyCooperSweet Catrina 2016-11-10 18:54 - 2016-11-10 18:54 - 00000000 ____D C:\Users\Susanne\Downloads\MelissaDawn 2016-11-10 13:09 - 2016-10-27 19:28 - 25763328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-11-10 13:09 - 2016-10-27 19:19 - 06047744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-11-10 13:09 - 2016-10-27 18:17 - 15257088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-11-10 13:09 - 2016-10-27 18:16 - 02920448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2016-11-10 13:09 - 2016-10-27 16:05 - 20304896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-11-10 13:09 - 2016-10-25 15:11 - 04169216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2016-11-10 13:09 - 2016-10-22 17:44 - 04608000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-11-10 13:09 - 2016-10-22 17:30 - 13654016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-11-10 13:09 - 2016-10-08 23:53 - 03754496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll 2016-11-10 13:09 - 2016-08-22 14:34 - 01628672 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2016-11-10 13:08 - 2016-11-02 21:48 - 00372568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2016-11-10 13:08 - 2016-11-02 21:48 - 00315224 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2016-11-10 13:08 - 2016-11-02 15:03 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2016-11-10 13:08 - 2016-11-02 15:00 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2016-11-10 13:08 - 2016-10-27 19:53 - 00576000 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2016-11-10 13:08 - 2016-10-27 19:51 - 02896384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2016-11-10 13:08 - 2016-10-27 19:37 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2016-11-10 13:08 - 2016-10-27 19:08 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2016-11-10 13:08 - 2016-10-27 19:07 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2016-11-10 13:08 - 2016-10-27 19:05 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2016-11-10 13:08 - 2016-10-27 18:57 - 01033216 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2016-11-10 13:08 - 2016-10-27 18:49 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2016-11-10 13:08 - 2016-10-27 18:47 - 00378880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2016-11-10 13:08 - 2016-10-27 18:46 - 00806912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2016-11-10 13:08 - 2016-10-27 18:46 - 00725504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2016-11-10 13:08 - 2016-10-27 18:44 - 02131456 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2016-11-10 13:08 - 2016-10-27 18:03 - 01543680 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-11-10 13:08 - 2016-10-27 17:54 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2016-11-10 13:08 - 2016-10-22 18:35 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2016-11-10 13:08 - 2016-10-22 18:34 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll 2016-11-10 13:08 - 2016-10-22 18:27 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2016-11-10 13:08 - 2016-10-22 18:21 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2016-11-10 13:08 - 2016-10-22 17:58 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2016-11-10 13:08 - 2016-10-22 17:57 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2016-11-10 13:08 - 2016-10-22 17:56 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2016-11-10 13:08 - 2016-10-22 17:51 - 00880640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2016-11-10 13:08 - 2016-10-22 17:46 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2016-11-10 13:08 - 2016-10-22 17:45 - 00693248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2016-11-10 13:08 - 2016-10-22 17:45 - 00330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2016-11-10 13:08 - 2016-10-22 17:43 - 02055680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2016-11-10 13:08 - 2016-10-22 17:12 - 02444800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2016-11-10 13:08 - 2016-10-22 17:09 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-11-10 13:08 - 2016-10-22 17:09 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2016-11-10 13:08 - 2016-10-13 20:06 - 01385280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2016-11-10 13:08 - 2016-10-13 20:06 - 01124376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2016-11-10 13:08 - 2016-10-12 09:01 - 00377176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2016-11-10 13:08 - 2016-10-11 21:21 - 00497448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2016-11-10 13:08 - 2016-10-11 21:21 - 00399776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2016-11-10 13:08 - 2016-10-11 19:34 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll 2016-11-10 13:08 - 2016-10-11 18:47 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll 2016-11-10 13:08 - 2016-10-11 17:55 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll 2016-11-10 13:08 - 2016-10-10 22:17 - 00444248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2016-11-10 13:08 - 2016-10-10 22:17 - 00333656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2016-11-10 13:08 - 2016-10-09 23:59 - 00551256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2016-11-10 13:08 - 2016-10-09 00:12 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll 2016-11-10 13:08 - 2016-10-08 23:21 - 01445376 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2016-11-10 13:08 - 2016-10-08 23:18 - 00840704 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2016-11-10 13:08 - 2016-10-08 23:07 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAnimation.dll 2016-11-10 13:08 - 2016-10-08 23:02 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll 2016-11-10 13:08 - 2016-10-08 22:49 - 02410496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll 2016-11-10 13:08 - 2016-10-08 22:21 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAnimation.dll 2016-11-10 13:08 - 2016-10-08 02:34 - 01660040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2016-11-10 13:08 - 2016-10-08 02:34 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2016-11-10 13:08 - 2016-10-04 21:39 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bowser.sys 2016-11-10 13:08 - 2016-10-04 21:23 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll 2016-11-10 13:08 - 2016-10-04 21:08 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll 2016-11-10 13:08 - 2016-10-04 21:08 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll 2016-11-10 13:08 - 2016-09-09 23:52 - 00921944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys 2016-11-10 13:08 - 2016-09-09 23:14 - 00275800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys 2016-11-10 13:08 - 2016-09-09 15:15 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll 2016-11-10 13:08 - 2016-09-09 15:09 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll 2016-11-10 13:08 - 2016-09-09 15:04 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2016-11-10 13:08 - 2016-09-09 15:03 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll 2016-11-10 13:08 - 2016-09-09 15:02 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmi.dll 2016-11-10 13:08 - 2016-09-09 14:38 - 00446124 _____ C:\WINDOWS\system32\ApnDatabase.xml 2016-11-10 13:08 - 2016-09-03 19:20 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsidsc.dll 2016-11-10 13:08 - 2016-09-03 19:06 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiexe.dll 2016-11-10 13:08 - 2016-09-03 18:21 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsidsc.dll 2016-11-10 13:08 - 2016-09-03 17:12 - 00512512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2016-11-10 13:08 - 2016-09-03 17:05 - 01094656 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2016-11-10 13:08 - 2016-09-03 16:58 - 00397824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2016-11-10 13:08 - 2016-09-02 15:05 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll 2016-11-10 13:08 - 2016-09-02 15:05 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll 2016-11-10 13:08 - 2016-09-01 15:33 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll 2016-11-10 13:08 - 2016-09-01 15:33 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll 2016-11-10 13:08 - 2016-09-01 15:31 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll 2016-11-10 13:08 - 2016-08-30 15:11 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll 2016-11-10 13:08 - 2016-08-30 03:45 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xolehlp.dll 2016-11-10 13:08 - 2016-08-30 03:18 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll 2016-11-10 13:08 - 2016-08-30 03:18 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll 2016-11-10 13:08 - 2016-08-30 03:03 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll 2016-11-10 13:00 - 2016-11-10 13:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2016-11-10 13:00 - 2016-11-10 13:00 - 00000000 ____D C:\Program Files\iPod 2016-11-08 19:59 - 2016-11-08 20:09 - 00000000 ____D C:\Users\Susanne\Desktop\Steampunk_Orient_1 2016-11-08 19:14 - 2016-11-08 19:14 - 00000000 ____D C:\Users\Susanne\Downloads\DigitalDreams WinterTime 2016-11-08 17:48 - 2016-11-08 17:49 - 00000000 ____D C:\Users\Susanne\Downloads\RAY 2016-11-08 16:58 - 2016-11-08 17:12 - 00000000 ____D C:\Users\Susanne\Downloads\Selisan Al-Giab 2016-11-08 16:56 - 2016-11-08 16:56 - 04657679 _____ C:\Users\Susanne\Downloads\Joy.rar 2016-11-08 16:06 - 2016-11-08 16:06 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe 2016-11-07 23:49 - 2016-11-07 23:49 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys 2016-11-07 23:49 - 2016-11-07 23:49 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys 2016-11-07 23:49 - 2016-11-07 23:49 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys 2016-11-07 23:49 - 2016-11-07 23:49 - 00042096 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe 2016-11-07 20:27 - 2016-11-07 20:29 - 89882380 _____ C:\Users\Susanne\Desktop\Snowy_Fantasy.zip 2016-11-07 20:27 - 2016-11-07 20:29 - 143486031 _____ C:\Users\Susanne\Desktop\Vintage_Elegance_1.zip 2016-11-07 20:26 - 2016-11-07 20:28 - 158478349 _____ C:\Users\Susanne\Desktop\Steampunk_Orient_1.zip 2016-11-07 20:26 - 2016-11-07 20:28 - 115926832 _____ C:\Users\Susanne\Desktop\Snuggle_Season.zip 2016-11-07 16:03 - 2016-11-07 16:03 - 00000000 ____D C:\Users\Public\Documents\AdobeGC 2016-11-07 16:01 - 2016-11-07 16:01 - 00000000 ____D C:\Users\Susanne\Desktop\graphicriver-9085825-stardust-photoshop-action 2016-11-07 13:01 - 2016-11-07 13:01 - 04300155 _____ C:\Users\Susanne\Desktop\Sparkling_Pink_Summer-Nolver_22062011.psp 2016-11-07 13:01 - 2016-11-07 13:01 - 02035528 _____ C:\Users\Susanne\Desktop\Sparkling_Black_Hole-Nolver_06092011.psp 2016-11-04 18:38 - 2016-11-13 17:04 - 02411520 _____ (Farbar) C:\Users\Susanne\Desktop\FRST64.exe 2016-11-01 14:40 - 2016-11-01 14:41 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_HUN_NewYearswish 2016-10-30 18:56 - 2016-11-08 17:53 - 00000000 ____D C:\Users\Susanne\Downloads\DanielaE Design 2016-10-30 17:56 - 2016-10-30 17:56 - 00000000 ____D C:\Users\Susanne\Downloads\Spooktacular 2016-10-30 17:55 - 2016-10-30 17:55 - 00000000 ____D C:\Users\Susanne\Downloads\Tasha´s Playground 2016-10-27 18:01 - 2016-10-27 18:03 - 00000000 ____D C:\Users\Susanne\Downloads\HappyPumpkinStudio 2016-10-27 17:48 - 2016-10-27 17:54 - 25604688 _____ C:\Users\Susanne\Downloads\PATICIPANT.rar 2016-10-27 17:34 - 2016-10-27 17:34 - 00000000 ____D C:\Users\Susanne\Downloads\TonyTzanoukakis Vampiress 2016-10-27 17:33 - 2016-10-27 17:33 - 00000000 ____D C:\Users\Susanne\Downloads\TonyTzanoukakis Alessia 2016-10-27 16:47 - 2016-10-27 16:47 - 36002172 _____ C:\Users\Susanne\Downloads\Kit_PHF_Ravenworld2016.rar 2016-10-27 15:45 - 2016-10-27 15:45 - 00000000 ____D C:\Users\Susanne\Downloads\Origash MissAutumn 2016-10-27 15:34 - 2016-10-27 15:34 - 00000000 ____D C:\Users\Susanne\Downloads\Zebrush Lilian 2016-10-24 19:02 - 2016-10-24 19:02 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_VN_Mermaid 2016-10-24 18:42 - 2016-10-24 18:42 - 26095371 _____ C:\Users\Susanne\Downloads\LMB_OnTheHunt.rar 2016-10-24 10:57 - 2016-10-24 10:57 - 00000000 ____D C:\Users\Susanne\AppData\Roaming\Oracle 2016-10-22 19:41 - 2016-10-24 18:51 - 00000000 ____D C:\Users\Susanne\Downloads\Julia Fox 2016-10-22 19:35 - 2016-10-22 19:35 - 00000000 ____D C:\Users\Susanne\Downloads\GraphFreaks 2016-10-21 14:54 - 2016-10-21 14:54 - 00000831 _____ C:\WINDOWS\system32\Drivers\etc\hosts.txt 2016-10-18 16:13 - 2016-11-10 16:51 - 00000000 ____D C:\Users\Susanne\Downloads\KrystalDesign 2016-10-18 15:37 - 2016-10-18 15:37 - 03382219 _____ C:\Users\Susanne\Downloads\SNC-KIWI-SEXY RED TUBE.psd 2016-10-18 14:04 - 2016-10-18 15:04 - 00000000 ____D C:\Users\Susanne\Downloads\horseplayspasturedesigns 2016-10-17 19:22 - 2016-10-17 19:23 - 00000000 ____D C:\Users\Susanne\Downloads\SNC Mariel Fairy Forest in Fall+ 2016-10-17 13:07 - 2016-10-17 13:08 - 00000000 ____D C:\Users\Susanne\Downloads\Sandy Design 2016-10-17 13:03 - 2016-10-17 13:03 - 07836732 _____ C:\Users\Susanne\Downloads\AP Forbidden.rar 2016-10-17 12:00 - 2016-10-17 12:01 - 222214445 _____ C:\Users\Susanne\Downloads\Noch_Straha.zip 2016-10-17 11:29 - 2016-10-17 11:31 - 00000000 ____D C:\Users\Susanne\Downloads\CSDesigns 2016-10-17 11:08 - 2016-10-17 11:08 - 00000000 ____D C:\Users\Susanne\Downloads\Melissa Dawn Pck 3 2016-10-17 11:02 - 2016-10-17 11:02 - 00000000 ____D C:\Users\Susanne\Downloads\SNC AC Wickedness 2016-10-16 15:02 - 2016-11-08 20:32 - 00000000 ____D C:\Users\Susanne\Desktop\Zum Senden 2016-10-16 14:56 - 2016-11-01 19:27 - 00000000 ____D C:\Users\Susanne\Desktop\tutorial 2016-10-16 13:31 - 2016-10-16 13:31 - 00830935 _____ C:\Users\Susanne\Downloads\Liza tube 339.psp 2016-10-16 10:23 - 2016-10-23 19:15 - 00000000 ____D C:\Users\Susanne\Documents\Emisoft Verlängerung 2016-10-14 20:13 - 2016-11-10 16:23 - 00000000 ____D C:\Users\Susanne\Desktop\Downloads from Friends 2016-10-14 19:48 - 2016-10-14 19:51 - 00000000 ____D C:\Users\Susanne\Downloads\Flower Mohn Poppy 2016-10-14 18:56 - 2016-10-14 18:57 - 00000000 ____D C:\Users\Susanne\Downloads\Symphonie Verde Blu 2016-10-14 18:50 - 2016-10-14 18:50 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_DL_ Ginger+ ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-11-13 17:04 - 2015-11-15 17:25 - 00000000 ____D C:\FRST 2016-11-13 17:03 - 2015-11-23 18:19 - 00000000 ____D C:\Program Files\Emsisoft Internet Security 2016-11-13 16:44 - 2015-08-24 17:40 - 00001232 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job 2016-11-13 16:29 - 2015-12-08 11:14 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2016-11-13 16:16 - 2015-08-13 17:26 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2016-11-13 15:57 - 2015-09-20 15:03 - 00000000 ____D C:\AdwCleaner 2016-11-13 15:51 - 2015-08-24 17:45 - 00000000 ___RD C:\Users\Susanne\Dropbox 2016-11-13 14:29 - 2015-08-18 14:16 - 00003934 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{4A105045-E9F4-48C6-AC0D-2E7F7A2F8B9E} 2016-11-13 13:06 - 2016-08-23 11:11 - 00003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1 2016-11-13 13:06 - 2015-08-15 12:15 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2 2016-11-13 13:06 - 2014-11-21 04:35 - 01780340 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-11-13 13:06 - 2014-11-21 03:45 - 00766620 _____ C:\WINDOWS\system32\perfh007.dat 2016-11-13 13:06 - 2014-11-21 03:45 - 00159902 _____ C:\WINDOWS\system32\perfc007.dat 2016-11-13 13:06 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\Inf 2016-11-13 13:03 - 2015-08-24 17:40 - 00001228 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job 2016-11-13 13:03 - 2015-08-12 20:13 - 00000073 _____ C:\Users\Susanne\AppData\Roaming\sp_data.sys 2016-11-13 13:03 - 2014-03-01 11:33 - 00000868 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job 2016-11-12 21:23 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache 2016-11-12 20:39 - 2015-08-12 20:19 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1794304933-3207535254-2068445666-1002 2016-11-12 19:43 - 2015-08-24 17:40 - 00000000 ____D C:\Program Files (x86)\Dropbox 2016-11-11 21:08 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-11-11 20:01 - 2015-10-29 19:49 - 00000000 ____D C:\Users\Susanne\Downloads\Amberly Brendson 2016-11-11 20:00 - 2015-10-25 19:23 - 00000000 ____D C:\Users\Susanne\Downloads\Masken 2016-11-11 19:30 - 2015-10-15 19:04 - 00000000 ____D C:\Users\Susanne\Downloads\Comics 2016-11-11 18:48 - 2015-08-25 18:46 - 00000000 ____D C:\Program Files\HitmanPro 2016-11-11 18:42 - 2013-08-22 15:44 - 00462016 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-11-10 21:14 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData 2016-11-10 21:13 - 2015-08-28 18:37 - 00000000 ____D C:\Program Files\CCleaner 2016-11-10 21:12 - 2015-08-16 18:59 - 00000000 ____D C:\Users\Susanne\AppData\Local\CrashDumps 2016-11-10 20:34 - 2016-01-03 13:06 - 00000000 ____D C:\Users\Susanne\Downloads\Alehandra Vanhek 2016-11-10 20:30 - 2016-04-25 18:17 - 00000000 ____D C:\Users\Susanne\Downloads\Thamys Welt 2016-11-10 20:25 - 2016-01-03 13:36 - 00000000 ____D C:\Users\Susanne\Downloads\Nocturne 2016-11-10 20:22 - 2016-02-21 14:49 - 00000000 ____D C:\Users\Susanne\Downloads\Misticheskaya 2016-11-10 20:14 - 2016-01-03 13:33 - 00000000 ____D C:\Users\Susanne\Downloads\Lysisange 2016-11-10 20:14 - 2015-10-05 19:49 - 00000000 ____D C:\Users\Susanne\Downloads\Bibi´s Collection 2016-11-10 20:13 - 2016-01-08 20:15 - 00000000 ____D C:\Users\Susanne\Downloads\Disturbed Scraps 2016-11-10 20:13 - 2015-10-25 20:18 - 00000000 ____D C:\Users\Susanne\Downloads\Souldesigner 2016-11-10 20:12 - 2016-02-06 18:26 - 00000000 ____D C:\Users\Susanne\Downloads\DiHalim 2016-11-10 20:11 - 2016-01-03 15:47 - 00000000 ____D C:\Users\Susanne\Downloads\Angelica S 2016-11-10 20:11 - 2015-12-07 16:26 - 00000000 ____D C:\Users\Susanne\Downloads\Chris Pastel 2016-11-10 20:10 - 2015-10-13 09:21 - 00000000 ____D C:\Users\Susanne\Downloads\Halloween 2016-11-10 20:07 - 2016-01-03 13:15 - 00000000 ____D C:\Users\Susanne\Downloads\Fedor 2016-11-10 20:05 - 2016-01-29 19:45 - 00000000 ____D C:\Users\Susanne\Downloads\Tiny Turtles Designs 2016-11-10 20:05 - 2016-01-03 13:23 - 00000000 ____D C:\Users\Susanne\Downloads\Jose Cano 2016-11-10 20:02 - 2015-11-15 15:26 - 00000000 ____D C:\Users\Susanne\Downloads\DB Joan 2016-11-10 20:00 - 2015-11-24 19:21 - 00000000 ____D C:\Users\Susanne\Downloads\Alicia Mujica 2016-11-10 19:59 - 2016-07-04 18:39 - 00000000 ____D C:\Users\Susanne\Downloads\Ginnybug Designz 2016-11-10 19:57 - 2015-11-28 15:12 - 00000000 ____D C:\Users\Susanne\Downloads\PinkParadoxProduktions 2016-11-10 19:55 - 2016-01-03 13:30 - 00000000 ____D C:\Users\Susanne\Downloads\Lightartist 2016-11-10 19:46 - 2015-10-18 17:19 - 00000000 ____D C:\Users\Susanne\Downloads\Zlata M 2016-11-10 19:45 - 2016-01-03 15:46 - 00000000 ____D C:\Users\Susanne\Downloads\Stella Felice 2016-11-10 19:45 - 2016-01-03 13:51 - 00000000 ____D C:\Users\Susanne\Downloads\Trinita 2016-11-10 19:45 - 2015-10-17 15:10 - 00000000 ____D C:\Users\Susanne\Downloads\Eugene Rzhevskii 2016-11-10 19:43 - 2016-07-11 13:37 - 00000000 ____D C:\Users\Susanne\Downloads\DevilishDezines 2016-11-10 19:41 - 2016-02-06 18:14 - 00000000 ____D C:\Users\Susanne\Downloads\DN Scraps 2016-11-10 19:38 - 2016-01-03 13:33 - 00000000 ____D C:\Users\Susanne\Downloads\Lorri Kajenna 2016-11-10 19:38 - 2015-12-29 19:21 - 00000000 ____D C:\Users\Susanne\Downloads\Alex Prihodko 2016-11-10 19:36 - 2015-10-22 18:34 - 00000000 ____D C:\Users\Susanne\Downloads\Stan Dudin 2016-11-10 19:20 - 2016-09-10 18:08 - 00000000 ____D C:\Users\Susanne\Downloads\Edelweiss Design 2016-11-10 19:18 - 2015-10-15 17:45 - 00000000 ____D C:\Users\Susanne\Downloads\Arthur Crowe 2016-11-10 19:07 - 2015-11-02 14:12 - 00000000 ____D C:\Users\Susanne\Downloads\Bella Caribean 2016-11-10 19:06 - 2016-01-03 13:06 - 00000000 ____D C:\Users\Susanne\Downloads\AmyMarieKits 2016-11-10 19:04 - 2015-10-17 18:28 - 00000000 ____D C:\Users\Susanne\Downloads\Keith Garvey 2016-11-10 18:52 - 2015-10-22 18:37 - 00000000 ____D C:\Users\Susanne\Downloads\KBK 2016-11-10 18:50 - 2016-02-21 15:04 - 00000000 ____D C:\Users\Susanne\Downloads\GoF Designs 2016-11-10 18:48 - 2015-10-24 17:18 - 00000000 ____D C:\Users\Susanne\Downloads\Verymany 2016-11-10 16:53 - 2016-06-13 18:44 - 00000000 ____D C:\Users\Susanne\Downloads\Moonshine Dezines 2016-11-10 16:43 - 2015-11-02 17:34 - 00000000 ____D C:\Users\Susanne\Downloads\Hania Designs 2016-11-10 13:48 - 2015-08-13 17:30 - 00000000 ____D C:\Users\Susanne\Desktop\Programme 2016-11-10 13:29 - 2012-07-26 08:59 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-11-10 13:28 - 2015-08-13 17:18 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-11-10 13:25 - 2015-08-13 17:18 - 141011376 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-11-10 13:09 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI 2016-11-10 13:00 - 2015-08-31 15:24 - 00000000 ____D C:\Program Files\iTunes 2016-11-10 13:00 - 2015-08-31 15:20 - 00000000 ____D C:\Program Files\Common Files\Apple 2016-11-10 12:39 - 2015-08-24 17:40 - 00004204 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineUA 2016-11-10 12:39 - 2015-08-24 17:40 - 00003968 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineCore 2016-11-08 19:54 - 2016-05-25 18:18 - 00000000 ____D C:\Users\Susanne\Downloads\Alec Rud-LightartistXXX Emma 2016-11-08 19:16 - 2015-11-15 15:19 - 00000000 ____D C:\Users\Susanne\Downloads\DeesignDepot 2016-11-08 18:29 - 2015-12-08 11:14 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2016-11-08 18:29 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2016-11-08 18:29 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Macromed 2016-11-08 18:02 - 2015-10-17 14:28 - 00000000 ____D C:\Users\Susanne\Downloads\PinUpToons 2016-11-08 17:56 - 2015-10-30 13:07 - 00000000 ____D C:\Users\Susanne\Downloads\Anna Liwanag 2016-11-08 17:54 - 2016-04-22 19:44 - 00000000 ____D C:\Users\Susanne\Downloads\Spazz 2016-11-08 17:45 - 2015-11-23 19:10 - 00000000 ____D C:\Users\Susanne\Downloads\Alfadesire 2016-11-08 17:43 - 2015-10-17 12:38 - 00000000 ____D C:\Users\Susanne\Downloads\X Mas 2016-11-08 17:24 - 2016-03-05 16:16 - 00000000 ____D C:\Users\Susanne\Downloads\Avroraart 2016-11-08 16:06 - 2015-08-25 18:46 - 00000000 ____D C:\ProgramData\HitmanPro 2016-11-08 15:56 - 2015-10-23 13:54 - 00000000 ____D C:\Users\Susanne\Downloads\Landschaftstuben 2016-11-07 19:00 - 2015-10-15 07:11 - 00004476 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2016-11-07 17:57 - 2016-10-13 18:52 - 00000000 ____D C:\Users\Susanne\Downloads\IS Design 2016-11-07 17:42 - 2016-04-23 18:38 - 00000000 ____D C:\Users\Susanne\Downloads\Mariel Designs 2016-11-07 17:36 - 2016-02-18 20:07 - 00000000 ____D C:\Users\Susanne\Downloads\Tais 2016-11-07 16:03 - 2015-11-23 16:06 - 00000000 ____D C:\Users\Susanne 2016-11-07 11:58 - 2015-11-30 19:54 - 00000000 ____D C:\Users\Susanne\Desktop\Filme 2016-11-07 10:50 - 2014-03-01 11:33 - 00000870 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job 2016-11-04 19:42 - 2016-01-03 13:05 - 00000000 ____D C:\Users\Susanne\Downloads\Ellie Milk 2016-11-04 18:37 - 2015-10-10 18:25 - 00000000 ____D C:\Users\Susanne\AppData\Roaming\vlc 2016-11-04 16:41 - 2015-10-24 15:45 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-11-03 16:33 - 2016-02-06 19:06 - 00000000 ____D C:\Users\Susanne\Downloads\Toxic Desirez 2016-11-01 18:52 - 2016-01-03 13:54 - 00000000 ____D C:\Users\Susanne\Downloads\Vadis 2016-11-01 16:04 - 2016-02-14 13:29 - 00000000 ____D C:\Users\Susanne\Downloads\Laguna 2016-10-31 19:43 - 2014-04-15 19:11 - 00000000 ____D C:\Users\Susanne\My PSP Files 2016-10-31 18:01 - 2015-10-17 18:18 - 00000000 ____D C:\Users\Susanne\Downloads\Elias Chatzoudis 2016-10-30 19:19 - 2015-11-16 15:01 - 00000000 ____D C:\Users\Susanne\Downloads\Barbara Jensen 2016-10-30 19:01 - 2016-06-01 16:50 - 00000000 ____D C:\Users\Susanne\Downloads\JoJo Kits 2016-10-30 18:59 - 2015-10-05 18:13 - 00000000 ____D C:\Users\Susanne\Downloads\RD_Rienike Designs 2016-10-30 18:44 - 2016-08-12 18:28 - 00000000 ____D C:\Users\Susanne\Downloads\Nusha Lypina 2016-10-30 16:18 - 2016-04-18 19:08 - 00000000 ____D C:\Users\Susanne\Downloads\KatNKDA 2016-10-30 14:28 - 2016-03-06 20:12 - 00000000 ____D C:\Users\Susanne\Downloads\Jennifer Janesko 2016-10-29 19:43 - 2016-08-22 15:53 - 00000000 ____D C:\Users\Susanne\Downloads\Mary Designs 2016-10-29 19:25 - 2016-03-18 12:08 - 00000000 ____D C:\Users\Susanne\Downloads\Grafik 2016-10-27 18:08 - 2015-10-17 18:08 - 00000000 ____D C:\Users\Susanne\Downloads\cm scraps 2016-10-27 18:06 - 2016-03-05 19:10 - 00000000 ____D C:\Users\Susanne\Downloads\Velerie 2016-10-27 17:38 - 2015-11-07 18:32 - 00000000 ____D C:\Users\Susanne\Downloads\Katharine 2016-10-27 15:39 - 2016-05-22 17:36 - 00000000 ____D C:\Users\Susanne\Downloads\Chili Designz 2016-10-27 15:36 - 2016-05-21 19:01 - 00000000 ____D C:\Users\Susanne\Downloads\Wicked Creationz Scraps 2016-10-27 15:35 - 2016-04-19 19:08 - 00000000 ____D C:\Users\Susanne\Downloads\Irish Princess Designs IPD 2016-10-24 10:44 - 2015-08-28 15:41 - 00000000 ____D C:\ProgramData\Oracle 2016-10-24 10:39 - 2015-08-28 15:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2016-10-24 10:39 - 2015-08-28 15:43 - 00000000 ____D C:\Program Files (x86)\Java 2016-10-24 10:38 - 2015-08-28 15:43 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2016-10-24 10:38 - 2015-08-25 19:01 - 00000000 ____D C:\ProgramData\Unchecky 2016-10-22 19:46 - 2015-11-02 13:38 - 00000000 ____D C:\Users\Susanne\Downloads\Sophisticat 2016-10-22 18:07 - 2016-02-27 18:49 - 00000000 ____D C:\Users\Susanne\Downloads\Maryline Cazenave 2016-10-21 13:41 - 2012-07-26 06:26 - 00003255 _____ C:\WINDOWS\system32\Drivers\etc\Hosts.old 2016-10-21 13:27 - 2016-05-24 12:43 - 00212560 _____ C:\WINDOWS\system32\Drivers\fwndislwf64.sys 2016-10-20 18:30 - 2015-11-28 14:34 - 00000000 ____D C:\Users\Susanne\Downloads\ZindyNielsen 2016-10-20 18:29 - 2014-03-01 11:45 - 00000000 ____D C:\ProgramData\Temp 2016-10-18 19:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-10-18 13:40 - 2016-03-05 18:04 - 00000000 ____D C:\Users\Susanne\Downloads\Ismael RAC 2016-10-17 13:04 - 2016-10-03 19:36 - 00000000 ____D C:\Users\Susanne\Downloads\Mysterfeerie Creation 2016-10-17 11:31 - 2016-03-05 17:47 - 00000000 ____D C:\Users\Susanne\Downloads\Lady Mishka 2016-10-16 15:30 - 2016-01-21 16:24 - 00000000 ____D C:\Users\Susanne\Downloads\Karneval ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-08-29 17:04 - 2015-08-29 17:04 - 3585654 _____ () C:\Users\Susanne\AppData\Roaming\SageThumbs wallpaper.bmp 2015-08-12 20:13 - 2016-11-13 13:03 - 0000073 _____ () C:\Users\Susanne\AppData\Roaming\sp_data.sys 2016-01-17 14:35 - 2016-03-11 19:57 - 0005120 _____ () C:\Users\Susanne\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2016-06-02 17:27 - 2016-06-02 17:27 - 0007600 _____ () C:\Users\Susanne\AppData\Local\Resmon.ResmonCfg 2015-08-28 17:48 - 2015-11-13 20:12 - 4969472 _____ () C:\Users\Susanne\AppData\Local\SageThumbs.db3 2016-04-03 17:22 - 2016-04-03 17:22 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2015-10-28 07:07 - 2015-10-28 07:07 - 0000261 _____ () C:\ProgramData\fontcacheev1.dat 2015-11-29 18:31 - 2015-11-29 18:31 - 0004943 _____ () C:\ProgramData\rxsmznjf.zcp Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\ProgramData\fontcacheev1.dat C:\Users\Susanne\359.06-notebook-win8-win7-64bit-international-whql.exe ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-11-12 20:45 ==================== Ende von FRST.txt ============================ Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-11-2016
durchgeführt von Susanne (13-11-2016 17:06:00)
Gestartet von C:\Users\Susanne\Desktop
Windows 8.1 (Update) (X64) (2015-11-23 16:34:54)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-1794304933-3207535254-2068445666-500 - Administrator - Disabled)
Gast (S-1-5-21-1794304933-3207535254-2068445666-501 - Limited - Disabled) => C:\Users\Gast
Susanne (S-1-5-21-1794304933-3207535254-2068445666-1002 - Administrator - Enabled) => C:\Users\Susanne
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Emsisoft Internet Security (Disabled - Up to date) {701CB209-EBBC-AADC-11E6-DE73E7AF4C9D}
AS: Emsisoft Internet Security (Disabled - Up to date) {CB7D53ED-CD86-A552-2B56-E5019C280620}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Emsisoft Internet Security (Disabled) {4827332C-A1D3-AB84-3AB9-7746197C0BE6}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.2.172 - Adobe Systems, Inc.)
Alien Skin Blow Up (HKLM-x32\...\Blow Up) (Version: - )
Alien Skin Exposure (HKLM-x32\...\Exposure) (Version: - )
Alien Skin Eye Candy 5 Nature (HKLM-x32\...\EyeCandy5Nature) (Version: - )
Alien Skin Eye Candy 5 Textures (HKLM-x32\...\EyeCandy5Textures) (Version: - )
Alien Skin Eye Candy 7 (HKLM\...\Alien Skin Eye Candy 7) (Version: - Alien Skin)
Alien Skin Image Doctor 2 (HKLM-x32\...\Image Doctor 2) (Version: - )
Alien Skin Snap Art (HKLM-x32\...\Snap Art) (Version: - )
Apowersoft Smartphone Manager Version 2.7.1 (HKLM-x32\...\{4A00E3C4-2D0F-4AE7-9F2A-74870BE09EF8}_is1) (Version: 2.7.1 - APOWERSOFT LIMITED)
Apple Application Support (32-Bit) (HKLM-x32\...\{F2871C89-C8A5-42EE-8D45-0F02506385A6}) (Version: 5.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{9BC93467-75D1-4AA4-BD58-D9C51D88DFAB}) (Version: 5.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
ASUS InstantOn (HKLM-x32\...\{749F674B-2674-47E8-879C-5626A06B2A91}) (Version: 3.0.6 - ASUS)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.1.13 - ASUS)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.4 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 2.1.7 - ASUS)
ASUS Screen Saver (HKLM\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 1.0.1 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.1.3 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 2.01.0005 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 2.1.5 - ASUS)
ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4924.52 - CyberLink Corp.)
ASUSDVD (x32 Version: 10.0.4924.52 - CyberLink Corp.) Hidden
AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.309 - ASUSTEK)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0027 - ASUS)
AVS Video Converter 9.1 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: 9.1.4.574 - Online Media Technologies Ltd.)
Azteca (x32 Version: 2.2.0.97 - WildTangent) Hidden
Bejeweled 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.23 - Piriform)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
congstar Internet-Manager (HKLM-x32\...\{27D28586-BEF1-4E06-8787-3B1FC3A41489}) (Version: 1.0.0.3 - ZTE CORPORATION)
Contents (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
CopyTrans Control Center deinstallieren (HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\CopyTrans Suite) (Version: 4.004 - WindSolutions)
Corel FastFlick (HKLM-x32\...\_{10EC8494-8A92-49D8-9677-2483EB01F7F1}) (Version: 1.0.0.101 - Corel Corporation)
Corel KPT Collection (HKLM-x32\...\_{B16DC136-9583-4C54-BE27-F001BBC546B1}) (Version: 1.0.0.109 - Corel Corporation)
Corel KPT Collection (x32 Version: 1.0.0.109 - Ihr Firmenname) Hidden
Corel PaintShop Pro X7 (HKLM-x32\...\_{176F50D6-6857-49CE-B731-65F757EE3F0D}) (Version: 17.3.0.30 - Corel Corporation)
Corel PaintShop Pro X7 (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
Creative Content (x32 Version: 1.0.0.114 - Corel Corporation) Hidden
Creative Content (x32 Version: 1.0.0.114 - Ihr Firmenname) Hidden
CrystalDiskInfo 6.5.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.5.2 - Crystal Dew World)
Cut the Rope (x32 Version: 3.0.2.38 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 14.4.19 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.57.1 - Dropbox, Inc.) Hidden
Emsisoft Internet Security (HKLM\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 11.0 - Emsisoft Ltd.)
Filters Unlimited 2.0 (HKLM-x32\...\Filters Unlimited_is1) (Version: - )
Filzip 3.06 (HKLM-x32\...\Filzip 3.0.6.93_is1) (Version: 3.0.6 - Philipp Engel)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.15.281 - SurfRight B.V.)
Hotspot Shield 5.4.11 (HKLM-x32\...\HotspotShield) (Version: 5.4.11 - AnchorFree Inc.)
Hotspot Shield 5.4.11 Embedded (x32 Version: 5.4.11.9772 - Buildbot) Hidden
ICA (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
ICA (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
Intel(R) Driver Update Utility 2.4 (x32 Version: 2.4.0.15 - Intel) Hidden
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.36354 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation)
Intel(R) Product Improvement Program (x32 Version: 2.1.27.3 - Intel) Hidden
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{302600C1-6BDF-4FD1-1309-148929CC1385}) (Version: 3.1.1309.0390 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.27 - Intel(R) Corporation) Hidden
Intel® Driver Update Utility (HKLM-x32\...\{1b09c4de-9cae-4122-b17c-65d395062b50}) (Version: 2.4.0.15 - Intel)
IPM_PSP_COM (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
IPM_PSP_COM64 (Version: 17.3.0.30 - Corel Corporation) Hidden
IPM_VS_Pro (x32 Version: 1.0 - Corel Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
iTunes (HKLM\...\{554C62C7-E6BB-40F1-892B-F0AE02D3C135}) (Version: 12.5.3.17 - Apple Inc.)
Jasc Animation Shop 3 (HKLM-x32\...\{7C4196CA-CA41-4F34-9C08-7724E7705D52}) (Version: 3.11 - Ihr Firmenname)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2-1) (Version: 2.0 - AppWork GmbH)
LockHunter 3.1, 32/64 bit (HKLM\...\LockHunter_is1) (Version: - Crystal Rich Ltd)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 41.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 41.0.2 (x86 de)) (Version: 41.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.4.0.6115 - Mozilla)
Mozilla Thunderbird 45.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.4.0 (x86 de)) (Version: 45.4.0 - Mozilla)
MultiTranse European 6.6 special build (HKLM-x32\...\MultiTranse European_is1) (Version: - Tialsoft Software)
MyBitCast 2.0 (HKLM-x32\...\MyBitCast) (Version: 2.0 - ASUS)
NewBlue Video Essentials for Windows (HKLM-x32\...\NewBlue Video Essentials for Windows) (Version: 3.0 - NewBlue)
NVIDIA GeForce Experience 2.11.2.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.2.46 - NVIDIA Corporation)
NVIDIA Grafiktreiber 359.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 359.46 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
PDF24 Creator 7.9.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Peggle (x32 Version: 2.2.0.95 - WildTangent) Hidden
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plugin Commander Light 1.62 (HKLM-x32\...\Plugin Commander Light 1.62_is1) (Version: 1.60 - The Plugin Site)
PSPPContent (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
PSPPHelp (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
PSPPro64 (Version: 17.3.0.30 - Corel Corporation) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.220 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Raccolta foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.38.115.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7514 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39029 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.52 - Piriform)
Revo Uninstaller Pro 3.1.6 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.6 - VS Revo Group, Ltd.)
Schmaili 9.0 (HKLM-x32\...\Schmaili_is1) (Version: - )
Setup (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
Setup (x32 Version: 17.3.0.30 - Ihr Firmenname) Hidden
Share (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
SpywareBlaster 5.2 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.2.0 - BrightFort LLC)
Sqirlz Morph (HKLM-x32\...\Sqirlz Morph) (Version: 2.1 - xiberpix)
Sqirlz Water Reflections (HKLM-x32\...\Sqirlz Water Reflections) (Version: 2.6 - xiberpix)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden
TeraCopy 2.3 (HKLM\...\TeraCopy_is1) (Version: - Code Sector)
Toon Boom Studio 8.1 (HKLM-x32\...\{A3A336BA-61CF-4B0F-83D7-690A8FB23A5D}) (Version: - Toon Boom Animation Inc.)
Unchecky v1.0.1 (HKLM-x32\...\Unchecky) (Version: 1.0.1 - RaMMicHaeL)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VSClassic (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
VSPro (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
Vulkan Run Time Libraries 1.0.5.1 (HKLM\...\VulkanRT1.0.5.1) (Version: 1.0.5.1 - LunarG, Inc.)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.0.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden
Windows Driver Package - ASUS (ATP) Mouse (01/10/2013 1.0.0.170) (HKLM\...\4A9DE1E9EBC800B7F01739D4DE7363EF6751BDF5) (Version: 01/10/2013 1.0.0.170 - ASUS)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
WinRAR 5.21 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {1584372C-BE27-42D3-9C29-0B7B050F0676} - System32\Tasks\{DFE56015-71E1-4F3C-B92C-4BC78BB43DCF} => pcalua.exe -a "C:\Users\Susanne\Desktop\SignatureCreator1.12\Signature Creator v1.12\signcrtr.exe" -d "C:\Users\Susanne\Desktop\SignatureCreator1.12\Signature Creator v1.12"
Task: {1DE75A1E-B3F6-410F-9D0A-6C724DC5D7BA} - System32\Tasks\{3A681209-9B28-4FB4-B434-90C78D19AA76} => pcalua.exe -a C:\Users\Susanne\Desktop\win64_153342.exe -d C:\Users\Susanne\Desktop
Task: {1F93A434-BC9F-4437-AA95-0868BAB8E7D1} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-09-28] (Piriform Ltd)
Task: {278FB095-70F3-41AF-86E1-ACDCC3DFCD4F} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2013-02-26] (ASUSTeK Computer Inc.)
Task: {37A4D3D1-A9C0-4F1F-A1E4-69F7106967AD} - System32\Tasks\{521DB96D-E9CC-4273-A927-56A7DF8BA731} => pcalua.exe -a "C:\ProgramData\SlimWare Utilities, Inc\DriverApp\Downloads\00F46400BE06BC2EF0051C27633897CA9F0000000015BC1B9E.exe"
Task: {384F7404-E4A7-4AF6-BFC2-0E966AB9A65A} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-07] (Dropbox, Inc.)
Task: {46CE1FA1-950E-4406-BE83-9B8278BE36FE} - System32\Tasks\Intel\Intel Telemetry 2 (x86) => C:\Program Files (x86)\Intel\Telemetry 2.0\lrio.exe [2016-03-17] (Intel Corporation)
Task: {568A8D83-61EE-417F-B2F4-D8E199F65D47} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {57BD5BFA-0639-4897-8B79-A444969AD171} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {65E4B102-42C8-4272-BE24-C07ECF847106} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2013-01-04] ()
Task: {699484B8-754F-4354-A8EE-F97F3490ED39} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {6C3DD3AD-739B-4B44-AEC6-9844F7E1D814} - System32\Tasks\{2175E4B1-B401-419C-B3FC-7F5CFDE77152} => pcalua.exe -a E:\SETUP.EXE -d E:\ -c /AUTORUN
Task: {7004ABEF-4FB5-4DB9-9D07-BBEE825C98A6} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-08-24] (ASUS)
Task: {749335FC-4206-4E47-864C-4C789D3DB14B} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-08] (Adobe Systems Incorporated)
Task: {7535A508-68C4-4552-B25C-041DB8F71935} - System32\Tasks\ASUS InstantOn Config => C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe [2013-01-22] (ASUS)
Task: {7BEB7A52-7115-44FE-983C-760FD41865A4} - System32\Tasks\{A7D58E18-1B4E-465F-B6ED-4EFE3829029A} => pcalua.exe -a C:\Users\Susanne\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=face
Task: {875E6F2B-4C80-4C1F-BDDF-F8D0ADDD352A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {937F2797-535D-4D7E-865E-DF6460A3E660} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2012-11-28] (ASUS)
Task: {9C8D2AEE-2E56-486A-8603-FD26811BF306} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-07] (Dropbox, Inc.)
Task: {A143A7AF-E6A4-41CB-A24F-4682A328495A} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-09-18] (ASUSTek Computer Inc.)
Task: {B500B226-A848-48AC-AD89-FC46DD40726A} - System32\Tasks\{C34BCC4B-E192-4B85-9591-5B9275232FC4} => pcalua.exe -a "F:\Susanne´s Dateien vom Läppi\Susanne\C\Schmaili\Schmaili90\unins000.exe" -d "F:\Susanne´s Dateien vom Läppi\Susanne\C\Schmaili\Schmaili90"
Task: {B78CA17D-3A08-43C7-AC90-44AF8F9116DF} - System32\Tasks\{825879E2-CC36-47E0-887E-8D5A3643532D} => pcalua.exe -a C:\Users\Susanne\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=pcs
Task: {D65C524D-CC2D-4D37-AB73-7D79DD3F9F7E} - System32\Tasks\ASUS Touchpad Launcher (x64) => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2013-04-16] (AsusTek)
Task: {DF4E779D-E89D-43BF-BFEA-92AFBD12A035} - System32\Tasks\USER_ESRV_SVC_WILLAMETTE => Wscript.exe //B //NoLogo "C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\task.vbs"
Task: {E7DB6F04-0E5F-49F6-82E1-C45912A304B9} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {E833CAEB-5DC4-47B3-8051-EF7AA579E8AD} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {EB9F98C6-FED1-40F0-BFD1-4272F4DE9576} - System32\Tasks\{D52E5E0D-7B83-453B-B34F-8346DD360FFF} => pcalua.exe -a "C:\Program Files\Realtek\Audio\HDA\RtlUpd64.exe" -c -r -m -nrg2709
Task: {EF2C2CD6-5F9B-43F9-A3B4-87DE57826197} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2015-02-12] ()
Task: {FE9FAC54-D116-4F35-8188-88E83F570501} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2000-01-01] (Realtek Semiconductor)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Meine Websites auf MSN\target.lnk -> hxxp://www.msnusers.com
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2016-05-24 12:43 - 2016-10-21 13:27 - 01024968 _____ () C:\Program Files\Emsisoft Internet Security\fw64.dll
2016-09-01 17:12 - 2016-09-01 17:12 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-10-05 18:17 - 2016-10-05 18:17 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00118424 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe
2016-03-09 19:43 - 2016-03-09 19:43 - 00256152 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\analyzer.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00034968 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\AnalyzerTask.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00019096 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\DriverDetection.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00019688 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\DriverInfo.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00026856 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\IDUUDetection.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00416408 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe
2016-04-28 14:08 - 2016-03-09 19:43 - 00709272 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_modeler.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00130712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_process_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00025752 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_system_power_state_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00059544 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_quality_and_reliability_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00194712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\acpi_battery_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00159896 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\sema_thermal_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00158360 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\wifi_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00050840 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\devices_use_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00032920 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_disktrace_input.dll
2015-09-11 19:02 - 2015-09-11 19:02 - 00803488 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2015-08-28 14:59 - 2012-01-20 13:55 - 00678400 _____ () C:\Program Files\TeraCopy\TeraCopyExt64.dll
2016-08-24 00:04 - 2016-08-24 00:04 - 00166520 _____ () C:\Program Files (x86)\Hotspot Shield\bin\CrashRpt1403.dll
2014-03-01 11:32 - 2012-06-25 03:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [127]
AlternateDataStreams: C:\ProgramData\Temp:890CC2F3 [127]
AlternateDataStreams: C:\Users\Susanne\Downloads\CDO AnnaMarine-11-1+:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\CDO GlistenSnowFlakes:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\CDO WinterMagic:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\SNC_CUPIDO COLLAB:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\Sue PSP Stuff:com.dropbox.attributes [168]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Software\Classes\.exe: => <===== ACHTUNG
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0411dd.com -> 0411dd.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1001movie.com -> 1001movie.com
Da befinden sich 6091 mehr Seiten.
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Susanne\AppData\Local\Microsoft\Windows\Themes\Rainbows\DesktopBackground\rainbows7.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: GamesAppService => 3
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: nvUpdatusService => 2
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "egui"
HKLM\...\StartupApproved\Run: => "Corel Update Helper"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKLM\...\StartupApproved\Run32: => "Malwarebytes Anti-Exploit"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\StartupFolder: => "Adobe Gamma.lnk"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\Run: => "Digiarty_Software_AirPlayit"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\Run: => "Schmaili"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\Run: => "Skype"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{698A6761-A7D7-436A-828F-F5D0B9649607}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{725B442B-AA22-40A6-9A4C-C080895D11B3}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{43ED2D84-F0D6-4176-8654-2BF85E93929E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{A83C85B4-8237-4A7A-B5CF-F4548CE998C8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{B05144DD-2A59-4CE6-AC21-A487450C32BB}] => (Allow) LPort=1900
FirewallRules: [{6E10BE55-BF0B-41CB-874B-35BBAE2A6CC8}] => (Allow) LPort=2869
FirewallRules: [{6FB3AE7A-27BA-4EC1-8459-F674A66F398E}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5732DE92-F2E8-4EFA-8211-59D9C1216D9C}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{FB4B5D1F-46F4-4EE4-A9DD-1CC5A993E8B9}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{BEBD6992-F474-476F-AA99-813387C3315B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{12619529-46A3-401F-8C45-41DA4469E6B7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{75F78078-FA69-47CD-84C8-ABAF1E6028BA}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{5F08B6D7-908A-4C10-BE37-07290BAA1FC4}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{DC5EE5FD-A4A3-4403-A62A-E542DAC852F8}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\Apowersoft Phone Manager.exe
FirewallRules: [{0253E503-D67B-4A8C-AF6E-60B041B9957E}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\Apowersoft Phone Manager.exe
FirewallRules: [{07DB8C66-1A03-4036-B21D-E47878AE360E}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\ApowersoftAndroidDaemon.exe
FirewallRules: [{F8374132-09A8-413C-90AB-BBDB95A4DDB1}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\ApowersoftAndroidDaemon.exe
FirewallRules: [{43F41AD3-EA64-4AB5-861C-9B99C3F868C3}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\iOS Recorder.exe
FirewallRules: [{6E936865-405B-44EC-B6AB-CF8C8EE059DE}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\iOS Recorder.exe
FirewallRules: [{337EB821-B0AB-4651-95E3-0219CB12024F}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{3819976B-9F89-4FB5-8313-54197BBBF34F}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
==================== Wiederherstellungspunkte =========================
29-10-2016 13:23:01 Windows Update
06-11-2016 12:58:40 Geplanter Prüfpunkt
08-11-2016 16:05:42 Prüfpunkt von HitmanPro
13-11-2016 16:54:17 JRT Pre-Junkware Removal
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: Bluetooth Audio Device
Description: Bluetooth Audio Device
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_A2DP
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: Virtual Bluetooth Support (Include Audio)
Description: Virtual Bluetooth Support (Include Audio)
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: AthBTPort
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Bluetooth LWFLT Device
Description: Bluetooth LWFLT Device
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_LWFLT
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (11/12/2016 07:43:04 PM) (Source: DbxSvc) (EventID: 320) (User: )
Description: Failed to connect to the driver: (-2147024894) Das System kann die angegebene Datei nicht finden.
Error: (11/12/2016 07:43:02 PM) (Source: DbxSvc) (EventID: 270) (User: )
Description: Filter Unload failed with: (-2145452013) Der angegebene Filter wurde nicht gefunden.
Error: (11/11/2016 09:08:46 PM) (Source: DbxSvc) (EventID: 320) (User: )
Description: Failed to connect to the driver: (-2147024894) Das System kann die angegebene Datei nicht finden.
Error: (11/11/2016 06:43:53 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.
Details:
Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06)
Error: (11/11/2016 06:43:53 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.
Kontext: Windows Anwendung
Details:
Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06)
Error: (11/11/2016 06:43:53 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06)
Error: (11/11/2016 06:43:53 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06)
Error: (11/11/2016 06:43:53 PM) (Source: Windows Search Service) (EventID: 3057) (User: )
Description: Der Plug-In-Manager <Search.TripoliIndexer> kann nicht initialisiert werden.
Kontext: Windows Anwendung
Details:
(HRESULT : 0x8e5e0210) (0x8e5e0210)
Error: (11/11/2016 06:43:53 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.
Details:
Der Inhaltsindexkatalog ist fehlerhaft. 0xc0041801 (0xc0041801)
Error: (11/11/2016 06:43:53 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4810 - enduser\mssearch2\search\ytrip\common\util\jetutil.cpp (167)} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.
Details:
0x8e5e0210 (0x8e5e0210)
Systemfehler:
=============
Error: (11/13/2016 04:54:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/13/2016 04:18:32 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Error: (11/13/2016 04:03:18 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Error: (11/13/2016 01:55:23 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "KLAUS-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{1E5210DC-85FF-4E1C-98B0-40CB3565919B}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
Error: (11/13/2016 01:29:16 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Error: (11/13/2016 01:08:05 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: Susanne)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Error: (11/13/2016 08:25:12 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Error: (11/13/2016 05:28:32 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Error: (11/13/2016 03:33:06 AM) (Source: DCOM) (EventID: 10010) (User: Susanne)
Description: Der Server "{1B1F472E-3221-4826-97DB-2C2324D389AE}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (11/13/2016 03:32:36 AM) (Source: DCOM) (EventID: 10010) (User: Susanne)
Description: Der Server "{BF6C1E47-86EC-4194-9CE5-13C15DCB2001}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
CodeIntegrity:
===================================
Date: 2016-11-13 17:04:16.321
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-07-23 18:39:48.072
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:47.369
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:45.338
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:44.853
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:41.649
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:38.959
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:36.146
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:35.615
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:33.629
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7-3630QM CPU @ 2.40GHz
Prozentuale Nutzung des RAM: 32%
Installierter physikalischer RAM: 8069.73 MB
Verfügbarer physikalischer RAM: 5462.59 MB
Summe virtueller Speicher: 10245.73 MB
Verfügbarer virtueller Speicher: 6800.57 MB
==================== Laufwerke ================================
Drive c: (OS) (Fixed) (Total:1117.37 GB) (Free:812.56 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (Data) (Fixed) (Total:1655.6 GB) (Free:1655.12 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 2794.5 GB) (Disk ID: A523CAED)
Partition: GPT.
==================== Ende von Addition.txt ============
|
|
14.11.2016, 15:28
| #6 |
| /// TB-Ausbilder | AdwCleaner, Registryeinträge die sich nicht löschen lassen Servus, wir entfernen die letzten Reste und kontrollieren nochmal alles.  Hinweis: Der Suchlauf mit ESET kann länger dauern. Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start
CloseProcesses:
Task: {37A4D3D1-A9C0-4F1F-A1E4-69F7106967AD} - System32\Tasks\{521DB96D-E9CC-4273-A927-56A7DF8BA731} => pcalua.exe -a "C:\ProgramData\SlimWare Utilities, Inc\DriverApp\Downloads\00F46400BE06BC2EF0051C27633897CA9F0000000015BC1B9E.exe"
C:\ProgramData\SlimWare Utilities, Inc
Task: {7BEB7A52-7115-44FE-983C-760FD41865A4} - System32\Tasks\{A7D58E18-1B4E-465F-B6ED-4EFE3829029A} => pcalua.exe -a C:\Users\Susanne\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=face
C:\Users\Susanne\AppData\Roaming\istartsurf
Task: {B78CA17D-3A08-43C7-AC90-44AF8F9116DF} - System32\Tasks\{825879E2-CC36-47E0-887E-8D5A3643532D} => pcalua.exe -a C:\Users\Susanne\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=pcs
AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [127]
AlternateDataStreams: C:\ProgramData\Temp:890CC2F3 [127]
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Software\Classes\.exe: => <===== ACHTUNG
CMD: dir "%ProgramFiles%"
CMD: dir "%ProgramFiles(x86)%"
CMD: dir "%ProgramData%"
CMD: dir "%Appdata%"
CMD: dir "%LocalAppdata%"
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 ESET Online Scanner
Schritt 3 Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.
Schritt 4
Gibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?Bitte poste mit deiner nächsten Antwort
|
|
15.11.2016, 19:49
| #7 |
| | Die Logfiles Hallo Matthias, die Logfiles Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-11-2016
durchgeführt von Susanne (14-11-2016 19:41:36) Run:2
Gestartet von C:\Users\Susanne\Desktop
Geladene Profile: Susanne (Verfügbare Profile: Susanne & Gast)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
start
CloseProcesses:
Task: {37A4D3D1-A9C0-4F1F-A1E4-69F7106967AD} - System32\Tasks\{521DB96D-E9CC-4273-A927-56A7DF8BA731} => pcalua.exe -a "C:\ProgramData\SlimWare Utilities, Inc\DriverApp\Downloads\00F46400BE06BC2EF0051C27633897CA9F0000000015BC1B9E.exe"
C:\ProgramData\SlimWare Utilities, Inc
Task: {7BEB7A52-7115-44FE-983C-760FD41865A4} - System32\Tasks\{A7D58E18-1B4E-465F-B6ED-4EFE3829029A} => pcalua.exe -a C:\Users\Susanne\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=face
C:\Users\Susanne\AppData\Roaming\istartsurf
Task: {B78CA17D-3A08-43C7-AC90-44AF8F9116DF} - System32\Tasks\{825879E2-CC36-47E0-887E-8D5A3643532D} => pcalua.exe -a C:\Users\Susanne\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=pcs
AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [127]
AlternateDataStreams: C:\ProgramData\Temp:890CC2F3 [127]
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Software\Classes\.exe: => <===== ACHTUNG
CMD: dir "%ProgramFiles%"
CMD: dir "%ProgramFiles(x86)%"
CMD: dir "%ProgramData%"
CMD: dir "%Appdata%"
CMD: dir "%LocalAppdata%"
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
*****************
Prozess erfolgreich geschlossen.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{37A4D3D1-A9C0-4F1F-A1E4-69F7106967AD}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{37A4D3D1-A9C0-4F1F-A1E4-69F7106967AD}" => Schlüssel erfolgreich entfernt
C:\WINDOWS\System32\Tasks\{521DB96D-E9CC-4273-A927-56A7DF8BA731} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{521DB96D-E9CC-4273-A927-56A7DF8BA731}" => Schlüssel erfolgreich entfernt
"C:\ProgramData\SlimWare Utilities, Inc" => nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7BEB7A52-7115-44FE-983C-760FD41865A4}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7BEB7A52-7115-44FE-983C-760FD41865A4}" => Schlüssel erfolgreich entfernt
C:\WINDOWS\System32\Tasks\{A7D58E18-1B4E-465F-B6ED-4EFE3829029A} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{A7D58E18-1B4E-465F-B6ED-4EFE3829029A}" => Schlüssel erfolgreich entfernt
"C:\Users\Susanne\AppData\Roaming\istartsurf" => nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B78CA17D-3A08-43C7-AC90-44AF8F9116DF}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B78CA17D-3A08-43C7-AC90-44AF8F9116DF}" => Schlüssel erfolgreich entfernt
C:\WINDOWS\System32\Tasks\{825879E2-CC36-47E0-887E-8D5A3643532D} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{825879E2-CC36-47E0-887E-8D5A3643532D}" => Schlüssel erfolgreich entfernt
C:\ProgramData\Temp => ":5C321E34" ADS erfolgreich entfernt.
C:\ProgramData\Temp => ":890CC2F3" ADS erfolgreich entfernt.
"HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Software\Classes\.exe" => Schlüssel erfolgreich entfernt
========= dir "%ProgramFiles%" =========
Datentr„ger in Laufwerk C: ist OS
Volumeseriennummer: CA3C-B082
Verzeichnis von C:\Program Files
10.11.2016 13:00 <DIR> .
10.11.2016 13:00 <DIR> ..
06.10.2015 12:44 <DIR> Alien Skin
06.10.2015 13:20 <DIR> AlienSkin Eye Candy 7.1.0.1203
01.03.2014 11:47 <DIR> ASUS
12.11.2015 09:06 <DIR> Bonjour
10.11.2016 21:13 <DIR> CCleaner
30.11.2015 13:23 <DIR> Common Files
25.08.2015 19:39 <DIR> Corel
01.03.2014 11:38 <DIR> DIFX
14.11.2016 19:41 <DIR> Emsisoft Internet Security
11.11.2016 18:48 <DIR> HitmanPro
03.04.2016 17:37 <DIR> Intel
10.11.2016 21:14 <DIR> Internet Explorer
10.11.2016 13:00 <DIR> iPod
10.11.2016 13:00 <DIR> iTunes
25.08.2015 19:17 <DIR> LockHunter
13.10.2016 13:24 <DIR> Microsoft Silverlight
23.11.2015 15:55 <DIR> MSBuild
30.11.2015 13:23 <DIR> NewBlue
29.04.2016 08:32 <DIR> NVIDIA Corporation
23.11.2015 16:00 <DIR> Realtek
28.02.2016 15:05 <DIR> Recuva
23.11.2015 15:55 <DIR> Reference Assemblies
28.08.2015 15:05 <DIR> TeraCopy
19.08.2015 11:28 <DIR> VS Revo Group
24.11.2015 11:02 <DIR> Windows Defender
21.11.2014 11:52 <DIR> Windows Mail
23.11.2015 16:11 <DIR> Windows Media Player
21.11.2014 11:52 <DIR> Windows Multimedia Platform
23.11.2015 16:28 <DIR> Windows NT
21.11.2014 11:52 <DIR> Windows Photo Viewer
21.11.2014 11:52 <DIR> Windows Portable Devices
23.11.2015 16:11 <DIR> WindowsPowerShell
25.08.2015 18:00 <DIR> WinRAR
0 Datei(en), 0 Bytes
35 Verzeichnis(se), 870.192.959.488 Bytes frei
========= Ende von CMD: =========
========= dir "%ProgramFiles(x86)%" =========
Datentr„ger in Laufwerk C: ist OS
Volumeseriennummer: CA3C-B082
Verzeichnis von C:\Program Files (x86)
18.10.2016 08:38 <DIR> .
18.10.2016 08:38 <DIR> ..
22.11.2015 18:04 <DIR> Adobe
06.10.2015 12:44 <DIR> Alien Skin
12.10.2015 14:11 <DIR> AlienSkin Eye Candy 7.1.0.1203
27.08.2015 10:51 <DIR> Apowersoft
08.04.2016 09:13 <DIR> Apple Software Update
24.11.2015 10:09 <DIR> ASUS
16.01.2016 20:06 <DIR> AVS4YOU
18.11.2015 09:41 <DIR> Bluetooth Suite
12.11.2015 09:06 <DIR> Bonjour
24.10.2016 10:38 <DIR> Common Files
06.09.2016 16:09 <DIR> congstar
25.08.2015 19:37 <DIR> Corel
26.11.2015 12:20 <DIR> CrystalDiskInfo
01.03.2014 11:46 <DIR> CyberLink
12.11.2016 19:43 <DIR> Dropbox
29.11.2015 18:54 <DIR> Emsisoft Internet Security
21.11.2015 17:57 <DIR> ESET
29.12.2015 18:14 <DIR> Filzip
11.09.2016 18:36 <DIR> Hotspot Shield
28.04.2016 14:05 <DIR> Intel
28.04.2016 14:08 <DIR> Intel Driver Update Utility
10.11.2016 21:14 <DIR> Internet Explorer
29.08.2015 09:03 <DIR> IrfanView
26.09.2015 19:51 <DIR> Jasc Software Inc
24.10.2016 10:39 <DIR> Java
18.11.2015 08:52 <DIR> JDownloader
02.06.2016 17:36 <DIR> Malwarebytes Anti-Malware
19.10.2015 13:55 <DIR> Microsoft
23.12.2015 13:09 <DIR> Microsoft ASP.NET
17.10.2015 19:18 <DIR> Microsoft Office
13.10.2016 13:24 <DIR> Microsoft Silverlight
26.04.2013 00:16 <DIR> Microsoft SkyDrive
26.04.2013 00:17 <DIR> Microsoft SQL Server Compact Edition
23.11.2015 16:11 <DIR> Microsoft.NET
24.05.2016 19:29 <DIR> Mozilla Firefox
09.10.2016 10:39 <DIR> Mozilla Maintenance Service
08.10.2016 17:22 <DIR> Mozilla Thunderbird
23.11.2015 15:55 <DIR> MSBuild
17.10.2015 19:17 <DIR> MSECache
17.11.2015 15:00 <DIR> MultiTranse European
30.11.2015 13:23 <DIR> NewBlue
28.04.2016 15:30 <DIR> NVIDIA Corporation
29.09.2015 14:38 <DIR> Opera
26.09.2016 20:45 <DIR> PDF24
26.02.2016 19:43 <DIR> Plugin Commander Light
01.03.2014 11:30 <DIR> Qualcomm Atheros
10.01.2016 18:04 <DIR> QuickTime
03.04.2016 17:06 <DIR> Realtek
23.11.2015 15:55 <DIR> Reference Assemblies
29.04.2016 08:34 <DIR> Skype
25.08.2015 18:08 <DIR> SpywareBlaster
06.07.2016 18:04 <DIR> Sqirlz Morph
06.07.2016 17:59 <DIR> Sqirlz Water Reflections
24.10.2015 15:49 <DIR> Toon Boom Animation
13.10.2015 08:39 <DIR> Unchecky
10.10.2015 18:24 <DIR> VideoLAN
03.04.2016 16:18 <DIR> VulkanRT
26.04.2013 00:20 <DIR> WildGames
26.04.2013 00:20 <DIR> WildTangent Games
19.10.2015 12:00 <DIR> Winamp
19.10.2015 11:55 <DIR> Winamp Detect
24.11.2015 11:02 <DIR> Windows Defender
18.10.2015 14:25 <DIR> Windows Live
21.11.2014 11:51 <DIR> Windows Mail
23.11.2015 16:11 <DIR> Windows Media Player
21.11.2014 11:51 <DIR> Windows Multimedia Platform
22.08.2013 16:36 <DIR> Windows NT
21.11.2014 11:51 <DIR> Windows Photo Viewer
21.11.2014 11:51 <DIR> Windows Portable Devices
23.11.2015 16:11 <DIR> WindowsPowerShell
25.08.2015 17:15 <DIR> WinRAR
0 Datei(en), 0 Bytes
73 Verzeichnis(se), 870.192.955.392 Bytes frei
========= Ende von CMD: =========
========= dir "%ProgramData%" =========
Datentr„ger in Laufwerk C: ist OS
Volumeseriennummer: CA3C-B082
Verzeichnis von C:\ProgramData
07.11.2015 19:12 <DIR> Adobe
06.10.2015 12:44 <DIR> Alien Skin
26.09.2015 18:37 <DIR> Apple
26.09.2015 18:37 <DIR> Apple Computer
26.04.2013 00:15 <DIR> ASUSLogos
26.09.2015 18:37 <DIR> ASUSVibe
26.09.2015 18:37 <DIR> Atheros
16.01.2016 20:04 <DIR> AVS4YOU
07.11.2015 18:34 <DIR> boost_interprocess
15.10.2015 14:15 <DIR> CDTPL
25.08.2015 19:44 <DIR> Corel
30.11.2015 13:38 <DIR> CyberLink
24.08.2015 17:40 <DIR> Dropbox
26.12.2015 16:14 <DIR> Emsisoft
16.07.2016 16:38 <DIR> FLEXnet
28.10.2015 07:07 261 fontcacheev1.dat
08.11.2016 16:06 <DIR> HitmanPro
11.09.2016 18:36 <DIR> Hotspot Shield
03.04.2016 17:33 <DIR> Intel
20.09.2015 13:07 <DIR> LHService
26.09.2015 18:37 <DIR> Licenses
26.09.2015 18:37 <DIR> LockHunter
21.08.2015 15:08 <DIR> Malwarebytes
26.09.2015 18:37 <DIR> McAfee
26.04.2013 00:16 <DIR> Microsoft SkyDrive
29.11.2015 18:57 <DIR> Movavi
29.04.2016 09:55 <DIR> NVIDIA
28.04.2016 15:30 <DIR> NVIDIA Corporation
24.10.2016 10:44 <DIR> Oracle
26.09.2015 18:37 <DIR> P4G
28.04.2016 14:05 <DIR> Package Cache
23.11.2015 16:11 <DIR> PRICache
25.08.2015 19:30 <DIR> Protexis
01.03.2014 11:30 <DIR> Qualcomm Atheros
23.11.2015 16:16 <DIR> regid.1986-12.com.adobe
23.11.2015 16:16 <DIR> regid.1991-06.com.microsoft
16.07.2016 16:23 <DIR> Rosetta Stone
16.07.2016 16:23 <DIR> Rosetta Stone Backups
29.11.2015 18:31 4.943 rxsmznjf.zcp
29.04.2016 08:34 <DIR> Skype
30.11.2015 13:41 <DIR> SUPPORTDIR
20.10.2016 18:29 <DIR> Temp
17.11.2015 14:44 <DIR> Ulead Systems
24.10.2016 10:38 <DIR> Unchecky
26.09.2015 18:37 <DIR> USBChargerPlus
26.09.2015 18:37 <DIR> VS Revo Group
26.09.2015 18:37 <DIR> WildTangent
05.11.2015 11:39 <DIR> WindSolutions
2 Datei(en), 5.204 Bytes
46 Verzeichnis(se), 870.192.951.296 Bytes frei
========= Ende von CMD: =========
========= dir "%Appdata%" =========
Datentr„ger in Laufwerk C: ist OS
Volumeseriennummer: CA3C-B082
Verzeichnis von C:\Users\Susanne\AppData\Roaming
24.10.2016 10:57 <DIR> .
24.10.2016 10:57 <DIR> ..
17.11.2015 17:53 <DIR> Adobe
17.11.2015 17:43 <DIR> Alien Skin
08.02.2016 11:57 <DIR> Apowersoft
31.08.2015 15:33 <DIR> Apple Computer
05.10.2015 09:08 <DIR> Atheros
30.11.2015 12:43 <DIR> avidemux
16.01.2016 20:04 <DIR> AVS4YOU
19.10.2015 11:05 <DIR> BlueLabsSoftware
19.10.2015 11:48 <DIR> CDTPL
16.07.2016 16:29 <DIR> com.rosettastone.languagetraining
25.08.2015 19:30 <DIR> Corel
30.11.2015 13:38 <DIR> CyberLink
04.09.2015 12:20 <DIR> Digiarty
24.08.2015 17:42 <DIR> Dropbox
18.08.2015 13:33 <DIR> Identities
26.11.2015 18:24 <DIR> iMobie
03.04.2016 17:33 <DIR> Intel Corporation
26.09.2015 18:37 <DIR> IrfanView
23.09.2015 16:31 <DIR> Jasc
25.08.2015 19:13 <DIR> LockHunter
12.08.2015 20:14 <DIR> Macromedia
30.11.2015 13:05 <DIR> MotionDSP
12.08.2015 20:36 <DIR> Mozilla
04.10.2015 19:47 <DIR> MysticCoder
11.11.2015 10:02 <DIR> Neos Eureka S.r.l
29.08.2015 17:32 <DIR> NVIDIA
26.08.2015 11:01 <DIR> Opera
29.09.2015 14:37 <DIR> Opera Software
24.10.2016 10:57 <DIR> Oracle
28.10.2015 07:07 <DIR> Performix LLC
29.08.2015 17:04 3.585.654 SageThumbs wallpaper.bmp
30.04.2016 15:54 <DIR> Skype
14.11.2016 13:38 73 sp_data.sys
28.08.2015 15:41 <DIR> Sun
25.08.2015 19:01 <DIR> TeamViewer
26.09.2015 18:37 <DIR> TeraCopy
23.08.2015 15:15 <DIR> Thunderbird
29.02.2016 13:54 <DIR> Tracker Software
17.11.2015 14:44 <DIR> Ulead Systems
04.11.2016 18:37 <DIR> vlc
19.10.2015 11:53 <DIR> Winamp
05.11.2015 11:39 <DIR> WindSolutions
25.08.2015 17:46 <DIR> WinRAR
16.01.2016 19:00 <DIR> {950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
2 Datei(en), 3.585.727 Bytes
44 Verzeichnis(se), 870.192.947.200 Bytes frei
========= Ende von CMD: =========
========= dir "%LocalAppdata%" =========
Datentr„ger in Laufwerk C: ist OS
Volumeseriennummer: CA3C-B082
Verzeichnis von C:\Users\Susanne\AppData\Local
14.11.2016 13:39 <DIR> .
14.11.2016 13:39 <DIR> ..
30.01.2016 22:00 <DIR> Adobe
23.09.2015 18:59 <DIR> Alien Skin
08.02.2016 11:57 <DIR> Apowersoft
31.08.2015 15:22 <DIR> Apple
17.01.2016 14:29 <DIR> Apple Computer
26.09.2015 18:37 <DIR> ASUS
12.08.2015 20:14 <DIR> BMExplorer
24.10.2015 15:46 <DIR> CEF
29.11.2015 18:58 <DIR> converter
25.08.2015 19:41 <DIR> Corel PaintShop Pro
10.11.2016 21:12 <DIR> CrashDumps
14.11.2016 13:38 <DIR> CrashRpt
30.11.2015 13:37 <DIR> CyberLink
11.03.2016 19:57 5.120 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
13.10.2016 18:40 <DIR> Diagnostics
30.09.2016 19:13 <DIR> Dropbox
25.08.2016 11:10 <DIR> ElevatedDiagnostics
26.12.2015 10:22 <DIR> Escape Motions
01.10.2016 17:29 119.616 GDIPFONTCACHEV1.DAT
22.08.2015 18:44 <DIR> Google
21.08.2015 07:55 <DIR> GWX
26.11.2015 17:44 <DIR> iMobie_Inc
03.04.2016 16:29 <DIR> Intel
20.11.2015 18:28 <DIR> Intel_Corporation
14.11.2015 16:42 <DIR> JDownloader 2.0
21.09.2015 20:06 <DIR> JDownloader v2.0
15.08.2015 17:49 <DIR> Macromedia
17.01.2016 16:18 <DIR> Microsoft
30.11.2015 13:05 <DIR> MotionDSP
29.11.2015 18:58 <DIR> Movavi
12.08.2015 20:37 <DIR> Mozilla
03.04.2016 16:21 <DIR> NVIDIA
03.04.2016 16:20 <DIR> Nvidia Corporation
29.09.2015 14:37 <DIR> Opera Software
23.11.2015 16:07 <DIR> Packages
18.08.2015 13:35 <DIR> PackageStaging
12.11.2015 12:51 <DIR> Paint.NET
19.10.2015 14:02 <DIR> PDF24
18.08.2015 17:03 <DIR> Programs
02.06.2016 17:27 7.600 Resmon.ResmonCfg
13.11.2015 20:12 4.969.472 SageThumbs.db3
29.04.2016 08:34 <DIR> Skype
14.11.2016 19:41 <DIR> Temp
23.08.2015 15:15 <DIR> Thunderbird
24.10.2015 15:51 <DIR> Toon Boom Animation
29.11.2015 18:51 <DIR> videocapture
29.11.2015 18:35 <DIR> VideoEditor
02.10.2016 19:50 <DIR> VirtualStore
19.08.2015 11:28 <DIR> VS Revo Group
21.12.2015 20:33 <DIR> Windows Live
4 Datei(en), 5.101.808 Bytes
48 Verzeichnis(se), 870.192.947.200 Bytes frei
========= Ende von CMD: =========
========= RemoveProxy: =========
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
========= Ende von RemoveProxy: =========
========= ipconfig /flushdns =========
Windows-IP-Konfiguration
Der DNS-Aufl”sungscache wurde geleert.
========= Ende von CMD: =========
========= netsh winsock reset =========
Der Winsock-Katalog wurde zurckgesetzt.
Sie mssen den Computer neu starten, um den Vorgang abzuschlieáen.
========= Ende von CMD: =========
=========== EmptyTemp: ==========
BITS transfer queue => 12582912 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 116669664 B
Java, Flash, Steam htmlcache => 1508 B
Windows/system/drivers => 494078 B
Edge => 0 B
Chrome => 0 B
Firefox => 383110331 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 117794 B
NetworkService => 0 B
UpdatusUser => 0 B
Susanne => 43187720 B
Gast => 0 B
RecycleBin => 7487572 B
EmptyTemp: => 537.5 MB temporäre Dateien entfernt.
================================
Das System musste neu gestartet werden.
==== Ende von Fixlog 19:41:57 ====
Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=4b022ec5c69103468bcef4c326c51291
# end=init
# utc_time=2016-11-15 03:03:54
# local_time=2016-11-15 04:03:54 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 31417
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=4b022ec5c69103468bcef4c326c51291
# end=updated
# utc_time=2016-11-15 03:06:16
# local_time=2016-11-15 04:06:16 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=4b022ec5c69103468bcef4c326c51291
# engine=31417
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-11-15 05:09:52
# local_time=2016-11-15 06:09:52 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 30870415 43019362 0 0
# scanned=434374
# found=1
# cleaned=1
# scan_time=7416
sh=80CB29F1BF1F250CC6804DAB0EAE56CC43B6E37D ft=1 fh=c5d8f6e2a6c7cf9e vn="Win32/Adware.Agent.NQE Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\$Recycle.Bin\S-1-5-18\$RP7O1KO.exe"
Code:
ATTFilter HitmanPro 3.7.15.281
www.hitmanpro.com
Computer name . . . . : SUSANNE
Windows . . . . . . . : 6.3.0.9600.X64/8
User name . . . . . . : Susanne\Susanne
UAC . . . . . . . . . : Enabled
License . . . . . . . : Paid (483 days left)
Scan date . . . . . . : 2016-11-15 18:54:22
Scan mode . . . . . . : Normal
Scan duration . . . . : 11m 52s
Disk access mode . . : Direct disk access (SRB)
Cloud . . . . . . . . : Internet
Reboot . . . . . . . : No
Threats . . . . . . . : 0
Traces . . . . . . . : 2
Objects scanned . . . : 2.830.818
Files scanned . . . . : 207.825
Remnants scanned . . : 995.251 files / 1.627.742 keys
Suspicious files ____________________________________________________________
C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\FRST64.exe
Size . . . . . . . : 2.411.520 bytes
Age . . . . . . . : 2.0 days (2016-11-13 18:14:10)
Entropy . . . . . : 7.6
SHA-256 . . . . . : 1DB9547CD72BE4D4BA6391FF9983CD69C0721BFD04CA89FB8AB2D9A7C8D7DE61
Needs elevation . : Yes
Fuzzy . . . . . . : 24.0
Program has no publisher information but prompts the user for permission elevation.
Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
Authors name is missing in version info. This is not common to most programs.
Version control is missing. This file is probably created by an individual. This is not typical for most programs.
Time indicates that the file appeared recently on this computer.
Forensic Cluster
-16.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\
-16.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\
-16.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\
-16.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\
-16.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\
-16.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\
-16.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\
-16.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\
-16.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\
-16.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT PAPERS (4).jpg
-16.1s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT PAPERS (3).jpg
-15.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT PAPERS (2).jpg
-15.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT PAPERS (1).png
-15.5s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT PAPERS (1).jpg
-15.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (99).png
-15.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (98).png
-15.1s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (97).png
-14.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (96).png
-14.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (95).png
-14.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (94).png
-14.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (93).png
-14.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (92).png
-14.5s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (91).png
-14.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (90).png
-14.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (9).png
-14.1s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (89).png
-13.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (88).png
-13.5s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (87).png
-13.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (86).png
-13.2s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (85).png
-13.2s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (84).png
-13.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (83).png
-12.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (82).png
-12.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (81).png
-12.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (80).png
-12.5s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (8).png
-12.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (79).png
-12.2s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (78).png
-11.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (77).png
-11.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (76).png
-11.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (75).png
-11.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (74).png
-11.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (73).png
-11.5s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (72).png
-11.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (71).png
-11.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (70).png
-11.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (7).png
-11.2s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (69).png
-11.1s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (68).png
-11.1s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (67).png
-11.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (66).png
-10.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (65).png
-10.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (64).png
-9.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (63).png
-9.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (62).png
-9.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (61).png
-9.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (60).png
-9.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (6).png
-9.5s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (59).png
-9.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (58).png
-9.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (57).png
-9.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (56).png
-9.1s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (55).png
-8.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (54).png
-7.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (53).png
-7.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (52).png
-7.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (51).png
-7.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (50).PNG
-7.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (5).png
-7.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (49).PNG
-7.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (48).PNG
-7.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (47).PNG
-7.2s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (46).PNG
-7.2s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (45).png
-7.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (44).PNG
-6.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (43).PNG
-6.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (42).PNG
-6.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (41).png
-6.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (40).PNG
-6.5s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (4).png
-6.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (39).PNG
-6.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (38).png
-6.2s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (37).png
-6.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (36).PNG
-6.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (35).png
-5.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (34).png
-5.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (33).png
-5.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (32).png
-5.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (31).png
-5.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (30).png
-5.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (3).png
-5.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (29).png
-5.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (28).png
-5.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (27).png
-5.1s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (26).png
-5.1s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (25).png
-5.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (24).png
-4.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (23).png
-4.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (22).png
-4.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (21).png
-4.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (20).png
-4.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (2).png
-4.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (19).png
-3.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (18).png
-3.2s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (17).png
-3.2s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (16).png
-3.1s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (15).png
-3.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (14).png
-2.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (13).png
-2.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (12).png
-2.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (11).png
-2.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (10).png
-2.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (1).png
-2.5s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\@BIBI TOU.txt
-2.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\!BIBI.gif
-1.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BEACH_PARADISE\BEACH PARADISE\
-1.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BEACH_PARADISE\
-1.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BEACH_PARADISE\BEACH PARADISE\Tou\
-1.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BEACH_PARADISE\BEACH PARADISE\Tou\TERMS OF USE.txt
-1.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BEACH_PARADISE\BEACH PARADISE\Tou\snc_Store-dbs14.gif
-1.2s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BEACH_PARADISE\BEACH PARADISE\LYS-SNCO_BEACH-PARADISE.psd
-0.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BEACH_PARADISE\BEACH PARADISE\LYS-SNCO_BEACH-PARADISE.jpg
0.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\FRST64.exe
2.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\JRT.txt
3.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\JRT.exe
4.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\mbamlog.txt
C:\Users\Susanne\Desktop\FRST64.exe
Size . . . . . . . : 2.411.520 bytes
Age . . . . . . . : 2.1 days (2016-11-13 17:04:19)
Entropy . . . . . : 7.6
SHA-256 . . . . . : 1DB9547CD72BE4D4BA6391FF9983CD69C0721BFD04CA89FB8AB2D9A7C8D7DE61
Needs elevation . : Yes
Fuzzy . . . . . . : 24.0
Program has no publisher information but prompts the user for permission elevation.
Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
Authors name is missing in version info. This is not common to most programs.
Version control is missing. This file is probably created by an individual. This is not typical for most programs.
Time indicates that the file appeared recently on this computer.
Forensic Cluster
0.0s C:\Users\Susanne\Desktop\FRST64.exe
6.8s C:\Users\Susanne\Desktop\FRST.txt
FRST Logfile: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12-11-2016 durchgeführt von Susanne (Administrator) auf SUSANNE (15-11-2016 19:07:26) Gestartet von C:\Users\Susanne\Desktop Geladene Profile: Susanne & Gast (Verfügbare Profile: Susanne & Gast) Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Code Sector) C:\Program Files\TeraCopy\TeraCopyService.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2service.exe (SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe (Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe () C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe (RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe (RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_bg.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\HSSCP.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2guard.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe (ZTE) C:\Program Files (x86)\congstar\Internet-Manager\Bin\mcserver.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe () C:\Program Files (x86)\congstar\Internet-Manager\Bin\dbus-daemon.exe () C:\Program Files (x86)\congstar\Internet-Manager\Bin\db_daemon.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2start.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe (cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_23_0_0_207.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_23_0_0_207.exe () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe ==================== Registry (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13877464 2000-01-01] (Realtek Semiconductor) HKLM\...\Run: [Corel Update Helper] => c:\Program Files\Corel\Corel PaintShop Pro X7 (64-bit)\pua.exe [2004312 2015-05-19] (Corel Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397752 2016-03-24] (NVIDIA Corporation) HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation) HKLM\...\Run: [emsisoft anti-malware] => c:\program files\emsisoft internet security\a2guard.exe [7838392 2016-10-29] (Emsisoft Ltd) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2016-11-01] (Apple Inc.) HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.) HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [25673776 2016-11-07] (Dropbox, Inc.) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [210432 2016-07-05] (Geek Software GmbH) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation) Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [131712 2013-01-25] (Atheros Communications) HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\Run: [Schmaili] => C:\Schmaili90\schmaili.exe [536576 2007-08-03] (Marc Waesche Services) HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.) HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\MountPoints2: {25215d21-71fb-11e6-bf71-24fd52f78824} - "F:\windows\Data\setup.exe" AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [186136 2016-04-21] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [164696 2016-04-21] (NVIDIA Corporation) ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] () ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => Keine Datei ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => Keine Datei ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => Keine Datei ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => Keine Datei ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => Keine Datei ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => Keine Datei Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MCtlSvc.lnk [2016-09-06] ShortcutTarget: MCtlSvc.lnk -> C:\Program Files (x86)\congstar\Internet-Manager\Bin\mcserver.exe (ZTE) Startup: C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2015-08-26] ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Hosts Datei wurde nicht im Standardordner gefunden Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{1E5210DC-85FF-4E1C-98B0-40CB3565919B}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{4C2CE82A-EBAB-4312-8E71-DF116B2A940E}: [DhcpNameServer] 8.8.8.8 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank URLSearchHook: [S-1-5-21-1794304933-3207535254-2068445666-501] ACHTUNG => Standard URLSearchHook fehlt SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> DefaultScope {70D443E2-171A-419A-A51C-BCCF5FA9F887} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> {56EE4669-C5D3-4789-8C16-4DB4464DAD46} URL = hxxps://de.search.yahoo.com/search?fr=mcafee&type=C011DE885D20150813&p={searchTerms} SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> {70D443E2-171A-419A-A51C-BCCF5FA9F887} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2013-01-25] (Qualcomm Atheros Commnucations) BHO-x32: Kein Name -> {451C804F-C205-4F03-B48E-537EC94937BF} -> Keine Datei BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-24] (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-24] (Oracle Corporation) Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 - Keine Datei FireFox: ======== FF DefaultProfile: y9p501c2.default FF ProfilePath: C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default [2016-11-15] FF Homepage: Mozilla\Firefox\Profiles\y9p501c2.default -> hxxp://www.ferienwohnung-schifferstadt.de/ hxxp://www.gmx.net/logoutlounge/?p=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 hxxps://www.google.de/webhp?hl=de&sa=X&ved=0ahUKEwi5iaqh1IzQAhVJzRQKHZIbDPgQPAgD&gws_rd=cr&ei=8r4qWP7YCMO-aPSZpNAH hxxps://accounts.google.com/ServiceLogin?continue=https%3A%2F%2Fgroups.google.com%2Fd%2Fmyforums&service=groups2&sacu=1&rip=1#identifier hxxps://login.yahoo.com/config/login?.src=ygrp&.intl=de&.lang=de-DE&.done=hxxps://de.groups.yahoo.com/neo hxxps://translate.google.de/?hl=de&tab=TT#de/fr/papierrolle hxxps://sso.kabelmail.de/portal/sites/messaging/inbox.aspx hxxps://www.1und1.de/login hxxps://polizei.brandenburg.de/konto/login hxxps://www.bussgeldkatalog.org/raser/ hxxps://www.congstar.de/meincongstar/ hxxps://www.dropbox.com/login?src=logout hxxps://www.wesendit.com/ hxxp://heilkraeuter.de/lexikon/huflat.htm hxxp://www.netdoktor.de/heilpflanzen/koenigskerze/ hxxp://swheattutorials.blogspot.de/2015/12/blog-post_74.html hxxp://www.wheatcreations.com/SWHEATTUTORIALS/BJChristmas/BJChristmas.htm hxxp://bienespspplace.bplaced.net/Tutorials/Saison/wintermagic/ hxxp://www.marinettedesings.be/winter_magic_engels.htm hxxps://www.adac.de/Produkte/autovermietung/EmptyPage.aspx hxxp://www.animationfactory.com/de/search/index.html?s=76&spage=4&raw_q=halloween&CURRENCY=USD&category_id=E1&q=halloween&b=k&cid=E1&bl=%252Fde%252Fsearch%252Findex.html%253Fq%253Dhalloween%2526cid%253DE1%2526s%253D51%2526b%253Dk%2526t%253D244%2526ppage%253D3&t=244 http://www.trojaner-board.de/182736-...en-lassen.html hxxps://de.pinterest.com/pin/241505598747736884/ hxxp://mamietitine.centerblog.net/rub-pour-vos-creas-fonds--34.html hxxps://translate.google.com/translate?hl=de&sl=fr&u=hxxp://mamietitine.centerblog.net/&prev=search http://www.trojaner-board.de/182736-...ml#post1623044 http://www.trojaner-board.de/80603-e...ner-nod32.html FF Extension: (Webmail Ad Blocker) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\gmailnoads@mywebber.com.xpi [2015-08-15] FF Extension: (Mailvelope) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\jid1-AQqSMBYb0a8ADg@jetpack.xpi [2016-04-08] FF Extension: (Open about:permissons) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\open.about.permissions@jasnapaka.com.xpi [2016-06-07] FF Extension: (S3.Google Translator) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\s3google@translator.xpi [2015-12-13] FF Extension: (translator) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\translator@dontfollowme.net.xpi [2016-01-09] FF Extension: (Google Translator for Firefox) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\translator@zoli.bod.xpi [2015-12-21] FF Extension: (NoScript) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-08-15] FF Extension: (WOT) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-08-15] FF Extension: (Video DownloadHelper) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-02-20] FF Extension: (Adblock Plus) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-08-15] FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files (x86)\congstar\Internet-Manager\Bin\addon FF Extension: (Bytemobile Optimization Client) - C:\Program Files (x86)\congstar\Internet-Manager\Bin\addon [2010-04-01] [ist nicht signiert] FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-08] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [Keine Datei] FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-08] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1222172.dll [2015-11-19] (Adobe Systems, Inc.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-24] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-24] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> C:\Program Files (x86)\Winamp Detect\npwachk.dll [Keine Datei] FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-10-12] () FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [Keine Datei] FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei] ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 a2AntiMalware; C:\Program Files\Emsisoft Internet Security\a2service.exe [9388576 2016-10-29] (Emsisoft Ltd) S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2015-08-26] (Adobe Systems) [Datei ist nicht signiert] R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [669872 2015-09-15] (Adobe Systems Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2207960 2016-09-26] (Adobe Systems, Incorporated) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.) R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS) R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227456 2013-01-25] (Qualcomm Atheros Commnucations) [Datei ist nicht signiert] S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-03-07] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-03-07] (Dropbox, Inc.) R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [42096 2016-11-07] (Dropbox, Inc.) R2 ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [416408 2016-03-09] () R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164856 2016-03-24] (NVIDIA Corporation) R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [135496 2016-11-11] (SurfRight B.V.) R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [2710648 2016-08-24] (AnchorFree Inc.) S3 HssTrayService; C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE [103168 2016-08-24] () R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation) R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-03-24] (NVIDIA Corporation) R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2013-09-13] (arvato digital services llc) R2 SystemUsageReportSvc_WILLAMETTE; C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe [118424 2016-03-09] () R2 TeraCopyService; C:\Program Files\TeraCopy\TeraCopyService.exe [92160 2015-02-17] (Code Sector) [Datei ist nicht signiert] R2 Unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [254232 2016-08-23] (RaMMicHaeL) S3 USER_ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [416408 2016-03-09] () S3 vmicvss; C:\WINDOWS\System32\ICSvc.dll [524800 2014-11-21] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation) R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-01-25] (Atheros) [Datei ist nicht signiert] ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R1 adgnetworkwfpdrv; C:\WINDOWS\System32\drivers\adgnetworkwfpdrv.sys [55800 2015-06-02] () R3 athr; C:\WINDOWS\system32\DRIVERS\athwbx.sys [3837440 2013-08-14] (Qualcomm Atheros Communications, Inc.) R3 ATP; C:\WINDOWS\System32\drivers\AsusTP.sys [65784 2013-04-16] (ASUS Corporation) R0 BMLoad; C:\WINDOWS\System32\drivers\BMLoad.sys [16512 2009-12-15] (Bytemobile, Inc.) [Datei ist nicht signiert] S3 BTATH_LWFLT; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-25] (Qualcomm Atheros) R3 btmaux; C:\WINDOWS\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.) S0 ebdrv; C:\WINDOWS\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation) R1 epp; C:\PROGRAM FILES\EMSISOFT INTERNET SECURITY\epp.sys [124304 2016-10-05] (Emsisoft Ltd) R1 FWNDIS_LWF; C:\WINDOWS\system32\DRIVERS\fwndislwf64.sys [212560 2016-10-21] () R1 fwwfp; C:\Program Files\Emsisoft Internet Security\fwwfp764.sys [152776 2016-10-21] () S3 HSPADataCardusbmdm; C:\WINDOWS\system32\DRIVERS\HSPADataCardusbmdm.sys [122752 2011-08-19] (HSPADataCard Incorporated) S3 HSPADataCardusbnmea; C:\WINDOWS\system32\DRIVERS\HSPADataCardusbnmea.sys [122752 2011-08-19] (HSPADataCard Incorporated) S3 HSPADataCardusbser; C:\WINDOWS\system32\DRIVERS\HSPADataCardusbser.sys [122752 2011-08-19] (HSPADataCard Incorporated) R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( ) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-11-15] (Malwarebytes) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation) S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [80920 2015-07-02] (McAfee, Inc.) R3 semav6msr64; C:\WINDOWS\system32\drivers\semav6msr64.sys [21984 2016-03-09] () R3 taphss6; C:\WINDOWS\system32\DRIVERS\taphss6.sys [42088 2015-06-04] (Anchorfree Inc.) R1 tcpipBM; C:\WINDOWS\system32\drivers\tcpipBM.sys [39552 2009-12-15] (Bytemobile, Inc.) [Datei ist nicht signiert] S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation) S3 dbx; system32\DRIVERS\dbx.sys [X] S4 nvvad_WaveExtensible; \SystemRoot\system32\drivers\nvvad64v.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-11-15 17:33 - 2016-11-15 17:33 - 00000000 ____D C:\Users\Susanne\Desktop\SNC-AC-MONTHPINK 2016-11-15 17:32 - 2016-11-15 17:32 - 00000000 ____D C:\Users\Susanne\Desktop\COLLAB-LYS-WINTER-LOVE 2016-11-15 17:30 - 2016-11-15 17:34 - 00000000 ____D C:\Users\Susanne\Downloads\Landschaftsbilder 2016-11-15 17:26 - 2016-11-15 17:26 - 00000000 ____D C:\Users\Susanne\Desktop\WINTER_GLAMOUR 2016-11-15 16:56 - 2016-11-15 16:56 - 00000000 ____D C:\Users\Susanne\Desktop\SNC-SD-SHINE 2016-11-15 12:30 - 2016-11-15 12:32 - 00003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1 2016-11-15 08:53 - 2016-11-15 08:53 - 00000000 ___RD C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2016-11-14 19:41 - 2016-11-14 19:41 - 00019529 _____ C:\Users\Susanne\Desktop\Fixlog.txt 2016-11-14 19:38 - 2016-11-14 19:38 - 00000000 ____D C:\Users\Susanne\Desktop\SNC-AV-DARK_SNOW_QUEEN 2016-11-14 19:34 - 2016-11-14 19:34 - 00000000 ____D C:\Users\Susanne\Desktop\SNC-AV-INES 2016-11-14 18:25 - 2016-11-14 18:26 - 15850891 _____ C:\Users\Susanne\Desktop\COLLAB-LYS-WINTER-LOVE.zip 2016-11-14 18:25 - 2016-11-14 18:26 - 14352935 _____ C:\Users\Susanne\Desktop\SNC-AV-DARK_SNOW_QUEEN.zip 2016-11-14 18:25 - 2016-11-14 18:26 - 14301111 _____ C:\Users\Susanne\Desktop\SNC-SD-SHINE.zip 2016-11-14 18:25 - 2016-11-14 18:26 - 04243078 _____ C:\Users\Susanne\Desktop\WINTER_GLAMOUR.zip 2016-11-14 18:25 - 2016-11-14 18:25 - 11193655 _____ C:\Users\Susanne\Desktop\SNC-AV-INES.zip 2016-11-14 18:25 - 2016-11-14 18:25 - 02454333 _____ C:\Users\Susanne\Desktop\SNC-AC-MONTHPINK.zip 2016-11-14 17:56 - 2016-11-14 17:57 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_ViNina Jennifer 2016-11-14 17:17 - 2016-11-14 17:18 - 00000000 ____D C:\Users\Susanne\Downloads\RivusDea Your Fairy 2016-11-14 15:46 - 2016-11-14 15:50 - 00000000 ____D C:\Users\Susanne\Downloads\Hintergrundbilder 2016-11-14 15:44 - 2016-11-14 15:45 - 00000000 ____D C:\Users\Susanne\Downloads\Schriftrollen 2016-11-14 13:38 - 2016-11-14 13:38 - 00000000 ____D C:\Users\Susanne\AppData\Local\CrashRpt 2016-11-13 17:42 - 2016-11-13 17:42 - 00000000 ____D C:\Users\Susanne\Downloads\Purple Dreams Scraps 2016-11-13 17:40 - 2016-11-13 17:40 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_TheHunter_MerryChristmas 2016-11-13 17:32 - 2016-11-13 17:34 - 00000000 ____D C:\Users\Susanne\Downloads\Angi Designs 2016-11-13 17:06 - 2016-11-14 19:41 - 00056495 _____ C:\Users\Susanne\Desktop\Addition.txt 2016-11-13 17:04 - 2016-11-15 19:08 - 00031890 _____ C:\Users\Susanne\Desktop\FRST.txt 2016-11-13 16:59 - 2016-11-13 16:59 - 00000908 _____ C:\Users\Susanne\Desktop\JRT.txt 2016-11-13 16:52 - 2016-11-13 16:52 - 01631928 _____ (Malwarebytes) C:\Users\Susanne\Desktop\JRT.exe 2016-11-13 15:36 - 2016-11-13 17:07 - 03910208 _____ C:\Users\Susanne\Desktop\adwcleaner_6.030.exe 2016-11-12 19:43 - 2016-11-12 19:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2016-11-11 18:43 - 2016-10-28 22:04 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2016-11-11 18:43 - 2016-10-28 22:04 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2016-11-10 20:31 - 2016-11-10 20:31 - 00000000 ____D C:\Users\Susanne\Downloads\MMDesignz Garden Love 2016-11-10 20:26 - 2016-11-10 20:27 - 00000000 ____D C:\Users\Susanne\Downloads\Chachaz Creationz 2016-11-10 19:37 - 2016-11-10 19:37 - 03189746 _____ C:\Users\Susanne\Downloads\HDSDASummerNightFae.rar 2016-11-10 19:37 - 2016-11-10 19:37 - 01854417 _____ C:\Users\Susanne\Downloads\SNC-AC-PRINCESSICE.pspimage 2016-11-10 19:36 - 2016-11-10 19:36 - 03972990 _____ C:\Users\Susanne\Downloads\SNC-DL-Orange Mermaid.psd 2016-11-10 19:22 - 2016-11-10 19:22 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_AndyCooperSweet Catrina 2016-11-10 18:54 - 2016-11-10 18:54 - 00000000 ____D C:\Users\Susanne\Downloads\MelissaDawn 2016-11-10 13:09 - 2016-10-27 19:28 - 25763328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-11-10 13:09 - 2016-10-27 19:19 - 06047744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-11-10 13:09 - 2016-10-27 18:17 - 15257088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-11-10 13:09 - 2016-10-27 18:16 - 02920448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2016-11-10 13:09 - 2016-10-27 16:05 - 20304896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-11-10 13:09 - 2016-10-25 15:11 - 04169216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2016-11-10 13:09 - 2016-10-22 17:44 - 04608000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-11-10 13:09 - 2016-10-22 17:30 - 13654016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-11-10 13:09 - 2016-10-08 23:53 - 03754496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll 2016-11-10 13:09 - 2016-08-22 14:34 - 01628672 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2016-11-10 13:08 - 2016-11-02 21:48 - 00372568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2016-11-10 13:08 - 2016-11-02 21:48 - 00315224 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2016-11-10 13:08 - 2016-11-02 15:03 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2016-11-10 13:08 - 2016-11-02 15:00 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2016-11-10 13:08 - 2016-10-27 19:53 - 00576000 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2016-11-10 13:08 - 2016-10-27 19:51 - 02896384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2016-11-10 13:08 - 2016-10-27 19:37 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2016-11-10 13:08 - 2016-10-27 19:08 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2016-11-10 13:08 - 2016-10-27 19:07 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2016-11-10 13:08 - 2016-10-27 19:05 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2016-11-10 13:08 - 2016-10-27 18:57 - 01033216 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2016-11-10 13:08 - 2016-10-27 18:49 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2016-11-10 13:08 - 2016-10-27 18:47 - 00378880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2016-11-10 13:08 - 2016-10-27 18:46 - 00806912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2016-11-10 13:08 - 2016-10-27 18:46 - 00725504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2016-11-10 13:08 - 2016-10-27 18:44 - 02131456 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2016-11-10 13:08 - 2016-10-27 18:03 - 01543680 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-11-10 13:08 - 2016-10-27 17:54 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2016-11-10 13:08 - 2016-10-22 18:35 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2016-11-10 13:08 - 2016-10-22 18:34 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll 2016-11-10 13:08 - 2016-10-22 18:27 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2016-11-10 13:08 - 2016-10-22 18:21 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2016-11-10 13:08 - 2016-10-22 17:58 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2016-11-10 13:08 - 2016-10-22 17:57 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2016-11-10 13:08 - 2016-10-22 17:56 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2016-11-10 13:08 - 2016-10-22 17:51 - 00880640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2016-11-10 13:08 - 2016-10-22 17:46 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2016-11-10 13:08 - 2016-10-22 17:45 - 00693248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2016-11-10 13:08 - 2016-10-22 17:45 - 00330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2016-11-10 13:08 - 2016-10-22 17:43 - 02055680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2016-11-10 13:08 - 2016-10-22 17:12 - 02444800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2016-11-10 13:08 - 2016-10-22 17:09 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-11-10 13:08 - 2016-10-22 17:09 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2016-11-10 13:08 - 2016-10-13 20:06 - 01385280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2016-11-10 13:08 - 2016-10-13 20:06 - 01124376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2016-11-10 13:08 - 2016-10-12 09:01 - 00377176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2016-11-10 13:08 - 2016-10-11 21:21 - 00497448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2016-11-10 13:08 - 2016-10-11 21:21 - 00399776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2016-11-10 13:08 - 2016-10-11 19:34 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll 2016-11-10 13:08 - 2016-10-11 18:47 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll 2016-11-10 13:08 - 2016-10-11 17:55 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll 2016-11-10 13:08 - 2016-10-10 22:17 - 00444248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2016-11-10 13:08 - 2016-10-10 22:17 - 00333656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2016-11-10 13:08 - 2016-10-09 23:59 - 00551256 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2016-11-10 13:08 - 2016-10-09 00:12 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll 2016-11-10 13:08 - 2016-10-08 23:21 - 01445376 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2016-11-10 13:08 - 2016-10-08 23:18 - 00840704 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2016-11-10 13:08 - 2016-10-08 23:07 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAnimation.dll 2016-11-10 13:08 - 2016-10-08 23:02 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll 2016-11-10 13:08 - 2016-10-08 22:49 - 02410496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll 2016-11-10 13:08 - 2016-10-08 22:21 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAnimation.dll 2016-11-10 13:08 - 2016-10-08 02:34 - 01660040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2016-11-10 13:08 - 2016-10-08 02:34 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2016-11-10 13:08 - 2016-10-04 21:39 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bowser.sys 2016-11-10 13:08 - 2016-10-04 21:23 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll 2016-11-10 13:08 - 2016-10-04 21:08 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll 2016-11-10 13:08 - 2016-10-04 21:08 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll 2016-11-10 13:08 - 2016-09-09 23:52 - 00921944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys 2016-11-10 13:08 - 2016-09-09 23:14 - 00275800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys 2016-11-10 13:08 - 2016-09-09 15:15 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll 2016-11-10 13:08 - 2016-09-09 15:09 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll 2016-11-10 13:08 - 2016-09-09 15:04 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2016-11-10 13:08 - 2016-09-09 15:03 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll 2016-11-10 13:08 - 2016-09-09 15:02 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmi.dll 2016-11-10 13:08 - 2016-09-09 14:38 - 00446124 _____ C:\WINDOWS\system32\ApnDatabase.xml 2016-11-10 13:08 - 2016-09-03 19:20 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsidsc.dll 2016-11-10 13:08 - 2016-09-03 19:06 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiexe.dll 2016-11-10 13:08 - 2016-09-03 18:21 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsidsc.dll 2016-11-10 13:08 - 2016-09-03 17:12 - 00512512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2016-11-10 13:08 - 2016-09-03 17:05 - 01094656 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2016-11-10 13:08 - 2016-09-03 16:58 - 00397824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2016-11-10 13:08 - 2016-09-02 15:05 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll 2016-11-10 13:08 - 2016-09-02 15:05 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll 2016-11-10 13:08 - 2016-09-01 15:33 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll 2016-11-10 13:08 - 2016-09-01 15:33 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll 2016-11-10 13:08 - 2016-09-01 15:31 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll 2016-11-10 13:08 - 2016-08-30 15:11 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll 2016-11-10 13:08 - 2016-08-30 03:45 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xolehlp.dll 2016-11-10 13:08 - 2016-08-30 03:18 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll 2016-11-10 13:08 - 2016-08-30 03:18 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll 2016-11-10 13:08 - 2016-08-30 03:03 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll 2016-11-10 13:00 - 2016-11-10 13:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2016-11-10 13:00 - 2016-11-10 13:00 - 00000000 ____D C:\Program Files\iPod 2016-11-08 19:59 - 2016-11-08 20:09 - 00000000 ____D C:\Users\Susanne\Desktop\Steampunk_Orient_1 2016-11-08 19:14 - 2016-11-08 19:14 - 00000000 ____D C:\Users\Susanne\Downloads\DigitalDreams WinterTime 2016-11-08 17:48 - 2016-11-08 17:49 - 00000000 ____D C:\Users\Susanne\Downloads\RAY 2016-11-08 16:58 - 2016-11-08 17:12 - 00000000 ____D C:\Users\Susanne\Downloads\Selisan Al-Giab 2016-11-08 16:56 - 2016-11-08 16:56 - 04657679 _____ C:\Users\Susanne\Downloads\Joy.rar 2016-11-08 16:06 - 2016-11-08 16:06 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe 2016-11-07 23:49 - 2016-11-07 23:49 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys 2016-11-07 23:49 - 2016-11-07 23:49 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys 2016-11-07 23:49 - 2016-11-07 23:49 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys 2016-11-07 23:49 - 2016-11-07 23:49 - 00042096 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe 2016-11-07 20:27 - 2016-11-07 20:29 - 89882380 _____ C:\Users\Susanne\Desktop\Snowy_Fantasy.zip 2016-11-07 20:27 - 2016-11-07 20:29 - 143486031 _____ C:\Users\Susanne\Desktop\Vintage_Elegance_1.zip 2016-11-07 20:26 - 2016-11-07 20:28 - 158478349 _____ C:\Users\Susanne\Desktop\Steampunk_Orient_1.zip 2016-11-07 20:26 - 2016-11-07 20:28 - 115926832 _____ C:\Users\Susanne\Desktop\Snuggle_Season.zip 2016-11-07 16:03 - 2016-11-07 16:03 - 00000000 ____D C:\Users\Public\Documents\AdobeGC 2016-11-07 16:01 - 2016-11-07 16:01 - 00000000 ____D C:\Users\Susanne\Desktop\graphicriver-9085825-stardust-photoshop-action 2016-11-04 18:38 - 2016-11-13 17:04 - 02411520 _____ (Farbar) C:\Users\Susanne\Desktop\FRST64.exe 2016-11-01 14:40 - 2016-11-01 14:41 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_HUN_NewYearswish 2016-10-30 18:56 - 2016-11-08 17:53 - 00000000 ____D C:\Users\Susanne\Downloads\DanielaE Design 2016-10-30 17:56 - 2016-10-30 17:56 - 00000000 ____D C:\Users\Susanne\Downloads\Spooktacular 2016-10-30 17:55 - 2016-10-30 17:55 - 00000000 ____D C:\Users\Susanne\Downloads\Tasha´s Playground 2016-10-27 18:01 - 2016-10-27 18:03 - 00000000 ____D C:\Users\Susanne\Downloads\HappyPumpkinStudio 2016-10-27 17:48 - 2016-10-27 17:54 - 25604688 _____ C:\Users\Susanne\Downloads\PATICIPANT.rar 2016-10-27 17:34 - 2016-10-27 17:34 - 00000000 ____D C:\Users\Susanne\Downloads\TonyTzanoukakis Vampiress 2016-10-27 17:33 - 2016-10-27 17:33 - 00000000 ____D C:\Users\Susanne\Downloads\TonyTzanoukakis Alessia 2016-10-27 16:47 - 2016-10-27 16:47 - 36002172 _____ C:\Users\Susanne\Downloads\Kit_PHF_Ravenworld2016.rar 2016-10-27 15:45 - 2016-10-27 15:45 - 00000000 ____D C:\Users\Susanne\Downloads\Origash MissAutumn 2016-10-27 15:34 - 2016-10-27 15:34 - 00000000 ____D C:\Users\Susanne\Downloads\Zebrush Lilian 2016-10-24 19:02 - 2016-10-24 19:02 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_VN_Mermaid 2016-10-24 18:42 - 2016-10-24 18:42 - 26095371 _____ C:\Users\Susanne\Downloads\LMB_OnTheHunt.rar 2016-10-24 10:57 - 2016-10-24 10:57 - 00000000 ____D C:\Users\Susanne\AppData\Roaming\Oracle 2016-10-22 19:41 - 2016-10-24 18:51 - 00000000 ____D C:\Users\Susanne\Downloads\Julia Fox 2016-10-22 19:35 - 2016-10-22 19:35 - 00000000 ____D C:\Users\Susanne\Downloads\GraphFreaks 2016-10-21 14:54 - 2016-10-21 14:54 - 00000831 _____ C:\WINDOWS\system32\Drivers\etc\hosts.txt 2016-10-18 16:13 - 2016-11-14 17:10 - 00000000 ____D C:\Users\Susanne\Downloads\KrystalDesign 2016-10-18 15:37 - 2016-10-18 15:37 - 03382219 _____ C:\Users\Susanne\Downloads\SNC-KIWI-SEXY RED TUBE.psd 2016-10-18 14:04 - 2016-10-18 15:04 - 00000000 ____D C:\Users\Susanne\Downloads\horseplayspasturedesigns 2016-10-17 19:22 - 2016-10-17 19:23 - 00000000 ____D C:\Users\Susanne\Downloads\SNC Mariel Fairy Forest in Fall+ 2016-10-17 13:07 - 2016-10-17 13:08 - 00000000 ____D C:\Users\Susanne\Downloads\Sandy Design 2016-10-17 13:03 - 2016-10-17 13:03 - 07836732 _____ C:\Users\Susanne\Downloads\AP Forbidden.rar 2016-10-17 12:00 - 2016-10-17 12:01 - 222214445 _____ C:\Users\Susanne\Downloads\Noch_Straha.zip 2016-10-17 11:29 - 2016-10-17 11:31 - 00000000 ____D C:\Users\Susanne\Downloads\CSDesigns 2016-10-17 11:08 - 2016-10-17 11:08 - 00000000 ____D C:\Users\Susanne\Downloads\Melissa Dawn Pck 3 2016-10-17 11:02 - 2016-10-17 11:02 - 00000000 ____D C:\Users\Susanne\Downloads\SNC AC Wickedness 2016-10-16 15:02 - 2016-11-08 20:32 - 00000000 ____D C:\Users\Susanne\Desktop\Zum Senden 2016-10-16 14:56 - 2016-11-01 19:27 - 00000000 ____D C:\Users\Susanne\Desktop\tutorial 2016-10-16 13:31 - 2016-10-16 13:31 - 00830935 _____ C:\Users\Susanne\Downloads\Liza tube 339.psp 2016-10-16 10:23 - 2016-10-23 19:15 - 00000000 ____D C:\Users\Susanne\Documents\Emisoft Verlängerung ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-11-15 19:08 - 2016-01-03 13:15 - 00000000 ____D C:\Users\Susanne\Downloads\Fedor 2016-11-15 19:07 - 2015-11-15 17:25 - 00000000 ____D C:\FRST 2016-11-15 19:06 - 2016-01-03 15:46 - 00000000 ____D C:\Users\Susanne\Downloads\Stella Felice 2016-11-15 19:04 - 2016-02-14 13:29 - 00000000 ____D C:\Users\Susanne\Downloads\Laguna 2016-11-15 19:04 - 2015-10-15 17:45 - 00000000 ____D C:\Users\Susanne\Downloads\Arthur Crowe 2016-11-15 18:54 - 2015-11-23 18:19 - 00000000 ____D C:\Program Files\Emsisoft Internet Security 2016-11-15 18:48 - 2016-01-24 17:50 - 00000000 ____D C:\Users\Susanne\Downloads\Winter 2016-11-15 18:46 - 2015-11-16 15:01 - 00000000 ____D C:\Users\Susanne\Downloads\Barbara Jensen 2016-11-15 18:44 - 2015-08-24 17:40 - 00001232 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job 2016-11-15 18:29 - 2015-12-08 11:14 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2016-11-15 18:11 - 2015-08-13 17:26 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2016-11-15 18:05 - 2016-01-03 13:33 - 00000000 ____D C:\Users\Susanne\Downloads\Lysisange 2016-11-15 18:04 - 2016-10-03 19:36 - 00000000 ____D C:\Users\Susanne\Downloads\Mysterfeerie Creation 2016-11-15 18:03 - 2016-04-25 18:17 - 00000000 ____D C:\Users\Susanne\Downloads\Thammys Welt 2016-11-15 16:55 - 2015-10-18 17:19 - 00000000 ____D C:\Users\Susanne\Downloads\Zlata M 2016-11-15 15:33 - 2015-08-18 14:16 - 00003934 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{4A105045-E9F4-48C6-AC0D-2E7F7A2F8B9E} 2016-11-15 12:44 - 2015-08-24 17:40 - 00001228 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job 2016-11-15 12:32 - 2015-08-15 12:15 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2 2016-11-15 11:00 - 2015-10-17 12:38 - 00000000 ____D C:\Users\Susanne\Downloads\X Mas 2016-11-15 10:50 - 2014-03-01 11:33 - 00000870 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job 2016-11-15 09:57 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\Inf 2016-11-15 08:56 - 2015-08-24 17:45 - 00000000 ___RD C:\Users\Susanne\Dropbox 2016-11-15 08:55 - 2014-11-21 04:35 - 01780340 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-11-15 08:55 - 2014-11-21 03:45 - 00766620 _____ C:\WINDOWS\system32\perfh007.dat 2016-11-15 08:55 - 2014-11-21 03:45 - 00159902 _____ C:\WINDOWS\system32\perfc007.dat 2016-11-15 08:53 - 2015-08-12 20:13 - 00000073 _____ C:\Users\Susanne\AppData\Roaming\sp_data.sys 2016-11-15 08:51 - 2014-03-01 11:33 - 00000868 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job 2016-11-14 20:29 - 2015-08-28 18:37 - 00000000 ____D C:\Program Files\CCleaner 2016-11-14 19:43 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-11-14 19:10 - 2016-03-18 12:08 - 00000000 ____D C:\Users\Susanne\Downloads\Grafik 2016-11-14 18:03 - 2015-11-02 14:12 - 00000000 ____D C:\Users\Susanne\Downloads\Bella Caribean 2016-11-14 18:00 - 2015-11-02 17:34 - 00000000 ____D C:\Users\Susanne\Downloads\Hania Designs 2016-11-14 17:55 - 2015-10-05 19:49 - 00000000 ____D C:\Users\Susanne\Downloads\Bibi´s Collection 2016-11-14 17:52 - 2015-12-07 16:26 - 00000000 ____D C:\Users\Susanne\Downloads\Chris Pastel 2016-11-14 17:51 - 2015-10-24 17:18 - 00000000 ____D C:\Users\Susanne\Downloads\Verymany 2016-11-14 17:50 - 2016-02-21 14:49 - 00000000 ____D C:\Users\Susanne\Downloads\Misticheskaya 2016-11-14 17:49 - 2015-12-29 19:21 - 00000000 ____D C:\Users\Susanne\Downloads\Alex Prihodko 2016-11-14 17:45 - 2015-11-24 19:21 - 00000000 ____D C:\Users\Susanne\Downloads\Alicia Mujica 2016-11-14 17:43 - 2016-03-05 17:47 - 00000000 ____D C:\Users\Susanne\Downloads\Lady Mishka 2016-11-14 17:43 - 2016-01-03 13:06 - 00000000 ____D C:\Users\Susanne\Downloads\Alehandra Vanhek 2016-11-14 17:42 - 2016-02-21 15:04 - 00000000 ____D C:\Users\Susanne\Downloads\GoF Designs 2016-11-14 17:42 - 2015-10-25 20:18 - 00000000 ____D C:\Users\Susanne\Downloads\Souldesigner 2016-11-14 17:39 - 2016-08-04 18:34 - 00000000 ____D C:\Users\Susanne\Downloads\Sephisto Simone 2016-11-14 17:35 - 2016-01-03 15:47 - 00000000 ____D C:\Users\Susanne\Downloads\Angelica S 2016-11-14 17:34 - 2016-03-05 16:16 - 00000000 ____D C:\Users\Susanne\Downloads\Avroraart 2016-11-14 17:34 - 2016-01-03 13:36 - 00000000 ____D C:\Users\Susanne\Downloads\Nocturne 2016-11-14 17:33 - 2016-01-03 13:30 - 00000000 ____D C:\Users\Susanne\Downloads\Lightartist 2016-11-14 17:28 - 2016-01-03 13:51 - 00000000 ____D C:\Users\Susanne\Downloads\Trinita 2016-11-14 17:28 - 2015-10-22 18:34 - 00000000 ____D C:\Users\Susanne\Downloads\Stan Dudin 2016-11-14 17:25 - 2016-02-18 20:07 - 00000000 ____D C:\Users\Susanne\Downloads\Tais 2016-11-14 17:20 - 2016-05-22 17:00 - 00000000 ____D C:\Users\Susanne\Downloads\Amalie 2016-11-14 17:09 - 2015-11-23 19:10 - 00000000 ____D C:\Users\Susanne\Downloads\Alfadesire 2016-11-14 17:09 - 2015-11-15 15:26 - 00000000 ____D C:\Users\Susanne\Downloads\DB Joan 2016-11-14 17:08 - 2016-06-01 16:50 - 00000000 ____D C:\Users\Susanne\Downloads\JoJo Kits 2016-11-14 15:44 - 2015-10-25 19:23 - 00000000 ____D C:\Users\Susanne\Downloads\Masken 2016-11-13 17:44 - 2016-04-02 15:24 - 00000000 ____D C:\Users\Susanne\Downloads\Gothic Inspiration 2016-11-13 17:19 - 2015-09-20 15:03 - 00000000 ____D C:\AdwCleaner 2016-11-12 21:23 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache 2016-11-12 20:39 - 2015-08-12 20:19 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1794304933-3207535254-2068445666-1002 2016-11-12 19:43 - 2015-08-24 17:40 - 00000000 ____D C:\Program Files (x86)\Dropbox 2016-11-11 20:01 - 2015-10-29 19:49 - 00000000 ____D C:\Users\Susanne\Downloads\Amberly Brendson 2016-11-11 19:30 - 2015-10-15 19:04 - 00000000 ____D C:\Users\Susanne\Downloads\Comics 2016-11-11 18:48 - 2015-08-25 18:46 - 00000000 ____D C:\Program Files\HitmanPro 2016-11-11 18:42 - 2013-08-22 15:44 - 00462016 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-11-10 21:14 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData 2016-11-10 21:12 - 2015-08-16 18:59 - 00000000 ____D C:\Users\Susanne\AppData\Local\CrashDumps 2016-11-10 20:13 - 2016-01-08 20:15 - 00000000 ____D C:\Users\Susanne\Downloads\Disturbed Scraps 2016-11-10 20:12 - 2016-02-06 18:26 - 00000000 ____D C:\Users\Susanne\Downloads\DiHalim 2016-11-10 20:10 - 2015-10-13 09:21 - 00000000 ____D C:\Users\Susanne\Downloads\Halloween 2016-11-10 20:05 - 2016-01-29 19:45 - 00000000 ____D C:\Users\Susanne\Downloads\Tiny Turtles Designs 2016-11-10 20:05 - 2016-01-03 13:23 - 00000000 ____D C:\Users\Susanne\Downloads\Jose Cano 2016-11-10 19:59 - 2016-07-04 18:39 - 00000000 ____D C:\Users\Susanne\Downloads\Ginnybug Designz 2016-11-10 19:57 - 2015-11-28 15:12 - 00000000 ____D C:\Users\Susanne\Downloads\PinkParadoxProduktions 2016-11-10 19:45 - 2015-10-17 15:10 - 00000000 ____D C:\Users\Susanne\Downloads\Eugene Rzhevskii 2016-11-10 19:43 - 2016-07-11 13:37 - 00000000 ____D C:\Users\Susanne\Downloads\DevilishDezines 2016-11-10 19:41 - 2016-02-06 18:14 - 00000000 ____D C:\Users\Susanne\Downloads\DN Scraps 2016-11-10 19:38 - 2016-01-03 13:33 - 00000000 ____D C:\Users\Susanne\Downloads\Lorri Kajenna 2016-11-10 19:20 - 2016-09-10 18:08 - 00000000 ____D C:\Users\Susanne\Downloads\Edelweiss Design 2016-11-10 19:06 - 2016-01-03 13:06 - 00000000 ____D C:\Users\Susanne\Downloads\AmyMarieKits 2016-11-10 19:04 - 2015-10-17 18:28 - 00000000 ____D C:\Users\Susanne\Downloads\Keith Garvey 2016-11-10 18:52 - 2015-10-22 18:37 - 00000000 ____D C:\Users\Susanne\Downloads\KBK 2016-11-10 16:53 - 2016-06-13 18:44 - 00000000 ____D C:\Users\Susanne\Downloads\Moonshine Dezines 2016-11-10 16:23 - 2016-10-14 20:13 - 00000000 ____D C:\Users\Susanne\Desktop\Downloads from Friends 2016-11-10 13:48 - 2015-08-13 17:30 - 00000000 ____D C:\Users\Susanne\Desktop\Programme 2016-11-10 13:29 - 2012-07-26 08:59 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-11-10 13:28 - 2015-08-13 17:18 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-11-10 13:25 - 2015-08-13 17:18 - 141011376 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-11-10 13:09 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI 2016-11-10 13:00 - 2015-08-31 15:24 - 00000000 ____D C:\Program Files\iTunes 2016-11-10 13:00 - 2015-08-31 15:20 - 00000000 ____D C:\Program Files\Common Files\Apple 2016-11-10 12:39 - 2015-08-24 17:40 - 00004204 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineUA 2016-11-10 12:39 - 2015-08-24 17:40 - 00003968 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineCore 2016-11-08 19:54 - 2016-05-25 18:18 - 00000000 ____D C:\Users\Susanne\Downloads\Alec Rud-LightartistXXX Emma 2016-11-08 19:16 - 2015-11-15 15:19 - 00000000 ____D C:\Users\Susanne\Downloads\DeesignDepot 2016-11-08 18:29 - 2015-12-08 11:14 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2016-11-08 18:29 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2016-11-08 18:29 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Macromed 2016-11-08 18:02 - 2015-10-17 14:28 - 00000000 ____D C:\Users\Susanne\Downloads\PinUpToons 2016-11-08 17:56 - 2015-10-30 13:07 - 00000000 ____D C:\Users\Susanne\Downloads\Anna Liwanag 2016-11-08 17:54 - 2016-04-22 19:44 - 00000000 ____D C:\Users\Susanne\Downloads\Spazz 2016-11-08 16:06 - 2015-08-25 18:46 - 00000000 ____D C:\ProgramData\HitmanPro 2016-11-08 15:56 - 2015-10-23 13:54 - 00000000 ____D C:\Users\Susanne\Downloads\Landschaftstuben 2016-11-07 19:00 - 2015-10-15 07:11 - 00004476 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2016-11-07 17:57 - 2016-10-13 18:52 - 00000000 ____D C:\Users\Susanne\Downloads\IS Design 2016-11-07 17:42 - 2016-04-23 18:38 - 00000000 ____D C:\Users\Susanne\Downloads\Mariel Designs 2016-11-07 16:03 - 2015-11-23 16:06 - 00000000 ____D C:\Users\Susanne 2016-11-07 11:58 - 2015-11-30 19:54 - 00000000 ____D C:\Users\Susanne\Desktop\Filme 2016-11-04 19:42 - 2016-01-03 13:05 - 00000000 ____D C:\Users\Susanne\Downloads\Ellie Milk 2016-11-04 18:37 - 2015-10-10 18:25 - 00000000 ____D C:\Users\Susanne\AppData\Roaming\vlc 2016-11-04 16:41 - 2015-10-24 15:45 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-11-03 16:33 - 2016-02-06 19:06 - 00000000 ____D C:\Users\Susanne\Downloads\Toxic Desirez 2016-11-01 18:52 - 2016-01-03 13:54 - 00000000 ____D C:\Users\Susanne\Downloads\Vadis 2016-10-31 19:43 - 2014-04-15 19:11 - 00000000 ____D C:\Users\Susanne\My PSP Files 2016-10-31 18:01 - 2015-10-17 18:18 - 00000000 ____D C:\Users\Susanne\Downloads\Elias Chatzoudis 2016-10-30 18:59 - 2015-10-05 18:13 - 00000000 ____D C:\Users\Susanne\Downloads\RD_Rienike Designs 2016-10-30 18:44 - 2016-08-12 18:28 - 00000000 ____D C:\Users\Susanne\Downloads\Nusha Lypina 2016-10-30 16:18 - 2016-04-18 19:08 - 00000000 ____D C:\Users\Susanne\Downloads\KatNKDA 2016-10-30 14:28 - 2016-03-06 20:12 - 00000000 ____D C:\Users\Susanne\Downloads\Jennifer Janesko 2016-10-29 19:43 - 2016-08-22 15:53 - 00000000 ____D C:\Users\Susanne\Downloads\Mary Designs 2016-10-27 18:08 - 2015-10-17 18:08 - 00000000 ____D C:\Users\Susanne\Downloads\cm scraps 2016-10-27 18:06 - 2016-03-05 19:10 - 00000000 ____D C:\Users\Susanne\Downloads\Velerie 2016-10-27 17:38 - 2015-11-07 18:32 - 00000000 ____D C:\Users\Susanne\Downloads\Katharine 2016-10-27 15:39 - 2016-05-22 17:36 - 00000000 ____D C:\Users\Susanne\Downloads\Chili Designz 2016-10-27 15:36 - 2016-05-21 19:01 - 00000000 ____D C:\Users\Susanne\Downloads\Wicked Creationz Scraps 2016-10-27 15:35 - 2016-04-19 19:08 - 00000000 ____D C:\Users\Susanne\Downloads\Irish Princess Designs IPD 2016-10-24 10:44 - 2015-08-28 15:41 - 00000000 ____D C:\ProgramData\Oracle 2016-10-24 10:39 - 2015-08-28 15:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2016-10-24 10:39 - 2015-08-28 15:43 - 00000000 ____D C:\Program Files (x86)\Java 2016-10-24 10:38 - 2015-08-28 15:43 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2016-10-24 10:38 - 2015-08-25 19:01 - 00000000 ____D C:\ProgramData\Unchecky 2016-10-22 19:46 - 2015-11-02 13:38 - 00000000 ____D C:\Users\Susanne\Downloads\Sophisticat 2016-10-22 18:07 - 2016-02-27 18:49 - 00000000 ____D C:\Users\Susanne\Downloads\Maryline Cazenave 2016-10-21 13:41 - 2012-07-26 06:26 - 00003255 _____ C:\WINDOWS\system32\Drivers\etc\Hosts.old 2016-10-21 13:27 - 2016-05-24 12:43 - 00212560 _____ C:\WINDOWS\system32\Drivers\fwndislwf64.sys 2016-10-20 18:30 - 2015-11-28 14:34 - 00000000 ____D C:\Users\Susanne\Downloads\ZindyNielsen 2016-10-20 18:29 - 2014-03-01 11:45 - 00000000 ____D C:\ProgramData\Temp 2016-10-18 19:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-10-18 13:40 - 2016-03-05 18:04 - 00000000 ____D C:\Users\Susanne\Downloads\Ismael RAC 2016-10-16 15:30 - 2016-01-21 16:24 - 00000000 ____D C:\Users\Susanne\Downloads\Karneval ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-08-29 17:04 - 2015-08-29 17:04 - 3585654 _____ () C:\Users\Susanne\AppData\Roaming\SageThumbs wallpaper.bmp 2015-08-12 20:13 - 2016-11-15 08:53 - 0000073 _____ () C:\Users\Susanne\AppData\Roaming\sp_data.sys 2016-01-17 14:35 - 2016-03-11 19:57 - 0005120 _____ () C:\Users\Susanne\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2016-06-02 17:27 - 2016-06-02 17:27 - 0007600 _____ () C:\Users\Susanne\AppData\Local\Resmon.ResmonCfg 2015-08-28 17:48 - 2015-11-13 20:12 - 4969472 _____ () C:\Users\Susanne\AppData\Local\SageThumbs.db3 2016-04-03 17:22 - 2016-04-03 17:22 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2015-10-28 07:07 - 2015-10-28 07:07 - 0000261 _____ () C:\ProgramData\fontcacheev1.dat 2015-11-29 18:31 - 2015-11-29 18:31 - 0004943 _____ () C:\ProgramData\rxsmznjf.zcp Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\ProgramData\fontcacheev1.dat C:\Users\Susanne\359.06-notebook-win8-win7-64bit-international-whql.exe ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-11-12 20:45 ==================== Ende von FRST.txt ============================ |
|
15.11.2016, 19:55
| #8 |
| | AdwCleaner, Registryeinträge die sich nicht löschen lassenCode:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-11-2016
durchgeführt von Susanne (15-11-2016 19:08:29)
Gestartet von C:\Users\Susanne\Desktop
Windows 8.1 (Update) (X64) (2015-11-23 16:34:54)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-1794304933-3207535254-2068445666-500 - Administrator - Disabled)
Gast (S-1-5-21-1794304933-3207535254-2068445666-501 - Limited - Disabled) => C:\Users\Gast
Susanne (S-1-5-21-1794304933-3207535254-2068445666-1002 - Administrator - Enabled) => C:\Users\Susanne
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Emsisoft Internet Security (Enabled - Up to date) {701CB209-EBBC-AADC-11E6-DE73E7AF4C9D}
AS: Emsisoft Internet Security (Enabled - Up to date) {CB7D53ED-CD86-A552-2B56-E5019C280620}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Emsisoft Internet Security (Enabled) {4827332C-A1D3-AB84-3AB9-7746197C0BE6}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.2.172 - Adobe Systems, Inc.)
Alien Skin Blow Up (HKLM-x32\...\Blow Up) (Version: - )
Alien Skin Exposure (HKLM-x32\...\Exposure) (Version: - )
Alien Skin Eye Candy 5 Nature (HKLM-x32\...\EyeCandy5Nature) (Version: - )
Alien Skin Eye Candy 5 Textures (HKLM-x32\...\EyeCandy5Textures) (Version: - )
Alien Skin Eye Candy 7 (HKLM\...\Alien Skin Eye Candy 7) (Version: - Alien Skin)
Alien Skin Image Doctor 2 (HKLM-x32\...\Image Doctor 2) (Version: - )
Alien Skin Snap Art (HKLM-x32\...\Snap Art) (Version: - )
Apowersoft Smartphone Manager Version 2.7.1 (HKLM-x32\...\{4A00E3C4-2D0F-4AE7-9F2A-74870BE09EF8}_is1) (Version: 2.7.1 - APOWERSOFT LIMITED)
Apple Application Support (32-Bit) (HKLM-x32\...\{F2871C89-C8A5-42EE-8D45-0F02506385A6}) (Version: 5.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{9BC93467-75D1-4AA4-BD58-D9C51D88DFAB}) (Version: 5.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
ASUS InstantOn (HKLM-x32\...\{749F674B-2674-47E8-879C-5626A06B2A91}) (Version: 3.0.6 - ASUS)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.1.13 - ASUS)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.4 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 2.1.7 - ASUS)
ASUS Screen Saver (HKLM\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 1.0.1 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.1.3 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 2.01.0005 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 2.1.5 - ASUS)
ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4924.52 - CyberLink Corp.)
ASUSDVD (x32 Version: 10.0.4924.52 - CyberLink Corp.) Hidden
AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.309 - ASUSTEK)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0027 - ASUS)
AVS Video Converter 9.1 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: 9.1.4.574 - Online Media Technologies Ltd.)
Azteca (x32 Version: 2.2.0.97 - WildTangent) Hidden
Bejeweled 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.23 - Piriform)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
congstar Internet-Manager (HKLM-x32\...\{27D28586-BEF1-4E06-8787-3B1FC3A41489}) (Version: 1.0.0.3 - ZTE CORPORATION)
Contents (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
CopyTrans Control Center deinstallieren (HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\CopyTrans Suite) (Version: 4.004 - WindSolutions)
Corel FastFlick (HKLM-x32\...\_{10EC8494-8A92-49D8-9677-2483EB01F7F1}) (Version: 1.0.0.101 - Corel Corporation)
Corel KPT Collection (HKLM-x32\...\_{B16DC136-9583-4C54-BE27-F001BBC546B1}) (Version: 1.0.0.109 - Corel Corporation)
Corel KPT Collection (x32 Version: 1.0.0.109 - Ihr Firmenname) Hidden
Corel PaintShop Pro X7 (HKLM-x32\...\_{176F50D6-6857-49CE-B731-65F757EE3F0D}) (Version: 17.3.0.30 - Corel Corporation)
Corel PaintShop Pro X7 (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
Creative Content (x32 Version: 1.0.0.114 - Corel Corporation) Hidden
Creative Content (x32 Version: 1.0.0.114 - Ihr Firmenname) Hidden
CrystalDiskInfo 6.5.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.5.2 - Crystal Dew World)
Cut the Rope (x32 Version: 3.0.2.38 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 14.4.19 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.57.1 - Dropbox, Inc.) Hidden
Emsisoft Internet Security (HKLM\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 11.0 - Emsisoft Ltd.)
Filters Unlimited 2.0 (HKLM-x32\...\Filters Unlimited_is1) (Version: - )
Filzip 3.06 (HKLM-x32\...\Filzip 3.0.6.93_is1) (Version: 3.0.6 - Philipp Engel)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.15.281 - SurfRight B.V.)
Hotspot Shield 5.4.11 (HKLM-x32\...\HotspotShield) (Version: 5.4.11 - AnchorFree Inc.)
Hotspot Shield 5.4.11 Embedded (x32 Version: 5.4.11.9772 - Buildbot) Hidden
ICA (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
ICA (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
Intel(R) Driver Update Utility 2.4 (x32 Version: 2.4.0.15 - Intel) Hidden
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.36354 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation)
Intel(R) Product Improvement Program (x32 Version: 2.1.27.3 - Intel) Hidden
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{302600C1-6BDF-4FD1-1309-148929CC1385}) (Version: 3.1.1309.0390 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.27 - Intel(R) Corporation) Hidden
Intel® Driver Update Utility (HKLM-x32\...\{1b09c4de-9cae-4122-b17c-65d395062b50}) (Version: 2.4.0.15 - Intel)
IPM_PSP_COM (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
IPM_PSP_COM64 (Version: 17.3.0.30 - Corel Corporation) Hidden
IPM_VS_Pro (x32 Version: 1.0 - Corel Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
iTunes (HKLM\...\{554C62C7-E6BB-40F1-892B-F0AE02D3C135}) (Version: 12.5.3.17 - Apple Inc.)
Jasc Animation Shop 3 (HKLM-x32\...\{7C4196CA-CA41-4F34-9C08-7724E7705D52}) (Version: 3.11 - Ihr Firmenname)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2-1) (Version: 2.0 - AppWork GmbH)
LockHunter 3.1, 32/64 bit (HKLM\...\LockHunter_is1) (Version: - Crystal Rich Ltd)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 41.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 41.0.2 (x86 de)) (Version: 41.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.4.0.6115 - Mozilla)
Mozilla Thunderbird 45.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.4.0 (x86 de)) (Version: 45.4.0 - Mozilla)
MultiTranse European 6.6 special build (HKLM-x32\...\MultiTranse European_is1) (Version: - Tialsoft Software)
MyBitCast 2.0 (HKLM-x32\...\MyBitCast) (Version: 2.0 - ASUS)
NewBlue Video Essentials for Windows (HKLM-x32\...\NewBlue Video Essentials for Windows) (Version: 3.0 - NewBlue)
NVIDIA GeForce Experience 2.11.2.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.2.46 - NVIDIA Corporation)
NVIDIA Grafiktreiber 359.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 359.46 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
PDF24 Creator 7.9.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Peggle (x32 Version: 2.2.0.95 - WildTangent) Hidden
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plugin Commander Light 1.62 (HKLM-x32\...\Plugin Commander Light 1.62_is1) (Version: 1.60 - The Plugin Site)
PSPPContent (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
PSPPHelp (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
PSPPro64 (Version: 17.3.0.30 - Corel Corporation) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.220 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Raccolta foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.38.115.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7514 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39029 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.52 - Piriform)
Revo Uninstaller Pro 3.1.6 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.6 - VS Revo Group, Ltd.)
Schmaili 9.0 (HKLM-x32\...\Schmaili_is1) (Version: - )
Setup (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
Setup (x32 Version: 17.3.0.30 - Ihr Firmenname) Hidden
Share (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
SpywareBlaster 5.2 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.2.0 - BrightFort LLC)
Sqirlz Morph (HKLM-x32\...\Sqirlz Morph) (Version: 2.1 - xiberpix)
Sqirlz Water Reflections (HKLM-x32\...\Sqirlz Water Reflections) (Version: 2.6 - xiberpix)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden
TeraCopy 2.3 (HKLM\...\TeraCopy_is1) (Version: - Code Sector)
Toon Boom Studio 8.1 (HKLM-x32\...\{A3A336BA-61CF-4B0F-83D7-690A8FB23A5D}) (Version: - Toon Boom Animation Inc.)
Unchecky v1.0.1 (HKLM-x32\...\Unchecky) (Version: 1.0.1 - RaMMicHaeL)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VSClassic (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
VSPro (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
Vulkan Run Time Libraries 1.0.5.1 (HKLM\...\VulkanRT1.0.5.1) (Version: 1.0.5.1 - LunarG, Inc.)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.0.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden
Windows Driver Package - ASUS (ATP) Mouse (01/10/2013 1.0.0.170) (HKLM\...\4A9DE1E9EBC800B7F01739D4DE7363EF6751BDF5) (Version: 01/10/2013 1.0.0.170 - ASUS)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
WinRAR 5.21 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0D519269-A2CA-4148-9725-9B9129C8D398} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {13632090-F92D-42BF-9252-44F3F7958819} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {1584372C-BE27-42D3-9C29-0B7B050F0676} - System32\Tasks\{DFE56015-71E1-4F3C-B92C-4BC78BB43DCF} => pcalua.exe -a "C:\Users\Susanne\Desktop\SignatureCreator1.12\Signature Creator v1.12\signcrtr.exe" -d "C:\Users\Susanne\Desktop\SignatureCreator1.12\Signature Creator v1.12"
Task: {1DE75A1E-B3F6-410F-9D0A-6C724DC5D7BA} - System32\Tasks\{3A681209-9B28-4FB4-B434-90C78D19AA76} => pcalua.exe -a C:\Users\Susanne\Desktop\win64_153342.exe -d C:\Users\Susanne\Desktop
Task: {1F93A434-BC9F-4437-AA95-0868BAB8E7D1} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-09-28] (Piriform Ltd)
Task: {278FB095-70F3-41AF-86E1-ACDCC3DFCD4F} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2013-02-26] (ASUSTeK Computer Inc.)
Task: {384F7404-E4A7-4AF6-BFC2-0E966AB9A65A} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-07] (Dropbox, Inc.)
Task: {46CE1FA1-950E-4406-BE83-9B8278BE36FE} - System32\Tasks\Intel\Intel Telemetry 2 (x86) => C:\Program Files (x86)\Intel\Telemetry 2.0\lrio.exe [2016-03-17] (Intel Corporation)
Task: {568A8D83-61EE-417F-B2F4-D8E199F65D47} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {65E4B102-42C8-4272-BE24-C07ECF847106} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2013-01-04] ()
Task: {6C3DD3AD-739B-4B44-AEC6-9844F7E1D814} - System32\Tasks\{2175E4B1-B401-419C-B3FC-7F5CFDE77152} => pcalua.exe -a E:\SETUP.EXE -d E:\ -c /AUTORUN
Task: {7004ABEF-4FB5-4DB9-9D07-BBEE825C98A6} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-08-24] (ASUS)
Task: {749335FC-4206-4E47-864C-4C789D3DB14B} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-08] (Adobe Systems Incorporated)
Task: {7535A508-68C4-4552-B25C-041DB8F71935} - System32\Tasks\ASUS InstantOn Config => C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe [2013-01-22] (ASUS)
Task: {875E6F2B-4C80-4C1F-BDDF-F8D0ADDD352A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {937F2797-535D-4D7E-865E-DF6460A3E660} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2012-11-28] (ASUS)
Task: {9C8D2AEE-2E56-486A-8603-FD26811BF306} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-07] (Dropbox, Inc.)
Task: {A143A7AF-E6A4-41CB-A24F-4682A328495A} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-09-18] (ASUSTek Computer Inc.)
Task: {B500B226-A848-48AC-AD89-FC46DD40726A} - System32\Tasks\{C34BCC4B-E192-4B85-9591-5B9275232FC4} => pcalua.exe -a "F:\Susanne´s Dateien vom Läppi\Susanne\C\Schmaili\Schmaili90\unins000.exe" -d "F:\Susanne´s Dateien vom Läppi\Susanne\C\Schmaili\Schmaili90"
Task: {D65C524D-CC2D-4D37-AB73-7D79DD3F9F7E} - System32\Tasks\ASUS Touchpad Launcher (x64) => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2013-04-16] (AsusTek)
Task: {DF4E779D-E89D-43BF-BFEA-92AFBD12A035} - System32\Tasks\USER_ESRV_SVC_WILLAMETTE => Wscript.exe //B //NoLogo "C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\task.vbs"
Task: {E7DB6F04-0E5F-49F6-82E1-C45912A304B9} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {E833CAEB-5DC4-47B3-8051-EF7AA579E8AD} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {EB9F98C6-FED1-40F0-BFD1-4272F4DE9576} - System32\Tasks\{D52E5E0D-7B83-453B-B34F-8346DD360FFF} => pcalua.exe -a "C:\Program Files\Realtek\Audio\HDA\RtlUpd64.exe" -c -r -m -nrg2709
Task: {EF2C2CD6-5F9B-43F9-A3B4-87DE57826197} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2015-02-12] ()
Task: {FE9FAC54-D116-4F35-8188-88E83F570501} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2000-01-01] (Realtek Semiconductor)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Meine Websites auf MSN\target.lnk -> hxxp://www.msnusers.com
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2016-05-24 12:43 - 2016-10-21 13:27 - 01024968 _____ () C:\Program Files\Emsisoft Internet Security\fw64.dll
2016-09-01 17:12 - 2016-09-01 17:12 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-10-05 18:17 - 2016-10-05 18:17 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00118424 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe
2016-03-09 19:43 - 2016-03-09 19:43 - 00256152 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\analyzer.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00416408 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe
2016-04-28 14:08 - 2016-03-09 19:43 - 00709272 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_modeler.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00130712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_process_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00025752 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_system_power_state_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00059544 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_quality_and_reliability_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00194712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\acpi_battery_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00159896 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\sema_thermal_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00158360 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\wifi_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00050840 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\devices_use_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00032920 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_disktrace_input.dll
2015-11-23 16:01 - 2016-02-15 08:26 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-09-11 19:02 - 2015-09-11 19:02 - 00803488 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2015-08-28 14:59 - 2012-01-29 15:55 - 00657920 _____ () C:\Program Files\TeraCopy\TeraCopy64.dll
2012-08-24 18:26 - 2012-08-24 18:26 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll
2013-01-25 01:09 - 2013-01-25 01:09 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-01-25 01:05 - 2013-01-25 01:05 - 00084992 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll
2013-10-01 12:02 - 2013-10-01 12:02 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-01-25 01:12 - 2013-01-25 01:12 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
2016-09-06 16:10 - 2011-11-07 09:52 - 00220944 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\dbus-daemon.exe
2016-09-06 16:10 - 2011-11-07 09:52 - 00036624 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\db_daemon.exe
2016-04-28 14:08 - 2016-03-09 19:43 - 00460952 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv.exe
2016-04-28 14:08 - 2016-03-09 19:43 - 00188568 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\foreground_window_input.dll
2016-08-24 00:04 - 2016-08-24 00:04 - 00166520 _____ () C:\Program Files (x86)\Hotspot Shield\bin\CrashRpt1403.dll
2014-03-01 11:32 - 2012-06-25 03:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-12-21 17:36 - 2016-03-24 06:35 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-12-29 18:12 - 2004-09-08 13:45 - 00368128 _____ () C:\Program Files (x86)\Filzip\fzshext.dll
2015-08-28 14:59 - 2012-01-20 13:55 - 00427520 _____ () C:\Program Files\TeraCopy\TeraCopyExt.dll
2016-09-06 16:10 - 2011-05-06 04:03 - 00594944 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\dbus-1.dll
2016-09-06 16:10 - 2011-11-07 09:39 - 00099328 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\itapi.dll
2016-09-06 16:10 - 2011-11-07 09:43 - 00020992 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\libctlsvr.dll
2016-09-06 16:10 - 2010-10-14 10:37 - 00971776 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\libxml2.dll
2016-09-06 16:10 - 2011-11-07 09:38 - 00035840 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\libConfig.dll
2016-09-06 16:10 - 2011-11-07 09:38 - 00027136 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\log.dll
2016-09-06 16:10 - 2011-11-07 09:38 - 00055296 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\coder.dll
2016-09-06 16:10 - 2011-11-07 09:39 - 00043008 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\audio.dll
2016-09-06 16:10 - 2010-10-14 10:37 - 00080688 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\zlib1.dll
2016-09-06 16:10 - 2007-09-09 16:07 - 00151552 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\libexpat.dll
2016-09-06 16:10 - 2011-05-06 04:02 - 00341504 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\sqlite3.dll
2016-05-21 16:03 - 2016-10-10 17:29 - 00035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2016-11-12 19:42 - 2016-10-10 17:29 - 00145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2016-11-12 19:42 - 2016-10-10 17:29 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
2016-11-12 19:42 - 2016-10-10 17:29 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2016-05-21 16:03 - 2016-10-10 17:29 - 00100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2016-05-21 15:57 - 2016-10-10 17:29 - 00018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2016-05-21 15:57 - 2016-11-07 23:59 - 00019760 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2016-05-21 15:57 - 2016-10-10 17:29 - 00694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2016-11-12 19:42 - 2016-11-07 23:58 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2016-05-21 16:03 - 2016-10-10 17:30 - 00123856 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2016-11-12 19:42 - 2016-11-07 23:58 - 01682760 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2016-11-12 19:42 - 2016-11-07 23:58 - 00020808 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2016-08-05 19:23 - 2016-11-07 23:59 - 00021312 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00052024 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00038696 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2016-11-12 19:42 - 2016-10-10 17:29 - 00392144 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2016-11-12 19:42 - 2016-10-10 17:31 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2016-05-21 15:57 - 2016-11-07 23:59 - 00381752 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2016-08-05 19:23 - 2016-11-07 23:59 - 00025424 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2016-11-12 19:42 - 2016-11-07 23:58 - 00246592 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2016-08-05 19:23 - 2016-10-10 17:30 - 00241104 _____ () C:\Program Files (x86)\Dropbox\Client\_jpegtran.pyd
2016-11-12 19:42 - 2016-11-07 23:58 - 00020280 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2016-05-21 15:57 - 2016-11-07 23:59 - 00023376 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2016-05-21 15:57 - 2016-11-07 23:59 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi._winffi_iphlpapi.pyd
2016-05-21 15:57 - 2016-11-07 23:59 - 00019776 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror._winffi_winerror.pyd
2016-05-21 15:57 - 2016-11-07 23:59 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet._winffi_wininet.pyd
2016-05-21 16:03 - 2016-10-10 17:31 - 00350152 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2016-05-21 16:03 - 2016-11-07 23:59 - 00022352 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00024392 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2016-11-12 19:42 - 2016-10-10 17:27 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2016-11-12 19:42 - 2016-11-07 23:59 - 00084280 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2016-11-12 19:42 - 2016-11-07 23:59 - 01826096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2016-05-21 15:57 - 2016-10-10 17:29 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00531248 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 03928880 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 01972528 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00133424 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00224056 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00207672 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2016-08-05 19:23 - 2016-11-07 23:59 - 00020288 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32._winffi_user32.pyd
2016-11-12 19:42 - 2016-10-10 17:33 - 00017864 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.dll
2016-11-12 19:42 - 2016-10-10 17:34 - 01631184 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
2016-11-12 19:42 - 2016-11-07 23:59 - 00042808 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00168760 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00357680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2016-08-05 19:23 - 2016-11-07 23:59 - 00024904 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00546096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2013-04-27 09:24 - 2013-04-27 09:24 - 00071680 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\checkmetro.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\Susanne\Downloads\CDO AnnaMarine-11-1+:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\CDO GlistenSnowFlakes:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\CDO WinterMagic:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\SNC_CUPIDO COLLAB:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\Sue PSP Stuff:com.dropbox.attributes [168]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0411dd.com -> 0411dd.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1001movie.com -> 1001movie.com
Da befinden sich 6091 mehr Seiten.
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Susanne\AppData\Local\Microsoft\Windows\Themes\Rainbows\DesktopBackground\rainbows7.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: GamesAppService => 3
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: nvUpdatusService => 2
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "egui"
HKLM\...\StartupApproved\Run: => "Corel Update Helper"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKLM\...\StartupApproved\Run32: => "Malwarebytes Anti-Exploit"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\StartupFolder: => "Adobe Gamma.lnk"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\Run: => "Digiarty_Software_AirPlayit"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\Run: => "Schmaili"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\Run: => "Skype"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{698A6761-A7D7-436A-828F-F5D0B9649607}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{725B442B-AA22-40A6-9A4C-C080895D11B3}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{43ED2D84-F0D6-4176-8654-2BF85E93929E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{A83C85B4-8237-4A7A-B5CF-F4548CE998C8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{B05144DD-2A59-4CE6-AC21-A487450C32BB}] => (Allow) LPort=1900
FirewallRules: [{6E10BE55-BF0B-41CB-874B-35BBAE2A6CC8}] => (Allow) LPort=2869
FirewallRules: [{6FB3AE7A-27BA-4EC1-8459-F674A66F398E}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5732DE92-F2E8-4EFA-8211-59D9C1216D9C}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{FB4B5D1F-46F4-4EE4-A9DD-1CC5A993E8B9}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{BEBD6992-F474-476F-AA99-813387C3315B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{12619529-46A3-401F-8C45-41DA4469E6B7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{75F78078-FA69-47CD-84C8-ABAF1E6028BA}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{5F08B6D7-908A-4C10-BE37-07290BAA1FC4}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{DC5EE5FD-A4A3-4403-A62A-E542DAC852F8}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\Apowersoft Phone Manager.exe
FirewallRules: [{0253E503-D67B-4A8C-AF6E-60B041B9957E}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\Apowersoft Phone Manager.exe
FirewallRules: [{07DB8C66-1A03-4036-B21D-E47878AE360E}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\ApowersoftAndroidDaemon.exe
FirewallRules: [{F8374132-09A8-413C-90AB-BBDB95A4DDB1}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\ApowersoftAndroidDaemon.exe
FirewallRules: [{43F41AD3-EA64-4AB5-861C-9B99C3F868C3}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\iOS Recorder.exe
FirewallRules: [{6E936865-405B-44EC-B6AB-CF8C8EE059DE}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\iOS Recorder.exe
FirewallRules: [{337EB821-B0AB-4651-95E3-0219CB12024F}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{3819976B-9F89-4FB5-8313-54197BBBF34F}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
==================== Wiederherstellungspunkte =========================
29-10-2016 13:23:01 Windows Update
06-11-2016 12:58:40 Geplanter Prüfpunkt
08-11-2016 16:05:42 Prüfpunkt von HitmanPro
13-11-2016 16:54:17 JRT Pre-Junkware Removal
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: Bluetooth Audio Device
Description: Bluetooth Audio Device
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_A2DP
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: Virtual Bluetooth Support (Include Audio)
Description: Virtual Bluetooth Support (Include Audio)
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: AthBTPort
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Bluetooth LWFLT Device
Description: Bluetooth LWFLT Device
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_LWFLT
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (11/15/2016 06:56:45 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2007) (User: Susanne)
Description: There was an error communicating to the Orion inference server
Error: (11/15/2016 06:56:33 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2007) (User: NT-AUTORITÄT)
Description: There was an error communicating to the Orion inference server
Error: (11/15/2016 06:56:21 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT-AUTORITÄT)
Description: There was an error with the Windows Location Provider database
Error: (11/15/2016 04:03:52 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
Error: (11/15/2016 04:03:18 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Susanne\Desktop\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
Error: (11/15/2016 09:39:49 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "c:\users\susanne\desktop\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
Error: (11/15/2016 09:06:48 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
Error: (11/15/2016 09:01:29 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Susanne\Desktop\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
Error: (11/15/2016 09:00:08 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
Error: (11/15/2016 08:59:24 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Susanne\Desktop\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
Systemfehler:
=============
Error: (11/15/2016 06:57:20 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: Susanne)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Error: (11/15/2016 01:17:41 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Error: (11/15/2016 01:12:30 PM) (Source: DCOM) (EventID: 10010) (User: Susanne)
Description: Der Server "{1B1F472E-3221-4826-97DB-2C2324D389AE}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (11/15/2016 01:12:00 PM) (Source: DCOM) (EventID: 10010) (User: Susanne)
Description: Der Server "{BF6C1E47-86EC-4194-9CE5-13C15DCB2001}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (11/15/2016 10:07:31 AM) (Source: DCOM) (EventID: 10010) (User: Susanne)
Description: Der Server "{1B1F472E-3221-4826-97DB-2C2324D389AE}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (11/15/2016 10:07:00 AM) (Source: DCOM) (EventID: 10010) (User: Susanne)
Description: Der Server "{BF6C1E47-86EC-4194-9CE5-13C15DCB2001}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (11/15/2016 09:59:12 AM) (Source: DCOM) (EventID: 10010) (User: Susanne)
Description: Der Server "{1B1F472E-3221-4826-97DB-2C2324D389AE}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (11/15/2016 09:58:42 AM) (Source: DCOM) (EventID: 10010) (User: Susanne)
Description: Der Server "{BF6C1E47-86EC-4194-9CE5-13C15DCB2001}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (11/15/2016 09:02:54 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: Susanne)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Error: (11/15/2016 09:00:46 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
CodeIntegrity:
===================================
Date: 2016-11-13 17:18:40.936
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-11-13 17:12:16.854
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-11-13 17:04:16.321
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-07-23 18:39:48.072
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:47.369
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:45.338
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:44.853
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:41.649
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:38.959
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
Date: 2016-07-23 18:39:36.146
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7-3630QM CPU @ 2.40GHz
Prozentuale Nutzung des RAM: 46%
Installierter physikalischer RAM: 8069.73 MB
Verfügbarer physikalischer RAM: 4309.6 MB
Summe virtueller Speicher: 9733.73 MB
Verfügbarer virtueller Speicher: 4661.34 MB
==================== Laufwerke ================================
Drive c: (OS) (Fixed) (Total:1117.37 GB) (Free:810.74 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (Data) (Fixed) (Total:1655.6 GB) (Free:1655.12 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 2794.5 GB) (Disk ID: A523CAED)
Partition: GPT.
==================== Ende von Addition.txt ============================
|
|
16.11.2016, 15:39
| #9 | ||||||||||
| /// TB-Ausbilder | AdwCleaner, Registryeinträge die sich nicht löschen lassen Servus, führe AdwCleaner nochmal aus. Wird noch was gefunden? Ich tippe auf einen Fehlalarm. Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber.  Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.  Cleanup: Alle Logs gepostet? Dann lade Dir bitte  DelFix herunter.
DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner anschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.  Absicherung: Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen: Browser Java Flash-Player PDF-Reader Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren. Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen. Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig. Sofern du noch unentschieden bist, verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:
Microsoft Security Essentials (MSE) / Windows Defender (WD) ist ab Windows 8 fest eingebaut, wenn du also Windows 8, 8.1 oder 10 und dich für MSE/WD entschieden hast, brauchst du nicht extra MSE/WD zu installieren. Bei Windows 7 muss es aber manuell installiert oder über die Windows Updates als optionales Update bezogen werden. Selbstverständlich ist ein legales/aktiviertes Windows Voraussetzung dafür. Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen. Optional:  Adblock Plus Kann Banner, Pop-ups, Videowerbung, Tracking und Malware-Seiten blockieren. NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.Lade Software von einem sauberen Portal wie  .Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen. Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner . Abschließend noch ein paar grundsätzliche Bemerkungen:
Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...  und/oder das Forum mit einer kleinen Spende  unterstützen.  Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann. |
|
17.11.2016, 20:13
| #10 |
| | AdwCleaner Hallo Matthias, die Fehler im AdwCleaner sind immer noch vorhanden. Hatte auch noch zusätzlich eine Version von Filepony gedownloaded aber das gleiche und habe die Datein gelöscht. Keine Ahnung ob ich Murks gemacht hatte, ich hatte es als Administrator gestartet? Dann hatte ich ein Update von meinem Revouninstaller und plötzlich zeigte mir Emisoft ein TrojanScript an. Ich schob dieses sofort in Quarantäne. Danach ging mein Internet nicht mehr da keine Netzwerkverbindungen gefunden wurden so das ich den TrojanScript wiederhergestellt habe aber als Zip Datei gespeichert und diese an Emisoft gesandt. Trotzdem ging das Internet nicht so das ich einen Wiederherstellungspunkt auswählen musste. Nun wollte ich Cleanup durchführen aber da steht das alle Wiederherstellungspunkte gelöscht werden, ob das dann so richtig wird wegen meiner jetztigen Wiederherstellung? Sorry ich weiß viel geschrieben aber ist eben heute ne Menge passiert. |
|
17.11.2016, 21:32
| #11 |
| /// TB-Ausbilder | AdwCleaner, Registryeinträge die sich nicht löschen lassen Servus, dann setze bei DelFix nur den einen Haken, so dass unsere Bereinigungsprogramme entfernt werden, sonst nichts. |
|
18.11.2016, 19:27
| #12 |
| | Danke Hallo Matthias, alles so erledigt wie Du gesagt hast, danke schön für die Hilfe.  |
|
| Themen zu AdwCleaner, Registryeinträge die sich nicht löschen lassen |
| account, ausschalten, bot, button, click, control, eingabe, fehler, file, found, helfer, hinweis, installiert, laufen, löschen, mail, message, nicht löschen, rechner, regedit, search, start, taskmanager, weiterhelfen, zusätzlich |
und 
und speichere die Logdatei auf Deinem Desktop.
Hybrid-Darstellung
