Code:
Alles auswählen Aufklappen ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 07-01-2017
durchgeführt von Itzak (08-01-2017 14:28:08)
Gestartet von D:\Downloads
Windows 10 Pro Version 1607 (X64) (2016-08-03 14:53:02)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-604251109-3447910946-4235510674-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-604251109-3447910946-4235510674-503 - Limited - Disabled)
Gast (S-1-5-21-604251109-3447910946-4235510674-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-604251109-3447910946-4235510674-1005 - Limited - Enabled)
Itzak (S-1-5-21-604251109-3447910946-4235510674-1000 - Administrator - Enabled) => C:\Users\Itzak
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: 360 Total Security (Enabled - Up to date) {2B66EE1E-E5C8-C2F7-648F-4E55AC68D37D}
AS: 360 Total Security (Enabled - Up to date) {90070FFA-C3F2-CD79-5E3F-7527D7EF99C0}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
360 Total Security (HKLM-x32\...\360TotalSecurity) (Version: 8.8.0.1020 - 360 Security Center)
Acronis True Image 2015 (HKLM-x32\...\{2F70A6E6-2F71-4907-8441-BDC5D300310B}Visible) (Version: 18.0.6613 - Acronis)
Acronis True Image 2015 (x32 Version: 18.0.6613 - Acronis) Hidden
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.162 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Amazon Cloud Drive (HKU\S-1-5-21-604251109-3447910946-4235510674-1000\...\Amazon Cloud Drive) (Version: 2.4.2.25 - Amazon Digital Services, LLC.)
AmoK Exif Sorter 2.5.6 (nur deinstallieren) (HKLM-x32\...\AmoKExifSorter2) (Version: - )
Ansel (Version: 376.33 - NVIDIA Corporation) Hidden
Apple Application Support (32-Bit) (HKLM-x32\...\{D079CAAD-0C31-47A2-9AF5-A82F9CD9B221}) (Version: 5.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{64E6007B-1DA9-42CD-BBE4-D5FA67A7C71D}) (Version: 5.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.10.1.0 - Asmedia Technology)
Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{DF6C3726-7E53-4772-9763-E9F147769F51}) (Version: 3.1.6.0000 - Asmedia Technology)
Audiograbber 1.83 SE (HKLM-x32\...\Audiograbber) (Version: 1.83 SE - Audiograbber)
Audiograbber MP3-Plugin (64 bit) (HKLM-x32\...\Audiograbber-Lame) (Version: 1.0 - AG)
AusweisApp2 (HKLM-x32\...\{385F3958-A62E-49B8-9C2B-9A451664325C}) (Version: 1.8.0 - Governikus GmbH & Co. KG)
Battlefield™ 1 (HKLM-x32\...\{335B50BC-6130-4BAF-9A6A-F1561270587B}) (Version: 1.0.47.30570 - Electronic Arts)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Brother P-touch Editor 5.1 (HKLM-x32\...\{39270390-A851-4E4B-94A9-D5C468216ED3}) (Version: 5.1.0610 - Brother Industries, Ltd.)
Brother P-touch Update Software (HKLM-x32\...\{FC5EDFE4-E073-4863-BC3F-2560AFA63B73}) (Version: 1.0.0110 - Brother Industries, Ltd.)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - )
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: - )
Canon Inkjet Printer Driver Add-On Module V2.00 (HKLM\...\CANONIJINBOXADDON200) (Version: - )
Canon MG5300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5300_series) (Version: - )
Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version: - )
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: - )
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5931 - CDBurnerXP)
CD-LabelPrint (HKLM-x32\...\MediaNavigation.CDLabelPrint) (Version: - )
Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version: - Cheat Engine)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version: - Cheat Engine)
Construction-Simulator 2015 (HKLM-x32\...\Steam App 289950) (Version: - weltenbauer. Software Entwicklung GmbH)
Cover Me (HKLM-x32\...\{3EFEF383-059A-4426-8419-A2469F4B1BC8}_is1) (Version: 2.3 - Programm- & Webdesign)
cyberJack Base Components (HKLM-x32\...\{FC338210-F594-11D3-BA24-00001C3AB4DF}) (Version: 7.3.2 - REINER SCT)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Deutsche Post E-Porto (HKLM-x32\...\{5CCF8330-F742-411A-8A04-719806D168B5}) (Version: 2.3.0 - Deutsche Post AG)
dreamboxEDIT -- The one and only settings editor for your Dreambox (HKLM-x32\...\dreamboxEDIT) (Version: - )
Dropbox (HKU\S-1-5-21-604251109-3447910946-4235510674-1000\...\Dropbox) (Version: 18.3.26 - Dropbox, Inc.)
eM Client (HKLM-x32\...\{B922E1AE-C0E5-4318-8BC2-410E045905B6}) (Version: 7.0.26482.0 - eM Client Inc.)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version: - SCS Software)
FileBot (HKLM\...\{36A3AA3A-1849-418B-A07D-1ABB5C909179}) (Version: 4.7.7 - Reinhard Pointner)
FolderSort (HKLM-x32\...\FolderSort) (Version: - )
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
FrameManager (x32 Version: 3.00.0000 - Samsung) Hidden
Free Video Editor (HKLM-x32\...\Free Video Editor_is1) (Version: 1.4.53.831 - Digital Wave Ltd)
FreePDF (Remove only) (HKLM-x32\...\FreePDF_XP) (Version: - )
FRITZ!Box-Fernzugang einrichten (HKLM-x32\...\{EFADD989-D9F2-49F6-A280-675951CC78D3}) (Version: 1.0.3 - AVM Berlin)
GlassWire 1.2 (remove only) (HKLM-x32\...\GlassWire 1.2) (Version: 1.2.79 - SecureMix LLC)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Earth Pro (HKLM-x32\...\{35DAA04C-1720-4BE3-A920-A03731EC6A1D}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
GPL Ghostscript (HKLM-x32\...\GPL Ghostscript 9.04) (Version: 9.04 - Artifex Software Inc.)
Hager prerequisites (HKLM-x32\...\{EB733D93-1923-4F2E-97D1-125AAA8DD59D}) (Version: 1.00.0000 - hager)
HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software)
iCloud (HKLM\...\{4BB313CE-D3D1-424C-8823-15CF85B00B05}) (Version: 6.1.0.30 - Apple Inc.)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.6.0.1033 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.1.1.13 - Intel(R) Corporation) Hidden
IPCWebComponents 3.1.0.9 (HKLM-x32\...\{4740E1B2-51CF-4083-8976-D6B3B5A5064F}_is1) (Version: 3.1.0.9 - )
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan)
iTunes (HKLM\...\{81C96689-EA5B-4B7D-A04F-16326EC51BC2}) (Version: 12.5.4.42 - Apple Inc.)
Java 8 Update 111 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Java SE Development Kit 8 Update 20 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0180200}) (Version: 8.0.200.26 - Oracle Corporation)
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
JDownloader 2 (HKLM\...\0630-0716-3135-7887) (Version: 2 - AppWork GmbH)
KeePass Password Safe 1.32 (HKLM-x32\...\KeePass Password Safe_is1) (Version: 1.32 - Dominik Reichl)
Lame ACM MP3 Codec (HKLM-x32\...\LameACM) (Version: - )
Logitech Gaming Software 8.83 (HKLM\...\Logitech Gaming Software) (Version: 8.83.85 - Logitech Inc.)
Logitech Harmony Remote Software 7 (HKLM-x32\...\{5C6F884D-680C-448B-B4C9-22296EE1B206}) (Version: 7.7.0.0 - Logitech)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Medieval CUE Splitter (HKLM-x32\...\{B96D2269-568B-4CBF-9332-12FAE8B158F7}) (Version: 1.2.0 - Medieval Software)
Microsoft Access database engine 2010 (German) (HKLM-x32\...\{90140000-00D1-0407-0000-0000000FF1CE}) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Expression Web 4 (HKLM-x32\...\Web_4.0.1460.0) (Version: 4.0.1460.0 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 16.0.7571.2075 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-604251109-3447910946-4235510674-1000\...\OneDriveSetup.exe) (Version: 17.3.6720.1207 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
MiniTool Partition Wizard Free 9.1 (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version: - MiniTool Solution Ltd.)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 50.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 50.0.2 (x86 de)) (Version: 50.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.0.2.6177 - Mozilla)
Mp3tag v2.73 (HKLM-x32\...\Mp3tag) (Version: v2.73 - Florian Heidenreich)
MyHarmony (HKU\S-1-5-21-604251109-3447910946-4235510674-1000\...\036a0e4fc6a247ec) (Version: 1.0.1.257 - Logitech)
NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)
Notepad++ (HKLM\...\Notepad++) (Version: 7 - Notepad++ Team)
NVIDIA GeForce Experience 3.2.0.96 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.2.0.96 - NVIDIA Corporation)
NVIDIA Grafiktreiber 376.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.33 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.2.0.96 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 2.0.0.0 - NVIDIA Corporation) Hidden
Office 16 Click-to-Run Extensibility Component (Version: 16.0.7571.2075 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.7571.2075 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (Version: 16.0.7571.2075 - Microsoft Corporation) Hidden
Oracle VM VirtualBox 4.3.20 (HKLM\...\{DD8F7A7A-852F-4648-8A73-B8FC1DF5F082}) (Version: 4.3.20 - Oracle Corporation)
Origin (HKLM-x32\...\Origin) (Version: 10.3.3.1921 - Electronic Arts, Inc.)
Photo Station Uploader (remove only) (HKLM-x32\...\Photo Station Uploader) (Version: - Synology)
POIbase 2.0.11 (HKLM-x32\...\POIbase_is1) (Version: - POIbase)
Potplayer-64 bit (HKLM\...\PotPlayer64) (Version: - Kakao Corp.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
QuickPar 0.9 (HKLM-x32\...\QuickPar) (Version: 0.9 - Peter B. Clements)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.44.421.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7719 - Realtek Semiconductor Corp.)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version: - )
Remote Control USB Driver (HKLM-x32\...\{8471021C-F529-43DE-84DF-3612E10F58C4}) (Version: 2.3.2.317 - )
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.5.1 - Samsung Electronics)
SanDisk SSD Dashboard (HKLM-x32\...\SanDisk SSD Dashboard) (Version: 1.4.2 - SanDisk Corporation)
SanDisk SSD Dashboard Service (HKLM-x32\...\{EE9255E4-283A-4318-ABB6-A75BEE59ACA3}) (Version: 1.0.0 - SanDisk Corporation)
SHIELD Streaming (Version: 7.1.0350 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.2.0.96 - NVIDIA Corporation) Hidden
Silhouette Studio (HKLM-x32\...\{EAF328EC-5F1A-4F2F-875C-331BFC389F73}) (Version: 3.8.118 - Silhouette America)
Sonos Controller (HKLM-x32\...\{7BBA9BF8-05DF-47D8-8880-82A9B99505B9}) (Version: 34.7.35161 - Sonos, Inc.)
Spotify (HKU\S-1-5-21-604251109-3447910946-4235510674-1000\...\Spotify) (Version: 1.0.44.100.ga60c0ce1 - Spotify AB)
SRC System™ Upgrades (HKLM-x32\...\{EB38E598-181D-4CD7-800F-A4F525ECEC56}) (Version: 3.0.6 - SRC Systems)
StarMoney (x32 Version: 3.0.3.21 - StarFinanz) Hidden
StarMoney (x32 Version: 4.0.0.203 - StarFinanz) Hidden
StarMoney (x32 Version: 5.0.0.226 - StarFinanz) Hidden
StarMoney 10 (HKLM-x32\...\{20104F01-DE87-4B04-B6E0-7B796DB07A90}) (Version: 10 - Star Finanz GmbH)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Steuer 2014 (HKLM-x32\...\{2EE860C7-4551-479F-AF01-328B8AA46051}) (Version: 22.00.8811 - Buhl Data Service GmbH)
Steuer 2015 (HKLM-x32\...\{E262CD3B-8825-4D56-AEF1-5E127F2FBB05}) (Version: 23.00.1146 - Buhl Data Service GmbH)
Steuer 2016 (HKLM-x32\...\{284354A5-0D3A-4065-A997-C21762D0160E}) (Version: 24.00.1375 - Buhl Data Service GmbH)
SurveillanceHelper (HKLM-x32\...\{29004F05-17B9-4A06-9628-2C5159BE8717}) (Version: 1.0.0.5 - Synology)
SurveillancePlugin (HKLM-x32\...\{F42010FB-1772-4BA3-B4F3-43532CC6F9BD}) (Version: 1.0.0.1135 - Synology)
Synology Assistant (remove only) (HKLM-x32\...\Synology Assistant) (Version: - )
Synology Cloud Station Backup (HKLM-x32\...\{8EF0D9E8-B32E-43B8-B29D-55B8B374EF83}) (Version: 4.0.4164 - Synology)
Tablegallery Creator 0.9.3 (HKLM-x32\...\{41E8B73B-7E5B-4C0A-B79D-46571B34675C}_is1) (Version: - PA-S.de)
Thunder Master v2.24 (HKLM-x32\...\{EE04522C-0814-4B63-AE57-0B63E5A355BB}_is1) (Version: 2.24.0.4 - Palit Microsystems Ltd.)
TomTom HOME (HKLM-x32\...\{F76EFA2A-BF0B-47BC-9AD5-857FFBD3CC79}) (Version: 2.9.93 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Total Commander (Remove or Repair) (HKLM-x32\...\Totalcmd) (Version: 7.57a - Ghisler Software GmbH)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.0 - Ghisler Software GmbH)
Train Simulator 2015 (HKLM-x32\...\Steam App 24010) (Version: - Dovetail Games)
TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
Tyre (HKLM\...\Tyre_is1) (Version: 6.4.7.1 - 't Schrijverke)
Uplay (HKLM-x32\...\Uplay) (Version: 27.0 - Ubisoft)
Virtual Com port driver V1.4.0 (HKLM-x32\...\{AF0ACDD1-3842-47C7-B153-B8DB92CDA42D}) (Version: 1.4.0 - STMicroelectronics)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
WhoCrashed 4.02 (HKLM\...\WhoCrashed_is1) (Version: - Resplendence Software Projects Sp.)
Win32DiskImager version 0.9.5 (HKLM-x32\...\{D074CE74-912A-4AD3-A0BF-3937D9D01F17}_is1) (Version: 0.9.5 - ImageWriter Developers)
WinCDEmu (HKLM-x32\...\WinCDEmu) (Version: 4.0 - Sysprogs)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0) (HKLM\...\49CF605F02C7954F4E139D18828DE298CD59217C) (Version: 06/03/2009 2.3.0.0 - Garmin)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows-Treiberpaket - STMicroelectronics (usbser) Ports (08/02/2013 1.4.0) (HKLM\...\04B4996F06620A7ECFBFE8F9BCC458F9761E39F7) (Version: 08/02/2013 1.4.0 - STMicroelectronics)
WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
WinSCP 5.7.6 (HKLM-x32\...\winscp3_is1) (Version: 5.7.6 - Martin Prikryl)
XMedia Recode Version 3.3.5.4 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.3.5.4 - XMedia Recode)
Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-604251109-3447910946-4235510674-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Itzak\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-604251109-3447910946-4235510674-1000_Classes\CLSID\{2C4A5D61-009C-4561-9A33-6AFD542FD237}\InprocServer32 -> C:\Users\Itzak\AppData\Local\CloudStation\CloudStation.app\icon-overlay\16\x64\ContextMenu.dll => Ke (Der Dateneintrag hat 9 mehr Zeichen).
CustomCLSID: HKU\S-1-5-21-604251109-3447910946-4235510674-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Itzak\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-604251109-3447910946-4235510674-1000_Classes\CLSID\{472CE1AD-5D53-4BCF-A1FB-3982A5F55138}\InprocServer32 -> C:\Users\Itzak\AppData\Local\CloudStation\CloudStation.app\icon-overlay\16\x64\iconOverlay.dll => Ke (Der Dateneintrag hat 9 mehr Zeichen).
CustomCLSID: HKU\S-1-5-21-604251109-3447910946-4235510674-1000_Classes\CLSID\{48AB5ADA-36B1-4137-99C9-2BD97F8788AB}\InprocServer32 -> C:\Users\Itzak\AppData\Local\CloudStation\CloudStation.app\icon-overlay\16\x64\iconOverlay.dll => Ke (Der Dateneintrag hat 9 mehr Zeichen).
CustomCLSID: HKU\S-1-5-21-604251109-3447910946-4235510674-1000_Classes\CLSID\{A433C3E0-8B24-40EB-93C3-4B10D9959F58}\InprocServer32 -> C:\Users\Itzak\AppData\Local\CloudStation\CloudStation.app\icon-overlay\16\x64\iconOverlay.dll => Ke (Der Dateneintrag hat 9 mehr Zeichen).
CustomCLSID: HKU\S-1-5-21-604251109-3447910946-4235510674-1000_Classes\CLSID\{AEB16659-2125-4ADA-A4AB-45EE21E86469}\InprocServer32 -> C:\Users\Itzak\AppData\Local\CloudStation\CloudStation.app\icon-overlay\16\x64\iconOverlay.dll => Ke (Der Dateneintrag hat 9 mehr Zeichen).
CustomCLSID: HKU\S-1-5-21-604251109-3447910946-4235510674-1000_Classes\CLSID\{C701AD67-3DF0-47C9-89CB-DFA6207BE229}\InprocServer32 -> C:\Users\Itzak\AppData\Local\CloudStation\CloudStation.app\icon-overlay\16\x64\iconOverlay.dll => Ke (Der Dateneintrag hat 9 mehr Zeichen).
CustomCLSID: HKU\S-1-5-21-604251109-3447910946-4235510674-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Itzak\AppData\Roaming\Dropbox\bin\DropboxExt64.10.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-604251109-3447910946-4235510674-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Itzak\AppData\Roaming\Dropbox\bin\DropboxExt64.10.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-604251109-3447910946-4235510674-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Itzak\AppData\Roaming\Dropbox\bin\DropboxExt64.10.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-604251109-3447910946-4235510674-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Itzak\AppData\Roaming\Dropbox\bin\DropboxExt64.10.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-604251109-3447910946-4235510674-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Itzak\AppData\Roaming\Dropbox\bin\DropboxExt64.10.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-604251109-3447910946-4235510674-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Itzak\AppData\Roaming\Dropbox\bin\DropboxExt64.10.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-604251109-3447910946-4235510674-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Itzak\AppData\Roaming\Dropbox\bin\DropboxExt64.10.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-604251109-3447910946-4235510674-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Itzak\AppData\Roaming\Dropbox\bin\DropboxExt64.10.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-604251109-3447910946-4235510674-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Itzak\AppData\Roaming\Dropbox\bin\DropboxExt64.10.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-604251109-3447910946-4235510674-1000_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Itzak\AppData\Roaming\Dropbox\bin\DropboxExt64.10.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-604251109-3447910946-4235510674-1000_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Itzak\AppData\Roaming\Dropbox\bin\DropboxExt64.10.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-604251109-3447910946-4235510674-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Itzak\AppData\Roaming\Dropbox\bin\DropboxExt64.10.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-604251109-3447910946-4235510674-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Itzak\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => Keine Datei
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {03DA1727-1E7E-4647-9107-125841E554CC} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-604251109-3447910946-4235510674-1000UA1d2206a1ad5b733 => C:\Users\Itzak\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-10-07] (Dropbox, Inc.)
Task: {04A6CB63-02AC-498A-AEF7-F34213F80FFC} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-12-13] (NVIDIA Corporation)
Task: {0E644A6A-465E-446F-BCA2-C6B1DA3C7B44} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {10C7E449-B1AE-4F0C-B42D-3B14C03EA353} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {13F7280A-FC30-4C60-AE9F-103A22A04761} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-12-04] (Microsoft Corporation)
Task: {148C5B6D-0BA4-45AA-930C-58603A370419} - System32\Tasks\ThunderMaster => C:\Program Files (x86)\Thunder Master\THPanel.exe [2016-10-26] (Palit Microsystems Ltd.)
Task: {16818169-C5FF-4FFF-8463-EAE76DE325B4} - System32\Tasks\Auto Re-Aktivierung => C:\WINDOWS\Re-Aktivierung\TriggerKMS.exe
Task: {1A438826-8381-44D6-A6B9-8F489490F86D} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1BE75B25-9E44-4F82-95D6-D79F60FF3247} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1C6DD77D-AB5E-418E-B080-7465A113AA72} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {1DB68B97-5E42-4243-BEAC-352D4631D448} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {1DE85612-34FA-429A-9D31-5CDBC2650323} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {28AF8722-4067-428D-8BE0-E65205185B0B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2C5221B0-8B83-4B8E-906D-780929431FF7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-09-22] (Adobe Systems Incorporated)
Task: {2E10089B-1905-4ED7-A1B8-17F8A282C937} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {30BF04BD-51F6-4C3C-B750-B353D96C790B} - System32\Tasks\{F85FDCD8-FFDA-4C6F-9039-10578B75D43C} => pcalua.exe -a "D:\Downloads\CDM v2.12.00 WHQL Certified.exe" -d D:\Downloads
Task: {321BC64F-22B4-4376-A69F-320A591125C3} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {363C68F3-5108-4C94-9983-22B6B52E53E8} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-12-13] (NVIDIA Corporation)
Task: {3C5D9AEF-95DD-4319-ADD1-36358CC31355} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)
Task: {3EEB8463-7733-4D40-8E4F-CBABDC0ACE94} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {44E5FC0B-7C72-45E2-9C56-43CC558E11E3} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {527B5428-05E5-403D-B2D7-755ED2A1DEFB} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {5499FFD0-826B-4096-8C27-30A24297365B} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {58B2726F-506A-407F-B9E7-FAD0DD8619E6} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {5CE0D393-4B2E-4944-9805-0BD380767BC1} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-12-13] (NVIDIA Corporation)
Task: {62288C56-DDDF-4142-BD1B-F2CA98561609} - System32\Tasks\Microsoft_Hardware_Launch_devicecenter_exe => C:\Program Files\Microsoft Device Center\devicecenter.exe
Task: {632484DB-1288-42DB-B76E-83BEC2218227} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {6560F753-677B-4BE0-A2BC-A91590BFA8F9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2016-12-04] (Microsoft Corporation)
Task: {6A634882-1CC1-47AE-9E53-AB984D364811} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {6FF09415-7C69-4BD7-8EF6-6A9DC235EA5F} - System32\Tasks\Synology Data Replicator 3-MicrosoftAccount-Itzak => D:\Program Files (x86)\Synology Data Replicator 3\Backup.exe
Task: {70F31CE2-B841-4129-99F4-B4823E566B60} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {729E051B-73D4-4664-B011-0946DD0503EC} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-12-13] (NVIDIA Corporation)
Task: {79BE931D-60F4-41CF-968F-6C2B2E59C472} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {7C94D902-6042-4C63-9E48-BB6585BFA4E8} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7D06D97B-AD42-4992-967C-8C418A313842} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {7F2B149E-C668-4E50-A541-94CB10212B52} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-12-13] (NVIDIA Corporation)
Task: {7FFB4346-F6CE-46BD-B04C-70751983D698} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {81AA9449-0338-4196-AB82-C8EB4802916D} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {820EA85A-972F-4EBE-A45E-D5CF5CC41D10} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-12-14] (Microsoft Corporation)
Task: {86B3D654-3432-4D56-987D-80CE54A524BE} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2016-12-04] (Microsoft Corporation)
Task: {8E6552C0-1141-45A4-8D28-92FC52F385F1} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {940F77E4-F09F-4AA0-BE28-652B174DA722} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-604251109-3447910946-4235510674-1000Core1d2206a1abd9e22 => C:\Users\Itzak\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-10-07] (Dropbox, Inc.)
Task: {9AE661AD-32D1-4A04-99D0-D58B7CDB48F3} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A25740DF-EDB7-4A45-AD60-2AA78AC01EF5} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {A2D6F1EF-5B92-4C7F-B8F7-1BE485C64CB9} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-12-04] (Microsoft Corporation)
Task: {A655583C-D998-407F-860A-D7C5A2699017} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {ACD4ADF0-2F7F-4B57-804A-8CC5EA627F17} - System32\Tasks\eM Client Database Backup => C:\Program Files (x86)\eM Client\DbBackup.exe [2016-07-04] ()
Task: {AD623EF0-0C13-40CB-860C-2F12DAE21D1A} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {B14BE625-F4EE-4F3A-AD35-B91AC588CDD2} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-12-13] (NVIDIA Corporation)
Task: {B63AE05A-08FC-47F0-AEC9-853F0EDD2525} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {BEE9CE76-88FB-41FB-B94E-36A4B7A35958} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C14B2F09-47D5-4543-A6A0-2A0AF1E879AC} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {C5ED53C6-CC1A-402F-B665-7E2EBC15CD43} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2016-12-13] (NVIDIA Corporation)
Task: {D5EAEB49-5195-4869-99F4-B092EA0AA9C9} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DADF524D-EEC1-4628-832F-20418DBAD74F} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {DDBC1508-AF66-413F-80A3-49CCB18896AD} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {DF7DD8B8-432C-4233-B1B2-4F721381514B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {E12A349D-7047-4102-A1A7-9CAB00DE3533} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {E518C07C-FA41-4267-BD27-7BCE1EE2293D} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {E57344A7-1763-48EC-BC91-CE875741ABAA} - System32\Tasks\SamsungMagician => d:\Program Files (x86)\Samsung SSD Magician\Samsung Magician.exe [2014-09-28] (Samsung Electronics.)
Task: {E78D8472-DFBD-4C2D-A673-62E6802DBEAE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {EBD96801-4989-42DA-A8EB-0D580E64A981} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {EFBE991D-2AB8-42F8-BA1D-C936AD834C64} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F67C96C7-EEBA-4552-BC60-6BEE7AA937C1} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {FABBEB4E-6065-4957-8BFD-1BA469C1CCA8} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-604251109-3447910946-4235510674-1000Core1d2206a1abd9e22.job => C:\Users\Itzak\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-604251109-3447910946-4235510674-1000UA1d2206a1ad5b733.job => C:\Users\Itzak\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\Synology Data Replicator 3-MicrosoftAccount-Itzak.job => D:\Program Files (x86)\Synology Data Replicator 3\Backup.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
ShortcutWithArgument: C:\Users\Itzak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\VXG Media Player.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=hncknjnnbahamgpjoafdebabmoamcnni
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-12-14 09:04 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2013-03-25 10:07 - 2010-06-17 20:56 - 00087040 _____ () C:\WINDOWS\System32\redmonnt.dll
2016-09-01 17:12 - 2016-09-01 17:12 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-11-17 01:28 - 2016-11-17 01:28 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-02-25 19:01 - 2016-02-25 19:01 - 00287240 _____ () C:\Program Files (x86)\Synology\CloudStationBackup\bin\vss-service-x64.exe
2016-10-07 08:16 - 2016-12-13 00:36 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-10-07 08:16 - 2016-12-13 00:35 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2014-02-25 02:28 - 2014-02-25 02:28 - 00248736 _____ () d:\Program Files (x86)\Synology\Assistant\UsbClientService.exe
2016-08-03 15:43 - 2016-12-11 19:47 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-12-14 09:04 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-12-10 11:11 - 2016-12-10 11:11 - 01678560 _____ () C:\Users\Itzak\AppData\Local\Microsoft\OneDrive\17.3.6720.1207\amd64\ClientTelemetry.dll
2016-09-15 09:51 - 2016-09-07 05:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-12-14 09:04 - 2016-12-09 10:41 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-11-09 12:38 - 2016-11-02 11:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-11-09 12:38 - 2016-11-02 11:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-11-09 12:38 - 2016-11-02 11:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-11-09 12:38 - 2016-11-02 11:15 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-11-09 12:38 - 2016-11-02 11:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-11-09 12:38 - 2016-11-02 11:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-11-09 12:38 - 2016-11-02 11:13 - 00114176 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Dss.BackgroundTask.dll
2015-03-07 01:07 - 2015-03-07 01:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2016-04-28 23:49 - 2016-04-28 23:49 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2015-03-07 01:07 - 2015-03-07 01:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2016-04-28 23:49 - 2016-04-28 23:49 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2015-04-17 09:27 - 2016-08-10 11:54 - 01153448 _____ () C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
2016-11-09 12:38 - 2016-11-02 11:13 - 00115712 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\DeviceSideServicesActionUriHandler.dll
2016-11-09 12:38 - 2016-11-02 11:13 - 00522752 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.NodeWinrtWrap.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 00040448 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\winrt-projections\bin\Winrt_Projections.node
2016-07-16 12:43 - 2016-07-16 23:56 - 00813056 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.web.http\bin\NodeRT_Windows_Web_Http.node
2016-07-16 12:43 - 2016-07-16 23:56 - 00963584 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.web.http.headers\bin\NodeRT_Windows_Web_Http_Headers.node
2016-07-16 12:43 - 2016-07-16 23:56 - 00249344 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.web.http.filters\bin\NodeRT_Windows_Web_Http_Filters.node
2016-07-16 12:43 - 2016-07-16 23:56 - 00572416 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.storage.streams\bin\NodeRT_Windows_Storage_Streams.node
2016-07-16 12:43 - 2016-07-16 23:56 - 00403968 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.foundation\bin\NodeRT_Windows_Foundation.node
2016-07-16 12:43 - 2016-07-16 23:56 - 00183296 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\nodert-buffer-utils\bin\NodeRT_Buffer_Utils.node
2016-07-16 12:43 - 2016-07-16 23:56 - 00288256 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.cortana.pal\bin\NodeRT_Windows_Cortana_PAL.node
2016-12-14 09:04 - 2016-12-14 09:05 - 00055808 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11610.1001.23.0_x64__8wekyb3d8bbwe\WinStoreTasksWrapper.dll
2015-04-17 09:27 - 2016-08-10 11:54 - 00099240 _____ () C:\Program Files (x86)\360\Total Security\deepscan\qutmload.dll
2016-12-14 11:53 - 2016-10-27 12:31 - 00114664 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll
2016-12-14 11:53 - 2016-10-27 12:31 - 00108008 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll
2016-12-14 11:53 - 2016-10-27 12:31 - 00024040 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll
2016-12-14 11:53 - 2016-10-27 12:31 - 00048104 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll
2016-10-12 09:19 - 2016-12-21 13:57 - 02493440 _____ () D:\Program Files (x86)\Origin\libGLESv2.dll
2016-12-01 10:55 - 2016-01-28 15:33 - 01058624 _____ () d:\Program Files (x86)\StarMoney 10\ouservice\libxml2.dll
2016-12-01 10:55 - 2011-01-13 10:44 - 00232800 _____ () d:\Program Files (x86)\StarMoney 10\ouservice\PATCHW32.dll
2015-04-06 14:12 - 2016-12-13 00:35 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-10-07 08:16 - 2016-12-13 00:35 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-10-07 08:16 - 2016-12-13 00:35 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-12-10 11:11 - 2016-12-10 11:11 - 01244376 _____ () C:\Users\Itzak\AppData\Local\Microsoft\OneDrive\17.3.6720.1207\ClientTelemetry.dll
2016-11-17 01:29 - 2016-11-17 01:29 - 01041720 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2016-09-01 17:13 - 2016-09-01 17:13 - 00080184 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2016-11-17 01:28 - 2016-11-17 01:28 - 00189752 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll
2013-12-02 20:32 - 2014-09-28 17:59 - 00019872 _____ () d:\Program Files (x86)\Samsung SSD Magician\SAMSUNG_SSD.dll
2017-01-07 11:45 - 2017-01-04 20:53 - 00801600 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\dropbox_watchdog.dll
2016-10-02 08:02 - 2016-12-21 09:44 - 00035792 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd
2016-10-02 08:02 - 2016-12-21 09:44 - 00100296 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\_ctypes.pyd
2016-10-02 08:02 - 2016-12-21 09:44 - 00018888 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\select.pyd
2016-10-02 08:02 - 2017-01-04 20:55 - 00019776 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd
2016-10-02 08:02 - 2016-12-21 09:44 - 00694224 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\unicodedata.pyd
2017-01-07 11:45 - 2017-01-04 20:55 - 00020824 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd
2016-10-02 08:02 - 2016-12-21 09:45 - 00123856 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd
2017-01-07 11:45 - 2017-01-04 20:55 - 01682768 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd
2017-01-07 11:45 - 2017-01-04 20:55 - 00020816 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd
2017-01-07 11:45 - 2016-12-21 09:44 - 00145864 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\pyexpat.pyd
2017-01-07 11:45 - 2016-12-21 09:45 - 00019408 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\faulthandler.pyd
2017-01-07 11:45 - 2016-12-21 09:44 - 00116688 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\pywintypes27.dll
2016-10-02 08:02 - 2016-12-21 09:46 - 00105928 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\win32api.pyd
2016-10-02 08:02 - 2017-01-04 20:56 - 00022864 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\winffi.crt.compiled._winffi_crt.pyd
2017-01-07 11:45 - 2017-01-04 20:55 - 00052032 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd
2017-01-07 11:45 - 2017-01-04 20:55 - 00038712 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\fastpath.pyd
2017-01-07 11:45 - 2016-12-21 09:44 - 00392144 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\pythoncom27.dll
2017-01-07 11:45 - 2016-12-21 09:46 - 00020936 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\mmapfile.pyd
2016-10-02 08:02 - 2016-12-21 09:46 - 00024528 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\win32event.pyd
2016-10-02 08:02 - 2016-12-21 09:47 - 00116176 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\win32security.pyd
2016-10-02 08:02 - 2017-01-04 20:55 - 00381760 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd
2016-10-02 08:02 - 2016-12-21 09:46 - 00124880 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\win32file.pyd
2016-10-02 08:02 - 2017-01-04 20:56 - 00026456 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\winffi.kernel32.compiled._winffi_kernel32.pyd
2016-10-02 08:02 - 2016-12-21 09:46 - 00024016 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\win32clipboard.pyd
2016-10-02 08:02 - 2016-12-21 09:46 - 00175560 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\win32gui.pyd
2016-10-02 08:02 - 2016-12-21 09:46 - 00030160 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\win32pipe.pyd
2016-10-02 08:02 - 2016-12-21 09:46 - 00043472 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\win32process.pyd
2016-10-02 08:02 - 2016-12-21 09:47 - 00048592 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\win32service.pyd
2016-10-02 08:02 - 2016-12-21 09:46 - 00057808 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\win32evtlog.pyd
2016-10-02 08:02 - 2016-12-21 09:46 - 00024016 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\win32profile.pyd
2017-01-07 11:45 - 2017-01-04 20:55 - 00246608 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd
2017-01-07 11:45 - 2017-01-04 20:55 - 00027488 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd
2016-10-02 08:02 - 2016-12-21 09:45 - 00241104 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\_jpegtran.pyd
2017-01-07 11:45 - 2017-01-04 20:55 - 00022336 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd
2016-10-02 08:02 - 2016-12-21 09:47 - 00028616 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\win32ts.pyd
2016-10-02 08:02 - 2017-01-04 20:56 - 00025432 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd
2017-01-07 11:45 - 2017-01-04 20:56 - 00022872 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
2017-01-07 11:45 - 2017-01-04 20:56 - 00021848 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\winffi.winerror.compiled._winffi_winerror.pyd
2017-01-07 11:45 - 2017-01-04 20:56 - 00022872 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\winffi.wininet.compiled._winffi_wininet.pyd
2017-01-07 11:45 - 2017-01-04 20:55 - 01826104 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd
2016-10-02 08:02 - 2016-12-21 09:45 - 00083912 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\sip.pyd
2017-01-07 11:45 - 2017-01-04 20:55 - 00531264 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd
2017-01-07 11:45 - 2017-01-04 20:55 - 03928896 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd
2017-01-07 11:45 - 2017-01-04 20:55 - 01972536 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd
2017-01-07 11:45 - 2017-01-04 20:55 - 00133432 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd
2017-01-07 11:45 - 2017-01-04 20:55 - 00224064 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd
2017-01-07 11:45 - 2017-01-04 20:55 - 00207680 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd
2017-01-07 11:45 - 2017-01-04 20:56 - 00021840 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\winffi.user32.compiled._winffi_user32.pyd
2016-10-02 08:02 - 2016-12-21 09:47 - 00350152 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\winxpgui.pyd
2017-01-07 11:45 - 2017-01-04 20:55 - 00103232 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\PyQt5.QtWinExtras.pyd
2016-10-02 08:02 - 2017-01-04 20:56 - 00023896 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd
2017-01-07 11:45 - 2017-01-04 20:55 - 00025936 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd
2017-01-07 11:45 - 2016-12-21 09:42 - 00036296 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\librsync.dll
2017-01-07 11:45 - 2017-01-04 20:55 - 00033112 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\enterprise_data.compiled._enterprise_data.pyd
2017-01-07 11:45 - 2016-12-02 20:21 - 00293392 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\EnterpriseDataAdapter.dll
2017-01-07 11:45 - 2017-01-04 20:55 - 00084288 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL
2017-01-07 11:45 - 2016-12-21 09:50 - 00017864 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\libEGL.dll
2017-01-07 11:45 - 2016-12-21 09:50 - 01631184 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2017-01-07 11:45 - 2017-01-04 20:55 - 00042816 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd
2017-01-07 11:45 - 2017-01-04 20:55 - 00171336 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd
2017-01-07 11:45 - 2017-01-04 20:55 - 00357688 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd
2016-10-02 08:02 - 2016-12-21 09:46 - 00060880 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\win32print.pyd
2016-10-02 08:02 - 2017-01-04 20:55 - 00069968 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\windisplaytoast.compiled._DisplayToast.pyd
2016-10-02 08:02 - 2017-01-04 20:56 - 00026456 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\winffi.winhttp.compiled._winffi_winhttp.pyd
2017-01-07 11:45 - 2017-01-04 20:55 - 00546104 _____ () C:\Users\Itzak\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd
2015-07-20 09:08 - 2015-07-20 09:08 - 00037696 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\qt_icontray_ex.dll
2015-07-20 09:08 - 2015-07-20 09:08 - 00034624 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\thread_pool.dll
2015-07-20 09:15 - 2015-07-20 09:15 - 00420160 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\ulxmlrpcpp.dll
2015-07-20 09:10 - 2015-07-20 09:10 - 00129344 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\EXPAT.dll
2015-04-17 09:27 - 2016-08-10 11:54 - 00582056 _____ () C:\Program Files (x86)\360\Total Security\safemon\wdui2.dll
2017-01-04 09:01 - 2017-01-04 09:01 - 00123918 _____ () C:\Users\Itzak\AppData\Local\CloudStationBackup\CloudStation.app\bin\libgcc_s_dw2-1.dll
2017-01-04 09:01 - 2017-01-04 09:01 - 01026062 _____ () C:\Users\Itzak\AppData\Local\CloudStationBackup\CloudStation.app\bin\libstdc++-6.dll
2017-01-04 09:01 - 2017-01-04 09:01 - 00524460 _____ () C:\Users\Itzak\AppData\Local\CloudStationBackup\CloudStation.app\bin\libcurl-4.dll
2017-01-04 09:01 - 2017-01-04 09:01 - 03036942 _____ () C:\Users\Itzak\AppData\Local\CloudStationBackup\CloudStation.app\bin\libsqlite3-0.dll
2017-01-04 09:01 - 2017-01-04 09:01 - 01798570 _____ () C:\Users\Itzak\AppData\Local\CloudStationBackup\CloudStation.app\bin\icuuc53.dll
2017-01-04 09:01 - 2017-01-04 09:01 - 00115214 _____ () C:\Users\Itzak\AppData\Local\CloudStationBackup\CloudStation.app\bin\zlib1.dll
2017-01-04 09:01 - 2017-01-04 09:01 - 03095505 _____ () C:\Users\Itzak\AppData\Local\CloudStationBackup\CloudStation.app\bin\icuin53.dll
2017-01-04 09:01 - 2017-01-04 09:01 - 21565192 _____ () C:\Users\Itzak\AppData\Local\CloudStationBackup\CloudStation.app\bin\icudt53.dll
2017-01-04 09:01 - 2017-01-04 09:01 - 00712704 _____ () C:\Users\Itzak\AppData\Local\CloudStationBackup\CloudStation.app\bin\platforms\qwindows.dll
2017-01-04 09:01 - 2017-01-04 09:01 - 00031744 _____ () C:\Users\Itzak\AppData\Local\CloudStationBackup\CloudStation.app\bin\imageformats\qgif.dll
2017-01-04 09:01 - 2017-01-04 09:01 - 00046080 _____ () C:\Users\Itzak\AppData\Local\CloudStationBackup\CloudStation.app\bin\imageformats\qicns.dll
2017-01-04 09:01 - 2017-01-04 09:01 - 00032768 _____ () C:\Users\Itzak\AppData\Local\CloudStationBackup\CloudStation.app\bin\imageformats\qico.dll
2017-01-04 09:01 - 2017-01-04 09:01 - 00516608 _____ () C:\Users\Itzak\AppData\Local\CloudStationBackup\CloudStation.app\bin\imageformats\qjp2.dll
2017-01-04 09:01 - 2017-01-04 09:01 - 00243200 _____ () C:\Users\Itzak\AppData\Local\CloudStationBackup\CloudStation.app\bin\imageformats\qjpeg.dll
2017-01-04 09:01 - 2017-01-04 09:01 - 00431616 _____ () C:\Users\Itzak\AppData\Local\CloudStationBackup\CloudStation.app\bin\imageformats\qtiff.dll
2016-10-07 08:16 - 2016-12-12 15:36 - 00525760 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2016-10-07 08:16 - 2016-12-12 15:36 - 00254008 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2016-10-07 08:16 - 2016-12-12 15:36 - 02808888 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2016-10-07 08:16 - 2016-12-12 15:36 - 00384568 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2016-10-07 08:16 - 2016-12-12 15:36 - 00447424 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2016-10-07 08:16 - 2016-12-12 15:36 - 00336832 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2016-10-07 08:16 - 2016-12-12 15:36 - 01003456 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node
2016-12-20 14:15 - 2016-12-12 15:36 - 00956472 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSDKAPINode.node
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-604251109-3447910946-4235510674-1000\...\127.0.0.1 -> hxxp://127.0.0.1
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2014-04-27 07:18 - 00000890 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 activation.acronis.com
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-604251109-3447910946-4235510674-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Itzak\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\hintergrundbild der windows-fotoanzeige.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
HKLM\...\StartupApproved\Run: => "XboxStat"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [MSMQ-In-TCP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [{4F0CCC1A-C0A0-49BA-AE30-022AF68421A9}] => C:\Program Files (x86)\360\Total Security\LiveUpdate360.exe
FirewallRules: [{B0269778-0B87-4560-9089-2BCACA95FAD1}] => C:\Program Files (x86)\360\Total Security\LiveUpdate360.exe
FirewallRules: [{D68F41DC-5DCE-4A8E-BDB4-F743C5A56854}] => C:\Program Files\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{32E742D4-F2E3-4FD0-9F7B-6AF19BA33F5A}] => D:\Program Files (x86)\Steam\SteamApps\common\RailWorks\RailWorks.exe
FirewallRules: [{B05E5115-5788-4F5C-8C40-E5671F3FDBD8}] => D:\Program Files (x86)\Steam\SteamApps\common\RailWorks\RailWorks.exe
FirewallRules: [{D999AEA7-03CF-451E-A447-F1D6F120B972}] => D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{BECDFF58-BAB7-479A-B314-3C99B27C99DA}] => D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{267A501C-9FA4-406B-93BE-DC8B744E3E99}] => D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{D3B67742-245B-4A65-B738-CC09C2167E5C}] => D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{4A3FAE8D-37EA-4B56-9815-9F98B9CCFE16}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B443CB71-17EE-43EF-9813-07E8CF4435D9}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [UDP Query User{63F79AB6-14A8-44C0-AAD4-46F6DC5E0806}C:\program files (x86)\google\chrome\application\chrome.exe] => C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [TCP Query User{DD196FD9-E837-410E-BDC4-BC5320DB4121}C:\program files (x86)\google\chrome\application\chrome.exe] => C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [UDP Query User{FB237B61-6385-4A3F-AA5B-84AA742A769E}C:\users\itzak\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\itzak\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{AF060E2E-B5BA-4B3D-8E25-3FB1C3AA0985}C:\users\itzak\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\itzak\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{E41E8FCA-3595-47FA-9B50-33BA8D779A60}] => C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
FirewallRules: [{CB3D1F40-9CC5-4FCC-AFD5-0B356B3EB7C1}] => C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
FirewallRules: [AusweisApp2-Firewall-Rule] => C:\Program Files (x86)\AusweisApp2 1.8.0\AusweisApp2.exe
FirewallRules: [{76D1B933-A554-4CEB-B25A-527E072E3AD5}] => D:\Program Files (x86)\Steam\SteamApps\common\ConSim2015\ConSim2015.exe
FirewallRules: [{F9AA33A9-A7B9-4713-BCB3-7270A6867D75}] => D:\Program Files (x86)\Steam\SteamApps\common\ConSim2015\ConSim2015.exe
FirewallRules: [TCP Query User{81040AB3-D91A-4B5E-94F8-FFBBC9D7F95B}C:\users\itzak\appdata\local\cloudstationbackup\cloudstation.app\bin\cloud-backup-connect.exe] => C:\users\itzak\appdata\local\cloudstationbackup\cloudstation.app\bin\cloud-backup-connect.exe
FirewallRules: [UDP Query User{8C2C5644-FEB8-44DF-BFC9-747D51BBB1B6}C:\users\itzak\appdata\local\cloudstationbackup\cloudstation.app\bin\cloud-backup-connect.exe] => C:\users\itzak\appdata\local\cloudstationbackup\cloudstation.app\bin\cloud-backup-connect.exe
FirewallRules: [{094A48FC-CE6E-4F2E-AB59-BC6D5BD02DF4}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{7DAF97BA-76A1-4C14-ABE5-4444F34FB747}] => LPort=2869
FirewallRules: [{7D26F0BD-DF5A-4E91-9260-8014D8AD60F9}] => LPort=1900
FirewallRules: [TCP Query User{CA0EFE25-889E-4E45-AAA7-4761D3838EFA}C:\users\itzak\appdata\roaming\spotify\spotify.exe] => C:\users\itzak\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{5A3C289A-EC34-4D35-9F99-715B1E3CD38B}C:\users\itzak\appdata\roaming\spotify\spotify.exe] => C:\users\itzak\appdata\roaming\spotify\spotify.exe
FirewallRules: [{6BFAB516-885E-4360-88DD-7EFB105EE4C1}] => C:\Program Files (x86)\360\Total Security\LiveUpdate360.exe
FirewallRules: [{4F96BABA-43B9-4D0C-A21C-54137B03E248}] => C:\Program Files (x86)\360\Total Security\LiveUpdate360.exe
FirewallRules: [TCP Query User{B6199E25-7265-44A2-89D3-0787BDD9FC1D}C:\users\itzak\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\itzak\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{B5306368-08A4-4F46-AA8A-3AF02EA5B480}C:\users\itzak\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\itzak\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{EA5B0FB2-4CC7-4C27-8BCF-F71D378CCED6}] => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
FirewallRules: [{6AE15612-93FB-49B6-B705-0F9C6EBF0EB1}] => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
FirewallRules: [TCP Query User{DCAE1867-B3AD-453D-88C0-1969775D330B}D:\downloads\ipcamera.exe] => D:\downloads\ipcamera.exe
FirewallRules: [UDP Query User{39AE2B95-4AFB-44DF-8B53-798E1E9A0ADA}D:\downloads\ipcamera.exe] => D:\downloads\ipcamera.exe
FirewallRules: [{A664F6A7-F8DF-46C3-ADF7-7EADEF39BFFD}] => D:\downloads\ipcamera.exe
FirewallRules: [{A3107512-52C3-4453-BF45-50B897B15B2D}] => D:\downloads\ipcamera.exe
FirewallRules: [{A6BA4365-0114-476F-AE8A-685CABE4A04E}] => C:\Program Files (x86)\Sonos\Sonos.exe
FirewallRules: [{EC965FC9-3458-411B-9BA0-F3C05781FF71}] => C:\Program Files (x86)\Sonos\Sonos.exe
FirewallRules: [{1207813A-1864-4BD6-BF56-7E9DFF16E0DF}] => D:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{AA9BC20D-3AEF-4F0F-8146-B8E0978C1BD0}] => D:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{169BEF8E-B443-4177-B9A6-1AF00E7CC576}] => D:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{A94DCA6B-2A4F-43C5-B07B-E921475A3CBA}] => D:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{E9824D28-25B0-46C8-8961-FB4AE80CA706}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{7CAF28B9-62A7-4D9D-98B0-EE1BEE5F0A24}] => C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{E26B86CD-E592-4318-B6C1-C16C3FD3A9C0}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{0E0B23B6-891A-47A3-9B4B-5DEBCF0018C0}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{33B71DCB-D5B8-4729-A45F-3308C7EAB4EA}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{60B31692-66A4-41A7-BD80-53045B171B67}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{C6737FEF-D9E8-453E-9E17-8300B94C3B63}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{E9D95019-C9B3-4C11-827B-017ABAA7F645}] => D:\Program Files (x86)\Origin Games\Battlefield 1\bf1Trial.exe
FirewallRules: [{0FFC6FC5-BA8E-4F8F-B1C9-51411C81D8EC}] => D:\Program Files (x86)\Origin Games\Battlefield 1\bf1Trial.exe
FirewallRules: [{F80E74D6-7EB8-445A-B0BB-8B0DA3FFA635}] => D:\Program Files (x86)\Origin Games\Battlefield 1\bf1.exe
FirewallRules: [{5ED17D8C-5C4A-44D0-B2D5-8238A3C8A816}] => D:\Program Files (x86)\Origin Games\Battlefield 1\bf1.exe
FirewallRules: [{2F9098A2-10BD-4570-B497-917A7F5F3C89}] => C:\Program Files\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{81163227-44AC-4DF8-8B8A-187232D10F4D}] => C:\Program Files\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{DBCA294F-2289-432B-88DC-7D5F02963128}] => C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{76BB2E00-270F-4D75-BA69-679419EBFB77}] => C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{8592047B-22CC-4908-898F-845093143949}] => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
FirewallRules: [{B8A70BF0-8758-41CB-BB50-321207863369}] => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
DomainProfile\AuthorizedApplications: [C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe] => Enabled:Logitech Harmony Remote Software 7
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe] => Enabled:Logitech Harmony Remote Software 7
==================== Wiederherstellungspunkte =========================
ACHTUNG: Systemwiederherstellung ist deaktiviert
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (01/06/2017 02:33:50 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (01/06/2017 01:56:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x254c
Startzeit der fehlerhaften Anwendung: 0x01d2681c580e2f6c
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: c265cc5f-0bb2-4fab-a72c-f1027957e1e5
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge
Error: (01/06/2017 01:56:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x254c
Startzeit der fehlerhaften Anwendung: 0x01d2681c580e2f6c
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 47ab66ea-b08e-4024-aa75-90f7527aef09
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge
Error: (01/06/2017 11:32:14 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {7e47b561-971a-46e6-96b9-696eeaa53b2a}
Generatorname: MSMQ Writer (MSMQ)
Generatorinstanzname: MSMQ Writer (MSMQ)
Generatorinstanz-ID: {3cb98c96-a818-42af-aa2e-4a5ec40e9e2b}
Error: (01/06/2017 11:32:14 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {3eeb5246-ee59-4e98-9c9f-febc2f8d203e}
Error: (01/06/2017 10:50:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x45f0
Startzeit der fehlerhaften Anwendung: 0x01d268025bc9407e
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 880be25f-481a-486d-882b-6417ec77f9a9
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge
Error: (01/06/2017 10:50:49 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x45f0
Startzeit der fehlerhaften Anwendung: 0x01d268025bc9407e
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: a1929221-75d4-40cc-aab9-82a959c22e21
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge
Error: (01/06/2017 09:30:53 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {7e47b561-971a-46e6-96b9-696eeaa53b2a}
Generatorname: MSMQ Writer (MSMQ)
Generatorinstanzname: MSMQ Writer (MSMQ)
Generatorinstanz-ID: {3cb98c96-a818-42af-aa2e-4a5ec40e9e2b}
Error: (01/06/2017 09:30:53 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {3eeb5246-ee59-4e98-9c9f-febc2f8d203e}
Error: (01/05/2017 12:47:36 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {7e47b561-971a-46e6-96b9-696eeaa53b2a}
Generatorname: MSMQ Writer (MSMQ)
Generatorinstanzname: MSMQ Writer (MSMQ)
Generatorinstanz-ID: {3cb98c96-a818-42af-aa2e-4a5ec40e9e2b}
Systemfehler:
=============
Error: (01/08/2017 02:28:08 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: Der Server "{784E29F4-5EBE-4279-9948-1E8FE941646D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (01/08/2017 02:27:08 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Plattformdienst für verbundene Geräte" wurde mit folgendem Fehler beendet:
Unbekannter Fehler
Error: (01/08/2017 02:26:13 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: Der Name "WORKGROUP :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.178.82
registriert werden. Der Computer mit IP-Adresse 192.168.178.32 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.
Error: (01/08/2017 02:25:23 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: Der Name "WORKGROUP :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.178.82
registriert werden. Der Computer mit IP-Adresse 192.168.178.32 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.
Error: (01/08/2017 02:25:08 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (01/08/2017 02:25:07 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (01/08/2017 02:25:07 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (01/08/2017 02:25:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "tib_mounter" wurde aufgrund folgenden Fehlers nicht gestartet:
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
Error: (01/08/2017 02:24:34 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
Es wird bereits eine Instanz des Dienstes ausgeführt.
Error: (01/08/2017 02:24:04 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
CodeIntegrity:
===================================
Date: 2017-01-07 12:06:48.541
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2017-01-07 12:06:43.850
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2017-01-06 13:56:57.557
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2017-01-06 13:56:49.484
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2017-01-06 10:50:48.776
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2017-01-06 10:50:44.782
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2017-01-01 15:48:50.507
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2016-12-13 11:22:50.319
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2016-12-13 11:22:49.827
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2016-12-13 11:22:40.968
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 16%
Installierter physikalischer RAM: 16333.91 MB
Verfügbarer physikalischer RAM: 13701.66 MB
Summe virtueller Speicher: 18765.91 MB
Verfügbarer virtueller Speicher: 16031.35 MB
==================== Laufwerke ================================
Drive c: (System) (Fixed) (Total:118.7 GB) (Free:21.74 GB) NTFS
Drive d: (Programme) (Fixed) (Total:238.47 GB) (Free:93.05 GB) NTFS
Drive e: (Dateien) (Fixed) (Total:133.02 GB) (Free:77.23 GB) NTFS
Drive f: (Media) (Fixed) (Total:105.46 GB) (Free:90.52 GB) NTFS
Drive g: (Serien) (Fixed) (Total:1863.01 GB) (Free:119.32 GB) NTFS
Drive u: (music) (Network) (Total:2746.22 GB) (Free:531.47 GB) NTFS
Drive v: (video) (Network) (Total:2746.22 GB) (Free:531.47 GB) NTFS
Drive w: (photo) (Network) (Total:2746.22 GB) (Free:531.47 GB) NTFS
Drive x: (BackupWin) (Network) (Total:2746.22 GB) (Free:531.47 GB) NTFS
Drive y: (XXX) (Network) (Total:2746.22 GB) (Free:531.47 GB) NTFS
Drive z: (Downloads) (Network) (Total:2746.22 GB) (Free:531.47 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: 93C8D357)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=118.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 1C84C816)
Partition 1: (Active) - (Size=238.5 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 729954F6)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================