Malware eingefangen? Suchergebnisse im Browser fehlerhaft.

Kasrello · 12.08.2017, 19:27

Hallo,

brauche mal Hilfe, komme selbst nicht weiter.

Bei jedem Suchvorgang, egal mit welchem Browser(Firefox,Chrome, Internetexplorer) verrutscht das Suchergebnis nach unten. Das heißt das ursprünglich gesuchte wird für 1 sec oben angezeigt, bevor es dann nach unten rutscht, zum anklicken kommt man erst gar nicht. Oben werden dann ausschließlich Suchergebnisse mit Werbung angezeigt.

Hijack This findet nichts außergewöhnliches, Adwarecleaner hat Einträge gefunden, bei den ich mir nicht sicher bin, ob ich die einfach unter angegebenem Ort löschen kann.

Ich poste schon mal hier den Logfile von Adware.

Danke im Voraus

# AdwCleaner 7.0.1.0 - Logfile created on Sat Aug 12 17:31:39 2017
# Updated on 2017/05/08 by Malwarebytes
# Database: 08-11-2017.1
# Running on Windows 8.1 (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

PUP.Optional.APNToolBar.Gen, APNMCP

***** [ Folders ] *****

Adware.Elex, C:\Windows\System32\config\systemprofile\AppData\Local\SearchProtect
Adware.Elex, C:\Windows\SysWOW64\config\systemprofile\AppData\Local\SearchProtect
PUP.Optional.Legacy, C:\Windows\System32\config\systemprofile\AppData\Local\YSearchUtil
PUP.Optional.Legacy, C:\Windows\SysWOW64\config\systemprofile\AppData\Local\YSearchUtil
PUP.Optional.Legacy, C:\Users\Marlies\AppData\Local\YSearchUtil
PUP.Optional.Legacy, C:\Program Files (x86)\Yahoo!\yset
PUP.Optional.Ask, C:\ProgramData\AskPartnerNetwork
PUP.Optional.Ask, C:\ProgramData\Application Data\AskPartnerNetwork
PUP.Optional.Ask, C:\Program Files (x86)\AskPartnerNetwork
PUP.Optional.Ask, C:\Users\All Users\AskPartnerNetwork
PUP.Optional.Ask, C:\Users\Marlies\AppData\Local\AskPartnerNetwork
Rogue.ForcedExtension, C:\ProgramData\apn
Rogue.ForcedExtension, C:\ProgramData\Application Data\apn
Rogue.ForcedExtension, C:\Users\All Users\apn
Rogue.ForcedExtension, C:\Users\Marlies\AppData\Local\Temp\apn
PUP.Optional.FileViewPro, C:\Users\Marlies\AppData\Local\FileViewPro
PUP.Optional.FileViewPro, C:\Users\Marlies\AppData\Local\Temp\FileViewPro

***** [ Files ] *****

PUP.Optional.Legacy, C:\Users\All Users\Desktop\simplicheck.lnk
PUP.Optional.Legacy, C:\Users\Public\Desktop\simplicheck.lnk

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cloudfront.net
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cloudfront.net
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\d31bfnnwekbny6.cloudfront.net
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\d31bfnnwekbny6.cloudfront.net
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\key-find.com
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.key-find.com
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Internet Explorer\DOMStorage\izito.de
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Internet Explorer\DOMStorage\www.izito.de
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! SearchSet
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5350-4500-76A7-A758B70C2300}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98FD652EB4839214E97B69DD8EEA1D29
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\930D9472A978D7A4EB16BF4DECB173B7
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8036C72171EF4ba46856BF57969F6A36
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A97C590397DCC454AA8923563BAB10E4
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CFA51B44D54927c4E9B7BC1D3FD1E49F
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3255D95681398614190EDF0A4F3F77DB
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DB42320A8525634AA089F0BEC86473B
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DFE9F0BD163D827438CB6AD6B100EC48
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\499E8534DA7E759419D2048CB780D3D5
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15E6C514FEFC09f45BAFAAE1D7546ED4
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89BB7852687BDC34B9A81E01C7FF9173
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F739A19A8327dc64C9A8B641A9E89646
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71E54748EDD3dc1468548785DC856EDA
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22468B0D6050b2e46B9C4B67A8F59577
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D14A7F65792054F418578C78367D13F7
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\754590DD06DE8d249B526503432F99D4
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B08932C78B697C244BE7BA3E6FF09B62
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CC5A38A64D6098468BC8395BA0EFF03
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2251BF05A2F606d43BB064BD63CBD87E
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CBC85D72B148084ABE8C2F072F781F4
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\62255E52F19EC97429A42D59D49024FA
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AEB93799E8B47D14CA356E4343D632A4
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5DCE3C04E576AD15F972B67D0725120C
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE7C2A75DF08824E9CEFDE20F655BD9
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\158D6D9E3FE81fa428925F22ACB3A965
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CDF313E9B28c944FBC7579CF4949414
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8DF9A1AC557F56c49B56F6B83E293C15
PUP.Optional.Legacy, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | ApnTBMon
PUP.Optional.Legacy, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 | ApnTBMon
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaaiabcopkplhgaedhbloeejhhankf
PUP.Optional.Ask, [Key] - HKU\.DEFAULT\Software\AskPartnerNetwork
PUP.Optional.Ask, [Key] - HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\AskPartnerNetwork
PUP.Optional.Ask, [Key] - HKU\S-1-5-18\Software\AskPartnerNetwork
PUP.Optional.Ask, [Key] - HKCU\Software\AskPartnerNetwork
PUP.Optional.SlimCleanerPlus, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
PUP.Optional.SlimCleanerPlus, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************

C:/AdwCleaner/AdwCleaner[S0].txt - [6178 B] - [2015/3/6 19:56:16]

M-K-D-B · 12.08.2017, 21:00

In Kürze meldet sich ein Helfer bei dir.

Tician · 13.08.2017, 01:59

Hallo und

Bevor wir beginnen beachte bitte Folgendes:

Installiere/Deinstalliere bitte nichts während wir hier an deinem Problem arbeiten
Speicher alle unsere Tools auf dem Desktop ab (das ist später wichtig!)
Poste die Logs immer in CODE-Tags (#-Button), zur Not die Logs einfach auf mehrere Posts aufteilen
Falls vorhanden: Logs die jünger als 1 Monat sind bitte posten
Verwende keine weiteren Tools ohne Aufforderung
Wichtig: Auch wenn dein Problem behoben scheint kann dein System noch infiziert sein, arbeite also bitte weiter bis ich dir ein "Clean" gebe

Hinweis:
Ich kann Dir niemals eine Garantie geben, dass wir alle schädlichen Dateien finden werden.
Eine Formatierung ist meist der schnellere und immer der sicherste Weg, aber auch nur bei wirklicher Malware empfehlenswert.
Adware & Co. können wir sehr gut entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Du mein clean bekommst

Schritt 1:

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Kasrello · 13.08.2017, 14:14

Hallo,

danke für die Antwort.

Ich poste die gewünschten txt´s

Danke schon mal wieder im Voraus für die Mühe.

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12-08-2017
durchgeführt von M (Administrator) auf KASRELLO (13-08-2017 14:04:52)
Gestartet von C:\Users\M\Downloads
Geladene Profile: M(Verfügbare Profile: M & Ms_2)
Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(CrossLoop) C:\Users\M\AppData\Local\CrossLoop\CrossLoopService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe
() C:\Program Files (x86)\FWdriver_v\POSHXMain.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McTkSchedulerService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Nero AG) C:\Program Files (x86)\Nero\Nero TuneItUp\ServiceProvider.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Dolby Laboratories Inc.) C:\Program Files\Dolby Digital Plus\ddp.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
() C:\Program Files (x86)\FWdriver_v\POSHX.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Sony Ericsson Mobile Communications AB) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe
() C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe
(PIXELA CORPORATION) C:\Program Files (x86)\PIXELA\Everio MediaBrowser\MBCameraMonitor.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.587\SSScheduler.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Telegram Messenger LLP) C:\Users\M\AppData\Roaming\Telegram Desktop\Telegram.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Trend Micro Inc.) C:\Downloads\downloads\HiJackThis204.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(TeamViewer GmbH) C:\Users\M\AppData\Local\Temp\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Users\M\AppData\Local\Temp\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Users\M\AppData\Local\Temp\TeamViewer\tv_x64.exe
(TeamViewer GmbH) C:\Users\M\AppData\Local\Temp\TeamViewer\TeamViewer_Desktop.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13648600 2013-08-29] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-30] (Realtek Semiconductor)
HKLM\...\Run: [POSHX] => C:\Program Files (x86)\FWdriver_v\POSHX.exe [647168 2013-09-03] ()
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2774256 2013-08-01] (Synaptics Incorporated)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2779024 2011-03-14] (CANON INC.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111576 2013-08-05] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [490760 2013-09-10] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-11] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2013-08-01] (CyberLink Corp.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [919032 2017-08-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1719184 2015-09-23] (APN)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [97512 2017-06-13] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2086240 2015-04-28] (Wondershare)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe [1960248 2015-10-26] ()
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1612920 2011-08-04] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [937984 2015-10-01] (AVM Berlin)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1
HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\Run: [Sony Ericsson PC Companion] => C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [772096 2009-06-18] (Sony Ericsson Mobile Communications AB)
HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [29544576 2016-08-17] (Skype Technologies S.A.)
HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\Run: [AudialsNotifier] => C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe [4535192 2016-03-15] ()
HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\MountPoints2: {497c22ea-3e37-11e4-82a5-5c514f28d736} - "F:\Startme.exe" 
HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\MountPoints2: {8065d9a5-3ac9-11e4-82a4-5c514f28d736} - "F:\iLinker.exe" 
HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\MountPoints2: {b6fe1c45-f46e-11e6-8336-5c514f28d736} - "F:\pushinst.exe" 
Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter "C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ImageBrowser EX Agent.lnk [2014-12-21]
ShortcutTarget: ImageBrowser EX Agent.lnk -> C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MBCameraMonitor.lnk [2014-12-22]
ShortcutTarget: MBCameraMonitor.lnk -> C:\Program Files (x86)\PIXELA\Everio MediaBrowser\MBCameraMonitor.exe (PIXELA CORPORATION)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-07-27]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.587\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2014-05-15]
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\simplicheck.lnk [2017-05-03]
ShortcutTarget: simplicheck.lnk -> C:\Program Files (x86)\simplitec\simplicheck\simplicheck.exe (simplitec)
Startup: C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2016-12-26]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 80.69.96.12 81.210.129.4
Tcpip\..\Interfaces\{471AEB88-C6B2-4C00-9669-3CC3EE935AD6}: [DhcpNameServer] 192.168.192.1
Tcpip\..\Interfaces\{C54B9ABE-D820-4EAF-86DC-7FF0424B0FD3}: [DhcpNameServer] 80.69.96.12 81.210.129.4
Tcpip\..\Interfaces\{D8F505BE-40F8-41DB-87A6-F6B74D4C7B56}: [DhcpNameServer] 80.69.96.12 81.210.129.4

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = ?type=hppp
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = ?type=hppp
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = ?type=hppp
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = ?type=hppp
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://rp-online.de/
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-708953619-3332147771-3993505364-1001 -> {3AB6D324-E6BD-4DC3-9ECB-B4FABD890450} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
BHO: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-26] (Intel Security)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20] (IvoSoft)
BHO-x32: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-26] (Intel Security)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
BHO-x32: Wondershare Video Converter Ultimate 7.1.0 -> {451C804F-C205-4F03-B48E-537EC94937BF} -> C:\ProgramData\Wondershare\Video Converter Ultimate\WSBrowserAppMgr.dll [2015-10-26] (Wondershare)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-13] (Oracle Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-13] (Oracle Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.)
Toolbar: HKLM - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-26] (Intel Security)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM-x32 - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-26] (Intel Security)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)
Handler-x32: http - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: http - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: https - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: https - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: ipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei
Handler-x32: msdaipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  Keine Datei

FireFox:
========
FF DefaultProfile: vy7huq4o.default
FF ProfilePath: C:\Users\M\AppData\Roaming\Mozilla\Firefox\Profiles\vy7huq4o.default [2017-08-12]
FF Extension: (Avira Browser Safety) - C:\Users\M\AppData\Roaming\Mozilla\Firefox\Profiles\vy7huq4o.default\Extensions\abs@avira.com.xpi [2017-08-10]
FF HKLM-x32\...\Firefox\Extensions: [WSVCU@Wondershare.com] - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com
FF Extension: (Wondershare Video Converter Ultimate) - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com [2015-11-15] [ist nicht signiert]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll [2016-04-30] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-30] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2011-04-20] (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-08-08] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-08-08] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-13] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)

Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.search.ask.com/?gct=hp
CHR StartupUrls: Default -> "hxxp://www.rp-online.de/"
CHR Profile: C:\Users\M\AppData\Local\Google\Chrome\User Data\Default [2017-08-13]
CHR Extension: (Google Docs) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-05]
CHR Extension: (Google Drive) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Google-Suche) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (Adobe Acrobat) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-06-05]
CHR Extension: (Google Docs Offline) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Google Mail) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]
CHR Extension: (Chrome Media Router) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-10]
CHR Extension: (Mein BMI - Shopping Angebote) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppohoeonaecgahebikkipfeoojbccoan [2017-04-09]
CHR HKLM\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2015-10-01]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-708953619-3332147771-3993505364-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2015-10-01]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [npdicihegicnhaangkdmcgbjceoemeoo] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2016-12-26] (Adobe Systems) [Datei ist nicht signiert]
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [1128432 2017-08-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [490968 2017-08-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [490968 2017-08-05] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1525240 2017-08-05] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [206224 2015-09-23] (APN LLC.)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [377976 2017-06-13] (Avira Operations GmbH & Co. KG)
S4 AvmSwitchUsb; C:\Program Files (x86)\avmwlanstick\AVMSwitchUsb.exe [125440 2015-10-01] () [Datei ist nicht signiert]
R2 CrossLoopService; C:\Users\M\AppData\Local\CrossLoop\CrossLoopService.exe [569072 2012-01-06] (CrossLoop)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [74712 2013-03-11] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [316376 2013-03-11] (CyberLink)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-08-08] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-08-29] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-08-08] (Intel Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.587\McCHSvc.exe [404376 2017-06-30] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2013-08-23] ()
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
R2 POSHXService; C:\Program Files (x86)\FWdriver_v\POSHXMain.exe [114688 2012-12-26] () [Datei ist nicht signiert]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2013-03-06] ()
R2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [1001920 2017-06-26] (McAfee, Inc.)
R2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [16928 2017-06-26] (McAfee, Inc.)
S3 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [87760 2017-06-26] (McAfee, Inc.)
S3 tvnserver; C:\Users\M\AppData\Local\CrossLoop\tvnserver.exe [814080 2010-07-21] (GlavSoft LLC.) [Datei ist nicht signiert]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3667696 2013-08-23] (Intel® Corporation)
S2 InstallerService; "C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AirplaneModeHID; C:\Windows\System32\drivers\AirplaneModeHID.sys [30512 2013-09-04] (Elitegroup Computer System)
R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [60920 2017-06-19] (Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [173784 2017-08-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [167464 2017-08-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [44488 2017-03-03] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2015-10-01] (AVM Berlin)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [88488 2017-03-03] (Avira Operations GmbH & Co. KG)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132920 2013-04-23] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1386296 2013-08-19] (Motorola Solutions, Inc.)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R3 fwlanusb6_860; C:\Windows\system32\DRIVERS\fwlanusb6_860.sys [2234912 2015-10-01] (AVM GmbH)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [117192 2013-08-29] (Intel Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-08-08] (Intel Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3589600 2013-09-25] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
S3 s1018bus; C:\Windows\System32\drivers\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)
S3 s1018mdfl; C:\Windows\system32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)
S3 s1018mdm; C:\Windows\system32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)
S3 s1018mgmt; C:\Windows\system32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)
S3 s1018nd5; C:\Windows\system32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)
S3 s1018obex; C:\Windows\system32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)
S3 s1018unic; C:\Windows\System32\drivers\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)
R3 SensorsAlsDriver; C:\Windows\System32\drivers\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2013-08-01] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-01] (Synaptics Incorporated)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
R3 WsAudio_Device; C:\Windows\system32\drivers\VirtualAudio.sys [31080 2015-02-27] (Wondershare)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-08-13 14:01 - 2017-08-13 14:02 - 015747576 _____ (TeamViewer GmbH) C:\Users\M\Downloads\TeamViewer_Setup.exe
2017-08-12 21:01 - 2017-08-12 21:03 - 000045799 _____ C:\Users\M\Downloads\Addition.txt
2017-08-12 20:59 - 2017-08-13 14:05 - 000032080 _____ C:\Users\M\Downloads\FRST.txt
2017-08-12 20:58 - 2017-08-13 14:04 - 000000000 ____D C:\FRST
2017-08-12 20:57 - 2017-08-12 20:57 - 002395648 _____ (Farbar) C:\Users\M\Downloads\FRST64.exe
2017-08-12 19:28 - 2017-08-12 19:28 - 008185288 _____ (Malwarebytes) C:\Users\M\Downloads\adwcleaner_7.0.1.0 (1).exe
2017-08-12 19:27 - 2017-08-12 19:27 - 008185288 _____ (Malwarebytes) C:\Users\M\Downloads\adwcleaner_7.0.1.0.exe
2017-08-12 19:11 - 2017-08-12 19:11 - 001529352 _____ C:\Users\M\Downloads\HijackThis - CHIP-Installer.exe
2017-08-09 16:24 - 2017-08-09 16:24 - 003376660 _____ C:\Users\M\Downloads\SpeisekartePlatonWeb.pdf
2017-08-07 12:51 - 2017-08-07 12:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bluetooth Devices
2017-07-27 23:00 - 2017-07-27 23:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2017-07-27 23:00 - 2017-07-27 23:00 - 000000000 ____D C:\ProgramData\McAfee Security Scan
2017-07-26 10:51 - 2017-07-26 10:51 - 000021308 _____ C:\Users\M\Downloads\_26-07-2017_1051.pdf
2017-07-21 11:11 - 2017-07-21 11:11 - 000143952 _____ C:\Users\M\Downloads\1500628271864.pdf
2017-07-21 11:05 - 2017-07-21 11:05 - 000117974 _____ C:\Users\M\Downloads\2017-07-10.pdf
2017-07-20 23:45 - 2017-07-20 23:45 - 000000992 _____ C:\Users\M\Downloads\ (kasrello) - Verknüpfung.lnk
2017-07-18 19:06 - 2017-07-18 19:06 - 000003176 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-708953619-3332147771-3993505364-1001
2017-07-15 08:10 - 2017-07-15 08:10 - 000021569 _____ C:\Users\M\Downloads\15-07-2017_0807.pdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-08-13 13:44 - 2014-05-20 17:06 - 000000000 ____D C:\Users\M\AppData\Roaming\ClassicShell
2017-08-13 13:19 - 2015-04-21 09:19 - 000000000 ____D C:\Users\M\AppData\Roaming\Telegram Desktop
2017-08-13 13:17 - 2014-05-15 15:48 - 000003938 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{D79CCDCC-5C13-412F-9EFD-1CDF8B9C287B}
2017-08-12 19:31 - 2015-03-06 21:02 - 000000000 ____D C:\AdwCleaner
2017-08-12 18:29 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness
2017-08-12 18:28 - 2014-06-04 17:29 - 000000000 ____D C:\Users\M\AppData\Roaming\Skype
2017-08-12 12:56 - 2017-02-16 19:30 - 000000000 ____D C:\Users\M\AppData\LocalLow\Mozilla
2017-08-11 16:39 - 2014-05-15 15:43 - 000003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-708953619-3332147771-3993505364-1001
2017-08-11 16:34 - 2017-06-01 14:20 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-08-11 07:21 - 2014-05-15 15:39 - 000000000 __RDO C:\Users\M\SkyDrive
2017-08-11 07:20 - 2017-02-11 18:16 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-08-11 07:19 - 2014-05-15 15:39 - 000000000 ____D C:\Users\M\Documents\Youcam
2017-08-11 07:18 - 2016-06-25 11:01 - 000000436 _____ C:\Windows\Tasks\Nero TuneItUp PRO (Tray).job
2017-08-10 17:03 - 2013-08-22 17:36 - 000000000 ___HD C:\Program Files\WindowsApps
2017-08-10 12:09 - 2014-05-15 15:38 - 000000000 ____D C:\Users\M
2017-08-09 17:32 - 2014-05-21 20:42 - 000000000 ____D C:\ProgramData\CanonIJPLM
2017-08-09 09:58 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
2017-08-09 09:44 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
2017-08-08 20:24 - 2014-06-02 09:25 - 003854848 ___SH C:\Users\M\Desktop\Thumbs.db
2017-08-08 15:30 - 2017-05-10 20:23 - 000002211 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-08 15:30 - 2017-05-10 20:23 - 000002199 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-08-08 15:00 - 2014-12-30 11:19 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-08-07 12:47 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-08-07 12:46 - 2013-08-22 15:25 - 000524288 ___SH C:\Windows\system32\config\BBI
2017-08-05 15:46 - 2014-06-01 22:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-08-05 15:30 - 2014-06-01 22:26 - 000173784 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2017-08-05 15:30 - 2014-06-01 22:26 - 000167464 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2017-08-02 00:03 - 2015-06-21 15:34 - 000000000 ____D C:\Users\M\AppData\Local\.elfohilfe
2017-07-30 14:46 - 2015-05-04 09:57 - 000000000 ____D C:\Users\M\Downloads\Telegram Desktop
2017-07-27 23:00 - 2016-05-10 23:23 - 000000000 ____D C:\Program Files\McAfee Security Scan
2017-07-27 23:00 - 2016-04-30 19:15 - 000001984 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2017-07-25 08:50 - 2013-09-05 21:28 - 000767518 _____ C:\Windows\system32\perfh007.dat
2017-07-25 08:50 - 2013-09-05 21:28 - 000160240 _____ C:\Windows\system32\perfc007.dat
2017-07-25 08:50 - 2013-09-05 21:13 - 001783084 _____ C:\Windows\system32\PerfStringBackup.INI
2017-07-21 15:33 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\NDF
2017-07-20 04:56 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache
2017-07-19 18:16 - 2013-09-07 12:35 - 000000000 ____D C:\ProgramData\Package Cache
2017-07-19 18:10 - 2013-08-22 16:44 - 000397024 _____ C:\Windows\system32\FNTCACHE.DAT
2017-07-19 17:57 - 2014-12-11 00:09 - 000000000 ____D C:\Windows\system32\appraiser
2017-07-19 17:56 - 2016-04-30 19:15 - 000000000 ____D C:\Program Files\TrueKey
2017-07-18 19:06 - 2016-04-18 22:43 - 000002366 _____ C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2017-07-18 19:06 - 2014-05-20 19:09 - 000003184 _____ C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-708953619-3332147771-3993505364-1001

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-12-21 13:17 - 2016-12-21 13:17 - 007680000 _____ () C:\Program Files (x86)\GUTE6BF.tmp
2014-06-17 18:46 - 2017-01-09 16:52 - 000119808 _____ () C:\Users\M\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-09-07 12:29 - 2013-09-07 12:29 - 000000000 ____H () C:\ProgramData\DP45977C.lfl
2013-09-12 05:59 - 2013-09-12 05:59 - 000000032 _____ () C:\ProgramData\Temp.log

Einige Dateien in TEMP:
====================
2016-11-15 16:20 - 2016-11-15 16:20 - 011127352 _____ (Albelli                                                     ) C:\Users\M\AppData\Local\Temp\0BB5CC15-AA68-4718-93A1-822DCC2015E9.exe
2014-06-01 22:26 - 2014-08-07 16:50 - 000000000 ____D () C:\Users\M\AppData\Local\Temp\avgnt.exe
2016-11-28 23:54 - 2016-11-28 23:54 - 012545632 _____ (Albelli                                                     ) C:\Users\M\AppData\Local\Temp\F177397B-C751-4B7D-BE67-6A8FD23C9C48.exe
2016-08-04 23:38 - 2011-02-07 11:09 - 000850320 ____N (CANON INC.) C:\Users\M\AppData\Local\Temp\MSETUP4.EXE
2016-08-04 23:41 - 2011-03-23 06:48 - 000349592 ____R (CANON INC.) C:\Users\M\AppData\Local\Temp\uninstall.exe
2017-04-08 22:12 - 2017-04-08 22:12 - 013705448 _____ (Nero AG                                                     ) C:\Users\M\AppData\Local\Temp\Update_Simplitec_PowerSuite_Auto.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-08-08 15:55

==================== Ende von FRST.txt ============================

Hier der Nächste:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-08-2017
durchgeführt von M (13-08-2017 14:06:37)
Gestartet von C:\Users\M\Downloads
Windows 8.1 (Update) (X64) (2014-05-15 13:38:24)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-708953619-3332147771-3993505364-500 - Administrator - Disabled)
Gast (S-1-5-21-708953619-3332147771-3993505364-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-708953619-3332147771-3993505364-1003 - Limited - Enabled)
M(S-1-5-21-708953619-3332147771-3993505364-1001 - Administrator - Enabled) => C:\Users\M
M_2 (S-1-5-21-708953619-3332147771-3993505364-1004 - Limited - Enabled) => C:\Users\M_2

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.012.20095 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Albelli Fotobücher (HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\{EE20E438-B675-4421-AB07-928F0EC9FB22}_is1) (Version: 11.1.1.1680 - Albelli)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.29.32 - Avira Operations GmbH & Co. KG)
Avira Connect (HKLM-x32\...\{661C79C2-D156-419C-81CA-D1A2523B0841}) (Version: 1.2.91.10326 - Avira Operations GmbH & Co. KG) Hidden
Avira Connect (HKLM-x32\...\{dd9049b8-31d1-40bd-8c8c-97a7b087a78f}) (Version: 1.2.91.10326 - Avira Operations GmbH & Co. KG)
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 06.20.07 - AVM Berlin)
calibre (HKLM-x32\...\{D47B7229-AC24-4D79-96AB-880649FFC892}) (Version: 2.19.0 - Kovid Goyal)
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version:  - )
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.1 - Canon Inc.)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version:  - )
Canon MG5300 series Benutzerregistrierung (HKLM-x32\...\Canon MG5300 series Benutzerregistrierung) (Version:  - )
Canon MG5300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5300_series) (Version:  - Canon Inc.)
Canon MG5300 series On-screen Manual (HKLM-x32\...\Canon MG5300 series On-screen Manual) (Version:  - )
Canon MP Navigator EX 3.0 (HKLM-x32\...\MP Navigator EX 3.0) (Version:  - )
Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version:  - )
Canon MP490 series Benutzerregistrierung (HKLM-x32\...\Canon MP490 series Benutzerregistrierung) (Version:  - )
Canon MP490 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP490_series) (Version:  - )
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )
Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version:  - )
Canon Utilities Digital Photo Professional 3.11 (HKLM-x32\...\Digital Photo Professional) (Version: 3.11.10.0 - Canon Inc.)
Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.11.0.1 - Canon Inc.)
Canon Utilities ImageBrowser EX (HKLM-x32\...\ImageBrowser EX) (Version: 1.5.0.6 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.23.47 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.10.0.0 - Canon Inc.)
Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version:  - )
Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft)
CyberLink Home Cinema 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)
CyberLink PowerDirector 11 (HKLM\...\{551F492A-01B0-4DC4-866F-875EC4EDC0A8}) (Version: 11.0.0.3215 - Ihr Firmenname) Hidden
CyberLink PowerRecover (HKLM\...\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.0913 - CyberLink Corp.) Hidden
CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.0913 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Digital Photo Navigator 1.5 (HKLM-x32\...\{CF9CD37C-E29A-11D5-AE3D-005004B8E30C}) (Version:  - )
Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.3.2.2 - Dolby Laboratories Inc)
DriverTools 1.0 (HKLM-x32\...\DriverTools) (Version: 1.0 - Huawei Technologies Co.,Ltd)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 18.1.22140 - Landesfinanzdirektion Thüringen)
Everio MediaBrowser (HKLM-x32\...\{5CA03ECF-B4A6-464B-9F5D-64D8B61B083F}) (Version: 1.00.013 - PIXELA)
Express Burn (HKLM-x32\...\ExpressBurn) (Version: 4.78 - NCH Software)
FlexPoints 2.0 (HKLM-x32\...\{F460E5B9-E678-484B-A2E8-BFDF93A57A03}) (Version: 1.00.0000 - Weight Watchers)
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalerija (HKLM-x32\...\{BE2DE42A-6696-4EE7-9E59-B9385F339DD3}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fotótár (HKLM-x32\...\{8D977EAA-DF3E-4054-A98D-F27AEB0248DD}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com)
Galerie de photos (HKLM-x32\...\{F4D99A13-F63A-4FC1-8799-CFFDB78DDFB3}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.90 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
inSSIDer Home (HKLM-x32\...\{9E54E4AE-B67A-4925-8E92-0E1F9817FD73}) (Version: 3.1.2.1 - MetaGeek, LLC)
Intel Security True Key (HKLM\...\TrueKey) (Version: 4.19.108.1 - Intel Security)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.13.1706 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3282 - Intel Corporation)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (HKLM\...\{252CC716-1EDE-4C7F-8881-15B7AEBF8F5C}) (Version: 16.5.0.0096 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 3.0.1335.5) (HKLM\...\{302600C1-6BDF-4FD1-1307-148929CC1385}) (Version: 3.1.1307.0362 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{72814a2c-2e03-4a50-b30a-43e7884b3934}) (Version: 16.5.1 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
Junk Mail filter update (HKLM-x32\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MAGIX Foto Designer 7 (HKLM\...\{FEF04BA1-5C1A-4445-8EB7-B2E4D2FFCAC7}) (Version: 7.0.1.1 - MAGIX AG) Hidden
MAGIX Foto Designer 7 (HKLM-x32\...\MAGIX_{FEF04BA1-5C1A-4445-8EB7-B2E4D2FFCAC7}) (Version: 7.0.1.1 - MAGIX AG)
Mahjongg - Ancient Mayas (HKLM-x32\...\{18D52937-2121-49FA-B734-EA1EF38AA04F}_is1) (Version:  - cerasus.media GmbH)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.587.1 - McAfee, Inc.)
MediaCoder x64 0.8.43.5830 (HKLM\...\MediaCoder x64) (Version: 0.8.43.5830 - Mediatronic)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office 2000 Premium (HKLM-x32\...\{00000407-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2816 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{0FD2B9C6-DB91-48EA-9518-AB5B68CA1E28}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{3C5F91EF-5C0B-4D13-BCBE-0FC6FC3ED7F9}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{5B91D34E-B583-4E08-BB48-4F18086A0DB7}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{705C31EB-E0AB-4C1F-A834-993F9E08B085}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{7693587D-5D66-4208-ABEA-C370217D1D9B}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{8E038DF1-B140-46D6-9D82-1BDF8DC56764}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{E169436E-49D8-419B-A5C0-D245EAF99611}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 53.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 53.0.2 (x86 de)) (Version: 53.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 53.0.2.6333 - Mozilla)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
Music Recorder (HKLM-x32\...\{E3579DBA-00BA-4E32-AE90-63B6CDA30D56}) (Version: 14.0.62200.0 - Audials AG)
Nero 7 Essentials (HKLM-x32\...\{D34D82E0-4600-407B-9478-8506C1DD1031}) (Version: 7.02.3307 - Nero AG)
OLYMPUS Digital Camera Updater (HKLM-x32\...\{D18925CE-5AF9-4394-8EF7-1081FFE7E98B}) (Version: 1.2.0 - OLYMPUS IMAGING CORP.)
OLYMPUS Viewer 3 (HKLM-x32\...\{F0C70F68-E57F-4D76-A012-E20F8E12946E}) (Version: 1.4.1 - OLYMPUS IMAGING CORP.)
online-foto Bestellsoftware (HKLM-x32\...\online-foto Bestellsoftware) (Version: 5.1.5 - CEWE Stiftung u Co. KGaA)
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)
PDF Architect 2 Convert Module (HKLM-x32\...\{53434783-F9A7-4D64-B91A-05A3BF925D70}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 Create Module (HKLM-x32\...\{3D0D9604-0173-488D-9694-2638C44D7579}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 Edit Module (HKLM-x32\...\{8B0A956F-9BE6-495B-AF80-7B5B42061D79}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 Forms Module (HKLM-x32\...\{4CB8D214-0400-45FA-B084-AAB0C74AD032}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 Insert Module (HKLM-x32\...\{DD7BB68A-7D8A-4F62-806A-3424C2A170E7}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 OCR Module (HKLM-x32\...\{952E5B8F-82C2-46D1-B642-37B2635CE440}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 Review Module (HKLM-x32\...\{664D6EE3-9A35-4284-B9D2-80A509DF9295}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 Secure Module (HKLM-x32\...\{99E0C0D4-6746-44EE-A132-5E7E3D6FAAFB}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 View Module (HKLM-x32\...\{D691E998-CF53-4F6C-AC20-E4284660E0E7}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
PriMus Free 1.1 (Build 11020) (HKLM-x32\...\PriMus Free_is1) (Version: 1.1.0.11020 - Columbus Soft)
Raccolta foto (HKLM-x32\...\{FA6BC7A5-85B3-4DC2-825C-D508E386151A}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.30164 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7030 - Realtek Semiconductor Corp.)
Search App by Ask (HKLM-x32\...\{4F524A2D-5350-4500-76A7-A758B70C2300}) (Version: 12.35.0.284 - APN, LLC) <==== ACHTUNG
simplitec simplicheck (HKLM-x32\...\{183D780B-28F9-41BA-A2CB-605F324A5781}) (Version: 1.3.10.0 - simplitec GmbH)
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype™ 7.27 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.27.101 - Skype Technologies S.A.)
Sony Ericsson PC Companion 1.50.52 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 1.50.52 - Sony Ericsson)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.8.0 - Synaptics Incorporated)
Telegram Desktop version 1.1.19 (HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.1.19 - Telegram Messenger LLP)
WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 6.53 - NCH Software)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (HKLM\...\2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Yahoo Search Set (HKLM-x32\...\Yahoo! SearchSet) (Version:  - Yahoo Inc.)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-708953619-3332147771-3993505364-1001_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\M\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileCoAuthLib64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
ContextMenuHandlers1: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2013-09-10] (Cyberlink)
ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-08-05] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-16] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-16] (Alexander Roshal)
ContextMenuHandlers1-x32: [WondershareVideoConverterFileOpreation] -> {FEB746CA-95C2-485F-B386-C30D4E56D22E} => C:\Windows\SysWOW64\WSCM64.dll [2015-02-27] ()
ContextMenuHandlers2: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2013-09-10] (Cyberlink)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2013-08-26] (Intel Corporation)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-08-05] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers6: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\Windows\system32\StartMenuHelper64.dll [2014-04-20] (IvoSoft)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-16] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-16] (Alexander Roshal)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {145D433F-F4F5-4F0B-A64B-8C8291F19A6A} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-08-01] (Synaptics Incorporated)
Task: {45FD7644-A331-4E36-BCD1-DFC43A0CFAEA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {61A981C6-C35F-49A3-8E3D-54CB19B763E2} - System32\Tasks\Nero TuneItUp PRO (Tray) => C:\Program Files (x86)\Nero\Nero TuneItUp\ServiceProvider.exe [2016-06-06] (Nero AG)
Task: {7F880913-CCFC-4B27-B7C3-B781B2E5FFE7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {993A1863-842C-4EAC-8319-9713C2B9D95D} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2017-07-13] (Microsoft Corporation)
Task: {CCB5A282-43DA-4578-B841-CAF077C81C01} - System32\Tasks\{DD49092F-C446-4EEC-BD77-C4F3994ACAFA} => C:\Windows\system32\pcalua.exe -a E:\System\dx80a.exe -d E:\System
Task: {D56949F9-18CC-4B3E-9C54-796189BBE1A0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {D8795768-9D8C-47D4-8E00-6027B7D45D6D} - System32\Tasks\{802886A1-E095-435D-AADC-049F9EE278AA} => C:\Windows\system32\pcalua.exe -a C:\Users\M\AppData\Roaming\key-find\UninstallManager.exe -c  -ptid=cvs
Task: {E5A22EA6-4AC2-487C-8B07-531491916A09} - System32\Tasks\{C7994087-E7AF-4290-9F3C-979444759543} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Einfach Genial\EinfachGenial.exe" -d "C:\Program Files (x86)\Einfach Genial\"
Task: {EA9A4FAB-99BE-473F-A97F-327175694D43} - System32\Tasks\Dolby Selector => C:\Program Files\Dolby Digital Plus\ddp.exe [2013-08-08] (Dolby Laboratories Inc.)
Task: {ED45692D-0624-4FE1-845A-711B66075EE2} - System32\Tasks\Nero TuneItUp PRO => C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUp.exe [2016-06-06] (Nero AG)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Nero TuneItUp PRO (Tray).job => C:\Program Files (x86)\Nero\Nero TuneItUp\ServiceProvider.exe
Task: C:\Windows\Tasks\Nero TuneItUp PRO.job => C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUp.exe

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


ShortcutWithArgument: C:\Users\M\Desktop\CrossLoop Connect.lnk -> C:\Users\M\AppData\Local\CrossLoop\CrossLoopConnect.exe (CrossLoop) -> -ap=crossloop -port=5910 -udp=www.CrossLoop.com -webserver=server.crossloop.com -webservice=www.crossloop.com -startup=server 
ShortcutWithArgument: C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CrossLoop\CrossLoop.lnk -> C:\Users\M\AppData\Local\CrossLoop\CrossLoopConnect.exe (CrossLoop) -> -ap=crossloop -port=5910 -udp=www.CrossLoop.com -webserver=server.crossloop.com -webservice=www.crossloop.com -startup=server 
ShortcutWithArgument: C:\Users\M\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\CrossLoop.lnk -> C:\Users\M\AppData\Local\CrossLoop\CrossLoopConnect.exe (CrossLoop) -> -ap=crossloop -port=5910 -udp=www.CrossLoop.com -webserver=server.crossloop.com -webservice=www.crossloop.com -startup=server 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2014-05-21 20:42 - 2011-02-07 09:56 - 000138192 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
2013-09-07 12:40 - 2012-12-26 11:36 - 000114688 _____ () C:\Program Files (x86)\FWdriver_v\POSHXMain.exe
2014-05-20 20:41 - 2013-03-06 14:42 - 000389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2015-11-15 13:32 - 2015-02-27 15:38 - 000721263 _____ () C:\Windows\SysWOW64\WSCM64.dll
2013-09-07 12:40 - 2013-09-03 21:38 - 000647168 _____ () C:\Program Files (x86)\FWdriver_v\POSHX.exe
2016-03-15 10:26 - 2016-03-15 10:26 - 004535192 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe
2014-12-21 15:41 - 2014-04-08 10:13 - 000069120 _____ () C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe
2017-08-08 15:30 - 2017-08-02 09:39 - 003824472 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.90\libglesv2.dll
2017-08-08 15:30 - 2017-08-02 09:39 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.90\libegl.dll
2013-09-07 12:40 - 2013-07-24 10:23 - 000106496 _____ () C:\Program Files (x86)\FWdriver_v\KIPowerDll.dll
2013-09-07 12:10 - 2013-08-08 13:25 - 001242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2016-06-25 11:00 - 2016-06-06 17:03 - 000110088 _____ () C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common\asp_ipc32.dll
2013-09-07 12:40 - 2013-07-11 12:41 - 000348160 _____ () C:\Program Files (x86)\FWdriver_v\SuperHealthDLL.dll
2013-09-07 12:40 - 2012-06-22 20:32 - 000266240 _____ () C:\Program Files (x86)\FWdriver_v\SuperSpeederDLL.dll
2016-03-15 10:26 - 2016-03-15 10:26 - 000049424 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_thread-vc90-mt-1_39.dll
2016-03-15 10:26 - 2016-03-15 10:26 - 000048400 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_date_time-vc90-mt-1_39.dll
2016-03-15 10:26 - 2016-03-15 10:26 - 000068504 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\CrashRpt.dll
2016-03-15 10:26 - 2016-03-15 10:26 - 000618256 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_regex-vc90-mt-1_39.dll
2016-03-15 10:26 - 2016-03-15 10:26 - 000544152 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\StreamingClient.dll
2016-03-15 10:26 - 2016-03-15 10:26 - 000016144 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_system-vc90-mt-1_39.dll
2016-03-15 10:26 - 2016-03-15 10:26 - 000040856 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\CrashHandlerNET.dll
2014-12-21 15:41 - 2014-04-08 10:08 - 000112128 _____ () C:\Program Files (x86)\Canon\ImageBrowser EX\MFMFileSystemWatcher.dll
2014-05-21 20:47 - 2008-07-03 15:18 - 000364544 ____N () C:\Program Files (x86)\PIXELA\Everio MediaBrowser\pxl_m17n_tool.dll
2013-09-12 06:56 - 2013-08-05 09:49 - 000627672 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2013-08-05 16:48 - 2013-08-05 16:48 - 000016856 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2015-11-15 13:32 - 2015-04-28 16:22 - 001498112 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2015-11-15 13:32 - 2014-05-19 18:19 - 000137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2014-03-31 21:35 - 2014-03-31 21:35 - 000282304 _____ () C:\Program Files (x86)\Windows Live\Writer\de\WindowsLive.Writer.Localization.resources.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\Temp:56E2E879 [246]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 15:25 - 2013-08-22 15:25 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 80.69.96.12 - 81.210.129.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{8B219A9C-3E95-4887-B558-0A20C3849406}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{55B1AAA0-1495-4582-AA48-9DD5FE0C9324}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{2B993C4B-B78F-402C-91B3-32B5F826346F}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{90A06370-CC6A-4993-AE7D-905297E8D278}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
FirewallRules: [{DC152F63-F1D3-4181-AE00-8C232B30FBF9}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
FirewallRules: [{9F2453BC-E7A0-4197-BB67-11A849EF3BD1}] => (Allow) C:\Users\M\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{9AC8C66D-A4A0-43A9-85FE-DDBE39F6FEFE}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{D7B2403C-AD42-441B-99CC-7F24749CE4FC}] => (Allow) LPort=2869
FirewallRules: [{62642C0A-EAA3-418F-B6FF-4DFABDFCE1DF}] => (Allow) LPort=1900
FirewallRules: [{269BE6C4-2529-4920-BC89-90562EB4559C}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{0EF250F3-BEB1-4580-9B21-0B4920E3D812}] => (Allow) C:\Program Files\CyberLink\PowerDirector11\PDR10.EXE
FirewallRules: [TCP Query User{30D7B601-7145-4279-9DC8-CD63CEEF410B}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{19E2251F-9D9A-4F3F-AF13-CB1F4F6F5B90}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{674BBF60-83EC-4D49-BC50-4A8D2C0E23AB}] => (Allow) C:\Users\M\AppData\Local\CrossLoop\vncviewer.exe
FirewallRules: [{991741BC-B7DE-4AE4-86E4-7C57C27E8CEF}] => (Allow) C:\Users\M\AppData\Local\CrossLoop\vncviewer.exe
FirewallRules: [{587DB821-EE55-4343-A6DB-FC0E0A6E7F28}] => (Allow) C:\Users\M\AppData\Local\CrossLoop\tvnserver.exe
FirewallRules: [{31BCFED6-4B00-4337-BAC8-082E9ABA39AB}] => (Allow) C:\Users\M\AppData\Local\CrossLoop\tvnserver.exe
FirewallRules: [TCP Query User{79D86FFA-D8C6-4252-83BC-4A5943BB7492}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{18961C28-5FA2-4BD0-812F-435D307495CE}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{2FDFBC6C-3AAA-420C-A13E-6BCBEFCC5707}C:\program files (x86)\wondershare\vcu\medialibserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\medialibserver.exe
FirewallRules: [UDP Query User{80D9ED45-F5AC-4F4F-AD81-E79788EBEE11}C:\program files (x86)\wondershare\vcu\medialibserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\medialibserver.exe
FirewallRules: [TCP Query User{62317F72-4518-4EF9-B0FE-891B8AE34422}C:\program files (x86)\wondershare\vcu\mediaserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\mediaserver.exe
FirewallRules: [UDP Query User{15F2D807-18A8-4C16-BE0F-21EE162FF060}C:\program files (x86)\wondershare\vcu\mediaserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\mediaserver.exe
FirewallRules: [{43637725-3109-4A55-944F-2A471CE3684C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{259979CB-6D50-420A-AA41-80218EA26266}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{E944FA45-73CD-49C6-8B91-CF4D30E620F5}C:\users\m\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light] => (Block) C:\users\m\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light
FirewallRules: [UDP Query User{ADFF7C71-3FB6-423D-8934-F4397726FF2B}C:\users\m\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light] => (Block) C:\users\m\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light
FirewallRules: [{CBE23198-7DA5-4CA2-8258-DCC8D46A1F67}] => (Allow) C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUp.exe
FirewallRules: [{EDEBD6B2-21BE-4AF3-B12A-5579AE31D8F7}] => (Allow) C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUp.exe
FirewallRules: [{19E7BCCF-1E7B-4771-AADF-005603F1FC0E}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe
FirewallRules: [{3CC1DAF6-7789-4F41-97ED-46D05A46B74D}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe
FirewallRules: [{0114B05C-5AB4-4746-BDEF-285A47D4807C}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll
FirewallRules: [{BEB671ED-E6AB-41C5-97E7-AEA42072F475}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll
FirewallRules: [{85210530-AB5A-477F-BC00-390D7967D42A}] => (Allow) C:\Users\M\Downloads\WLAN-Optimierer (1).exe
FirewallRules: [{065D11A9-B330-4118-9C13-63DF353F6630}] => (Allow) C:\Users\M\Downloads\WLAN-Optimierer (1).exe
FirewallRules: [{CA0FC07B-E636-4A4E-8663-046F71034854}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Wiederherstellungspunkte =========================

20-07-2017 04:53:52 Geplanter Prüfpunkt
28-07-2017 11:09:16 Geplanter Prüfpunkt
06-08-2017 19:22:46 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (08/13/2017 01:57:03 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80070005).

Error: (08/09/2017 04:09:28 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20911 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1f08

Startzeit: 01d310e87e89834f

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: 57fae5f2-7d0c-11e7-835f-5c514f28d736

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1

Error: (08/07/2017 10:25:10 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80070005).

Error: (08/06/2017 01:38:37 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: WLANExt.exe, Version: 6.3.9600.17415, Zeitstempel: 0x545041d0
Name des fehlerhaften Moduls: IWMSSvc.dll_unloaded, Version: 16.5.0.0, Zeitstempel: 0x52179d83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000131745
ID des fehlerhaften Prozesses: 0x1408
Startzeit der fehlerhaften Anwendung: 0x01d30e43edcf1f08
Pfad der fehlerhaften Anwendung: C:\Windows\system32\WLANExt.exe
Pfad des fehlerhaften Moduls: IWMSSvc.dll
Berichtskennung: 33516914-7a37-11e7-835d-5c514f28d736
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (08/05/2017 07:19:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: WLANExt.exe, Version: 6.3.9600.17415, Zeitstempel: 0x545041d0
Name des fehlerhaften Moduls: IWMSSvc.dll_unloaded, Version: 16.5.0.0, Zeitstempel: 0x52179d83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000d3491
ID des fehlerhaften Prozesses: 0xfec
Startzeit der fehlerhaften Anwendung: 0x01d30e0f0470031a
Pfad der fehlerhaften Anwendung: C:\Windows\system32\WLANExt.exe
Pfad des fehlerhaften Moduls: IWMSSvc.dll
Berichtskennung: 4ad90e5c-7a02-11e7-835d-5c514f28d736
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (07/31/2017 01:45:08 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80070005).

Error: (07/29/2017 12:32:32 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20911 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1f18

Startzeit: 01d3085542ceea34

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: 38fc3dad-7449-11e7-835d-5c514f28d736

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1

Error: (07/27/2017 11:01:35 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20911 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: aec

Startzeit: 01d3071ac02fe086

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: b8b225ac-730e-11e7-835c-5c514f28d736

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1

Error: (07/24/2017 09:59:06 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: KASRELLO)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (07/24/2017 09:59:06 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: KASRELLO)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


Systemfehler:
=============
Error: (08/07/2017 12:47:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Service Installer TrueKey" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (08/07/2017 12:47:18 PM) (Source: Microsoft-Windows-Directory-Services-SAM) (EventID: 16953) (User: NT-AUTORITÄT)
Description: Fehler "126" beim Laden der Kennwortbenachrichtigungs-DLL ""C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter"". Stellen Sie sicher, dass der in der Registrierung definierte DLL-Pfad "HKLM\System\CurrentControlSet\Control\Lsa\Notification Packages" sich auf einen korrekten und absoluten Pfad (<Laufwerk>:\<Pfad>\<Dateiname>.<Erw.>) bezieht und nicht auf einen relativen oder ungültigen Pfad. Wenn der DLL-Pfad falsch ist, stellen Sie sicher, dass sich alle Hilfsdateien im gleichen Verzeichnis befinden und dass das Systemkonto sowohl auf den DLL-Pfad als auch die Hilfsdateien Lesezugriff hat.  Wenden Sie sich an den Anbieter der Benachrichtigungs-DLL, um weitere Unterstützung zu erhalten. Weitere Informationen finden Sie im Internet unter "hxxp://go.microsoft.com/fwlink/?LinkId=245898".

Error: (08/06/2017 05:54:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Service Installer TrueKey" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (08/06/2017 05:54:08 PM) (Source: Microsoft-Windows-Directory-Services-SAM) (EventID: 16953) (User: NT-AUTORITÄT)
Description: Fehler "126" beim Laden der Kennwortbenachrichtigungs-DLL ""C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter"". Stellen Sie sicher, dass der in der Registrierung definierte DLL-Pfad "HKLM\System\CurrentControlSet\Control\Lsa\Notification Packages" sich auf einen korrekten und absoluten Pfad (<Laufwerk>:\<Pfad>\<Dateiname>.<Erw.>) bezieht und nicht auf einen relativen oder ungültigen Pfad. Wenn der DLL-Pfad falsch ist, stellen Sie sicher, dass sich alle Hilfsdateien im gleichen Verzeichnis befinden und dass das Systemkonto sowohl auf den DLL-Pfad als auch die Hilfsdateien Lesezugriff hat.  Wenden Sie sich an den Anbieter der Benachrichtigungs-DLL, um weitere Unterstützung zu erhalten. Weitere Informationen finden Sie im Internet unter "hxxp://go.microsoft.com/fwlink/?LinkId=245898".

Error: (08/05/2017 03:46:25 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Avira Email-Schutz" wurde mit dem folgenden dienstspezifischen Fehler beendet: 
Unzulässige Funktion.

Error: (08/05/2017 03:46:15 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Type" aufgrund folgenden Fehlers fehlgeschlagen: 
Zugriff verweigert

Error: (08/05/2017 03:46:15 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Type" aufgrund folgenden Fehlers fehlgeschlagen: 
Zugriff verweigert

Error: (08/05/2017 03:46:14 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Type" aufgrund folgenden Fehlers fehlgeschlagen: 
Zugriff verweigert

Error: (08/05/2017 03:37:36 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Echtzeit-Scanner" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/05/2017 03:37:35 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
Zugriff verweigert


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i3-4010U CPU @ 1.70GHz
Prozentuale Nutzung des RAM: 76%
Installierter physikalischer RAM: 4004.02 MB
Verfügbarer physikalischer RAM: 947.46 MB
Summe virtueller Speicher: 7882.27 MB
Verfügbarer virtueller Speicher: 3951.21 MB

==================== Laufwerke ================================

Drive c: (Boot) (Fixed) (Total:404.05 GB) (Free:66.11 GB) NTFS
Drive d: (Recover) (Fixed) (Total:60 GB) (Free:45.11 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 3782765E)

Partition: GPT.

==================== Ende von Addition.txt ============================

Tician · 14.08.2017, 16:40

Schritt 1:

Downloade Dir bitte AdwCleaner auf deinen Desktop (Bebilderte Anleitung).

Schließe alle offenen Programme und Browser.
Starte die adwcleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Werkzeuge > Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- Tracing Schlüssel
- Prefetch Dateien
- Proxy
- Winsock
- IE Richtlinien
- Chrome Richtlinien
Bestätige die Auswahl mit Ok.
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist. Am Ende des Suchlaufs öffnet sich automatisch eine Logdatei. Schließe diese.
Klicke nun auf Löschen (auch dann wenn AdwCleaner sagt, dass nichts gefunden wurde) und bestätige auftretende Hinweise mit Ok.
Klicke am Ende der Bereinigung auf Jetzt neu starten. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2:

Downloade Dir bitte Malwarebytes Anti-Malware 3 (Bebilderte Anleitung)

Installiere das Programm in den vorgegebenen Pfad.
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scan, wähle den Bedrohungs-Scan aus und klicke auf Scan starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Ausgewählte Elemente in die Quarantäne verschieben.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM nach dem Neustart, klicke auf Berichte.
Wähle den neuesten Scan-Bericht aus, klicke auf Bericht anzeigen und dann auf Export.
Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3:

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Untersuchen.
FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Kasrello · 15.08.2017, 14:06

Hallo Tician,

danke für die Antwort und weitere Arbeitsschritte.

AdwCleaner.txt

Code:

ATTFilter

# AdwCleaner 7.0.1.0 - Logfile created on Tue Aug 15 09:21:23 2017
# Updated on 2017/05/08 by Malwarebytes 
# Database: 08-15-2017.1
# Running on Windows 8.1 (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support










***** [ Services ] *****

PUP.Optional.APNToolBar.Gen, APNMCP


***** [ Folders ] *****

Adware.Elex, C:\Windows\System32\config\systemprofile\AppData\Local\SearchProtect
Adware.Elex, C:\Windows\SysWOW64\config\systemprofile\AppData\Local\SearchProtect
PUP.Optional.Legacy, C:\Windows\System32\config\systemprofile\AppData\Local\YSearchUtil
PUP.Optional.Legacy, C:\Windows\SysWOW64\config\systemprofile\AppData\Local\YSearchUtil
PUP.Optional.Legacy, C:\Users\Marlies\AppData\Local\YSearchUtil
PUP.Optional.Legacy, C:\Program Files (x86)\Yahoo!\yset
PUP.Optional.Ask, C:\ProgramData\AskPartnerNetwork
PUP.Optional.Ask, C:\ProgramData\Application Data\AskPartnerNetwork
PUP.Optional.Ask, C:\Program Files (x86)\AskPartnerNetwork
PUP.Optional.Ask, C:\Users\All Users\AskPartnerNetwork
PUP.Optional.Ask, C:\Users\Marlies\AppData\Local\AskPartnerNetwork
Rogue.ForcedExtension, C:\ProgramData\apn
Rogue.ForcedExtension, C:\ProgramData\Application Data\apn
Rogue.ForcedExtension, C:\Users\All Users\apn
Rogue.ForcedExtension, C:\Users\Marlies\AppData\Local\Temp\apn
PUP.Optional.FileViewPro, C:\Users\Marlies\AppData\Local\FileViewPro
PUP.Optional.FileViewPro, C:\Users\Marlies\AppData\Local\Temp\FileViewPro


***** [ Files ] *****

PUP.Optional.Legacy, C:\Users\All Users\Desktop\simplicheck.lnk
PUP.Optional.Legacy, C:\Users\Public\Desktop\simplicheck.lnk


***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cloudfront.net
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cloudfront.net
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\d31bfnnwekbny6.cloudfront.net
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\d31bfnnwekbny6.cloudfront.net
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\key-find.com
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.key-find.com
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Internet Explorer\DOMStorage\izito.de
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Internet Explorer\DOMStorage\www.izito.de
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! SearchSet
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5350-4500-76A7-A758B70C2300}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98FD652EB4839214E97B69DD8EEA1D29
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\930D9472A978D7A4EB16BF4DECB173B7
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8036C72171EF4ba46856BF57969F6A36
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A97C590397DCC454AA8923563BAB10E4
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CFA51B44D54927c4E9B7BC1D3FD1E49F
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3255D95681398614190EDF0A4F3F77DB
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DB42320A8525634AA089F0BEC86473B
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DFE9F0BD163D827438CB6AD6B100EC48
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\499E8534DA7E759419D2048CB780D3D5
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15E6C514FEFC09f45BAFAAE1D7546ED4
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89BB7852687BDC34B9A81E01C7FF9173
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F739A19A8327dc64C9A8B641A9E89646
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71E54748EDD3dc1468548785DC856EDA
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22468B0D6050b2e46B9C4B67A8F59577
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D14A7F65792054F418578C78367D13F7
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\754590DD06DE8d249B526503432F99D4
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B08932C78B697C244BE7BA3E6FF09B62
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CC5A38A64D6098468BC8395BA0EFF03
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2251BF05A2F606d43BB064BD63CBD87E
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CBC85D72B148084ABE8C2F072F781F4
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\62255E52F19EC97429A42D59D49024FA
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AEB93799E8B47D14CA356E4343D632A4
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5DCE3C04E576AD15F972B67D0725120C
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE7C2A75DF08824E9CEFDE20F655BD9
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\158D6D9E3FE81fa428925F22ACB3A965
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CDF313E9B28c944FBC7579CF4949414
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8DF9A1AC557F56c49B56F6B83E293C15
PUP.Optional.Legacy, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | ApnTBMon
PUP.Optional.Legacy, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 | ApnTBMon
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaaiabcopkplhgaedhbloeejhhankf
PUP.Optional.Ask, [Key] - HKU\.DEFAULT\Software\AskPartnerNetwork
PUP.Optional.Ask, [Key] - HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\AskPartnerNetwork
PUP.Optional.Ask, [Key] - HKU\S-1-5-18\Software\AskPartnerNetwork
PUP.Optional.Ask, [Key] - HKCU\Software\AskPartnerNetwork
PUP.Optional.SlimCleanerPlus, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
PUP.Optional.SlimCleanerPlus, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************

C:/AdwCleaner/AdwCleaner[S0].txt - [6178 B] - [2015/3/6 19:56:16]
C:/AdwCleaner/AdwCleaner[S1].txt - [8737 B] - [2017/8/12 17:31:39]


########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt ##########

Hier erster Teil mbam.txt

Code:

ATTFilter

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 15.08.17
Scan-Zeit: 12:48
Protokolldatei: mbam.txt
Administrator: Ja

-Softwaredaten-
Version: 3.1.2.1733
Komponentenversion: 1.0.160
Version des Aktualisierungspakets: 1.0.2590
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: KASRELLO\Marlies

-Scan-Ãœbersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 390206
Erkannte Bedrohungen: 638
In die QuarantÃ¤ne verschobene Bedrohungen: 638
Abgelaufene Zeit: 24 Min., 30 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

-Scan-Details-
Prozess: 1
PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\SERVICEPROVIDER.EXE, In QuarantÃ¤ne, [2146], [354276],1.0.2590

Modul: 10
PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\SERVICEPROVIDER.EXE, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MRLOGGER.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MODULES\COMMON\ASP_IPC32.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\EXCEPTIONHANDLER32.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MODULES\QUICKATTENDANCEMODULE\QUICKATTENDANCEMODULE.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MRSTYLER.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MODULES\COCKPITMODULE\COCKPITMODULE.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MODULES\SCHEDULERMODULE\SCHEDULERMODULE.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\GAHELPER.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\SIMPLIPROTECT.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590

RegistrierungsschlÃ¼ssel: 4
PUP.Optional.ASKPartnerNetwork, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\aaaaaiabcopkplhgaedhbloeejhhankf, In QuarantÃ¤ne, [14287], [245531],1.0.2590
PUP.Optional.ASKPartnerNetwork, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\aaaaaiabcopkplhgaedhbloeejhhankf, In QuarantÃ¤ne, [14287], [245531],1.0.2590
PUP.Optional.NeroTuneItUp, HKLM\SOFTWARE\WOW6432NODE\NERO\nero_tuneitup, In QuarantÃ¤ne, [2146], [354277],1.0.2590
PUP.Optional.PCSpeedUp, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PCSUUCDRV, In QuarantÃ¤ne, [6066], [241622],1.0.2590

Registrierungswert: 2
PUP.Optional.ASKPartnerNetwork, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\aaaaaiabcopkplhgaedhbloeejhhankf|PATH, In QuarantÃ¤ne, [14287], [245531],1.0.2590
PUP.Optional.ASKPartnerNetwork, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\aaaaaiabcopkplhgaedhbloeejhhankf|PATH, In QuarantÃ¤ne, [14287], [245531],1.0.2590

Registrierungsdaten: 5
PUP.Optional.HttpBreaker, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|DEFAULT_PAGE_URL, Ersetzt, [15364], [293099],1.0.2590
PUP.Optional.HttpBreaker, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Ersetzt, [15364], [293099],1.0.2590
PUP.Optional.HttpBreaker, HKU\S-1-5-21-708953619-3332147771-3993505364-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|DEFAULT_PAGE_URL, Ersetzt, [15364], [293098],1.0.2590
PUP.Optional.HttpBreaker, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|DEFAULT_PAGE_URL, Ersetzt, [15364], [293099],1.0.2590
PUP.Optional.HttpBreaker, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Ersetzt, [15364], [293099],1.0.2590

Daten-Stream: 0
(keine bÃ¶sartigen Elemente erkannt)

Ordner: 50
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\TemperatureMonitoringModule, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\RegCleanerDll\Backups, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\ExceptionHandlerDll, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\RegCleanerDll\Log, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\softwareproducts, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\RegCleanerDll, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\checkdetails, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\driverupdate, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\newsfeed, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\services, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\reports, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\startup, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\PROGRAMDATA\Nero\Nero TuneItUp, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TemperatureMonitoringModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\MobileSyncRemoteModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryDefragModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CPUMonitoringModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SystemRemoteModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\MobileSyncModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DefragModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\protein\Resource, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\protein, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\NERO, In QuarantÃ¤ne, [2146], [354280],1.0.2590

Datei: 566
PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\SERVICEPROVIDER.EXE, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MRLOGGER.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MODULES\COMMON\ASP_IPC32.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\EXCEPTIONHANDLER32.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MODULES\QUICKATTENDANCEMODULE\QUICKATTENDANCEMODULE.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MRSTYLER.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MODULES\COCKPITMODULE\COCKPITMODULE.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MODULES\SCHEDULERMODULE\SCHEDULERMODULE.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\GAHELPER.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\SIMPLIPROTECT.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\checkdetails\BrowserCleanerModule.result, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\driverupdate\driverupdate.log, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\ExceptionHandlerDll\Exception.exlog, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\ExceptionHandlerDll\Trace.log, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\newsfeed\data.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\newsfeed\e6567ba482c6b6cb24d3.png, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\newsfeed\NERO_WOW_EN.png, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\newsfeed\NERO_WOW_EN_#2.png, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\RegCleanerDll\Log\2016-06-28 00-09-49 RegCleanerDll.log, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\RegCleanerDll\Log\2017-04-08 22-11-44 RegCleanerDll.log, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\RegCleanerDll\BlackList.cfg, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\RegCleanerDll\RegCleanerDll.cfg, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\reports\template_report.html, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\services\services.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\startup\startup.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\TemperatureMonitoringModule\TemperatureMonitoringModule.cfg, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\TemperatureMonitoringModule\TemperatureMonitoringModule.log, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\ComputerID2.dat, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\nero_tuneitup.ini, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\scheduler_ignore.dat, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\Setup Log 2016-06-25 #002.log, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\Setup Log 2017-04-08 #001.log, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\simplitec_Power_Suite.ini, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\ToBeUninstalled.dat, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\usertips_DE.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\usertips_EN.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\usertips_ES.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\usertips_FR.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\usertips_IT.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\usertips_KO.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\usertips_NL.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\usertips_PL.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\usertips_PT.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\usertips_RU.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\winsettings.dat, In QuarantÃ¤ne, [2146], [354279],1.0.2590
PUP.Optional.CrossRider, C:\USERS\MARLIES\APPDATA\ROAMING\OPERA SOFTWARE\OPERA STABLE\LOCAL STORAGE\CHROME-EXTENSION_KFGAIBFBMKJGMIMHBBAIKFNPKKJKPOAN_0.LOCALSTORAGE, In QuarantÃ¤ne, [218], [252935],1.0.2590
PUP.Optional.CrossRider, C:\USERS\MARLIES\APPDATA\ROAMING\OPERA SOFTWARE\OPERA STABLE\LOCAL STORAGE\CHROME-EXTENSION_CIGIAGPBKAPEPGKLNCNAJBAKKPKOPMAM_0.LOCALSTORAGE, In QuarantÃ¤ne, [218], [255546],1.0.2590
PUP.Optional.CrossRider, C:\USERS\MARLIES\APPDATA\ROAMING\OPERA SOFTWARE\OPERA STABLE\LOCAL STORAGE\CHROME-EXTENSION_CIGIAGPBKAPEPGKLNCNAJBAKKPKOPMAM_0.LOCALSTORAGE-JOURNAL, In QuarantÃ¤ne, [218], [255546],1.0.2590
PUP.Optional.CrossRider, C:\USERS\MARLIES\APPDATA\ROAMING\OPERA SOFTWARE\OPERA STABLE\LOCAL STORAGE\CHROME-EXTENSION_KFGAIBFBMKJGMIMHBBAIKFNPKKJKPOAN_0.LOCALSTORAGE-JOURNAL, In QuarantÃ¤ne, [218], [252935],1.0.2590
PUP.Optional.NeroTuneItUp, C:\USERS\PUBLIC\DESKTOP\NERO TUNEITUP.LNK, In QuarantÃ¤ne, [2146], [354283],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\all.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\Apache License.txt, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\Roboto-Bold.ttf, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\Roboto-BoldItalic.ttf, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\Roboto-Italic.ttf, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\Roboto-Light.ttf, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\Roboto-Regular.ttf, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\styles.xml, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_da_DK.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_de_DE.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_en.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_es_ES.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_fi_FI.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_fr_FR.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_it_IT.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_nl_NL.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_no_NO.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_pl_PL.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_pt_BR.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_pt_PT.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_ru_RU.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_sv_SE.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\PowerSuite_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\PowerSuite_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\PowerSuite_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\PowerSuite_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\PowerSuite_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\timetable.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common\Analyze.MyD, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common\Defragment.MyD, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common\DefragmentOptimize.MyD, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common\ListAllFiles.MyD, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common\MyDefragDll.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common\process.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common\Shredder32.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common\SSDTest.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common\undelete.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CPUMonitoringModule\CPUMonitoringModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DefragModule\DefragModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

Hier der zweite Teil

Code:

ATTFilter

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOptSettings.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_DA.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_de.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_detailed_de.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_en.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_es.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_FI.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_fr.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_it.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_KO.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_nl.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_NO.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_pl.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_pt.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_PT_BR.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_ru.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_SV.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\MobileSyncModule\MobileSyncModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\MobileSyncRemoteModule\MobileSyncRemoteModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryDefragModule\RegistryDefragModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SystemRemoteModule\SystemRemoteModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TemperatureMonitoringModule\cpuidsdk32.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TemperatureMonitoringModule\TemperatureMonitoringModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\trashfiles.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_FI.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_DA.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_de.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_en.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_es.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_fr.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_it.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_KO.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_nl.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_NO.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_pl.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_pt.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_PT_BR.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_ru.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_SV.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\protein\Resource\UnlockDialog_common.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_de.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\CrashLogMailer.exe, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\install.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\InstallHelper.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_da.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_en.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_es.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_fi.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_fr.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_it.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_nl.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_no.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_pl.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_pt.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_pt_BR.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_ru.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_sv.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUp.exe, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUpStart.exe, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUpStart.VisualElementsManifest.xml, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\unins000.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\unins000.exe, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\unins000.msg, In QuarantÃ¤ne, [2146], [354276],1.0.2590
PUP.Optional.SpeedingUpMyPC, C:\USERS\MARLIES\APPDATA\LOCAL\TEMP\__TMP_204968F6, In QuarantÃ¤ne, [894], [334223],1.0.2590
PUP.Optional.InstallCore, C:\USERS\MARLIES\DOWNLOADS\APPCLEANER_INSTALLER.EXE, In QuarantÃ¤ne, [2], [65139],1.0.2590
PUP.Optional.DownloadSponsor, C:\USERS\MARLIES\DOWNLOADS\INSSIDER HOME LETZTE FREEWARE VERSION - CHIP-INSTALLER.EXE, In QuarantÃ¤ne, [506], [413936],1.0.2590
PUP.Optional.AdvancedSystemCare, C:\USERS\MARLIES\DOWNLOADS\ASCCHIPASCFCBW.EXE, In QuarantÃ¤ne, [1188], [336134],1.0.2590
PUP.Optional.DownloadSponsor, C:\USERS\MARLIES\DOWNLOADS\MICROSOFT NET FRAMEWORK - CHIP-INSTALLER.EXE, In QuarantÃ¤ne, [506], [413936],1.0.2590
PUP.Optional.DownloadSponsor, C:\USERS\MARLIES\DOWNLOADS\TELEGRAM FOR DESKTOP - CHIP-INSTALLER.EXE, In QuarantÃ¤ne, [506], [413936],1.0.2590
PUP.Optional.NeroTuneItUp, C:\WINDOWS\TASKS\NERO TUNEITUP PRO.JOB, In QuarantÃ¤ne, [2146], [354287],1.0.2590
PUP.Optional.NeroTuneItUp, C:\WINDOWS\TASKS\NERO TUNEITUP PRO (TRAY).JOB, In QuarantÃ¤ne, [2146], [354287],1.0.2590
PUP.Optional.MindSpark, C:\USERS\MARLIES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_smsfrombrowser.dl.tb.ask.com_0.localstorage, In QuarantÃ¤ne, [257], [240306],1.0.2590
PUP.Optional.MindSpark, C:\USERS\MARLIES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_smsfrombrowser.dl.tb.ask.com_0.localstorage-journal, In QuarantÃ¤ne, [257], [240306],1.0.2590
PUP.Optional.MindSpark, C:\USERS\MARLIES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_smsfrombrowser.dl.myway.com_0.localstorage, In QuarantÃ¤ne, [257], [240305],1.0.2590
PUP.Optional.MindSpark, C:\USERS\MARLIES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_smsfrombrowser.dl.myway.com_0.localstorage-journal, In QuarantÃ¤ne, [257], [240305],1.0.2590
PUP.Optional.ASK, C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\AskToolbarInstaller-ORJ-SPE[1].7z, In QuarantÃ¤ne, [510], [358503],1.0.2590
PUP.Optional.ASK, C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\AskToolbarInstaller-ORJ-SPE[2].7z, In QuarantÃ¤ne, [510], [358503],1.0.2590
PUP.Optional.ASK, C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\AskToolbarInstaller-ORJ-SPE[3].7z, In QuarantÃ¤ne, [510], [358503],1.0.2590
PUP.Optional.ASK, C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\AskToolbarInstaller-ORJ-SPE[4].7z, In QuarantÃ¤ne, [510], [358503],1.0.2590
PUP.Optional.ASK, C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\AskToolbarInstaller-ORJ-SPE[5].7z, In QuarantÃ¤ne, [510], [358503],1.0.2590
PUP.Optional.NeroTuneItUp, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\NERO\NERO TUNEITUP.LNK, In QuarantÃ¤ne, [2146], [354280],1.0.2590
PUP.Optional.NeroTuneItUp, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\1-Klick-Optimierung.lnk, In QuarantÃ¤ne, [2146], [354280],1.0.2590
PUP.Optional.NeroTuneItUp, C:\WINDOWS\SYSTEM32\TASKS\Nero TuneItUp PRO, In QuarantÃ¤ne, [2146], [354278],1.0.2590
PUP.Optional.NeroTuneItUp, C:\WINDOWS\SYSTEM32\TASKS\Nero TuneItUp PRO (Tray), In QuarantÃ¤ne, [2146], [354278],1.0.2590

Physischer Sektor: 0
(keine bÃ¶sartigen Elemente erkannt)
(end)

Die anderen txt´s habe ich auch erstellt, kann sie aber in dieser Antwort nicht posten, weil dann der Text für den Beitrag zu lang wird.

Es steht in der Beschreibung, das wenn ich auf meinen Beitrag antworte, um die Weitern auch zu posten, dann sehe es so aus als sei mein Thema in Arbeit und ich könnte keine Antwort erhalten.

Wie kann, bzw. soll ich in dem Fall vorgehen?

Gruß Kasrello

Tician · 15.08.2017, 22:08

Hi,

du bist doch schon bei mir in Arbeit, der Hinweis hat nur mit dem ersten Post zu tun. Einfach wie gehabt eine weitere Antwort machen und dort den Rest der Logs posten

Und bitte auch die richtige Datei von ADW posten. Wenn die nicht da ist, dann die Anleitung genau lesen und nochmal ausführen. Funde sollten gelöscht werden

Kasrello · 15.08.2017, 22:52

Hallo Tician,

es war die Richtige ADW und Funde wurden gelöscht.

Ich habe erst die ADW, erzeugt und die dann gespeichert. Anschließend die Mbam, die gespeichert und dann FRST und Addition erstellt.

Jetzt habe ich das verstanden, ich werde jetzt gleich die restlichen nacheinander posten.

Hallo Tician,

hier jetzt die FRST.txt

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12-08-2017
durchgeführt von Marlies (Administrator) auf KASRELLO (15-08-2017 14:35:04)
Gestartet von C:\Users\Marlies\Desktop
Geladene Profile: Marlies &  (Verfügbare Profile: Marlies & Marlies_2)
Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(CrossLoop) C:\Users\Marlies\AppData\Local\CrossLoop\CrossLoopService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Dolby Laboratories Inc.) C:\Program Files\Dolby Digital Plus\ddp.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe
() C:\Program Files (x86)\FWdriver_v\POSHXMain.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McTkSchedulerService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
() C:\Program Files (x86)\FWdriver_v\POSHX.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(Sony Ericsson Mobile Communications AB) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe
() C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(PIXELA CORPORATION) C:\Program Files (x86)\PIXELA\Everio MediaBrowser\MBCameraMonitor.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.587\SSScheduler.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13648600 2013-08-29] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-30] (Realtek Semiconductor)
HKLM\...\Run: [POSHX] => C:\Program Files (x86)\FWdriver_v\POSHX.exe [647168 2013-09-03] ()
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2774256 2013-08-01] (Synaptics Incorporated)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2779024 2011-03-14] (CANON INC.)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111576 2013-08-05] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [490760 2013-09-10] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-11] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2013-08-01] (CyberLink Corp.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [919032 2017-08-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [97512 2017-06-13] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2086240 2015-04-28] (Wondershare)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe [1960248 2015-10-26] ()
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1612920 2011-08-04] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [937984 2015-10-01] (AVM Berlin)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1
HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\Run: [Sony Ericsson PC Companion] => C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [772096 2009-06-18] (Sony Ericsson Mobile Communications AB)
HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [29544576 2016-08-17] (Skype Technologies S.A.)
HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\Run: [AudialsNotifier] => C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe [4535192 2016-03-15] ()
HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\MountPoints2: {497c22ea-3e37-11e4-82a5-5c514f28d736} - "F:\Startme.exe" 
HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\MountPoints2: {8065d9a5-3ac9-11e4-82a4-5c514f28d736} - "F:\iLinker.exe" 
HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\MountPoints2: {b6fe1c45-f46e-11e6-8336-5c514f28d736} - "F:\pushinst.exe" 
HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\Run: [Sony Ericsson PC Companion] => C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [772096 2009-06-18] (Sony Ericsson Mobile Communications AB)
HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [29544576 2016-08-17] (Skype Technologies S.A.)
HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\Run: [AudialsNotifier] => C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe [4535192 2016-03-15] ()
HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\MountPoints2: {497c22ea-3e37-11e4-82a5-5c514f28d736} - "F:\Startme.exe" 
HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\MountPoints2: {8065d9a5-3ac9-11e4-82a4-5c514f28d736} - "F:\iLinker.exe" 
HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\MountPoints2: {b6fe1c45-f46e-11e6-8336-5c514f28d736} - "F:\pushinst.exe" 
Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter "C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ImageBrowser EX Agent.lnk [2014-12-21]
ShortcutTarget: ImageBrowser EX Agent.lnk -> C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MBCameraMonitor.lnk [2014-12-22]
ShortcutTarget: MBCameraMonitor.lnk -> C:\Program Files (x86)\PIXELA\Everio MediaBrowser\MBCameraMonitor.exe (PIXELA CORPORATION)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-07-27]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.587\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2014-05-15]
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\simplicheck.lnk [2017-05-03]
ShortcutTarget: simplicheck.lnk -> C:\Program Files (x86)\simplitec\simplicheck\simplicheck.exe (simplitec)
Startup: C:\Users\Marlies\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2016-12-26]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 80.69.96.12 81.210.129.4
Tcpip\..\Interfaces\{471AEB88-C6B2-4C00-9669-3CC3EE935AD6}: [DhcpNameServer] 192.168.192.1
Tcpip\..\Interfaces\{C54B9ABE-D820-4EAF-86DC-7FF0424B0FD3}: [DhcpNameServer] 80.69.96.12 81.210.129.4
Tcpip\..\Interfaces\{D8F505BE-40F8-41DB-87A6-F6B74D4C7B56}: [DhcpNameServer] 80.69.96.12 81.210.129.4

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://rp-online.de/
HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://rp-online.de/
HKU\S-1-5-21-708953619-3332147771-3993505364-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133432028\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-708953619-3332147771-3993505364-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133432028\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133428919 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429106 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-708953619-3332147771-3993505364-1001 -> {3AB6D324-E6BD-4DC3-9ECB-B4FABD890450} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341 -> {3AB6D324-E6BD-4DC3-9ECB-B4FABD890450} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
BHO: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-26] (Intel Security)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20] (IvoSoft)
BHO-x32: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-26] (Intel Security)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
BHO-x32: Wondershare Video Converter Ultimate 7.1.0 -> {451C804F-C205-4F03-B48E-537EC94937BF} -> C:\ProgramData\Wondershare\Video Converter Ultimate\WSBrowserAppMgr.dll [2015-10-26] (Wondershare)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-13] (Oracle Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-13] (Oracle Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.)
Toolbar: HKLM - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-26] (Intel Security)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM-x32 - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-26] (Intel Security)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)
Handler-x32: http - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: http - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: https - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: https - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: ipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei
Handler-x32: msdaipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  Keine Datei

FireFox:
========
FF DefaultProfile: vy7huq4o.default
FF ProfilePath: C:\Users\Marlies\AppData\Roaming\Mozilla\Firefox\Profiles\vy7huq4o.default [2017-08-12]
FF Extension: (Avira Browser Safety) - C:\Users\Marlies\AppData\Roaming\Mozilla\Firefox\Profiles\vy7huq4o.default\Extensions\abs@avira.com.xpi [2017-08-10]
FF HKLM-x32\...\Firefox\Extensions: [WSVCU@Wondershare.com] - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com
FF Extension: (Wondershare Video Converter Ultimate) - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com [2015-11-15] [ist nicht signiert]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll [2016-04-30] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-30] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2011-04-20] (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-08-08] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-08-08] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-13] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)

Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.search.ask.com/?gct=hp
CHR StartupUrls: Default -> "hxxp://www.rp-online.de/"
CHR Profile: C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default [2017-08-15]
CHR Extension: (Google Docs) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-05]
CHR Extension: (Google Drive) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Google-Suche) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (Adobe Acrobat) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-06-05]
CHR Extension: (Google Docs Offline) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Google Mail) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]
CHR Extension: (Chrome Media Router) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-10]
CHR Extension: (Mein BMI - Shopping Angebote) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppohoeonaecgahebikkipfeoojbccoan [2017-04-09]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-708953619-3332147771-3993505364-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [npdicihegicnhaangkdmcgbjceoemeoo] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2016-12-26] (Adobe Systems) [Datei ist nicht signiert]
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [1128432 2017-08-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [490968 2017-08-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [490968 2017-08-05] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1525240 2017-08-05] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [377976 2017-06-13] (Avira Operations GmbH & Co. KG)
S4 AvmSwitchUsb; C:\Program Files (x86)\avmwlanstick\AVMSwitchUsb.exe [125440 2015-10-01] () [Datei ist nicht signiert]
R2 CrossLoopService; C:\Users\Marlies\AppData\Local\CrossLoop\CrossLoopService.exe [569072 2012-01-06] (CrossLoop)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [74712 2013-03-11] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [316376 2013-03-11] (CyberLink)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-08-08] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-08-29] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-08-08] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.587\McCHSvc.exe [404376 2017-06-30] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2013-08-23] ()
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
R2 POSHXService; C:\Program Files (x86)\FWdriver_v\POSHXMain.exe [114688 2012-12-26] () [Datei ist nicht signiert]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2013-03-06] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803440 2017-07-26] (TeamViewer GmbH)
R2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [1001920 2017-06-26] (McAfee, Inc.)
R2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [16928 2017-06-26] (McAfee, Inc.)
S3 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [87760 2017-06-26] (McAfee, Inc.)
S3 tvnserver; C:\Users\Marlies\AppData\Local\CrossLoop\tvnserver.exe [814080 2010-07-21] (GlavSoft LLC.) [Datei ist nicht signiert]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3667696 2013-08-23] (Intel® Corporation)
S2 InstallerService; "C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AirplaneModeHID; C:\Windows\System32\drivers\AirplaneModeHID.sys [30512 2013-09-04] (Elitegroup Computer System)
R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [60920 2017-06-19] (Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [173784 2017-08-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [167464 2017-08-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [44488 2017-03-03] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2015-10-01] (AVM Berlin)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [88488 2017-03-03] (Avira Operations GmbH & Co. KG)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132920 2013-04-23] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1386296 2013-08-19] (Motorola Solutions, Inc.)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77376 2017-06-27] ()
R3 fwlanusb6_860; C:\Windows\system32\DRIVERS\fwlanusb6_860.sys [2234912 2015-10-01] (AVM GmbH)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [117192 2013-08-29] (Intel Corporation)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [188352 2017-08-15] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [101784 2017-08-15] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [45472 2017-08-15] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [253856 2017-08-15] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [93600 2017-08-15] (Malwarebytes)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-08-08] (Intel Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3589600 2013-09-25] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
S3 s1018bus; C:\Windows\System32\drivers\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)
S3 s1018mdfl; C:\Windows\system32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)
S3 s1018mdm; C:\Windows\system32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)
S3 s1018mgmt; C:\Windows\system32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)
S3 s1018nd5; C:\Windows\system32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)
S3 s1018obex; C:\Windows\system32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)
S3 s1018unic; C:\Windows\System32\drivers\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)
R3 SensorsAlsDriver; C:\Windows\System32\drivers\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2013-08-01] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-01] (Synaptics Incorporated)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
R3 WsAudio_Device; C:\Windows\system32\drivers\VirtualAudio.sys [31080 2015-02-27] (Wondershare)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-08-15 14:35 - 2017-08-15 14:36 - 000034340 _____ C:\Users\Marlies\Desktop\FRST.txt
2017-08-15 14:33 - 2017-08-15 13:57 - 000056062 _____ C:\Users\Marlies\Desktop\FRST2.txt
2017-08-15 14:33 - 2017-08-15 13:50 - 000046982 _____ C:\Users\Marlies\Desktop\Addition2.txt
2017-08-15 14:33 - 2017-08-15 13:37 - 000100013 _____ C:\Users\Marlies\Desktop\mbam1.txt
2017-08-15 14:33 - 2017-08-15 11:21 - 000008805 _____ C:\Users\Marlies\Desktop\AdwCleaner[S2].txt
2017-08-15 14:33 - 2017-08-13 14:53 - 000040849 _____ C:\Users\Marlies\Desktop\FRST 1.txt
2017-08-15 14:33 - 2017-08-12 20:57 - 002395648 _____ (Farbar) C:\Users\Marlies\Desktop\FRST64.exe
2017-08-15 14:33 - 2017-08-12 19:28 - 008185288 _____ (Malwarebytes) C:\Users\Marlies\Desktop\adwcleaner_7.0.1.0 (1).exe
2017-08-15 14:32 - 2017-08-13 15:05 - 000045346 _____ C:\Users\Marlies\Desktop\Addition1.txt
2017-08-15 14:20 - 2016-08-05 00:20 - 000001150 _____ C:\Users\Marlies\Desktop\OpenOffice (2) - Kopie.lnk
2017-08-15 14:20 - 2016-06-26 15:44 - 000000852 _____ C:\Users\Marlies\Desktop\MediaCoder x64 - Kopie.lnk
2017-08-15 14:20 - 2015-09-26 23:49 - 000001149 _____ C:\Users\Marlies\Desktop\OLYMPUS Viewer 3 - Kopie.lnk
2017-08-15 14:20 - 2015-09-26 23:49 - 000001129 _____ C:\Users\Marlies\Desktop\OLYMPUS Digital Kamera Updater - Kopie.lnk
2017-08-15 14:20 - 2012-08-11 07:23 - 000001275 _____ C:\Users\Marlies\Desktop\Medion Services - Kopie.lnk
2017-08-15 14:14 - 2017-08-15 14:31 - 000000000 ____D C:\Users\Marlies\Desktop\gesammeltes Desktop
2017-08-15 13:37 - 2017-08-15 13:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bluetooth Devices
2017-08-15 12:42 - 2017-08-15 13:35 - 000101784 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-08-15 12:42 - 2017-08-15 13:35 - 000093600 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-08-15 12:42 - 2017-08-15 13:35 - 000045472 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-08-15 12:42 - 2017-08-15 13:34 - 000253856 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-08-15 12:42 - 2017-08-15 12:47 - 000188352 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-08-15 12:42 - 2017-08-15 12:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-08-15 12:42 - 2017-08-15 12:42 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-08-15 12:42 - 2017-08-15 12:42 - 000000000 ____D C:\Program Files\Malwarebytes
2017-08-15 12:42 - 2017-06-27 12:06 - 000077376 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-08-15 12:37 - 2017-08-15 12:38 - 065033984 _____ (Malwarebytes ) C:\Users\Marlies\Downloads\mb3-setup-consumer-3.1.2.1733-1.0.160-1.0.2251.exe
2017-08-15 11:05 - 2017-08-15 14:34 - 000000000 ____D C:\Users\Marlies\Desktop\Trojaner
2017-08-15 06:22 - 2017-08-15 06:23 - 000538120 _____ C:\Windows\Minidump\081517-23156-01.dmp
2017-08-14 23:23 - 2017-08-13 17:32 - 000001059 _____ C:\Users\Marlies\Desktop\TeamViewer 12.lnk
2017-08-14 23:21 - 2017-08-14 23:21 - 000001272 _____ C:\Users\Marlies\Downloads\TeamViewer_Setup (1) - Verknüpfung.lnk
2017-08-13 17:26 - 2017-08-13 17:32 - 000001059 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk
2017-08-13 17:26 - 2017-08-13 17:32 - 000001047 _____ C:\Users\Public\Desktop\TeamViewer 12.lnk
2017-08-13 17:26 - 2017-08-13 17:32 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2017-08-13 15:46 - 2017-08-13 15:46 - 015747576 _____ (TeamViewer GmbH) C:\Users\Marlies\Downloads\TeamViewer_Setup (1).exe
2017-08-13 14:54 - 2017-08-13 14:54 - 000041303 _____ C:\Users\Marlies\Downloads\FRST3.txt
2017-08-13 14:17 - 2017-08-13 14:17 - 000045497 _____ C:\Users\Marlies\Desktop\Addition.txt
2017-08-12 21:01 - 2017-08-13 14:08 - 000045494 _____ C:\Users\Marlies\Downloads\Addition.txt
2017-08-12 20:59 - 2017-08-13 14:08 - 000041303 _____ C:\Users\Marlies\Downloads\FRST.txt
2017-08-12 20:58 - 2017-08-15 14:35 - 000000000 ____D C:\FRST
2017-08-12 20:57 - 2017-08-12 20:57 - 002395648 _____ (Farbar) C:\Users\Marlies\Downloads\FRST64.exe
2017-08-12 19:28 - 2017-08-12 19:28 - 008185288 _____ (Malwarebytes) C:\Users\Marlies\Downloads\adwcleaner_7.0.1.0 (1).exe
2017-08-12 19:11 - 2017-08-12 19:11 - 001529352 _____ C:\Users\Marlies\Downloads\HijackThis - CHIP-Installer.exe
2017-08-09 16:38 - 2017-08-02 05:17 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-08-09 16:38 - 2017-07-21 15:40 - 000518144 _____ C:\Windows\SysWOW64\msjetoledb40.dll
2017-08-09 16:38 - 2017-07-21 15:40 - 000290816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjtes40.dll
2017-08-09 16:38 - 2017-07-15 12:10 - 000536688 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2017-08-09 16:38 - 2017-07-15 12:10 - 000140016 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2017-08-09 16:38 - 2017-07-15 12:06 - 000449840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2017-08-09 16:38 - 2017-07-15 12:06 - 000136832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2017-08-09 16:38 - 2017-07-14 22:08 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2017-08-09 16:38 - 2017-07-14 20:44 - 000033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2017-08-09 16:38 - 2017-07-14 08:49 - 025733632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-08-09 16:38 - 2017-07-14 08:19 - 000817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-08-09 16:38 - 2017-07-14 07:35 - 005981184 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-08-09 16:38 - 2017-07-14 06:40 - 015254016 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-08-09 16:38 - 2017-07-14 04:54 - 020270080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-08-09 16:38 - 2017-07-14 04:17 - 004546048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-08-09 16:38 - 2017-07-08 22:14 - 000376672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2017-08-09 16:38 - 2017-07-08 21:12 - 004169728 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-08-09 16:38 - 2017-07-08 19:45 - 007078912 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2017-08-09 16:38 - 2017-07-08 19:05 - 003631616 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-08-09 16:38 - 2017-07-08 18:39 - 005274624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2017-08-09 16:38 - 2017-07-08 18:37 - 007797248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2017-08-09 16:38 - 2017-07-08 18:23 - 002749952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-08-09 16:38 - 2017-07-08 17:59 - 005270016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2017-08-09 16:38 - 2017-07-08 05:46 - 000377688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys
2017-08-09 16:38 - 2017-07-08 05:16 - 007440728 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-08-09 16:38 - 2017-07-08 05:16 - 001674520 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-08-09 16:38 - 2017-07-08 05:16 - 001534072 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2017-08-09 16:38 - 2017-07-08 05:16 - 001499920 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-08-09 16:38 - 2017-07-08 05:16 - 001370328 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2017-08-09 16:38 - 2017-07-08 05:16 - 000086360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2017-08-09 16:38 - 2017-07-01 15:47 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000866816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswdat10.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswstr10.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000616448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrepl40.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000475648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxbde40.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspbde40.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000343552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000310272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstext40.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000240640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msltus40.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000144896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjint40.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000083968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjter40.dll
2017-08-09 16:38 - 2017-06-24 18:46 - 000424448 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll
2017-08-09 16:38 - 2017-06-24 18:16 - 000352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprapi.dll
2017-08-09 16:38 - 2017-06-13 19:51 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-08-09 16:38 - 2017-06-13 19:23 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2017-08-09 16:38 - 2017-06-13 19:19 - 000383488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlansec.dll
2017-08-09 16:38 - 2017-06-13 19:16 - 000024064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll
2017-08-09 16:38 - 2017-06-13 19:11 - 000238080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2017-08-09 16:38 - 2017-06-13 19:07 - 000304128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2017-08-09 16:38 - 2017-06-13 16:17 - 000656384 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2017-08-09 16:38 - 2017-06-13 16:16 - 000252416 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2017-08-09 16:38 - 2017-06-13 11:47 - 000445440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2017-08-09 16:38 - 2017-06-13 11:09 - 000445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-08-09 16:38 - 2017-06-13 10:22 - 001436160 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-08-09 16:38 - 2017-06-13 10:16 - 000445952 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2017-08-09 16:38 - 2017-06-13 10:10 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll
2017-08-09 16:38 - 2017-06-13 10:07 - 000301568 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll
2017-08-09 16:38 - 2017-06-13 10:03 - 000302080 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2017-08-09 16:38 - 2017-06-13 09:54 - 000374272 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2017-08-09 16:38 - 2017-06-13 09:50 - 001547264 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2017-08-09 16:38 - 2017-06-12 02:14 - 000276320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2017-08-09 16:38 - 2017-06-11 22:13 - 000301056 _____ (Microsoft Corporation) C:\Windows\system32\umrdp.dll
2017-08-09 16:38 - 2017-06-11 22:11 - 000346112 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2017-08-09 16:38 - 2017-06-11 22:02 - 002778112 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2017-08-09 16:38 - 2017-06-11 22:02 - 000299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
2017-08-09 16:38 - 2017-06-11 21:52 - 002463744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2017-08-09 16:38 - 2017-06-08 19:01 - 001737600 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-08-09 16:38 - 2017-06-08 19:01 - 001502000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-08-09 16:38 - 2017-06-08 03:48 - 002457936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-08-09 16:38 - 2017-06-07 06:25 - 000428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2017-08-09 16:38 - 2017-06-06 20:38 - 000607232 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2017-08-09 16:38 - 2017-06-06 19:44 - 000530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2017-08-09 16:38 - 2017-05-27 18:42 - 001115136 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2017-08-09 16:37 - 2017-07-14 08:44 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-08-09 16:37 - 2017-07-14 07:26 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-08-09 16:37 - 2017-07-14 07:10 - 000806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-08-09 16:37 - 2017-07-14 06:23 - 003240960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-08-09 16:37 - 2017-07-14 06:07 - 001545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-08-09 16:37 - 2017-07-14 05:58 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-08-09 16:37 - 2017-07-14 04:48 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-08-09 16:37 - 2017-07-14 04:38 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-08-09 16:37 - 2017-07-14 04:17 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2017-08-09 16:37 - 2017-07-14 04:12 - 000693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-08-09 16:37 - 2017-07-14 04:09 - 013663744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-08-09 16:37 - 2017-07-14 03:53 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-08-09 16:37 - 2017-07-14 03:50 - 001314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-08-09 16:37 - 2017-07-14 03:48 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-08-09 16:37 - 2017-06-15 16:17 - 002551808 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-08-09 16:37 - 2017-06-15 16:16 - 001920000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-08-09 16:37 - 2017-06-09 15:47 - 000448629 _____ C:\Windows\system32\ApnDatabase.xml
2017-08-09 16:37 - 2017-05-27 18:38 - 000056832 _____ (Microsoft Corporation) C:\Windows\system32\rdsdwmdr.dll
2017-08-09 16:24 - 2017-08-09 16:24 - 003376660 _____ C:\Users\Marlies\Downloads\SpeisekartePlatonWeb.pdf
2017-07-27 23:00 - 2017-07-27 23:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2017-07-27 23:00 - 2017-07-27 23:00 - 000000000 ____D C:\ProgramData\McAfee Security Scan
2017-07-26 10:51 - 2017-07-26 10:51 - 000021308 _____ C:\Users\Marlies\Downloads\...26-07-2017_1051.pdf
2017-07-21 11:11 - 2017-07-21 11:11 - 000143952 _____ C:\Users\Marlies\Downloads\1500628271864.pdf
2017-07-21 11:05 - 2017-07-21 11:05 - 000117974 _____ C:\Users\Marlies\Downloads\...-2017-07-10.pdf
2017-07-20 23:45 - 2017-07-20 23:45 - 000000992 _____ C:\Users\Marlies\Downloads\...(kasrello) - Verknüpfung.lnk
2017-07-18 19:06 - 2017-07-18 19:06 - 000003176 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-708953619-3332147771-3993505364-1001

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-08-15 14:31 - 2014-06-02 09:25 - 003875328 ___SH C:\Users\Marlies\Desktop\Thumbs.db
2017-08-15 13:45 - 2014-06-04 17:29 - 000000000 ____D C:\Users\Marlies\AppData\Roaming\Skype
2017-08-15 13:38 - 2014-05-15 15:43 - 000003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-708953619-3332147771-3993505364-1001
2017-08-15 13:36 - 2014-05-15 15:39 - 000000000 ___DO C:\Users\Marlies\SkyDrive
2017-08-15 13:36 - 2014-05-15 15:39 - 000000000 ____D C:\Users\Marlies\Documents\Youcam
2017-08-15 13:33 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-08-15 13:15 - 2015-04-21 09:19 - 000000000 ____D C:\Users\Marlies\AppData\Roaming\Telegram Desktop
2017-08-15 12:45 - 2014-05-20 17:06 - 000000000 ____D C:\Users\Marlies\AppData\Roaming\ClassicShell
2017-08-15 12:30 - 2014-05-15 15:48 - 000003938 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{D79CCDCC-5C13-412F-9EFD-1CDF8B9C287B}
2017-08-15 11:24 - 2013-08-22 15:25 - 000524288 ___SH C:\Windows\system32\config\BBI
2017-08-15 11:23 - 2015-09-13 16:46 - 000000000 ____D C:\Program Files (x86)\Yahoo!
2017-08-15 11:21 - 2015-03-06 21:02 - 000000000 ____D C:\AdwCleaner
2017-08-15 06:22 - 2017-05-20 01:28 - 541711296 _____ C:\Windows\MEMORY.DMP
2017-08-15 06:22 - 2017-05-20 01:28 - 000000000 ____D C:\Windows\Minidump
2017-08-14 23:24 - 2014-05-15 15:38 - 000000000 ____D C:\Users\Marlies
2017-08-14 23:20 - 2014-11-03 18:12 - 000883712 ___SH C:\Users\Marlies\Downloads\Thumbs.db
2017-08-14 23:15 - 2013-08-22 16:44 - 000398144 _____ C:\Windows\system32\FNTCACHE.DAT
2017-08-14 17:02 - 2014-06-17 18:46 - 000119808 _____ C:\Users\Marlies\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-08-13 17:26 - 2015-06-01 11:15 - 000000000 ____D C:\Users\Marlies\AppData\Roaming\TeamViewer
2017-08-13 17:21 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
2017-08-13 16:35 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
2017-08-13 15:58 - 2014-05-20 17:27 - 000000000 ____D C:\Windows\system32\MRT
2017-08-13 15:57 - 2014-05-20 19:18 - 000000000 ____D C:\Users\Marlies_2
2017-08-13 15:54 - 2014-05-20 17:27 - 140394280 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-08-12 18:29 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness
2017-08-12 12:56 - 2017-02-16 19:30 - 000000000 ____D C:\Users\Marlies\AppData\LocalLow\Mozilla
2017-08-11 16:34 - 2017-06-01 14:20 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-08-11 07:20 - 2017-02-11 18:16 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-08-10 17:03 - 2013-08-22 17:36 - 000000000 ___HD C:\Program Files\WindowsApps
2017-08-09 17:32 - 2014-05-21 20:42 - 000000000 ____D C:\ProgramData\CanonIJPLM
2017-08-08 15:30 - 2017-05-10 20:23 - 000002211 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-08 15:30 - 2017-05-10 20:23 - 000002199 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-08-08 15:00 - 2014-12-30 11:19 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-08-05 15:46 - 2014-06-01 22:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-08-05 15:30 - 2014-06-01 22:26 - 000173784 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2017-08-05 15:30 - 2014-06-01 22:26 - 000167464 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2017-08-02 00:03 - 2015-06-21 15:34 - 000000000 ____D C:\Users\Marlies\AppData\Local\.elfohilfe
2017-07-30 14:46 - 2015-05-04 09:57 - 000000000 ____D C:\Users\Marlies\Downloads\Telegram Desktop
2017-07-29 02:03 - 2013-08-22 17:38 - 000835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-07-29 02:03 - 2013-08-22 17:38 - 000177648 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-07-27 23:00 - 2016-05-10 23:23 - 000000000 ____D C:\Program Files\McAfee Security Scan
2017-07-27 23:00 - 2016-04-30 19:15 - 000001984 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2017-07-25 08:50 - 2013-09-05 21:28 - 000767518 _____ C:\Windows\system32\perfh007.dat
2017-07-25 08:50 - 2013-09-05 21:28 - 000160240 _____ C:\Windows\system32\perfc007.dat
2017-07-25 08:50 - 2013-09-05 21:13 - 001783084 _____ C:\Windows\system32\PerfStringBackup.INI
2017-07-21 15:33 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\NDF
2017-07-20 04:56 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache
2017-07-19 18:16 - 2013-09-07 12:35 - 000000000 ____D C:\ProgramData\Package Cache
2017-07-19 17:57 - 2014-12-11 00:09 - 000000000 ____D C:\Windows\system32\appraiser
2017-07-19 17:56 - 2016-04-30 19:15 - 000000000 ____D C:\Program Files\TrueKey
2017-07-18 19:06 - 2016-04-18 22:43 - 000002366 _____ C:\Users\Marlies\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2017-07-18 19:06 - 2014-05-20 19:09 - 000003184 _____ C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-708953619-3332147771-3993505364-1001

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-12-21 13:17 - 2016-12-21 13:17 - 007680000 _____ () C:\Program Files (x86)\GUTE6BF.tmp
2014-06-17 18:46 - 2017-08-14 17:02 - 000119808 _____ () C:\Users\Marlies\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-09-07 12:29 - 2013-09-07 12:29 - 000000000 ____H () C:\ProgramData\DP45977C.lfl
2013-09-12 05:59 - 2013-09-12 05:59 - 000000032 _____ () C:\ProgramData\Temp.log

Einige Dateien in TEMP:
====================
2016-11-15 16:20 - 2016-11-15 16:20 - 011127352 _____ (Albelli                                                     ) C:\Users\Marlies\AppData\Local\Temp\0BB5CC15-AA68-4718-93A1-822DCC2015E9.exe
2014-06-01 22:26 - 2014-08-07 16:50 - 000000000 ____D () C:\Users\Marlies\AppData\Local\Temp\avgnt.exe
2016-11-28 23:54 - 2016-11-28 23:54 - 012545632 _____ (Albelli                                                     ) C:\Users\Marlies\AppData\Local\Temp\F177397B-C751-4B7D-BE67-6A8FD23C9C48.exe
2016-08-04 23:38 - 2011-02-07 11:09 - 000850320 ____N (CANON INC.) C:\Users\Marlies\AppData\Local\Temp\MSETUP4.EXE
2016-08-04 23:41 - 2011-03-23 06:48 - 000349592 ____R (CANON INC.) C:\Users\Marlies\AppData\Local\Temp\uninstall.exe
2017-04-08 22:12 - 2017-04-08 22:12 - 013705448 _____ (Nero AG                                                     ) C:\Users\Marlies\AppData\Local\Temp\Update_Simplitec_PowerSuite_Auto.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-08-13 16:30

==================== Ende von FRST.txt ============================

Und hier die Addition.txt

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-08-2017
durchgeführt von Marlies (15-08-2017 14:37:48)
Gestartet von C:\Users\Marlies\Desktop
Windows 8.1 (Update) (X64) (2014-05-15 13:38:24)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-708953619-3332147771-3993505364-500 - Administrator - Disabled)
Gast (S-1-5-21-708953619-3332147771-3993505364-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-708953619-3332147771-3993505364-1003 - Limited - Enabled)
Marlies (S-1-5-21-708953619-3332147771-3993505364-1001 - Administrator - Enabled) => C:\Users\Marlies
Marlies_2 (S-1-5-21-708953619-3332147771-3993505364-1004 - Limited - Enabled) => C:\Users\Marlies_2

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.012.20095 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Albelli Fotobücher (HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\{EE20E438-B675-4421-AB07-928F0EC9FB22}_is1) (Version: 11.1.1.1680 - Albelli)
Albelli Fotobücher (HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\{EE20E438-B675-4421-AB07-928F0EC9FB22}_is1) (Version: 11.1.1.1680 - Albelli)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.29.32 - Avira Operations GmbH & Co. KG)
Avira Connect (HKLM-x32\...\{661C79C2-D156-419C-81CA-D1A2523B0841}) (Version: 1.2.91.10326 - Avira Operations GmbH & Co. KG) Hidden
Avira Connect (HKLM-x32\...\{dd9049b8-31d1-40bd-8c8c-97a7b087a78f}) (Version: 1.2.91.10326 - Avira Operations GmbH & Co. KG)
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 06.20.07 - AVM Berlin)
calibre (HKLM-x32\...\{D47B7229-AC24-4D79-96AB-880649FFC892}) (Version: 2.19.0 - Kovid Goyal)
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version:  - )
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.1 - Canon Inc.)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version:  - )
Canon MG5300 series Benutzerregistrierung (HKLM-x32\...\Canon MG5300 series Benutzerregistrierung) (Version:  - )
Canon MG5300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5300_series) (Version:  - Canon Inc.)
Canon MG5300 series On-screen Manual (HKLM-x32\...\Canon MG5300 series On-screen Manual) (Version:  - )
Canon MP Navigator EX 3.0 (HKLM-x32\...\MP Navigator EX 3.0) (Version:  - )
Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version:  - )
Canon MP490 series Benutzerregistrierung (HKLM-x32\...\Canon MP490 series Benutzerregistrierung) (Version:  - )
Canon MP490 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP490_series) (Version:  - )
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )
Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version:  - )
Canon Utilities Digital Photo Professional 3.11 (HKLM-x32\...\Digital Photo Professional) (Version: 3.11.10.0 - Canon Inc.)
Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.11.0.1 - Canon Inc.)
Canon Utilities ImageBrowser EX (HKLM-x32\...\ImageBrowser EX) (Version: 1.5.0.6 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.23.47 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.10.0.0 - Canon Inc.)
Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version:  - )
Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft)
CyberLink Home Cinema 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)
CyberLink PowerDirector 11 (HKLM\...\{551F492A-01B0-4DC4-866F-875EC4EDC0A8}) (Version: 11.0.0.3215 - Ihr Firmenname) Hidden
CyberLink PowerRecover (HKLM\...\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.0913 - CyberLink Corp.) Hidden
CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.0913 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Digital Photo Navigator 1.5 (HKLM-x32\...\{CF9CD37C-E29A-11D5-AE3D-005004B8E30C}) (Version:  - )
Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.3.2.2 - Dolby Laboratories Inc)
DriverTools 1.0 (HKLM-x32\...\DriverTools) (Version: 1.0 - Huawei Technologies Co.,Ltd)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 18.1.22140 - Landesfinanzdirektion Thüringen)
Everio MediaBrowser (HKLM-x32\...\{5CA03ECF-B4A6-464B-9F5D-64D8B61B083F}) (Version: 1.00.013 - PIXELA)
Express Burn (HKLM-x32\...\ExpressBurn) (Version: 4.78 - NCH Software)
FlexPoints 2.0 (HKLM-x32\...\{F460E5B9-E678-484B-A2E8-BFDF93A57A03}) (Version: 1.00.0000 - Weight Watchers)
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalerija (HKLM-x32\...\{BE2DE42A-6696-4EE7-9E59-B9385F339DD3}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fotótár (HKLM-x32\...\{8D977EAA-DF3E-4054-A98D-F27AEB0248DD}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com)
Galerie de photos (HKLM-x32\...\{F4D99A13-F63A-4FC1-8799-CFFDB78DDFB3}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.90 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
inSSIDer Home (HKLM-x32\...\{9E54E4AE-B67A-4925-8E92-0E1F9817FD73}) (Version: 3.1.2.1 - MetaGeek, LLC)
Intel Security True Key (HKLM\...\TrueKey) (Version: 4.19.108.1 - Intel Security)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.13.1706 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3282 - Intel Corporation)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (HKLM\...\{252CC716-1EDE-4C7F-8881-15B7AEBF8F5C}) (Version: 16.5.0.0096 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 3.0.1335.5) (HKLM\...\{302600C1-6BDF-4FD1-1307-148929CC1385}) (Version: 3.1.1307.0362 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{72814a2c-2e03-4a50-b30a-43e7884b3934}) (Version: 16.5.1 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
Junk Mail filter update (HKLM-x32\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MAGIX Foto Designer 7 (HKLM\...\{FEF04BA1-5C1A-4445-8EB7-B2E4D2FFCAC7}) (Version: 7.0.1.1 - MAGIX AG) Hidden
MAGIX Foto Designer 7 (HKLM-x32\...\MAGIX_{FEF04BA1-5C1A-4445-8EB7-B2E4D2FFCAC7}) (Version: 7.0.1.1 - MAGIX AG)
Mahjongg - Ancient Mayas (HKLM-x32\...\{18D52937-2121-49FA-B734-EA1EF38AA04F}_is1) (Version:  - cerasus.media GmbH)
Malwarebytes Version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.587.1 - McAfee, Inc.)
MediaCoder x64 0.8.43.5830 (HKLM\...\MediaCoder x64) (Version: 0.8.43.5830 - Mediatronic)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office 2000 Premium (HKLM-x32\...\{00000407-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2816 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{0FD2B9C6-DB91-48EA-9518-AB5B68CA1E28}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{3C5F91EF-5C0B-4D13-BCBE-0FC6FC3ED7F9}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{5B91D34E-B583-4E08-BB48-4F18086A0DB7}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{705C31EB-E0AB-4C1F-A834-993F9E08B085}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{7693587D-5D66-4208-ABEA-C370217D1D9B}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{8E038DF1-B140-46D6-9D82-1BDF8DC56764}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{E169436E-49D8-419B-A5C0-D245EAF99611}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 53.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 53.0.2 (x86 de)) (Version: 53.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 53.0.2.6333 - Mozilla)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
Music Recorder (HKLM-x32\...\{E3579DBA-00BA-4E32-AE90-63B6CDA30D56}) (Version: 14.0.62200.0 - Audials AG)
Nero 7 Essentials (HKLM-x32\...\{D34D82E0-4600-407B-9478-8506C1DD1031}) (Version: 7.02.3307 - Nero AG)
OLYMPUS Digital Camera Updater (HKLM-x32\...\{D18925CE-5AF9-4394-8EF7-1081FFE7E98B}) (Version: 1.2.0 - OLYMPUS IMAGING CORP.)
OLYMPUS Viewer 3 (HKLM-x32\...\{F0C70F68-E57F-4D76-A012-E20F8E12946E}) (Version: 1.4.1 - OLYMPUS IMAGING CORP.)
online-foto Bestellsoftware (HKLM-x32\...\online-foto Bestellsoftware) (Version: 5.1.5 - CEWE Stiftung u Co. KGaA)
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)
PDF Architect 2 Convert Module (HKLM-x32\...\{53434783-F9A7-4D64-B91A-05A3BF925D70}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 Create Module (HKLM-x32\...\{3D0D9604-0173-488D-9694-2638C44D7579}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 Edit Module (HKLM-x32\...\{8B0A956F-9BE6-495B-AF80-7B5B42061D79}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 Forms Module (HKLM-x32\...\{4CB8D214-0400-45FA-B084-AAB0C74AD032}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 Insert Module (HKLM-x32\...\{DD7BB68A-7D8A-4F62-806A-3424C2A170E7}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 OCR Module (HKLM-x32\...\{952E5B8F-82C2-46D1-B642-37B2635CE440}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 Review Module (HKLM-x32\...\{664D6EE3-9A35-4284-B9D2-80A509DF9295}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 Secure Module (HKLM-x32\...\{99E0C0D4-6746-44EE-A132-5E7E3D6FAAFB}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 View Module (HKLM-x32\...\{D691E998-CF53-4F6C-AC20-E4284660E0E7}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
PriMus Free 1.1 (Build 11020) (HKLM-x32\...\PriMus Free_is1) (Version: 1.1.0.11020 - Columbus Soft)
Raccolta foto (HKLM-x32\...\{FA6BC7A5-85B3-4DC2-825C-D508E386151A}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.30164 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7030 - Realtek Semiconductor Corp.)
simplitec simplicheck (HKLM-x32\...\{183D780B-28F9-41BA-A2CB-605F324A5781}) (Version: 1.3.10.0 - simplitec GmbH)
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype™ 7.27 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.27.101 - Skype Technologies S.A.)
Sony Ericsson PC Companion 1.50.52 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 1.50.52 - Sony Ericsson)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.8.0 - Synaptics Incorporated)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.81460 - TeamViewer)
Telegram Desktop version 1.1.19 (HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.1.19 - Telegram Messenger LLP)
Telegram Desktop version 1.1.19 (HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.1.19 - Telegram Messenger LLP)
WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 6.53 - NCH Software)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (HKLM\...\2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-708953619-3332147771-3993505364-1001_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Marlies\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileCoAuthLib64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
ContextMenuHandlers1: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2013-09-10] (Cyberlink)
ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-08-05] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-16] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-16] (Alexander Roshal)
ContextMenuHandlers1-x32: [WondershareVideoConverterFileOpreation] -> {FEB746CA-95C2-485F-B386-C30D4E56D22E} => C:\Windows\SysWOW64\WSCM64.dll [2015-02-27] ()
ContextMenuHandlers2: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2013-09-10] (Cyberlink)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2013-08-26] (Intel Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-08-05] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers6: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\Windows\system32\StartMenuHelper64.dll [2014-04-20] (IvoSoft)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-16] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-16] (Alexander Roshal)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {145D433F-F4F5-4F0B-A64B-8C8291F19A6A} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-08-01] (Synaptics Incorporated)
Task: {45FD7644-A331-4E36-BCD1-DFC43A0CFAEA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {7F880913-CCFC-4B27-B7C3-B781B2E5FFE7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {993A1863-842C-4EAC-8319-9713C2B9D95D} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2017-08-13] (Microsoft Corporation)
Task: {CCB5A282-43DA-4578-B841-CAF077C81C01} - System32\Tasks\{DD49092F-C446-4EEC-BD77-C4F3994ACAFA} => C:\Windows\system32\pcalua.exe -a E:\System\dx80a.exe -d E:\System
Task: {D56949F9-18CC-4B3E-9C54-796189BBE1A0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {D8795768-9D8C-47D4-8E00-6027B7D45D6D} - System32\Tasks\{802886A1-E095-435D-AADC-049F9EE278AA} => C:\Windows\system32\pcalua.exe -a C:\Users\Marlies\AppData\Roaming\key-find\UninstallManager.exe -c  -ptid=cvs
Task: {E5A22EA6-4AC2-487C-8B07-531491916A09} - System32\Tasks\{C7994087-E7AF-4290-9F3C-979444759543} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Einfach Genial\EinfachGenial.exe" -d "C:\Program Files (x86)\Einfach Genial\"
Task: {EA9A4FAB-99BE-473F-A97F-327175694D43} - System32\Tasks\Dolby Selector => C:\Program Files\Dolby Digital Plus\ddp.exe [2013-08-08] (Dolby Laboratories Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


ShortcutWithArgument: C:\Users\Marlies\Desktop\gesammeltes Desktop\CrossLoop Connect.lnk -> C:\Users\Marlies\AppData\Local\CrossLoop\CrossLoopConnect.exe (CrossLoop) -> -ap=crossloop -port=5910 -udp=www.CrossLoop.com -webserver=server.crossloop.com -webservice=www.crossloop.com -startup=server 
ShortcutWithArgument: C:\Users\Marlies\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CrossLoop\CrossLoop.lnk -> C:\Users\Marlies\AppData\Local\CrossLoop\CrossLoopConnect.exe (CrossLoop) -> -ap=crossloop -port=5910 -udp=www.CrossLoop.com -webserver=server.crossloop.com -webservice=www.crossloop.com -startup=server 
ShortcutWithArgument: C:\Users\Marlies\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\CrossLoop.lnk -> C:\Users\Marlies\AppData\Local\CrossLoop\CrossLoopConnect.exe (CrossLoop) -> -ap=crossloop -port=5910 -udp=www.CrossLoop.com -webserver=server.crossloop.com -webservice=www.crossloop.com -startup=server 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-11-15 13:32 - 2015-02-27 15:38 - 000721263 _____ () C:\Windows\SysWOW64\WSCM64.dll
2014-05-21 20:42 - 2011-02-07 09:56 - 000138192 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
2013-09-07 12:40 - 2012-12-26 11:36 - 000114688 _____ () C:\Program Files (x86)\FWdriver_v\POSHXMain.exe
2014-05-20 20:41 - 2013-03-06 14:42 - 000389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2017-08-15 12:42 - 2017-06-27 12:06 - 002260432 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2013-09-07 12:40 - 2013-09-03 21:38 - 000647168 _____ () C:\Program Files (x86)\FWdriver_v\POSHX.exe
2016-03-15 10:26 - 2016-03-15 10:26 - 004535192 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe
2014-12-21 15:41 - 2014-04-08 10:13 - 000069120 _____ () C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe
2017-08-08 15:30 - 2017-08-02 09:39 - 003824472 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.90\libglesv2.dll
2017-08-08 15:30 - 2017-08-02 09:39 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.90\libegl.dll
2013-09-07 12:40 - 2013-07-24 10:23 - 000106496 _____ () C:\Program Files (x86)\FWdriver_v\KIPowerDll.dll
2013-09-07 12:40 - 2013-07-11 12:41 - 000348160 _____ () C:\Program Files (x86)\FWdriver_v\SuperHealthDLL.dll
2013-09-07 12:40 - 2012-06-22 20:32 - 000266240 _____ () C:\Program Files (x86)\FWdriver_v\SuperSpeederDLL.dll
2016-03-15 10:26 - 2016-03-15 10:26 - 000049424 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_thread-vc90-mt-1_39.dll
2016-03-15 10:26 - 2016-03-15 10:26 - 000048400 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_date_time-vc90-mt-1_39.dll
2016-03-15 10:26 - 2016-03-15 10:26 - 000068504 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\CrashRpt.dll
2016-03-15 10:26 - 2016-03-15 10:26 - 000618256 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_regex-vc90-mt-1_39.dll
2016-03-15 10:26 - 2016-03-15 10:26 - 000544152 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\StreamingClient.dll
2016-03-15 10:26 - 2016-03-15 10:26 - 000016144 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_system-vc90-mt-1_39.dll
2016-03-15 10:26 - 2016-03-15 10:26 - 000040856 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\CrashHandlerNET.dll
2014-12-21 15:41 - 2014-04-08 10:08 - 000112128 _____ () C:\Program Files (x86)\Canon\ImageBrowser EX\MFMFileSystemWatcher.dll
2013-09-12 06:56 - 2013-08-05 09:49 - 000627672 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2013-08-05 16:48 - 2013-08-05 16:48 - 000016856 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2014-05-21 20:47 - 2008-07-03 15:18 - 000364544 ____N () C:\Program Files (x86)\PIXELA\Everio MediaBrowser\pxl_m17n_tool.dll
2015-11-15 13:32 - 2015-04-28 16:22 - 001498112 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2015-11-15 13:32 - 2014-05-19 18:19 - 000137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2013-09-07 12:10 - 2013-08-08 13:25 - 001242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\Temp:56E2E879 [246]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 15:25 - 2013-08-22 15:25 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Marlies\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\Control Panel\Desktop\\Wallpaper -> C:\Users\Marlies\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
HKU\S-1-5-21-708953619-3332147771-3993505364-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133432028\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\MEDION\wallpaper.jpg
DNS Servers: 80.69.96.12 - 81.210.129.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{8B219A9C-3E95-4887-B558-0A20C3849406}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{55B1AAA0-1495-4582-AA48-9DD5FE0C9324}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{2B993C4B-B78F-402C-91B3-32B5F826346F}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{90A06370-CC6A-4993-AE7D-905297E8D278}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
FirewallRules: [{DC152F63-F1D3-4181-AE00-8C232B30FBF9}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
FirewallRules: [{9F2453BC-E7A0-4197-BB67-11A849EF3BD1}] => (Allow) C:\Users\Marlies\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{9AC8C66D-A4A0-43A9-85FE-DDBE39F6FEFE}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{D7B2403C-AD42-441B-99CC-7F24749CE4FC}] => (Allow) LPort=2869
FirewallRules: [{62642C0A-EAA3-418F-B6FF-4DFABDFCE1DF}] => (Allow) LPort=1900
FirewallRules: [{269BE6C4-2529-4920-BC89-90562EB4559C}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{0EF250F3-BEB1-4580-9B21-0B4920E3D812}] => (Allow) C:\Program Files\CyberLink\PowerDirector11\PDR10.EXE
FirewallRules: [TCP Query User{30D7B601-7145-4279-9DC8-CD63CEEF410B}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{19E2251F-9D9A-4F3F-AF13-CB1F4F6F5B90}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{674BBF60-83EC-4D49-BC50-4A8D2C0E23AB}] => (Allow) C:\Users\Marlies\AppData\Local\CrossLoop\vncviewer.exe
FirewallRules: [{991741BC-B7DE-4AE4-86E4-7C57C27E8CEF}] => (Allow) C:\Users\Marlies\AppData\Local\CrossLoop\vncviewer.exe
FirewallRules: [{587DB821-EE55-4343-A6DB-FC0E0A6E7F28}] => (Allow) C:\Users\Marlies\AppData\Local\CrossLoop\tvnserver.exe
FirewallRules: [{31BCFED6-4B00-4337-BAC8-082E9ABA39AB}] => (Allow) C:\Users\Marlies\AppData\Local\CrossLoop\tvnserver.exe
FirewallRules: [TCP Query User{79D86FFA-D8C6-4252-83BC-4A5943BB7492}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{18961C28-5FA2-4BD0-812F-435D307495CE}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{2FDFBC6C-3AAA-420C-A13E-6BCBEFCC5707}C:\program files (x86)\wondershare\vcu\medialibserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\medialibserver.exe
FirewallRules: [UDP Query User{80D9ED45-F5AC-4F4F-AD81-E79788EBEE11}C:\program files (x86)\wondershare\vcu\medialibserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\medialibserver.exe
FirewallRules: [TCP Query User{62317F72-4518-4EF9-B0FE-891B8AE34422}C:\program files (x86)\wondershare\vcu\mediaserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\mediaserver.exe
FirewallRules: [UDP Query User{15F2D807-18A8-4C16-BE0F-21EE162FF060}C:\program files (x86)\wondershare\vcu\mediaserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\mediaserver.exe
FirewallRules: [{43637725-3109-4A55-944F-2A471CE3684C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{259979CB-6D50-420A-AA41-80218EA26266}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{E944FA45-73CD-49C6-8B91-CF4D30E620F5}C:\users\marlies\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light] => (Block) C:\users\marlies\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light
FirewallRules: [UDP Query User{ADFF7C71-3FB6-423D-8934-F4397726FF2B}C:\users\marlies\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light] => (Block) C:\users\marlies\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light
FirewallRules: [{CBE23198-7DA5-4CA2-8258-DCC8D46A1F67}] => (Allow) C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUp.exe
FirewallRules: [{EDEBD6B2-21BE-4AF3-B12A-5579AE31D8F7}] => (Allow) C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUp.exe
FirewallRules: [{19E7BCCF-1E7B-4771-AADF-005603F1FC0E}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe
FirewallRules: [{3CC1DAF6-7789-4F41-97ED-46D05A46B74D}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe
FirewallRules: [{0114B05C-5AB4-4746-BDEF-285A47D4807C}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll
FirewallRules: [{BEB671ED-E6AB-41C5-97E7-AEA42072F475}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll
FirewallRules: [{85210530-AB5A-477F-BC00-390D7967D42A}] => (Allow) C:\Users\Marlies\Downloads\WLAN-Optimierer (1).exe
FirewallRules: [{065D11A9-B330-4118-9C13-63DF353F6630}] => (Allow) C:\Users\Marlies\Downloads\WLAN-Optimierer (1).exe
FirewallRules: [{CA0FC07B-E636-4A4E-8663-046F71034854}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{3305F1AB-D85F-427B-AF97-08BF4F1AEA40}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E441B1EC-AF32-4A43-AB22-85B910BF6F24}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{8E5D2BAF-65B0-44D0-8F54-4C35840428F3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{36087549-1626-46EA-981E-CCAD684FE34C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

==================== Wiederherstellungspunkte =========================

28-07-2017 11:09:16 Geplanter Prüfpunkt
06-08-2017 19:22:46 Geplanter Prüfpunkt
13-08-2017 15:52:04 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (08/15/2017 01:14:25 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20911 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 18c0

Startzeit: 01d315b5e68cf280

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: dc42c48f-81a9-11e7-8365-5c514f28d736

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1

Error: (08/14/2017 11:17:54 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ZeroConfigService.exe, Version: 16.5.0.0, Zeitstempel: 0x52179ea0
Name des fehlerhaften Moduls: MurocApi.dll, Version: 16.5.0.0, Zeitstempel: 0x52179d03
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000002bcd8
ID des fehlerhaften Prozesses: 0xe0c
Startzeit der fehlerhaften Anwendung: 0x01d315429d365647
Pfad der fehlerhaften Anwendung: C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
Pfad des fehlerhaften Moduls: C:\Program Files\Intel\WiFi\bin\MurocApi.dll
Berichtskennung: 090e28ff-8136-11e7-8362-eca86b578664
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (08/14/2017 05:02:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmplayer.exe, Version: 12.0.9600.17415, Zeitstempel: 0x545046f0
Name des fehlerhaften Moduls: MpvDec_imx.ax, Version: 2.0.2.2, Zeitstempel: 0x4892c1ea
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00004474
ID des fehlerhaften Prozesses: 0x1e78
Startzeit der fehlerhaften Anwendung: 0x01d3150e51d92da1
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Windows Media Player\wmplayer.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\PIXELA\Everio MediaBrowser\MpvDec_imx.ax
Berichtskennung: 9b2cd969-8101-11e7-8361-5c514f28d736
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (08/14/2017 09:06:00 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80070005).

Error: (08/13/2017 01:57:03 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80070005).

Error: (08/09/2017 04:09:28 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20911 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1f08

Startzeit: 01d310e87e89834f

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: 57fae5f2-7d0c-11e7-835f-5c514f28d736

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1

Error: (08/07/2017 10:25:10 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80070005).

Error: (08/06/2017 01:38:37 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: WLANExt.exe, Version: 6.3.9600.17415, Zeitstempel: 0x545041d0
Name des fehlerhaften Moduls: IWMSSvc.dll_unloaded, Version: 16.5.0.0, Zeitstempel: 0x52179d83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000131745
ID des fehlerhaften Prozesses: 0x1408
Startzeit der fehlerhaften Anwendung: 0x01d30e43edcf1f08
Pfad der fehlerhaften Anwendung: C:\Windows\system32\WLANExt.exe
Pfad des fehlerhaften Moduls: IWMSSvc.dll
Berichtskennung: 33516914-7a37-11e7-835d-5c514f28d736
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (08/05/2017 07:19:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: WLANExt.exe, Version: 6.3.9600.17415, Zeitstempel: 0x545041d0
Name des fehlerhaften Moduls: IWMSSvc.dll_unloaded, Version: 16.5.0.0, Zeitstempel: 0x52179d83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000d3491
ID des fehlerhaften Prozesses: 0xfec
Startzeit der fehlerhaften Anwendung: 0x01d30e0f0470031a
Pfad der fehlerhaften Anwendung: C:\Windows\system32\WLANExt.exe
Pfad des fehlerhaften Moduls: IWMSSvc.dll
Berichtskennung: 4ad90e5c-7a02-11e7-835d-5c514f28d736
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (07/31/2017 01:45:08 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80070005).


Systemfehler:
=============
Error: (08/15/2017 01:33:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Service Installer TrueKey" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (08/15/2017 01:33:04 PM) (Source: Microsoft-Windows-Directory-Services-SAM) (EventID: 16953) (User: NT-AUTORITÄT)
Description: Fehler "126" beim Laden der Kennwortbenachrichtigungs-DLL ""C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter"". Stellen Sie sicher, dass der in der Registrierung definierte DLL-Pfad "HKLM\System\CurrentControlSet\Control\Lsa\Notification Packages" sich auf einen korrekten und absoluten Pfad (<Laufwerk>:\<Pfad>\<Dateiname>.<Erw.>) bezieht und nicht auf einen relativen oder ungültigen Pfad. Wenn der DLL-Pfad falsch ist, stellen Sie sicher, dass sich alle Hilfsdateien im gleichen Verzeichnis befinden und dass das Systemkonto sowohl auf den DLL-Pfad als auch die Hilfsdateien Lesezugriff hat.  Wenden Sie sich an den Anbieter der Benachrichtigungs-DLL, um weitere Unterstützung zu erhalten. Weitere Informationen finden Sie im Internet unter "hxxp://go.microsoft.com/fwlink/?LinkId=245898".

Error: (08/15/2017 11:25:40 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Service Installer TrueKey" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (08/15/2017 11:25:07 AM) (Source: BTHUSB) (EventID: 17) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (08/15/2017 11:25:05 AM) (Source: Microsoft-Windows-Directory-Services-SAM) (EventID: 16953) (User: NT-AUTORITÄT)
Description: Fehler "126" beim Laden der Kennwortbenachrichtigungs-DLL ""C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter"". Stellen Sie sicher, dass der in der Registrierung definierte DLL-Pfad "HKLM\System\CurrentControlSet\Control\Lsa\Notification Packages" sich auf einen korrekten und absoluten Pfad (<Laufwerk>:\<Pfad>\<Dateiname>.<Erw.>) bezieht und nicht auf einen relativen oder ungültigen Pfad. Wenn der DLL-Pfad falsch ist, stellen Sie sicher, dass sich alle Hilfsdateien im gleichen Verzeichnis befinden und dass das Systemkonto sowohl auf den DLL-Pfad als auch die Hilfsdateien Lesezugriff hat.  Wenden Sie sich an den Anbieter der Benachrichtigungs-DLL, um weitere Unterstützung zu erhalten. Weitere Informationen finden Sie im Internet unter "hxxp://go.microsoft.com/fwlink/?LinkId=245898".

Error: (08/15/2017 11:24:05 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\Windows\System32\IWMSSvc.dll

Error: (08/15/2017 11:24:05 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\Windows\System32\IWMSSvc.dll

Error: (08/15/2017 11:24:01 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\Windows\System32\IWMSSvc.dll

Error: (08/15/2017 11:23:57 AM) (Source: DCOM) (EventID: 10010) (User: KASRELLO)
Description: Der Server "{4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (08/15/2017 11:23:24 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Intel Security True Key" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i3-4010U CPU @ 1.70GHz
Prozentuale Nutzung des RAM: 63%
Installierter physikalischer RAM: 4004.02 MB
Verfügbarer physikalischer RAM: 1444.97 MB
Summe virtueller Speicher: 8100.02 MB
Verfügbarer virtueller Speicher: 5027.5 MB

==================== Laufwerke ================================

Drive c: (Boot) (Fixed) (Total:404.05 GB) (Free:63.79 GB) NTFS
Drive d: (Recover) (Fixed) (Total:60 GB) (Free:45.11 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 3782765E)

Partition: GPT.

==================== Ende von Addition.txt ============================

So, ich hoffe, jetzt passt alles und es ist alles richtig

Grüße Kasrello

Tician · 16.08.2017, 10:52

Hi,

Falsche ADW-Datei. Du hast mir folgende Datei gezeigt:
C:\AdwCleaner\AdwCleaner[S2].txt
In meiner Anleitung steht das ich diese Datei brauche:
C:\AdwCleaner\AdwCleaner[Cx].txt
S = Search; C = Clean
Ich brauche das Clean-Log, also das mit dem 'C' im Namen.

Zitat:

Ich habe erst die ADW, erzeugt und die dann gespeichert.

Speichern solltest du auch nichts manuell:

Code:

ATTFilter

Am Ende des Suchlaufs öffnet sich automatisch eine Logdatei. Schließe diese.
Klicke nun auf Löschen

Schritt 1:

Richtige ADW-Datei posten - wenn diese nicht vorhanden ist dann bitte ADW genau nach meiner Anleitung ausführen.

Schritt 2:

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 3:

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Untersuchen.
FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Kasrello · 16.08.2017, 19:34

Hallo Tician,

hier die ADW mit dem C, die habe ich nicht neu erzeugt, die war im Ordner vorhanden.

Sorry und Danke

Code:

ATTFilter

# AdwCleaner 7.0.1.0 - Logfile created on Tue Aug 15 09:23:45 2017
# Updated on 2017/05/08 by Malwarebytes 
# Running on Windows 8.1 (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

Deleted: APNMCP


***** [ Folders ] *****

Deleted: C:\Windows\System32\config\systemprofile\AppData\Local\SearchProtect
Deleted: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\SearchProtect
Deleted: C:\Windows\System32\config\systemprofile\AppData\Local\YSearchUtil
Deleted: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\YSearchUtil
Deleted: C:\Users\Marlies\AppData\Local\YSearchUtil
Deleted: C:\Program Files (x86)\Yahoo!\yset
Deleted: C:\ProgramData\AskPartnerNetwork
Deleted: C:\ProgramData\Application Data\AskPartnerNetwork
Deleted: C:\Program Files (x86)\AskPartnerNetwork
Deleted: C:\Users\All Users\AskPartnerNetwork
Deleted: C:\Users\Marlies\AppData\Local\AskPartnerNetwork
Deleted: C:\ProgramData\apn
Deleted: C:\ProgramData\Application Data\apn
Deleted: C:\Users\All Users\apn
Deleted: C:\Users\Marlies\AppData\Local\Temp\apn
Deleted: C:\Users\Marlies\AppData\Local\FileViewPro
Deleted: C:\Users\Marlies\AppData\Local\Temp\FileViewPro


***** [ Files ] *****

Deleted: C:\Users\All Users\Desktop\simplicheck.lnk
Deleted: C:\Users\Public\Desktop\simplicheck.lnk


***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cloudfront.net
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cloudfront.net
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\d31bfnnwekbny6.cloudfront.net
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\d31bfnnwekbny6.cloudfront.net
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\key-find.com
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.key-find.com
Deleted: [Key] - HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Internet Explorer\DOMStorage\izito.de
Deleted: [Key] - HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Internet Explorer\DOMStorage\www.izito.de
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! SearchSet
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5350-4500-76A7-A758B70C2300}
Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98FD652EB4839214E97B69DD8EEA1D29
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\930D9472A978D7A4EB16BF4DECB173B7
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8036C72171EF4ba46856BF57969F6A36
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A97C590397DCC454AA8923563BAB10E4
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CFA51B44D54927c4E9B7BC1D3FD1E49F
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3255D95681398614190EDF0A4F3F77DB
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DB42320A8525634AA089F0BEC86473B
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DFE9F0BD163D827438CB6AD6B100EC48
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\499E8534DA7E759419D2048CB780D3D5
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15E6C514FEFC09f45BAFAAE1D7546ED4
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89BB7852687BDC34B9A81E01C7FF9173
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F739A19A8327dc64C9A8B641A9E89646
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71E54748EDD3dc1468548785DC856EDA
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22468B0D6050b2e46B9C4B67A8F59577
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D14A7F65792054F418578C78367D13F7
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\754590DD06DE8d249B526503432F99D4
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B08932C78B697C244BE7BA3E6FF09B62
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CC5A38A64D6098468BC8395BA0EFF03
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2251BF05A2F606d43BB064BD63CBD87E
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CBC85D72B148084ABE8C2F072F781F4
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\62255E52F19EC97429A42D59D49024FA
Deleted: [Key] - HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AEB93799E8B47D14CA356E4343D632A4
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5DCE3C04E576AD15F972B67D0725120C
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE7C2A75DF08824E9CEFDE20F655BD9
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\158D6D9E3FE81fa428925F22ACB3A965
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CDF313E9B28c944FBC7579CF4949414
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8DF9A1AC557F56c49B56F6B83E293C15
Deleted: [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|ApnTBMon
Deleted: [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|ApnTBMon
Deleted: [Key] - HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaaiabcopkplhgaedhbloeejhhankf
Deleted: [Key] - HKU\.DEFAULT\Software\AskPartnerNetwork
Deleted: [Key] - HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\AskPartnerNetwork
Deleted: [Key] - HKU\S-1-5-18\Software\AskPartnerNetwork
Deleted: [Key] - HKCU\Software\AskPartnerNetwork
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries deleted.

*************************

::Tracing keys deleted
::Winsock settings cleared
::Prefetch files deleted
::Proxy settings cleared
::IE policies deleted
::Chrome policies deleted
::Additional Actions: 0



*************************

C:/AdwCleaner/AdwCleaner[S0].txt - [6178 B] - [2015/3/6 19:56:16]
C:/AdwCleaner/AdwCleaner[S1].txt - [8737 B] - [2017/8/12 17:31:39]
C:/AdwCleaner/AdwCleaner[S2].txt - [8805 B] - [2017/8/15 9:21:23]


########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########

Der Rest kommt gleich...

So nach stundenlangem Scannen jetzt hier die TXT von Eset

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=bff9c445086b8741b657ebd92ba0e50f
# end=init
# utc_time=2017-08-16 10:57:46
# local_time=2017-08-16 12:57:46 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT 
Update Init
Update Download
Update Finalize
Updated modules version: 34416
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=bff9c445086b8741b657ebd92ba0e50f
# end=updated
# utc_time=2017-08-16 11:01:12
# local_time=2017-08-16 01:01:12 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT 
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=bff9c445086b8741b657ebd92ba0e50f
# engine=34416
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2017-08-16 05:50:55
# local_time=2017-08-16 07:50:55 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1='Avira Antivirus'
# compatibility_mode=1815 16777213 100 97 30125 54965001 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 66 85 10877949 18669578 0 0
# scanned=505023
# found=22
# cleaned=0
# scan_time=24582
sh=99F97AD369E8621AB4D17DF53E80E60FEE99C727 ft=1 fh=42567613b862d846 vn="Variante von Win32/DownloadSponsor.A eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Marlies\AppData\Local\Temp\OCS\ocs_v71b.exe.vir"
sh=3B88EE420C4250B675AB3CF9CB14D5F4A681D948 ft=1 fh=36d6aab19b2c07d2 vn="Variante von Win32/Toolbar.Conduit.AU eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Downloads\downloads\FreeYouTubeDownload.exe"
sh=685D65CCD52FD9D90C402CF9026344267E8B6FD9 ft=1 fh=532da5564656d18c vn="Variante von Win32/Toolbar.Conduit.AQ eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Downloads\downloads\backups\backup-20110713-232759-258.dll"
sh=685D65CCD52FD9D90C402CF9026344267E8B6FD9 ft=1 fh=532da5564656d18c vn="Variante von Win32/Toolbar.Conduit.AQ eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Downloads\downloads\backups\backup-20110713-232759-693.dll"
sh=685D65CCD52FD9D90C402CF9026344267E8B6FD9 ft=1 fh=532da5564656d18c vn="Variante von Win32/Toolbar.Conduit.AQ eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Downloads\downloads\backups\backup-20110713-232759-895.dll"
sh=685D65CCD52FD9D90C402CF9026344267E8B6FD9 ft=1 fh=532da5564656d18c vn="Variante von Win32/Toolbar.Conduit.AQ eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Downloads\downloads\backups\backup-20110713-233452-614.dll"
sh=7F0938E5C44E7504116FD8A35F0EC7CC4429C8BE ft=1 fh=f3301f0f711aeedf vn="Variante von Win32/Toolbar.Conduit.AR eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Eigene Dateien\Downloads\empc_setup.exe"
sh=B5DB65CD47FB167862703F3F2DB6D72A45466BB8 ft=1 fh=398a74cd707f8124 vn="Win32/Toolbar.Conduit.A eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Eigene Dateien\Downloads\FreeYouTube237Download.exe"
sh=3936E1DDEA2681088E10A5DAB9D3CF636E5840A5 ft=1 fh=7dd12d17e3bd656c vn="Win32/SoftonicDownloader.E eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Eigene Dateien\Downloads\SoftonicDownloader_for_windows-live-messenger.exe"
sh=D102D0E880558D12D81BB9A0C6EF480A3ACF8BFA ft=1 fh=9f3140d695f7767e vn="Variante von Win32/SoftonicDownloader.E eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Eigene Dateien\Downloads\SoftonicDownloader_fuer_photo-collage-creator.exe"
sh=F33547BA76907DB507361DDFEB25F630BAD5E5B5 ft=1 fh=3c223d0a79cb83c8 vn="Win32/SoftonicDownloader.E eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Eigene Dateien\Downloads\SoftonicDownloader_fuer_windows-live-messenger-2012.exe"
sh=6BE8CCAE9FB81F1235E2F9DBBB70869CC7176300 ft=0 fh=0000000000000000 vn="JS/Lightning.C eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\AppData\Local\Microsoft\Windows\INetCache\Virtualized\C\Users\Marlies\Application Data\SupTab\indexJS"
sh=B415FBAC6D3D8F6352FBE1D7445814E9E5CE773F ft=1 fh=5ab72e8b385a4803 vn="Variante von Win32/DownloadSponsor.C eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\AppData\Local\Temp\DMR\dmr_72.exe"
sh=4101270357B096EF454463D13581E3D123C60560 ft=1 fh=2a17fddd6cb742ea vn="Variante von Win32/InstallCore.ACL eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\AppData\Local\Temp\is1128754588\48B678D2_stp\RAM.dll"
sh=4101270357B096EF454463D13581E3D123C60560 ft=1 fh=2a17fddd6cb742ea vn="Variante von Win32/InstallCore.ACL eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\AppData\Local\Temp\is357113909\126218940_stp\RAM.dll"
sh=EA722D3D25469D7783DEDC1BACFBC6113D2CCD4F ft=1 fh=6cb4c11799500962 vn="Variante von Win32/InstallCore.ACL eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\AppData\Local\Temp\is357113909\126218972_stp\icc.dll"
sh=9D1697A3CD5680D6EC9D7F19A3012AC91B5FAB9B ft=1 fh=6f208321397883f7 vn="Variante von Win32/DownloadSponsor.C eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\Downloads\Free PDF to Word Doc Converter - CHIP-Installer.exe"
sh=50138F55E2755C7AADEA769599ED42B0120D7AC3 ft=1 fh=29264819b400f6f5 vn="Variante von Win32/DownloadSponsor.C eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\Downloads\HijackThis - CHIP-Installer.exe"
sh=EA669DA72502D621B03073F7EA8FBA285837477D ft=1 fh=287d5363c13a3561 vn="Variante von Win32/DownloadSponsor.C eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\Downloads\Microsoft Silverlight - CHIP-Installer(1).exe"
sh=008D05AC0F697B9DF3CA1B0BA9F5BD2CD1FCF734 ft=1 fh=1c1750ab11770f12 vn="Variante von Win32/DownloadSponsor.C eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\Downloads\Microsoft Silverlight - CHIP-Installer.exe"
sh=6F64813302C457638A4DF88744E54DC6D441658A ft=1 fh=d8a112ff280394a0 vn="Win32/Solvusoft.A eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\Downloads\Setup_FileViewPro_2015.exe"
sh=9ACBB6208ADF4A654351F2226C16AAF8FE4E2140 ft=1 fh=950d781e481e065c vn="Variante von Win32/DownloadSponsor.C eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\Downloads\Weightwatchers Rechner - CHIP-Installer.exe"

Hier die neue FRST.txt

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 16-08-2017
durchgeführt von Marlies (Administrator) auf KASRELLO (16-08-2017 20:15:36)
Gestartet von C:\Users\Marlies\Desktop
Geladene Profile: Marlies &  (Verfügbare Profile: Marlies & Marlies_2)
Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(CrossLoop) C:\Users\Marlies\AppData\Local\CrossLoop\CrossLoopService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe
() C:\Program Files (x86)\FWdriver_v\POSHXMain.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McTkSchedulerService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(Dolby Laboratories Inc.) C:\Program Files\Dolby Digital Plus\ddp.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\FWdriver_v\POSHX.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Sony Ericsson Mobile Communications AB) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe
() C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe
() C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe
(PIXELA CORPORATION) C:\Program Files (x86)\PIXELA\Everio MediaBrowser\MBCameraMonitor.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.587\SSScheduler.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Telegram Messenger LLP) C:\Users\Marlies\AppData\Roaming\Telegram Desktop\Telegram.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office\WINWORD.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13648600 2013-08-29] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-30] (Realtek Semiconductor)
HKLM\...\Run: [POSHX] => C:\Program Files (x86)\FWdriver_v\POSHX.exe [647168 2013-09-03] ()
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2774256 2013-08-01] (Synaptics Incorporated)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2779024 2011-03-14] (CANON INC.)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111576 2013-08-05] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [490760 2013-09-10] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-11] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2013-08-01] (CyberLink Corp.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [919032 2017-08-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [97512 2017-06-13] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2086240 2015-04-28] (Wondershare)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe [1960248 2015-10-26] ()
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1612920 2011-08-04] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [937984 2015-10-01] (AVM Berlin)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1
HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\Run: [Sony Ericsson PC Companion] => C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [772096 2009-06-18] (Sony Ericsson Mobile Communications AB)
HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [29544576 2016-08-17] (Skype Technologies S.A.)
HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\Run: [AudialsNotifier] => C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe [4535192 2016-03-15] ()
HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\MountPoints2: {497c22ea-3e37-11e4-82a5-5c514f28d736} - "F:\Startme.exe" 
HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\MountPoints2: {8065d9a5-3ac9-11e4-82a4-5c514f28d736} - "F:\iLinker.exe" 
HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\MountPoints2: {b6fe1c45-f46e-11e6-8336-5c514f28d736} - "F:\pushinst.exe" 
HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\Run: [Sony Ericsson PC Companion] => C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [772096 2009-06-18] (Sony Ericsson Mobile Communications AB)
HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [29544576 2016-08-17] (Skype Technologies S.A.)
HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\Run: [AudialsNotifier] => C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe [4535192 2016-03-15] ()
HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\MountPoints2: {497c22ea-3e37-11e4-82a5-5c514f28d736} - "F:\Startme.exe" 
HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\MountPoints2: {8065d9a5-3ac9-11e4-82a4-5c514f28d736} - "F:\iLinker.exe" 
HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\MountPoints2: {b6fe1c45-f46e-11e6-8336-5c514f28d736} - "F:\pushinst.exe" 
Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter "C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ImageBrowser EX Agent.lnk [2014-12-21]
ShortcutTarget: ImageBrowser EX Agent.lnk -> C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MBCameraMonitor.lnk [2014-12-22]
ShortcutTarget: MBCameraMonitor.lnk -> C:\Program Files (x86)\PIXELA\Everio MediaBrowser\MBCameraMonitor.exe (PIXELA CORPORATION)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-07-27]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.587\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2014-05-15]
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\simplicheck.lnk [2017-05-03]
ShortcutTarget: simplicheck.lnk -> C:\Program Files (x86)\simplitec\simplicheck\simplicheck.exe (simplitec)
Startup: C:\Users\Marlies\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2016-12-26]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 80.69.96.12 81.210.129.4
Tcpip\..\Interfaces\{471AEB88-C6B2-4C00-9669-3CC3EE935AD6}: [DhcpNameServer] 192.168.192.1
Tcpip\..\Interfaces\{C54B9ABE-D820-4EAF-86DC-7FF0424B0FD3}: [DhcpNameServer] 80.69.96.12 81.210.129.4
Tcpip\..\Interfaces\{D8F505BE-40F8-41DB-87A6-F6B74D4C7B56}: [DhcpNameServer] 80.69.96.12 81.210.129.4

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://rp-online.de/
HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://rp-online.de/
HKU\S-1-5-21-708953619-3332147771-3993505364-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133432028\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-708953619-3332147771-3993505364-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133432028\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133428919 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429106 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-708953619-3332147771-3993505364-1001 -> {3AB6D324-E6BD-4DC3-9ECB-B4FABD890450} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341 -> {3AB6D324-E6BD-4DC3-9ECB-B4FABD890450} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
BHO: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-26] (Intel Security)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20] (IvoSoft)
BHO-x32: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-26] (Intel Security)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
BHO-x32: Wondershare Video Converter Ultimate 7.1.0 -> {451C804F-C205-4F03-B48E-537EC94937BF} -> C:\ProgramData\Wondershare\Video Converter Ultimate\WSBrowserAppMgr.dll [2015-10-26] (Wondershare)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-13] (Oracle Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-13] (Oracle Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.)
Toolbar: HKLM - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-26] (Intel Security)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM-x32 - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-26] (Intel Security)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)
Handler-x32: http - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: http - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: https - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: https - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: ipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei
Handler-x32: msdaipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  Keine Datei

FireFox:
========
FF DefaultProfile: vy7huq4o.default
FF ProfilePath: C:\Users\Marlies\AppData\Roaming\Mozilla\Firefox\Profiles\vy7huq4o.default [2017-08-16]
FF Extension: (Avira Browser Safety) - C:\Users\Marlies\AppData\Roaming\Mozilla\Firefox\Profiles\vy7huq4o.default\Extensions\abs@avira.com.xpi [2017-08-10]
FF HKLM-x32\...\Firefox\Extensions: [WSVCU@Wondershare.com] - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com
FF Extension: (Wondershare Video Converter Ultimate) - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com [2015-11-15] [ist nicht signiert]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll [2016-04-30] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-30] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2011-04-20] (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-08-08] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-08-08] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-13] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)

Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.search.ask.com/?gct=hp
CHR StartupUrls: Default -> "hxxp://www.rp-online.de/"
CHR Profile: C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default [2017-08-16]
CHR Extension: (Google Docs) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-05]
CHR Extension: (Google Drive) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Google-Suche) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (Adobe Acrobat) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-06-05]
CHR Extension: (Google Docs Offline) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Google Mail) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]
CHR Extension: (Chrome Media Router) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-10]
CHR Extension: (Mein BMI - Shopping Angebote) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppohoeonaecgahebikkipfeoojbccoan [2017-04-09]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-708953619-3332147771-3993505364-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [npdicihegicnhaangkdmcgbjceoemeoo] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2016-12-26] (Adobe Systems) [Datei ist nicht signiert]
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [1128432 2017-08-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [490968 2017-08-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [490968 2017-08-05] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1525240 2017-08-05] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [377976 2017-06-13] (Avira Operations GmbH & Co. KG)
R2 AviraUpdaterService; C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe [102304 2017-08-08] (Avira Operations GmbH & Co. KG)
S4 AvmSwitchUsb; C:\Program Files (x86)\avmwlanstick\AVMSwitchUsb.exe [125440 2015-10-01] () [Datei ist nicht signiert]
R2 CrossLoopService; C:\Users\Marlies\AppData\Local\CrossLoop\CrossLoopService.exe [569072 2012-01-06] (CrossLoop)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [74712 2013-03-11] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [316376 2013-03-11] (CyberLink)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-08-08] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-08-29] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-08-08] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.587\McCHSvc.exe [404376 2017-06-30] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2013-08-23] ()
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
R2 POSHXService; C:\Program Files (x86)\FWdriver_v\POSHXMain.exe [114688 2012-12-26] () [Datei ist nicht signiert]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2013-03-06] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803440 2017-07-26] (TeamViewer GmbH)
R2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [1001920 2017-06-26] (McAfee, Inc.)
R2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [16928 2017-06-26] (McAfee, Inc.)
S3 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [87760 2017-06-26] (McAfee, Inc.)
S3 tvnserver; C:\Users\Marlies\AppData\Local\CrossLoop\tvnserver.exe [814080 2010-07-21] (GlavSoft LLC.) [Datei ist nicht signiert]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3667696 2013-08-23] (Intel® Corporation)
S2 InstallerService; "C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AirplaneModeHID; C:\Windows\System32\drivers\AirplaneModeHID.sys [30512 2013-09-04] (Elitegroup Computer System)
R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [60920 2017-06-19] (Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [173784 2017-08-05] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [167464 2017-08-05] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [44488 2017-03-03] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2015-10-01] (AVM Berlin)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [88488 2017-03-03] (Avira Operations GmbH & Co. KG)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132920 2013-04-23] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1386296 2013-08-19] (Motorola Solutions, Inc.)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77376 2017-06-27] ()
R3 fwlanusb6_860; C:\Windows\system32\DRIVERS\fwlanusb6_860.sys [2234912 2015-10-01] (AVM GmbH)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [117192 2013-08-29] (Intel Corporation)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [188352 2017-08-15] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [101784 2017-08-15] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [45472 2017-08-15] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [253856 2017-08-15] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [93600 2017-08-16] (Malwarebytes)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-08-08] (Intel Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3589600 2013-09-25] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
S3 s1018bus; C:\Windows\System32\drivers\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)
S3 s1018mdfl; C:\Windows\system32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)
S3 s1018mdm; C:\Windows\system32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)
S3 s1018mgmt; C:\Windows\system32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)
S3 s1018nd5; C:\Windows\system32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)
S3 s1018obex; C:\Windows\system32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)
S3 s1018unic; C:\Windows\System32\drivers\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)
R3 SensorsAlsDriver; C:\Windows\System32\drivers\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2013-08-01] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-01] (Synaptics Incorporated)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
R3 WsAudio_Device; C:\Windows\system32\drivers\VirtualAudio.sys [31080 2015-02-27] (Wondershare)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-08-16 20:15 - 2017-08-16 20:15 - 000000000 ____D C:\Users\Marlies\Desktop\FRST-OlderVersion
2017-08-16 13:13 - 2017-08-15 12:31 - 000008252 _____ C:\Users\Marlies\Desktop\AdwCleaner[C0].txt
2017-08-16 12:50 - 2017-08-16 12:50 - 002870984 _____ (ESET) C:\Users\Marlies\Desktop\esetsmartinstaller_deu.exe
2017-08-15 14:37 - 2017-08-15 14:37 - 000000000 ____D C:\Users\Marlies\AppData\Local\TeamViewer
2017-08-15 14:35 - 2017-08-16 20:17 - 000035316 _____ C:\Users\Marlies\Desktop\FRST.txt
2017-08-15 14:33 - 2017-08-16 20:15 - 002395648 _____ (Farbar) C:\Users\Marlies\Desktop\FRST64.exe
2017-08-15 14:33 - 2017-08-15 14:49 - 000047346 _____ C:\Users\Marlies\Desktop\Addition2.txt
2017-08-15 14:33 - 2017-08-15 14:47 - 000058104 _____ C:\Users\Marlies\Desktop\FRST2.txt
2017-08-15 14:33 - 2017-08-15 13:37 - 000100013 _____ C:\Users\Marlies\Desktop\mbam1.txt
2017-08-15 14:33 - 2017-08-13 14:53 - 000040849 _____ C:\Users\Marlies\Desktop\FRST 1.txt
2017-08-15 14:33 - 2017-08-12 19:28 - 008185288 _____ (Malwarebytes) C:\Users\Marlies\Desktop\adwcleaner_7.0.1.0 (1).exe
2017-08-15 14:32 - 2017-08-13 15:05 - 000045346 _____ C:\Users\Marlies\Desktop\Addition1.txt
2017-08-15 14:20 - 2016-08-05 00:20 - 000001150 _____ C:\Users\Marlies\Desktop\OpenOffice (2) - Kopie.lnk
2017-08-15 14:20 - 2016-06-26 15:44 - 000000852 _____ C:\Users\Marlies\Desktop\MediaCoder x64 - Kopie.lnk
2017-08-15 14:20 - 2015-09-26 23:49 - 000001149 _____ C:\Users\Marlies\Desktop\OLYMPUS Viewer 3 - Kopie.lnk
2017-08-15 14:20 - 2015-09-26 23:49 - 000001129 _____ C:\Users\Marlies\Desktop\OLYMPUS Digital Kamera Updater - Kopie.lnk
2017-08-15 14:20 - 2012-08-11 07:23 - 000001275 _____ C:\Users\Marlies\Desktop\Medion Services - Kopie.lnk
2017-08-15 14:14 - 2017-08-15 14:31 - 000000000 ____D C:\Users\Marlies\Desktop\gesammeltes Desktop
2017-08-15 13:37 - 2017-08-15 13:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bluetooth Devices
2017-08-15 12:42 - 2017-08-16 19:55 - 000093600 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-08-15 12:42 - 2017-08-15 13:35 - 000101784 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-08-15 12:42 - 2017-08-15 13:35 - 000045472 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-08-15 12:42 - 2017-08-15 13:34 - 000253856 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-08-15 12:42 - 2017-08-15 12:47 - 000188352 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-08-15 12:42 - 2017-08-15 12:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-08-15 12:42 - 2017-08-15 12:42 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-08-15 12:42 - 2017-08-15 12:42 - 000000000 ____D C:\Program Files\Malwarebytes
2017-08-15 12:42 - 2017-06-27 12:06 - 000077376 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-08-15 12:37 - 2017-08-15 12:38 - 065033984 _____ (Malwarebytes ) C:\Users\Marlies\Downloads\mb3-setup-consumer-3.1.2.1733-1.0.160-1.0.2251.exe
2017-08-15 11:05 - 2017-08-15 14:34 - 000000000 ____D C:\Users\Marlies\Desktop\Trojaner
2017-08-15 06:22 - 2017-08-15 06:23 - 000538120 _____ C:\Windows\Minidump\081517-23156-01.dmp
2017-08-14 23:23 - 2017-08-13 17:32 - 000001059 _____ C:\Users\Marlies\Desktop\TeamViewer 12.lnk
2017-08-14 23:21 - 2017-08-14 23:21 - 000001272 _____ C:\Users\Marlies\Downloads\TeamViewer_Setup (1) - Verknüpfung.lnk
2017-08-13 17:26 - 2017-08-16 12:28 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2017-08-13 17:26 - 2017-08-13 17:32 - 000001059 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk
2017-08-13 17:26 - 2017-08-13 17:32 - 000001047 _____ C:\Users\Public\Desktop\TeamViewer 12.lnk
2017-08-13 15:46 - 2017-08-13 15:46 - 015747576 _____ (TeamViewer GmbH) C:\Users\Marlies\Downloads\TeamViewer_Setup (1).exe
2017-08-13 14:54 - 2017-08-13 14:54 - 000041303 _____ C:\Users\Marlies\Downloads\FRST3.txt
2017-08-13 14:17 - 2017-08-15 14:39 - 000047343 _____ C:\Users\Marlies\Desktop\Addition.txt
2017-08-12 21:01 - 2017-08-13 14:08 - 000045494 _____ C:\Users\Marlies\Downloads\Addition.txt
2017-08-12 20:59 - 2017-08-13 14:08 - 000041303 _____ C:\Users\Marlies\Downloads\FRST.txt
2017-08-12 20:58 - 2017-08-16 20:15 - 000000000 ____D C:\FRST
2017-08-12 20:57 - 2017-08-12 20:57 - 002395648 _____ (Farbar) C:\Users\Marlies\Downloads\FRST64.exe
2017-08-12 19:28 - 2017-08-12 19:28 - 008185288 _____ (Malwarebytes) C:\Users\Marlies\Downloads\adwcleaner_7.0.1.0 (1).exe
2017-08-12 19:11 - 2017-08-12 19:11 - 001529352 _____ C:\Users\Marlies\Downloads\HijackThis - CHIP-Installer.exe
2017-08-09 16:38 - 2017-08-02 05:17 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-08-09 16:38 - 2017-07-21 15:40 - 000518144 _____ C:\Windows\SysWOW64\msjetoledb40.dll
2017-08-09 16:38 - 2017-07-21 15:40 - 000290816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjtes40.dll
2017-08-09 16:38 - 2017-07-15 12:10 - 000536688 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2017-08-09 16:38 - 2017-07-15 12:10 - 000140016 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2017-08-09 16:38 - 2017-07-15 12:06 - 000449840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2017-08-09 16:38 - 2017-07-15 12:06 - 000136832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2017-08-09 16:38 - 2017-07-14 22:08 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2017-08-09 16:38 - 2017-07-14 20:44 - 000033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2017-08-09 16:38 - 2017-07-14 08:49 - 025733632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-08-09 16:38 - 2017-07-14 08:19 - 000817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-08-09 16:38 - 2017-07-14 07:35 - 005981184 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-08-09 16:38 - 2017-07-14 06:40 - 015254016 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-08-09 16:38 - 2017-07-14 04:54 - 020270080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-08-09 16:38 - 2017-07-14 04:17 - 004546048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-08-09 16:38 - 2017-07-08 22:14 - 000376672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2017-08-09 16:38 - 2017-07-08 21:12 - 004169728 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-08-09 16:38 - 2017-07-08 19:45 - 007078912 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2017-08-09 16:38 - 2017-07-08 19:05 - 003631616 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-08-09 16:38 - 2017-07-08 18:39 - 005274624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2017-08-09 16:38 - 2017-07-08 18:37 - 007797248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2017-08-09 16:38 - 2017-07-08 18:23 - 002749952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-08-09 16:38 - 2017-07-08 17:59 - 005270016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2017-08-09 16:38 - 2017-07-08 05:46 - 000377688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys
2017-08-09 16:38 - 2017-07-08 05:16 - 007440728 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-08-09 16:38 - 2017-07-08 05:16 - 001674520 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-08-09 16:38 - 2017-07-08 05:16 - 001534072 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2017-08-09 16:38 - 2017-07-08 05:16 - 001499920 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-08-09 16:38 - 2017-07-08 05:16 - 001370328 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2017-08-09 16:38 - 2017-07-08 05:16 - 000086360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2017-08-09 16:38 - 2017-07-01 15:47 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000866816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswdat10.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswstr10.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000616448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrepl40.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000475648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxbde40.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspbde40.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000343552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000310272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstext40.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000240640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msltus40.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000144896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjint40.dll
2017-08-09 16:38 - 2017-07-01 15:47 - 000083968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjter40.dll
2017-08-09 16:38 - 2017-06-24 18:46 - 000424448 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll
2017-08-09 16:38 - 2017-06-24 18:16 - 000352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprapi.dll
2017-08-09 16:38 - 2017-06-13 19:51 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-08-09 16:38 - 2017-06-13 19:23 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2017-08-09 16:38 - 2017-06-13 19:19 - 000383488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlansec.dll
2017-08-09 16:38 - 2017-06-13 19:16 - 000024064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll
2017-08-09 16:38 - 2017-06-13 19:11 - 000238080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2017-08-09 16:38 - 2017-06-13 19:07 - 000304128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2017-08-09 16:38 - 2017-06-13 16:17 - 000656384 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2017-08-09 16:38 - 2017-06-13 16:16 - 000252416 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2017-08-09 16:38 - 2017-06-13 11:47 - 000445440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2017-08-09 16:38 - 2017-06-13 11:09 - 000445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-08-09 16:38 - 2017-06-13 10:22 - 001436160 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-08-09 16:38 - 2017-06-13 10:16 - 000445952 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2017-08-09 16:38 - 2017-06-13 10:10 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll
2017-08-09 16:38 - 2017-06-13 10:07 - 000301568 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll
2017-08-09 16:38 - 2017-06-13 10:03 - 000302080 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2017-08-09 16:38 - 2017-06-13 09:54 - 000374272 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2017-08-09 16:38 - 2017-06-13 09:50 - 001547264 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2017-08-09 16:38 - 2017-06-12 02:14 - 000276320 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2017-08-09 16:38 - 2017-06-11 22:13 - 000301056 _____ (Microsoft Corporation) C:\Windows\system32\umrdp.dll
2017-08-09 16:38 - 2017-06-11 22:11 - 000346112 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2017-08-09 16:38 - 2017-06-11 22:02 - 002778112 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2017-08-09 16:38 - 2017-06-11 22:02 - 000299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
2017-08-09 16:38 - 2017-06-11 21:52 - 002463744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2017-08-09 16:38 - 2017-06-08 19:01 - 001737600 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-08-09 16:38 - 2017-06-08 19:01 - 001502000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-08-09 16:38 - 2017-06-08 03:48 - 002457936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-08-09 16:38 - 2017-06-07 06:25 - 000428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2017-08-09 16:38 - 2017-06-06 20:38 - 000607232 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2017-08-09 16:38 - 2017-06-06 19:44 - 000530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2017-08-09 16:38 - 2017-05-27 18:42 - 001115136 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2017-08-09 16:37 - 2017-07-14 08:44 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-08-09 16:37 - 2017-07-14 07:26 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-08-09 16:37 - 2017-07-14 07:10 - 000806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-08-09 16:37 - 2017-07-14 06:23 - 003240960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-08-09 16:37 - 2017-07-14 06:07 - 001545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-08-09 16:37 - 2017-07-14 05:58 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-08-09 16:37 - 2017-07-14 04:48 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-08-09 16:37 - 2017-07-14 04:38 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-08-09 16:37 - 2017-07-14 04:17 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2017-08-09 16:37 - 2017-07-14 04:12 - 000693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-08-09 16:37 - 2017-07-14 04:09 - 013663744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-08-09 16:37 - 2017-07-14 03:53 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-08-09 16:37 - 2017-07-14 03:50 - 001314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-08-09 16:37 - 2017-07-14 03:48 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-08-09 16:37 - 2017-06-15 16:17 - 002551808 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-08-09 16:37 - 2017-06-15 16:16 - 001920000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-08-09 16:37 - 2017-06-09 15:47 - 000448629 _____ C:\Windows\system32\ApnDatabase.xml
2017-08-09 16:37 - 2017-05-27 18:38 - 000056832 _____ (Microsoft Corporation) C:\Windows\system32\rdsdwmdr.dll
2017-08-09 16:24 - 2017-08-09 16:24 - 003376660 _____ C:\Users\Marlies\Downloads\SpeisekartePlatonWeb.pdf
2017-07-27 23:00 - 2017-07-27 23:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2017-07-27 23:00 - 2017-07-27 23:00 - 000000000 ____D C:\ProgramData\McAfee Security Scan
2017-07-26 10:51 - 2017-07-26 10:51 - 000021308 _____ C:\Users\Marlies\Downloads\..._26-07-2017_1051.pdf
2017-07-21 11:11 - 2017-07-21 11:11 - 000143952 _____ C:\Users\Marlies\Downloads\1500628271864.pdf
2017-07-21 11:05 - 2017-07-21 11:05 - 000117974 _____ C:\Users\Marlies\Downloads\...-2017-07-10.pdf
2017-07-20 23:45 - 2017-07-20 23:45 - 000000992 _____ C:\Users\Marlies\Downloads\...(kasrello) - Verknüpfung.lnk
2017-07-18 19:06 - 2017-07-18 19:06 - 000003176 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-708953619-3332147771-3993505364-1001

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-08-16 20:08 - 2014-05-20 17:06 - 000000000 ____D C:\Users\Marlies\AppData\Roaming\ClassicShell
2017-08-16 16:09 - 2014-05-15 15:48 - 000003938 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{D79CCDCC-5C13-412F-9EFD-1CDF8B9C287B}
2017-08-16 15:36 - 2017-02-16 19:30 - 000000000 ____D C:\Users\Marlies\AppData\LocalLow\Mozilla
2017-08-16 15:33 - 2017-02-11 18:16 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-08-16 15:33 - 2016-03-02 21:07 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-08-16 14:53 - 2014-06-04 17:29 - 000000000 ____D C:\Users\Marlies\AppData\Roaming\Skype
2017-08-16 14:09 - 2014-06-02 09:25 - 003885568 ___SH C:\Users\Marlies\Desktop\Thumbs.db
2017-08-16 13:35 - 2014-06-01 22:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-08-16 13:35 - 2014-06-01 22:26 - 000000000 ____D C:\ProgramData\Avira
2017-08-16 13:35 - 2014-06-01 22:26 - 000000000 ____D C:\Program Files (x86)\Avira
2017-08-16 13:13 - 2014-05-15 15:43 - 000003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-708953619-3332147771-3993505364-1001
2017-08-16 11:11 - 2015-04-21 09:19 - 000000000 ____D C:\Users\Marlies\AppData\Roaming\Telegram Desktop
2017-08-16 10:31 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache
2017-08-16 09:32 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness
2017-08-16 09:27 - 2014-05-15 15:39 - 000000000 ___DO C:\Users\Marlies\SkyDrive
2017-08-16 09:26 - 2014-05-15 15:39 - 000000000 ____D C:\Users\Marlies\Documents\Youcam
2017-08-15 14:40 - 2015-06-01 11:15 - 000000000 ____D C:\Users\Marlies\AppData\Roaming\TeamViewer
2017-08-15 13:33 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-08-15 11:24 - 2013-08-22 15:25 - 000524288 ___SH C:\Windows\system32\config\BBI
2017-08-15 11:23 - 2015-09-13 16:46 - 000000000 ____D C:\Program Files (x86)\Yahoo!
2017-08-15 11:21 - 2015-03-06 21:02 - 000000000 ____D C:\AdwCleaner
2017-08-15 06:22 - 2017-05-20 01:28 - 541711296 _____ C:\Windows\MEMORY.DMP
2017-08-15 06:22 - 2017-05-20 01:28 - 000000000 ____D C:\Windows\Minidump
2017-08-14 23:24 - 2014-05-15 15:38 - 000000000 ____D C:\Users\Marlies
2017-08-14 23:20 - 2014-11-03 18:12 - 000883712 ___SH C:\Users\Marlies\Downloads\Thumbs.db
2017-08-14 23:15 - 2013-08-22 16:44 - 000398144 _____ C:\Windows\system32\FNTCACHE.DAT
2017-08-14 17:02 - 2014-06-17 18:46 - 000119808 _____ C:\Users\Marlies\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-08-13 17:21 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
2017-08-13 16:35 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
2017-08-13 15:58 - 2014-05-20 17:27 - 000000000 ____D C:\Windows\system32\MRT
2017-08-13 15:57 - 2014-05-20 19:18 - 000000000 ____D C:\Users\Marlies_2
2017-08-13 15:54 - 2014-05-20 17:27 - 140394280 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-08-11 16:34 - 2017-06-01 14:20 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-08-10 17:03 - 2013-08-22 17:36 - 000000000 ___HD C:\Program Files\WindowsApps
2017-08-09 17:32 - 2014-05-21 20:42 - 000000000 ____D C:\ProgramData\CanonIJPLM
2017-08-08 15:30 - 2017-05-10 20:23 - 000002211 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-08 15:30 - 2017-05-10 20:23 - 000002199 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-08-08 15:00 - 2014-12-30 11:19 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-08-05 15:30 - 2014-06-01 22:26 - 000173784 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2017-08-05 15:30 - 2014-06-01 22:26 - 000167464 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2017-08-02 00:03 - 2015-06-21 15:34 - 000000000 ____D C:\Users\Marlies\AppData\Local\.elfohilfe
2017-07-30 14:46 - 2015-05-04 09:57 - 000000000 ____D C:\Users\Marlies\Downloads\Telegram Desktop
2017-07-29 02:03 - 2013-08-22 17:38 - 000835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-07-29 02:03 - 2013-08-22 17:38 - 000177648 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-07-27 23:00 - 2016-05-10 23:23 - 000000000 ____D C:\Program Files\McAfee Security Scan
2017-07-27 23:00 - 2016-04-30 19:15 - 000001984 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2017-07-25 08:50 - 2013-09-05 21:28 - 000767518 _____ C:\Windows\system32\perfh007.dat
2017-07-25 08:50 - 2013-09-05 21:28 - 000160240 _____ C:\Windows\system32\perfc007.dat
2017-07-25 08:50 - 2013-09-05 21:13 - 001783084 _____ C:\Windows\system32\PerfStringBackup.INI
2017-07-21 15:33 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\NDF
2017-07-19 18:16 - 2013-09-07 12:35 - 000000000 ____D C:\ProgramData\Package Cache
2017-07-19 17:57 - 2014-12-11 00:09 - 000000000 ____D C:\Windows\system32\appraiser
2017-07-19 17:56 - 2016-04-30 19:15 - 000000000 ____D C:\Program Files\TrueKey
2017-07-18 19:06 - 2016-04-18 22:43 - 000002366 _____ C:\Users\Marlies\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2017-07-18 19:06 - 2014-05-20 19:09 - 000003184 _____ C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-708953619-3332147771-3993505364-1001

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-12-21 13:17 - 2016-12-21 13:17 - 007680000 _____ () C:\Program Files (x86)\GUTE6BF.tmp
2014-06-17 18:46 - 2017-08-14 17:02 - 000119808 _____ () C:\Users\Marlies\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-09-07 12:29 - 2013-09-07 12:29 - 000000000 ____H () C:\ProgramData\DP45977C.lfl
2013-09-12 05:59 - 2013-09-12 05:59 - 000000032 _____ () C:\ProgramData\Temp.log

Einige Dateien in TEMP:
====================
2016-11-15 16:20 - 2016-11-15 16:20 - 011127352 _____ (Albelli                                                     ) C:\Users\Marlies\AppData\Local\Temp\0BB5CC15-AA68-4718-93A1-822DCC2015E9.exe
2014-06-01 22:26 - 2014-08-07 16:50 - 000000000 ____D () C:\Users\Marlies\AppData\Local\Temp\avgnt.exe
2016-11-28 23:54 - 2016-11-28 23:54 - 012545632 _____ (Albelli                                                     ) C:\Users\Marlies\AppData\Local\Temp\F177397B-C751-4B7D-BE67-6A8FD23C9C48.exe
2016-08-04 23:38 - 2011-02-07 11:09 - 000850320 ____N (CANON INC.) C:\Users\Marlies\AppData\Local\Temp\MSETUP4.EXE
2016-08-04 23:41 - 2011-03-23 06:48 - 000349592 ____R (CANON INC.) C:\Users\Marlies\AppData\Local\Temp\uninstall.exe
2017-04-08 22:12 - 2017-04-08 22:12 - 013705448 _____ (Nero AG                                                     ) C:\Users\Marlies\AppData\Local\Temp\Update_Simplitec_PowerSuite_Auto.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-08-13 16:30

==================== Ende von FRST.txt ============================

Kasrello · 16.08.2017, 19:57

Hier die neue Addition.txt

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 16-08-2017
durchgeführt von Marlies (16-08-2017 20:18:48)
Gestartet von C:\Users\Marlies\Desktop
Windows 8.1 (Update) (X64) (2014-05-15 13:38:24)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-708953619-3332147771-3993505364-500 - Administrator - Disabled)
Gast (S-1-5-21-708953619-3332147771-3993505364-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-708953619-3332147771-3993505364-1003 - Limited - Enabled)
Marlies (S-1-5-21-708953619-3332147771-3993505364-1001 - Administrator - Enabled) => C:\Users\Marlies
Marlies_2 (S-1-5-21-708953619-3332147771-3993505364-1004 - Limited - Enabled) => C:\Users\Marlies_2

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.012.20095 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Albelli Fotobücher (HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\{EE20E438-B675-4421-AB07-928F0EC9FB22}_is1) (Version: 11.1.1.1680 - Albelli)
Albelli Fotobücher (HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\{EE20E438-B675-4421-AB07-928F0EC9FB22}_is1) (Version: 11.1.1.1680 - Albelli)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.29.32 - Avira Operations GmbH & Co. KG)
Avira Connect (HKLM-x32\...\{661C79C2-D156-419C-81CA-D1A2523B0841}) (Version: 1.2.91.10326 - Avira Operations GmbH & Co. KG) Hidden
Avira Connect (HKLM-x32\...\{dd9049b8-31d1-40bd-8c8c-97a7b087a78f}) (Version: 1.2.91.10326 - Avira Operations GmbH & Co. KG)
Avira Software Updater (HKLM-x32\...\{7A2E39A1-265C-4BF8-BE49-DE3248B9792A}) (Version: 2.0.3.40092 - Avira Operations GmbH & Co. KG)
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 06.20.07 - AVM Berlin)
calibre (HKLM-x32\...\{D47B7229-AC24-4D79-96AB-880649FFC892}) (Version: 2.19.0 - Kovid Goyal)
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version:  - )
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.1 - Canon Inc.)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version:  - )
Canon MG5300 series Benutzerregistrierung (HKLM-x32\...\Canon MG5300 series Benutzerregistrierung) (Version:  - )
Canon MG5300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5300_series) (Version:  - Canon Inc.)
Canon MG5300 series On-screen Manual (HKLM-x32\...\Canon MG5300 series On-screen Manual) (Version:  - )
Canon MP Navigator EX 3.0 (HKLM-x32\...\MP Navigator EX 3.0) (Version:  - )
Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version:  - )
Canon MP490 series Benutzerregistrierung (HKLM-x32\...\Canon MP490 series Benutzerregistrierung) (Version:  - )
Canon MP490 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP490_series) (Version:  - )
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )
Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version:  - )
Canon Utilities Digital Photo Professional 3.11 (HKLM-x32\...\Digital Photo Professional) (Version: 3.11.10.0 - Canon Inc.)
Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.11.0.1 - Canon Inc.)
Canon Utilities ImageBrowser EX (HKLM-x32\...\ImageBrowser EX) (Version: 1.5.0.6 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.23.47 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.10.0.0 - Canon Inc.)
Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version:  - )
Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft)
CyberLink Home Cinema 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)
CyberLink PowerDirector 11 (HKLM\...\{551F492A-01B0-4DC4-866F-875EC4EDC0A8}) (Version: 11.0.0.3215 - Ihr Firmenname) Hidden
CyberLink PowerRecover (HKLM\...\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.0913 - CyberLink Corp.) Hidden
CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.0913 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Digital Photo Navigator 1.5 (HKLM-x32\...\{CF9CD37C-E29A-11D5-AE3D-005004B8E30C}) (Version:  - )
Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.3.2.2 - Dolby Laboratories Inc)
DriverTools 1.0 (HKLM-x32\...\DriverTools) (Version: 1.0 - Huawei Technologies Co.,Ltd)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 18.1.22140 - Landesfinanzdirektion Thüringen)
Everio MediaBrowser (HKLM-x32\...\{5CA03ECF-B4A6-464B-9F5D-64D8B61B083F}) (Version: 1.00.013 - PIXELA)
Express Burn (HKLM-x32\...\ExpressBurn) (Version: 4.78 - NCH Software)
FlexPoints 2.0 (HKLM-x32\...\{F460E5B9-E678-484B-A2E8-BFDF93A57A03}) (Version: 1.00.0000 - Weight Watchers)
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalerija (HKLM-x32\...\{BE2DE42A-6696-4EE7-9E59-B9385F339DD3}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fotótár (HKLM-x32\...\{8D977EAA-DF3E-4054-A98D-F27AEB0248DD}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com)
Galerie de photos (HKLM-x32\...\{F4D99A13-F63A-4FC1-8799-CFFDB78DDFB3}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.90 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
inSSIDer Home (HKLM-x32\...\{9E54E4AE-B67A-4925-8E92-0E1F9817FD73}) (Version: 3.1.2.1 - MetaGeek, LLC)
Intel Security True Key (HKLM\...\TrueKey) (Version: 4.19.108.1 - Intel Security)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.13.1706 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3282 - Intel Corporation)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (HKLM\...\{252CC716-1EDE-4C7F-8881-15B7AEBF8F5C}) (Version: 16.5.0.0096 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 3.0.1335.5) (HKLM\...\{302600C1-6BDF-4FD1-1307-148929CC1385}) (Version: 3.1.1307.0362 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{72814a2c-2e03-4a50-b30a-43e7884b3934}) (Version: 16.5.1 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
Junk Mail filter update (HKLM-x32\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MAGIX Foto Designer 7 (HKLM\...\{FEF04BA1-5C1A-4445-8EB7-B2E4D2FFCAC7}) (Version: 7.0.1.1 - MAGIX AG) Hidden
MAGIX Foto Designer 7 (HKLM-x32\...\MAGIX_{FEF04BA1-5C1A-4445-8EB7-B2E4D2FFCAC7}) (Version: 7.0.1.1 - MAGIX AG)
Mahjongg - Ancient Mayas (HKLM-x32\...\{18D52937-2121-49FA-B734-EA1EF38AA04F}_is1) (Version:  - cerasus.media GmbH)
Malwarebytes Version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.587.1 - McAfee, Inc.)
MediaCoder x64 0.8.43.5830 (HKLM\...\MediaCoder x64) (Version: 0.8.43.5830 - Mediatronic)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office 2000 Premium (HKLM-x32\...\{00000407-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2816 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{0FD2B9C6-DB91-48EA-9518-AB5B68CA1E28}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{3C5F91EF-5C0B-4D13-BCBE-0FC6FC3ED7F9}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{5B91D34E-B583-4E08-BB48-4F18086A0DB7}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{705C31EB-E0AB-4C1F-A834-993F9E08B085}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{7693587D-5D66-4208-ABEA-C370217D1D9B}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{8E038DF1-B140-46D6-9D82-1BDF8DC56764}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{E169436E-49D8-419B-A5C0-D245EAF99611}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 54.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 54.0.1 (x86 de)) (Version: 54.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 54.0.1.6388 - Mozilla)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
Music Recorder (HKLM-x32\...\{E3579DBA-00BA-4E32-AE90-63B6CDA30D56}) (Version: 14.0.62200.0 - Audials AG)
Nero 7 Essentials (HKLM-x32\...\{D34D82E0-4600-407B-9478-8506C1DD1031}) (Version: 7.02.3307 - Nero AG)
OLYMPUS Digital Camera Updater (HKLM-x32\...\{D18925CE-5AF9-4394-8EF7-1081FFE7E98B}) (Version: 1.2.0 - OLYMPUS IMAGING CORP.)
OLYMPUS Viewer 3 (HKLM-x32\...\{F0C70F68-E57F-4D76-A012-E20F8E12946E}) (Version: 1.4.1 - OLYMPUS IMAGING CORP.)
online-foto Bestellsoftware (HKLM-x32\...\online-foto Bestellsoftware) (Version: 5.1.5 - CEWE Stiftung u Co. KGaA)
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)
PDF Architect 2 Convert Module (HKLM-x32\...\{53434783-F9A7-4D64-B91A-05A3BF925D70}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 Create Module (HKLM-x32\...\{3D0D9604-0173-488D-9694-2638C44D7579}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 Edit Module (HKLM-x32\...\{8B0A956F-9BE6-495B-AF80-7B5B42061D79}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 Forms Module (HKLM-x32\...\{4CB8D214-0400-45FA-B084-AAB0C74AD032}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 Insert Module (HKLM-x32\...\{DD7BB68A-7D8A-4F62-806A-3424C2A170E7}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 OCR Module (HKLM-x32\...\{952E5B8F-82C2-46D1-B642-37B2635CE440}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 Review Module (HKLM-x32\...\{664D6EE3-9A35-4284-B9D2-80A509DF9295}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 Secure Module (HKLM-x32\...\{99E0C0D4-6746-44EE-A132-5E7E3D6FAAFB}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 View Module (HKLM-x32\...\{D691E998-CF53-4F6C-AC20-E4284660E0E7}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
PriMus Free 1.1 (Build 11020) (HKLM-x32\...\PriMus Free_is1) (Version: 1.1.0.11020 - Columbus Soft)
Raccolta foto (HKLM-x32\...\{FA6BC7A5-85B3-4DC2-825C-D508E386151A}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.30164 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7030 - Realtek Semiconductor Corp.)
simplitec simplicheck (HKLM-x32\...\{183D780B-28F9-41BA-A2CB-605F324A5781}) (Version: 1.3.10.0 - simplitec GmbH)
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype™ 7.27 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.27.101 - Skype Technologies S.A.)
Sony Ericsson PC Companion 1.50.52 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 1.50.52 - Sony Ericsson)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.8.0 - Synaptics Incorporated)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.81460 - TeamViewer)
Telegram Desktop version 1.1.19 (HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.1.19 - Telegram Messenger LLP)
Telegram Desktop version 1.1.19 (HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.1.19 - Telegram Messenger LLP)
WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 6.53 - NCH Software)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (HKLM\...\2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-708953619-3332147771-3993505364-1001_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Marlies\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileCoAuthLib64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
ContextMenuHandlers1: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2013-09-10] (Cyberlink)
ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-08-05] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-16] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-16] (Alexander Roshal)
ContextMenuHandlers1-x32: [WondershareVideoConverterFileOpreation] -> {FEB746CA-95C2-485F-B386-C30D4E56D22E} => C:\Windows\SysWOW64\WSCM64.dll [2015-02-27] ()
ContextMenuHandlers2: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2013-09-10] (Cyberlink)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2013-08-26] (Intel Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-08-05] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers6: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\Windows\system32\StartMenuHelper64.dll [2014-04-20] (IvoSoft)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-16] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-16] (Alexander Roshal)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {145D433F-F4F5-4F0B-A64B-8C8291F19A6A} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-08-01] (Synaptics Incorporated)
Task: {45FD7644-A331-4E36-BCD1-DFC43A0CFAEA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {7F880913-CCFC-4B27-B7C3-B781B2E5FFE7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {993A1863-842C-4EAC-8319-9713C2B9D95D} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2017-08-13] (Microsoft Corporation)
Task: {CCB5A282-43DA-4578-B841-CAF077C81C01} - System32\Tasks\{DD49092F-C446-4EEC-BD77-C4F3994ACAFA} => C:\Windows\system32\pcalua.exe -a E:\System\dx80a.exe -d E:\System
Task: {D56949F9-18CC-4B3E-9C54-796189BBE1A0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {D8795768-9D8C-47D4-8E00-6027B7D45D6D} - System32\Tasks\{802886A1-E095-435D-AADC-049F9EE278AA} => C:\Windows\system32\pcalua.exe -a C:\Users\Marlies\AppData\Roaming\key-find\UninstallManager.exe -c  -ptid=cvs
Task: {E5A22EA6-4AC2-487C-8B07-531491916A09} - System32\Tasks\{C7994087-E7AF-4290-9F3C-979444759543} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Einfach Genial\EinfachGenial.exe" -d "C:\Program Files (x86)\Einfach Genial\"
Task: {EA9A4FAB-99BE-473F-A97F-327175694D43} - System32\Tasks\Dolby Selector => C:\Program Files\Dolby Digital Plus\ddp.exe [2013-08-08] (Dolby Laboratories Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


ShortcutWithArgument: C:\Users\Marlies\Desktop\gesammeltes Desktop\CrossLoop Connect.lnk -> C:\Users\Marlies\AppData\Local\CrossLoop\CrossLoopConnect.exe (CrossLoop) -> -ap=crossloop -port=5910 -udp=www.CrossLoop.com -webserver=server.crossloop.com -webservice=www.crossloop.com -startup=server 
ShortcutWithArgument: C:\Users\Marlies\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CrossLoop\CrossLoop.lnk -> C:\Users\Marlies\AppData\Local\CrossLoop\CrossLoopConnect.exe (CrossLoop) -> -ap=crossloop -port=5910 -udp=www.CrossLoop.com -webserver=server.crossloop.com -webservice=www.crossloop.com -startup=server 
ShortcutWithArgument: C:\Users\Marlies\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\CrossLoop.lnk -> C:\Users\Marlies\AppData\Local\CrossLoop\CrossLoopConnect.exe (CrossLoop) -> -ap=crossloop -port=5910 -udp=www.CrossLoop.com -webserver=server.crossloop.com -webservice=www.crossloop.com -startup=server 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2014-05-21 20:42 - 2011-02-07 09:56 - 000138192 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
2013-09-07 12:40 - 2012-12-26 11:36 - 000114688 _____ () C:\Program Files (x86)\FWdriver_v\POSHXMain.exe
2014-05-20 20:41 - 2013-03-06 14:42 - 000389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2017-08-15 12:42 - 2017-06-27 12:06 - 002260432 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2015-11-15 13:32 - 2015-02-27 15:38 - 000721263 _____ () C:\Windows\SysWOW64\WSCM64.dll
2013-09-07 12:40 - 2013-09-03 21:38 - 000647168 _____ () C:\Program Files (x86)\FWdriver_v\POSHX.exe
2016-03-15 10:26 - 2016-03-15 10:26 - 004535192 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe
2014-12-21 15:41 - 2014-04-08 10:13 - 000069120 _____ () C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe
2017-08-08 15:30 - 2017-08-02 09:39 - 003824472 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.90\libglesv2.dll
2017-08-08 15:30 - 2017-08-02 09:39 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.90\libegl.dll
2013-09-07 12:40 - 2013-07-24 10:23 - 000106496 _____ () C:\Program Files (x86)\FWdriver_v\KIPowerDll.dll
2013-09-07 12:10 - 2013-08-08 13:25 - 001242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2013-09-07 12:40 - 2013-07-11 12:41 - 000348160 _____ () C:\Program Files (x86)\FWdriver_v\SuperHealthDLL.dll
2013-09-07 12:40 - 2012-06-22 20:32 - 000266240 _____ () C:\Program Files (x86)\FWdriver_v\SuperSpeederDLL.dll
2016-03-15 10:26 - 2016-03-15 10:26 - 000049424 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_thread-vc90-mt-1_39.dll
2016-03-15 10:26 - 2016-03-15 10:26 - 000048400 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_date_time-vc90-mt-1_39.dll
2016-03-15 10:26 - 2016-03-15 10:26 - 000068504 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\CrashRpt.dll
2016-03-15 10:26 - 2016-03-15 10:26 - 000618256 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_regex-vc90-mt-1_39.dll
2016-03-15 10:26 - 2016-03-15 10:26 - 000544152 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\StreamingClient.dll
2016-03-15 10:26 - 2016-03-15 10:26 - 000016144 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_system-vc90-mt-1_39.dll
2016-03-15 10:26 - 2016-03-15 10:26 - 000040856 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\CrashHandlerNET.dll
2014-12-21 15:41 - 2014-04-08 10:08 - 000112128 _____ () C:\Program Files (x86)\Canon\ImageBrowser EX\MFMFileSystemWatcher.dll
2014-05-21 20:47 - 2008-07-03 15:18 - 000364544 ____N () C:\Program Files (x86)\PIXELA\Everio MediaBrowser\pxl_m17n_tool.dll
2013-09-12 06:56 - 2013-08-05 09:49 - 000627672 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2013-08-05 16:48 - 2013-08-05 16:48 - 000016856 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2015-11-15 13:32 - 2015-04-28 16:22 - 001498112 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2015-11-15 13:32 - 2014-05-19 18:19 - 000137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\Temp:56E2E879 [246]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 15:25 - 2013-08-22 15:25 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Marlies\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\Control Panel\Desktop\\Wallpaper -> C:\Users\Marlies\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
HKU\S-1-5-21-708953619-3332147771-3993505364-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133432028\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\MEDION\wallpaper.jpg
DNS Servers: 80.69.96.12 - 81.210.129.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{8B219A9C-3E95-4887-B558-0A20C3849406}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{55B1AAA0-1495-4582-AA48-9DD5FE0C9324}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{2B993C4B-B78F-402C-91B3-32B5F826346F}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{90A06370-CC6A-4993-AE7D-905297E8D278}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
FirewallRules: [{DC152F63-F1D3-4181-AE00-8C232B30FBF9}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
FirewallRules: [{9F2453BC-E7A0-4197-BB67-11A849EF3BD1}] => (Allow) C:\Users\Marlies\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{9AC8C66D-A4A0-43A9-85FE-DDBE39F6FEFE}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{D7B2403C-AD42-441B-99CC-7F24749CE4FC}] => (Allow) LPort=2869
FirewallRules: [{62642C0A-EAA3-418F-B6FF-4DFABDFCE1DF}] => (Allow) LPort=1900
FirewallRules: [{269BE6C4-2529-4920-BC89-90562EB4559C}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{0EF250F3-BEB1-4580-9B21-0B4920E3D812}] => (Allow) C:\Program Files\CyberLink\PowerDirector11\PDR10.EXE
FirewallRules: [TCP Query User{30D7B601-7145-4279-9DC8-CD63CEEF410B}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{19E2251F-9D9A-4F3F-AF13-CB1F4F6F5B90}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{674BBF60-83EC-4D49-BC50-4A8D2C0E23AB}] => (Allow) C:\Users\Marlies\AppData\Local\CrossLoop\vncviewer.exe
FirewallRules: [{991741BC-B7DE-4AE4-86E4-7C57C27E8CEF}] => (Allow) C:\Users\Marlies\AppData\Local\CrossLoop\vncviewer.exe
FirewallRules: [{587DB821-EE55-4343-A6DB-FC0E0A6E7F28}] => (Allow) C:\Users\Marlies\AppData\Local\CrossLoop\tvnserver.exe
FirewallRules: [{31BCFED6-4B00-4337-BAC8-082E9ABA39AB}] => (Allow) C:\Users\Marlies\AppData\Local\CrossLoop\tvnserver.exe
FirewallRules: [TCP Query User{79D86FFA-D8C6-4252-83BC-4A5943BB7492}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{18961C28-5FA2-4BD0-812F-435D307495CE}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{2FDFBC6C-3AAA-420C-A13E-6BCBEFCC5707}C:\program files (x86)\wondershare\vcu\medialibserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\medialibserver.exe
FirewallRules: [UDP Query User{80D9ED45-F5AC-4F4F-AD81-E79788EBEE11}C:\program files (x86)\wondershare\vcu\medialibserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\medialibserver.exe
FirewallRules: [TCP Query User{62317F72-4518-4EF9-B0FE-891B8AE34422}C:\program files (x86)\wondershare\vcu\mediaserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\mediaserver.exe
FirewallRules: [UDP Query User{15F2D807-18A8-4C16-BE0F-21EE162FF060}C:\program files (x86)\wondershare\vcu\mediaserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\mediaserver.exe
FirewallRules: [{43637725-3109-4A55-944F-2A471CE3684C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{259979CB-6D50-420A-AA41-80218EA26266}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{E944FA45-73CD-49C6-8B91-CF4D30E620F5}C:\users\marlies\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light] => (Block) C:\users\marlies\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light
FirewallRules: [UDP Query User{ADFF7C71-3FB6-423D-8934-F4397726FF2B}C:\users\marlies\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light] => (Block) C:\users\marlies\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light
FirewallRules: [{CBE23198-7DA5-4CA2-8258-DCC8D46A1F67}] => (Allow) C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUp.exe
FirewallRules: [{EDEBD6B2-21BE-4AF3-B12A-5579AE31D8F7}] => (Allow) C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUp.exe
FirewallRules: [{19E7BCCF-1E7B-4771-AADF-005603F1FC0E}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe
FirewallRules: [{3CC1DAF6-7789-4F41-97ED-46D05A46B74D}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe
FirewallRules: [{0114B05C-5AB4-4746-BDEF-285A47D4807C}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll
FirewallRules: [{BEB671ED-E6AB-41C5-97E7-AEA42072F475}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll
FirewallRules: [{85210530-AB5A-477F-BC00-390D7967D42A}] => (Allow) C:\Users\Marlies\Downloads\WLAN-Optimierer (1).exe
FirewallRules: [{065D11A9-B330-4118-9C13-63DF353F6630}] => (Allow) C:\Users\Marlies\Downloads\WLAN-Optimierer (1).exe
FirewallRules: [{CA0FC07B-E636-4A4E-8663-046F71034854}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{3305F1AB-D85F-427B-AF97-08BF4F1AEA40}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E441B1EC-AF32-4A43-AB22-85B910BF6F24}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{8E5D2BAF-65B0-44D0-8F54-4C35840428F3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{36087549-1626-46EA-981E-CCAD684FE34C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

==================== Wiederherstellungspunkte =========================

06-08-2017 19:22:46 Geplanter Prüfpunkt
13-08-2017 15:52:04 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (08/16/2017 08:00:52 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (08/16/2017 07:58:04 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (08/16/2017 07:52:21 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "c:\program files (x86)\eset\eset online scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (08/16/2017 01:37:56 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20911 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1780

Startzeit: 01d316835ffd4ab5

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: 545c6389-8277-11e7-8366-5c514f28d736

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1

Error: (08/16/2017 01:08:26 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20911 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 874

Startzeit: 01d3167f33af6ac7

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: 23b9072e-8273-11e7-8366-5c514f28d736

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1

Error: (08/16/2017 01:04:40 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (08/16/2017 12:58:22 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (08/16/2017 12:57:39 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Marlies\Desktop\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (08/16/2017 12:57:20 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Marlies\Desktop\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (08/16/2017 12:55:40 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Marlies\Desktop\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.


Systemfehler:
=============
Error: (08/16/2017 12:59:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (08/16/2017 12:59:03 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Marlies\AppData\Local\Temp\ehdrv.sys

Error: (08/16/2017 12:59:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (08/16/2017 12:59:03 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Marlies\AppData\Local\Temp\ehdrv.sys

Error: (08/16/2017 12:59:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (08/16/2017 12:59:03 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Marlies\AppData\Local\Temp\ehdrv.sys

Error: (08/16/2017 12:49:32 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung vom Remoteendpunkt empfangen. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 20.

Error: (08/16/2017 12:10:02 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (08/15/2017 03:33:00 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (08/15/2017 01:33:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Service Installer TrueKey" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i3-4010U CPU @ 1.70GHz
Prozentuale Nutzung des RAM: 68%
Installierter physikalischer RAM: 4004.02 MB
Verfügbarer physikalischer RAM: 1254.95 MB
Summe virtueller Speicher: 8100.02 MB
Verfügbarer virtueller Speicher: 3787.31 MB

==================== Laufwerke ================================

Drive c: (Boot) (Fixed) (Total:404.05 GB) (Free:80.58 GB) NTFS
Drive d: (Recover) (Fixed) (Total:60 GB) (Free:45.11 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 3782765E)

Partition: GPT.

==================== Ende von Addition.txt ============================

So, nun müßte es das gewesen sein.

Noch einen kurzen Hinweis:

Mein Virenscanner hat während des Scannvorganges von ESET eine Datei blockiert und in Quarantäne verschoben.

Und zwar HEUR/Suspar.gen, eine Datei von Adwcleaner/Quarantine.

Kann/soll ich die wieder herstellen?

Gruß Kasrello

Tician · 17.08.2017, 21:08

Hi,

gut gemacht!

Wir schmeißen noch ein paar Reste raus, dann sind wir durch. Die Datei die dein Virenscanner gefunden hat kann es ruhig behalten

Hinweis:
Chip Installer

Zitat:

C:\Users\Marlies\Downloads\HijackThis - CHIP-Installer.exe

Achtung: keine Downloads mehr von Chip.de, ließ dir dazu am besten das hier durch: CHIP-Installer - was ist das? - Anleitungen

Schritt 1:

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

C:\Downloads\downloads\backups
C:\Downloads\downloads\FreeYouTubeDownload.exe
C:\Eigene Dateien\Downloads\empc_setup.exe
C:\Eigene Dateien\Downloads\FreeYouTube237Download.exe
C:\Eigene Dateien\Downloads\SoftonicDownloader_for_windows-live-messenger.exe
C:\Eigene Dateien\Downloads\SoftonicDownloader_fuer_photo-collage-creator.exe
C:\Eigene Dateien\Downloads\SoftonicDownloader_fuer_windows-live-messenger-2012.exe
C:\Users\Marlies\Downloads\Free PDF to Word Doc Converter - CHIP-Installer.exe
C:\Users\Marlies\Downloads\HijackThis - CHIP-Installer.exe
C:\Users\Marlies\Downloads\Microsoft Silverlight - CHIP-Installer(1).exe
C:\Users\Marlies\Downloads\Microsoft Silverlight - CHIP-Installer.exe
C:\Users\Marlies\Downloads\Setup_FileViewPro_2015.exe
C:\Users\Marlies\Downloads\Weightwatchers Rechner - CHIP-Installer.exe
Task: {D8795768-9D8C-47D4-8E00-6027B7D45D6D} - System32\Tasks\{802886A1-E095-435D-AADC-049F9EE278AA} => C:\Windows\system32\pcalua.exe -a C:\Users\Marlies\AppData\Roaming\key-find\UninstallManager.exe -c  -ptid=cvs
C:\Users\Marlies\AppData\Roaming\key-find
EmptyTemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2:

Aktiviere bitte die automatischen Updates des WIndows Defenders.
Schau dir dazu bitte die Schritte hier an:
https://support.microsoft.com/de-de/...ndows-defender

Macht der PC noch Probleme?

Kasrello · 18.08.2017, 11:23

Hallo Tician,

ich habe alles so gemacht, wie angegeben.

Hier die Log.txt nach der Entfernung.

Code:

ATTFilter

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 17-08-2017
durchgefÃ¼hrt von Marlies (17-08-2017 23:15:35) Run:1
Gestartet von C:\Users\Marlies\Desktop
Geladene Profile: Marlies &  (VerfÃ¼gbare Profile: Marlies & Marlies_2)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
C:\Downloads\downloads\backups
C:\Downloads\downloads\FreeYouTubeDownload.exe
C:\Eigene Dateien\Downloads\empc_setup.exe
C:\Eigene Dateien\Downloads\FreeYouTube237Download.exe
C:\Eigene Dateien\Downloads\SoftonicDownloader_for_windows-live-messenger.exe
C:\Eigene Dateien\Downloads\SoftonicDownloader_fuer_photo-collage-creator.exe
C:\Eigene Dateien\Downloads\SoftonicDownloader_fuer_windows-live-messenger-2012.exe
C:\Users\Marlies\Downloads\Free PDF to Word Doc Converter - CHIP-Installer.exe
C:\Users\Marlies\Downloads\HijackThis - CHIP-Installer.exe
C:\Users\Marlies\Downloads\Microsoft Silverlight - CHIP-Installer(1).exe
C:\Users\Marlies\Downloads\Microsoft Silverlight - CHIP-Installer.exe
C:\Users\Marlies\Downloads\Setup_FileViewPro_2015.exe
C:\Users\Marlies\Downloads\Weightwatchers Rechner - CHIP-Installer.exe
Task: {D8795768-9D8C-47D4-8E00-6027B7D45D6D} - System32\Tasks\{802886A1-E095-435D-AADC-049F9EE278AA} => C:\Windows\system32\pcalua.exe -a C:\Users\Marlies\AppData\Roaming\key-find\UninstallManager.exe -c  -ptid=cvs
C:\Users\Marlies\AppData\Roaming\key-find
EmptyTemp:
*****************

C:\Downloads\downloads\backups => erfolgreich verschoben
C:\Downloads\downloads\FreeYouTubeDownload.exe => erfolgreich verschoben
C:\Eigene Dateien\Downloads\empc_setup.exe => erfolgreich verschoben
C:\Eigene Dateien\Downloads\FreeYouTube237Download.exe => erfolgreich verschoben
C:\Eigene Dateien\Downloads\SoftonicDownloader_for_windows-live-messenger.exe => erfolgreich verschoben
C:\Eigene Dateien\Downloads\SoftonicDownloader_fuer_photo-collage-creator.exe => erfolgreich verschoben
C:\Eigene Dateien\Downloads\SoftonicDownloader_fuer_windows-live-messenger-2012.exe => erfolgreich verschoben
C:\Users\Marlies\Downloads\Free PDF to Word Doc Converter - CHIP-Installer.exe => erfolgreich verschoben
C:\Users\Marlies\Downloads\HijackThis - CHIP-Installer.exe => erfolgreich verschoben
C:\Users\Marlies\Downloads\Microsoft Silverlight - CHIP-Installer(1).exe => erfolgreich verschoben
C:\Users\Marlies\Downloads\Microsoft Silverlight - CHIP-Installer.exe => erfolgreich verschoben
C:\Users\Marlies\Downloads\Setup_FileViewPro_2015.exe => erfolgreich verschoben
C:\Users\Marlies\Downloads\Weightwatchers Rechner - CHIP-Installer.exe => erfolgreich verschoben
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D8795768-9D8C-47D4-8E00-6027B7D45D6D} => SchlÃ¼ssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D8795768-9D8C-47D4-8E00-6027B7D45D6D} => SchlÃ¼ssel erfolgreich entfernt
C:\Windows\System32\Tasks\{802886A1-E095-435D-AADC-049F9EE278AA} => erfolgreich verschoben
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{802886A1-E095-435D-AADC-049F9EE278AA} => SchlÃ¼ssel erfolgreich entfernt
"C:\Users\Marlies\AppData\Roaming\key-find" => nicht gefunden.

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 37702819 B
Java, Flash, Steam htmlcache => 9834 B
Windows/system/drivers => 855503140 B
Edge => 0 B
Chrome => 556681942 B
Firefox => 377334719 B
Opera => 1525168 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 9019146 B
systemprofile32 => 49498 B
LocalService => 32791143 B
NetworkService => 43268 B
Marlies => 43069831384 B
Marlies_2 => 983571 B

RecycleBin => 0 B
EmptyTemp: => 41.9 GB temporÃ¤re Dateien entfernt.

================================


Das System musste neu gestartet werden.

==== Ende von Fixlog 23:39:59 ====

Das Problem, weshalb ich mich gemeldet hatte, ist in Google Chrome nach wie vor vorhanden, im Internet Explorer ist es beseitigt.

Ich füge hier mal ein paar Screenshots als Anlage ein, damit Du Dir anschauen kannst, was ich meine. Ich habe dabei einmal das Suchergebnis vom Internet Explorer und Firefox des betroffenen PC´s dargestellt und einmal das Suchergebnis von Google Chrome des betroffenen PC´s. Außerdem habe ich dann auch noch ein Suchergebnis von Google Chrome eines anderen PC´s dargestellt (die Bilder sind entsprechend beschriftet).

Außerdem habe ich noch eine Frage.
Der Scan mit Eset Onlinescanner hat 22 Bedrohungen erkannt. Diese habe ich nach dem Scan nicht entfernt, ich habe Dir nur die Logdatei gezeigt. Das war so beschrieben, das war auch so richtig, oder?

Außerdem gibt es die Meldung, dass 15 Programme aktualisiert werden sollen, kann ich das unbedenklich durchführen lassen?

Grüße von Kasrello

Kasrello · 18.08.2017, 17:38

Hallo Tician,

was vielleicht noch zu erwähnen wäre:

Das Suchergebnis im Google Chrome am betroffenen PC ist direkt nach der Suche auch so wie bei den anderen Browsern, aber innerhalb 1 Sec. springt das Ergebnis dann auf abgebildete Ansicht um. Einige Ergebnisse verrutschen dann einfach nach unten und einige verschwinden ganz.

Hallo Tician,

mir ist zu dem jetzt aufgefallen, dass der PC nach dem Entfernungsvorgang und Neustart, jetzt sehr langsam läuft, ein Arbeiten ohne Ruckeln ist nicht mehr möglich.

Wenn ich einen Text schreibe, erscheint das Wort verzögert zu dem wie ich es eintippe.

Tician · 18.08.2017, 23:53

Hi,

soweit so gut.

Zitat:

Das war so beschrieben, das war auch so richtig, oder?

Ja, alles richtig, die Funde haben wir mit dem FRST-Fix gelöscht

Eine Frage: Der persönliche Ordner mit Dateien liegt bei dir unter C:\Eigene Dateien\, das ist sehr unüblich. Normalerweise liegt er unter C:\Benutzer\Marlies (den es bei dir allerdings auch noch gibt). Hast du dir das selbst so eingerichtet oder wurde das evtl. von einer alten Daten-Sicherung eingespielt?

Schritt 1:

Bitte setze deine Brower wie folgt zurück:

CHR:::
Chrome zurücksetzen

Schritt 2:

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Untersuchen.
FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Funktioniert es jetzt ohne Werbung?

Malware eingefangen? Suchergebnisse im Browser fehlerhaft.

Log-Analyse und Auswertung: Malware eingefangen? Suchergebnisse im Browser fehlerhaft.