Hallo,
ClamWin meldet mir folgenden Befall:
D:\Windows\System32\DriverStore\FileRepository\nvfd6032.inf_7f2e2fcf\nvunrm.exe: Win.Trojan.Virtob-1645 FOUND

ClamWin kann den Schädling aber nicht entfernen oder verschieben.

Ich habe es daraufhin mit anderen Virenprogrammen (Antivir, Malwarebytes) und TrojanRemover versucht, aber diese finden keinen Befall und können demnach auch nichts reparieren.

Ist die Meldung von ClamWin evtl. eine Falschmeldung?
Wenn nicht, wie bekomme ich den Schädling weg?

Die Logs poste ich im folgenden Beitrag wegen Überlänge.

Danke schon mal für die Hilfe und viele Grüße
Maril

FRST:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version: 20-08-2017
durchgeführt von User (Administrator) auf USER-PC (07-09-2017 11:36:17)
Gestartet von D:\Users\User\Downloads
Geladene Profile: User &  (Verfügbare Profile: User & DefaultAppPool)
Platform: Microsoft Windows 10 Home Version 1703 (X86) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Digital Wave Ltd.) C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe
(Dropbox, Inc.) C:\Program Files\Dropbox\Update\DropboxUpdate.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x86__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PaperPort\pptd40nt.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\BrYNSvc.exe
(Brother Industries, Ltd.) C:\Program Files\Brother\Brother Help\BrotherHelp.exe
(Dropbox, Inc.) C:\Program Files\Dropbox\Client\Dropbox.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(alch) C:\Program Files\ClamWin\bin\ClamTray.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Dropbox, Inc.) C:\Program Files\Dropbox\Client\Dropbox.exe
(Dropbox, Inc.) C:\Program Files\Dropbox\Client\Dropbox.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Kakao Corp. ) C:\Program Files\Kakao\KakaoTalk\KakaoTalk.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudDrive.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCcUxSys.exe
(Google, Inc) C:\Users\User\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Apple, Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\secd.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\VPN\Avira.VpnService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avgnt.exe
(Avira Operations Gmbh & Co. KG) C:\Program Files\Avira\Safe Shopping\Avira Safe Shopping.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11707.1001.23.0_x86__8wekyb3d8bbwe\WinStore.App.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\VPN\Avira.WebAppHost.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Chip Digital GmbH) C:\Program Files\Chip Digital GmbH\chip1click\chip 1-click installer.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(alch) C:\Program Files\ClamWin\bin\ClamWin.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [485280 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10025576 2011-01-14] (Realtek Semiconductor)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [67896 2017-07-13] (Apple Inc.)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [4127488 2015-06-16] (Safer-Networking Ltd.)
HKLM\...\Run: [IndexSearch] => C:\Program Files\Nuance\PaperPort\IndexSearch.exe [47432 2013-08-15] (Nuance Communications, Inc.)
HKLM\...\Run: [PaperPort PTD] => C:\Program Files\Nuance\PaperPort\pptd40nt.exe [31048 2013-08-15] (Nuance Communications, Inc.)
HKLM\...\Run: [ControlCenter4] => C:\Program Files\ControlCenter4\BrCcBoot.exe [139776 2014-06-16] (Brother Industries, Ltd.)
HKLM\...\Run: [BrStsMon00] => C:\Program Files\Browny02\Brother\BrStMonW.exe [4513792 2014-05-22] (Brother Industries, Ltd.)
HKLM\...\Run: [BrHelp] => C:\Program Files\Brother\Brother Help\BrotherHelp.exe [1944576 2013-03-07] (Brother Industries, Ltd.)
HKLM\...\Run: [Dropbox] => C:\Program Files\Dropbox\Client\Dropbox.exe [3487032 2017-08-22] (Dropbox, Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [267064 2017-07-14] (Apple Inc.)
HKLM\...\Run: [ClamWin] => C:\Program Files\ClamWin\bin\ClamTray.exe [86016 2016-03-19] (alch)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2017-07-12] (Oracle Corporation)
HKLM\...\Run: [ALU] => C:\Program Files\Acer\Acer Updater\ALU.exe [2379056 2017-04-21] (Acer Incorporated)
HKLM\...\Run: [Avira SystrayStartTrigger] => C:\Program Files\Avira\Launcher\Avira.SystrayStartTrigger.exe [97512 2017-08-15] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira System Speedup User Starter] => C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [66144 2017-08-17] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\Antivirus\avgnt.exe [919032 2017-08-17] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira Safe Shopping] => C:\Program Files\Avira\Safe Shopping\Avira Safe Shopping.exe [429728 2017-08-22] (Avira Operations Gmbh & Co. KG)
HKLM\...\Run: [TrojanScanner] => C:\Program Files\Trojan Remover\Trjscan.exe [3627576 2017-01-10] (Simply Super Software)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ACHTUNG
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\Run: [KakaoTalk] => C:\Program Files\Kakao\KakaoTalk\KakaoTalk.exe [8430912 2017-08-18] (Kakao Corp. )
HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [645768 2017-06-05] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\Run: [iCloudDrive] => C:\Program Files\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\Run: [Google Update] => C:\Users\User\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateCore.exe [601168 2017-04-28] (Google Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\Run: [Google Photos Backup] => C:\Users\User\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe [3790936 2016-04-09] (Google, Inc)
HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7680216 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425\...\Run: [KakaoTalk] => C:\Program Files\Kakao\KakaoTalk\KakaoTalk.exe [8430912 2017-08-18] (Kakao Corp. )
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [645768 2017-06-05] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425\...\Run: [iCloudDrive] => C:\Program Files\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425\...\Run: [Google Update] => C:\Users\User\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateCore.exe [601168 2017-04-28] (Google Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425\...\Run: [Google Photos Backup] => C:\Users\User\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe [3790936 2016-04-09] (Google, Inc)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7680216 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697\...\Run: [KakaoTalk] => C:\Program Files\Kakao\KakaoTalk\KakaoTalk.exe [8430912 2017-08-18] (Kakao Corp. )
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [645768 2017-06-05] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697\...\Run: [iCloudDrive] => C:\Program Files\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697\...\Run: [Google Update] => C:\Users\User\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateCore.exe [601168 2017-04-28] (Google Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697\...\Run: [Google Photos Backup] => C:\Users\User\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe [3790936 2016-04-09] (Google, Inc)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7680216 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184\...\Run: [KakaoTalk] => C:\Program Files\Kakao\KakaoTalk\KakaoTalk.exe [8430912 2017-08-18] (Kakao Corp. )
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [645768 2017-06-05] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184\...\Run: [iCloudDrive] => C:\Program Files\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184\...\Run: [Google Update] => C:\Users\User\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateCore.exe [601168 2017-04-28] (Google Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184\...\Run: [Google Photos Backup] => C:\Users\User\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe [3790936 2016-04-09] (Google, Inc)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7680216 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309\...\Run: [KakaoTalk] => C:\Program Files\Kakao\KakaoTalk\KakaoTalk.exe [8430912 2017-08-18] (Kakao Corp. )
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [645768 2017-06-05] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309\...\Run: [iCloudDrive] => C:\Program Files\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309\...\Run: [Google Update] => C:\Users\User\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateCore.exe [601168 2017-04-28] (Google Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309\...\Run: [Google Photos Backup] => C:\Users\User\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe [3790936 2016-04-09] (Google, Inc)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7680216 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715\...\Run: [KakaoTalk] => C:\Program Files\Kakao\KakaoTalk\KakaoTalk.exe [8430912 2017-08-18] (Kakao Corp. )
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [645768 2017-06-05] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715\...\Run: [iCloudDrive] => C:\Program Files\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715\...\Run: [Google Update] => C:\Users\User\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateCore.exe [601168 2017-04-28] (Google Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715\...\Run: [Google Photos Backup] => C:\Users\User\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe [3790936 2016-04-09] (Google, Inc)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7680216 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305\...\Run: [KakaoTalk] => C:\Program Files\Kakao\KakaoTalk\KakaoTalk.exe [8430912 2017-08-18] (Kakao Corp. )
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [645768 2017-06-05] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305\...\Run: [iCloudDrive] => C:\Program Files\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2017-07-14] (Apple Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305\...\Run: [Google Update] => C:\Users\User\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateCore.exe [601168 2017-04-28] (Google Inc.)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305\...\Run: [Google Photos Backup] => C:\Users\User\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe [3790936 2016-04-09] (Google, Inc)
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7680216 2017-08-03] (Piriform Ltd)
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-09062017232249614\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [515072 2017-03-18] (Microsoft Corporation)
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230841602\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [515072 2017-03-18] (Microsoft Corporation)
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230906617\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [515072 2017-03-18] (Microsoft Corporation)
Startup: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2017-09-04]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2012-08-20]
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2017-09-04]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{7c690ca6-3c14-4161-ac14-f54aabc23763}: [DhcpNameServer] 192.168.2.1

Internet Explorer:
==================
HKU\S-1-5-21-402077633-641172795-4098644512-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-402077633-641172795-4098644512-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-402077633-641172795-4098644512-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-402077633-641172795-4098644512-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_141\bin\ssv.dll [2017-07-26] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_141\bin\jp2ssv.dll [2017-07-26] (Oracle Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: rx0fa5al.default-1502455535696
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rx0fa5al.default-1502455535696 [2017-09-07]
FF Homepage: Mozilla\Firefox\Profiles\rx0fa5al.default-1502455535696 -> hxxps://www.startpage.com/
FF Session Restore: Mozilla\Firefox\Profiles\rx0fa5al.default-1502455535696 -> ist aktiviert.
FF Extension: (Avira Browser Safety) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rx0fa5al.default-1502455535696\Extensions\abs@avira.com.xpi [2017-09-06]
FF Extension: (Avira Password Manager) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rx0fa5al.default-1502455535696\Extensions\passwordmanager@avira.com [2017-09-04]
FF Extension: (Avira SafeSearch Plus) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rx0fa5al.default-1502455535696\Extensions\safesearchplus2@avira.com [2017-08-15]
FF Extension: (Firefox Screenshots) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rx0fa5al.default-1502455535696\features\{ffbef703-6cd9-4a1b-89ec-d1775218419a}\screenshots@mozilla.org.xpi [2017-09-01]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-08] ()
FF Plugin: @java.com/DTPlugin,version=11.141.2 -> C:\Program Files\Java\jre1.8.0_141\bin\dtplugin\npDeployJava1.dll [2017-07-26] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.141.2 -> C:\Program Files\Java\jre1.8.0_141\bin\plugin2\npjp2.dll [2017-07-26] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-14] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-14] (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-10] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000: @tools.google.com/Google Update;version=3 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000: @tools.google.com/Google Update;version=9 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-02-20] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425: @tools.google.com/Google Update;version=3 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425: @tools.google.com/Google Update;version=9 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-02-20] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697: @tools.google.com/Google Update;version=3 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697: @tools.google.com/Google Update;version=9 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-02-20] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184: @tools.google.com/Google Update;version=3 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184: @tools.google.com/Google Update;version=9 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-02-20] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309: @tools.google.com/Google Update;version=3 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309: @tools.google.com/Google Update;version=9 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-02-20] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715: @tools.google.com/Google Update;version=3 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715: @tools.google.com/Google Update;version=9 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-02-20] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305: @tools.google.com/Google Update;version=3 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305: @tools.google.com/Google Update;version=9 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-02-20] (Unity Technologies ApS)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2017-07-05]

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR DefaultSearchURL: Default -> hxxps://search.avira.com/#web/result?source=omnibar&q={searchTerms}
CHR DefaultSearchKeyword: Default -> Avira
CHR DefaultSuggestURL: Default -> hxxps://search.avira.com/suggestions?q={searchTerms}&li=ff&hl=de
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2017-09-04]
CHR Extension: (Google Präsentationen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-25]
CHR Extension: (Google Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-25]
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-25]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-25]
CHR Extension: (Avira Safe Shopping) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2017-08-15]
CHR Extension: (Google-Suche) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-25]
CHR Extension: (Google Tabellen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-25]
CHR Extension: (Google Docs Offline) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-27]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Google Mail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-25]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-15]
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [ipmkfpcnmccejididiaagpgchgjfajgp] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AntiVirMailService; C:\Program Files\Avira\Antivirus\avmailc7.exe [1128432 2017-08-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\Antivirus\sched.exe [490968 2017-08-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\Antivirus\avguard.exe [490968 2017-08-17] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\Antivirus\avwebg7.exe [1525240 2017-08-17] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe [404816 2017-08-15] (Avira Operations GmbH & Co. KG)
R2 AviraPhantomVPN; C:\Program Files\Avira\VPN\Avira.VpnService.exe [322616 2017-07-13] (Avira Operations GmbH & Co. KG)
R2 AviraUpdaterService; C:\Program Files\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe [102304 2017-08-08] (Avira Operations GmbH & Co. KG)
R3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [282112 2013-09-25] (Brother Industries, Ltd.) [Datei ist nicht signiert]
R2 chip1click; C:\Program Files\Chip Digital GmbH\chip1click\chip 1-click installer.exe [91136 2016-10-27] (Chip Digital GmbH) [Datei ist nicht signiert]
S3 cphs; C:\WINDOWS\system32\IntelCpHeciSvc.exe [300120 2017-03-10] (Intel Corporation)
S2 dbupdate; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-12] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-12] (Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [43336 2017-08-22] (Dropbox, Inc.)
R2 DigitalWave.Update.Service; C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe [388968 2016-03-29] (Digital Wave Ltd.)
S2 ETService; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [30080 2011-06-14] ()
R2 Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [257440 2016-06-08] (Acer Incorporated)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4430792 2017-08-21] (Malwarebytes)
R2 PDFProFiltSrvPP; C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe [145736 2013-08-15] (Nuance Communications, Inc.)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [154760 2017-06-05] (Sandboxie Holdings, LLC)
S2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1750712 2015-06-16] (Safer-Networking Ltd.) [Datei ist nicht signiert]
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [4088608 2016-09-21] (Safer-Networking Ltd.) [Datei ist nicht signiert]
S2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [235984 2016-11-24] (Safer-Networking Ltd.) [Datei ist nicht signiert]
R2 SpeedupService; C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [75312 2017-08-17] (Avira Operations GmbH & Co. KG)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [265352 2017-03-18] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [82488 2017-07-11] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 avdevprot; C:\WINDOWS\System32\DRIVERS\avdevprot.sys [54088 2017-08-17] (Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [146680 2017-08-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [165752 2017-08-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [53256 2017-08-17] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [77560 2017-08-17] (Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\WINDOWS\System32\Drivers\avusbflt.sys [37472 2017-08-17] (Avira Operations GmbH & Co. KG)
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [166848 2017-09-06] (Malwarebytes)
S3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [40352 2017-09-06] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [221632 2017-09-06] (Malwarebytes)
R3 MEI; C:\WINDOWS\System32\drivers\HECI.sys [41088 2010-10-19] (Intel Corporation)
R3 rt640x86; C:\WINDOWS\System32\drivers\rt640x86.sys [504832 2017-03-18] (Realtek )
R3 RtlWlanu_OldIC; C:\WINDOWS\System32\drivers\rtwlanu_oldIC.sys [3245056 2017-03-18] (Realtek Semiconductor Corporation )
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [179336 2017-06-05] (Sandboxie Holdings, LLC)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [37464 2017-03-18] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [243104 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [96672 2017-03-18] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-09-07 11:35 - 2017-09-07 11:36 - 000000000 ____D C:\FRST
2017-09-07 11:23 - 2017-09-07 11:24 - 000000000 ____D C:\ProgramData\TEMP
2017-09-07 11:22 - 2017-09-07 11:22 - 000000000 ____D C:\ProgramData\Simply Super Software
2017-09-07 11:22 - 2017-09-07 11:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trojan Remover
2017-09-07 11:22 - 2017-09-07 11:22 - 000000000 ____D C:\Program Files\Trojan Remover
2017-09-07 11:21 - 2017-09-07 11:21 - 000000000 ____D C:\Program Files\Chip Digital GmbH
2017-09-06 23:07 - 2017-09-07 10:29 - 000075712 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-09-06 23:07 - 2017-09-06 23:07 - 000221632 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-09-06 23:07 - 2017-09-06 23:07 - 000166848 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-09-06 23:07 - 2017-09-06 23:07 - 000040352 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-09-06 23:07 - 2017-09-06 23:07 - 000002099 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-09-06 23:07 - 2017-09-06 23:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-09-06 23:07 - 2017-08-24 11:27 - 000059904 _____ C:\WINDOWS\system32\Drivers\mbae.sys
2017-09-06 23:06 - 2017-09-06 23:06 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-09-06 23:06 - 2017-09-06 23:06 - 000000000 ____D C:\Program Files\Malwarebytes
2017-09-04 15:32 - 2017-09-04 15:32 - 000000000 ____D C:\Users\User\AppData\Roaming\Avira
2017-09-04 15:30 - 2017-08-17 18:25 - 000165752 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2017-09-04 15:30 - 2017-08-17 18:25 - 000146680 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2017-09-04 15:30 - 2017-08-17 18:25 - 000077560 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2017-09-04 15:30 - 2017-08-17 18:25 - 000054088 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avdevprot.sys
2017-09-04 15:30 - 2017-08-17 18:25 - 000053256 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2017-09-04 15:30 - 2017-08-17 18:25 - 000037472 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avusbflt.sys
2017-09-04 15:26 - 2017-09-04 15:27 - 000000000 ____D C:\Users\Public\Speedup Sessions
2017-09-04 15:26 - 2017-09-04 15:26 - 000001077 _____ C:\Users\Public\Desktop\Avira Phantom VPN.lnk
2017-09-04 15:25 - 2017-09-04 15:31 - 000000000 ____D C:\Program Files\Avira
2017-09-04 15:25 - 2017-09-04 15:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-09-04 15:25 - 2017-09-04 15:30 - 000000000 ____D C:\ProgramData\Avira
2017-09-04 15:25 - 2017-09-04 15:25 - 000001229 _____ C:\Users\Public\Desktop\Avira.lnk
2017-08-23 21:34 - 2017-08-23 21:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-08-22 18:55 - 2017-08-22 18:55 - 000043336 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2017-08-22 18:55 - 2017-08-22 18:55 - 000035432 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2017-08-22 18:55 - 2017-08-22 18:55 - 000035408 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2017-08-22 18:55 - 2017-08-22 18:55 - 000035408 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 020504064 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 020373408 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 013841408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 011870208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 006761568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 006728192 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 006269440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 005961728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 005862816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 005820984 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 005808640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 005721600 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 004417024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 004213656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 004056064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 003464704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 003447296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002956288 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 002671616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002424024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002259768 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002211840 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002165752 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002122240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002081184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 002040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002023832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 001972128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 001854832 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001831936 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001585152 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 001536512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001513984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001377280 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msjet40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001291776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001244160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 001208320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001195760 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001156608 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000988168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000967584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000962048 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000952832 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000892928 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000877056 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000866816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswdat10.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000866808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000864248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000844800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000805816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000798208 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000777400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000760832 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000755616 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000750496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000698384 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000665600 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000661504 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2017-08-19 11:14 - 2017-08-19 11:14 - 000641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswstr10.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000616448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrepl40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000610584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000597920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000586752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000582560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000572320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsvcs.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000551200 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000547328 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000518144 _____ C:\WINDOWS\system32\msjetoledb40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxbde40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000440184 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000435712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000434592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2017-08-19 11:14 - 2017-08-19 11:14 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000414296 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000406544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000404992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspbde40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000359552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000358816 _____ (Microsoft Corporation) C:\WINDOWS\system32\halmacpi.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000358816 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000349600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrd3x40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\msexcl40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000338944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Display.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrd2x40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\msjtes40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000280472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000277432 _____ (Microsoft Corporation) C:\WINDOWS\system32\shlwapi.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000273312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstext40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msltus40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000239008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000216504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000176024 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000173984 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000173104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000168864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2017-08-19 11:14 - 2017-08-19 11:14 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msjint40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\qasf.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000133904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdeploy.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000100232 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000096648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000095648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000090464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\msjter40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ofdeploy.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000060312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\DmApiSetExtImplDesktop.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\IpNatHlpClient.dll
2017-08-19 11:09 - 2017-08-19 10:19 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2017-08-19 11:09 - 2017-03-17 22:45 - 005739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2017-08-19 11:09 - 2017-03-17 22:43 - 002629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2017-08-19 11:09 - 2017-03-17 22:35 - 005484544 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2017-08-19 11:08 - 2017-08-19 11:08 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2017-08-19 11:06 - 2017-08-19 11:06 - 000000000 ____D C:\WINDOWS\system32\XPSViewer
2017-08-19 11:06 - 2017-08-19 11:06 - 000000000 ____D C:\WINDOWS\system32\msmq
2017-08-19 11:06 - 2017-08-19 11:06 - 000000000 ____D C:\WINDOWS\system32\BestPractices
2017-08-19 11:06 - 2017-08-19 11:06 - 000000000 ____D C:\Program Files\Reference Assemblies
2017-08-19 11:06 - 2017-08-19 11:06 - 000000000 ____D C:\inetpub
2017-08-19 11:06 - 2017-08-19 10:32 - 000000000 ____D C:\Program Files\MSBuild
2017-08-19 11:05 - 2017-02-10 12:21 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-08-19 11:05 - 2017-02-10 12:21 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-08-19 11:05 - 2017-02-10 12:21 - 000035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-08-19 10:54 - 2017-08-19 10:54 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-08-19 10:50 - 2017-08-19 10:50 - 000000020 ___SH C:\Users\User\ntuser.ini
2017-08-19 10:46 - 2017-08-19 10:48 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2017-08-19 10:46 - 2017-08-19 10:48 - 000011433 _____ C:\WINDOWS\diagerr.xml
2017-08-19 10:40 - 2017-09-04 15:21 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-08-19 10:31 - 2017-08-19 10:31 - 000001487 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-08-19 10:30 - 2017-08-19 10:30 - 000000000 ____D C:\ProgramData\USOShared
2017-08-19 10:25 - 2017-08-19 10:25 - 000000000 ____D C:\Program Files\Common Files\SpeechEngines
2017-08-19 10:24 - 2017-08-19 10:24 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-08-19 10:22 - 2017-08-19 10:37 - 000000000 ____D C:\Users\DefaultAppPool
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\Vorlagen
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\Startmenü
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\Netzwerkumgebung
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\Lokale Einstellungen
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\Eigene Dateien
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\Druckumgebung
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\Anwendungsdaten
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2017-08-19 10:21 - 2017-09-04 15:28 - 002124044 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-08-19 10:21 - 2017-08-29 18:51 - 000009652 _____ C:\WINDOWS\BRRBCOM.INI
2017-08-19 10:21 - 2017-08-19 10:25 - 000000000 ____D C:\ProgramData\Brother
2017-08-19 10:21 - 2017-08-19 10:21 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2017-08-19 10:20 - 2017-08-19 10:25 - 000000000 ____D C:\Program Files\Realtek
2017-08-19 10:20 - 2017-08-19 10:20 - 000000000 ____D C:\WINDOWS\system32\RTCOM
2017-08-19 10:19 - 2017-09-07 10:28 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-08-19 10:19 - 2017-09-04 15:22 - 000388640 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-08-18 09:49 - 2017-09-04 19:35 - 000000000 ___DC C:\WINDOWS\Panther
2017-08-15 16:53 - 2017-08-15 16:53 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2017-08-14 22:53 - 2017-08-14 23:07 - 000055160 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
2017-08-14 15:28 - 2017-08-14 15:28 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avusbflt_01011.Wdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-09-06 21:31 - 2017-03-18 20:23 - 000000000 ___HD C:\Program Files\WindowsApps
2017-09-06 21:31 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-09-05 22:30 - 2015-10-27 16:17 - 000001726 _____ C:\WINDOWS\Sandboxie.ini
2017-09-04 19:35 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-09-04 19:35 - 2017-03-18 20:21 - 000000000 ____D C:\WINDOWS\INF
2017-09-04 17:11 - 2012-08-15 19:36 - 000094344 _____ C:\WINDOWS\system32\GDIPFONTCACHEV1.DAT
2017-09-04 15:28 - 2017-03-19 10:57 - 000912932 _____ C:\WINDOWS\system32\perfh007.dat
2017-09-04 15:28 - 2017-03-19 10:57 - 000201602 _____ C:\WINDOWS\system32\perfc007.dat
2017-09-04 15:25 - 2017-03-11 11:55 - 000000000 ____D C:\ProgramData\Package Cache
2017-09-04 15:23 - 2016-03-05 10:54 - 000000000 ___RD C:\Users\User\iCloudDrive
2017-09-04 15:21 - 2017-04-24 22:10 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-09-04 15:21 - 2012-08-13 16:02 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-09-04 15:20 - 2017-03-18 08:02 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2017-08-31 17:59 - 2017-03-11 11:43 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-08-29 10:38 - 2015-12-25 22:56 - 000002216 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-28 20:28 - 2013-01-03 14:03 - 000006246 _____ C:\WINDOWS\wininit.ini
2017-08-23 21:35 - 2017-05-12 11:19 - 000000000 ____D C:\Program Files\Dropbox
2017-08-23 20:49 - 2016-11-19 12:02 - 000000000 ____D C:\Users\User\AppData\LocalLow\Mozilla
2017-08-23 17:55 - 2017-07-26 22:49 - 000000000 ____D C:\Program Files\CCleaner
2017-08-20 11:33 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\appcompat
2017-08-19 14:17 - 2017-03-18 20:14 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-08-19 14:12 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\Registration
2017-08-19 11:18 - 2017-03-18 20:23 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-08-19 11:16 - 2017-03-18 20:25 - 000000000 ____D C:\WINDOWS\Setup
2017-08-19 11:15 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2017-08-19 11:15 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-08-19 11:15 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-08-19 11:15 - 2017-03-18 20:23 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-08-19 11:10 - 2017-03-19 10:58 - 000000000 ____D C:\WINDOWS\OCR
2017-08-19 11:06 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\MUI
2017-08-19 11:06 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2017-08-19 11:06 - 2017-03-18 20:19 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2017-08-19 11:06 - 2017-03-18 20:19 - 000049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2017-08-19 11:06 - 2017-03-18 20:19 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2017-08-19 11:06 - 2017-03-18 20:19 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2017-08-19 11:06 - 2017-03-18 20:19 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2017-08-19 11:06 - 2017-03-18 20:19 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll
2017-08-19 11:06 - 2017-03-18 20:19 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000973312 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000611840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2017-08-19 11:06 - 2017-03-18 20:18 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2017-08-19 11:06 - 2017-03-18 20:18 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2017-08-19 11:06 - 2017-03-18 20:18 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2017-08-19 11:06 - 2017-03-18 20:18 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2017-08-19 11:06 - 2017-03-18 20:18 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2017-08-19 11:06 - 2017-03-18 20:18 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2017-08-19 11:06 - 2017-03-18 20:18 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2017-08-19 11:00 - 2015-10-15 10:15 - 000002425 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-08-19 11:00 - 2015-10-15 10:15 - 000000000 ___RD C:\Users\User\OneDrive
2017-08-19 10:51 - 2017-03-18 20:23 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-08-19 10:51 - 2015-09-10 06:22 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-08-19 10:49 - 2017-03-18 20:23 - 000000000 ____D C:\Program Files\Windows NT
2017-08-19 10:48 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-08-19 10:47 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\rescache
2017-08-19 10:45 - 2016-07-16 10:29 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-08-19 10:41 - 2015-10-15 08:26 - 000021628 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-08-19 10:40 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\Media
2017-08-19 10:39 - 2017-03-18 20:23 - 000000000 __RHD C:\Users\Public\Libraries
2017-08-19 10:32 - 2017-07-28 09:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2017-08-19 10:32 - 2017-07-26 22:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-08-19 10:32 - 2017-07-26 22:33 - 000000000 ____D C:\WINDOWS\system32\UNP
2017-08-19 10:32 - 2017-07-26 22:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ClamWin Antivirus
2017-08-19 10:32 - 2017-07-26 15:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2017-08-19 10:32 - 2017-06-12 23:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie
2017-08-19 10:32 - 2017-03-20 13:15 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MuseScore 2
2017-08-19 10:32 - 2017-02-07 15:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2017-08-19 10:32 - 2016-12-05 14:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LEGO Company
2017-08-19 10:32 - 2016-08-07 12:16 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Photos Backup
2017-08-19 10:32 - 2016-04-23 14:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2017-08-19 10:32 - 2016-01-06 18:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2017-08-19 10:32 - 2016-01-06 18:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nuance PaperPort 12
2017-08-19 10:32 - 2015-10-30 17:10 - 000000000 ____D C:\WINDOWS\ShellNew
2017-08-19 10:32 - 2015-10-27 16:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nostale(DE)
2017-08-19 10:32 - 2015-10-27 16:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2017-08-19 10:32 - 2015-10-15 10:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2017-08-19 10:32 - 2015-09-21 22:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\tiptoi® Manager
2017-08-19 10:32 - 2015-07-06 22:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-08-19 10:32 - 2015-04-09 12:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KakaoTalk
2017-08-19 10:32 - 2015-03-17 23:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2017-08-19 10:32 - 2015-01-13 18:28 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\tiptoi® Manager
2017-08-19 10:32 - 2015-01-01 16:42 - 000000000 ____D C:\WINDOWS\system32\vbox
2017-08-19 10:32 - 2014-10-13 19:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FOTOParadies
2017-08-19 10:32 - 2012-12-16 11:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2017-08-19 10:32 - 2012-08-13 18:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2017-08-19 10:32 - 2012-08-13 16:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2017-08-19 10:32 - 2012-05-28 17:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AcerSystem
2017-08-19 10:32 - 2012-05-28 17:27 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2017-08-19 10:32 - 2012-05-10 09:37 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2017-08-19 10:32 - 2012-05-10 09:37 - 000000000 ____D C:\WINDOWS\ca
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\tr
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\th
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\sv
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\sl
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\sk
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\ru
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\ro
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\pl
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\no
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\nl
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\it
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\hu
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\hr
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\he
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\fr
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\fi
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\es
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\en
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\el
2017-08-19 10:32 - 2012-05-10 09:34 - 000000000 ____D C:\WINDOWS\de
2017-08-19 10:32 - 2012-05-10 09:34 - 000000000 ____D C:\WINDOWS\da
2017-08-19 10:32 - 2012-05-10 09:34 - 000000000 ____D C:\WINDOWS\cs
2017-08-19 10:32 - 2012-05-10 09:34 - 000000000 ____D C:\WINDOWS\bg
2017-08-19 10:32 - 2012-05-10 09:34 - 000000000 ____D C:\WINDOWS\ar
2017-08-19 10:32 - 2012-05-10 09:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-08-19 10:32 - 2012-05-10 09:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2017-08-19 10:30 - 2017-03-18 20:23 - 000000000 ____D C:\ProgramData\USOPrivate
2017-08-19 10:30 - 2017-03-18 20:23 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-08-19 10:26 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\spool
2017-08-19 10:26 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-08-19 10:26 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-08-19 10:26 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-08-19 10:26 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\IME
2017-08-19 10:26 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\schemas
2017-08-19 10:26 - 2015-09-08 18:39 - 000000000 ___HD C:\WINDOWS\system32\CanonIJ Uninstaller Information
2017-08-19 10:25 - 2017-03-18 20:23 - 000000000 __SHD C:\Program Files\Windows Sidebar
2017-08-19 10:25 - 2017-03-18 20:23 - 000000000 ____D C:\Program Files\Common Files\System
2017-08-19 10:25 - 2017-03-18 20:23 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-08-19 10:25 - 2017-03-17 13:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-08-19 10:25 - 2012-05-10 09:18 - 000000000 ____D C:\Program Files\Intel
2017-08-19 10:25 - 2009-07-14 06:52 - 000000000 ____D C:\Program Files\Microsoft Games
2017-08-19 10:24 - 2016-03-17 14:32 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Oetinger
2017-08-19 10:24 - 2015-05-15 22:39 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2017-08-19 10:21 - 2017-03-18 08:02 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2017-08-15 18:04 - 2013-08-14 10:02 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-08-15 18:00 - 2012-08-13 16:02 - 137505280 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-08-15 17:50 - 2017-07-26 22:49 - 000001040 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-08-15 17:01 - 2015-08-13 18:31 - 000000000 ____D C:\Program Files\Common Files\AV
2017-08-15 17:01 - 2012-08-13 16:08 - 000000000 ____D C:\ProgramData\AVAST Software
2017-08-11 22:32 - 2016-04-10 17:00 - 000000000 ____D C:\Program Files\Fotor

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2017-04-02 17:09 - 2017-04-02 17:09 - 000003293 _____ () C:\Users\User\AppData\Local\recently-used.xbel
2012-11-23 22:33 - 2012-11-23 22:35 - 000007602 _____ () C:\Users\User\AppData\Local\resmon.resmoncfg

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-09-03 13:22

==================== Ende vom FRST.txt ============================
         

Addition:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version: 20-08-2017
durchgeführt von User (07-09-2017 11:38:16)
Gestartet von D:\Users\User\Downloads
Microsoft Windows 10 Home Version 1703 (X86) (2017-08-19 08:50:02)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-402077633-641172795-4098644512-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-402077633-641172795-4098644512-503 - Limited - Disabled)
Gast (S-1-5-21-402077633-641172795-4098644512-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-402077633-641172795-4098644512-1002 - Limited - Enabled)
User (S-1-5-21-402077633-641172795-4098644512-1000 - Administrator - Enabled) => C:\Users\User

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Spybot - Search and Destroy (Disabled - Out of date) {A16C3F68-9280-E053-1818-342707FECF4D}
AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 16.04 (HKLM\...\{23170F69-40C1-2701-1604-000001000000}) (Version: 16.04.00.0 - Igor Pavlov)
7-Zip 9.22beta (HKLM\...\7-Zip) (Version:  - )
Acer eRecovery Management (HKLM\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3505 - Acer Incorporated)
Acer Framework (HKLM\...\{8F1B6239-FEA0-450A-A950-B05276CE177C}) (Version: 3.00.5500 - Acer Incorporated)
Acer Updater (HKLM\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3504 - Acer Incorporated)
Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 26.0.0.127 - Adobe Systems Incorporated)
Adobe Flash Player 26 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Amazon Kindle (HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\Amazon Kindle) (Version: 1.15.0.43061 - Amazon)
Amazon Kindle (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425\...\Amazon Kindle) (Version: 1.15.0.43061 - Amazon)
Amazon Kindle (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697\...\Amazon Kindle) (Version: 1.15.0.43061 - Amazon)
Amazon Kindle (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184\...\Amazon Kindle) (Version: 1.15.0.43061 - Amazon)
Amazon Kindle (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309\...\Amazon Kindle) (Version: 1.15.0.43061 - Amazon)
Amazon Kindle (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715\...\Amazon Kindle) (Version: 1.15.0.43061 - Amazon)
Amazon Kindle (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305\...\Amazon Kindle) (Version: 1.15.0.43061 - Amazon)
Apple Application Support (32-Bit) (HKLM\...\{D2FE6376-E549-4F63-A2C5-CA24DA035DE4}) (Version: 5.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2A2C8640-5402-428A-909A-0236CB2B77C7}) (Version: 10.3.2.3 - Apple Inc.)
Apple Software Update (HKLM\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
Avira (HKLM\...\{4771539a-931b-4378-8d4a-721ba62effca}) (Version: 1.2.95.14694 - Avira Operations GmbH & Co. KG)
Avira (HKLM\...\{C22F76F2-AC9E-44BA-B297-71485F94022F}) (Version: 1.2.95.14694 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.30.29 - Avira Operations GmbH & Co. KG)
Avira Phantom VPN (HKLM\...\Avira Phantom VPN) (Version: 2.9.1.24376 - Avira Operations GmbH & Co. KG)
Avira Safe Shopping (HKLM\...\{DF7F23E4-169C-4591-B7EB-3F14587223A8}) (Version: 1.0.27.1161 - Avira Operations Gmbh & Co. KG)
Avira Software Updater (HKLM\...\{7A2E39A1-265C-4BF8-BE49-DE3248B9792A}) (Version: 2.0.3.40092 - Avira Operations GmbH & Co. KG)
Avira System Speedup (HKLM\...\Avira System Speedup_is1) (Version: 4.0.1.5814 - Avira Operations GmbH & Co. KG)
Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.)
Brother MFL-Pro Suite MFC-J5320DW (HKLM\...\{7FC49664-DAA4-4E7C-ADD0-614ABB43691B}) (Version: 1.0.5.0 - Brother Industries, Ltd.)
Canon MX880 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX880_series) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 5.33 - Piriform)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.7.6229 - CDBurnerXP)
chip 1-click download service (HKLM\...\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}) (Version: 3.6.9.0 - Chip Digital GmbH)
ClamWin Free Antivirus 0.99.1 (HKLM\...\ClamWin Free Antivirus_is1) (Version:  - alch)
D3DX10 (HKLM\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKLM\...\Dropbox) (Version: 33.4.23 - Dropbox, Inc.)
Dropbox Update Helper (HKLM\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.65.1 - Dropbox, Inc.) Hidden
Fotobuchexpress24 Bestellsoftware (HKLM\...\{7F13998B-A009-9901-3D6E-B1F524006F3F}) (Version: 3.2.43 - Saal Digital Fotoservice GmbH) Hidden
Fotobuchexpress24 Bestellsoftware (HKLM\...\Fotobuchexpress24) (Version: 3.2.43 - Saal Digital Fotoservice GmbH)
Fotogalerija Windows Live (HKLM\...\{E59969EA-3B5B-4B24-8B94-43842A7FBFE9}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
FOTOParadies (HKLM\...\{FD838798-E2CB-45FA-AF79-6011519031E2}}_is1) (Version: 3.5.9.0 - Foto Online Service GmbH)
Free YouTube Download (HKLM\...\Free YouTube Download_is1) (Version: 4.1.6.328 - DVDVideoSoft Ltd.)
Galeria de Fotografias do Windows Live (HKLM\...\{0EC0B576-90F9-43C3-8FAD-A4902DF4B8F4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (HKLM\...\{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (HKLM\...\{4736B0ED-F6A1-48EC-A1B7-C053027648F1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (HKLM\...\{CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (HKLM\...\{488F0347-C4A7-4374-91A7-30818BEDA710}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (HKLM\...\{CB66242D-12B1-4494-82D2-6F53A7E024A3}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Gameforge Live 2.0.12 (HKLM\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.12 - Gameforge)
GIMP 2.8.0 (HKLM\...\GIMP-2_is1) (Version: 2.8.0 - The GIMP Team)
Google Chrome (HKLM\...\Google Chrome) (Version: 60.0.3112.113 - Google Inc.)
Google Photos Backup (HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\Google Photos Backup) (Version: 1.1.2.13 - Google, Inc.)
Google Photos Backup (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425\...\Google Photos Backup) (Version: 1.1.2.13 - Google, Inc.)
Google Photos Backup (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697\...\Google Photos Backup) (Version: 1.1.2.13 - Google, Inc.)
Google Photos Backup (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184\...\Google Photos Backup) (Version: 1.1.2.13 - Google, Inc.)
Google Photos Backup (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309\...\Google Photos Backup) (Version: 1.1.2.13 - Google, Inc.)
Google Photos Backup (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715\...\Google Photos Backup) (Version: 1.1.2.13 - Google, Inc.)
Google Photos Backup (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305\...\Google Photos Backup) (Version: 1.1.2.13 - Google, Inc.)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Google Update Helper (HKLM\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.169 - Google Inc.) Hidden
iCloud (HKLM\...\{AFA154E8-2D57-4789-AB2D-9761E6AC5988}) (Version: 6.2.3.17 - Apple Inc.)
Intel(R) Control Center (HKLM\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2418 - Intel Corporation)
iTunes (HKLM\...\{BE5DD9B6-9DF7-4163-A39E-E2141C7A7488}) (Version: 12.6.2.20 - Apple Inc.)
Java 8 Update 101 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Java 8 Update 121 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
Java 8 Update 141 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180141F0}) (Version: 8.0.1410.15 - Oracle Corporation)
JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (HKLM\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
KakaoTalk (HKLM\...\KakaoTalk) (Version: 2.6.0.1591 - Daum Kakao Corp)
LEGO Digital Designer (HKLM\...\New LEGO Digital Designer) (Version:  - LEGO A/S)
Malwarebytes Version 3.2.2.2018 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2018 - Malwarebytes)
Mesh Runtime (HKLM\...\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Mozilla Firefox 55.0.3 (x86 de) (HKLM\...\Mozilla Firefox 55.0.3 (x86 de)) (Version: 55.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 55.0.3.6445 - Mozilla)
Mozilla Thunderbird 52.2.1 (x86 de) (HKLM\...\Mozilla Thunderbird 52.2.1 (x86 de)) (Version: 52.2.1 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MuseScore 2 (HKLM\...\{4F0E15EA-F64C-11E5-9992-E717EA7DB0C8}) (Version: 2.0.3 - Werner Schweer and Others)
NETGEAR WNA1000M Wireless USB 2.0 Adapter (HKLM\...\{DA4CCF2D-87DC-42AA-9BF4-5F4884B7A27B}) (Version: 1.01.10 - NETGEAR) Hidden
Nostale(DE) (HKLM\...\NosTale(DE)_is1) (Version:  - Gameforge 4D GmbH)
Nuance PaperPort 12 (HKLM\...\{2A770862-7142-4C77-8117-F933E4110A3F}) (Version: 12.1.0006 - Nuance Communications, Inc.)
Olchi-Kalender (HKLM\...\Olchi-Kalender) (Version:  - )
PaperPort Image Printer (HKLM\...\{6EF2FDAB-7FBF-4AB9-92CD-594BDDB6A56B}) (Version: 14.00.0000 - Nuance Communications, Inc.)
Poczta usługi Windows Live (HKLM\...\{64376910-1860-4CEF-8B34-AA5D205FC5F1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (HKLM\...\{7A9D47BA-6D50-4087-866F-0800D8B89383}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pošta Windows Live (HKLM\...\{7BA19818-F717-4DFB-BC11-FAF17B2B8AEE}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
QuickTime 7 (HKLM\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Raccolta foto di Windows Live (HKLM\...\{ED16B700-D91F-44B0-867C-7EB5253CA38D}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.37.1229.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6287 - Realtek Semiconductor Corp.)
Sandboxie 5.20 (32-bit) (HKLM\...\Sandboxie) (Version: 5.20 - Sandboxie Holdings, LLC)
Skype™ 7.39 (HKLM\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.39.102 - Skype Technologies S.A.)
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.5.43 - Safer-Networking Ltd.)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
tiptoi® Manager 3.1.6 (HKLM\...\9978-5763-2995-5228) (Version: 3.1.6 - Ravensburger AG)
Trojan Remover (HKLM\...\Trojan Remover_is1) (Version: 6.9.5 - Simply Super Software)
Unity Web Player (HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Welcome Center (HKLM\...\Acer Welcome Center) (Version: 1.02.3504 - Acer Incorporated)
Windows 10 Update and Privacy Settings (HKLM\...\{542CC2C2-ABAF-4604-8723-DA296AF74540}) (Version: 1.0.14.0 - Microsoft Corporation)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Συλλογή φωτογραφιών του Windows Live (HKLM\...\{C00C2A91-6CB3-483F-80B3-2958E29468F1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (HKLM\...\{E83DC314-C926-4214-AD58-147691D6FE9F}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (HKLM\...\{B63F0CE3-CCD0-490A-9A9C-E1A3B3A17137}) (Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (HKLM\...\{77F69CA1-E53D-4D77-8BA3-FA07606CC851}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (HKLM\...\{4444F27C-B1A8-464E-9486-4C37BAB39A09}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (HKLM\...\{CE929F09-3853-4180-BD90-30764BFF7136}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (HKLM\...\{0A4C4B29-5A9D-4910-A13C-B920D5758744}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (HKLM\...\{FBCA06D2-4642-4F33-B20A-A7AB3F0D2E69}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{144DF3B2-2402-47AE-9583-5A045929A8D4}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\psuser.dll (Google Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-08-22] (Dropbox, Inc.)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers1: [ClamWin] -> {65713842-C410-4f44-8383-BFE01A398C90} => C:\Program Files\ClamWin\bin\ExpShell.dll [2008-04-19] ()
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-08-22] (Dropbox, Inc.)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams.dll [2017-07-14] (Apple Inc.)
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files\Spybot - Search & Destroy 2\SDECon32.dll [2015-06-16] (Safer-Networking Ltd.)
ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files\Avira\Antivirus\shlext.dll [2017-08-17] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers1: [SystemSpeedupFilesMenu] -> {ef263503-8f0e-3e6a-ae2e-fe0b4b441d52} => C:\WINDOWS\system32\mscoree.dll [2017-03-18] (Microsoft Corporation)
ContextMenuHandlers1: [Trojan Remover] -> {52B87208-9CCF-42C9-B88E-069281105805} => C:\Program Files\Trojan Remover\Trshlex.dll [2016-12-15] (Simply Super Software)
ContextMenuHandlers1: [Winsome File Renamer] -> {413B25A4-3A7B-4A1D-887A-4DFC3856D7F7} =>  -> Keine Datei
ContextMenuHandlers2: [Trojan Remover] -> {52B87208-9CCF-42C9-B88E-069281105805} => C:\Program Files\Trojan Remover\Trshlex.dll [2016-12-15] (Simply Super Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-21] (Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-08-22] (Dropbox, Inc.)
ContextMenuHandlers4: [SystemSpeedupFoldersMenu] -> {3d52b24d-33bb-3895-99ea-a0156f24a3f9} => C:\WINDOWS\system32\mscoree.dll [2017-03-18] (Microsoft Corporation)
ContextMenuHandlers4: [Winsome File Renamer] -> {413B25A4-3A7B-4A1D-887A-4DFC3856D7F7} =>  -> Keine Datei
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-08-22] (Dropbox, Inc.)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} =>  -> Keine Datei
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll [2017-03-10] (Intel Corporation)
ContextMenuHandlers5: [SystemSpeedupDesktopMenu] -> {cefaf456-bc17-3f4b-b7d9-75070925911b} => C:\WINDOWS\system32\mscoree.dll [2017-03-18] (Microsoft Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers6: [ClamWin] -> {65713842-C410-4f44-8383-BFE01A398C90} => C:\Program Files\ClamWin\bin\ExpShell.dll [2008-04-19] ()
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-21] (Malwarebytes)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files\Spybot - Search & Destroy 2\SDECon32.dll [2015-06-16] (Safer-Networking Ltd.)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files\Avira\Antivirus\shlext.dll [2017-08-17] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers6: [Trojan Remover] -> {52B87208-9CCF-42C9-B88E-069281105805} => C:\Program Files\Trojan Remover\Trshlex.dll [2016-12-15] (Simply Super Software)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {00044590-D022-4E98-B180-41BC67F08D8E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {00834DBB-69C5-49DE-9713-BF641CFE8157} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {0463E7DD-AEE4-42FA-A6EE-4E153525B88C} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {0D7D49F9-8628-4A1E-B1A2-BA3D220B8544} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {14B0EB7A-6A8C-4468-889B-5E3F4351C287} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-08-03] (Piriform Ltd)
Task: {151D0E78-BA2F-49C7-BF28-7E337F64A677} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {15D09901-DC9A-4589-BA9B-03E0C0DFF5F1} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {169005ED-1580-4D32-AEC0-EF12801CC7D8} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {19ABF37F-1CAA-4A9C-A5D2-61E5A8F83C62} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {19EDF2AE-0CE4-4CAE-A7F2-AE393F890055} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1B07EF3C-D013-4658-973F-6FB98114D5DD} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {1F6946B0-2324-4D9E-8329-EBD03C075E7F} - System32\Tasks\Avira\System Speedup\TestScheduler => C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [2017-08-17] (Avira Operations GmbH & Co. KG)
Task: {1F8A2A34-5561-4455-BF1F-BF73101344DD} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {20F5A7DE-5D65-4722-984E-5742C1155B73} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {260FF0EA-9076-4D41-9894-C00EFD6112A1} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-402077633-641172795-4098644512-1000Core => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2016-08-07] (Google Inc.)
Task: {296CB533-8B10-4184-974D-1156612DCCA6} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2017-02-14] (Apple Inc.)
Task: {3D018940-1512-4E02-98D4-67C3E71E784C} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {4219E7BB-7362-46EF-BCA4-4B1D68683D99} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {4C825353-2EC8-4FD2-BE72-89D334CFF51C} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {4E43569A-83CC-4E25-83D0-3DF155E09FCC} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {4FAB5092-9657-4C2B-A35E-48971DF65448} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-08-08] (Adobe Systems Incorporated)
Task: {512EF876-E342-48A3-8D27-7D1A70CE9CED} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5268131F-CE12-451D-811C-5911CC16D175} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-12-25] (Google Inc.)
Task: {58B83091-D3B4-48C8-ACFD-04CC7322B1F9} - System32\Tasks\AviraSystemSpeedupUpdate => C:\ProgramData\Avira\SystemSpeedup\Update\avira_speedup_setup_update.exe [2017-09-04] (Avira Operations GmbH & Co. KG )
Task: {6AECD5E7-A35A-42D7-9034-4A229C6241F7} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6CEA031E-2F3F-4D12-9B0D-65F9B6AEF609} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {6EA55929-7243-42CD-9AA0-CA18702EFFE8} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {7A57501C-3D84-4E9F-80F2-A884700A5CFC} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {7BF93DFA-4AB5-4827-A94F-9804A7A4FFF2} - System32\Tasks\{08D695C1-AA1B-40BD-BADF-CF782FD3F3C7} => C:\Windows\system32\pcalua.exe -a "C:\program files\ncsoft\launcher\NCLauncher.exe" -c /Uninstall=Aion
Task: {7C58F0E5-5543-4A0F-8D36-4A6108BE880E} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {8929DFA0-82E3-4408-A839-82350C799D8C} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {92CCE050-45BF-492D-BBE2-A54769A757DF} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2017-08-15] (Microsoft Corporation)
Task: {93F4C38B-BF53-4200-A6DE-CAA61AE94F44} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-402077633-641172795-4098644512-1000UA => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2016-08-07] (Google Inc.)
Task: {99092D9C-052A-4E53-8DB8-0B69137234EA} - System32\Tasks\Avira Safe Shopping Updater => C:\Program Files\Avira\Safe Shopping\\Updater\Updater.exe [2017-08-22] (Avira Operations Gmbh & Co. KG)
Task: {99AC8C97-1DC8-4290-8CF3-4ECB5B31BE99} - System32\Tasks\SafeZone scheduled Autoupdate 1458767861 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe
Task: {9B116486-421B-4D5B-8D21-9BF559481122} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {A00118DA-18BE-4961-8CD7-B6C079838BC6} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {A1C25504-AADE-4D91-813A-559B345EAAB7} - System32\Tasks\{3EAE2372-67CE-458E-9F90-3D35C5BB237E} => C:\Program Files\NosTale(DE)\nostale.exe
Task: {A46EED9A-FAC6-41E3-958F-727ED136818A} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A49C3711-F5B5-40D1-AE02-EEC61C6F3373} - System32\Tasks\Avira\System Speedup\SpeedupSysTray => C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe [2017-08-17] (Avira Operations GmbH & Co. KG)
Task: {ABC8566D-64A9-4A94-A542-4160F48A1383} - System32\Tasks\{34B66F9B-0277-42BC-8B48-C2D343AD5EF3} => C:\Program Files\NosTale(DE)\nostale.exe
Task: {AE591A9F-5B75-4F5C-9269-5879351CA073} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B649E17E-07B4-4A53-801E-DE0226923A7D} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {B77749BF-7E94-4C02-B339-C44FE0B71112} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
Task: {BBC5F601-0A47-424F-9DA1-5FFD04BFCFCE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-12-25] (Google Inc.)
Task: {C2C0DE01-1447-44D9-BCAD-A4A5A493FA97} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {C3558129-F667-4091-AA81-578FF63C35E6} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {D20D8C78-E175-4A30-B452-B1640FDF0ECC} - System32\Tasks\UALU notificatin => C:\Program Files\Acer\Acer Updater\UALU.exe [2016-06-08] (Acer Incorporated)
Task: {D3ABEF2F-9233-40AA-A3A4-5E33DB84BCAE} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {D52A1756-C56E-4063-A553-F79EB0C5EEB9} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe [2015-06-16] (Safer-Networking Ltd.)
Task: {D7B30254-7AE1-4406-9252-C3F4B1EC47AF} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {D8A74BDD-D64D-423E-8524-37EF6C2130D0} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E5EAE87D-2B2C-4708-B82A-D68D8938B6AD} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files\Dropbox\Update\DropboxUpdate.exe [2017-05-12] (Dropbox, Inc.)
Task: {EA498E2C-9A2F-4BA5-B177-806F3225113C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F37DAB72-51C2-4398-90B1-920AE35F7A01} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files\Dropbox\Update\DropboxUpdate.exe [2017-05-12] (Dropbox, Inc.)
Task: {F5677722-DCDD-4AC3-8C06-45F81DEB62E0} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FC12E9A5-E9D4-4961-8DE2-59EEBD0705D2} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FC2B1D8D-82E8-479C-AA3A-48A14C48E6B7} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {FD732597-7D7F-44CD-A89F-D62A6D329DDE} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files\Dropbox\Update\DropboxUpdate.exe

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-01-06 18:43 - 2009-02-27 17:38 - 000139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2016-09-01 18:13 - 2016-09-01 18:13 - 000080184 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-07-13 20:51 - 2017-07-13 20:51 - 001041720 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-04-23 14:39 - 2016-03-29 00:06 - 000110952 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\zlib1.dll
2016-04-23 14:39 - 2016-03-29 00:06 - 000253800 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\collector.dll
2016-04-23 14:39 - 2016-03-29 00:06 - 000295272 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\stat.dll
2016-04-23 14:39 - 2016-03-29 00:06 - 000104296 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll
2016-04-23 14:39 - 2016-03-29 00:06 - 000020328 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll
2016-04-23 14:39 - 2016-03-29 00:06 - 000044392 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll
2017-03-18 20:19 - 2017-03-18 20:19 - 000116824 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-03-18 20:19 - 2017-03-19 10:58 - 001456128 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-08-23 17:53 - 2017-08-23 17:54 - 000064512 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x86__kzf8qxf38zg5c\SkypeHost.exe
2017-08-23 17:53 - 2017-08-23 17:54 - 000171008 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x86__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-08-23 17:53 - 2017-08-23 17:54 - 027734016 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x86__kzf8qxf38zg5c\SkyWrap.dll
2017-08-23 17:53 - 2017-08-23 17:54 - 001660928 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x86__kzf8qxf38zg5c\skypert.dll
2017-03-10 02:27 - 2017-03-10 02:27 - 000112264 _____ () C:\Windows\System32\IccLibDll.dll
2015-10-15 10:20 - 2014-05-13 12:04 - 000109400 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2015-10-15 10:20 - 2014-05-13 12:04 - 000167768 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2015-10-15 10:20 - 2014-05-13 13:04 - 000416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2017-08-23 21:34 - 2017-08-22 18:55 - 000757568 _____ () C:\Program Files\Dropbox\Client\dropbox_watchdog.dll
2017-08-23 21:34 - 2017-08-22 18:55 - 001787200 _____ () C:\Program Files\Dropbox\Client\dropbox_crashpad.dll
2017-08-11 13:30 - 2017-08-22 18:53 - 000100296 _____ () C:\Program Files\Dropbox\Client\_ctypes.pyd
2017-08-11 13:30 - 2017-08-22 18:53 - 000018888 _____ () C:\Program Files\Dropbox\Client\select.pyd
2017-08-11 13:30 - 2017-08-22 18:57 - 000020800 _____ () C:\Program Files\Dropbox\Client\tornado.speedups.pyd
2017-08-11 13:30 - 2017-08-22 18:53 - 000035792 _____ () C:\Program Files\Dropbox\Client\_multiprocessing.pyd
2017-08-23 21:34 - 2017-08-22 18:56 - 000021848 _____ () C:\Program Files\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2017-08-11 13:30 - 2017-08-22 18:53 - 000125904 _____ () C:\Program Files\Dropbox\Client\_cffi_backend.pyd
2017-08-11 13:30 - 2017-08-22 18:53 - 000694224 _____ () C:\Program Files\Dropbox\Client\unicodedata.pyd
2017-08-23 21:34 - 2017-08-22 18:56 - 001862992 _____ () C:\Program Files\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2017-08-23 21:34 - 2017-08-22 18:56 - 000022864 _____ () C:\Program Files\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2017-08-23 21:34 - 2017-08-22 18:53 - 000145864 _____ () C:\Program Files\Dropbox\Client\pyexpat.pyd
2017-08-23 21:34 - 2017-08-22 18:55 - 000116688 _____ () C:\Program Files\Dropbox\Client\pywintypes27.dll
2017-08-11 13:30 - 2017-08-22 18:53 - 000105928 _____ () C:\Program Files\Dropbox\Client\win32api.pyd
2017-08-11 13:30 - 2017-08-22 18:57 - 000022864 _____ () C:\Program Files\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
2017-08-23 21:34 - 2017-08-22 18:57 - 000062784 _____ () C:\Program Files\Dropbox\Client\psutil._psutil_windows.pyd
2017-08-23 21:34 - 2017-08-22 18:57 - 000040248 _____ () C:\Program Files\Dropbox\Client\fastpath.pyd
2017-08-11 13:30 - 2017-08-22 18:53 - 000024528 _____ () C:\Program Files\Dropbox\Client\win32event.pyd
2017-08-23 21:34 - 2017-08-22 18:53 - 000020936 _____ () C:\Program Files\Dropbox\Client\mmapfile.pyd
2017-08-11 13:30 - 2017-08-22 18:53 - 000124880 _____ () C:\Program Files\Dropbox\Client\win32file.pyd
2017-08-11 13:30 - 2017-08-22 18:53 - 000116176 _____ () C:\Program Files\Dropbox\Client\win32security.pyd
2017-08-23 21:34 - 2017-08-22 18:55 - 000392656 _____ () C:\Program Files\Dropbox\Client\pythoncom27.dll
2017-08-11 13:30 - 2017-08-22 18:57 - 000392512 _____ () C:\Program Files\Dropbox\Client\win32com.shell.shell.pyd
2017-08-11 13:30 - 2017-08-22 18:57 - 000026456 _____ () C:\Program Files\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
2017-08-11 13:30 - 2017-08-22 18:53 - 000024016 _____ () C:\Program Files\Dropbox\Client\win32clipboard.pyd
2017-08-11 13:30 - 2017-08-22 18:53 - 000175560 _____ () C:\Program Files\Dropbox\Client\win32gui.pyd
2017-08-11 13:30 - 2017-08-22 18:53 - 000030160 _____ () C:\Program Files\Dropbox\Client\win32pipe.pyd
2017-08-11 13:30 - 2017-08-22 18:53 - 000043472 _____ () C:\Program Files\Dropbox\Client\win32process.pyd
2017-08-11 13:30 - 2017-08-22 18:53 - 000048592 _____ () C:\Program Files\Dropbox\Client\win32service.pyd
2017-08-11 13:30 - 2017-08-22 18:53 - 000057808 _____ () C:\Program Files\Dropbox\Client\win32evtlog.pyd
2017-08-23 21:34 - 2017-08-22 18:56 - 000022336 _____ () C:\Program Files\Dropbox\Client\cpuid.compiled._cpuid.pyd
2017-08-11 13:30 - 2017-08-22 18:57 - 000082264 _____ () C:\Program Files\Dropbox\Client\winenumhandles.compiled._WinEnumHandles.pyd
2017-08-11 13:30 - 2017-08-22 18:57 - 000025432 _____ () C:\Program Files\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2017-08-23 21:34 - 2017-08-22 18:57 - 003928896 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtWidgets.pyd
2017-08-11 13:30 - 2017-08-22 18:53 - 000083912 _____ () C:\Program Files\Dropbox\Client\sip.pyd
2017-08-23 21:34 - 2017-08-22 18:57 - 001826104 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtCore.pyd
2017-08-23 21:34 - 2017-08-22 18:57 - 001972024 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtGui.pyd
2017-08-11 13:30 - 2017-08-22 18:53 - 000028616 _____ () C:\Program Files\Dropbox\Client\win32ts.pyd
2017-08-11 13:30 - 2017-08-22 18:53 - 000024016 _____ () C:\Program Files\Dropbox\Client\win32profile.pyd
2017-08-23 21:34 - 2017-08-22 18:57 - 000171336 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2017-08-23 21:34 - 2017-08-22 18:57 - 000042816 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtWebChannel.pyd
2017-08-23 21:34 - 2017-08-22 18:57 - 000531264 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtNetwork.pyd
2017-08-23 21:34 - 2017-08-22 18:57 - 000133432 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtWebKit.pyd
2017-08-23 21:34 - 2017-08-22 18:57 - 000224064 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2017-08-23 21:34 - 2017-08-22 18:57 - 000207680 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2017-08-11 13:30 - 2017-08-22 18:53 - 000060880 _____ () C:\Program Files\Dropbox\Client\win32print.pyd
2017-08-11 13:30 - 2017-08-22 18:57 - 000054608 _____ () C:\Program Files\Dropbox\Client\winrpcserver.compiled._RPCServer.pyd
2017-08-11 13:30 - 2017-08-22 18:57 - 000022864 _____ () C:\Program Files\Dropbox\Client\winffi.user32.compiled._winffi_user32.pyd
2017-08-11 13:30 - 2017-08-22 18:57 - 000069968 _____ () C:\Program Files\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd
2017-08-11 13:30 - 2017-08-22 18:57 - 000022872 _____ () C:\Program Files\Dropbox\Client\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
2017-08-11 13:30 - 2017-08-22 18:57 - 000021848 _____ () C:\Program Files\Dropbox\Client\winffi.winerror.compiled._winffi_winerror.pyd
2017-08-11 13:30 - 2017-08-22 18:57 - 000022872 _____ () C:\Program Files\Dropbox\Client\winffi.wininet.compiled._winffi_wininet.pyd
2017-08-23 21:34 - 2017-08-22 18:56 - 000027488 _____ () C:\Program Files\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2017-08-11 13:30 - 2017-08-22 18:53 - 000349128 _____ () C:\Program Files\Dropbox\Client\winxpgui.pyd
2017-08-23 21:34 - 2017-08-22 18:57 - 000103232 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtWinExtras.pyd
2017-08-11 13:30 - 2017-08-22 18:58 - 000023896 _____ () C:\Program Files\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2017-08-23 21:34 - 2017-08-22 18:57 - 000025936 _____ () C:\Program Files\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2017-08-23 21:34 - 2017-08-22 18:55 - 000036296 _____ () C:\Program Files\Dropbox\Client\librsync.dll
2017-08-23 21:34 - 2017-08-22 18:57 - 000033112 _____ () C:\Program Files\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd
2017-08-23 21:34 - 2017-08-22 18:55 - 000293392 _____ () C:\Program Files\Dropbox\Client\EnterpriseDataAdapter.dll
2017-08-23 21:34 - 2017-08-22 18:56 - 000181056 _____ () C:\Program Files\Dropbox\Client\dropbox_sqlite_ext.DLL
2017-08-11 13:30 - 2017-08-22 18:57 - 000030536 _____ () C:\Program Files\Dropbox\Client\wind3d11.compiled._wind3d11.pyd
2017-08-23 21:34 - 2017-08-22 18:57 - 000024368 _____ () C:\Program Files\Dropbox\Client\libEGL.dll
2017-08-23 21:34 - 2017-08-22 18:57 - 001637688 _____ () C:\Program Files\Dropbox\Client\libGLESv2.dll
2017-08-11 13:30 - 2017-08-22 18:57 - 000026456 _____ () C:\Program Files\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd
2017-08-11 13:30 - 2017-08-22 18:57 - 000023368 _____ () C:\Program Files\Dropbox\Client\wincrashpad.compiled._Crashpad.pyd
2017-08-23 21:34 - 2017-08-22 18:57 - 000546104 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtQuick.pyd
2017-08-23 21:34 - 2017-08-22 18:57 - 000357688 _____ () C:\Program Files\Dropbox\Client\PyQt5.QtQml.pyd
2017-08-11 13:30 - 2017-08-22 18:55 - 000697304 _____ () C:\Program Files\Dropbox\Client\QtQuick\Controls\qtquickcontrolsplugin.dll
2017-07-14 10:28 - 2017-07-14 10:28 - 000080184 _____ () C:\Program Files\iTunes\zlib1.dll
2017-07-14 10:28 - 2017-07-14 10:28 - 001041720 _____ () C:\Program Files\iTunes\libxml2.dll
2017-07-26 22:09 - 2005-02-08 17:23 - 000979005 _____ () C:\Program Files\ClamWin\bin\python23.dll
2017-07-26 22:09 - 2004-11-20 03:27 - 000069632 _____ () C:\Program Files\ClamWin\lib\win32api.pyd
2017-07-26 22:09 - 2004-10-11 20:21 - 000094208 _____ () C:\Program Files\ClamWin\lib\pywintypes23.dll
2017-07-26 22:09 - 2004-05-25 21:18 - 000057401 _____ () C:\Program Files\ClamWin\lib\_sre.pyd
2017-07-26 22:09 - 2004-11-20 03:27 - 000086016 _____ () C:\Program Files\ClamWin\lib\win32gui.pyd
2017-07-26 22:09 - 2004-11-20 03:27 - 000024576 _____ () C:\Program Files\ClamWin\lib\win32event.pyd
2017-07-26 22:09 - 2004-11-20 03:27 - 000036864 _____ () C:\Program Files\ClamWin\lib\win32process.pyd
2017-07-26 22:09 - 2004-05-25 21:18 - 000049212 _____ () C:\Program Files\ClamWin\lib\_socket.pyd
2017-07-26 22:09 - 2004-05-25 21:18 - 000495616 _____ () C:\Program Files\ClamWin\lib\_ssl.pyd
2017-07-26 22:09 - 2004-05-25 21:20 - 000036864 _____ () C:\Program Files\ClamWin\lib\_winreg.pyd
2017-07-26 22:09 - 2004-10-11 20:22 - 000315392 _____ () C:\Program Files\ClamWin\lib\pythoncom23.dll
2017-07-26 22:09 - 2004-11-20 03:27 - 000106496 _____ () C:\Program Files\ClamWin\lib\shell.pyd
2017-07-26 22:09 - 2004-11-20 03:27 - 000065536 _____ () C:\Program Files\ClamWin\lib\win32security.pyd
2017-07-26 22:09 - 2004-01-15 14:45 - 000061440 _____ () C:\Program Files\ClamWin\lib\_ctypes.pyd
2017-07-26 22:09 - 2004-11-20 03:27 - 000077824 _____ () C:\Program Files\ClamWin\lib\win32file.pyd
2017-07-26 22:09 - 2004-11-20 03:27 - 000024576 _____ () C:\Program Files\ClamWin\lib\win32pipe.pyd
2017-07-26 22:09 - 2003-10-01 13:40 - 002240512 _____ () C:\Program Files\ClamWin\lib\wxc.pyd
2017-07-26 22:09 - 2003-10-01 11:43 - 003239936 _____ () C:\Program Files\ClamWin\lib\wxmsw24h.dll
2017-07-26 22:09 - 2003-08-10 09:14 - 000061440 _____ () C:\Program Files\ClamWin\lib\mxDateTime.pyd
2017-07-26 22:09 - 2004-05-25 21:17 - 000622651 _____ () C:\Program Files\ClamWin\lib\_bsddb.pyd
2017-07-26 22:09 - 2004-05-25 21:19 - 000045117 _____ () C:\Program Files\ClamWin\lib\datetime.pyd
2017-07-13 20:50 - 2017-07-13 20:50 - 000189752 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxslt.dll
2016-04-09 00:35 - 2016-04-09 00:35 - 003481600 _____ () C:\Users\User\AppData\Local\Programs\Google\Google Photos Backup\gpuploader_i18n.dll
2017-08-03 10:41 - 2017-08-03 10:41 - 000069632 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2017-06-02 12:21 - 2017-06-02 12:24 - 002578344 ____N () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11707.1001.23.0_x86__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-08-28 10:56 - 2017-08-28 10:57 - 006526464 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11707.1001.23.0_x86__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2017-08-28 10:56 - 2017-08-28 10:57 - 001661440 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11707.1001.23.0_x86__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll
2017-07-26 22:09 - 2003-10-01 13:40 - 000286720 _____ () C:\Program Files\ClamWin\lib\gizmosc.pyd
2017-07-26 22:09 - 2003-10-01 13:40 - 000196608 _____ () C:\Program Files\ClamWin\lib\htmlc.pyd
2017-07-26 22:09 - 2016-03-19 23:31 - 000017408 _____ () C:\Program Files\ClamWin\bin\pyc.pyd
2017-07-26 22:09 - 2016-03-19 23:19 - 003284992 _____ () C:\Program Files\ClamWin\bin\libclamav.dll
2017-07-26 22:09 - 2016-03-19 23:30 - 004497408 _____ () C:\Program Files\ClamWin\bin\libclamav_llvm.dll
2017-07-26 22:09 - 2016-03-19 23:19 - 000026112 _____ () C:\Program Files\ClamWin\bin\libclamunrar_iface.dll
2017-07-26 22:09 - 2016-03-19 23:16 - 000065536 _____ () C:\Program Files\ClamWin\bin\libclamunrar.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:CB0AACC9 [140]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:04 - 2017-08-11 13:58 - 000000848 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230837915\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230854422\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232356952\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453083\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357312\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111518582\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838159\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230856459\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357051\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453189\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357515\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111518969\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-21-402077633-641172795-4098644512-1000\Control Panel\Desktop\\Wallpaper -> D:\Users\User\Pictures\2017.07.04.-24. England\Retro Cam Sommer 2017\DSCF0385.JPG
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230838425\Control Panel\Desktop\\Wallpaper -> D:\Users\User\Pictures\2017.07.04.-24. England\Retro Cam Sommer 2017\DSCF0385.JPG
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230858697\Control Panel\Desktop\\Wallpaper -> D:\Users\User\Pictures\2017.07.04.-24. England\Retro Cam Sommer 2017\DSCF0385.JPG
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232357184\Control Panel\Desktop\\Wallpaper -> D:\Users\User\Pictures\2017.07.04.-24. England\Retro Cam Sommer 2017\DSCF0385.JPG
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017232453309\Control Panel\Desktop\\Wallpaper -> D:\Users\User\Pictures\2017.07.04.-24. England\Retro Cam Sommer 2017\DSCF0385.JPG
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111357715\Control Panel\Desktop\\Wallpaper -> D:\Users\User\Pictures\2017.07.04.-24. England\Retro Cam Sommer 2017\DSCF0385.JPG
HKU\S-1-5-21-402077633-641172795-4098644512-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09072017111519305\Control Panel\Desktop\\Wallpaper -> D:\Users\User\Pictures\2017.07.04.-24. England\Retro Cam Sommer 2017\DSCF0385.JPG
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-09062017232249614\Control Panel\Desktop\\Wallpaper -> 
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230841602\Control Panel\Desktop\\Wallpaper -> 
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-09062017230906617\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==


==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{894F9431-B09D-4C76-8CD6-5DAECE3719E6}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{30386A47-D059-49A2-B8D0-62FE36B01D07}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{7E50E7B5-4F65-4D18-9A25-B7D6CC06A265}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{2FD640AA-EBCD-49B1-AF10-97054E94477F}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [UDP Query User{7AE72AB3-3AD4-4208-B2D4-4EBC0D503C64}C:\program files\google\chrome\application\chrome.exe] => (Allow) C:\program files\google\chrome\application\chrome.exe
FirewallRules: [TCP Query User{154CA141-B98A-4A11-8D64-66D97C97CD4F}C:\program files\google\chrome\application\chrome.exe] => (Allow) C:\program files\google\chrome\application\chrome.exe
FirewallRules: [{3BCDA356-1956-43DD-967C-CE8ACB7C09AF}] => (Allow) C:\Program Files\Dropbox\Client\Dropbox.exe
FirewallRules: [{585E86AB-C2EC-40D1-A23C-90C16E8A300D}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Wiederherstellungspunkte =========================

19-08-2017 14:16:42 Windows Update
28-08-2017 11:42:03 Geplanter Prüfpunkt
05-09-2017 23:02:10 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/07/2017 11:26:14 AM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "c:\program files\spybot - search & destroy 2\SDTasks.dll". Fehler in Manifest- oder Richtliniendatei "c:\program files\spybot - search & destroy 2\SDTasks.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (09/07/2017 11:26:13 AM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "c:\program files\spybot - search & destroy 2\SDWinLogon.dll". Fehler in Manifest- oder Richtliniendatei "c:\program files\spybot - search & destroy 2\SDWinLogon.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (09/07/2017 11:26:13 AM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "c:\program files\spybot - search & destroy 2\SDResources.dll". Fehler in Manifest- oder Richtliniendatei "c:\program files\spybot - search & destroy 2\SDResources.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (09/07/2017 11:26:13 AM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "c:\program files\spybot - search & destroy 2\SDLicense.dll". Fehler in Manifest- oder Richtliniendatei "c:\program files\spybot - search & destroy 2\SDLicense.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (09/07/2017 11:26:13 AM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "c:\program files\spybot - search & destroy 2\SDFileScanHelper.exe". Fehler in Manifest- oder Richtliniendatei "c:\program files\spybot - search & destroy 2\SDFileScanHelper.exe" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (09/07/2017 11:26:13 AM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "c:\program files\spybot - search & destroy 2\NotificationSpreader.dll". Fehler in Manifest- oder Richtliniendatei "c:\program files\spybot - search & destroy 2\NotificationSpreader.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (09/07/2017 11:26:13 AM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "c:\program files\spybot - search & destroy 2\SDHookDrv32.sys". Fehler in Manifest- oder Richtliniendatei "c:\program files\spybot - search & destroy 2\SDHookDrv32.sys" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (09/07/2017 11:26:13 AM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "c:\program files\spybot - search & destroy 2\SDFileScanLibrary.dll". Fehler in Manifest- oder Richtliniendatei "c:\program files\spybot - search & destroy 2\SDFileScanLibrary.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (09/07/2017 11:26:13 AM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "c:\program files\spybot - search & destroy 2\SDLists.dll". Fehler in Manifest- oder Richtliniendatei "c:\program files\spybot - search & destroy 2\SDLists.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.

Error: (09/07/2017 11:26:13 AM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "c:\program files\spybot - search & destroy 2\SDImmunizeLibrary.dll". Fehler in Manifest- oder Richtliniendatei "c:\program files\spybot - search & destroy 2\SDImmunizeLibrary.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.


Systemfehler:
=============
Error: (09/07/2017 11:21:12 AM) (Source: Service Control Manager) (EventID: 7016) (User: )
Description: Der Dienst "chip 1-click download service" hat einen ungültigen aktuellen Status gemeldet: 0

Error: (09/07/2017 11:21:12 AM) (Source: Service Control Manager) (EventID: 7016) (User: )
Description: Der Dienst "chip 1-click download service" hat einen ungültigen aktuellen Status gemeldet: 0

Error: (09/07/2017 10:15:55 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (09/07/2017 08:17:29 AM) (Source: DCOM) (EventID: 10010) (User: User-PC)
Description: Der Server "Microsoft.Windows.Photos_2017.35071.13510.0_x86__8wekyb3d8bbwe!App.AppXy9rh3t8m2jfpvhhxp6y2ksgeq77vymbq.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (09/07/2017 01:58:24 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (09/06/2017 08:50:10 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (09/06/2017 12:55:42 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (09/05/2017 08:51:31 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (09/05/2017 01:31:52 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (09/04/2017 09:39:02 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4


CodeIntegrity:
===================================
  Date: 2017-09-07 11:39:23.251
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-07 11:39:23.239
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-07 11:37:28.059
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-07 11:37:28.056
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-07 11:37:22.784
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-07 11:37:22.740
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-07 11:35:22.218
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-07 11:35:22.215
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-07 11:33:21.774
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-07 11:33:21.771
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) CPU G860 @ 3.00GHz
Prozentuale Nutzung des RAM: 74%
Installierter physikalischer RAM: 3015 MB
Verfügbarer physikalischer RAM: 770.69 MB
Summe virtueller Speicher: 6087 MB
Verfügbarer virtueller Speicher: 2002.35 MB

==================== Laufwerke ================================

Drive c: (System) (Fixed) (Total:454.16 GB) (Free:365.5 GB) NTFS
Drive d: (Daten) (Fixed) (Total:445.76 GB) (Free:242.75 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive f: (RECOVER) (Fixed) (Total:19.99 GB) (Free:10.68 GB) FAT32
Drive h: () (Removable) (Total:1.86 GB) (Free:1.71 GB) FAT

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: A752C28A)
Partition 1: (Not Active) - (Size=11.5 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=454.2 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: CE74067F)
Partition 1: (Active) - (Size=445.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=20 GB) - (Type=OF Extended)

========================================================
Disk: 3 (Size: 1.9 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende vom Addition.txt ============================
         

Log ClamWin (nur betroffenen Ordner gescannt)

Scan Started Wed Sep 06 22:53:47 2017
-------------------------------------------------------------------------------


D:\Windows\System32\DriverStore\FileRepository\nvfd6032.inf_7f2e2fcf\nvunrm.exe: Win.Trojan.Virtob-1645 FOUND
----------- SCAN SUMMARY -----------
Known viruses: 6303476
Engine version: 0.99.1
Scanned directories: 735
Scanned files: 10127
Infected files: 1
Not copied: 1
Data scanned: 1540.71 MB
Data read: 1299.68 MB (ratio 1.19:1)
Time: 389.273 sec (6 m 29 s)
         

Clam AV ist leider der letzte Mist, so gut OpenSource in allen anderen Bereichen ist, bei AV kommt es mit keinem mit. Hat nur Fehlalarme und echte Schädling erkennt es nicht.


Bitte auch Avira deinstallieren. Wir deinstallieren dann am besten auch gleich weiteren unnötigen oder veralteten Krempel. Falls du unbedingt ein Programm aus der u.g. Liste braucht, dann lass es drauf gib aber kurz ne Info welches und warum.

Avira empfehlen wir schon seit Jahren aus mehreren Gründen nicht mehr. Ein Grund ist ne rel. hohe Fehlalarmquote, der zweite Hauptgrund ist, dass die immer noch mit ASK zusammenarbeiten (Avira Suchfunktion geht über ASK). Auch andere Freewareanbieter wie AVG, Avast oder Panda sprangen auf diesen Zug auf; so was ist bei Sicherheitssoftware einfach inakzeptabel. Vgl. Antivirensoftware: Schutz Für Ihre Dateien, Aber Auf Kosten Ihrer Privatsphäre? | Emsisoft Blog



Lade Dir bitte von hier Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

• Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
• Klicke auf Optionen und wähle als Sprache Deutsch.
• Suche im Uninstallerfeld nach den Programmen:
  
  
  7-Zip 9.22beta
  
  Adobe Acrobat Reader DC - Deutsch
  
  Adobe AIR
  
  Avira
  
  Avira AntiVirus
  
  Avira Phantom VPN
  
  Avira Safe Shopping
  
  Avira Software Updater
  
  Avira System Speedup
  
  chip 1-click download service
  
  ClamWin Free Antivirus 0.99.1
  
  Java 8 Update 101
  
  Java 8 Update 121
  
  Java 8 Update 141
  
  QuickTime 7
  
  Spybot - Search & Destroy
  
  
  
• Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
• Wähle anschließend den Modus "Moderat" aus.
  
• Reste löschen:
  Klicke auf dann auf und dann auf .

 

Gib Bescheid wenn Avira weg ist; wenn wir hier durch sind, kannst du auf einen anderen Virenscanner umsteigen, Infos folgen dann im Abschlussposting. Bitte JETZT nix mehr ohne Absprache installieren!

Hallo cosinus, danke schon mal für deine Hilfe.

Spybot, ClamWin und Chip 1 - click download tauchen in der Appliste nicht auf, weder bei Revo noch in der Windows App - Liste. Es gibt auch sonst keine sichtbare Uninstall-Funktion. Soll ich die entsprechenden Ordner manuell löschen (wobei dann ja vermutlich versteckte Restdateien übrig bleiben) oder gibt es noch eine andere Option sie umfassend zu deinstallieren?
Den Rest habe ich über Revo deinstalliert.

Ich brauche neue FRST-Logs . Haken setzen bei addition.txt dann auf Untersuchen klicken.

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version: 20-08-2017
durchgeführt von User (Administrator) auf USER-PC (09-09-2017 21:10:38)
Gestartet von D:\Users\User\Downloads
Geladene Profile: User (Verfügbare Profile: User & DefaultAppPool)
Platform: Microsoft Windows 10 Home Version 1703 (X86) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Digital Wave Ltd.) C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe
(Dropbox, Inc.) C:\Program Files\Dropbox\Update\DropboxUpdate.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x86__kzf8qxf38zg5c\SkypeHost.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11707.1001.23.0_x86__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [485280 2017-03-18] (Microsoft Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ACHTUNG
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2012-08-20]
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{7c690ca6-3c14-4161-ac14-f54aabc23763}: [DhcpNameServer] 192.168.2.1

Internet Explorer:
==================
HKU\S-1-5-21-402077633-641172795-4098644512-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-402077633-641172795-4098644512-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-402077633-641172795-4098644512-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: rx0fa5al.default-1502455535696
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rx0fa5al.default-1502455535696 [2017-09-09]
FF Homepage: Mozilla\Firefox\Profiles\rx0fa5al.default-1502455535696 -> hxxps://www.startpage.com/
FF Session Restore: Mozilla\Firefox\Profiles\rx0fa5al.default-1502455535696 -> ist aktiviert.
FF Extension: (Firefox Screenshots) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rx0fa5al.default-1502455535696\features\{ffbef703-6cd9-4a1b-89ec-d1775218419a}\screenshots@mozilla.org.xpi [2017-09-01]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-08] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-14] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-14] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000: @tools.google.com/Google Update;version=3 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000: @tools.google.com/Google Update;version=9 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-02-20] (Unity Technologies ApS)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2017-07-05]

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR DefaultSearchURL: Default -> hxxps://search.avira.com/#web/result?source=omnibar&q={searchTerms}
CHR DefaultSearchKeyword: Default -> Avira
CHR DefaultSuggestURL: Default -> hxxps://search.avira.com/suggestions?q={searchTerms}&li=ff&hl=de
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2017-09-08]
CHR Extension: (Google Präsentationen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-25]
CHR Extension: (Google Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-25]
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-25]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-25]
CHR Extension: (Avira Password Manager) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2017-09-07]
CHR Extension: (Avira Safe Shopping) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2017-09-08]
CHR Extension: (Google-Suche) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-25]
CHR Extension: (Google Tabellen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-25]
CHR Extension: (Avira Browserschutz) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2017-09-07]
CHR Extension: (Google Docs Offline) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-27]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Google Mail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-25]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-15]
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [ipmkfpcnmccejididiaagpgchgjfajgp] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [282112 2013-09-25] (Brother Industries, Ltd.) [Datei ist nicht signiert]
S3 cphs; C:\WINDOWS\system32\IntelCpHeciSvc.exe [300120 2017-03-10] (Intel Corporation)
S2 dbupdate; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-12] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-12] (Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [43336 2017-09-06] (Dropbox, Inc.)
R2 DigitalWave.Update.Service; C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe [388968 2016-03-29] (Digital Wave Ltd.)
R2 ETService; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [30080 2011-06-14] ()
R2 Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [257440 2016-06-08] (Acer Incorporated)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4430792 2017-08-21] (Malwarebytes)
R2 PDFProFiltSrvPP; C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe [145736 2013-08-15] (Nuance Communications, Inc.)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [154760 2017-06-05] (Sandboxie Holdings, LLC)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1750712 2015-06-16] (Safer-Networking Ltd.) [Datei ist nicht signiert]
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [4088608 2016-09-21] (Safer-Networking Ltd.) [Datei ist nicht signiert]
S2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [235984 2016-11-24] (Safer-Networking Ltd.) [Datei ist nicht signiert]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [265352 2017-03-18] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [82488 2017-07-11] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae.sys [59904 2017-08-24] ()
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [166848 2017-09-06] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\DRIVERS\farflt.sys [85440 2017-09-09] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [40352 2017-09-09] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [221632 2017-09-09] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [75712 2017-09-09] (Malwarebytes)
R3 MEI; C:\WINDOWS\System32\drivers\HECI.sys [41088 2010-10-19] (Intel Corporation)
R3 rt640x86; C:\WINDOWS\System32\drivers\rt640x86.sys [504832 2017-03-18] (Realtek )
R3 RtlWlanu_OldIC; C:\WINDOWS\System32\drivers\rtwlanu_oldIC.sys [3245056 2017-03-18] (Realtek Semiconductor Corporation )
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [179336 2017-06-05] (Sandboxie Holdings, LLC)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [37464 2017-03-18] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [243104 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [96672 2017-03-18] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-09-09 18:03 - 2017-09-09 18:03 - 000001266 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2017-09-09 18:03 - 2017-09-09 18:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-09-09 18:03 - 2017-09-09 18:03 - 000000000 ____D C:\Program Files\VS Revo Group
2017-09-09 12:05 - 2017-09-09 12:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-09-07 13:14 - 2017-09-07 13:18 - 000000000 ____D C:\AdwCleaner
2017-09-07 12:14 - 2017-09-09 19:31 - 000085440 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-09-07 11:35 - 2017-09-09 21:10 - 000000000 ____D C:\FRST
2017-09-07 11:23 - 2017-09-07 11:24 - 000000000 ____D C:\ProgramData\TEMP
2017-09-07 11:22 - 2017-09-07 11:22 - 000000000 ____D C:\ProgramData\Simply Super Software
2017-09-06 23:07 - 2017-09-09 19:31 - 000221632 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-09-06 23:07 - 2017-09-09 19:31 - 000075712 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-09-06 23:07 - 2017-09-09 19:31 - 000040352 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-09-06 23:07 - 2017-09-06 23:07 - 000166848 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-09-06 23:07 - 2017-09-06 23:07 - 000002099 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-09-06 23:07 - 2017-09-06 23:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-09-06 23:07 - 2017-08-24 11:27 - 000059904 _____ C:\WINDOWS\system32\Drivers\mbae.sys
2017-09-06 23:06 - 2017-09-06 23:06 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-09-06 23:06 - 2017-09-06 23:06 - 000000000 ____D C:\Program Files\Malwarebytes
2017-09-06 12:29 - 2017-09-06 12:29 - 000043336 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2017-09-06 12:29 - 2017-09-06 12:29 - 000035432 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2017-09-06 12:29 - 2017-09-06 12:29 - 000035408 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2017-09-06 12:29 - 2017-09-06 12:29 - 000035408 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 020504064 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 020373408 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 013841408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 011870208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 006761568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 006728192 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 006269440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 005961728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 005862816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 005820984 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 005808640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 005721600 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 004417024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 004213656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 004056064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 003464704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 003447296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002956288 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 002671616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002424024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002259768 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002211840 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002165752 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002122240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002081184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 002040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002023832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 001972128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 001854832 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001831936 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001585152 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 001536512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001513984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001377280 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msjet40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001291776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001244160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 001208320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001195760 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001156608 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000988168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000967584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000962048 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000952832 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000892928 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000877056 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000866816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswdat10.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000866808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000864248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000844800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000805816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000798208 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000777400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000760832 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000755616 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000750496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000698384 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000665600 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000661504 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2017-08-19 11:14 - 2017-08-19 11:14 - 000641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswstr10.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000616448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrepl40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000610584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000597920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000586752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000582560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000572320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsvcs.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000551200 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000547328 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000518144 _____ C:\WINDOWS\system32\msjetoledb40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxbde40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000440184 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000435712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000434592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2017-08-19 11:14 - 2017-08-19 11:14 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000414296 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000406544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000404992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspbde40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000359552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000358816 _____ (Microsoft Corporation) C:\WINDOWS\system32\halmacpi.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000358816 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000349600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrd3x40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\msexcl40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000338944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Display.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrd2x40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\msjtes40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000280472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000277432 _____ (Microsoft Corporation) C:\WINDOWS\system32\shlwapi.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000273312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstext40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msltus40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000239008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000216504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000176024 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000173984 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000173104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000168864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2017-08-19 11:14 - 2017-08-19 11:14 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msjint40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\qasf.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000133904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdeploy.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000100232 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000096648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000095648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000090464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\msjter40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ofdeploy.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000060312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\DmApiSetExtImplDesktop.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\IpNatHlpClient.dll
2017-08-19 11:09 - 2017-08-19 10:19 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2017-08-19 11:09 - 2017-03-17 22:45 - 005739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2017-08-19 11:09 - 2017-03-17 22:43 - 002629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2017-08-19 11:09 - 2017-03-17 22:35 - 005484544 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2017-08-19 11:08 - 2017-08-19 11:08 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2017-08-19 11:06 - 2017-08-19 11:06 - 000000000 ____D C:\WINDOWS\system32\XPSViewer
2017-08-19 11:06 - 2017-08-19 11:06 - 000000000 ____D C:\WINDOWS\system32\msmq
2017-08-19 11:06 - 2017-08-19 11:06 - 000000000 ____D C:\WINDOWS\system32\BestPractices
2017-08-19 11:06 - 2017-08-19 11:06 - 000000000 ____D C:\Program Files\Reference Assemblies
2017-08-19 11:06 - 2017-08-19 11:06 - 000000000 ____D C:\inetpub
2017-08-19 11:06 - 2017-08-19 10:32 - 000000000 ____D C:\Program Files\MSBuild
2017-08-19 11:05 - 2017-02-10 12:21 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-08-19 11:05 - 2017-02-10 12:21 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-08-19 11:05 - 2017-02-10 12:21 - 000035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-08-19 10:54 - 2017-08-19 10:54 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-08-19 10:50 - 2017-08-19 10:50 - 000000020 ___SH C:\Users\User\ntuser.ini
2017-08-19 10:46 - 2017-08-19 10:48 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2017-08-19 10:46 - 2017-08-19 10:48 - 000011433 _____ C:\WINDOWS\diagerr.xml
2017-08-19 10:40 - 2017-09-09 19:31 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-08-19 10:31 - 2017-08-19 10:31 - 000001487 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-08-19 10:30 - 2017-08-19 10:30 - 000000000 ____D C:\ProgramData\USOShared
2017-08-19 10:25 - 2017-08-19 10:25 - 000000000 ____D C:\Program Files\Common Files\SpeechEngines
2017-08-19 10:24 - 2017-08-19 10:24 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-08-19 10:22 - 2017-08-19 10:37 - 000000000 ____D C:\Users\DefaultAppPool
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\Vorlagen
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\Startmenü
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\Netzwerkumgebung
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\Lokale Einstellungen
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\Eigene Dateien
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\Druckumgebung
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\Anwendungsdaten
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2017-08-19 10:21 - 2017-09-04 15:28 - 002124044 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-08-19 10:21 - 2017-08-29 18:51 - 000009652 _____ C:\WINDOWS\BRRBCOM.INI
2017-08-19 10:21 - 2017-08-19 10:25 - 000000000 ____D C:\ProgramData\Brother
2017-08-19 10:21 - 2017-08-19 10:21 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2017-08-19 10:20 - 2017-08-19 10:25 - 000000000 ____D C:\Program Files\Realtek
2017-08-19 10:20 - 2017-08-19 10:20 - 000000000 ____D C:\WINDOWS\system32\RTCOM
2017-08-19 10:19 - 2017-09-09 20:13 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-08-19 10:19 - 2017-09-07 13:22 - 000388672 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-08-18 09:49 - 2017-09-04 19:35 - 000000000 ___DC C:\WINDOWS\Panther
2017-08-15 16:53 - 2017-08-15 16:53 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2017-08-14 22:53 - 2017-08-14 23:07 - 000055160 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
2017-08-14 15:28 - 2017-08-14 15:28 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avusbflt_01011.Wdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-09-09 19:30 - 2017-03-18 08:02 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2017-09-09 19:30 - 2012-05-10 09:45 - 000000000 ____D C:\Program Files\Adobe
2017-09-09 19:09 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-09-09 18:24 - 2013-05-10 16:13 - 000000000 ____D C:\Program Files\Java
2017-09-09 18:17 - 2017-03-11 11:55 - 000000000 ____D C:\ProgramData\Package Cache
2017-09-09 18:08 - 2012-05-10 09:45 - 000000000 ____D C:\Program Files\Common Files\Adobe
2017-09-09 17:20 - 2016-03-05 10:54 - 000000000 ___RD C:\Users\User\iCloudDrive
2017-09-09 12:06 - 2017-05-12 11:19 - 000000000 ____D C:\Program Files\Dropbox
2017-09-09 11:57 - 2015-10-15 10:15 - 000002425 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-09-09 11:57 - 2015-10-15 10:15 - 000000000 ___RD C:\Users\User\OneDrive
2017-09-08 21:18 - 2017-03-18 20:21 - 000000000 ____D C:\WINDOWS\INF
2017-09-08 20:46 - 2017-03-18 20:23 - 000000000 ___HD C:\Program Files\WindowsApps
2017-09-05 22:30 - 2015-10-27 16:17 - 000001726 _____ C:\WINDOWS\Sandboxie.ini
2017-09-04 19:35 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-09-04 17:11 - 2012-08-15 19:36 - 000094344 _____ C:\WINDOWS\system32\GDIPFONTCACHEV1.DAT
2017-09-04 15:28 - 2017-03-19 10:57 - 000912932 _____ C:\WINDOWS\system32\perfh007.dat
2017-09-04 15:28 - 2017-03-19 10:57 - 000201602 _____ C:\WINDOWS\system32\perfc007.dat
2017-09-04 15:21 - 2017-04-24 22:10 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-09-04 15:21 - 2012-08-13 16:02 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-08-29 10:38 - 2015-12-25 22:56 - 000002216 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-28 20:28 - 2013-01-03 14:03 - 000006246 _____ C:\WINDOWS\wininit.ini
2017-08-23 20:49 - 2016-11-19 12:02 - 000000000 ____D C:\Users\User\AppData\LocalLow\Mozilla
2017-08-23 17:55 - 2017-07-26 22:49 - 000000000 ____D C:\Program Files\CCleaner
2017-08-20 11:33 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\appcompat
2017-08-19 14:17 - 2017-03-18 20:14 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-08-19 14:12 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\Registration
2017-08-19 11:18 - 2017-03-18 20:23 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-08-19 11:16 - 2017-03-18 20:25 - 000000000 ____D C:\WINDOWS\Setup
2017-08-19 11:15 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2017-08-19 11:15 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-08-19 11:15 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-08-19 11:15 - 2017-03-18 20:23 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-08-19 11:10 - 2017-03-19 10:58 - 000000000 ____D C:\WINDOWS\OCR
2017-08-19 11:06 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\MUI
2017-08-19 11:06 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2017-08-19 11:06 - 2017-03-18 20:19 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2017-08-19 11:06 - 2017-03-18 20:19 - 000049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2017-08-19 11:06 - 2017-03-18 20:19 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2017-08-19 11:06 - 2017-03-18 20:19 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2017-08-19 11:06 - 2017-03-18 20:19 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2017-08-19 11:06 - 2017-03-18 20:19 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll
2017-08-19 11:06 - 2017-03-18 20:19 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000973312 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000611840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2017-08-19 11:06 - 2017-03-18 20:18 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2017-08-19 11:06 - 2017-03-18 20:18 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2017-08-19 11:06 - 2017-03-18 20:18 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2017-08-19 11:06 - 2017-03-18 20:18 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2017-08-19 11:06 - 2017-03-18 20:18 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2017-08-19 11:06 - 2017-03-18 20:18 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2017-08-19 11:06 - 2017-03-18 20:18 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2017-08-19 10:51 - 2017-03-18 20:23 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-08-19 10:51 - 2015-09-10 06:22 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-08-19 10:49 - 2017-03-18 20:23 - 000000000 ____D C:\Program Files\Windows NT
2017-08-19 10:48 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-08-19 10:47 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\rescache
2017-08-19 10:45 - 2016-07-16 10:29 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-08-19 10:41 - 2015-10-15 08:26 - 000021628 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-08-19 10:40 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\Media
2017-08-19 10:39 - 2017-03-18 20:23 - 000000000 __RHD C:\Users\Public\Libraries
2017-08-19 10:32 - 2017-07-28 09:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2017-08-19 10:32 - 2017-07-26 22:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-08-19 10:32 - 2017-07-26 22:33 - 000000000 ____D C:\WINDOWS\system32\UNP
2017-08-19 10:32 - 2017-07-26 22:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ClamWin Antivirus
2017-08-19 10:32 - 2017-07-26 15:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2017-08-19 10:32 - 2017-06-12 23:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie
2017-08-19 10:32 - 2017-03-20 13:15 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MuseScore 2
2017-08-19 10:32 - 2016-12-05 14:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LEGO Company
2017-08-19 10:32 - 2016-08-07 12:16 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Photos Backup
2017-08-19 10:32 - 2016-04-23 14:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2017-08-19 10:32 - 2016-01-06 18:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2017-08-19 10:32 - 2016-01-06 18:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nuance PaperPort 12
2017-08-19 10:32 - 2015-10-30 17:10 - 000000000 ____D C:\WINDOWS\ShellNew
2017-08-19 10:32 - 2015-10-27 16:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nostale(DE)
2017-08-19 10:32 - 2015-10-27 16:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2017-08-19 10:32 - 2015-10-15 10:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2017-08-19 10:32 - 2015-09-21 22:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\tiptoi® Manager
2017-08-19 10:32 - 2015-04-09 12:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KakaoTalk
2017-08-19 10:32 - 2015-03-17 23:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2017-08-19 10:32 - 2015-01-13 18:28 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\tiptoi® Manager
2017-08-19 10:32 - 2015-01-01 16:42 - 000000000 ____D C:\WINDOWS\system32\vbox
2017-08-19 10:32 - 2014-10-13 19:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FOTOParadies
2017-08-19 10:32 - 2012-08-13 18:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2017-08-19 10:32 - 2012-08-13 16:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2017-08-19 10:32 - 2012-05-28 17:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AcerSystem
2017-08-19 10:32 - 2012-05-28 17:27 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2017-08-19 10:32 - 2012-05-10 09:37 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2017-08-19 10:32 - 2012-05-10 09:37 - 000000000 ____D C:\WINDOWS\ca
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\tr
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\th
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\sv
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\sl
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\sk
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\ru
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\ro
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\pl
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\no
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\nl
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\it
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\hu
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\hr
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\he
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\fr
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\fi
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\es
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\en
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\el
2017-08-19 10:32 - 2012-05-10 09:34 - 000000000 ____D C:\WINDOWS\de
2017-08-19 10:32 - 2012-05-10 09:34 - 000000000 ____D C:\WINDOWS\da
2017-08-19 10:32 - 2012-05-10 09:34 - 000000000 ____D C:\WINDOWS\cs
2017-08-19 10:32 - 2012-05-10 09:34 - 000000000 ____D C:\WINDOWS\bg
2017-08-19 10:32 - 2012-05-10 09:34 - 000000000 ____D C:\WINDOWS\ar
2017-08-19 10:32 - 2012-05-10 09:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-08-19 10:32 - 2012-05-10 09:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2017-08-19 10:30 - 2017-03-18 20:23 - 000000000 ____D C:\ProgramData\USOPrivate
2017-08-19 10:30 - 2017-03-18 20:23 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-08-19 10:26 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\spool
2017-08-19 10:26 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-08-19 10:26 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-08-19 10:26 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-08-19 10:26 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\IME
2017-08-19 10:26 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\schemas
2017-08-19 10:26 - 2015-09-08 18:39 - 000000000 ___HD C:\WINDOWS\system32\CanonIJ Uninstaller Information
2017-08-19 10:25 - 2017-03-18 20:23 - 000000000 __SHD C:\Program Files\Windows Sidebar
2017-08-19 10:25 - 2017-03-18 20:23 - 000000000 ____D C:\Program Files\Common Files\System
2017-08-19 10:25 - 2017-03-18 20:23 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-08-19 10:25 - 2017-03-17 13:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-08-19 10:25 - 2012-05-10 09:18 - 000000000 ____D C:\Program Files\Intel
2017-08-19 10:25 - 2009-07-14 06:52 - 000000000 ____D C:\Program Files\Microsoft Games
2017-08-19 10:24 - 2016-03-17 14:32 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Oetinger
2017-08-19 10:24 - 2015-05-15 22:39 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2017-08-19 10:21 - 2017-03-18 08:02 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2017-08-15 18:04 - 2013-08-14 10:02 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-08-15 18:00 - 2012-08-13 16:02 - 137505280 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-08-15 17:50 - 2017-07-26 22:49 - 000001040 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-08-15 17:01 - 2015-08-13 18:31 - 000000000 ____D C:\Program Files\Common Files\AV
2017-08-15 17:01 - 2012-08-13 16:08 - 000000000 ____D C:\ProgramData\AVAST Software
2017-08-11 22:32 - 2016-04-10 17:00 - 000000000 ____D C:\Program Files\Fotor

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2017-04-02 17:09 - 2017-04-02 17:09 - 000003293 _____ () C:\Users\User\AppData\Local\recently-used.xbel
2012-11-23 22:33 - 2012-11-23 22:35 - 000007602 _____ () C:\Users\User\AppData\Local\resmon.resmoncfg

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-09-03 13:22

==================== Ende vom FRST.txt ============================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version: 20-08-2017
durchgeführt von User (09-09-2017 21:11:55)
Gestartet von D:\Users\User\Downloads
Microsoft Windows 10 Home Version 1703 (X86) (2017-08-19 08:50:02)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-402077633-641172795-4098644512-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-402077633-641172795-4098644512-503 - Limited - Disabled)
Gast (S-1-5-21-402077633-641172795-4098644512-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-402077633-641172795-4098644512-1002 - Limited - Enabled)
User (S-1-5-21-402077633-641172795-4098644512-1000 - Administrator - Enabled) => C:\Users\User

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Spybot - Search and Destroy (Disabled - Out of date) {A16C3F68-9280-E053-1818-342707FECF4D}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 16.04 (HKLM\...\{23170F69-40C1-2701-1604-000001000000}) (Version: 16.04.00.0 - Igor Pavlov)
Acer eRecovery Management (HKLM\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3505 - Acer Incorporated)
Acer Framework (HKLM\...\{8F1B6239-FEA0-450A-A950-B05276CE177C}) (Version: 3.00.5500 - Acer Incorporated)
Adobe Flash Player 26 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Amazon Kindle (HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\Amazon Kindle) (Version: 1.15.0.43061 - Amazon)
Apple Application Support (32-Bit) (HKLM\...\{D2FE6376-E549-4F63-A2C5-CA24DA035DE4}) (Version: 5.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2A2C8640-5402-428A-909A-0236CB2B77C7}) (Version: 10.3.2.3 - Apple Inc.)
Apple Software Update (HKLM\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.)
Brother MFL-Pro Suite MFC-J5320DW (HKLM\...\{7FC49664-DAA4-4E7C-ADD0-614ABB43691B}) (Version: 1.0.5.0 - Brother Industries, Ltd.)
Canon MX880 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX880_series) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 5.33 - Piriform)
D3DX10 (HKLM\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKLM\...\Dropbox) (Version: 34.4.20 - Dropbox, Inc.)
Dropbox Update Helper (HKLM\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.65.1 - Dropbox, Inc.) Hidden
Fotobuchexpress24 Bestellsoftware (HKLM\...\{7F13998B-A009-9901-3D6E-B1F524006F3F}) (Version: 3.2.43 - Saal Digital Fotoservice GmbH) Hidden
Fotobuchexpress24 Bestellsoftware (HKLM\...\Fotobuchexpress24) (Version: 3.2.43 - Saal Digital Fotoservice GmbH)
Fotogalerija Windows Live (HKLM\...\{E59969EA-3B5B-4B24-8B94-43842A7FBFE9}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (HKLM\...\{0EC0B576-90F9-43C3-8FAD-A4902DF4B8F4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (HKLM\...\{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (HKLM\...\{4736B0ED-F6A1-48EC-A1B7-C053027648F1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (HKLM\...\{CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (HKLM\...\{488F0347-C4A7-4374-91A7-30818BEDA710}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (HKLM\...\{CB66242D-12B1-4494-82D2-6F53A7E024A3}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKLM\...\Google Chrome) (Version: 60.0.3112.113 - Google Inc.)
Google Photos Backup (HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\Google Photos Backup) (Version: 1.1.2.13 - Google, Inc.)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
iCloud (HKLM\...\{AFA154E8-2D57-4789-AB2D-9761E6AC5988}) (Version: 6.2.3.17 - Apple Inc.)
Intel(R) Control Center (HKLM\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2418 - Intel Corporation)
iTunes (HKLM\...\{BE5DD9B6-9DF7-4163-A39E-E2141C7A7488}) (Version: 12.6.2.20 - Apple Inc.)
JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (HKLM\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
KakaoTalk (HKLM\...\KakaoTalk) (Version: 2.6.0.1591 - Daum Kakao Corp)
LEGO Digital Designer (HKLM\...\New LEGO Digital Designer) (Version:  - LEGO A/S)
Mesh Runtime (HKLM\...\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\OneDriveSetup.exe) (Version: 17.3.6966.0824 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Mozilla Firefox 55.0.3 (x86 de) (HKLM\...\Mozilla Firefox 55.0.3 (x86 de)) (Version: 55.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 55.0.3.6445 - Mozilla)
Mozilla Thunderbird 52.2.1 (x86 de) (HKLM\...\Mozilla Thunderbird 52.2.1 (x86 de)) (Version: 52.2.1 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MuseScore 2 (HKLM\...\{4F0E15EA-F64C-11E5-9992-E717EA7DB0C8}) (Version: 2.0.3 - Werner Schweer and Others)
NETGEAR WNA1000M Wireless USB 2.0 Adapter (HKLM\...\{DA4CCF2D-87DC-42AA-9BF4-5F4884B7A27B}) (Version: 1.01.10 - NETGEAR) Hidden
Nuance PaperPort 12 (HKLM\...\{2A770862-7142-4C77-8117-F933E4110A3F}) (Version: 12.1.0006 - Nuance Communications, Inc.)
Olchi-Kalender (HKLM\...\Olchi-Kalender) (Version:  - )
PaperPort Image Printer (HKLM\...\{6EF2FDAB-7FBF-4AB9-92CD-594BDDB6A56B}) (Version: 14.00.0000 - Nuance Communications, Inc.)
Poczta usługi Windows Live (HKLM\...\{64376910-1860-4CEF-8B34-AA5D205FC5F1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (HKLM\...\{7A9D47BA-6D50-4087-866F-0800D8B89383}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pošta Windows Live (HKLM\...\{7BA19818-F717-4DFB-BC11-FAF17B2B8AEE}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Raccolta foto di Windows Live (HKLM\...\{ED16B700-D91F-44B0-867C-7EB5253CA38D}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.37.1229.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6287 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.0.3 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.3 - VS Revo Group, Ltd.)
Sandboxie 5.20 (32-bit) (HKLM\...\Sandboxie) (Version: 5.20 - Sandboxie Holdings, LLC)
Skype™ 7.39 (HKLM\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.39.102 - Skype Technologies S.A.)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
tiptoi® Manager 3.1.6 (HKLM\...\9978-5763-2995-5228) (Version: 3.1.6 - Ravensburger AG)
Unity Web Player (HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Welcome Center (HKLM\...\Acer Welcome Center) (Version: 1.02.3504 - Acer Incorporated)
Windows 10 Update and Privacy Settings (HKLM\...\{542CC2C2-ABAF-4604-8723-DA296AF74540}) (Version: 1.0.14.0 - Microsoft Corporation)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Συλλογή φωτογραφιών του Windows Live (HKLM\...\{C00C2A91-6CB3-483F-80B3-2958E29468F1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (HKLM\...\{E83DC314-C926-4214-AD58-147691D6FE9F}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (HKLM\...\{B63F0CE3-CCD0-490A-9A9C-E1A3B3A17137}) (Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (HKLM\...\{77F69CA1-E53D-4D77-8BA3-FA07606CC851}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (HKLM\...\{4444F27C-B1A8-464E-9486-4C37BAB39A09}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (HKLM\...\{CE929F09-3853-4180-BD90-30764BFF7136}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (HKLM\...\{0A4C4B29-5A9D-4910-A13C-B920D5758744}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (HKLM\...\{FBCA06D2-4642-4F33-B20A-A7AB3F0D2E69}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{144DF3B2-2402-47AE-9583-5A045929A8D4}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\psuser.dll (Google Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ContextMenuHandlers1: [ClamWin] -> {65713842-C410-4f44-8383-BFE01A398C90} => C:\Program Files\ClamWin\bin\ExpShell.dll [2008-04-19] ()
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams.dll [2017-07-14] (Apple Inc.)
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files\Spybot - Search & Destroy 2\SDECon32.dll [2015-06-16] (Safer-Networking Ltd.)
ContextMenuHandlers1: [Winsome File Renamer] -> {413B25A4-3A7B-4A1D-887A-4DFC3856D7F7} =>  -> Keine Datei
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-21] (Malwarebytes)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ContextMenuHandlers4: [Winsome File Renamer] -> {413B25A4-3A7B-4A1D-887A-4DFC3856D7F7} =>  -> Keine Datei
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} =>  -> Keine Datei
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll [2017-03-10] (Intel Corporation)
ContextMenuHandlers6: [ClamWin] -> {65713842-C410-4f44-8383-BFE01A398C90} => C:\Program Files\ClamWin\bin\ExpShell.dll [2008-04-19] ()
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-21] (Malwarebytes)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files\Spybot - Search & Destroy 2\SDECon32.dll [2015-06-16] (Safer-Networking Ltd.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {00044590-D022-4E98-B180-41BC67F08D8E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {00834DBB-69C5-49DE-9713-BF641CFE8157} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {0463E7DD-AEE4-42FA-A6EE-4E153525B88C} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {0D7D49F9-8628-4A1E-B1A2-BA3D220B8544} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {14B0EB7A-6A8C-4468-889B-5E3F4351C287} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-08-03] (Piriform Ltd)
Task: {151D0E78-BA2F-49C7-BF28-7E337F64A677} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {15D09901-DC9A-4589-BA9B-03E0C0DFF5F1} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {169005ED-1580-4D32-AEC0-EF12801CC7D8} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {19ABF37F-1CAA-4A9C-A5D2-61E5A8F83C62} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {19EDF2AE-0CE4-4CAE-A7F2-AE393F890055} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1B07EF3C-D013-4658-973F-6FB98114D5DD} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {1F8A2A34-5561-4455-BF1F-BF73101344DD} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {20F5A7DE-5D65-4722-984E-5742C1155B73} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {260FF0EA-9076-4D41-9894-C00EFD6112A1} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-402077633-641172795-4098644512-1000Core => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2016-08-07] (Google Inc.)
Task: {296CB533-8B10-4184-974D-1156612DCCA6} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2017-02-14] (Apple Inc.)
Task: {3D018940-1512-4E02-98D4-67C3E71E784C} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {4219E7BB-7362-46EF-BCA4-4B1D68683D99} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {4C825353-2EC8-4FD2-BE72-89D334CFF51C} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {4E43569A-83CC-4E25-83D0-3DF155E09FCC} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {4FAB5092-9657-4C2B-A35E-48971DF65448} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-08-08] (Adobe Systems Incorporated)
Task: {512EF876-E342-48A3-8D27-7D1A70CE9CED} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5268131F-CE12-451D-811C-5911CC16D175} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-12-25] (Google Inc.)
Task: {6AECD5E7-A35A-42D7-9034-4A229C6241F7} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6CEA031E-2F3F-4D12-9B0D-65F9B6AEF609} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {6EA55929-7243-42CD-9AA0-CA18702EFFE8} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {7A57501C-3D84-4E9F-80F2-A884700A5CFC} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {7BF93DFA-4AB5-4827-A94F-9804A7A4FFF2} - System32\Tasks\{08D695C1-AA1B-40BD-BADF-CF782FD3F3C7} => C:\Windows\system32\pcalua.exe -a "C:\program files\ncsoft\launcher\NCLauncher.exe" -c /Uninstall=Aion
Task: {7C58F0E5-5543-4A0F-8D36-4A6108BE880E} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {8929DFA0-82E3-4408-A839-82350C799D8C} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {92CCE050-45BF-492D-BBE2-A54769A757DF} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2017-08-15] (Microsoft Corporation)
Task: {93F4C38B-BF53-4200-A6DE-CAA61AE94F44} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-402077633-641172795-4098644512-1000UA => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2016-08-07] (Google Inc.)
Task: {99AC8C97-1DC8-4290-8CF3-4ECB5B31BE99} - System32\Tasks\SafeZone scheduled Autoupdate 1458767861 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe
Task: {9B116486-421B-4D5B-8D21-9BF559481122} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {A1C25504-AADE-4D91-813A-559B345EAAB7} - System32\Tasks\{3EAE2372-67CE-458E-9F90-3D35C5BB237E} => C:\Program Files\NosTale(DE)\nostale.exe
Task: {A46EED9A-FAC6-41E3-958F-727ED136818A} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {ABC8566D-64A9-4A94-A542-4160F48A1383} - System32\Tasks\{34B66F9B-0277-42BC-8B48-C2D343AD5EF3} => C:\Program Files\NosTale(DE)\nostale.exe
Task: {AE591A9F-5B75-4F5C-9269-5879351CA073} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B649E17E-07B4-4A53-801E-DE0226923A7D} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {B77749BF-7E94-4C02-B339-C44FE0B71112} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
Task: {BBC5F601-0A47-424F-9DA1-5FFD04BFCFCE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-12-25] (Google Inc.)
Task: {C2C0DE01-1447-44D9-BCAD-A4A5A493FA97} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {C3558129-F667-4091-AA81-578FF63C35E6} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {D20D8C78-E175-4A30-B452-B1640FDF0ECC} - System32\Tasks\UALU notificatin => C:\Program Files\Acer\Acer Updater\UALU.exe [2016-06-08] (Acer Incorporated)
Task: {D3ABEF2F-9233-40AA-A3A4-5E33DB84BCAE} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {D52A1756-C56E-4063-A553-F79EB0C5EEB9} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe [2015-06-16] (Safer-Networking Ltd.)
Task: {D7B30254-7AE1-4406-9252-C3F4B1EC47AF} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {D8A74BDD-D64D-423E-8524-37EF6C2130D0} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E5EAE87D-2B2C-4708-B82A-D68D8938B6AD} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files\Dropbox\Update\DropboxUpdate.exe [2017-05-12] (Dropbox, Inc.)
Task: {EA498E2C-9A2F-4BA5-B177-806F3225113C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F37DAB72-51C2-4398-90B1-920AE35F7A01} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files\Dropbox\Update\DropboxUpdate.exe [2017-05-12] (Dropbox, Inc.)
Task: {F5677722-DCDD-4AC3-8C06-45F81DEB62E0} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FC12E9A5-E9D4-4961-8DE2-59EEBD0705D2} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FC2B1D8D-82E8-479C-AA3A-48A14C48E6B7} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {FD732597-7D7F-44CD-A89F-D62A6D329DDE} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files\Dropbox\Update\DropboxUpdate.exe

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2012-05-10 09:21 - 2011-06-14 02:59 - 000030080 _____ () C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
2017-08-19 10:25 - 2017-08-19 10:25 - 000038312 _____ () C:\WINDOWS\assembly\GAC_MSIL\Framework.Model.Controller\3.0.5500.0__14bcaafdb44b5951\Framework.Model.Controller.dll
2017-08-19 10:25 - 2017-08-19 10:25 - 000026040 _____ () C:\WINDOWS\assembly\GAC_MSIL\Framework.Model.ControllerInterface\3.0.5500.0__d842b71b4d6ed079\Framework.Model.ControllerInterface.dll
2017-08-19 10:25 - 2017-08-19 10:25 - 000066960 _____ () C:\WINDOWS\assembly\GAC_MSIL\Framework.Library\3.0.5500.0__3036420f80dd6947\Framework.Library.dll
2017-08-19 10:25 - 2017-08-19 10:25 - 000034192 _____ () C:\WINDOWS\assembly\GAC_MSIL\Framework.Host\3.0.5500.0__672b450de5a7e94a\Framework.Host.dll
2017-08-19 10:25 - 2017-08-19 10:25 - 000021920 _____ () C:\WINDOWS\assembly\GAC_MSIL\Framework.PluginInterface\3.0.5500.0__9ecdf03bb2054f94\Framework.PluginInterface.dll
2016-01-06 18:43 - 2009-02-27 17:38 - 000139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2015-10-15 10:20 - 2012-08-23 11:38 - 000574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2015-10-15 10:20 - 2014-05-13 13:04 - 000416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2015-10-15 10:20 - 2014-05-13 12:04 - 000109400 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2015-10-15 10:20 - 2014-05-13 12:04 - 000167768 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2017-09-06 23:07 - 2017-08-24 11:27 - 001724368 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2016-09-01 18:13 - 2016-09-01 18:13 - 000080184 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-07-13 20:51 - 2017-07-13 20:51 - 001041720 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-04-23 14:39 - 2016-03-29 00:06 - 000110952 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\zlib1.dll
2016-04-23 14:39 - 2016-03-29 00:06 - 000253800 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\collector.dll
2016-04-23 14:39 - 2016-03-29 00:06 - 000295272 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\stat.dll
2016-04-23 14:39 - 2016-03-29 00:06 - 000044392 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll
2016-04-23 14:39 - 2016-03-29 00:06 - 000020328 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll
2016-04-23 14:39 - 2016-03-29 00:06 - 000104296 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll
2017-03-18 20:19 - 2017-03-18 20:19 - 000116824 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-07-26 22:09 - 2008-04-19 17:35 - 000081920 _____ () C:\Program Files\ClamWin\bin\ExpShell.dll
2017-03-18 20:19 - 2017-03-19 10:58 - 001456128 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-08-23 17:53 - 2017-08-23 17:54 - 000064512 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x86__kzf8qxf38zg5c\SkypeHost.exe
2017-08-23 17:53 - 2017-08-23 17:54 - 000171008 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x86__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-08-23 17:53 - 2017-08-23 17:54 - 027734016 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x86__kzf8qxf38zg5c\SkyWrap.dll
2017-08-23 17:53 - 2017-08-23 17:54 - 001660928 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x86__kzf8qxf38zg5c\skypert.dll
2017-06-02 12:21 - 2017-06-02 12:24 - 002578344 ____N () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11707.1001.23.0_x86__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-08-28 10:56 - 2017-08-28 10:57 - 006526464 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11707.1001.23.0_x86__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2017-08-28 10:56 - 2017-08-28 10:57 - 001661440 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11707.1001.23.0_x86__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:CB0AACC9 [140]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:04 - 2017-08-11 13:58 - 000000848 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-402077633-641172795-4098644512-1000\Control Panel\Desktop\\Wallpaper -> D:\Users\User\Pictures\2017.07.04.-24. England\Retro Cam Sommer 2017\DSCF0385.JPG
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==


==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{894F9431-B09D-4C76-8CD6-5DAECE3719E6}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{30386A47-D059-49A2-B8D0-62FE36B01D07}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{7E50E7B5-4F65-4D18-9A25-B7D6CC06A265}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{2FD640AA-EBCD-49B1-AF10-97054E94477F}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [UDP Query User{7AE72AB3-3AD4-4208-B2D4-4EBC0D503C64}C:\program files\google\chrome\application\chrome.exe] => (Allow) C:\program files\google\chrome\application\chrome.exe
FirewallRules: [TCP Query User{154CA141-B98A-4A11-8D64-66D97C97CD4F}C:\program files\google\chrome\application\chrome.exe] => (Allow) C:\program files\google\chrome\application\chrome.exe
FirewallRules: [{585E86AB-C2EC-40D1-A23C-90C16E8A300D}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{BDF9A6D9-97FE-4AE8-97E6-AA11D4956051}] => (Allow) C:\Program Files\Dropbox\Client\Dropbox.exe
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Wiederherstellungspunkte =========================

19-08-2017 14:16:42 Windows Update
28-08-2017 11:42:03 Geplanter Prüfpunkt
05-09-2017 23:02:10 Geplanter Prüfpunkt
07-09-2017 13:12:40 Säuberung (Spybot - Search & Destroy 2.6, Administratorrechte)
08-09-2017 20:47:03 Removed Avira Software Updater
09-09-2017 18:14:11 Revo Uninstaller's restore point - Avira
09-09-2017 18:16:36 Revo Uninstaller's restore point - Avira
09-09-2017 18:19:29 Revo Uninstaller's restore point - Java 8 Update 101
09-09-2017 18:19:45 Removed Java 8 Update 101
09-09-2017 18:21:25 Revo Uninstaller's restore point - Java 8 Update 121
09-09-2017 18:21:39 Removed Java 8 Update 121
09-09-2017 18:23:15 Revo Uninstaller's restore point - Java 8 Update 141
09-09-2017 18:23:51 Removed Java 8 Update 141
09-09-2017 19:10:10 Revo Uninstaller's restore point - Canon MX880 series MP Drivers

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/09/2017 07:13:55 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "c:\program files\brother\brmfl14e\netscn\dpinstx64.exe".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (09/09/2017 07:10:10 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (09/09/2017 06:25:38 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "QueryFullProcessImageNameW" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070006, Das Handle ist ungültig.
.


Vorgang:
   Asynchroner Vorgang wird ausgeführt

Kontext:
   Aktueller Status: DoSnapshotSet

Error: (09/09/2017 06:25:21 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (09/09/2017 06:23:52 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (09/09/2017 06:23:15 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (09/09/2017 06:21:41 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (09/09/2017 06:21:26 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (09/09/2017 06:19:46 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (09/09/2017 06:19:30 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.


Systemfehler:
=============
Error: (09/09/2017 07:31:25 PM) (Source: bowser) (EventID: 8016) (User: )
Description: Der Suchdiensttreiber erhielt zu viele nicht erlaubte Datagramme vom Remotecomputer "EASYBOX" zum Namen "USER-PC" auf Transport "NetBT_Tcpip_{7C690CA6-3C14-4161-AC14-F5". Das Datagramm steht in den Daten.
Es werden keine weiteren Ereignisse erzeugt, solange die Rücksetzfrequenz nicht abgelaufen ist.

Error: (09/09/2017 07:31:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SDWSCService" wurde aufgrund folgenden Fehlers nicht gestartet: 
Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.

Error: (09/09/2017 07:31:09 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058 = Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.

Error: (09/09/2017 07:30:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CldFlt" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%50 = Die Anforderung wird nicht unterstützt.

Error: (09/09/2017 03:26:13 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (09/08/2017 10:03:13 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 5

Error: (09/08/2017 02:47:21 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 5

Error: (09/07/2017 11:20:00 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 5

Error: (09/07/2017 11:19:31 PM) (Source: DCOM) (EventID: 10010) (User: User-PC)
Description: Der Server "{D63B10C5-BB46-4990-A94F-E40B9D520160}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (09/07/2017 05:23:42 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4


CodeIntegrity:
===================================
  Date: 2017-09-09 21:11:21.296
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-09 21:11:21.292
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-09 19:31:35.363
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-09 19:31:35.272
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-09 19:31:10.122
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-09 12:09:48.291
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-08 20:48:47.663
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-08 20:48:47.643
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-08 20:46:18.336
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-08 20:46:18.320
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) CPU G860 @ 3.00GHz
Prozentuale Nutzung des RAM: 60%
Installierter physikalischer RAM: 3015 MB
Verfügbarer physikalischer RAM: 1184.14 MB
Summe virtueller Speicher: 6087 MB
Verfügbarer virtueller Speicher: 3770.66 MB

==================== Laufwerke ================================

Drive c: (System) (Fixed) (Total:454.16 GB) (Free:366.48 GB) NTFS
Drive d: (Daten) (Fixed) (Total:445.76 GB) (Free:242.73 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive f: (RECOVER) (Fixed) (Total:19.99 GB) (Free:10.68 GB) FAT32

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: A752C28A)
Partition 1: (Not Active) - (Size=11.5 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=454.2 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: CE74067F)
Partition 1: (Active) - (Size=445.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=20 GB) - (Type=OF Extended)

==================== Ende vom Addition.txt ============================
         

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

• Starte bitte die mbar.exe.
• Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
• Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
• Klicke auf den CleanUp Button und erlaube den Neustart.
• Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
• Nach dem Neustart starte die mbar.exe erneut.
• Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2017.09.09.06
  rootkit: v2017.08.02.01

Windows 10 x86 NTFS
Internet Explorer 11.540.15063.0
User :: USER-PC [administrator]

09.09.2017 21:25:26
mbar-log-2017-09-09 (21-25-26).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 330809
Time elapsed: 18 minute(s), 55 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
         

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!



1. Schritt: adwCleaner v7.0.1.0

Downloade Dir bitte AdwCleaner auf deinen Desktop (Bebilderte Anleitung).

• Schließe alle offenen Programme und Browser.
• Starte die adwcleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Werkzeuge > Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • Tracing Schlüssel
  • Prefetch Dateien
  • Proxy
  • Winsock
  • IE Richtlinien
  • Chrome Richtlinien
• Bestätige die Auswahl mit Ok.
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist. Am Ende des Suchlaufs öffnet sich automatisch eine Logdatei. Schließe diese.
• Klicke nun auf Löschen (auch dann wenn AdwCleaner sagt, dass nichts gefunden wurde) und bestätige auftretende Hinweise mit Ok.
• Klicke am Ende der Bereinigung auf Jetzt neu starten. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

# AdwCleaner 7.0.2.1 - Logfile created on Sat Sep 09 20:09:57 2017
# Updated on 2017/29/08 by Malwarebytes 
# Running on Windows 10 Home (X86)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

No malicious folders deleted.

***** [ Files ] *****

No malicious files deleted.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

No malicious registry entries deleted.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries deleted.

*************************

::Tracing keys deleted
::Winsock settings cleared
::Prefetch files deleted
::Proxy settings cleared
::IE policies deleted
::Chrome policies deleted
::Additional Actions: 0



*************************

C:/AdwCleaner/AdwCleaner[C0].txt - [3545 B] - [2017/9/7 11:18:40]
C:/AdwCleaner/AdwCleaner[S0].txt - [3760 B] - [2017/9/7 11:16:45]
C:/AdwCleaner/AdwCleaner[S1].txt - [1079 B] - [2017/9/9 20:8:35]


########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt ##########
         

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 10 Home x86 
Ran by User (Administrator) on 09.09.2017 at 22:15:57,61
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 8 

Successfully deleted: C:\Program Files\mozilla firefox\defaults\pref\itms.js (File) 
Successfully deleted: C:\Users\User\AppData\Local\{0A9C154C-F4DA-4FA3-8C0A-2F11DF86F041} (Empty Folder)
Successfully deleted: C:\Users\User\AppData\Local\{3036C42E-1BC6-4783-8FC7-9FA6540876FD} (Empty Folder)
Successfully deleted: C:\Users\User\AppData\Local\{6C81B644-53CB-4312-87D0-0BFB105A8F7D} (Empty Folder)
Successfully deleted: C:\Users\User\AppData\Local\{FDB971A8-00B2-47E3-BF5E-E31FF33C9422} (Empty Folder)
Successfully deleted: C:\Users\User\AppData\Local\kakao (Folder) 
Successfully deleted: C:\WINDOWS\wininit.ini (File) 
Successfully deleted: C:\Program Files\kakao (Folder) 

Deleted the following from C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rx0fa5al.default-1502455535696\prefs.js
user_pref(browser.startup.homepage, hxxps://www.startpage.com/);



Registry: 0 





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 09.09.2017 at 22:18:09,26
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

Ich brauche neue FRST-Logs . Haken setzen bei addition.txt dann auf Untersuchen klicken.

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version: 20-08-2017
durchgeführt von User (Administrator) auf USER-PC (09-09-2017 22:28:14)
Gestartet von D:\Users\User\Downloads
Geladene Profile: User (Verfügbare Profile: User & DefaultAppPool)
Platform: Microsoft Windows 10 Home Version 1703 (X86) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
() C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Digital Wave Ltd.) C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe
(Dropbox, Inc.) C:\Program Files\Dropbox\Update\DropboxUpdate.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x86__kzf8qxf38zg5c\SkypeHost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [485280 2017-03-18] (Microsoft Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ACHTUNG
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2012-08-20]
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{7c690ca6-3c14-4161-ac14-f54aabc23763}: [DhcpNameServer] 192.168.2.1

Internet Explorer:
==================
HKU\S-1-5-21-402077633-641172795-4098644512-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-402077633-641172795-4098644512-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-402077633-641172795-4098644512-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: rx0fa5al.default-1502455535696
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rx0fa5al.default-1502455535696 [2017-09-09]
FF Session Restore: Mozilla\Firefox\Profiles\rx0fa5al.default-1502455535696 -> ist aktiviert.
FF Extension: (Firefox Screenshots) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rx0fa5al.default-1502455535696\features\{ffbef703-6cd9-4a1b-89ec-d1775218419a}\screenshots@mozilla.org.xpi [2017-09-01]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-08] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-14] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-14] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000: @tools.google.com/Google Update;version=3 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000: @tools.google.com/Google Update;version=9 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-402077633-641172795-4098644512-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-02-20] (Unity Technologies ApS)

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR DefaultSearchURL: Default -> hxxps://search.avira.com/#web/result?source=omnibar&q={searchTerms}
CHR DefaultSearchKeyword: Default -> Avira
CHR DefaultSuggestURL: Default -> hxxps://search.avira.com/suggestions?q={searchTerms}&li=ff&hl=de
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2017-09-09]
CHR Extension: (Google Präsentationen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-25]
CHR Extension: (Google Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-25]
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-25]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-25]
CHR Extension: (Avira Password Manager) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2017-09-07]
CHR Extension: (Avira Safe Shopping) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2017-09-08]
CHR Extension: (Google-Suche) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-25]
CHR Extension: (Google Tabellen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-25]
CHR Extension: (Avira Browserschutz) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2017-09-07]
CHR Extension: (Google Docs Offline) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-27]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Google Mail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-25]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-15]
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [ipmkfpcnmccejididiaagpgchgjfajgp] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [282112 2013-09-25] (Brother Industries, Ltd.) [Datei ist nicht signiert]
S3 cphs; C:\WINDOWS\system32\IntelCpHeciSvc.exe [300120 2017-03-10] (Intel Corporation)
S2 dbupdate; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-12] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-12] (Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [43336 2017-09-06] (Dropbox, Inc.)
R2 DigitalWave.Update.Service; C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe [388968 2016-03-29] (Digital Wave Ltd.)
R2 ETService; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [30080 2011-06-14] ()
R2 Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [257440 2016-06-08] (Acer Incorporated)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4430792 2017-08-21] (Malwarebytes)
R2 PDFProFiltSrvPP; C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe [145736 2013-08-15] (Nuance Communications, Inc.)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [154760 2017-06-05] (Sandboxie Holdings, LLC)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1750712 2015-06-16] (Safer-Networking Ltd.) [Datei ist nicht signiert]
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [4088608 2016-09-21] (Safer-Networking Ltd.) [Datei ist nicht signiert]
S2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [235984 2016-11-24] (Safer-Networking Ltd.) [Datei ist nicht signiert]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [265352 2017-03-18] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [82488 2017-07-11] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [40352 2017-09-09] (Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [221632 2017-09-09] (Malwarebytes)
R3 MEI; C:\WINDOWS\System32\drivers\HECI.sys [41088 2010-10-19] (Intel Corporation)
R3 rt640x86; C:\WINDOWS\System32\drivers\rt640x86.sys [504832 2017-03-18] (Realtek )
R3 RtlWlanu_OldIC; C:\WINDOWS\System32\drivers\rtwlanu_oldIC.sys [3245056 2017-03-18] (Realtek Semiconductor Corporation )
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [179336 2017-06-05] (Sandboxie Holdings, LLC)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [37464 2017-03-18] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [243104 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [96672 2017-03-18] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-09-09 22:18 - 2017-09-09 22:18 - 000001420 _____ C:\Users\User\Desktop\JRT.txt
2017-09-09 21:23 - 2017-09-09 21:44 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-09-09 18:03 - 2017-09-09 18:03 - 000001266 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2017-09-09 18:03 - 2017-09-09 18:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-09-09 18:03 - 2017-09-09 18:03 - 000000000 ____D C:\Program Files\VS Revo Group
2017-09-09 12:05 - 2017-09-09 12:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-09-07 13:14 - 2017-09-09 22:08 - 000000000 ____D C:\AdwCleaner
2017-09-07 11:35 - 2017-09-09 22:28 - 000000000 ____D C:\FRST
2017-09-07 11:23 - 2017-09-07 11:24 - 000000000 ____D C:\ProgramData\TEMP
2017-09-07 11:22 - 2017-09-07 11:22 - 000000000 ____D C:\ProgramData\Simply Super Software
2017-09-06 23:07 - 2017-09-09 19:31 - 000221632 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-09-06 23:07 - 2017-09-09 19:31 - 000075712 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-09-06 23:07 - 2017-09-09 19:31 - 000040352 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-09-06 23:07 - 2017-09-06 23:07 - 000166848 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-09-06 23:07 - 2017-09-06 23:07 - 000002099 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-09-06 23:07 - 2017-09-06 23:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-09-06 23:07 - 2017-08-24 11:27 - 000059904 _____ C:\WINDOWS\system32\Drivers\mbae.sys
2017-09-06 23:06 - 2017-09-09 21:23 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-09-06 23:06 - 2017-09-06 23:06 - 000000000 ____D C:\Program Files\Malwarebytes
2017-09-06 12:29 - 2017-09-06 12:29 - 000043336 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2017-09-06 12:29 - 2017-09-06 12:29 - 000035432 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2017-09-06 12:29 - 2017-09-06 12:29 - 000035408 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2017-09-06 12:29 - 2017-09-06 12:29 - 000035408 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 020504064 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 020373408 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 013841408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 011870208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 006761568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 006728192 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 006269440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 005961728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 005862816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 005820984 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 005808640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 005721600 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 004417024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 004213656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 004056064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 003464704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 003447296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002956288 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 002671616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002424024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002259768 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002211840 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002165752 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002122240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002081184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 002040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 002023832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 001972128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 001854832 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001831936 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001585152 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 001536512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001513984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001377280 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msjet40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001291776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001244160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 001208320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001195760 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001156608 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000988168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000967584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000962048 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000952832 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000892928 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000877056 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000866816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswdat10.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000866808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000864248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000844800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000805816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000798208 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000777400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000760832 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000755616 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000750496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000698384 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000665600 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000661504 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2017-08-19 11:14 - 2017-08-19 11:14 - 000641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswstr10.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000616448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrepl40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000610584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000597920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000586752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000582560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000572320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsvcs.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000551200 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000547328 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000518144 _____ C:\WINDOWS\system32\msjetoledb40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxbde40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000440184 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000435712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000434592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2017-08-19 11:14 - 2017-08-19 11:14 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000414296 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000406544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000404992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspbde40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000359552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000358816 _____ (Microsoft Corporation) C:\WINDOWS\system32\halmacpi.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000358816 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000349600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrd3x40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\msexcl40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000338944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Display.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrd2x40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\msjtes40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000280472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000277432 _____ (Microsoft Corporation) C:\WINDOWS\system32\shlwapi.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000273312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstext40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msltus40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000239008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000216504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000176024 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000173984 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000173104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000168864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2017-08-19 11:14 - 2017-08-19 11:14 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msjint40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\qasf.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000133904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdeploy.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000100232 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000096648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000095648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000090464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\msjter40.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ofdeploy.exe
2017-08-19 11:14 - 2017-08-19 11:14 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000060312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\DmApiSetExtImplDesktop.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2017-08-19 11:14 - 2017-08-19 11:14 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2017-08-19 11:14 - 2017-08-19 11:14 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\IpNatHlpClient.dll
2017-08-19 11:09 - 2017-08-19 10:19 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2017-08-19 11:09 - 2017-03-17 22:45 - 005739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2017-08-19 11:09 - 2017-03-17 22:43 - 002629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2017-08-19 11:09 - 2017-03-17 22:35 - 005484544 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2017-08-19 11:08 - 2017-08-19 11:08 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2017-08-19 11:06 - 2017-08-19 11:06 - 000000000 ____D C:\WINDOWS\system32\XPSViewer
2017-08-19 11:06 - 2017-08-19 11:06 - 000000000 ____D C:\WINDOWS\system32\msmq
2017-08-19 11:06 - 2017-08-19 11:06 - 000000000 ____D C:\WINDOWS\system32\BestPractices
2017-08-19 11:06 - 2017-08-19 11:06 - 000000000 ____D C:\Program Files\Reference Assemblies
2017-08-19 11:06 - 2017-08-19 11:06 - 000000000 ____D C:\inetpub
2017-08-19 11:06 - 2017-08-19 10:32 - 000000000 ____D C:\Program Files\MSBuild
2017-08-19 11:05 - 2017-02-10 12:21 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-08-19 11:05 - 2017-02-10 12:21 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-08-19 11:05 - 2017-02-10 12:21 - 000035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-08-19 10:54 - 2017-08-19 10:54 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-08-19 10:50 - 2017-08-19 10:50 - 000000020 ___SH C:\Users\User\ntuser.ini
2017-08-19 10:46 - 2017-08-19 10:48 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2017-08-19 10:46 - 2017-08-19 10:48 - 000011433 _____ C:\WINDOWS\diagerr.xml
2017-08-19 10:40 - 2017-09-09 22:11 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-08-19 10:31 - 2017-08-19 10:31 - 000001487 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-08-19 10:30 - 2017-08-19 10:30 - 000000000 ____D C:\ProgramData\USOShared
2017-08-19 10:25 - 2017-08-19 10:25 - 000000000 ____D C:\Program Files\Common Files\SpeechEngines
2017-08-19 10:24 - 2017-08-19 10:24 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-08-19 10:22 - 2017-08-19 10:37 - 000000000 ____D C:\Users\DefaultAppPool
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\Vorlagen
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\Startmenü
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\Netzwerkumgebung
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\Lokale Einstellungen
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\Eigene Dateien
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\Druckumgebung
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\User\Anwendungsdaten
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-08-19 10:22 - 2017-08-19 10:22 - 000000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2017-08-19 10:21 - 2017-09-04 15:28 - 002124044 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-08-19 10:21 - 2017-08-29 18:51 - 000009652 _____ C:\WINDOWS\BRRBCOM.INI
2017-08-19 10:21 - 2017-08-19 10:25 - 000000000 ____D C:\ProgramData\Brother
2017-08-19 10:21 - 2017-08-19 10:21 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2017-08-19 10:20 - 2017-08-19 10:25 - 000000000 ____D C:\Program Files\Realtek
2017-08-19 10:20 - 2017-08-19 10:20 - 000000000 ____D C:\WINDOWS\system32\RTCOM
2017-08-19 10:19 - 2017-09-09 20:13 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-08-19 10:19 - 2017-09-07 13:22 - 000388672 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-08-18 09:49 - 2017-09-04 19:35 - 000000000 ___DC C:\WINDOWS\Panther
2017-08-15 16:53 - 2017-08-15 16:53 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2017-08-14 22:53 - 2017-08-14 23:07 - 000055160 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
2017-08-14 15:28 - 2017-08-14 15:28 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avusbflt_01011.Wdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-09-09 22:10 - 2017-03-18 08:02 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2017-09-09 19:30 - 2012-05-10 09:45 - 000000000 ____D C:\Program Files\Adobe
2017-09-09 19:09 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-09-09 18:24 - 2013-05-10 16:13 - 000000000 ____D C:\Program Files\Java
2017-09-09 18:17 - 2017-03-11 11:55 - 000000000 ____D C:\ProgramData\Package Cache
2017-09-09 18:08 - 2012-05-10 09:45 - 000000000 ____D C:\Program Files\Common Files\Adobe
2017-09-09 17:20 - 2016-03-05 10:54 - 000000000 ___RD C:\Users\User\iCloudDrive
2017-09-09 12:06 - 2017-05-12 11:19 - 000000000 ____D C:\Program Files\Dropbox
2017-09-09 11:57 - 2015-10-15 10:15 - 000002425 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-09-09 11:57 - 2015-10-15 10:15 - 000000000 ___RD C:\Users\User\OneDrive
2017-09-08 21:18 - 2017-03-18 20:21 - 000000000 ____D C:\WINDOWS\INF
2017-09-08 20:46 - 2017-03-18 20:23 - 000000000 ___HD C:\Program Files\WindowsApps
2017-09-05 22:30 - 2015-10-27 16:17 - 000001726 _____ C:\WINDOWS\Sandboxie.ini
2017-09-04 19:35 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-09-04 17:11 - 2012-08-15 19:36 - 000094344 _____ C:\WINDOWS\system32\GDIPFONTCACHEV1.DAT
2017-09-04 15:28 - 2017-03-19 10:57 - 000912932 _____ C:\WINDOWS\system32\perfh007.dat
2017-09-04 15:28 - 2017-03-19 10:57 - 000201602 _____ C:\WINDOWS\system32\perfc007.dat
2017-09-04 15:21 - 2017-04-24 22:10 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-09-04 15:21 - 2012-08-13 16:02 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-08-29 10:38 - 2015-12-25 22:56 - 000002216 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-23 20:49 - 2016-11-19 12:02 - 000000000 ____D C:\Users\User\AppData\LocalLow\Mozilla
2017-08-23 17:55 - 2017-07-26 22:49 - 000000000 ____D C:\Program Files\CCleaner
2017-08-20 11:33 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\appcompat
2017-08-19 14:17 - 2017-03-18 20:14 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-08-19 14:12 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\Registration
2017-08-19 11:18 - 2017-03-18 20:23 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-08-19 11:16 - 2017-03-18 20:25 - 000000000 ____D C:\WINDOWS\Setup
2017-08-19 11:15 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2017-08-19 11:15 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-08-19 11:15 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-08-19 11:15 - 2017-03-18 20:23 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-08-19 11:10 - 2017-03-19 10:58 - 000000000 ____D C:\WINDOWS\OCR
2017-08-19 11:06 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\MUI
2017-08-19 11:06 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2017-08-19 11:06 - 2017-03-18 20:19 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2017-08-19 11:06 - 2017-03-18 20:19 - 000049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2017-08-19 11:06 - 2017-03-18 20:19 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2017-08-19 11:06 - 2017-03-18 20:19 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2017-08-19 11:06 - 2017-03-18 20:19 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2017-08-19 11:06 - 2017-03-18 20:19 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll
2017-08-19 11:06 - 2017-03-18 20:19 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000973312 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000611840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2017-08-19 11:06 - 2017-03-18 20:18 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2017-08-19 11:06 - 2017-03-18 20:18 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2017-08-19 11:06 - 2017-03-18 20:18 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2017-08-19 11:06 - 2017-03-18 20:18 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2017-08-19 11:06 - 2017-03-18 20:18 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2017-08-19 11:06 - 2017-03-18 20:18 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2017-08-19 11:06 - 2017-03-18 20:18 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2017-08-19 11:06 - 2017-03-18 20:18 - 000009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2017-08-19 10:51 - 2017-03-18 20:23 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-08-19 10:51 - 2015-09-10 06:22 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-08-19 10:49 - 2017-03-18 20:23 - 000000000 ____D C:\Program Files\Windows NT
2017-08-19 10:48 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-08-19 10:47 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\rescache
2017-08-19 10:45 - 2016-07-16 10:29 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-08-19 10:41 - 2015-10-15 08:26 - 000021628 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-08-19 10:40 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\Media
2017-08-19 10:39 - 2017-03-18 20:23 - 000000000 __RHD C:\Users\Public\Libraries
2017-08-19 10:32 - 2017-07-28 09:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2017-08-19 10:32 - 2017-07-26 22:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-08-19 10:32 - 2017-07-26 22:33 - 000000000 ____D C:\WINDOWS\system32\UNP
2017-08-19 10:32 - 2017-07-26 22:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ClamWin Antivirus
2017-08-19 10:32 - 2017-07-26 15:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2017-08-19 10:32 - 2017-06-12 23:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie
2017-08-19 10:32 - 2017-03-20 13:15 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MuseScore 2
2017-08-19 10:32 - 2016-12-05 14:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LEGO Company
2017-08-19 10:32 - 2016-08-07 12:16 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Photos Backup
2017-08-19 10:32 - 2016-04-23 14:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2017-08-19 10:32 - 2016-01-06 18:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2017-08-19 10:32 - 2016-01-06 18:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nuance PaperPort 12
2017-08-19 10:32 - 2015-10-30 17:10 - 000000000 ____D C:\WINDOWS\ShellNew
2017-08-19 10:32 - 2015-10-27 16:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nostale(DE)
2017-08-19 10:32 - 2015-10-27 16:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2017-08-19 10:32 - 2015-10-15 10:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2017-08-19 10:32 - 2015-09-21 22:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\tiptoi® Manager
2017-08-19 10:32 - 2015-04-09 12:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KakaoTalk
2017-08-19 10:32 - 2015-03-17 23:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2017-08-19 10:32 - 2015-01-13 18:28 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\tiptoi® Manager
2017-08-19 10:32 - 2015-01-01 16:42 - 000000000 ____D C:\WINDOWS\system32\vbox
2017-08-19 10:32 - 2014-10-13 19:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FOTOParadies
2017-08-19 10:32 - 2012-08-13 18:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2017-08-19 10:32 - 2012-08-13 16:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2017-08-19 10:32 - 2012-05-28 17:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AcerSystem
2017-08-19 10:32 - 2012-05-28 17:27 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2017-08-19 10:32 - 2012-05-10 09:37 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2017-08-19 10:32 - 2012-05-10 09:37 - 000000000 ____D C:\WINDOWS\ca
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\tr
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\th
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\sv
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\sl
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\sk
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\ru
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\ro
2017-08-19 10:32 - 2012-05-10 09:36 - 000000000 ____D C:\WINDOWS\pl
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\no
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\nl
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\it
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\hu
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\hr
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\he
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\fr
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\fi
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\es
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\en
2017-08-19 10:32 - 2012-05-10 09:35 - 000000000 ____D C:\WINDOWS\el
2017-08-19 10:32 - 2012-05-10 09:34 - 000000000 ____D C:\WINDOWS\de
2017-08-19 10:32 - 2012-05-10 09:34 - 000000000 ____D C:\WINDOWS\da
2017-08-19 10:32 - 2012-05-10 09:34 - 000000000 ____D C:\WINDOWS\cs
2017-08-19 10:32 - 2012-05-10 09:34 - 000000000 ____D C:\WINDOWS\bg
2017-08-19 10:32 - 2012-05-10 09:34 - 000000000 ____D C:\WINDOWS\ar
2017-08-19 10:32 - 2012-05-10 09:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-08-19 10:32 - 2012-05-10 09:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2017-08-19 10:30 - 2017-03-18 20:23 - 000000000 ____D C:\ProgramData\USOPrivate
2017-08-19 10:30 - 2017-03-18 20:23 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-08-19 10:26 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\spool
2017-08-19 10:26 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-08-19 10:26 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-08-19 10:26 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-08-19 10:26 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\system32\IME
2017-08-19 10:26 - 2017-03-18 20:23 - 000000000 ____D C:\WINDOWS\schemas
2017-08-19 10:26 - 2015-09-08 18:39 - 000000000 ___HD C:\WINDOWS\system32\CanonIJ Uninstaller Information
2017-08-19 10:25 - 2017-03-18 20:23 - 000000000 __SHD C:\Program Files\Windows Sidebar
2017-08-19 10:25 - 2017-03-18 20:23 - 000000000 ____D C:\Program Files\Common Files\System
2017-08-19 10:25 - 2017-03-18 20:23 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-08-19 10:25 - 2017-03-17 13:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-08-19 10:25 - 2012-05-10 09:18 - 000000000 ____D C:\Program Files\Intel
2017-08-19 10:25 - 2009-07-14 06:52 - 000000000 ____D C:\Program Files\Microsoft Games
2017-08-19 10:24 - 2016-03-17 14:32 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Oetinger
2017-08-19 10:24 - 2015-05-15 22:39 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2017-08-19 10:21 - 2017-03-18 08:02 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2017-08-15 18:04 - 2013-08-14 10:02 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-08-15 18:00 - 2012-08-13 16:02 - 137505280 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-08-15 17:50 - 2017-07-26 22:49 - 000001040 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-08-15 17:01 - 2015-08-13 18:31 - 000000000 ____D C:\Program Files\Common Files\AV
2017-08-15 17:01 - 2012-08-13 16:08 - 000000000 ____D C:\ProgramData\AVAST Software
2017-08-11 22:32 - 2016-04-10 17:00 - 000000000 ____D C:\Program Files\Fotor

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2017-04-02 17:09 - 2017-04-02 17:09 - 000003293 _____ () C:\Users\User\AppData\Local\recently-used.xbel
2012-11-23 22:33 - 2012-11-23 22:35 - 000007602 _____ () C:\Users\User\AppData\Local\resmon.resmoncfg

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-09-03 13:22

==================== Ende vom FRST.txt ============================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version: 20-08-2017
durchgeführt von User (09-09-2017 22:28:57)
Gestartet von D:\Users\User\Downloads
Microsoft Windows 10 Home Version 1703 (X86) (2017-08-19 08:50:02)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-402077633-641172795-4098644512-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-402077633-641172795-4098644512-503 - Limited - Disabled)
Gast (S-1-5-21-402077633-641172795-4098644512-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-402077633-641172795-4098644512-1002 - Limited - Enabled)
User (S-1-5-21-402077633-641172795-4098644512-1000 - Administrator - Enabled) => C:\Users\User

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Spybot - Search and Destroy (Disabled - Out of date) {A16C3F68-9280-E053-1818-342707FECF4D}
AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 16.04 (HKLM\...\{23170F69-40C1-2701-1604-000001000000}) (Version: 16.04.00.0 - Igor Pavlov)
Acer eRecovery Management (HKLM\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3505 - Acer Incorporated)
Acer Framework (HKLM\...\{8F1B6239-FEA0-450A-A950-B05276CE177C}) (Version: 3.00.5500 - Acer Incorporated)
Adobe Flash Player 26 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Amazon Kindle (HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\Amazon Kindle) (Version: 1.15.0.43061 - Amazon)
Apple Application Support (32-Bit) (HKLM\...\{D2FE6376-E549-4F63-A2C5-CA24DA035DE4}) (Version: 5.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2A2C8640-5402-428A-909A-0236CB2B77C7}) (Version: 10.3.2.3 - Apple Inc.)
Apple Software Update (HKLM\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.)
Brother MFL-Pro Suite MFC-J5320DW (HKLM\...\{7FC49664-DAA4-4E7C-ADD0-614ABB43691B}) (Version: 1.0.5.0 - Brother Industries, Ltd.)
Canon MX880 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX880_series) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 5.33 - Piriform)
D3DX10 (HKLM\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKLM\...\Dropbox) (Version: 34.4.20 - Dropbox, Inc.)
Dropbox Update Helper (HKLM\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.65.1 - Dropbox, Inc.) Hidden
Fotobuchexpress24 Bestellsoftware (HKLM\...\{7F13998B-A009-9901-3D6E-B1F524006F3F}) (Version: 3.2.43 - Saal Digital Fotoservice GmbH) Hidden
Fotobuchexpress24 Bestellsoftware (HKLM\...\Fotobuchexpress24) (Version: 3.2.43 - Saal Digital Fotoservice GmbH)
Fotogalerija Windows Live (HKLM\...\{E59969EA-3B5B-4B24-8B94-43842A7FBFE9}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (HKLM\...\{0EC0B576-90F9-43C3-8FAD-A4902DF4B8F4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (HKLM\...\{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (HKLM\...\{4736B0ED-F6A1-48EC-A1B7-C053027648F1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (HKLM\...\{CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (HKLM\...\{488F0347-C4A7-4374-91A7-30818BEDA710}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (HKLM\...\{CB66242D-12B1-4494-82D2-6F53A7E024A3}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKLM\...\Google Chrome) (Version: 60.0.3112.113 - Google Inc.)
Google Photos Backup (HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\Google Photos Backup) (Version: 1.1.2.13 - Google, Inc.)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
iCloud (HKLM\...\{AFA154E8-2D57-4789-AB2D-9761E6AC5988}) (Version: 6.2.3.17 - Apple Inc.)
Intel(R) Control Center (HKLM\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2418 - Intel Corporation)
iTunes (HKLM\...\{BE5DD9B6-9DF7-4163-A39E-E2141C7A7488}) (Version: 12.6.2.20 - Apple Inc.)
JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (HKLM\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
KakaoTalk (HKLM\...\KakaoTalk) (Version: 2.6.0.1591 - Daum Kakao Corp)
LEGO Digital Designer (HKLM\...\New LEGO Digital Designer) (Version:  - LEGO A/S)
Mesh Runtime (HKLM\...\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\OneDriveSetup.exe) (Version: 17.3.6966.0824 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Mozilla Firefox 55.0.3 (x86 de) (HKLM\...\Mozilla Firefox 55.0.3 (x86 de)) (Version: 55.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 55.0.3.6445 - Mozilla)
Mozilla Thunderbird 52.2.1 (x86 de) (HKLM\...\Mozilla Thunderbird 52.2.1 (x86 de)) (Version: 52.2.1 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MuseScore 2 (HKLM\...\{4F0E15EA-F64C-11E5-9992-E717EA7DB0C8}) (Version: 2.0.3 - Werner Schweer and Others)
NETGEAR WNA1000M Wireless USB 2.0 Adapter (HKLM\...\{DA4CCF2D-87DC-42AA-9BF4-5F4884B7A27B}) (Version: 1.01.10 - NETGEAR) Hidden
Nuance PaperPort 12 (HKLM\...\{2A770862-7142-4C77-8117-F933E4110A3F}) (Version: 12.1.0006 - Nuance Communications, Inc.)
Olchi-Kalender (HKLM\...\Olchi-Kalender) (Version:  - )
PaperPort Image Printer (HKLM\...\{6EF2FDAB-7FBF-4AB9-92CD-594BDDB6A56B}) (Version: 14.00.0000 - Nuance Communications, Inc.)
Poczta usługi Windows Live (HKLM\...\{64376910-1860-4CEF-8B34-AA5D205FC5F1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (HKLM\...\{7A9D47BA-6D50-4087-866F-0800D8B89383}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pošta Windows Live (HKLM\...\{7BA19818-F717-4DFB-BC11-FAF17B2B8AEE}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Raccolta foto di Windows Live (HKLM\...\{ED16B700-D91F-44B0-867C-7EB5253CA38D}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.37.1229.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6287 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.0.3 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.3 - VS Revo Group, Ltd.)
Sandboxie 5.20 (32-bit) (HKLM\...\Sandboxie) (Version: 5.20 - Sandboxie Holdings, LLC)
Skype™ 7.39 (HKLM\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.39.102 - Skype Technologies S.A.)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
tiptoi® Manager 3.1.6 (HKLM\...\9978-5763-2995-5228) (Version: 3.1.6 - Ravensburger AG)
Unity Web Player (HKU\S-1-5-21-402077633-641172795-4098644512-1000\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Welcome Center (HKLM\...\Acer Welcome Center) (Version: 1.02.3504 - Acer Incorporated)
Windows 10 Update and Privacy Settings (HKLM\...\{542CC2C2-ABAF-4604-8723-DA296AF74540}) (Version: 1.0.14.0 - Microsoft Corporation)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Συλλογή φωτογραφιών του Windows Live (HKLM\...\{C00C2A91-6CB3-483F-80B3-2958E29468F1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (HKLM\...\{E83DC314-C926-4214-AD58-147691D6FE9F}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (HKLM\...\{B63F0CE3-CCD0-490A-9A9C-E1A3B3A17137}) (Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (HKLM\...\{77F69CA1-E53D-4D77-8BA3-FA07606CC851}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (HKLM\...\{4444F27C-B1A8-464E-9486-4C37BAB39A09}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (HKLM\...\{CE929F09-3853-4180-BD90-30764BFF7136}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (HKLM\...\{0A4C4B29-5A9D-4910-A13C-B920D5758744}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (HKLM\...\{FBCA06D2-4642-4F33-B20A-A7AB3F0D2E69}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{144DF3B2-2402-47AE-9583-5A045929A8D4}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-402077633-641172795-4098644512-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.33.5\psuser.dll (Google Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ContextMenuHandlers1: [ClamWin] -> {65713842-C410-4f44-8383-BFE01A398C90} => C:\Program Files\ClamWin\bin\ExpShell.dll [2008-04-19] ()
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams.dll [2017-07-14] (Apple Inc.)
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files\Spybot - Search & Destroy 2\SDECon32.dll [2015-06-16] (Safer-Networking Ltd.)
ContextMenuHandlers1: [Winsome File Renamer] -> {413B25A4-3A7B-4A1D-887A-4DFC3856D7F7} =>  -> Keine Datei
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-21] (Malwarebytes)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ContextMenuHandlers4: [Winsome File Renamer] -> {413B25A4-3A7B-4A1D-887A-4DFC3856D7F7} =>  -> Keine Datei
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files\Dropbox\Client\DropboxExt.18.0.dll [2017-09-06] (Dropbox, Inc.)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} =>  -> Keine Datei
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll [2017-03-10] (Intel Corporation)
ContextMenuHandlers6: [ClamWin] -> {65713842-C410-4f44-8383-BFE01A398C90} => C:\Program Files\ClamWin\bin\ExpShell.dll [2008-04-19] ()
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-21] (Malwarebytes)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files\Spybot - Search & Destroy 2\SDECon32.dll [2015-06-16] (Safer-Networking Ltd.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {00044590-D022-4E98-B180-41BC67F08D8E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {00834DBB-69C5-49DE-9713-BF641CFE8157} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {0463E7DD-AEE4-42FA-A6EE-4E153525B88C} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {0D7D49F9-8628-4A1E-B1A2-BA3D220B8544} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {14B0EB7A-6A8C-4468-889B-5E3F4351C287} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-08-03] (Piriform Ltd)
Task: {151D0E78-BA2F-49C7-BF28-7E337F64A677} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {15D09901-DC9A-4589-BA9B-03E0C0DFF5F1} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {169005ED-1580-4D32-AEC0-EF12801CC7D8} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {19ABF37F-1CAA-4A9C-A5D2-61E5A8F83C62} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {19EDF2AE-0CE4-4CAE-A7F2-AE393F890055} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1B07EF3C-D013-4658-973F-6FB98114D5DD} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {1F8A2A34-5561-4455-BF1F-BF73101344DD} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {20F5A7DE-5D65-4722-984E-5742C1155B73} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {260FF0EA-9076-4D41-9894-C00EFD6112A1} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-402077633-641172795-4098644512-1000Core => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2016-08-07] (Google Inc.)
Task: {296CB533-8B10-4184-974D-1156612DCCA6} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2017-02-14] (Apple Inc.)
Task: {3D018940-1512-4E02-98D4-67C3E71E784C} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {4219E7BB-7362-46EF-BCA4-4B1D68683D99} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {4C825353-2EC8-4FD2-BE72-89D334CFF51C} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {4E43569A-83CC-4E25-83D0-3DF155E09FCC} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {4FAB5092-9657-4C2B-A35E-48971DF65448} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-08-08] (Adobe Systems Incorporated)
Task: {512EF876-E342-48A3-8D27-7D1A70CE9CED} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5268131F-CE12-451D-811C-5911CC16D175} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-12-25] (Google Inc.)
Task: {6AECD5E7-A35A-42D7-9034-4A229C6241F7} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6CEA031E-2F3F-4D12-9B0D-65F9B6AEF609} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {6EA55929-7243-42CD-9AA0-CA18702EFFE8} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {7A57501C-3D84-4E9F-80F2-A884700A5CFC} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {7BF93DFA-4AB5-4827-A94F-9804A7A4FFF2} - System32\Tasks\{08D695C1-AA1B-40BD-BADF-CF782FD3F3C7} => C:\Windows\system32\pcalua.exe -a "C:\program files\ncsoft\launcher\NCLauncher.exe" -c /Uninstall=Aion
Task: {7C58F0E5-5543-4A0F-8D36-4A6108BE880E} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {8929DFA0-82E3-4408-A839-82350C799D8C} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {92CCE050-45BF-492D-BBE2-A54769A757DF} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2017-08-15] (Microsoft Corporation)
Task: {93F4C38B-BF53-4200-A6DE-CAA61AE94F44} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-402077633-641172795-4098644512-1000UA => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2016-08-07] (Google Inc.)
Task: {99AC8C97-1DC8-4290-8CF3-4ECB5B31BE99} - System32\Tasks\SafeZone scheduled Autoupdate 1458767861 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe
Task: {9B116486-421B-4D5B-8D21-9BF559481122} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {A1C25504-AADE-4D91-813A-559B345EAAB7} - System32\Tasks\{3EAE2372-67CE-458E-9F90-3D35C5BB237E} => C:\Program Files\NosTale(DE)\nostale.exe
Task: {A46EED9A-FAC6-41E3-958F-727ED136818A} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {ABC8566D-64A9-4A94-A542-4160F48A1383} - System32\Tasks\{34B66F9B-0277-42BC-8B48-C2D343AD5EF3} => C:\Program Files\NosTale(DE)\nostale.exe
Task: {AE591A9F-5B75-4F5C-9269-5879351CA073} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B649E17E-07B4-4A53-801E-DE0226923A7D} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {B77749BF-7E94-4C02-B339-C44FE0B71112} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
Task: {BBC5F601-0A47-424F-9DA1-5FFD04BFCFCE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-12-25] (Google Inc.)
Task: {C2C0DE01-1447-44D9-BCAD-A4A5A493FA97} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {C3558129-F667-4091-AA81-578FF63C35E6} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {D20D8C78-E175-4A30-B452-B1640FDF0ECC} - System32\Tasks\UALU notificatin => C:\Program Files\Acer\Acer Updater\UALU.exe [2016-06-08] (Acer Incorporated)
Task: {D3ABEF2F-9233-40AA-A3A4-5E33DB84BCAE} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {D52A1756-C56E-4063-A553-F79EB0C5EEB9} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe [2015-06-16] (Safer-Networking Ltd.)
Task: {D7B30254-7AE1-4406-9252-C3F4B1EC47AF} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {D8A74BDD-D64D-423E-8524-37EF6C2130D0} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E5EAE87D-2B2C-4708-B82A-D68D8938B6AD} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files\Dropbox\Update\DropboxUpdate.exe [2017-05-12] (Dropbox, Inc.)
Task: {EA498E2C-9A2F-4BA5-B177-806F3225113C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F37DAB72-51C2-4398-90B1-920AE35F7A01} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files\Dropbox\Update\DropboxUpdate.exe [2017-05-12] (Dropbox, Inc.)
Task: {F5677722-DCDD-4AC3-8C06-45F81DEB62E0} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FC12E9A5-E9D4-4961-8DE2-59EEBD0705D2} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FC2B1D8D-82E8-479C-AA3A-48A14C48E6B7} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {FD732597-7D7F-44CD-A89F-D62A6D329DDE} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files\Dropbox\Update\DropboxUpdate.exe

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-01-06 18:43 - 2009-02-27 17:38 - 000139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2015-10-15 10:20 - 2014-05-13 13:04 - 000416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2015-10-15 10:20 - 2012-08-23 11:38 - 000574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2015-10-15 10:20 - 2014-05-13 12:04 - 000167768 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2015-10-15 10:20 - 2014-05-13 12:04 - 000109400 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2012-05-10 09:21 - 2011-06-14 02:59 - 000030080 _____ () C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
2017-08-19 10:25 - 2017-08-19 10:25 - 000038312 _____ () C:\WINDOWS\assembly\GAC_MSIL\Framework.Model.Controller\3.0.5500.0__14bcaafdb44b5951\Framework.Model.Controller.dll
2017-08-19 10:25 - 2017-08-19 10:25 - 000026040 _____ () C:\WINDOWS\assembly\GAC_MSIL\Framework.Model.ControllerInterface\3.0.5500.0__d842b71b4d6ed079\Framework.Model.ControllerInterface.dll
2017-08-19 10:25 - 2017-08-19 10:25 - 000066960 _____ () C:\WINDOWS\assembly\GAC_MSIL\Framework.Library\3.0.5500.0__3036420f80dd6947\Framework.Library.dll
2017-08-19 10:25 - 2017-08-19 10:25 - 000034192 _____ () C:\WINDOWS\assembly\GAC_MSIL\Framework.Host\3.0.5500.0__672b450de5a7e94a\Framework.Host.dll
2017-08-19 10:25 - 2017-08-19 10:25 - 000021920 _____ () C:\WINDOWS\assembly\GAC_MSIL\Framework.PluginInterface\3.0.5500.0__9ecdf03bb2054f94\Framework.PluginInterface.dll
2016-09-01 18:13 - 2016-09-01 18:13 - 000080184 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-07-13 20:51 - 2017-07-13 20:51 - 001041720 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-04-23 14:39 - 2016-03-29 00:06 - 000110952 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\zlib1.dll
2016-04-23 14:39 - 2016-03-29 00:06 - 000253800 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\collector.dll
2016-04-23 14:39 - 2016-03-29 00:06 - 000295272 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\stat.dll
2016-04-23 14:39 - 2016-03-29 00:06 - 000044392 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll
2016-04-23 14:39 - 2016-03-29 00:06 - 000104296 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll
2016-04-23 14:39 - 2016-03-29 00:06 - 000020328 _____ () C:\Program Files\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll
2017-03-18 20:19 - 2017-03-18 20:19 - 000116824 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-07-26 22:09 - 2008-04-19 17:35 - 000081920 _____ () C:\Program Files\ClamWin\bin\ExpShell.dll
2017-03-18 20:19 - 2017-03-19 10:58 - 001456128 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-08-23 17:53 - 2017-08-23 17:54 - 000064512 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x86__kzf8qxf38zg5c\SkypeHost.exe
2017-08-23 17:53 - 2017-08-23 17:54 - 000171008 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x86__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-08-23 17:53 - 2017-08-23 17:54 - 027734016 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x86__kzf8qxf38zg5c\SkyWrap.dll
2017-08-23 17:53 - 2017-08-23 17:54 - 001660928 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x86__kzf8qxf38zg5c\skypert.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:CB0AACC9 [140]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:04 - 2017-08-11 13:58 - 000000848 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-402077633-641172795-4098644512-1000\Control Panel\Desktop\\Wallpaper -> D:\Users\User\Pictures\2017.07.04.-24. England\Retro Cam Sommer 2017\DSCF0385.JPG
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==


==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{894F9431-B09D-4C76-8CD6-5DAECE3719E6}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{30386A47-D059-49A2-B8D0-62FE36B01D07}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{7E50E7B5-4F65-4D18-9A25-B7D6CC06A265}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{2FD640AA-EBCD-49B1-AF10-97054E94477F}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [UDP Query User{7AE72AB3-3AD4-4208-B2D4-4EBC0D503C64}C:\program files\google\chrome\application\chrome.exe] => (Allow) C:\program files\google\chrome\application\chrome.exe
FirewallRules: [TCP Query User{154CA141-B98A-4A11-8D64-66D97C97CD4F}C:\program files\google\chrome\application\chrome.exe] => (Allow) C:\program files\google\chrome\application\chrome.exe
FirewallRules: [{585E86AB-C2EC-40D1-A23C-90C16E8A300D}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{BDF9A6D9-97FE-4AE8-97E6-AA11D4956051}] => (Allow) C:\Program Files\Dropbox\Client\Dropbox.exe
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Wiederherstellungspunkte =========================

19-08-2017 14:16:42 Windows Update
28-08-2017 11:42:03 Geplanter Prüfpunkt
05-09-2017 23:02:10 Geplanter Prüfpunkt
07-09-2017 13:12:40 Säuberung (Spybot - Search & Destroy 2.6, Administratorrechte)
08-09-2017 20:47:03 Removed Avira Software Updater
09-09-2017 18:14:11 Revo Uninstaller's restore point - Avira
09-09-2017 18:16:36 Revo Uninstaller's restore point - Avira
09-09-2017 18:19:29 Revo Uninstaller's restore point - Java 8 Update 101
09-09-2017 18:19:45 Removed Java 8 Update 101
09-09-2017 18:21:25 Revo Uninstaller's restore point - Java 8 Update 121
09-09-2017 18:21:39 Removed Java 8 Update 121
09-09-2017 18:23:15 Revo Uninstaller's restore point - Java 8 Update 141
09-09-2017 18:23:51 Removed Java 8 Update 141
09-09-2017 19:10:10 Revo Uninstaller's restore point - Canon MX880 series MP Drivers
09-09-2017 22:16:02 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/09/2017 10:16:16 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (09/09/2017 07:13:55 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "c:\program files\brother\brmfl14e\netscn\dpinstx64.exe".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (09/09/2017 07:10:10 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (09/09/2017 06:25:38 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "QueryFullProcessImageNameW" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070006, Das Handle ist ungültig.
.


Vorgang:
   Asynchroner Vorgang wird ausgeführt

Kontext:
   Aktueller Status: DoSnapshotSet

Error: (09/09/2017 06:25:21 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (09/09/2017 06:23:52 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (09/09/2017 06:23:15 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (09/09/2017 06:21:41 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (09/09/2017 06:21:26 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (09/09/2017 06:19:46 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.


Systemfehler:
=============
Error: (09/09/2017 10:11:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SDWSCService" wurde aufgrund folgenden Fehlers nicht gestartet: 
Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.

Error: (09/09/2017 10:11:04 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058 = Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.

Error: (09/09/2017 10:10:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CldFlt" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%50 = Die Anforderung wird nicht unterstützt.

Error: (09/09/2017 10:09:42 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Apple Mobile Device" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/09/2017 10:09:42 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Empowering Technology Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/09/2017 10:09:42 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Digital Wave Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/09/2017 10:09:41 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Message Queuing" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/09/2017 10:09:41 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Sandboxie Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/09/2017 10:09:41 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "DbxSvc" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/09/2017 10:09:41 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Management and Security Application User Notification Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


CodeIntegrity:
===================================
  Date: 2017-09-09 22:28:35.135
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-09 22:28:35.133
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-09 22:11:24.379
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-09 22:11:24.343
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-09 22:11:09.257
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-09 21:27:08.888
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-09 21:27:08.884
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-09 21:27:08.881
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-09 21:27:08.872
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-09-09 21:27:08.868
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) CPU G860 @ 3.00GHz
Prozentuale Nutzung des RAM: 46%
Installierter physikalischer RAM: 3015 MB
Verfügbarer physikalischer RAM: 1619.77 MB
Summe virtueller Speicher: 6087 MB
Verfügbarer virtueller Speicher: 4741.03 MB

==================== Laufwerke ================================

Drive c: (System) (Fixed) (Total:454.16 GB) (Free:366.34 GB) NTFS
Drive d: (Daten) (Fixed) (Total:445.76 GB) (Free:242.68 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive f: (RECOVER) (Fixed) (Total:19.99 GB) (Free:10.68 GB) FAT32

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: CE74067F)
Partition 1: (Active) - (Size=445.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=20 GB) - (Type=OF Extended)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: A752C28A)
Partition 1: (Not Active) - (Size=11.5 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=454.2 GB) - (Type=07 NTFS)

==================== Ende vom Addition.txt ============================
         

FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

C:\Program Files\Spybot - Search & Destroy 2
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ACHTUNG
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
CHR Extension: (Avira Password Manager) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2017-09-07]
CHR Extension: (Avira Safe Shopping) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2017-09-08]
CHR Extension: (Avira Browserschutz) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2017-09-07]
Task: {00044590-D022-4E98-B180-41BC67F08D8E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {0463E7DD-AEE4-42FA-A6EE-4E153525B88C} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {151D0E78-BA2F-49C7-BF28-7E337F64A677} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {15D09901-DC9A-4589-BA9B-03E0C0DFF5F1} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {20F5A7DE-5D65-4722-984E-5742C1155B73} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {4E43569A-83CC-4E25-83D0-3DF155E09FCC} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {6CEA031E-2F3F-4D12-9B0D-65F9B6AEF609} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {7A57501C-3D84-4E9F-80F2-A884700A5CFC} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {7C58F0E5-5543-4A0F-8D36-4A6108BE880E} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {C2C0DE01-1447-44D9-BCAD-A4A5A493FA97} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {C3558129-F667-4091-AA81-578FF63C35E6} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
emptytemp:
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Entferungsergebnis von Farbar Recovery Scan Tool (x86) Version: 20-08-2017
durchgeführt von User (09-09-2017 23:02:13) Run:1
Gestartet von D:\Users\User\Desktop
Geladene Profile: User (Verfügbare Profile: User & DefaultAppPool)
Start-Modus: Normal

==============================================

fixlist Inhalt:
*****************
C:\Program Files\Spybot - Search & Destroy 2
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ACHTUNG
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
CHR Extension: (Avira Password Manager) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2017-09-07]
CHR Extension: (Avira Safe Shopping) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2017-09-08]
CHR Extension: (Avira Browserschutz) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2017-09-07]
Task: {00044590-D022-4E98-B180-41BC67F08D8E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {0463E7DD-AEE4-42FA-A6EE-4E153525B88C} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {151D0E78-BA2F-49C7-BF28-7E337F64A677} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {15D09901-DC9A-4589-BA9B-03E0C0DFF5F1} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {20F5A7DE-5D65-4722-984E-5742C1155B73} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {4E43569A-83CC-4E25-83D0-3DF155E09FCC} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {6CEA031E-2F3F-4D12-9B0D-65F9B6AEF609} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {7A57501C-3D84-4E9F-80F2-A884700A5CFC} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {7C58F0E5-5543-4A0F-8D36-4A6108BE880E} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {C2C0DE01-1447-44D9-BCAD-A4A5A493FA97} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {C3558129-F667-4091-AA81-578FF63C35E6} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
emptytemp:
         
*****************


"C:\Program Files\Spybot - Search & Destroy 2" Ordner verschieben:

Konnte nicht verschoben werden "C:\Program Files\Spybot - Search & Destroy 2" => ist geplant bei Neustart verschoben zu werden.

HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ACHTUNG => erfolgreich wiederhergestellt
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SDWinLogon => Schlüssel erfolgreich entfernt
CHR Extension: (Avira Password Manager) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2017-09-07] => Fehler: Kein automatisierter Fix für diesen Eintrag gefunden.
CHR Extension: (Avira Safe Shopping) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2017-09-08] => Fehler: Kein automatisierter Fix für diesen Eintrag gefunden.
CHR Extension: (Avira Browserschutz) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2017-09-07] => Fehler: Kein automatisierter Fix für diesen Eintrag gefunden.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{00044590-D022-4E98-B180-41BC67F08D8E} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{00044590-D022-4E98-B180-41BC67F08D8E} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0463E7DD-AEE4-42FA-A6EE-4E153525B88C} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0463E7DD-AEE4-42FA-A6EE-4E153525B88C} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{151D0E78-BA2F-49C7-BF28-7E337F64A677} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{151D0E78-BA2F-49C7-BF28-7E337F64A677} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{15D09901-DC9A-4589-BA9B-03E0C0DFF5F1} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{15D09901-DC9A-4589-BA9B-03E0C0DFF5F1} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{20F5A7DE-5D65-4722-984E-5742C1155B73} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{20F5A7DE-5D65-4722-984E-5742C1155B73} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4E43569A-83CC-4E25-83D0-3DF155E09FCC} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4E43569A-83CC-4E25-83D0-3DF155E09FCC} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6CEA031E-2F3F-4D12-9B0D-65F9B6AEF609} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6CEA031E-2F3F-4D12-9B0D-65F9B6AEF609} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7A57501C-3D84-4E9F-80F2-A884700A5CFC} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7A57501C-3D84-4E9F-80F2-A884700A5CFC} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7C58F0E5-5543-4A0F-8D36-4A6108BE880E} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7C58F0E5-5543-4A0F-8D36-4A6108BE880E} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C2C0DE01-1447-44D9-BCAD-A4A5A493FA97} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C2C0DE01-1447-44D9-BCAD-A4A5A493FA97} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C3558129-F667-4091-AA81-578FF63C35E6} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C3558129-F667-4091-AA81-578FF63C35E6} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd => Schlüssel erfolgreich entfernt

=========== EmptyTemp: ==========

BITS transfer queue => 7888896 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 37918468 B
Java, Flash, Steam htmlcache => 1647 B
Windows/system/drivers => 1180213 B
Edge => 89957 B
Chrome => 169312571 B
Firefox => 385527869 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 6180 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
LocalService => 0 B
NetworkService => 0 B
User => 22161975 B
DefaultAppPool => 6180 B

RecycleBin => 1232005826 B
EmptyTemp: => 1.7 GB temporäre Dateien entfernt.

================================

Ergebnis der geplanten Datei-Verschiebungen (Start-Modus: Normal) (Datum&Uhrzeit: 09-09-2017 23:05:07)

C:\Program Files\Spybot - Search & Destroy 2 => ist erfolgreich verschoben

==== Ende vom Fixlog 23:05:07 ====
         

Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte:


1. Schritt: Malwarebytes Version 3

Downloade Dir bitte Malwarebytes Anti-Malware 3

• Installiere das Programm in den vorgegebenen Pfad.
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scan, wähle den Bedrohungs-Scan aus und klicke auf Scan starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Ausgewählte Elemente in die Quarantäne verschieben.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM nach dem Neustart, klicke auf Berichte.
• Wähle den neuesten Scan-Bericht aus, klicke auf Bericht anzeigen und dann auf Export.
• Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

2. Schritt: ESET

Downloade Dir bitte ESET Online Scanner (Bebilderte Anleitung)

• Starte die Installationsdatei.
• Akzeptiere die Nutzungsbedingungen.
• Wähle Erkennung evtl. unerwünschter Anwendungen aktivieren aus und klicke auf Scannen.
• Zuerst werden die notwendigen Signaturen heruntergeladen, anschließend startet ESET automatisch den Suchlauf.
• Am Ende des Suchlaufs werden gegebenenfalls die gefundenen Elemente aufgelistet.
• Schließe den ESET Online Scanner rechts oben [ X ] und klicke anschließend auf Schließen.
• Drücke bitte die Tastenkombination WIN+R zum Ausführen und kopiere folgenden Text in die Zeile und drücke im Anschluss auf OK:
  

  notepad "%tmp%\log.txt"
           

• Kopiere den gesamten Text mittels STRG+A und STRG+C hier in deine Antwort in CODE-Tags

3. Schritt: SecurityCheck

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.