Vermutlich infiziertes Dokument geöffnet - mehrere Stunden kein Zugriff auf E-Mail Accounts

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 03-10-2017 01
durchgeführt von Lasse (Administrator) auf LASSE-PC (05-10-2017 00:32:02)
Gestartet von C:\Users\Lasse\Desktop
Geladene Profile: Lasse & postgres (Verfügbare Profile: Lasse & postgres & DefaultAppPool)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\pg_ctl.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(CyberGhost S.A.) C:\Program Files\CyberGhost 6\CyberGhost.Service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avpui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Octoshape ApS) C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
(Spotify Ltd) C:\Users\Lasse\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(ROCCAT GmbH Co., Ltd.) C:\Program Files (x86)\ROCCAT\Ryos Keyboard\Ryos MK Monitor.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
() C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE
() C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7611608 2014-05-27] (Realtek Semiconductor)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM-x32\...\Run: [USB3MON] => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-08-28] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [CheckNDISPort54ac04] => C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe [474504 2015-09-16] ()
HKLM-x32\...\Run: [CancelAutoPlay_df] => C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe [446344 2015-09-16] ()
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [217736 2017-04-19] (Geek Software GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Run: [Octoshape Streaming Services] => C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [500016 2014-08-01] (Octoshape ApS)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Run: [Spotify] => C:\Users\Lasse\AppData\Roaming\Spotify\Spotify.exe [20803184 2017-10-04] (Spotify Ltd)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Run: [Spotify Web Helper] => C:\Users\Lasse\AppData\Roaming\Spotify\SpotifyWebHelper.exe [777840 2017-10-04] (Spotify Ltd)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\MountPoints2: {8c4e4d7b-1c66-11e7-b759-74d435fed1e4} - "G:\AutoRun.exe" 
HKU\S-1-5-21-2533615570-3755426884-238519182-1002\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2016-07-16] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ryos Driver.lnk [2015-06-10]
ShortcutTarget: Ryos Driver.lnk -> C:\Program Files (x86)\ROCCAT\Ryos Keyboard\Ryos MK Monitor.exe (ROCCAT GmbH Co., Ltd.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2017-05-21]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS)
Startup: C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2017-08-13]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.8.1
Tcpip\..\Interfaces\{2fecfc21-6e41-481d-aecf-b1d0260b00b8}: [DhcpNameServer] 192.168.8.1

Internet Explorer:
==================
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
BHO: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-12-13] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-12-13] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-09-19] (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-09-19] (Oracle Corporation)
Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-05-17] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\wgk7bu3s.default [2017-09-26]
FF user.js: detected! => C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\wgk7bu3s.default\user.js [2015-07-21]
FF Extension: (Adblock Plus) - C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\wgk7bu3s.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-05-30]
FF Extension: (Site Deployment Checker) - C:\Program Files (x86)\Mozilla Firefox\browser\features\deployment-checker@mozilla.org.xpi [2017-03-24] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi [2017-07-25]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_26_0_0_151.dll [2017-08-23] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~4\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-23] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-09-19] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-09-19] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-19] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2015-09-09] (Nero AG)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2533615570-3755426884-238519182-1000: @octoshape.com/Octoshape Streaming Services,version=1.0 -> C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1702150-0-npoctoshape.dll [2017-02-15] (Octoshape ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2016-07-19] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Lasse\AppData\Roaming\mozilla\plugins\npoctoshape.dll [2016-02-16] (Octoshape ApS)

Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.mystartsearch.com/?type=hp&ts=1429129023&from=cor&uid=CrucialXCT256MX100SSD1_14460DD089940DD08994
CHR StartupUrls: Default -> "hxxps://www.google.de/"
CHR NewTab: Default ->  Active:"chrome-extension://llaficoajjainaijghjlofdfmbjpebpa/newtab.html"
CHR Profile: C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default [2017-10-05]
CHR Extension: (Google Präsentationen) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-10]
CHR Extension: (Google Docs) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-10]
CHR Extension: (Google Drive) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Pushbullet) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2017-10-03]
CHR Extension: (Steam Inventory Helper) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2017-10-03]
CHR Extension: (Google-Suche) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Tampermonkey) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2017-09-25]
CHR Extension: (Google Tabellen) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-10]
CHR Extension: (Google Docs Offline) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-09-22]
CHR Extension: (Speed Dial [FVD] - New Tab Page, 3D, Sync...) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\llaficoajjainaijghjlofdfmbjpebpa [2017-08-27]
CHR Extension: (Dingit Infinite HD App) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\llnhnfikffkjbdnfallfpgikamegbbag [2016-01-29]
CHR Extension: (Ghostery) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2017-09-01]
CHR Extension: (LocalChromecast Player) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmladpigjlinmngadjgfogblnmddndcp [2015-06-25]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Enhanced Steam) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\okadibdjfemgnhjiembecghcbfknbfhg [2017-09-01]
CHR Extension: (Google Mail) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-10]
CHR Extension: (Chrome Media Router) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-27]
CHR Extension: (OPDeals - Find the best deals on OPSkins.com) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnmifmjgoddkicidifnaenlagjcofomn [2016-06-30]
CHR HKLM\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AVP17.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe [241544 2016-06-28] (AO Kaspersky Lab)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1533448 2017-09-16] ()
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [Datei ist nicht signiert]
R2 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [232528 2017-08-31] (CyberGhost S.A.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2014-10-03] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [156960 2015-02-25] (Intel Corporation)
S3 klvssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\vssbridge64.exe [77328 2016-06-28] (AO Kaspersky Lab)
R2 KSDE1.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe [241544 2016-06-28] (AO Kaspersky Lab)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2120712 2016-06-08] (Electronic Arts)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1450824 2017-09-10] (Overwolf LTD)
R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [217736 2017-04-19] (Geek Software GmbH)
R2 postgresql-8.4; c:\postgreSQL\bin\pg_ctl.exe [66048 2014-02-18] (PostgreSQL Global Development Group) [Datei ist nicht signiert]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-03-04] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [238936 2016-06-10] (AO Kaspersky Lab)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [27552 2017-06-03] (REALiX(tm))
R0 kl1; C:\WINDOWS\System32\DRIVERS\kl1.sys [554416 2016-06-02] (AO Kaspersky Lab)
R0 klbackupdisk; C:\WINDOWS\System32\DRIVERS\klbackupdisk.sys [63920 2016-06-07] (AO Kaspersky Lab)
R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [86352 2016-06-15] (AO Kaspersky Lab)
R2 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab)
S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [28792 2016-03-31] (AO Kaspersky Lab)
R3 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [197312 2017-07-25] (AO Kaspersky Lab)
R1 klhk; C:\WINDOWS\System32\drivers\klhk.sys [520152 2017-07-25] (AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP17.0.0\Bases\klids.sys [186696 2017-10-05] (AO Kaspersky Lab)
R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1021624 2017-07-25] (AO Kaspersky Lab)
R1 KLIM6; C:\WINDOWS\system32\DRIVERS\klim6.sys [57424 2017-03-30] (AO Kaspersky Lab)
R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [52136 2016-05-19] (AO Kaspersky Lab)
R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [45488 2016-05-31] (AO Kaspersky Lab)
R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [52152 2016-06-07] (The OpenVPN Project)
R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [229288 2017-06-28] (AO Kaspersky Lab)
R3 klupd_klif_kimul; C:\WINDOWS\System32\Drivers\klupd_klif_kimul.sys [87584 2017-10-03] (AO Kaspersky Lab)
S3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [251656 2017-08-01] (AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [112912 2017-06-28] (AO Kaspersky Lab)
R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [173144 2017-08-01] (AO Kaspersky Lab)
R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [85320 2016-06-18] (AO Kaspersky Lab)
R1 Klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [136416 2017-03-30] (AO Kaspersky Lab)
R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [199640 2017-07-25] (AO Kaspersky Lab)
R0 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [252232 2017-10-05] (Malwarebytes)
R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [129312 2015-02-25] (Intel Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispiwu.inf_amd64_b67dc924fff8de6d\nvlddmkm.sys [14199224 2017-01-04] (NVIDIA Corporation)
R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [46440 2017-04-06] (SteelSeries ApS)
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [45896 2017-05-12] (SteelSeries ApS)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 vpnva; C:\WINDOWS\System32\DRIVERS\vpnva64-6.sys [52592 2015-07-24] (Cisco Systems, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-10-05 00:21 - 2017-10-05 00:21 - 000055996 _____ C:\Users\Lasse\Desktop\Addition.txt
2017-10-05 00:20 - 2017-10-05 00:32 - 000025120 _____ C:\Users\Lasse\Desktop\FRST.txt
2017-10-05 00:20 - 2017-10-05 00:32 - 000000000 ____D C:\FRST
2017-10-05 00:13 - 2017-10-05 00:20 - 000000000 ____D C:\AdwCleaner
2017-10-05 00:08 - 2017-10-05 00:08 - 000252232 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2017-10-05 00:08 - 2017-10-05 00:08 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-10-05 00:08 - 2017-10-05 00:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-10-05 00:08 - 2017-10-05 00:08 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-10-05 00:08 - 2017-10-05 00:08 - 000000000 ____D C:\Program Files\Malwarebytes
2017-10-05 00:08 - 2017-09-27 09:37 - 000077440 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-10-05 00:06 - 2017-10-05 00:06 - 002399744 _____ (Farbar) C:\Users\Lasse\Desktop\FRST64.exe
2017-10-05 00:06 - 2017-10-05 00:03 - 008250832 _____ (Malwarebytes) C:\Users\Lasse\Desktop\AdwCleaner_7.0.3.1.exe
2017-10-03 11:48 - 2017-10-03 11:48 - 000087584 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_kimul.sys
2017-09-30 22:42 - 2017-09-30 22:42 - 000439668 _____ C:\Users\Lasse\Downloads\ROU1Z4.pdf
2017-09-30 22:40 - 2017-09-30 22:40 - 000461469 _____ C:\Users\Lasse\Downloads\ELLPVD.pdf
2017-09-28 09:10 - 2017-09-28 09:10 - 000050091 _____ C:\Users\Lasse\Downloads\PB_KAZ_KtoNr_0784600600_06-04-2017_0712.pdf
2017-09-27 10:26 - 2017-09-27 10:26 - 001300888 _____ C:\Users\Lasse\Downloads\AW_ AW_ AW_ AW_ AW_ Bescheinigung f__r HerrnLasse****.zip
2017-09-26 04:58 - 2017-09-26 04:58 - 000290500 _____ C:\Users\Lasse\Desktop\bescheinigung_ausserfachliche_medienanalyse.pdf
2017-09-26 04:52 - 2017-09-26 04:50 - 000201219 _____ C:\Users\Lasse\Desktop\Die Auswirkungen von Premediation auf die Berichterstattung der Anschläge des 11. September 2001 - Lasse ****.pdf
2017-09-20 10:45 - 2017-09-20 10:45 - 001601996 _____ C:\Users\Lasse\Desktop\grusin-richard-premediation-affect-and-mediality-after-911.pdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-10-05 00:23 - 2016-09-23 18:35 - 002984726 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-10-05 00:23 - 2016-07-17 00:51 - 001268550 _____ C:\WINDOWS\system32\perfh007.dat
2017-10-05 00:23 - 2016-07-17 00:51 - 000321202 _____ C:\WINDOWS\system32\perfc007.dat
2017-10-05 00:21 - 2015-06-10 06:10 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2017-10-05 00:19 - 2015-06-10 23:15 - 000000000 ____D C:\Users\Lasse\AppData\Local\Spotify
2017-10-05 00:19 - 2015-06-10 23:14 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\Spotify
2017-10-05 00:18 - 2016-09-23 18:41 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-10-05 00:18 - 2016-09-23 18:35 - 000000000 ____D C:\Users\postgres
2017-10-05 00:18 - 2016-09-23 18:34 - 000000000 ____D C:\ProgramData\NVIDIA
2017-10-05 00:18 - 2016-07-16 08:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2017-10-05 00:16 - 2015-08-13 13:43 - 000000000 ____D C:\Users\Lasse\AppData\Local\Downloaded Installations
2017-10-05 00:12 - 2016-09-23 18:34 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-10-03 22:53 - 2015-06-12 00:10 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\TS3Client
2017-10-03 13:40 - 2016-07-16 13:45 - 000000000 ____D C:\WINDOWS\INF
2017-10-02 00:31 - 2016-09-23 18:35 - 000000000 ____D C:\Users\Lasse
2017-09-27 22:28 - 2015-11-10 23:00 - 000000000 ____D C:\Users\Lasse\AppData\Local\Battle.net
2017-09-27 12:06 - 2015-06-10 06:57 - 000000000 ____D C:\Users\Lasse\AppData\Local\PokerStars.EU
2017-09-27 08:56 - 2015-06-10 05:59 - 000002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-09-26 08:55 - 2017-02-07 16:43 - 000000000 ____D C:\Users\Lasse\AppData\LocalLow\Mozilla
2017-09-26 04:09 - 2015-06-10 06:20 - 000000000 ____D C:\Users\Lasse\Documents\Uni
2017-09-24 22:03 - 2017-07-24 21:31 - 000000000 ____D C:\Users\Lasse\AppData\Local\Overwolf
2017-09-22 23:40 - 2017-07-27 09:39 - 000003362 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2533615570-3755426884-238519182-1000
2017-09-22 23:40 - 2016-05-03 13:25 - 000002383 _____ C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-09-22 23:40 - 2016-05-03 13:25 - 000000000 ___RD C:\Users\Lasse\OneDrive
2017-09-19 13:00 - 2015-11-10 23:13 - 000000000 ____D C:\Program Files (x86)\Hearthstone
2017-09-19 12:59 - 2016-11-06 01:27 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HearthSim
2017-09-19 12:59 - 2016-11-06 01:27 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\HearthstoneDeckTracker
2017-09-19 12:59 - 2016-11-06 01:27 - 000000000 ____D C:\Users\Lasse\AppData\Local\HearthstoneDeckTracker
2017-09-19 12:59 - 2016-02-02 00:52 - 000000000 ____D C:\Users\Lasse\AppData\Local\SquirrelTemp
2017-09-19 11:46 - 2015-12-04 10:59 - 000097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2017-09-19 11:46 - 2015-12-04 10:59 - 000000000 ____D C:\ProgramData\Oracle
2017-09-19 11:46 - 2015-12-04 10:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-09-19 11:46 - 2015-12-04 10:59 - 000000000 ____D C:\Program Files (x86)\Java
2017-09-17 19:32 - 2015-06-16 01:41 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\vlc
2017-09-16 17:18 - 2015-06-10 05:21 - 000000000 ____D C:\Users\Lasse\AppData\Local\VirtualStore
2017-09-15 09:32 - 2017-07-24 21:32 - 000000000 ____D C:\Program Files (x86)\Overwolf
2017-09-10 22:25 - 2017-09-03 21:12 - 000000000 ____D C:\Users\Lasse\Desktop\subs

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-03-13 14:46 - 2016-03-13 15:09 - 000002438 _____ () C:\Users\Lasse\AppData\Roaming\SpeedRunnersLog.txt
2016-09-23 18:34 - 2016-09-23 18:34 - 000000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
2016-12-15 12:26 - 2016-12-15 12:26 - 000737856 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u111-windows-au.exe
2017-02-07 16:44 - 2017-02-07 16:44 - 000739904 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u121-windows-au.exe
2017-05-21 13:13 - 2017-05-21 13:13 - 000739904 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u131-windows-au.exe
2017-09-19 11:45 - 2017-09-19 11:45 - 000740416 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u144-windows-au.exe
2016-09-25 16:02 - 2016-07-16 13:42 - 000616048 _____ (Microsoft Corporation) C:\Users\Lasse\AppData\Local\Temp\kernel32.dll
2017-03-21 00:57 - 2016-03-09 22:39 - 004839768 ____N (Conexant Systems, Inc.) C:\Users\Lasse\AppData\Local\Temp\KUIU.EXE
2016-10-26 12:38 - 2016-10-26 12:38 - 000040448 ____N () C:\Users\Lasse\AppData\Local\Temp\proxy_vole4284622008590521579.dll
2016-10-26 12:38 - 2016-10-26 12:38 - 000040448 ____N () C:\Users\Lasse\AppData\Local\Temp\proxy_vole9072781731305077584.dll
2016-12-06 14:14 - 2016-12-06 14:14 - 077105961 _____ () C:\Users\Lasse\AppData\Local\Temp\setup.exe
2017-03-23 19:32 - 2017-03-23 19:32 - 014456872 _____ (Microsoft Corporation) C:\Users\Lasse\AppData\Local\Temp\vc_redist.x86.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-10-04 23:57

==================== Ende von FRST.txt ============================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 03-10-2017 01
durchgeführt von Lasse (05-10-2017 00:32:21)
Gestartet von C:\Users\Lasse\Desktop
Windows 10 Home Version 1607 (X64) (2016-09-23 16:42:05)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2533615570-3755426884-238519182-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2533615570-3755426884-238519182-503 - Limited - Disabled)
Gast (S-1-5-21-2533615570-3755426884-238519182-501 - Limited - Disabled)
Lasse (S-1-5-21-2533615570-3755426884-238519182-1000 - Administrator - Enabled) => C:\Users\Lasse
postgres (S-1-5-21-2533615570-3755426884-238519182-1002 - Limited - Enabled) => C:\Users\postgres

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Kaspersky Internet Security (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Kaspersky Internet Security (Enabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

1&1 Surf-Stick (HKLM-x32\...\{AEFF9E60-3E93-41EE-9895-311F7D1C5FFD}) (Version: 1.0.0.3 - ZTE Corporation)
888poker (HKLM-x32\...\888poker) (Version:  - )
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)
Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Adobe Flash Player 26 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version:  - Hidden Path Entertainment, Ensemble Studios)
Age of Empires® III: Complete Collection (HKLM-x32\...\Steam App 105450) (Version:  - Ensemble Studios)
Brother MFL-Pro Suite MFC-J4510DW (HKLM-x32\...\{DD98C438-D769-4677-AA87-3481FA32D20C}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5931 - CDBurnerXP)
CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version:  - CyberGhost S.R.L.)
Darkest Dungeon (HKLM-x32\...\Steam App 262060) (Version:  - Red Hook Studios)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
DiRT 3 Complete Edition (HKLM\...\Steam App 321040) (Version:  - Codemasters Racing Studio)
Discord (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Discord) (Version: 0.0.290 - Hammer & Chisel, Inc.)
Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)
FUSSBALL MANAGER 13 (HKLM-x32\...\{80AF0300-866F-400F-A350-D53E3C3E34E0}) (Version: 1.0.4.0 - Electronic Arts)
Golf With Your Friends (HKLM\...\Steam App 431240) (Version:  - Blacklight Interactive)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Hearthstone Deck Tracker (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\HearthstoneDeckTracker) (Version: 1.4.3 - HearthSim)
Holdem Manager 2 (HKLM-x32\...\HoldemManager2) (Version:  - )
Hotline Miami (HKLM-x32\...\Steam App 219150) (Version:  - Dennaton Games)
HWiNFO64 Version 5.52 (HKLM\...\HWiNFO64_is1) (Version: 5.52 - Martin Malík - REALiX)
Infinite HD™ App (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Octoshape Streaming Services) (Version:  - Octoshape ApS)
InputMapper (HKLM-x32\...\{1A44056A-C7D8-4561-BC43-A0AA7D7AAA64}) (Version: 1.5.31.0 - DSDCS)
Insurgency (HKLM-x32\...\Steam App 222880) (Version:  - New World Interactive)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.39.1003 - Intel Corporation)
Intel(R) Network Connections 18.8.136.0 (HKLM\...\PROSetDX) (Version: 18.8.136.0 - Intel)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.4.65 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{98f335cd-0a32-4b3f-b74c-ef9480e834f0}) (Version: 10.0.27 - Intel(R) Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Java 8 Update 144 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180144F0}) (Version: 8.0.1440.1 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Kaspersky Internet Security (HKLM-x32\...\{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab)
Kaspersky Secure Connection (HKLM-x32\...\{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab)
Keep Talking and Nobody Explodes (HKLM\...\Steam App 341800) (Version:  - Steel Crate Games)
Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version:  - DONTNOD Entertainment)
Malwarebytes Version 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\OneDriveSetup.exe) (Version: 17.3.6998.0830 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50905.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Monaco (HKLM-x32\...\Steam App 113020) (Version:  - Pocketwatch Games)
Mozilla Firefox 52.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 52.0.2 (x86 de)) (Version: 52.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.0.2 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Mumble 1.2.11 (HKLM-x32\...\{2C0B4F07-7DD2-4D69-9A97-77AE3A37280F}) (Version: 1.2.11 - Thorvald Natvig)
NBA 2K17 (HKLM\...\Steam App 385760) (Version:  - Visual Concepts)
Nero 2016 (HKLM-x32\...\{049045D5-0C46-4E78-A83F-83E993D91A7F}) (Version: 17.0.02300 - Nero AG)
Nero Info (HKLM-x32\...\{F030BFE8-8476-4C08-A553-233DE80A2BE1}) (Version: 16.0.2000 - Nero AG)
NetBet Poker (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Netbet Poker) (Version: 1.1.1.33 - NetBet Poker)
NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.61.7 - Black Tree Gaming)
Nidhogg (HKLM-x32\...\Steam App 94400) (Version:  - Messhof)
No Man's Sky (HKLM\...\Steam App 275850) (Version:  - Hello Games)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.9 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.11 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 376.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.53 - NVIDIA Corporation)
NVIDIA Grafiktreiber 376.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.53 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Orcs Must Die! (HKLM-x32\...\Steam App 102600) (Version:  - Robot Entertainment)
Orcs Must Die! 2 (HKLM-x32\...\Steam App 201790) (Version:  - Robot Entertainment)
Origin (HKLM-x32\...\Origin) (Version: 9.0.11.77 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.107.36.0 - Overwolf Ltd.)
Party Hard (HKLM\...\Steam App 356570) (Version:  - Pinokl Games)
PDF24 Creator 8.1.4 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PLAYERUNKNOWN'S BATTLEGROUNDS (HKLM\...\Steam App 578080) (Version:  - Bluehole, Inc.)
Poker at bet365 (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\bet365poker) (Version: 1.1.1.32 - Poker at bet365)
PokerStrategy.com Equilab (HKLM-x32\...\{86D09F48-CDAB-4B4C-8806-F6C16F17935A}) (Version: 1.2.8.0 - PokerStrategy.com)
PostgreSQL 8.4 (HKLM-x32\...\PostgreSQL 8.4) (Version: 8.4 - PostgreSQL Global Development Group)
Prerequisite installer (HKLM-x32\...\{5F284483-EE8D-447E-BEBE-2BF13B08C4BF}) (Version: 17.0.0002 - Nero AG) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7256 - Realtek Semiconductor Corp.)
Remember Me (HKLM-x32\...\Steam App 228300) (Version:  - DONTNOD Entertainment)
ROCCAT Ryos Keyboard Driver (HKLM-x32\...\{70F3EF93-44F4-446A-90B8-33DAB2799AF1}) (Version: 1.29.0006 - Roccat GmbH)
Rocket League (HKLM-x32\...\Steam App 252950) (Version:  - Psyonix)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.)
SpeedRunners (HKLM\...\Steam App 207140) (Version:  - DoubleDutch Games)
Spotify (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Spotify) (Version: 1.0.64.399.g4637b02a - Spotify AB)
Stashimi Stub Installer (HKLM-x32\...\{910B539D-F257-46C8-9CB8-6C95EFF9CF22}) (Version: 18.001.1 - Nero AG) Hidden
SteelSeries Engine 3.10.2 (HKLM\...\SteelSeries Engine 3) (Version: 3.10.2 - SteelSeries ApS)
Sunless Sea (HKLM-x32\...\Steam App 304650) (Version:  - Failbetter Games)
SUPERHOT (HKLM\...\Steam App 322500) (Version:  - SUPERHOT Team)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Sims(TM) 3 (HKLM-x32\...\Steam App 47890) (Version:  - The Sims Studio)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.0.0 - GOG.com)
The Wolf Among Us (HKLM-x32\...\Steam App 250320) (Version:  - Telltale Games)
To the Moon (HKLM-x32\...\Steam App 206440) (Version:  - Freebird Games)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version:  - Crystal Dynamics)
Undertale (HKLM-x32\...\Steam App 391540) (Version:  - tobyfox)
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{5D2260D6-DB16-41DC-915B-A39BF4F66362}) (Version:  - Microsoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Windows Driver Package - Microsoft (xusb21) XnaComposite  (08/13/2009 2.1.0.1349) (HKLM\...\0AEBEF6F936CFE16E003F7E141631FAB754D9816) (Version: 08/13/2009 2.1.0.1349 - Microsoft)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Xenonauts (HKLM\...\Steam App 223830) (Version:  - Goldhawk Interactive)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2015-04-15] ()
ContextMenuHandlers1: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext32.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers2: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers4: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} =>  -> Keine Datei
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-12-29] (NVIDIA Corporation)
ContextMenuHandlers6: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext32.dll [2015-02-20] (Alexander Roshal)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0EA79F79-E1A5-4A0A-9EB4-34A0F7599D7A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {1E2ED6AF-44DD-4BD9-92B4-158C8C364963} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2015-06-04] (Nero AG)
Task: {20619094-6457-425B-A945-0C4FDB1693EB} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {24849D53-6FDE-4375-9849-A131708F6A6B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {27018E8B-CD23-4488-8A1A-B7F8E98989BC} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {2738848A-4A4F-46DA-927F-8C2C9DF0BC8C} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {28CB3FFB-904C-47A0-ABCB-9235400956E9} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {297B2EE0-39D1-47A0-A923-E93BBB750EFB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {33A617CB-993D-4FA3-AB13-921058F47898} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {346CA78B-8395-4144-8B90-67B4E73505C4} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {38708F88-5274-46F9-A4FA-C6B8D1965177} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {406CB1B8-07F8-4C0D-8242-932A7202ACA7} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {422893B7-EFA5-4D9A-9E12-347E25F452FE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {4736970E-099A-4720-B7F9-6AA0BC9F8D23} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2017-09-10] (Overwolf LTD)
Task: {48F971F9-1011-494E-9C14-978135E38E0F} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {4D665A95-C820-484E-ACEA-CCA24CD7B7E9} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5907DFEF-F5E3-43D6-A652-4EFE2297BB75} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_151_pepper.exe [2017-08-23] (Adobe Systems Incorporated)
Task: {70967EA7-6DC1-4D1C-B266-85A70912B2AF} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {719E802E-99AD-4D2D-93DD-DD40BB975F4A} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {744885B0-6690-4DBF-AFD2-D14D64B73594} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {7C28B565-DF69-4859-BF78-11D1793D2530} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {80BFF415-92DD-4AFD-A317-820EC45E4F40} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {835CACB0-B38D-4B5F-86E4-40A82DCF9296} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {8EFE6846-5634-4A31-9D17-188267D1ED8E} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Lasse\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {907543A2-0FD5-44B9-BD78-3210741E547F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {9F6A05A9-B92A-463B-ABDF-2F07A2BAFB72} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {A5FAC33E-1E4D-45CF-9D2F-58914E30A741} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {A7C6D38F-1AB6-4E8B-A2AE-ED60967D762A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {AAD71ED8-2D79-426B-B5E7-1025A792E8EA} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {ADBFE664-7464-4ED6-B6B2-A7FE31575F7B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-10] (Google Inc.)
Task: {B13712F9-EC32-40D6-A54E-AE60165AC92A} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B839D35A-EA53-4A6F-B98F-924FAD8C3E28} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B9DB4DE2-A818-45E0-8885-7D97263146DC} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {D5FE55D7-F207-4A0E-867A-5CA9233DD728} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {D6B9F221-05EA-419A-85EA-BFB06B828E4D} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D9155530-53E3-470B-84CD-93D046C63435} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {DDEAB283-6AA4-460A-8060-C5DEB323E4E4} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E58146F5-C22A-4338-A1E7-8A3B3092E1FE} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {E6E8A738-3413-4665-8CB8-024753F4DF68} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-10] (Google Inc.)
Task: {E71C6EB0-1F0C-4E22-B5B4-E785515F4C04} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {EB878804-4C78-4588-A598-2490EB14D64E} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {EDCE56E6-E9E9-4DA4-9E12-B676852DF3D2} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F20B98FA-5E1C-4827-A90C-4C4E90FE908C} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {F6C8B48F-CC1B-4545-AEB7-97195522EF85} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F84C18D9-CEFF-40B9-8D8B-5E49D490CFEB} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FEE482F9-F169-4C25-A082-C5A31777D0FF} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


ShortcutWithArgument: C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Dingit Infinite HD App.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=Default --app-id=llnhnfikffkjbdnfallfpgikamegbbag

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 13:42 - 2016-07-16 13:42 - 000231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-03-15 08:17 - 2017-03-04 09:19 - 002681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-10-05 00:08 - 2017-09-27 09:37 - 002289096 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2016-09-23 18:34 - 2016-12-29 14:44 - 000134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-09-23 19:32 - 2016-09-23 19:32 - 000134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-15 08:16 - 2017-03-04 08:31 - 000474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-15 08:17 - 2017-03-04 08:12 - 009760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 001401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 000757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 001033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 002424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-03-15 08:17 - 2017-03-04 08:08 - 004853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-04-10 09:18 - 2017-04-10 09:18 - 000077312 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-04-10 09:18 - 2017-04-10 09:18 - 000189952 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-04-10 09:18 - 2017-04-10 09:18 - 042507264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-04-10 09:18 - 2017-04-10 09:18 - 002334184 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\skypert.dll
2017-04-10 21:19 - 2015-09-16 13:20 - 000474504 _____ () C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe
2017-04-10 21:19 - 2015-09-16 13:20 - 000446344 _____ () C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe
2017-09-27 08:56 - 2017-09-21 09:29 - 004022616 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libglesv2.dll
2017-09-27 08:56 - 2017-09-21 09:29 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libegl.dll
2016-06-28 00:19 - 2016-06-28 00:19 - 000865232 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\kpcengine.2.3.dll
2015-06-10 15:44 - 2014-02-18 10:11 - 000172032 _____ () c:\postgreSQL\bin\LIBPQ.dll
2015-06-10 15:44 - 2012-08-14 15:19 - 000999424 _____ () c:\postgreSQL\bin\libxml2.dll
2015-12-19 13:34 - 2009-02-27 17:38 - 000139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2015-02-25 14:15 - 2015-02-25 14:15 - 001243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2533615570-3755426884-238519182-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Lasse\Pictures\Wallpaper\04071_posbanksunrise_1920x1080.jpg
HKU\S-1-5-21-2533615570-3755426884-238519182-1002\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 192.168.8.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKLM\...\StartupApproved\Run: => "XboxStat"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{1E466E5F-2A71-492E-98D2-EA93CF6E40F0}] => (Allow) E:\Spiele\Steam\steamapps\common\NBA 2K17\NBA2K17.exe
FirewallRules: [{617272FE-4F9E-43EE-A885-ECC015C336EB}] => (Allow) E:\Spiele\Steam\steamapps\common\NBA 2K17\NBA2K17.exe
FirewallRules: [{7321E602-C543-400C-A004-CA8FFC3D5A4A}] => (Allow) E:\Spiele\Steam\steamapps\common\No Man's Sky\Binaries\NMS.exe
FirewallRules: [{8BE67DB3-DECC-470C-9D2F-9B91BCD744F3}] => (Allow) E:\Spiele\Steam\steamapps\common\No Man's Sky\Binaries\NMS.exe
FirewallRules: [{B328988F-EE12-4BA0-8426-6BB569B74BC4}] => (Allow) E:\Spiele\Steam\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe
FirewallRules: [{BC4B85F6-039D-4A60-BD60-B2F949795A4F}] => (Allow) E:\Spiele\Steam\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe
FirewallRules: [{93196552-2B76-40A2-8AC6-5ED3AC385EDE}] => (Allow) E:\Spiele\Steam\steamapps\common\Keep Talking and Nobody Explodes\ktane.exe
FirewallRules: [{1713722F-A2E5-4B13-9B34-9D373D32D19A}] => (Allow) E:\Spiele\Steam\steamapps\common\Keep Talking and Nobody Explodes\ktane.exe
FirewallRules: [{7C6252FF-2BD1-48B1-8EE7-11F01095F6AF}] => (Allow) E:\Spiele\Steam\steamapps\common\Party Hard\PartyHardGame.exe
FirewallRules: [{B03C27A8-503B-4E29-AF88-ECA2874F8115}] => (Allow) E:\Spiele\Steam\steamapps\common\Party Hard\PartyHardGame.exe
FirewallRules: [{95BB5D24-AAE4-48CD-AD4A-7BEACA31E040}] => (Allow) E:\Spiele\FM 13\FIFA Manager 13\Manager13.exe
FirewallRules: [{71917C83-B5B8-44D3-9885-2DAA51520195}] => (Allow) E:\Spiele\FM 13\FIFA Manager 13\Manager13.exe
FirewallRules: [{7A259C44-2035-48D3-B803-527BAA84A00C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{136B8D0E-9CD0-428D-BD45-E959117A0B7D}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [{3FE9E163-9DF9-468A-80A6-2FD24C996685}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [{7AA6E0A5-3A86-4DA6-9E6B-65B9F088E2C5}] => (Allow) E:\Spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{0AC559E6-B66A-415D-8C96-E010240CD25B}] => (Allow) E:\Spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{F812826A-D8DA-481B-AA3C-AA6496CF7407}] => (Allow) LPort=5432
FirewallRules: [{6EE59405-4FE7-4C34-802B-B7864025000D}] => (Allow) E:\Spiele\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{775E93DD-299A-452D-85DF-E003378F4AF7}] => (Allow) E:\Spiele\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{02B8BFE5-921E-4436-BD44-241093836FEF}C:\users\lasse\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{0F3B6A72-A0CD-4A76-A613-4E72B693D499}C:\users\lasse\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [{DA383AC0-382E-4E96-8E85-FC514F9973E0}] => (Block) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [{97944202-EB96-4692-A1F6-6873242A53B4}] => (Block) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [{B63764EC-EAD8-46F6-96B0-5F565BD408A0}] => (Allow) E:\Spiele\Steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{86AAD87C-259E-4DEE-8BA6-A346EAFF9741}] => (Allow) E:\Spiele\Steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{4E8CBBD0-5190-4B1F-B1F0-E41EBE21BF35}] => (Allow) E:\Spiele\Steam\steamapps\common\Nidhogg\Nidhogg.exe
FirewallRules: [{D68A69E0-F93A-41CB-8C82-CC8FC9244415}] => (Allow) E:\Spiele\Steam\steamapps\common\Nidhogg\Nidhogg.exe
FirewallRules: [{449BA439-FA7E-4220-8AE5-9556A9903CCE}] => (Allow) E:\Spiele\Steam\steamapps\common\Monaco\MONACO.exe
FirewallRules: [{4D3B8DD6-EC48-4E8C-BC21-CE661B0B5E4D}] => (Allow) E:\Spiele\Steam\steamapps\common\Monaco\MONACO.exe
FirewallRules: [{B1443441-3CDD-4C3B-9FAA-A41F3811F3F7}] => (Allow) E:\Spiele\Steam\steamapps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{F1844A71-6B17-40DD-93DF-B3157B18E2AB}] => (Allow) E:\Spiele\Steam\steamapps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{8CE98A1F-DE86-4B9A-A961-380B3B186EA5}] => (Allow) E:\Spiele\Steam\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{87B91361-539F-4F9A-972F-5E442B183014}] => (Allow) E:\Spiele\Steam\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{B10831ED-E1AF-492C-8522-6F71149DC361}] => (Allow) E:\Spiele\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{DAE8C590-F8F2-4B5A-80B6-190CFD231643}] => (Allow) E:\Spiele\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{CE280E12-EBAC-4749-9C33-F713917762C6}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [{ABB850C5-C8AB-4762-B0E5-4233A38BBAD5}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [{23CAB5A6-90E7-4B5F-A251-201EFF4BF363}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{71B33882-60FC-414E-A619-8C841C227CEB}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{D6275B97-7CCA-4D72-B2D0-C59B191646A2}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [{56BB1E53-FB77-4022-AE31-73BA33CB027A}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [{73E5AEA7-7F8C-4C16-A9A7-11036BDEC1BB}] => (Allow) E:\Spiele\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{E66552C8-DFC4-4173-9CCD-4D836FF27FBE}] => (Allow) E:\Spiele\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{4C9D1A88-DD80-42F3-AA6F-539B9BB5B6FE}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{472BE848-3445-4146-8188-B73DDA3AAFE1}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{2B2E3DDE-228A-4A83-9184-B2D1D91B5831}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{684B6BB3-1B8C-413A-82D8-49B1DE5A167B}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{829113CB-AC94-496A-9478-43FC86DA0BB0}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{A5CAA5D9-3DC2-41C2-8690-312E4557E940}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{FDA27D14-8297-4859-AD36-8AB3888B1AD6}] => (Allow) E:\Spiele\Steam\steamapps\common\The Escapists\TheEscapists.exe
FirewallRules: [{C18FFD8B-AA4C-477D-BE31-74383408BF4C}] => (Allow) E:\Spiele\Steam\steamapps\common\The Escapists\TheEscapists.exe
FirewallRules: [{6136A26E-CA75-4D67-B0BD-423A5666AF3D}] => (Allow) E:\Spiele\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{A43A680C-6633-4B88-8D76-F71E264CEB5C}] => (Allow) E:\Spiele\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{034A7BAD-CDD6-402A-ACAD-E51AD4034DB5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DE323322-04AA-4F55-831E-22940A60FF86}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{402959E9-2213-474B-A27A-4853495C516B}] => (Allow) E:\Spiele\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{ED531946-64C5-4EBC-8702-B6B9F2535128}] => (Allow) E:\Spiele\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{F87CE81F-BEEA-47A4-8241-BA4756C8A4CD}] => (Allow) C:\Program Files (x86)\Nero\Nero 2016\Nero Burning ROM\StartNBR.exe
FirewallRules: [{3A6300B7-00E8-46D5-8ECC-E375FA61CF51}] => (Allow) C:\Program Files (x86)\Nero\KM\NMDllHost.exe
FirewallRules: [{06FA67C8-0226-49B3-8BFC-6A324C6143B9}] => (Allow) C:\Program Files (x86)\Nero\Nero 2016\Nero Burning ROM\nero.exe
FirewallRules: [{70A1D115-776E-442D-B635-5C48A609F090}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{0AB8CE89-EF32-4D06-8D03-B4E96B91C4FE}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{7D12B200-A0E1-43A1-8DAF-7684F1C4E052}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{B73CDADE-D09D-48D6-8DB4-F69A42D9D261}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{9F531F4E-7F68-40D3-B6F9-816F81A7DBF0}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{2C339AA4-48F4-4C83-B6C1-270D763B206E}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{C712039D-7FCB-49A8-8026-DE07D1DC526B}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [{AA18F165-E99F-48B1-98DB-49483B35AFC3}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [{F5C55161-49AB-46E1-9BF1-3E7D6F91AD9C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D3EBB153-CF95-4ADF-9168-72C1EB5100AE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E356CA51-EDA0-4C07-80DD-DA34E318F06A}] => (Allow) E:\Spiele\Steam\steamapps\common\The Sims 3\Game\Bin\Sims3Launcher.exe
FirewallRules: [{3872A773-8FC2-4E44-A3E5-4DD5B4BC6BFE}] => (Allow) E:\Spiele\Steam\steamapps\common\The Sims 3\Game\Bin\Sims3Launcher.exe
FirewallRules: [{0FB8E1B1-89A5-4C44-BE8B-A8E3F68AA798}] => (Allow) E:\Spiele\Steam\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{AF6BF9E6-3314-4E1C-A503-CCFCF433A9AF}] => (Allow) E:\Spiele\Steam\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{A5C30CBE-BC7B-4342-B07B-9641D65AC6E2}] => (Allow) E:\Spiele\Steam\steamapps\common\Undertale\UNDERTALE.exe
FirewallRules: [{482A1B91-7A81-4341-BCA1-89982A5B36B8}] => (Allow) E:\Spiele\Steam\steamapps\common\Undertale\UNDERTALE.exe
FirewallRules: [{321B2ABA-4D8C-42E0-B90E-94FE2C10A424}] => (Allow) E:\Spiele\Steam\steamapps\common\SunlessSea\Sunless Sea.exe
FirewallRules: [{A11501AC-13EA-48D4-97D0-9C28A15232AC}] => (Allow) E:\Spiele\Steam\steamapps\common\SunlessSea\Sunless Sea.exe
FirewallRules: [{84492F8B-869B-4EBD-9DB0-208FAB7BAC53}] => (Allow) E:\Spiele\Steam\steamapps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{1948B0EB-9995-4EFD-9F73-4F8ED8C87359}] => (Allow) E:\Spiele\Steam\steamapps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{222C045E-D37F-4F00-9435-BCA8B826A4CD}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
FirewallRules: [{58AF54BA-C7A7-414E-B218-AE69F0C79E58}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
FirewallRules: [{16E91255-C63D-419F-B7F3-D2E65802C2C6}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die!\Build\release\OrcsMustDie.exe
FirewallRules: [{3BF145A6-1208-469D-9D96-47AF98A34F13}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die!\Build\release\OrcsMustDie.exe
FirewallRules: [{109621AB-AD42-4F9D-9CBB-B095B91EA0FD}] => (Allow) E:\Spiele\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{B428F1DB-5C9A-43F5-973F-E189FCF0055D}] => (Allow) E:\Spiele\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{5F05E05B-43ED-4A1F-8906-5961EF90204C}] => (Allow) E:\Spiele\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{8D81F410-E273-4F9D-B4D5-2E76F5ED5033}] => (Allow) E:\Spiele\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{80951455-24EE-4165-A983-75CC2AB8EF3C}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe
FirewallRules: [{8301D091-8FA9-47EF-A5F7-A6D5B57E77CC}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe
FirewallRules: [{B0753FA3-A1E2-404F-97BA-8B12F6FC297A}] => (Allow) E:\Spiele\Steam\steamapps\common\DiRT 3 Complete Edition\dirt3_game.exe
FirewallRules: [{2FAA2F4D-F5F7-49FF-8BE4-AEEA611C8444}] => (Allow) E:\Spiele\Steam\steamapps\common\DiRT 3 Complete Edition\dirt3_game.exe
FirewallRules: [{45EDBFE7-40CA-4DC9-A617-9B7735681291}] => (Allow) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{3E2DDB12-63CA-45B1-928C-F9686A7431BC}] => (Allow) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{3524D57A-C4F3-4BA5-ACC3-4953B9C7E4CC}] => (Allow) E:\Spiele\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{1DAD5E35-3E81-4B12-AD86-DFA84D8BF100}] => (Allow) E:\Spiele\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{9F2DFE30-98A1-42BB-81AE-F228F3112A7A}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency_BE.exe
FirewallRules: [{B762F452-7752-452E-915A-B786911457C3}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency_BE.exe
FirewallRules: [{EE98545F-F4D4-439A-BA33-2D2F643333C5}] => (Allow) E:\Spiele\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{68C4579D-5BA7-4FAF-956E-7510959F6B97}] => (Allow) E:\Spiele\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{01BE84CD-D4C6-4424-AEF6-4C8FD2100925}] => (Allow) E:\Spiele\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{21CC6D64-6E55-4F88-82E0-58D1F8878439}] => (Allow) E:\Spiele\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{87C66560-B3E5-4749-847D-05D0527F82DE}] => (Allow) E:\Spiele\Steam\steamapps\common\SUPERHOT\SUPERHOT.exe
FirewallRules: [{8627AAF7-3098-4C1E-B206-137676FBA7E7}] => (Allow) E:\Spiele\Steam\steamapps\common\SUPERHOT\SUPERHOT.exe
FirewallRules: [{99FF5CAA-8EFF-4B75-9BCC-98A059C4A22C}] => (Allow) E:\Spiele\Steam\steamapps\common\Xenonauts\Xenonauts.exe
FirewallRules: [{8112DE72-765F-4B1D-B539-D29754768198}] => (Allow) E:\Spiele\Steam\steamapps\common\Xenonauts\Xenonauts.exe
FirewallRules: [{9313420C-23DA-4C55-B1BA-5454242C11C1}] => (Allow) E:\Spiele\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [{65031DE8-8599-410E-8005-157880B32F6E}] => (Allow) E:\Spiele\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [{4AE4DBCB-745F-441A-8B57-9551B1B2C79B}] => (Allow) E:\Spiele\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{9722A8B6-D401-4A0F-BC59-B705696159F0}] => (Allow) E:\Spiele\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{A41C77B0-CEF3-4AAA-8275-F47BAC21A52E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Wiederherstellungspunkte =========================

18-09-2017 18:45:39 Geplanter Prüfpunkt
26-09-2017 04:03:04 Geplanter Prüfpunkt
04-10-2017 23:58:05 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (10/05/2017 12:15:37 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (10/04/2017 11:58:08 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (10/04/2017 11:20:13 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (10/04/2017 12:23:07 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Lasse-PC)
Description: Bei der Aktivierung der App „Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (10/03/2017 11:29:45 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (10/01/2017 11:35:40 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Lasse-PC)
Description: Bei der Aktivierung der App „Microsoft.SkypeApp_kzf8qxf38zg5c!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2147023174. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (10/01/2017 10:53:06 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (09/30/2017 07:51:37 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (09/29/2017 07:50:39 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (09/28/2017 09:14:51 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Lasse-PC)
Description: Bei der Aktivierung der App „Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2147024865. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


Systemfehler:
=============
Error: (10/05/2017 12:23:52 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (10/05/2017 12:18:53 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.

Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kaspersky Secure Connection Service 1.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Nero Update" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "BrYNSvc" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PDF24" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "CyberGhost 6 Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "postgresql-8.4 - PostgreSQL Server 8.4" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Message Queuing" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.


CodeIntegrity:
===================================
  Date: 2017-06-01 11:20:03.507
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-06-01 11:20:03.488
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-05-31 15:48:53.894
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-05-31 15:48:53.857
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-05-31 10:59:25.975
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-05-24 12:31:13.218
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-03-17 15:15:49.745
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-03-17 15:15:49.731
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-03-17 15:15:49.710
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

  Date: 2017-03-17 15:15:49.666
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Xeon(R) CPU E3-1231 v3 @ 3.40GHz
Prozentuale Nutzung des RAM: 18%
Installierter physikalischer RAM: 16314.86 MB
Verfügbarer physikalischer RAM: 13314.24 MB
Summe virtueller Speicher: 32698.86 MB
Verfügbarer virtueller Speicher: 29441.46 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:237.93 GB) (Free:62.04 GB) NTFS
Drive e: (Volume) (Fixed) (Total:476.94 GB) (Free:61.92 GB) NTFS
Drive f: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive i: () (Removable) (Total:28.64 GB) (Free:28.45 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: D6DE4E1F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=237.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 476.9 GB) (Disk ID: 7931B67B)
Partition 1: (Not Active) - (Size=476.9 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 28.6 GB) (Disk ID: E9408431)
Partition 1: (Not Active) - (Size=28.6 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
         

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 05.10.17
Scan-Zeit: 00:08
Protokolldatei: 95726b86-a950-11e7-8a73-74d435fed1e4.json
Administrator: Ja

-Softwaredaten-
Version: 3.2.2.2029
Komponentenversion: 1.0.207
Version des Aktualisierungspakets: 1.0.2899
Lizenz: Kostenlos

-Systemdaten-
Betriebssystem: Windows 10 (Build 14393.953)
CPU: x64
Dateisystem: NTFS
Benutzer: Lasse-PC\Lasse

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 492756
Erkannte Bedrohungen: 1
In die Quarantäne verschobene Bedrohungen: 1
Abgelaufene Zeit: 3 Min., 0 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 1
PUP.Optional.DownloadSponsor, C:\USERS\LASSE\DOWNLOADS\NETSPEEDMONITOR 64 BIT - CHIP-INSTALLER.EXE, In Quarantäne, [517], [413936],1.0.2899

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)


(end)
         

# AdwCleaner 7.0.3.1 - Logfile created on Wed Oct 04 22:14:20 2017
# Updated on 2017/29/09 by Malwarebytes 
# Database: 09-29-2017.1
# Running on Windows 10 Home (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

PUP.Optional.Chip, chip1click


***** [ Folders ] *****

PUP.Optional.Legacy, C:\Users\Lasse\AppData\Local\StormFall
PUP.Optional.Chip, C:\Program Files (x86)\Chip Digital GmbH
PUP.Optional.Chip, C:\Users\Lasse\AppData\Local\Downloaded Installations\{DAD82379-C684-4D04-83D5-2B9934A9C362}
PUP.Optional.Chip, C:\Windows\Installer\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}


***** [ Files ] *****

PUP.Optional.Legacy, C:\Users\Lasse\AppData\Local\Temp\Utils.dll


***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\watch4.de
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.watch4.de
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\04A063A0BBEACF54EAEF493C49D9E3F6
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\04A063A0BBEACF54EAEF493C49D9E3F6
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E49AC3054380EEC4DA29AB71FAE408A9
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Classes\Installer\Features\E49AC3054380EEC4DA29AB71FAE408A9
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Classes\Installer\Products\E49AC3054380EEC4DA29AB71FAE408A9
PUP.Optional.Chip, [Key] - HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\chip 1-click download service
PUP.Optional.Vittalia, [Key] - HKU\S-1-5-21-2533615570-3755426884-238519182-1000\Software\Vittalia
PUP.Optional.Vittalia, [Key] - HKCU\Software\Vittalia
PUP.Optional.SlimCleanerPlus, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
PUP.Optional.SlimCleanerPlus, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************



########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########