Ich brauche neue FRST-Logs . Haken setzen bei addition.txt dann auf Untersuchen klicken.

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 19-11-2017
durchgeführt von User (Administrator) auf USER-PC (21-11-2017 10:40:27)
Gestartet von C:\Users\User\Downloads
Geladene Profile: User (Verfügbare Profile: User)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Online Games Manager\ogmservice.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
() C:\Windows\vsnpstd3.exe
(UltimateOutsider) C:\Users\User\AppData\Local\Temp\DMR\Downloads\152e221a8bef8d2d13c58f995563a1a1\2a159b5701df8e9d7bfd558a3c761b6e

\GWX1720_control_panel.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Dropbox, Inc.) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Dropbox, Inc.) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Dropbox, Inc.) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht 

verschoben.)

HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-15] (Logitech Inc.)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)
HKLM\...\Run: [snpstd3] => C:\Windows\vsnpstd3.exe [827392 2006-09-19] ()
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [GwxControlPanelMonitor] => C:\Users\User\AppData\Local\Temp\DMR\Downloads

\152e221a8bef8d2d13c58f995563a1a1\2a159b5701df8e9d7bfd558a3c761b6e\GWX1720_control_panel.exe [4559944 2016-02-07] (UltimateOutsider) <==== ACHTUNG
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-

04] (Disc Soft Ltd)
HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\Run: [*LABAL*] => [X]
HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\Run: [GalaxyClient] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [5284928 2017-11-15] 

(GOG.com)
HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\MountPoints2: {6b9e7571-9314-11e2-a317-002618810f02} - E:\RunGame.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-09-04]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2017-11-16]
ShortcutTarget: Dropbox.lnk -> C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen 

Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{DBC0A50C-F994-4579-8DC9-464A072EB067}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mystartsearch.com/web/?type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-

00G8B0_WD-WCAUK018465984659&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mystartsearch.com/web/?

type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mystartsearch.com/web/?

type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mystartsearch.com/web/?

type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}
HKU\S-1-5-21-226341798-1494298974-1954543524-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.mystartsearch.com/web/?

utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-

WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {780042B5-BA4C-4321-A76F-511211A27969} URL = hxxp://www.mystartsearch.com/web/?

utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-

WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {DDD1F70E-8AF5-429F-818F-E369432D2A7A} URL = hxxp://www.mystartsearch.com/web/?

utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-

WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://www.mystartsearch.com/web/?

utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-

WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {F208F861-48A5-4BA7-9C80-75413C389F68} URL = hxxp://www.mystartsearch.com/web/?

utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-

WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://www.mystartsearch.com/web/?

utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-

WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing

\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll 

[2009-05-21] (Hewlett-Packard Co.)
Toolbar: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> Kein Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  Keine Datei
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab

FireFox:
========
FF DefaultProfile: pehg2cqu.default
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default [2017-11-21]
FF Homepage: Mozilla\Firefox\Profiles\pehg2cqu.default -> 
FF Keyword.URL: Mozilla\Firefox\Profiles\pehg2cqu.default -> hxxps://es.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=714647&p=
FF Extension: (RegnumHelper) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\Extensions\{05fb5410-b1ee-4bf6-8778-

76e284d95c08}.xpi [2012-12-15] [Lagacy] [ist nicht signiert]
FF Extension: (Microsoft .NET Framework Assistant) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\Extensions\{20a82645-c095-

46ed-80e3-08825760534b}.xpi [2015-08-06] [Lagacy]
FF Extension: (iMacros for Firefox) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\Extensions\{81BF1D23-5F17-408D-AC6B-

BD6DF7CAF670}.xpi [2017-03-02] [Lagacy]
FF Extension: (Video DownloadHelper) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\Extensions\{b9db16a4-6edc-47ec-a1f4-

b86292ed211d}.xpi [2017-11-17]
FF Extension: (Greasemonkey) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\Extensions\{e4a8a97b-f2ed-450b-b12d-

ee082ba24781}.xpi [2017-11-17]
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\b8pypxzl.Kapi [2017-11-21]
FF Homepage: Mozilla\Firefox\Profiles\b8pypxzl.Kapi -> 
FF NetworkProxy: Mozilla\Firefox\Profiles\b8pypxzl.Kapi -> type", 0
FF Extension: (RegnumHelper) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\b8pypxzl.Kapi\Extensions\{05fb5410-b1ee-4bf6-8778-

76e284d95c08}.xpi [2016-08-29] [Lagacy] [ist nicht signiert]
FF Extension: (iMacros for Firefox) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\b8pypxzl.Kapi\Extensions\{81BF1D23-5F17-408D-AC6B-

BD6DF7CAF670}.xpi [2017-03-10] [Lagacy]
FF Extension: (Video DownloadHelper) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\b8pypxzl.Kapi\Extensions\{b9db16a4-6edc-47ec-a1f4-

b86292ed211d}.xpi [2017-05-10] [Lagacy]
FF Extension: (Greasemonkey) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\b8pypxzl.Kapi\Extensions\{e4a8a97b-f2ed-450b-b12d-

ee082ba24781}.xpi [2017-04-26] [Lagacy]
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff => nicht 

gefunden
FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\extensions

\searchengine@gmail.com => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2015-09-04] [Lagacy] [ist nicht 

signiert]
FF HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart 

Web Printing\MozillaAddOn3
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_187.dll [2017-11-14] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2012-10-19] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_187.dll [2017-11-14] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft 

Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-07-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-07-18] (NVIDIA 

Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-226341798-1494298974-1954543524-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer

\loader\npUnity3D32.dll [2015-08-28] (Unity Technologies ApS)
StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox Kapi\firefox.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat 

aufgelistet wird.)

S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [529984 2017-11-15] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [8330304 2017-11-15] (GOG.com)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [323952 2017-

09-27] (HP Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist 

nicht signiert]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-07-18] (NVIDIA 

Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
R2 ogmservice; C:\Program Files (x86)\Online Games Manager\ogmservice.exe [582544 2016-07-13] (RealNetworks, Inc.)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7248144 2016-08-08] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat 

aufgelistet wird.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [14392 2007-12-17] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-03-30] (Disc Soft Ltd)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
S3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [10550272 2007-03-27] (Sonix Co. Ltd.)
S3 StMp3Recx64; C:\Windows\System32\Drivers\StMp3Recx64.sys [26112 2007-01-12] (Generic)
S1 pfnfd_1_10_0_9; system32\drivers\pfnfd_1_10_0_9.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat 

aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-11-21 10:40 - 2017-11-21 10:40 - 000000000 ____D C:\Users\User\Downloads\FRST-OlderVersion
2017-11-18 19:36 - 2017-11-18 19:36 - 007189760 _____ (VS Revo Group ) C:\Users\User\Downloads\revo204setup.exe
2017-11-18 19:36 - 2017-11-18 19:36 - 000001034 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2017-11-18 19:36 - 2017-11-18 19:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-11-18 19:36 - 2017-11-18 19:36 - 000000000 ____D C:\Program Files\VS Revo Group
2017-11-16 10:29 - 2017-11-16 10:29 - 000831360 _____ C:\Windows\Minidump\111617-26395-01.dmp
2017-11-16 09:01 - 2017-11-16 09:01 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-11-15 11:09 - 2017-11-15 11:09 - 000062398 _____ C:\Users\User\Desktop\Addition.txt
2017-11-15 11:09 - 2017-11-15 11:09 - 000026764 _____ C:\Users\User\Desktop\FRST.txt
2017-11-15 10:58 - 2017-11-15 10:59 - 000062395 _____ C:\Users\User\Downloads\Addition.txt
2017-11-15 10:57 - 2017-11-21 10:40 - 000018115 _____ C:\Users\User\Downloads\FRST.txt
2017-11-15 10:56 - 2017-11-21 10:40 - 002391552 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2017-11-15 10:56 - 2017-11-21 10:40 - 000000000 ____D C:\FRST
2017-11-15 09:58 - 2017-10-18 08:31 - 000395976 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-11-15 09:58 - 2017-10-18 07:45 - 000347336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-11-15 09:58 - 2017-10-18 03:34 - 000134376 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2017-11-15 09:58 - 2017-10-18 03:30 - 000605184 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-11-15 09:58 - 2017-10-18 03:06 - 000344064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2017-11-15 09:58 - 2017-10-18 03:06 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2017-11-15 09:58 - 2017-10-18 03:06 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2017-11-15 09:58 - 2017-10-18 03:06 - 000056320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2017-11-15 09:58 - 2017-10-18 03:06 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2017-11-15 09:58 - 2017-10-18 03:06 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2017-11-15 09:58 - 2017-10-18 03:06 - 000007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2017-11-15 09:58 - 2017-10-17 00:07 - 001680616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-11-15 09:58 - 2017-10-16 23:34 - 003222528 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-11-15 09:58 - 2017-10-16 22:55 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2017-11-15 09:58 - 2017-10-15 23:04 - 000407392 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2017-11-15 09:58 - 2017-10-14 09:38 - 025731584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-11-15 09:58 - 2017-10-14 09:23 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-11-15 09:58 - 2017-10-14 09:23 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-11-15 09:58 - 2017-10-14 09:13 - 002903552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-11-15 09:58 - 2017-10-14 09:12 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-11-15 09:58 - 2017-10-14 09:11 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-11-15 09:58 - 2017-10-14 09:11 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-11-15 09:58 - 2017-10-14 09:11 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-11-15 09:58 - 2017-10-14 09:11 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-11-15 09:58 - 2017-10-14 09:09 - 005979648 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-11-15 09:58 - 2017-10-14 09:05 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-11-15 09:58 - 2017-10-14 09:04 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-11-15 09:58 - 2017-10-14 09:02 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-11-15 09:58 - 2017-10-14 09:01 - 000816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-11-15 09:58 - 2017-10-14 09:01 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-11-15 09:58 - 2017-10-14 09:01 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-11-15 09:58 - 2017-10-14 09:00 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-11-15 09:58 - 2017-10-14 08:55 - 000968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-11-15 09:58 - 2017-10-14 08:53 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-11-15 09:58 - 2017-10-14 08:47 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-11-15 09:58 - 2017-10-14 08:47 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-11-15 09:58 - 2017-10-14 08:46 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-11-15 09:58 - 2017-10-14 08:43 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-11-15 09:58 - 2017-10-14 08:43 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-11-15 09:58 - 2017-10-14 08:41 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-11-15 09:58 - 2017-10-14 08:40 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-11-15 09:58 - 2017-10-14 08:31 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-11-15 09:58 - 2017-10-14 08:30 - 015266816 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-11-15 09:58 - 2017-10-14 08:30 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-11-15 09:58 - 2017-10-14 08:29 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-11-15 09:58 - 2017-10-14 08:28 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-11-15 09:58 - 2017-10-14 08:27 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-11-15 09:58 - 2017-10-14 08:21 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-11-15 09:58 - 2017-10-14 08:14 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-11-15 09:58 - 2017-10-14 08:09 - 001544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-11-15 09:58 - 2017-10-14 08:03 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-11-15 09:58 - 2017-10-14 07:58 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-11-15 09:58 - 2017-10-14 07:53 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-11-15 09:58 - 2017-10-14 07:53 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-11-15 09:58 - 2017-10-14 07:52 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-11-15 09:58 - 2017-10-14 07:52 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-11-15 09:58 - 2017-10-14 07:51 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-11-15 09:58 - 2017-10-14 07:50 - 002293760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-11-15 09:58 - 2017-10-14 07:47 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-11-15 09:58 - 2017-10-14 07:47 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-11-15 09:58 - 2017-10-14 07:46 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-11-15 09:58 - 2017-10-14 07:45 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-11-15 09:58 - 2017-10-14 07:45 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-11-15 09:58 - 2017-10-14 07:45 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-11-15 09:58 - 2017-10-14 07:38 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-11-15 09:58 - 2017-10-14 07:35 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-11-15 09:58 - 2017-10-14 07:35 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-11-15 09:58 - 2017-10-14 07:34 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-11-15 09:58 - 2017-10-14 07:33 - 004542464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-11-15 09:58 - 2017-10-14 07:33 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-11-15 09:58 - 2017-10-14 07:32 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-11-15 09:58 - 2017-10-14 07:31 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-11-15 09:58 - 2017-10-14 07:30 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-11-15 09:58 - 2017-10-14 07:28 - 013680128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-11-15 09:58 - 2017-10-14 07:25 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-11-15 09:58 - 2017-10-14 07:24 - 000694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-11-15 09:58 - 2017-10-14 07:23 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-11-15 09:58 - 2017-10-14 07:23 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-11-15 09:58 - 2017-10-14 07:10 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-11-15 09:58 - 2017-10-14 07:07 - 001314304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-11-15 09:58 - 2017-10-14 07:04 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-11-15 09:58 - 2017-10-12 01:58 - 000382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 014635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 012574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2017-11-15 09:58 - 2017-10-12 01:55 - 002319872 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 002222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 002058240 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2017-11-15 09:58 - 2017-10-12 01:55 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2017-11-15 09:58 - 2017-10-12 01:40 - 000308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-11-15 09:58 - 2017-10-12 01:39 - 000591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-11-15 09:58 - 2017-10-12 01:38 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-11-15 09:58 - 2017-10-12 01:38 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-11-15 09:58 - 2017-10-12 01:37 - 012574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2017-11-15 09:58 - 2017-10-12 01:37 - 011410944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 001549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 001400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 001363968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2017-11-15 09:58 - 2017-10-12 01:26 - 000427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-11-15 09:58 - 2017-10-12 01:26 - 000164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-11-15 09:58 - 2017-10-12 01:25 - 000086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2017-11-15 09:58 - 2017-10-12 01:25 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2017-11-15 09:58 - 2017-10-12 01:24 - 000008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2017-11-15 09:58 - 2017-10-12 01:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2017-11-15 09:58 - 2017-10-12 01:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2017-11-15 09:58 - 2017-10-12 01:20 - 000113152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2017-11-15 09:58 - 2017-10-12 01:16 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-11-15 09:58 - 2017-10-04 14:04 - 002023936 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2017-11-15 09:58 - 2017-10-04 14:04 - 001570304 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-11-15 09:58 - 2017-10-04 14:04 - 000670208 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2017-11-15 09:58 - 2017-10-04 14:04 - 000603648 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-11-15 09:58 - 2017-10-04 14:04 - 000370688 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-11-15 09:58 - 2017-10-04 14:04 - 000241664 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2017-11-15 09:58 - 2017-10-04 14:04 - 000181760 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000995272 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2017-11-14 21:22 - 2017-11-14 21:22 - 000001182 _____ C:\Users\User\Desktop\eset.txt
2017-11-14 17:52 - 2017-11-14 17:52 - 000000000 ____D C:\Users\User\AppData\Local\ESET
2017-11-14 17:51 - 2017-11-14 17:51 - 006974584 _____ (ESET spol. s r.o.) C:\Users\User\Downloads\esetonlinescanner_deu.exe
2017-11-10 08:11 - 2017-11-10 08:11 - 001004024 _____ C:\Windows\Minidump\111017-29484-01.dmp
2017-11-09 15:58 - 2017-11-09 15:59 - 000000000 ____D C:\Users\User\Downloads\Altdeutsch für Word
2017-10-30 17:03 - 2017-10-30 17:03 - 000000000 ____D C:\Users\User\AppData\Local\Introversion
2017-10-30 16:52 - 2017-10-30 16:52 - 000000222 _____ C:\Users\User\Desktop\Prison Architect.url
2017-10-29 21:10 - 2017-11-16 10:29 - 624295804 _____ C:\Windows\MEMORY.DMP
2017-10-29 21:10 - 2017-10-29 21:10 - 000719064 _____ C:\Windows\Minidump\102917-17581-01.dmp

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-11-21 10:41 - 2015-08-07 08:19 - 000001220 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001UA.job
2017-11-21 10:38 - 2016-11-21 07:36 - 000000000 ____D C:\Users\User\AppData\LocalLow\Mozilla
2017-11-21 09:16 - 2017-10-11 07:51 - 000003180 _____ C:\Windows\System32\Tasks\HPCeeScheduleForUser
2017-11-21 09:16 - 2017-10-11 07:51 - 000000328 _____ C:\Windows\Tasks\HPCeeScheduleForUser.job
2017-11-21 09:16 - 2013-03-21 23:41 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2017-11-21 09:16 - 2009-07-14 19:18 - 000000000 ____D C:\Windows\ShellNew
2017-11-21 09:16 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2017-11-21 08:19 - 2009-07-14 05:45 - 000022656 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-11-21 08:19 - 2009-07-14 05:45 - 000022656 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-11-21 08:04 - 2016-02-09 17:56 - 000000000 ____D C:\ProgramData\NVIDIA
2017-11-21 08:04 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-11-20 14:41 - 2015-08-07 08:19 - 000001168 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001Core.job
2017-11-18 13:44 - 2016-11-19 16:09 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-11-18 13:44 - 2012-12-15 01:33 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-11-17 17:36 - 2012-12-15 01:33 - 000000000 ____D C:\Users\User\AppData\Roaming\Mozilla
2017-11-17 09:19 - 2012-12-15 16:36 - 000000000 ____D C:\Users\User\Documents\Chat, Bilder
2017-11-17 09:18 - 2012-12-15 16:36 - 000000000 ____D C:\Users\User\Documents\Chat, sonstiges
2017-11-17 09:17 - 2012-12-15 16:36 - 000000000 ____D C:\Users\User\Documents\Chat, Sprüche
2017-11-16 20:37 - 2017-02-04 18:29 - 000000000 ____D C:\Users\User\Desktop\Kapi-Regnum
2017-11-16 12:17 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\rescache
2017-11-16 10:29 - 2016-11-22 16:20 - 000000000 ____D C:\Windows\Minidump
2017-11-16 09:07 - 2016-02-16 12:24 - 000003542 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-11-16 09:07 - 2016-02-16 12:24 - 000003414 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-11-16 09:02 - 2013-11-03 14:20 - 000000000 ____D C:\Users\User\AppData\Roaming\Dropbox
2017-11-16 08:54 - 2009-07-14 05:45 - 000300312 _____ C:\Windows\system32\FNTCACHE.DAT
2017-11-15 20:20 - 2014-12-10 17:11 - 000000000 ____D C:\Windows\system32\appraiser
2017-11-15 20:03 - 2014-02-27 22:46 - 001593424 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-11-15 20:03 - 2009-07-14 18:58 - 000699284 _____ C:\Windows\system32\perfh007.dat
2017-11-15 20:03 - 2009-07-14 18:58 - 000149424 _____ C:\Windows\system32\perfc007.dat
2017-11-15 20:03 - 2009-07-14 06:13 - 001593424 _____ C:\Windows\system32\PerfStringBackup.INI
2017-11-15 11:50 - 2017-04-16 16:43 - 000000000 ____D C:\Users\User\Desktop\Bewerben
2017-11-15 09:40 - 2017-10-20 09:58 - 000000000 ____D C:\Program Files (x86)\GOG Galaxy
2017-11-14 20:11 - 2012-12-15 02:26 - 000004366 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-11-14 20:11 - 2012-12-11 19:39 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-11-14 20:11 - 2012-12-11 19:39 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-11-14 20:11 - 2012-12-11 19:39 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-11-14 20:11 - 2012-12-11 19:39 - 000000000 ____D C:\Windows\system32\Macromed
2017-11-13 10:51 - 2016-01-16 21:52 - 000000000 ____D C:\Program Files (x86)\Steam
2017-11-13 10:48 - 2016-02-07 20:04 - 000000000 ____D C:\Users\User\AppData\Local\Ubisoft Game Launcher
2017-11-13 07:56 - 2016-02-23 16:53 - 000000000 ____D C:\Users\User\AppData\Local\CrashDumps
2017-11-10 08:11 - 2012-12-12 10:15 - 000066672 _____ C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2017-11-09 09:14 - 2012-12-15 16:22 - 000000000 ____D C:\Users\User\Documents\Kapi-Land
2017-11-09 09:02 - 2014-03-01 11:58 - 000000000 ____D C:\Users\User\Documents\GB Einträge
2017-11-09 09:02 - 2012-12-15 16:22 - 000000000 ____D C:\Users\User\Documents\Meine empfangenen Dateien

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-08-29 22:00 - 2016-08-29 22:00 - 000000000 _____ () C:\Program Files\nsr161D.tmp
2017-03-12 23:02 - 2017-03-12 23:02 - 000009199 _____ () C:\Users\User\AppData\Local\recently-used.xbel
2015-02-19 18:28 - 2015-02-19 18:28 - 000000017 _____ () C:\Users\User\AppData\Local\resmon.resmoncfg

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\User\AppData\Local\Temp\DMR\Downloads\152e221a8bef8d2d13c58f995563a1a1\2a159b5701df8e9d7bfd558a3c761b6e\GWX1720_control_panel.exe


Einige Dateien in TEMP:
====================
2017-11-21 09:16 - 2003-07-28 12:28 - 000089136 _____ (Microsoft Corporation) C:\Users\User\AppData\Local\Temp\ose00000.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-11-19 19:15

==================== Ende von FRST.txt ============================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 19-11-2017
durchgeführt von User (21-11-2017 10:41:27)
Gestartet von C:\Users\User\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2012-12-11 18:19:12)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-226341798-1494298974-1954543524-500 - Administrator - Disabled)
Gast (S-1-5-21-226341798-1494298974-1954543524-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-226341798-1494298974-1954543524-1004 - Limited - Enabled)
User (S-1-5-21-226341798-1494298974-1954543524-1001 - Administrator - Enabled) => C:\Users\User

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell 

deinstalliert werden.)

4500_G510gm_Help (HKLM-x32\...\{DF0B357C-5874-47D0-81E7-79AA890B0CE0}) (Version: 000.0.440.000 - Hewlett-Packard) Hidden
4500G510gm (HKLM-x32\...\{BE0D4271-69C9-4f28-AD9B-BB33D126A30E}) (Version: 000.0.423.000 - Hewlett-Packard) Hidden
4500G510gm_Software_Min (HKLM-x32\...\{28379381-B56A-43e1-B505-3098D82B1C30}) (Version: 000.0.423.000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 27 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 27.0.0.187 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated)
Age of Empires III - The Asian Dynasties (HKLM-x32\...\{C43C1415-3DFC-4089-9A32-0BECF28A6046}) (Version: 1.00.0000 - Microsoft Game Studios) Hidden
Age of Empires III - The Asian Dynasties (HKLM-x32\...\InstallShield_{C43C1415-3DFC-4089-9A32-0BECF28A6046}) (Version: 1.00.0000 - Microsoft Game 

Studios)
Age of Empires III - The WarChiefs (HKLM-x32\...\{1C08A24C-B168-407E-A826-68FAF5F20710}) (Version: 1.00.0000 - Microsoft Game Studios) Hidden
Age of Empires III - The WarChiefs (HKLM-x32\...\InstallShield_{1C08A24C-B168-407E-A826-68FAF5F20710}) (Version: 1.00.0000 - Microsoft Game Studios)
Age of Empires III (HKLM-x32\...\{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}) (Version: 1.00.0000 - Microsoft Game Studios) Hidden
Age of Empires III (HKLM-x32\...\InstallShield_{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}) (Version: 1.00.0000 - Microsoft Game Studios)
Airline Tycoon Evolution (HKLM-x32\...\{16E43D5F-5296-4D53-B303-9D951AFE510F}) (Version:  - )
Anno 2205 (HKLM-x32\...\Uplay Install 1253) (Version:  - Ubisoft)
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 384.94 - NVIDIA Corporation) Hidden
ASUSUpdate (HKLM-x32\...\{587178E7-B1DF-494E-9838-FA4DD36E873C}) (Version:  - )
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
BufferChm (HKLM-x32\...\{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}) (Version: 130.0.331.000 - Hewlett-Packard) Hidden
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.7.6623 - CDBurnerXP)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CPUID CPU-Z 1.78 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DaVinci Resolve (HKLM\...\{5D6009B3-E646-463A-805A-D5B95D0E36A2}) (Version: 12.5.5026 - Blackmagic Design)
DaVinci Resolve Panels (HKLM\...\{6FC8261F-6046-4ABB-851B-12FC923D0724}) (Version: 1.0.0.0 - Blackmagic Design)
Destinations (HKLM-x32\...\{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}) (Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (HKLM-x32\...\{21A2F5EE-1DC5-488A-BE7E-E526F8C61488}) (Version: 130.0.372.000 - Hewlett-Packard) Hidden
DocMgr (HKLM-x32\...\{92A51949-EE4C-466D-AAF0-99E74A49A63F}) (Version: 130.0.000.000 - Ihr Firmenname) Hidden
DocProc (HKLM-x32\...\{9B362566-EC1B-4700-BB9C-EC661BDE2175}) (Version: 13.0.0.0 - Hewlett-Packard) Hidden
Dropbox (HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\Dropbox) (Version: 39.4.49 - Dropbox, Inc.)
FastStone Capture 5.3 (HKLM-x32\...\FastStone Capture) (Version: 5.3 - FastStone Soft)
Fax (HKLM-x32\...\{440B915A-0C85-45DB-92AE-75AE14704A64}) (Version: 130.0.418.000 - Hewlett-Packard) Hidden
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
GPBaseService2 (HKLM-x32\...\{63FF21C9-A810-464F-B60A-3111747B1A6D}) (Version: 130.0.371.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Officejet 4500 G510g-m (HKLM\...\{E5083D57-D93F-404C-A91F-1C50D67C2BEB}) (Version: 13.0 - HP)
HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Support Assistant (HKLM-x32\...\{61EB474B-67A6-47F4-B1B7-386851BAB3D0}) (Version: 8.5.37.19 - Hewlett-Packard Company)
HP Support Solutions Framework (HKLM-x32\...\{8F1A441E-AD6D-4732-BD6A-F38D5F1D1E47}) (Version: 12.8.37.11 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (HKLM-x32\...\{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}) (Version: 1.00.0001 - Microsoft) Hidden
HPProductAssistant (HKLM-x32\...\{C43326F5-F135-4551-8270-7F7ABA0462E1}) (Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (HKLM-x32\...\{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}) (Version: 130.0.371.000 - Hewlett-Packard) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.35 - Irfan Skiljan)
Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech)
MarketResearch (HKLM-x32\...\{175F0111-2968-4935-8F70-33108C6A4DE3}) (Version: 130.0.374.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 4.7 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Excel Viewer (HKLM-x32\...\{95120000-003F-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft 

Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft 

Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - 

Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft 

Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft 

Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft 

Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft 

Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft 

Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft 

Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft 

Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft 

Corporation)
Mozilla Firefox 47.0.1 (x64 de) (HKLM\...\Mozilla Firefox 47.0.1 (x64 de)) (Version: 47.0.1 - Mozilla)
Mozilla Firefox 57.0 (x64 de) (HKLM\...\Mozilla Firefox 57.0 (x64 de)) (Version: 57.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 57.0.0.6525 - Mozilla)
MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Network64 (HKLM\...\{05EFBF37-0E52-4579-875C-7EEF0DFB4FCB}) (Version: 130.0.550.000 - Hewlett-Packard) Hidden
Network64 (HKLM\...\{6BFAB6C1-6D46-46DB-A538-A269907C9F2F}) (Version: 140.0.221.000 - Hewlett-Packard) Hidden
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 384.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 384.94 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.62.40 - NVIDIA Corporation)
NVIDIA Grafiktreiber 384.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 384.94 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.27 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
Online Games Manager v1.50 (HKLM-x32\...\Online Games Manager) (Version: 1.50.4 - Real Networks, Inc.)
Planetbase (HKLM-x32\...\1351624781_is1) (Version: 1.2.3 - GOG.com)
Revo Uninstaller 2.0.4 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.4 - VS Revo Group, Ltd.)
Scan (HKLM-x32\...\{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}) (Version: 13.0.0.0 - Hewlett-Packard) Hidden
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 2.11.4.0 - NVIDIA Corporation) 

Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
SimCity 4 Deluxe (HKLM-x32\...\{3F0D0ABE-CDAF-431A-00BC-CBBE018EA74E}) (Version:  - )
Skype™ 7.1 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.1.105 - Skype Technologies S.A.)
SmartWebPrinting (HKLM-x32\...\{68A10D12-0D0F-4212-BDE6-D87FAD32A8FA}) (Version: 130.0.373.000 - Hewlett-Packard) Hidden
SolutionCenter (HKLM-x32\...\{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}) (Version: 130.0.373.000 - Hewlett-Packard) Hidden
Star Wars Galactic Battlegrounds: Clone Campaigns (HKLM-x32\...\{0314ED3D-26A7-4F62-86A2-6B23353445E8}) (Version:  - )
Status (HKLM-x32\...\{AE8705FB-E13C-40A9-8A2D-68D6733FBFC2}) (Version: 130.0.373.000 - Hewlett-Packard) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.64630 - TeamViewer)
Toolbox (HKLM-x32\...\{6BBA26E9-AB03-4FE7-831A-3535584CA002}) (Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (HKLM-x32\...\{DC0A5F99-FD66-433F-9D3A-05DCBA64BE42}) (Version: 130.0.376.000 - Hewlett-Packard) Hidden
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Unity Web Player (HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\UnityWebPlayer) (Version: 5.2.0f3 - Unity Technologies ApS)
Uplay (HKLM-x32\...\Uplay) (Version: 15.0 - Ubisoft)
VLC media player 2.0.4 (HKLM\...\VLC media player) (Version: 2.0.4 - VideoLAN)
VoipConnect (HKLM-x32\...\VoipConnect_is1) (Version: 4.14 build 760 - Finarea S.A. Switzerland)
Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
WebReg (HKLM-x32\...\{43CDF946-F5D9-4292-B006-BA0D92013021}) (Version: 130.0.132.017 - Hewlett-Packard) Hidden
XSplit Gamecaster (HKLM-x32\...\{A41F3C62-007F-4705-8680-4475B0B602FD}) (Version: 3.0.1705.3131 - SplitmediaLabs)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat 

aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll 

[2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll 

[2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll 

[2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll 

[2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin

\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin

\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin

\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft 

Corporation)
ContextMenuHandlers1: [MRAICQCMenu] -> {7C9E7B90-88EC-4852-AC7A-C938268A5D04} =>  -> Keine Datei
ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft 

Corporation)
ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft 

Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-07-19] (NVIDIA 

Corporation)
ContextMenuHandlers1_S-1-5-21-226341798-1494298974-1954543524-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\User\AppData

\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers4_S-1-5-21-226341798-1494298974-1954543524-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\User\AppData

\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers5_S-1-5-21-226341798-1494298974-1954543524-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\User\AppData

\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat 

aufgelistet wird.)

Task: {17708C3A-DDC0-43A2-981D-FE98A890555F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-

02-16] (Google Inc.)
Task: {3C0D7E49-AA5A-43E6-B64B-DF85F5842B6E} - \Microsoft\Windows\Setup\GWXTriggers\Logon-URT -> Keine Datei <==== ACHTUNG
Task: {44ADDDD1-1A02-4588-B902-ADBA582E557D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {4CD7CAF9-B019-4054-8691-1B7D494C90A3} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {4F691EFD-E8BE-4E03-A749-C61BE5962428} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program 

Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2017-06-22] (HP Inc.)
Task: {5704B1A2-7A58-4AB3-9082-5B85DB1F4C8D} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {57DEA349-D687-45A6-A2DD-C9214A147E69} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash

\FlashPlayerUpdateService.exe [2017-11-14] (Adobe Systems Incorporated)
Task: {5A3BEDC0-5151-4155-B225-BF744AEB3689} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {A17F317D-07D5-46E5-B475-7008F7624A5D} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001UA => C:\Users\User

\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.)
Task: {A30D37C3-D3F4-4541-96B9-59ECFC00AB1F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {ABF7A751-AEAA-4E27-8861-7C56100DCEEC} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {AC8B81DD-3A33-464D-94F0-3B91A28A6519} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 

[2016-02-16] (Google Inc.)
Task: {B27F599C-9E7E-4027-8A92-E14A149E7693} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001Core => C:\Users\User

\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.)
Task: {B467647F-E300-4471-B059-A6826A4C6D76} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files

\Microsoft Security Client\\MpCmdRun.exe [2016-11-14] (Microsoft Corporation)
Task: {B738F78A-440A-4791-9583-06B66E6A8201} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program 

Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.)
Task: {BE3C62C4-A13B-440C-8E4B-EF2BA1B91FFA} - System32\Tasks\{EA293D0F-8058-4073-9A0E-78436C85A867} => C:\Windows\system32\pcalua.exe -a D:\autorun.exe 

-d D:\
Task: {C0AE8643-9D91-4090-BAAA-E1ECC6BE1F98} - System32\Tasks\{7621CC34-6AA8-449C-B81E-0206C457E8C3} => C:\Program Files (x86)\Monte Cristo\Airline 

Tycoon Evolution\at.exe [2002-07-22] (Spellbound Entertainment AG)
Task: {C5CC7521-EDE4-47D8-ADA9-FEC7729EC854} - System32\Tasks\{011FBEBA-B072-4150-ADB4-8D6548C6FF6B} => C:\Windows\system32\pcalua.exe -a E:\autorun.exe 

-d E:\
Task: {C7124BA0-581D-48F2-8BEB-7957395AEA54} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {D06B9396-AB79-4AF1-A7C1-75BC51EDCE90} - System32\Tasks\ASUS\ASUS Update Checker => C:\Program Files (x86)\ASUS\ASUSUpdate\UpdateChecker

\UpdateChecker.exe [2008-12-11] ()
Task: {D8174689-0ACF-4C40-B4DE-16ABDCB4FE68} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files 

(x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2017-10-11] (HP Inc.)
Task: {D8278204-E088-4C52-AFCD-6AF514C48A30} - System32\Tasks\HPCeeScheduleForUser => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015

-06-16] (Hewlett-Packard)
Task: {E0D482FD-E2D5-4629-BE49-5D404B76CCEC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files 

(x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.)
Task: {E4D86C89-09D5-4B08-B38A-8657C4706273} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {F50FB200-165F-431F-9E03-D3403946CCC3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files 

(x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.)
Task: {F604F927-1BD8-4ED3-B8DF-5AF815E4B2F8} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files 

(x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001Core.job => C:\Users\User\AppData\Local\Dropbox\Update

\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001UA.job => C:\Users\User\AppData\Local\Dropbox\Update

\DropboxUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForUser.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-03-16 21:18 - 2016-06-14 21:03 - 000367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-04-01 09:15 - 2016-06-14 21:03 - 001147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-03-16 21:18 - 2016-06-14 21:03 - 003611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-02-09 17:58 - 2016-06-14 21:03 - 000288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2006-09-19 10:07 - 2006-09-19 10:07 - 000827392 _____ () C:\Windows\vsnpstd3.exe
2016-04-01 09:15 - 2016-06-14 21:03 - 002665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-04-01 09:15 - 2016-06-14 21:03 - 001988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-04-01 09:15 - 2016-06-14 21:03 - 001840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-02-09 17:58 - 2016-06-14 21:03 - 000207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2016-04-01 09:15 - 2016-06-14 21:03 - 000034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-04-01 09:15 - 2016-06-14 21:03 - 000920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2015-08-08 00:31 - 2016-06-14 21:03 - 000018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2017-11-16 09:00 - 2017-11-13 11:26 - 000725312 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\dropbox_watchdog.dll
2017-11-16 09:00 - 2017-11-13 11:26 - 002075456 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\dropbox_crashpad.dll
2017-11-16 09:01 - 2017-11-13 11:26 - 000100296 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\_ctypes.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000018888 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\select.pyd
2017-11-16 09:01 - 2017-11-13 11:28 - 000020800 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000035792 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000694224 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\unicodedata.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000021848 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000130512 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 001856848 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000022864 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd
2017-11-16 09:00 - 2017-11-13 11:26 - 000145864 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\pyexpat.pyd
2017-11-16 09:00 - 2017-11-13 11:26 - 000116688 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\pywintypes27.dll
2017-11-16 09:01 - 2017-11-13 11:26 - 000105928 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32api.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000022864 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.crt.compiled._winffi_crt.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000040248 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\fastpath.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000024528 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32event.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000043472 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32process.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000062784 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd
2017-11-16 09:00 - 2017-11-13 11:26 - 000392656 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\pythoncom27.dll
2017-11-16 09:00 - 2017-11-13 11:26 - 000020936 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\mmapfile.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000124880 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32file.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000116176 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32security.pyd
2017-11-16 09:01 - 2017-11-13 11:28 - 000392512 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000026456 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.kernel32.compiled._winffi_kernel32.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000024016 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32clipboard.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000175560 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32gui.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000030160 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32pipe.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000026056 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32job.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000048592 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32service.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000057808 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32evtlog.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000021824 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000023368 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winshell.compiled._winshell.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000066392 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winenumhandles.compiled._WinEnumHandles.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000025432 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000022856 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\crashpad.compiled._Crashpad.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 001796920 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000084424 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\sip.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 001956152 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 003859264 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000155464 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000521024 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000050496 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineCore.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000042304 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000131384 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000218944 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000204096 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000060880 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32print.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000054608 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winrpcserver.compiled._RPCServer.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000024016 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32profile.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000022864 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.user32.compiled._winffi_user32.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000028616 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32ts.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000022360 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000021848 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.winerror.compiled._winffi_winerror.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000022360 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.wininet.compiled._winffi_wininet.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000027488 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000349128 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winxpgui.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000023896 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000025424 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd
2017-11-16 09:00 - 2017-11-13 11:26 - 000036296 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\librsync.dll
2017-11-16 09:00 - 2017-11-13 11:28 - 000181056 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL
2017-11-16 09:01 - 2017-11-13 11:29 - 000030536 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\wind3d11.compiled._wind3d11.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000024368 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\libEGL.DLL
2017-11-16 09:00 - 2017-11-13 11:28 - 001638200 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2017-11-16 09:01 - 2017-11-13 11:29 - 000026456 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.winhttp.compiled._winffi_winhttp.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000545080 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000359224 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000038208 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngine.pyd

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-226341798-1494298974-1954543524-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\User\AppData\Roaming\Microsoft\Windows\Themes

\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupfolder: C:^Users^User^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: Dropbox Update => "C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat 

aufgelistet wird.)

FirewallRules: [TCP Query User{38C73ECF-EEAA-4689-8F6E-E596A9AFD63C}F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds.exe] => (Allow) F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds.exe
FirewallRules: [UDP Query User{7CABFE57-E2F4-4804-8340-8B4EF61777CD}F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds.exe] => (Allow) F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds.exe
FirewallRules: [TCP Query User{D4F08B6E-00D4-4D93-8C51-3EA54DDCE158}F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [UDP Query User{A1B5C363-4D48-434B-ABF1-4CBD28E743C3}F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [{4885EE98-93C0-43CD-A64D-54FF1B5C6D56}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{7A2C65A5-AE95-4536-9174-632482754346}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{3FE381B2-1975-4C81-B880-1B567F1130A4}] => (Allow) C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3x.exe
FirewallRules: [{1CD83B4F-5B46-47A1-A92E-75AA41DEECBC}] => (Allow) C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3x.exe
FirewallRules: [{C8CB8EE3-E21E-48CC-B9FF-F010949966BD}] => (Allow) C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3y.exe
FirewallRules: [{A096DE85-F95F-42F0-9463-B7037530692F}] => (Allow) C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3y.exe
FirewallRules: [TCP Query User{CB929C3C-F7B6-42D1-8747-2716FCBF7577}H:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) H:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [UDP Query User{B23DF31A-B7F3-4A73-9810-F1C5E7BEFCB7}H:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) H:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [{8A16690E-1847-497B-97C7-CEA4FEBD3F40}] => (Allow) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{A8F38F22-121F-4AEB-83B2-565615A4A80F}] => (Allow) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{045401DF-BBD4-4EC3-ACAD-92668CE6057E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{953F28D7-D6C8-4681-AA90-9453FD215647}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0CBBC1FA-2A7F-4D7F-96C0-21EB1BD8D430}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BB8C7394-3C10-4437-BC39-1810CAC924C0}] => (Allow) C:\Program Files (x86)\VoipConnect.com\VoipConnect\VoipConnect.exe
FirewallRules: [{8698A9EF-6000-4B02-8720-2B3C33A5C3D9}] => (Allow) C:\Program Files (x86)\VoipConnect.com\VoipConnect\VoipConnect.exe
FirewallRules: [{D978678F-DDF8-4A1F-BCDD-163EDEE37395}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{0D4DBBE6-92C8-4366-95FB-E6EEB77E99CE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{3410AFC9-004F-467F-A1F0-85C8D43AA1F6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{6177BC3D-0796-46FD-989E-D9ED1A0BE4A1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{218D843F-B0C2-44A9-8436-A02AC0890903}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{9D1EF3DA-4BB0-45DE-8DAC-5D6604B9635A}C:\users\user\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\user

\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{309E308D-CE1E-4694-9192-736FDE5DCEDE}C:\users\user\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\user

\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{DE2A0670-F767-4C25-AD57-36257F4C77B5}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{9540191E-C19D-448F-95CF-0BBBA5402F9C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{8F5DDD73-069E-4429-A2D0-5F0B69A7E237}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{55E8DCF6-AA14-4F93-AF26-18A701E8B28F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{16E102C1-B93C-4A3D-B61E-80C4A7916331}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{F5AE4738-8ED6-4978-B023-B83CA6CF4D30}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{673FD18B-90C0-4C03-8E8B-896324A1FB23}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{54DE837F-A44E-4606-965D-2A1828764E92}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{005B2836-7074-4043-A94E-AD557B83D09D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{451D2D2A-7448-4572-9A79-1DC22EB937AA}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{D4BFBFAB-6A1F-47EE-99B8-B522C1DA6B5A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{CA2B5042-5795-499F-933A-71969FD10822}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{53237DB8-36F8-468F-A07A-CC12C35346BF}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{0E84EC79-2897-4D68-B21A-E3B242E4BA36}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{9A310C86-8365-49CE-ACA0-575CB1023294}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{67E68B86-BEAA-41CA-B8C2-0336459EE05B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{EE75CCF1-D530-4B20-920A-C6D7A3856AFB}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{2EA0AA21-5559-4C81-8014-5AC8E2C09DB4}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{C1896BD8-8A8D-4C51-9295-05494A2DF994}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{83DFE077-D21E-4E8B-9988-B5C39E747DBE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{08417A10-4CE7-4CDE-8231-9D3F02D76DBA}I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds.exe] => (Allow) I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds.exe
FirewallRules: [UDP Query User{A8AC8D4A-DE6D-4661-9B21-F40F933066C7}I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds.exe] => (Allow) I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds.exe
FirewallRules: [TCP Query User{4DBBCD17-8227-477A-A4F9-21CD82A0C749}I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [UDP Query User{AE1A6059-9D11-4E21-9F5D-69C324F5AF1C}I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [{6F9A41C0-770F-48A4-8CF5-210D1A036CF5}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{FF8033BC-0D0D-41B1-84C0-478BB14C4033}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{29AA8AE5-3674-4295-8449-CF542BAC1835}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{A114A23C-7599-4EF9-BFAD-20A2AD17BDC5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{EFFE880E-FFA9-4BDF-AFFF-517F9EE12D7C}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Anno 2205\Bin

\Win64\Anno2205.exe
FirewallRules: [{0494C639-441C-44C7-9AF1-CA2EC7DD8DC6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{EE7BD039-DCBF-48BA-8F85-F70E379D726A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{A71781DF-CC1A-49E1-AC35-D6E3CC5A3E05}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{C7296545-CAF5-4C9B-B9F1-EBF93D69B47B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{88874CF6-667C-48D2-90C8-1C10FC120020}] => (Allow) C:\Program Files\Mozilla Firefox Kapi\firefox.exe
FirewallRules: [{F122B669-EA8E-4FF0-B505-A0FEC94C905D}] => (Allow) C:\Program Files\Mozilla Firefox Kapi\firefox.exe
FirewallRules: [{36700C50-E9C9-4C57-87B3-9120C3723ADE}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{7C8890CB-8E8C-4151-BBFF-A57A93D379F6}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{A2E3B6CF-E313-4BA3-BB73-FB538AD219CF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Northgard\Northgard.exe
FirewallRules: [{50E095B0-F8CA-44BF-8C6D-D0D47A7306E1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Northgard\Northgard.exe
FirewallRules: [{2BD9EF50-C96B-4223-9CB8-D4E11EE8A8D9}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe
FirewallRules: [{997E7E88-35A2-40C3-9FC0-EB91860BF627}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe
FirewallRules: [{EF852EFC-EAF4-4DDF-9ED5-B57E8B567392}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe
FirewallRules: [{9A97B598-9304-47B3-BD8A-7432BB850E6B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe
FirewallRules: [{96CD9007-3BE7-4625-9CD5-120D64FFE525}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe
FirewallRules: [{619C430A-1947-4C57-B8A1-513291EEB5D3}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe
FirewallRules: [{BEDDA18D-D18D-4FC0-B905-60A47D5CA44E}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DPDecoder.exe
FirewallRules: [{AA39EECE-F4F1-4082-8255-3A5C0C00053D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Universim Demo\The Universim.exe
FirewallRules: [{12A0A37E-45EF-4C6A-B031-0D6486DC09C2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Universim Demo\The Universim.exe
FirewallRules: [{34AD938E-A5B7-4983-BB6A-2B8DFB520240}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Gamecaster\XSplit.Gamecaster.exe
FirewallRules: [{63B6A152-6093-42FC-8F27-DAA389E7C24C}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Gamecaster\XSplit.Gamecaster.exe
FirewallRules: [{F0FC645E-B43C-42EF-9681-4CC91FB0DC1F}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Gamecaster\XSplit.cam.exe
FirewallRules: [{252CE295-74D3-423B-A08E-E96A414F954B}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Gamecaster\XSplit.cam.exe
FirewallRules: [{2CA3B65B-F27B-4FF0-9915-F74279BBB069}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{1E802BAE-5A68-40C5-A149-BE9EA6416803}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe

==================== Wiederherstellungspunkte =========================

05-11-2017 12:16:03 Windows Update
09-11-2017 08:21:27 Windows Update
12-11-2017 19:09:18 Windows Update
15-11-2017 20:00:15 Windows Update
18-11-2017 19:39:03 Revo Uninstaller's restore point - 7-Zip 9.20 (x64 edition)
18-11-2017 19:41:22 Revo Uninstaller's restore point - Adobe Acrobat Reader DC - Deutsch
18-11-2017 19:42:54 Revo Uninstaller's restore point - CCleaner
18-11-2017 19:43:28 Revo Uninstaller's restore point - chip 1-click download service
18-11-2017 19:43:40 chip 1-click download service wurde entfernt.
18-11-2017 19:44:38 Revo Uninstaller's restore point - GIMP 2.8.20
20-11-2017 14:04:15 Windows Update
21-11-2017 09:14:17 Revo Uninstaller's restore point - Microsoft Office Professional Edition 2003
21-11-2017 09:18:04 Revo Uninstaller's restore point - Microsoft Office Professional Edition 2003
21-11-2017 09:18:28 Revo Uninstaller's restore point - Microsoft Office Professional Edition 2003

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Officejet 4500 G510g-m
Description: Officejet 4500 G510g-m
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Officejet 4500 G510g-m
Description: Officejet 4500 G510g-m
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: pfnfd_1_10_0_9
Description: pfnfd_1_10_0_9
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: pfnfd_1_10_0_9
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Coprozessor
Description: Coprozessor
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/21/2017 09:14:16 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 

0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   

Generatorinstanz-ID: {2eef1a47-6c0b-4b17-9ad1-9eac8032eef2}

Error: (11/18/2017 07:39:02 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 

0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   

Generatorinstanz-ID: {4a17bf11-ce63-425f-8634-37424af72206}

Error: (11/13/2017 07:55:59 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GalaxyClient Helper.exe, Version: 1.2.26.8, Zeitstempel: 0x59e72d17
Name des fehlerhaften Moduls: libcef.dll, Version: 3.2704.1434.0, Zeitstempel: 0x57d833c4
Ausnahmecode: 0x80000003
Fehleroffset: 0x000a173d
ID des fehlerhaften Prozesses: 0x149c
Startzeit der fehlerhaften Anwendung: 0x01d35c4c6d9e4860
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\GOG Galaxy\libcef.dll
Berichtskennung: b41d4f20-c83f-11e7-a296-002618810f02

Error: (11/07/2017 08:00:11 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: hpqtra08.exe, Version: 130.0.376.0, Zeitstempel: 0x4a163449
Name des fehlerhaften Moduls: hpqusg.dll, Version: 130.0.374.0, Zeitstempel: 0x4a161738
Ausnahmecode: 0xc0000417
Fehleroffset: 0x00032dab
ID des fehlerhaften Prozesses: 0x838
Startzeit der fehlerhaften Anwendung: 0x01d35795e36e88e0
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusg.dll
Berichtskennung: 4b9b6320-c389-11e7-9aed-002618810f02

Error: (11/03/2017 11:40:41 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm firefox.exe, Version 56.0.2.6506 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den 

Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 15b8

Startzeit: 01d3548b344b7c90

Endzeit: 265

Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Berichts-ID: 6c3e4331-c083-11e7-9a7a-002618810f02

Error: (11/02/2017 09:28:51 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm firefox.exe, Version 47.0.1.6018 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den 

Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 698

Startzeit: 01d35409c40009a0

Endzeit: 201

Anwendungspfad: C:\Program Files\Mozilla Firefox Kapi\firefox.exe

Berichts-ID: 6c27b6a1-c00c-11e7-b997-002618810f02

Error: (10/09/2017 07:48:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: HPSupportSolutionsFrameworkService.exe, Version: 8.7.27.15, Zeitstempel: 0x595d9791
Name des fehlerhaften Moduls: clr.dll, Version: 4.7.2114.0, Zeitstempel: 0x59a63e48
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000001c2716
ID des fehlerhaften Prozesses: 0x8f8
Startzeit der fehlerhaften Anwendung: 0x01d340c953af06e0
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
Pfad des fehlerhaften Moduls: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
Berichtskennung: e698f5f0-acbd-11e7-a22d-002618810f02

Error: (10/09/2017 07:48:45 AM) (Source: .NET Runtime) (EventID: 1023) (User: )
Description: Anwendung: HPSupportSolutionsFrameworkService.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines internen 

Fehlers in der .NET-Laufzeit beendet. bei IP 000007FEF6BB2716 (000007FEF69F0000) mit Exitcode 80131506.

Error: (10/06/2017 07:11:30 AM) (Source: chip 1-click download service) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. Der Dienstprozess konnte keine Verbindung mit dem Dienstcontroller herstellen

Error: (09/28/2017 10:53:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 55.0.3.6445, Zeitstempel: 0x599edbef
Name des fehlerhaften Moduls: xul.dll, Version: 55.0.3.6445, Zeitstempel: 0x599edbdd
Ausnahmecode: 0x80000003
Fehleroffset: 0x0076a5cf
ID des fehlerhaften Prozesses: 0x15e8
Startzeit der fehlerhaften Anwendung: 0x01d33892d4376850
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Mozilla Firefox\xul.dll
Berichtskennung: 7bd4fb70-a497-11e7-b141-002618810f02


Systemfehler:
=============
Error: (11/21/2017 08:06:13 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen (Anwendungsspezifisch) wird der SID (S-1-5-18) für Benutzer NT-AUTORITÄT\SYSTEM von Adresse LocalHost 

(unter Verwendung von LRPC) keine Berechtigung zum Start (Lokal) für die COM-Serveranwendung mit CLSID 
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
 und APPID 
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
 gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungsprogramm für Komponentendienste geändert werden.

Error: (11/21/2017 08:05:16 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
pfnfd_1_10_0_9

Error: (11/20/2017 05:00:30 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen (Anwendungsspezifisch) wird der SID (S-1-5-18) für Benutzer NT-AUTORITÄT\SYSTEM von Adresse LocalHost 

(unter Verwendung von LRPC) keine Berechtigung zum Start (Lokal) für die COM-Serveranwendung mit CLSID 
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
 und APPID 
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
 gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungsprogramm für Komponentendienste geändert werden.

Error: (11/20/2017 04:59:53 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
pfnfd_1_10_0_9

Error: (11/20/2017 01:51:21 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen (Anwendungsspezifisch) wird der SID (S-1-5-18) für Benutzer NT-AUTORITÄT\SYSTEM von Adresse LocalHost 

(unter Verwendung von LRPC) keine Berechtigung zum Start (Lokal) für die COM-Serveranwendung mit CLSID 
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
 und APPID 
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
 gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungsprogramm für Komponentendienste geändert werden.

Error: (11/20/2017 01:50:40 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
pfnfd_1_10_0_9

Error: (11/19/2017 03:59:09 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen (Anwendungsspezifisch) wird der SID (S-1-5-18) für Benutzer NT-AUTORITÄT\SYSTEM von Adresse LocalHost 

(unter Verwendung von LRPC) keine Berechtigung zum Start (Lokal) für die COM-Serveranwendung mit CLSID 
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
 und APPID 
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
 gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungsprogramm für Komponentendienste geändert werden.

Error: (11/19/2017 03:58:30 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
pfnfd_1_10_0_9

Error: (11/18/2017 01:45:56 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen (Anwendungsspezifisch) wird der SID (S-1-5-18) für Benutzer NT-AUTORITÄT\SYSTEM von Adresse LocalHost 

(unter Verwendung von LRPC) keine Berechtigung zum Start (Lokal) für die COM-Serveranwendung mit CLSID 
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
 und APPID 
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
 gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungsprogramm für Komponentendienste geändert werden.

Error: (11/18/2017 01:45:44 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
pfnfd_1_10_0_9


==================== Speicherinformationen =========================== 

Prozessor: AMD Phenom(tm) II X4 940 Processor
Prozentuale Nutzung des RAM: 27%
Installierter physikalischer RAM: 8191.18 MB
Verfügbarer physikalischer RAM: 5978.03 MB
Summe virtueller Speicher: 16380.54 MB
Verfügbarer virtueller Speicher: 14283.26 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:180.81 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 95DD2725)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
         

Die Logs sind so unbrauchbar. Du hast da störende Zeilenumbrüche drin. Poste die Logs bitte richtig!

??
Habe sie so kopiert, wie sie angezeigt wurden bzw wie ich die anderen/ersten Logs auch gepostet habe
Liegt es vlt am nunmehr fehlenden Office/Word ?

Das sind ganz einfach REINE TEXT Files. Poste sie notfalls da --> https://pastebin.com

und verlink es dann

https://pastebin.com/index/6k8ursvc

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 19-11-2017
durchgeführt von User (Administrator) auf USER-PC (21-11-2017 10:40:27)
Gestartet von C:\Users\User\Downloads
Geladene Profile: User (Verfügbare Profile: User)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Online Games Manager\ogmservice.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
() C:\Windows\vsnpstd3.exe
(UltimateOutsider) C:\Users\User\AppData\Local\Temp\DMR\Downloads\152e221a8bef8d2d13c58f995563a1a1\2a159b5701df8e9d7bfd558a3c761b6e\GWX1720_control_panel.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Dropbox, Inc.) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Dropbox, Inc.) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Dropbox, Inc.) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-15] (Logitech Inc.)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)
HKLM\...\Run: [snpstd3] => C:\Windows\vsnpstd3.exe [827392 2006-09-19] ()
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [GwxControlPanelMonitor] => C:\Users\User\AppData\Local\Temp\DMR\Downloads\152e221a8bef8d2d13c58f995563a1a1\2a159b5701df8e9d7bfd558a3c761b6e\GWX1720_control_panel.exe [4559944 2016-02-07] (UltimateOutsider) <==== ACHTUNG
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\Run: [*LABAL*] => [X]
HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\Run: [GalaxyClient] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [5284928 2017-11-15] (GOG.com)
HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\MountPoints2: {6b9e7571-9314-11e2-a317-002618810f02} - E:\RunGame.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-09-04]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2017-11-16]
ShortcutTarget: Dropbox.lnk -> C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{DBC0A50C-F994-4579-8DC9-464A072EB067}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mystartsearch.com/web/?type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mystartsearch.com/web/?type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}
HKU\S-1-5-21-226341798-1494298974-1954543524-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {780042B5-BA4C-4321-A76F-511211A27969} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {DDD1F70E-8AF5-429F-818F-E369432D2A7A} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {F208F861-48A5-4BA7-9C80-75413C389F68} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.)
Toolbar: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> Kein Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  Keine Datei
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab

FireFox:
========
FF DefaultProfile: pehg2cqu.default
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default [2017-11-21]
FF Homepage: Mozilla\Firefox\Profiles\pehg2cqu.default -> 
FF Keyword.URL: Mozilla\Firefox\Profiles\pehg2cqu.default -> hxxps://es.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=714647&p=
FF Extension: (RegnumHelper) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\Extensions\{05fb5410-b1ee-4bf6-8778-76e284d95c08}.xpi [2012-12-15] [Lagacy] [ist nicht signiert]
FF Extension: (Microsoft .NET Framework Assistant) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi [2015-08-06] [Lagacy]
FF Extension: (iMacros for Firefox) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670}.xpi [2017-03-02] [Lagacy]
FF Extension: (Video DownloadHelper) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-11-17]
FF Extension: (Greasemonkey) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2017-11-17]
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\b8pypxzl.Kapi [2017-11-21]
FF Homepage: Mozilla\Firefox\Profiles\b8pypxzl.Kapi -> 
FF NetworkProxy: Mozilla\Firefox\Profiles\b8pypxzl.Kapi -> type", 0
FF Extension: (RegnumHelper) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\b8pypxzl.Kapi\Extensions\{05fb5410-b1ee-4bf6-8778-76e284d95c08}.xpi [2016-08-29] [Lagacy] [ist nicht signiert]
FF Extension: (iMacros for Firefox) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\b8pypxzl.Kapi\Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670}.xpi [2017-03-10] [Lagacy]
FF Extension: (Video DownloadHelper) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\b8pypxzl.Kapi\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-05-10] [Lagacy]
FF Extension: (Greasemonkey) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\b8pypxzl.Kapi\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2017-04-26] [Lagacy]
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\extensions\searchengine@gmail.com => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2015-09-04] [Lagacy] [ist nicht signiert]
FF HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_187.dll [2017-11-14] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2012-10-19] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_187.dll [2017-11-14] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-07-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-07-18] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-226341798-1494298974-1954543524-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-08-28] (Unity Technologies ApS)
StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox Kapi\firefox.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [529984 2017-11-15] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [8330304 2017-11-15] (GOG.com)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [323952 2017-09-27] (HP Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-07-18] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
R2 ogmservice; C:\Program Files (x86)\Online Games Manager\ogmservice.exe [582544 2016-07-13] (RealNetworks, Inc.)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7248144 2016-08-08] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [14392 2007-12-17] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-03-30] (Disc Soft Ltd)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
S3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [10550272 2007-03-27] (Sonix Co. Ltd.)
S3 StMp3Recx64; C:\Windows\System32\Drivers\StMp3Recx64.sys [26112 2007-01-12] (Generic)
S1 pfnfd_1_10_0_9; system32\drivers\pfnfd_1_10_0_9.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-11-21 10:40 - 2017-11-21 10:40 - 000000000 ____D C:\Users\User\Downloads\FRST-OlderVersion
2017-11-18 19:36 - 2017-11-18 19:36 - 007189760 _____ (VS Revo Group ) C:\Users\User\Downloads\revo204setup.exe
2017-11-18 19:36 - 2017-11-18 19:36 - 000001034 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2017-11-18 19:36 - 2017-11-18 19:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-11-18 19:36 - 2017-11-18 19:36 - 000000000 ____D C:\Program Files\VS Revo Group
2017-11-16 10:29 - 2017-11-16 10:29 - 000831360 _____ C:\Windows\Minidump\111617-26395-01.dmp
2017-11-16 09:01 - 2017-11-16 09:01 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-11-15 11:09 - 2017-11-15 11:09 - 000062398 _____ C:\Users\User\Desktop\Addition.txt
2017-11-15 11:09 - 2017-11-15 11:09 - 000026764 _____ C:\Users\User\Desktop\FRST.txt
2017-11-15 10:58 - 2017-11-15 10:59 - 000062395 _____ C:\Users\User\Downloads\Addition.txt
2017-11-15 10:57 - 2017-11-21 10:40 - 000018115 _____ C:\Users\User\Downloads\FRST.txt
2017-11-15 10:56 - 2017-11-21 10:40 - 002391552 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2017-11-15 10:56 - 2017-11-21 10:40 - 000000000 ____D C:\FRST
2017-11-15 09:58 - 2017-10-18 08:31 - 000395976 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-11-15 09:58 - 2017-10-18 07:45 - 000347336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-11-15 09:58 - 2017-10-18 03:34 - 000134376 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2017-11-15 09:58 - 2017-10-18 03:30 - 000605184 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-11-15 09:58 - 2017-10-18 03:06 - 000344064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2017-11-15 09:58 - 2017-10-18 03:06 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2017-11-15 09:58 - 2017-10-18 03:06 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2017-11-15 09:58 - 2017-10-18 03:06 - 000056320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2017-11-15 09:58 - 2017-10-18 03:06 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2017-11-15 09:58 - 2017-10-18 03:06 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2017-11-15 09:58 - 2017-10-18 03:06 - 000007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2017-11-15 09:58 - 2017-10-17 00:07 - 001680616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-11-15 09:58 - 2017-10-16 23:34 - 003222528 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-11-15 09:58 - 2017-10-16 22:55 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2017-11-15 09:58 - 2017-10-15 23:04 - 000407392 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2017-11-15 09:58 - 2017-10-14 09:38 - 025731584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-11-15 09:58 - 2017-10-14 09:23 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-11-15 09:58 - 2017-10-14 09:23 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-11-15 09:58 - 2017-10-14 09:13 - 002903552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-11-15 09:58 - 2017-10-14 09:12 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-11-15 09:58 - 2017-10-14 09:11 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-11-15 09:58 - 2017-10-14 09:11 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-11-15 09:58 - 2017-10-14 09:11 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-11-15 09:58 - 2017-10-14 09:11 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-11-15 09:58 - 2017-10-14 09:09 - 005979648 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-11-15 09:58 - 2017-10-14 09:05 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-11-15 09:58 - 2017-10-14 09:04 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-11-15 09:58 - 2017-10-14 09:02 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-11-15 09:58 - 2017-10-14 09:01 - 000816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-11-15 09:58 - 2017-10-14 09:01 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-11-15 09:58 - 2017-10-14 09:01 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-11-15 09:58 - 2017-10-14 09:00 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-11-15 09:58 - 2017-10-14 08:55 - 000968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-11-15 09:58 - 2017-10-14 08:53 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-11-15 09:58 - 2017-10-14 08:47 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-11-15 09:58 - 2017-10-14 08:47 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-11-15 09:58 - 2017-10-14 08:46 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-11-15 09:58 - 2017-10-14 08:43 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-11-15 09:58 - 2017-10-14 08:43 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-11-15 09:58 - 2017-10-14 08:41 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-11-15 09:58 - 2017-10-14 08:40 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-11-15 09:58 - 2017-10-14 08:31 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-11-15 09:58 - 2017-10-14 08:30 - 015266816 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-11-15 09:58 - 2017-10-14 08:30 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-11-15 09:58 - 2017-10-14 08:29 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-11-15 09:58 - 2017-10-14 08:28 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-11-15 09:58 - 2017-10-14 08:27 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-11-15 09:58 - 2017-10-14 08:21 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-11-15 09:58 - 2017-10-14 08:14 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-11-15 09:58 - 2017-10-14 08:09 - 001544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-11-15 09:58 - 2017-10-14 08:03 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-11-15 09:58 - 2017-10-14 07:58 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-11-15 09:58 - 2017-10-14 07:53 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-11-15 09:58 - 2017-10-14 07:53 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-11-15 09:58 - 2017-10-14 07:52 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-11-15 09:58 - 2017-10-14 07:52 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-11-15 09:58 - 2017-10-14 07:51 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-11-15 09:58 - 2017-10-14 07:50 - 002293760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-11-15 09:58 - 2017-10-14 07:47 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-11-15 09:58 - 2017-10-14 07:47 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-11-15 09:58 - 2017-10-14 07:46 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-11-15 09:58 - 2017-10-14 07:45 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-11-15 09:58 - 2017-10-14 07:45 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-11-15 09:58 - 2017-10-14 07:45 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-11-15 09:58 - 2017-10-14 07:38 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-11-15 09:58 - 2017-10-14 07:35 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-11-15 09:58 - 2017-10-14 07:35 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-11-15 09:58 - 2017-10-14 07:34 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-11-15 09:58 - 2017-10-14 07:33 - 004542464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-11-15 09:58 - 2017-10-14 07:33 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-11-15 09:58 - 2017-10-14 07:32 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-11-15 09:58 - 2017-10-14 07:31 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-11-15 09:58 - 2017-10-14 07:30 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-11-15 09:58 - 2017-10-14 07:28 - 013680128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-11-15 09:58 - 2017-10-14 07:25 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-11-15 09:58 - 2017-10-14 07:24 - 000694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-11-15 09:58 - 2017-10-14 07:23 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-11-15 09:58 - 2017-10-14 07:23 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-11-15 09:58 - 2017-10-14 07:10 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-11-15 09:58 - 2017-10-14 07:07 - 001314304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-11-15 09:58 - 2017-10-14 07:04 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-11-15 09:58 - 2017-10-12 01:58 - 000382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 014635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 012574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2017-11-15 09:58 - 2017-10-12 01:55 - 002319872 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 002222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 002058240 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2017-11-15 09:58 - 2017-10-12 01:55 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2017-11-15 09:58 - 2017-10-12 01:40 - 000308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-11-15 09:58 - 2017-10-12 01:39 - 000591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-11-15 09:58 - 2017-10-12 01:38 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-11-15 09:58 - 2017-10-12 01:38 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-11-15 09:58 - 2017-10-12 01:37 - 012574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2017-11-15 09:58 - 2017-10-12 01:37 - 011410944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 001549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 001400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 001363968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2017-11-15 09:58 - 2017-10-12 01:26 - 000427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-11-15 09:58 - 2017-10-12 01:26 - 000164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-11-15 09:58 - 2017-10-12 01:25 - 000086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2017-11-15 09:58 - 2017-10-12 01:25 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2017-11-15 09:58 - 2017-10-12 01:24 - 000008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2017-11-15 09:58 - 2017-10-12 01:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2017-11-15 09:58 - 2017-10-12 01:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2017-11-15 09:58 - 2017-10-12 01:20 - 000113152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2017-11-15 09:58 - 2017-10-12 01:16 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-11-15 09:58 - 2017-10-04 14:04 - 002023936 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2017-11-15 09:58 - 2017-10-04 14:04 - 001570304 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-11-15 09:58 - 2017-10-04 14:04 - 000670208 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2017-11-15 09:58 - 2017-10-04 14:04 - 000603648 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-11-15 09:58 - 2017-10-04 14:04 - 000370688 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-11-15 09:58 - 2017-10-04 14:04 - 000241664 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2017-11-15 09:58 - 2017-10-04 14:04 - 000181760 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000995272 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2017-11-14 21:22 - 2017-11-14 21:22 - 000001182 _____ C:\Users\User\Desktop\eset.txt
2017-11-14 17:52 - 2017-11-14 17:52 - 000000000 ____D C:\Users\User\AppData\Local\ESET
2017-11-14 17:51 - 2017-11-14 17:51 - 006974584 _____ (ESET spol. s r.o.) C:\Users\User\Downloads\esetonlinescanner_deu.exe
2017-11-10 08:11 - 2017-11-10 08:11 - 001004024 _____ C:\Windows\Minidump\111017-29484-01.dmp
2017-11-09 15:58 - 2017-11-09 15:59 - 000000000 ____D C:\Users\User\Downloads\Altdeutsch für Word
2017-10-30 17:03 - 2017-10-30 17:03 - 000000000 ____D C:\Users\User\AppData\Local\Introversion
2017-10-30 16:52 - 2017-10-30 16:52 - 000000222 _____ C:\Users\User\Desktop\Prison Architect.url
2017-10-29 21:10 - 2017-11-16 10:29 - 624295804 _____ C:\Windows\MEMORY.DMP
2017-10-29 21:10 - 2017-10-29 21:10 - 000719064 _____ C:\Windows\Minidump\102917-17581-01.dmp

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-11-21 10:41 - 2015-08-07 08:19 - 000001220 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001UA.job
2017-11-21 10:38 - 2016-11-21 07:36 - 000000000 ____D C:\Users\User\AppData\LocalLow\Mozilla
2017-11-21 09:16 - 2017-10-11 07:51 - 000003180 _____ C:\Windows\System32\Tasks\HPCeeScheduleForUser
2017-11-21 09:16 - 2017-10-11 07:51 - 000000328 _____ C:\Windows\Tasks\HPCeeScheduleForUser.job
2017-11-21 09:16 - 2013-03-21 23:41 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2017-11-21 09:16 - 2009-07-14 19:18 - 000000000 ____D C:\Windows\ShellNew
2017-11-21 09:16 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2017-11-21 08:19 - 2009-07-14 05:45 - 000022656 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-11-21 08:19 - 2009-07-14 05:45 - 000022656 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-11-21 08:04 - 2016-02-09 17:56 - 000000000 ____D C:\ProgramData\NVIDIA
2017-11-21 08:04 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-11-20 14:41 - 2015-08-07 08:19 - 000001168 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001Core.job
2017-11-18 13:44 - 2016-11-19 16:09 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-11-18 13:44 - 2012-12-15 01:33 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-11-17 17:36 - 2012-12-15 01:33 - 000000000 ____D C:\Users\User\AppData\Roaming\Mozilla
2017-11-17 09:19 - 2012-12-15 16:36 - 000000000 ____D C:\Users\User\Documents\Chat, Bilder
2017-11-17 09:18 - 2012-12-15 16:36 - 000000000 ____D C:\Users\User\Documents\Chat, sonstiges
2017-11-17 09:17 - 2012-12-15 16:36 - 000000000 ____D C:\Users\User\Documents\Chat, Sprüche
2017-11-16 20:37 - 2017-02-04 18:29 - 000000000 ____D C:\Users\User\Desktop\Kapi-Regnum
2017-11-16 12:17 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\rescache
2017-11-16 10:29 - 2016-11-22 16:20 - 000000000 ____D C:\Windows\Minidump
2017-11-16 09:07 - 2016-02-16 12:24 - 000003542 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-11-16 09:07 - 2016-02-16 12:24 - 000003414 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-11-16 09:02 - 2013-11-03 14:20 - 000000000 ____D C:\Users\User\AppData\Roaming\Dropbox
2017-11-16 08:54 - 2009-07-14 05:45 - 000300312 _____ C:\Windows\system32\FNTCACHE.DAT
2017-11-15 20:20 - 2014-12-10 17:11 - 000000000 ____D C:\Windows\system32\appraiser
2017-11-15 20:03 - 2014-02-27 22:46 - 001593424 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-11-15 20:03 - 2009-07-14 18:58 - 000699284 _____ C:\Windows\system32\perfh007.dat
2017-11-15 20:03 - 2009-07-14 18:58 - 000149424 _____ C:\Windows\system32\perfc007.dat
2017-11-15 20:03 - 2009-07-14 06:13 - 001593424 _____ C:\Windows\system32\PerfStringBackup.INI
2017-11-15 11:50 - 2017-04-16 16:43 - 000000000 ____D C:\Users\User\Desktop\Bewerben
2017-11-15 09:40 - 2017-10-20 09:58 - 000000000 ____D C:\Program Files (x86)\GOG Galaxy
2017-11-14 20:11 - 2012-12-15 02:26 - 000004366 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-11-14 20:11 - 2012-12-11 19:39 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-11-14 20:11 - 2012-12-11 19:39 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-11-14 20:11 - 2012-12-11 19:39 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-11-14 20:11 - 2012-12-11 19:39 - 000000000 ____D C:\Windows\system32\Macromed
2017-11-13 10:51 - 2016-01-16 21:52 - 000000000 ____D C:\Program Files (x86)\Steam
2017-11-13 10:48 - 2016-02-07 20:04 - 000000000 ____D C:\Users\User\AppData\Local\Ubisoft Game Launcher
2017-11-13 07:56 - 2016-02-23 16:53 - 000000000 ____D C:\Users\User\AppData\Local\CrashDumps
2017-11-10 08:11 - 2012-12-12 10:15 - 000066672 _____ C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2017-11-09 09:14 - 2012-12-15 16:22 - 000000000 ____D C:\Users\User\Documents\Kapi-Land
2017-11-09 09:02 - 2014-03-01 11:58 - 000000000 ____D C:\Users\User\Documents\GB Einträge
2017-11-09 09:02 - 2012-12-15 16:22 - 000000000 ____D C:\Users\User\Documents\Meine empfangenen Dateien

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-08-29 22:00 - 2016-08-29 22:00 - 000000000 _____ () C:\Program Files\nsr161D.tmp
2017-03-12 23:02 - 2017-03-12 23:02 - 000009199 _____ () C:\Users\User\AppData\Local\recently-used.xbel
2015-02-19 18:28 - 2015-02-19 18:28 - 000000017 _____ () C:\Users\User\AppData\Local\resmon.resmoncfg

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\User\AppData\Local\Temp\DMR\Downloads\152e221a8bef8d2d13c58f995563a1a1\2a159b5701df8e9d7bfd558a3c761b6e\GWX1720_control_panel.exe


Einige Dateien in TEMP:
====================
2017-11-21 09:16 - 2003-07-28 12:28 - 000089136 _____ (Microsoft Corporation) C:\Users\User\AppData\Local\Temp\ose00000.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-11-19 19:15

==================== Ende von FRST.txt ============================
         

https://pastebin.com/index/uPC1CbU4

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 19-11-2017
durchgeführt von User (21-11-2017 10:41:27)
Gestartet von C:\Users\User\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2012-12-11 18:19:12)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-226341798-1494298974-1954543524-500 - Administrator - Disabled)
Gast (S-1-5-21-226341798-1494298974-1954543524-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-226341798-1494298974-1954543524-1004 - Limited - Enabled)
User (S-1-5-21-226341798-1494298974-1954543524-1001 - Administrator - Enabled) => C:\Users\User

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

4500_G510gm_Help (HKLM-x32\...\{DF0B357C-5874-47D0-81E7-79AA890B0CE0}) (Version: 000.0.440.000 - Hewlett-Packard) Hidden
4500G510gm (HKLM-x32\...\{BE0D4271-69C9-4f28-AD9B-BB33D126A30E}) (Version: 000.0.423.000 - Hewlett-Packard) Hidden
4500G510gm_Software_Min (HKLM-x32\...\{28379381-B56A-43e1-B505-3098D82B1C30}) (Version: 000.0.423.000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 27 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 27.0.0.187 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated)
Age of Empires III - The Asian Dynasties (HKLM-x32\...\{C43C1415-3DFC-4089-9A32-0BECF28A6046}) (Version: 1.00.0000 - Microsoft Game Studios) Hidden
Age of Empires III - The Asian Dynasties (HKLM-x32\...\InstallShield_{C43C1415-3DFC-4089-9A32-0BECF28A6046}) (Version: 1.00.0000 - Microsoft Game Studios)
Age of Empires III - The WarChiefs (HKLM-x32\...\{1C08A24C-B168-407E-A826-68FAF5F20710}) (Version: 1.00.0000 - Microsoft Game Studios) Hidden
Age of Empires III - The WarChiefs (HKLM-x32\...\InstallShield_{1C08A24C-B168-407E-A826-68FAF5F20710}) (Version: 1.00.0000 - Microsoft Game Studios)
Age of Empires III (HKLM-x32\...\{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}) (Version: 1.00.0000 - Microsoft Game Studios) Hidden
Age of Empires III (HKLM-x32\...\InstallShield_{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}) (Version: 1.00.0000 - Microsoft Game Studios)
Airline Tycoon Evolution (HKLM-x32\...\{16E43D5F-5296-4D53-B303-9D951AFE510F}) (Version:  - )
Anno 2205 (HKLM-x32\...\Uplay Install 1253) (Version:  - Ubisoft)
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 384.94 - NVIDIA Corporation) Hidden
ASUSUpdate (HKLM-x32\...\{587178E7-B1DF-494E-9838-FA4DD36E873C}) (Version:  - )
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
BufferChm (HKLM-x32\...\{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}) (Version: 130.0.331.000 - Hewlett-Packard) Hidden
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.7.6623 - CDBurnerXP)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CPUID CPU-Z 1.78 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DaVinci Resolve (HKLM\...\{5D6009B3-E646-463A-805A-D5B95D0E36A2}) (Version: 12.5.5026 - Blackmagic Design)
DaVinci Resolve Panels (HKLM\...\{6FC8261F-6046-4ABB-851B-12FC923D0724}) (Version: 1.0.0.0 - Blackmagic Design)
Destinations (HKLM-x32\...\{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}) (Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (HKLM-x32\...\{21A2F5EE-1DC5-488A-BE7E-E526F8C61488}) (Version: 130.0.372.000 - Hewlett-Packard) Hidden
DocMgr (HKLM-x32\...\{92A51949-EE4C-466D-AAF0-99E74A49A63F}) (Version: 130.0.000.000 - Ihr Firmenname) Hidden
DocProc (HKLM-x32\...\{9B362566-EC1B-4700-BB9C-EC661BDE2175}) (Version: 13.0.0.0 - Hewlett-Packard) Hidden
Dropbox (HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\Dropbox) (Version: 39.4.49 - Dropbox, Inc.)
FastStone Capture 5.3 (HKLM-x32\...\FastStone Capture) (Version: 5.3 - FastStone Soft)
Fax (HKLM-x32\...\{440B915A-0C85-45DB-92AE-75AE14704A64}) (Version: 130.0.418.000 - Hewlett-Packard) Hidden
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
GPBaseService2 (HKLM-x32\...\{63FF21C9-A810-464F-B60A-3111747B1A6D}) (Version: 130.0.371.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Officejet 4500 G510g-m (HKLM\...\{E5083D57-D93F-404C-A91F-1C50D67C2BEB}) (Version: 13.0 - HP)
HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Support Assistant (HKLM-x32\...\{61EB474B-67A6-47F4-B1B7-386851BAB3D0}) (Version: 8.5.37.19 - Hewlett-Packard Company)
HP Support Solutions Framework (HKLM-x32\...\{8F1A441E-AD6D-4732-BD6A-F38D5F1D1E47}) (Version: 12.8.37.11 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (HKLM-x32\...\{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}) (Version: 1.00.0001 - Microsoft) Hidden
HPProductAssistant (HKLM-x32\...\{C43326F5-F135-4551-8270-7F7ABA0462E1}) (Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (HKLM-x32\...\{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}) (Version: 130.0.371.000 - Hewlett-Packard) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.35 - Irfan Skiljan)
Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech)
MarketResearch (HKLM-x32\...\{175F0111-2968-4935-8F70-33108C6A4DE3}) (Version: 130.0.374.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 4.7 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Excel Viewer (HKLM-x32\...\{95120000-003F-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Mozilla Firefox 47.0.1 (x64 de) (HKLM\...\Mozilla Firefox 47.0.1 (x64 de)) (Version: 47.0.1 - Mozilla)
Mozilla Firefox 57.0 (x64 de) (HKLM\...\Mozilla Firefox 57.0 (x64 de)) (Version: 57.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 57.0.0.6525 - Mozilla)
MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Network64 (HKLM\...\{05EFBF37-0E52-4579-875C-7EEF0DFB4FCB}) (Version: 130.0.550.000 - Hewlett-Packard) Hidden
Network64 (HKLM\...\{6BFAB6C1-6D46-46DB-A538-A269907C9F2F}) (Version: 140.0.221.000 - Hewlett-Packard) Hidden
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 384.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 384.94 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.62.40 - NVIDIA Corporation)
NVIDIA Grafiktreiber 384.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 384.94 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.27 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
Online Games Manager v1.50 (HKLM-x32\...\Online Games Manager) (Version: 1.50.4 - Real Networks, Inc.)
Planetbase (HKLM-x32\...\1351624781_is1) (Version: 1.2.3 - GOG.com)
Revo Uninstaller 2.0.4 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.4 - VS Revo Group, Ltd.)
Scan (HKLM-x32\...\{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}) (Version: 13.0.0.0 - Hewlett-Packard) Hidden
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
SimCity 4 Deluxe (HKLM-x32\...\{3F0D0ABE-CDAF-431A-00BC-CBBE018EA74E}) (Version:  - )
Skype™ 7.1 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.1.105 - Skype Technologies S.A.)
SmartWebPrinting (HKLM-x32\...\{68A10D12-0D0F-4212-BDE6-D87FAD32A8FA}) (Version: 130.0.373.000 - Hewlett-Packard) Hidden
SolutionCenter (HKLM-x32\...\{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}) (Version: 130.0.373.000 - Hewlett-Packard) Hidden
Star Wars Galactic Battlegrounds: Clone Campaigns (HKLM-x32\...\{0314ED3D-26A7-4F62-86A2-6B23353445E8}) (Version:  - )
Status (HKLM-x32\...\{AE8705FB-E13C-40A9-8A2D-68D6733FBFC2}) (Version: 130.0.373.000 - Hewlett-Packard) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.64630 - TeamViewer)
Toolbox (HKLM-x32\...\{6BBA26E9-AB03-4FE7-831A-3535584CA002}) (Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (HKLM-x32\...\{DC0A5F99-FD66-433F-9D3A-05DCBA64BE42}) (Version: 130.0.376.000 - Hewlett-Packard) Hidden
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Unity Web Player (HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\UnityWebPlayer) (Version: 5.2.0f3 - Unity Technologies ApS)
Uplay (HKLM-x32\...\Uplay) (Version: 15.0 - Ubisoft)
VLC media player 2.0.4 (HKLM\...\VLC media player) (Version: 2.0.4 - VideoLAN)
VoipConnect (HKLM-x32\...\VoipConnect_is1) (Version: 4.14 build 760 - Finarea S.A. Switzerland)
Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
WebReg (HKLM-x32\...\{43CDF946-F5D9-4292-B006-BA0D92013021}) (Version: 130.0.132.017 - Hewlett-Packard) Hidden
XSplit Gamecaster (HKLM-x32\...\{A41F3C62-007F-4705-8680-4475B0B602FD}) (Version: 3.0.1705.3131 - SplitmediaLabs)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation)
ContextMenuHandlers1: [MRAICQCMenu] -> {7C9E7B90-88EC-4852-AC7A-C938268A5D04} =>  -> Keine Datei
ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation)
ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-07-19] (NVIDIA Corporation)
ContextMenuHandlers1_S-1-5-21-226341798-1494298974-1954543524-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers4_S-1-5-21-226341798-1494298974-1954543524-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers5_S-1-5-21-226341798-1494298974-1954543524-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {17708C3A-DDC0-43A2-981D-FE98A890555F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-16] (Google Inc.)
Task: {3C0D7E49-AA5A-43E6-B64B-DF85F5842B6E} - \Microsoft\Windows\Setup\GWXTriggers\Logon-URT -> Keine Datei <==== ACHTUNG
Task: {44ADDDD1-1A02-4588-B902-ADBA582E557D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {4CD7CAF9-B019-4054-8691-1B7D494C90A3} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {4F691EFD-E8BE-4E03-A749-C61BE5962428} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2017-06-22] (HP Inc.)
Task: {5704B1A2-7A58-4AB3-9082-5B85DB1F4C8D} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {57DEA349-D687-45A6-A2DD-C9214A147E69} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-11-14] (Adobe Systems Incorporated)
Task: {5A3BEDC0-5151-4155-B225-BF744AEB3689} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {A17F317D-07D5-46E5-B475-7008F7624A5D} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001UA => C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.)
Task: {A30D37C3-D3F4-4541-96B9-59ECFC00AB1F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {ABF7A751-AEAA-4E27-8861-7C56100DCEEC} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {AC8B81DD-3A33-464D-94F0-3B91A28A6519} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-16] (Google Inc.)
Task: {B27F599C-9E7E-4027-8A92-E14A149E7693} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001Core => C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.)
Task: {B467647F-E300-4471-B059-A6826A4C6D76} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-11-14] (Microsoft Corporation)
Task: {B738F78A-440A-4791-9583-06B66E6A8201} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.)
Task: {BE3C62C4-A13B-440C-8E4B-EF2BA1B91FFA} - System32\Tasks\{EA293D0F-8058-4073-9A0E-78436C85A867} => C:\Windows\system32\pcalua.exe -a D:\autorun.exe -d D:\
Task: {C0AE8643-9D91-4090-BAAA-E1ECC6BE1F98} - System32\Tasks\{7621CC34-6AA8-449C-B81E-0206C457E8C3} => C:\Program Files (x86)\Monte Cristo\Airline Tycoon Evolution\at.exe [2002-07-22] (Spellbound Entertainment AG)
Task: {C5CC7521-EDE4-47D8-ADA9-FEC7729EC854} - System32\Tasks\{011FBEBA-B072-4150-ADB4-8D6548C6FF6B} => C:\Windows\system32\pcalua.exe -a E:\autorun.exe -d E:\
Task: {C7124BA0-581D-48F2-8BEB-7957395AEA54} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {D06B9396-AB79-4AF1-A7C1-75BC51EDCE90} - System32\Tasks\ASUS\ASUS Update Checker => C:\Program Files (x86)\ASUS\ASUSUpdate\UpdateChecker\UpdateChecker.exe [2008-12-11] ()
Task: {D8174689-0ACF-4C40-B4DE-16ABDCB4FE68} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2017-10-11] (HP Inc.)
Task: {D8278204-E088-4C52-AFCD-6AF514C48A30} - System32\Tasks\HPCeeScheduleForUser => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
Task: {E0D482FD-E2D5-4629-BE49-5D404B76CCEC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.)
Task: {E4D86C89-09D5-4B08-B38A-8657C4706273} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {F50FB200-165F-431F-9E03-D3403946CCC3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.)
Task: {F604F927-1BD8-4ED3-B8DF-5AF815E4B2F8} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001Core.job => C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001UA.job => C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForUser.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-03-16 21:18 - 2016-06-14 21:03 - 000367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-04-01 09:15 - 2016-06-14 21:03 - 001147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-03-16 21:18 - 2016-06-14 21:03 - 003611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-02-09 17:58 - 2016-06-14 21:03 - 000288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2006-09-19 10:07 - 2006-09-19 10:07 - 000827392 _____ () C:\Windows\vsnpstd3.exe
2016-04-01 09:15 - 2016-06-14 21:03 - 002665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-04-01 09:15 - 2016-06-14 21:03 - 001988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-04-01 09:15 - 2016-06-14 21:03 - 001840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-02-09 17:58 - 2016-06-14 21:03 - 000207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2016-04-01 09:15 - 2016-06-14 21:03 - 000034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-04-01 09:15 - 2016-06-14 21:03 - 000920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2015-08-08 00:31 - 2016-06-14 21:03 - 000018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2017-11-16 09:00 - 2017-11-13 11:26 - 000725312 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\dropbox_watchdog.dll
2017-11-16 09:00 - 2017-11-13 11:26 - 002075456 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\dropbox_crashpad.dll
2017-11-16 09:01 - 2017-11-13 11:26 - 000100296 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\_ctypes.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000018888 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\select.pyd
2017-11-16 09:01 - 2017-11-13 11:28 - 000020800 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000035792 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000694224 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\unicodedata.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000021848 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000130512 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 001856848 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000022864 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd
2017-11-16 09:00 - 2017-11-13 11:26 - 000145864 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\pyexpat.pyd
2017-11-16 09:00 - 2017-11-13 11:26 - 000116688 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\pywintypes27.dll
2017-11-16 09:01 - 2017-11-13 11:26 - 000105928 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32api.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000022864 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.crt.compiled._winffi_crt.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000040248 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\fastpath.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000024528 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32event.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000043472 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32process.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000062784 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd
2017-11-16 09:00 - 2017-11-13 11:26 - 000392656 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\pythoncom27.dll
2017-11-16 09:00 - 2017-11-13 11:26 - 000020936 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\mmapfile.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000124880 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32file.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000116176 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32security.pyd
2017-11-16 09:01 - 2017-11-13 11:28 - 000392512 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000026456 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.kernel32.compiled._winffi_kernel32.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000024016 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32clipboard.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000175560 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32gui.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000030160 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32pipe.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000026056 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32job.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000048592 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32service.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000057808 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32evtlog.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000021824 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000023368 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winshell.compiled._winshell.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000066392 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winenumhandles.compiled._WinEnumHandles.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000025432 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000022856 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\crashpad.compiled._Crashpad.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 001796920 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000084424 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\sip.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 001956152 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 003859264 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000155464 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000521024 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000050496 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineCore.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000042304 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000131384 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000218944 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000204096 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000060880 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32print.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000054608 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winrpcserver.compiled._RPCServer.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000024016 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32profile.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000022864 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.user32.compiled._winffi_user32.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000028616 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32ts.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000022360 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000021848 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.winerror.compiled._winffi_winerror.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000022360 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.wininet.compiled._winffi_wininet.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000027488 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000349128 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winxpgui.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000023896 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000025424 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd
2017-11-16 09:00 - 2017-11-13 11:26 - 000036296 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\librsync.dll
2017-11-16 09:00 - 2017-11-13 11:28 - 000181056 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL
2017-11-16 09:01 - 2017-11-13 11:29 - 000030536 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\wind3d11.compiled._wind3d11.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000024368 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\libEGL.DLL
2017-11-16 09:00 - 2017-11-13 11:28 - 001638200 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2017-11-16 09:01 - 2017-11-13 11:29 - 000026456 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.winhttp.compiled._winffi_winhttp.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000545080 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000359224 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000038208 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngine.pyd

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-226341798-1494298974-1954543524-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\User\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupfolder: C:^Users^User^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: Dropbox Update => "C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [TCP Query User{38C73ECF-EEAA-4689-8F6E-E596A9AFD63C}F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds.exe] => (Allow) F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds.exe
FirewallRules: [UDP Query User{7CABFE57-E2F4-4804-8340-8B4EF61777CD}F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds.exe] => (Allow) F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds.exe
FirewallRules: [TCP Query User{D4F08B6E-00D4-4D93-8C51-3EA54DDCE158}F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [UDP Query User{A1B5C363-4D48-434B-ABF1-4CBD28E743C3}F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [{4885EE98-93C0-43CD-A64D-54FF1B5C6D56}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{7A2C65A5-AE95-4536-9174-632482754346}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{3FE381B2-1975-4C81-B880-1B567F1130A4}] => (Allow) C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3x.exe
FirewallRules: [{1CD83B4F-5B46-47A1-A92E-75AA41DEECBC}] => (Allow) C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3x.exe
FirewallRules: [{C8CB8EE3-E21E-48CC-B9FF-F010949966BD}] => (Allow) C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3y.exe
FirewallRules: [{A096DE85-F95F-42F0-9463-B7037530692F}] => (Allow) C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3y.exe
FirewallRules: [TCP Query User{CB929C3C-F7B6-42D1-8747-2716FCBF7577}H:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) H:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [UDP Query User{B23DF31A-B7F3-4A73-9810-F1C5E7BEFCB7}H:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) H:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [{8A16690E-1847-497B-97C7-CEA4FEBD3F40}] => (Allow) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{A8F38F22-121F-4AEB-83B2-565615A4A80F}] => (Allow) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{045401DF-BBD4-4EC3-ACAD-92668CE6057E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{953F28D7-D6C8-4681-AA90-9453FD215647}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0CBBC1FA-2A7F-4D7F-96C0-21EB1BD8D430}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BB8C7394-3C10-4437-BC39-1810CAC924C0}] => (Allow) C:\Program Files (x86)\VoipConnect.com\VoipConnect\VoipConnect.exe
FirewallRules: [{8698A9EF-6000-4B02-8720-2B3C33A5C3D9}] => (Allow) C:\Program Files (x86)\VoipConnect.com\VoipConnect\VoipConnect.exe
FirewallRules: [{D978678F-DDF8-4A1F-BCDD-163EDEE37395}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{0D4DBBE6-92C8-4366-95FB-E6EEB77E99CE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{3410AFC9-004F-467F-A1F0-85C8D43AA1F6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{6177BC3D-0796-46FD-989E-D9ED1A0BE4A1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{218D843F-B0C2-44A9-8436-A02AC0890903}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{9D1EF3DA-4BB0-45DE-8DAC-5D6604B9635A}C:\users\user\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\user\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{309E308D-CE1E-4694-9192-736FDE5DCEDE}C:\users\user\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\user\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{DE2A0670-F767-4C25-AD57-36257F4C77B5}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{9540191E-C19D-448F-95CF-0BBBA5402F9C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{8F5DDD73-069E-4429-A2D0-5F0B69A7E237}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{55E8DCF6-AA14-4F93-AF26-18A701E8B28F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{16E102C1-B93C-4A3D-B61E-80C4A7916331}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{F5AE4738-8ED6-4978-B023-B83CA6CF4D30}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{673FD18B-90C0-4C03-8E8B-896324A1FB23}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{54DE837F-A44E-4606-965D-2A1828764E92}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{005B2836-7074-4043-A94E-AD557B83D09D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{451D2D2A-7448-4572-9A79-1DC22EB937AA}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{D4BFBFAB-6A1F-47EE-99B8-B522C1DA6B5A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{CA2B5042-5795-499F-933A-71969FD10822}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{53237DB8-36F8-468F-A07A-CC12C35346BF}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{0E84EC79-2897-4D68-B21A-E3B242E4BA36}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{9A310C86-8365-49CE-ACA0-575CB1023294}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{67E68B86-BEAA-41CA-B8C2-0336459EE05B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{EE75CCF1-D530-4B20-920A-C6D7A3856AFB}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{2EA0AA21-5559-4C81-8014-5AC8E2C09DB4}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{C1896BD8-8A8D-4C51-9295-05494A2DF994}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{83DFE077-D21E-4E8B-9988-B5C39E747DBE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{08417A10-4CE7-4CDE-8231-9D3F02D76DBA}I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds.exe] => (Allow) I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds.exe
FirewallRules: [UDP Query User{A8AC8D4A-DE6D-4661-9B21-F40F933066C7}I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds.exe] => (Allow) I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds.exe
FirewallRules: [TCP Query User{4DBBCD17-8227-477A-A4F9-21CD82A0C749}I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [UDP Query User{AE1A6059-9D11-4E21-9F5D-69C324F5AF1C}I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [{6F9A41C0-770F-48A4-8CF5-210D1A036CF5}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{FF8033BC-0D0D-41B1-84C0-478BB14C4033}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{29AA8AE5-3674-4295-8449-CF542BAC1835}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{A114A23C-7599-4EF9-BFAD-20A2AD17BDC5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{EFFE880E-FFA9-4BDF-AFFF-517F9EE12D7C}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Anno 2205\Bin\Win64\Anno2205.exe
FirewallRules: [{0494C639-441C-44C7-9AF1-CA2EC7DD8DC6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{EE7BD039-DCBF-48BA-8F85-F70E379D726A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{A71781DF-CC1A-49E1-AC35-D6E3CC5A3E05}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{C7296545-CAF5-4C9B-B9F1-EBF93D69B47B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{88874CF6-667C-48D2-90C8-1C10FC120020}] => (Allow) C:\Program Files\Mozilla Firefox Kapi\firefox.exe
FirewallRules: [{F122B669-EA8E-4FF0-B505-A0FEC94C905D}] => (Allow) C:\Program Files\Mozilla Firefox Kapi\firefox.exe
FirewallRules: [{36700C50-E9C9-4C57-87B3-9120C3723ADE}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{7C8890CB-8E8C-4151-BBFF-A57A93D379F6}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{A2E3B6CF-E313-4BA3-BB73-FB538AD219CF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Northgard\Northgard.exe
FirewallRules: [{50E095B0-F8CA-44BF-8C6D-D0D47A7306E1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Northgard\Northgard.exe
FirewallRules: [{2BD9EF50-C96B-4223-9CB8-D4E11EE8A8D9}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe
FirewallRules: [{997E7E88-35A2-40C3-9FC0-EB91860BF627}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe
FirewallRules: [{EF852EFC-EAF4-4DDF-9ED5-B57E8B567392}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe
FirewallRules: [{9A97B598-9304-47B3-BD8A-7432BB850E6B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe
FirewallRules: [{96CD9007-3BE7-4625-9CD5-120D64FFE525}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe
FirewallRules: [{619C430A-1947-4C57-B8A1-513291EEB5D3}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe
FirewallRules: [{BEDDA18D-D18D-4FC0-B905-60A47D5CA44E}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DPDecoder.exe
FirewallRules: [{AA39EECE-F4F1-4082-8255-3A5C0C00053D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Universim Demo\The Universim.exe
FirewallRules: [{12A0A37E-45EF-4C6A-B031-0D6486DC09C2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Universim Demo\The Universim.exe
FirewallRules: [{34AD938E-A5B7-4983-BB6A-2B8DFB520240}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Gamecaster\XSplit.Gamecaster.exe
FirewallRules: [{63B6A152-6093-42FC-8F27-DAA389E7C24C}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Gamecaster\XSplit.Gamecaster.exe
FirewallRules: [{F0FC645E-B43C-42EF-9681-4CC91FB0DC1F}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Gamecaster\XSplit.cam.exe
FirewallRules: [{252CE295-74D3-423B-A08E-E96A414F954B}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Gamecaster\XSplit.cam.exe
FirewallRules: [{2CA3B65B-F27B-4FF0-9915-F74279BBB069}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{1E802BAE-5A68-40C5-A149-BE9EA6416803}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe

==================== Wiederherstellungspunkte =========================

05-11-2017 12:16:03 Windows Update
09-11-2017 08:21:27 Windows Update
12-11-2017 19:09:18 Windows Update
15-11-2017 20:00:15 Windows Update
18-11-2017 19:39:03 Revo Uninstaller's restore point - 7-Zip 9.20 (x64 edition)
18-11-2017 19:41:22 Revo Uninstaller's restore point - Adobe Acrobat Reader DC - Deutsch
18-11-2017 19:42:54 Revo Uninstaller's restore point - CCleaner
18-11-2017 19:43:28 Revo Uninstaller's restore point - chip 1-click download service
18-11-2017 19:43:40 chip 1-click download service wurde entfernt.
18-11-2017 19:44:38 Revo Uninstaller's restore point - GIMP 2.8.20
20-11-2017 14:04:15 Windows Update
21-11-2017 09:14:17 Revo Uninstaller's restore point - Microsoft Office Professional Edition 2003
21-11-2017 09:18:04 Revo Uninstaller's restore point - Microsoft Office Professional Edition 2003
21-11-2017 09:18:28 Revo Uninstaller's restore point - Microsoft Office Professional Edition 2003

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Officejet 4500 G510g-m
Description: Officejet 4500 G510g-m
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Officejet 4500 G510g-m
Description: Officejet 4500 G510g-m
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: pfnfd_1_10_0_9
Description: pfnfd_1_10_0_9
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: pfnfd_1_10_0_9
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Coprozessor
Description: Coprozessor
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/21/2017 09:14:16 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {2eef1a47-6c0b-4b17-9ad1-9eac8032eef2}

Error: (11/18/2017 07:39:02 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {4a17bf11-ce63-425f-8634-37424af72206}

Error: (11/13/2017 07:55:59 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GalaxyClient Helper.exe, Version: 1.2.26.8, Zeitstempel: 0x59e72d17
Name des fehlerhaften Moduls: libcef.dll, Version: 3.2704.1434.0, Zeitstempel: 0x57d833c4
Ausnahmecode: 0x80000003
Fehleroffset: 0x000a173d
ID des fehlerhaften Prozesses: 0x149c
Startzeit der fehlerhaften Anwendung: 0x01d35c4c6d9e4860
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\GOG Galaxy\libcef.dll
Berichtskennung: b41d4f20-c83f-11e7-a296-002618810f02

Error: (11/07/2017 08:00:11 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: hpqtra08.exe, Version: 130.0.376.0, Zeitstempel: 0x4a163449
Name des fehlerhaften Moduls: hpqusg.dll, Version: 130.0.374.0, Zeitstempel: 0x4a161738
Ausnahmecode: 0xc0000417
Fehleroffset: 0x00032dab
ID des fehlerhaften Prozesses: 0x838
Startzeit der fehlerhaften Anwendung: 0x01d35795e36e88e0
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusg.dll
Berichtskennung: 4b9b6320-c389-11e7-9aed-002618810f02

Error: (11/03/2017 11:40:41 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm firefox.exe, Version 56.0.2.6506 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 15b8

Startzeit: 01d3548b344b7c90

Endzeit: 265

Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Berichts-ID: 6c3e4331-c083-11e7-9a7a-002618810f02

Error: (11/02/2017 09:28:51 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm firefox.exe, Version 47.0.1.6018 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 698

Startzeit: 01d35409c40009a0

Endzeit: 201

Anwendungspfad: C:\Program Files\Mozilla Firefox Kapi\firefox.exe

Berichts-ID: 6c27b6a1-c00c-11e7-b997-002618810f02

Error: (10/09/2017 07:48:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: HPSupportSolutionsFrameworkService.exe, Version: 8.7.27.15, Zeitstempel: 0x595d9791
Name des fehlerhaften Moduls: clr.dll, Version: 4.7.2114.0, Zeitstempel: 0x59a63e48
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000001c2716
ID des fehlerhaften Prozesses: 0x8f8
Startzeit der fehlerhaften Anwendung: 0x01d340c953af06e0
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
Pfad des fehlerhaften Moduls: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
Berichtskennung: e698f5f0-acbd-11e7-a22d-002618810f02

Error: (10/09/2017 07:48:45 AM) (Source: .NET Runtime) (EventID: 1023) (User: )
Description: Anwendung: HPSupportSolutionsFrameworkService.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines internen Fehlers in der .NET-Laufzeit beendet. bei IP 000007FEF6BB2716 (000007FEF69F0000) mit Exitcode 80131506.

Error: (10/06/2017 07:11:30 AM) (Source: chip 1-click download service) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. Der Dienstprozess konnte keine Verbindung mit dem Dienstcontroller herstellen

Error: (09/28/2017 10:53:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 55.0.3.6445, Zeitstempel: 0x599edbef
Name des fehlerhaften Moduls: xul.dll, Version: 55.0.3.6445, Zeitstempel: 0x599edbdd
Ausnahmecode: 0x80000003
Fehleroffset: 0x0076a5cf
ID des fehlerhaften Prozesses: 0x15e8
Startzeit der fehlerhaften Anwendung: 0x01d33892d4376850
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Mozilla Firefox\xul.dll
Berichtskennung: 7bd4fb70-a497-11e7-b141-002618810f02


Systemfehler:
=============
Error: (11/21/2017 08:06:13 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen (Anwendungsspezifisch) wird der SID (S-1-5-18) für Benutzer NT-AUTORITÄT\SYSTEM von Adresse LocalHost (unter Verwendung von LRPC) keine Berechtigung zum Start (Lokal) für die COM-Serveranwendung mit CLSID 
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
 und APPID 
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
 gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungsprogramm für Komponentendienste geändert werden.

Error: (11/21/2017 08:05:16 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
pfnfd_1_10_0_9

Error: (11/20/2017 05:00:30 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen (Anwendungsspezifisch) wird der SID (S-1-5-18) für Benutzer NT-AUTORITÄT\SYSTEM von Adresse LocalHost (unter Verwendung von LRPC) keine Berechtigung zum Start (Lokal) für die COM-Serveranwendung mit CLSID 
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
 und APPID 
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
 gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungsprogramm für Komponentendienste geändert werden.

Error: (11/20/2017 04:59:53 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
pfnfd_1_10_0_9

Error: (11/20/2017 01:51:21 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen (Anwendungsspezifisch) wird der SID (S-1-5-18) für Benutzer NT-AUTORITÄT\SYSTEM von Adresse LocalHost (unter Verwendung von LRPC) keine Berechtigung zum Start (Lokal) für die COM-Serveranwendung mit CLSID 
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
 und APPID 
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
 gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungsprogramm für Komponentendienste geändert werden.

Error: (11/20/2017 01:50:40 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
pfnfd_1_10_0_9

Error: (11/19/2017 03:59:09 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen (Anwendungsspezifisch) wird der SID (S-1-5-18) für Benutzer NT-AUTORITÄT\SYSTEM von Adresse LocalHost (unter Verwendung von LRPC) keine Berechtigung zum Start (Lokal) für die COM-Serveranwendung mit CLSID 
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
 und APPID 
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
 gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungsprogramm für Komponentendienste geändert werden.

Error: (11/19/2017 03:58:30 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
pfnfd_1_10_0_9

Error: (11/18/2017 01:45:56 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen (Anwendungsspezifisch) wird der SID (S-1-5-18) für Benutzer NT-AUTORITÄT\SYSTEM von Adresse LocalHost (unter Verwendung von LRPC) keine Berechtigung zum Start (Lokal) für die COM-Serveranwendung mit CLSID 
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
 und APPID 
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
 gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungsprogramm für Komponentendienste geändert werden.

Error: (11/18/2017 01:45:44 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
pfnfd_1_10_0_9


==================== Speicherinformationen =========================== 

Prozessor: AMD Phenom(tm) II X4 940 Processor
Prozentuale Nutzung des RAM: 27%
Installierter physikalischer RAM: 8191.18 MB
Verfügbarer physikalischer RAM: 5978.03 MB
Summe virtueller Speicher: 16380.54 MB
Verfügbarer virtueller Speicher: 14283.26 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:180.81 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 95DD2725)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
         

Es reicht wenn du die Logs ENTWEDER hier postest ODER bei zB pastebin - doppelmoppel muss nicht sein

Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

• Starte bitte die mbar.exe.
• Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
• Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
• Klicke auf den CleanUp Button und erlaube den Neustart.
• Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
• Nach dem Neustart starte die mbar.exe erneut.
• Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Malwarebytes Anti-Rootkit BETA 1.10.3.1001
www.malwarebytes.org

Database version:
  main:    v2017.11.22.02
  rootkit: v2017.10.14.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18837
User :: USER-PC [administrator]

22.11.2017 08:10:04
mbar-log-2017-11-22 (08-10-04).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 280805
Time elapsed: 21 minute(s), 33 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
         

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!



adwCleaner v7.x

Downloade Dir bitte AdwCleaner auf Deinen Desktop (Bebilderte Anleitung).

• Schließe alle offenen Programme und Browser.
• Starte die adwcleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Werkzeuge > Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • Tracing Schlüssel
  • Prefetch Dateien
  • Proxy
  • Winsock
  • IE Richtlinien
  • Chrome Richtlinien
• Bestätige die Auswahl mit Ok.
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist. Am Ende des Suchlaufs öffnet sich automatisch eine Logdatei. Schließe diese.
• Klicke nun auf Löschen (auch dann wenn AdwCleaner sagt, dass nichts gefunden wurde) und bestätige auftretende Hinweise mit Ok.
• Klicke am Ende der Bereinigung auf Jetzt neu starten. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

# AdwCleaner 7.0.4.0 - Logfile created on Wed Nov 22 18:27:10 2017
# Updated on 2017/27/10 by Malwarebytes 
# Running on Windows 7 Home Premium (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

Deleted: C:\Users\User\AppData\Local\Downloaded Installations\{DAD82379-C684-4D04-83D5-2B9934A9C362}
Deleted: C:\ProgramData\apn
Deleted: C:\ProgramData\Application Data\apn
Deleted: C:\Users\All Users\apn
Deleted: C:\ProgramData\IHProtectUpDate
Deleted: C:\ProgramData\Application Data\IHProtectUpDate
Deleted: C:\Users\All Users\IHProtectUpDate


***** [ Files ] *****

Deleted: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\foxydeal.sqlite


***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ask.com
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
Deleted: [Data] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Search_URL [http:\\www.mystartsearch.com\web\?type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}]
Deleted: [Data] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Search_URL [http:\\www.mystartsearch.com\web\?type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}]
Deleted: [Data] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Search Page [http:\\www.mystartsearch.com\web\?type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}]
Deleted: [Data] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Search Page [http:\\www.mystartsearch.com\web\?type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}]
Deleted: [Key] - HKLM\SOFTWARE\SUPDP
Deleted: [Key] - HKLM\SOFTWARE\SupDp
Deleted: [Value] - HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}
Deleted: [Key] - HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application
Deleted: [Key] - HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application
Deleted: [Key] - HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\chip 1-click download service
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com
Deleted: [Key] - HKU\S-1-5-21-226341798-1494298974-1954543524-1001\Software\Mail.Ru
Deleted: [Key] - HKU\S-1-5-21-226341798-1494298974-1954543524-1001\Software\AppDataLow\Software\Mail.Ru
Deleted: [Key] - HKCU\Software\Mail.Ru
Deleted: [Key] - HKCU\Software\AppDataLow\Software\Mail.Ru
Deleted: [Key] - HKLM\SOFTWARE\SupTab
Deleted: [Key] - HKLM\SOFTWARE\IHProtect
Deleted: [Key] - HKLM\SOFTWARE\Trymedia Systems
Deleted: [Key] - HKLM\SOFTWARE\mystartsearchSoftware
Deleted: [Key] - HKU\S-1-5-21-226341798-1494298974-1954543524-1001\Software\InstallCore
Deleted: [Key] - HKCU\Software\InstallCore
Deleted: [Key] - HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application
Deleted: [Key] - HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries deleted.

*************************

::Tracing keys deleted
::Winsock settings cleared
::Prefetch files deleted
::Proxy settings cleared
::IE policies deleted
::Chrome policies deleted
::Additional Actions: 0



*************************

C:/AdwCleaner/AdwCleaner[S0].txt - [4222 B] - [2017/11/22 18:26:35]


########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########
         

Okay, adwCleaner bitte zwecks Kontrolle wiederholen.

# AdwCleaner 7.0.4.0 - Logfile created on Thu Nov 23 07:08:09 2017
# Updated on 2017/27/10 by Malwarebytes 
# Running on Windows 7 Home Premium (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

No malicious folders deleted.

***** [ Files ] *****

No malicious files deleted.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

Deleted: [Data] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Search_URL [http:\\www.mystartsearch.com\web\?type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}]
Deleted: [Data] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Search_URL [http:\\www.mystartsearch.com\web\?type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}]
Deleted: [Data] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Search Page [http:\\www.mystartsearch.com\web\?type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}]
Deleted: [Data] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Search Page [http:\\www.mystartsearch.com\web\?type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}]


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries deleted.

*************************

::Tracing keys deleted
::Winsock settings cleared
::Prefetch files deleted
::Proxy settings cleared
::IE policies deleted
::Chrome policies deleted
::Additional Actions: 0



*************************

C:/AdwCleaner/AdwCleaner[C0].txt - [4019 B] - [2017/11/22 18:27:10]
C:/AdwCleaner/AdwCleaner[S0].txt - [4222 B] - [2017/11/22 18:26:35]
C:/AdwCleaner/AdwCleaner[S1].txt - [1956 B] - [2017/11/23 7:7:29]


########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt ##########
         

Ich brauche neue FRST-Logs . Haken setzen bei addition.txt dann auf Untersuchen klicken.

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 22-11-2017
durchgeführt von User (Administrator) auf USER-PC (23-11-2017 10:43:40)
Gestartet von C:\Users\User\Desktop\PC bereinigen 11_17
Geladene Profile: User (Verfügbare Profile: User)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Online Games Manager\ogmservice.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Windows\vsnpstd3.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(UltimateOutsider) C:\Users\User\AppData\Local\Temp\DMR\Downloads\152e221a8bef8d2d13c58f995563a1a1\2a159b5701df8e9d7bfd558a3c761b6e

\GWX1720_control_panel.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Dropbox, Inc.) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Dropbox, Inc.) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Dropbox, Inc.) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(HP Inc.) C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox Kapi\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht 

verschoben.)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)
HKLM\...\Run: [snpstd3] => C:\Windows\vsnpstd3.exe [827392 2006-09-19] ()
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [GwxControlPanelMonitor] => C:\Users\User\AppData\Local\Temp\DMR\Downloads

\152e221a8bef8d2d13c58f995563a1a1\2a159b5701df8e9d7bfd558a3c761b6e\GWX1720_control_panel.exe [4559944 2016-02-07] (UltimateOutsider) <==== ACHTUNG
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\Run: [*LABAL*] => [X]
HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\MountPoints2: {6b9e7571-9314-11e2-a317-002618810f02} - E:\RunGame.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-09-04]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen 

Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{DBC0A50C-F994-4579-8DC9-464A072EB067}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-226341798-1494298974-1954543524-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.mystartsearch.com/web/?

utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-

WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {780042B5-BA4C-4321-A76F-511211A27969} URL = hxxp://www.mystartsearch.com/web/?

utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-

WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {DDD1F70E-8AF5-429F-818F-E369432D2A7A} URL = hxxp://www.mystartsearch.com/web/?

utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-

WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://www.mystartsearch.com/web/?

utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-

WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {F208F861-48A5-4BA7-9C80-75413C389F68} URL = hxxp://www.mystartsearch.com/web/?

utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-

WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://www.mystartsearch.com/web/?

utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-

WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing

\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll 

[2009-05-21] (Hewlett-Packard Co.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab

FireFox:
========
FF DefaultProfile: pehg2cqu.default
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default [2017-11-23]
FF Homepage: Mozilla\Firefox\Profiles\pehg2cqu.default -> 
FF Extension: (RegnumHelper) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\Extensions\{05fb5410-b1ee-4bf6-8778-

76e284d95c08}.xpi [2012-12-15] [Lagacy] [ist nicht signiert]
FF Extension: (Microsoft .NET Framework Assistant) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\Extensions\{20a82645-c095-

46ed-80e3-08825760534b}.xpi [2015-08-06] [Lagacy]
FF Extension: (iMacros for Firefox) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\Extensions\{81BF1D23-5F17-408D-AC6B-

BD6DF7CAF670}.xpi [2017-03-02] [Lagacy]
FF Extension: (Video DownloadHelper) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\Extensions\{b9db16a4-6edc-47ec-a1f4-

b86292ed211d}.xpi [2017-11-17]
FF Extension: (Greasemonkey) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\Extensions\{e4a8a97b-f2ed-450b-b12d-

ee082ba24781}.xpi [2017-11-17]
FF Extension: (Disable Media WMF NV12 format) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\features\{d55bb34b-c15c-4261-

a2c2-ecd3b3be33e1}\disable-media-wmf-nv12@mozilla.org.xpi [2017-11-22] [Lagacy]
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\b8pypxzl.Kapi [2017-11-23]
FF Homepage: Mozilla\Firefox\Profiles\b8pypxzl.Kapi -> 
FF NetworkProxy: Mozilla\Firefox\Profiles\b8pypxzl.Kapi -> type", 0
FF Extension: (RegnumHelper) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\b8pypxzl.Kapi\Extensions\{05fb5410-b1ee-4bf6-8778-

76e284d95c08}.xpi [2016-08-29] [Lagacy] [ist nicht signiert]
FF Extension: (iMacros for Firefox) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\b8pypxzl.Kapi\Extensions\{81BF1D23-5F17-408D-AC6B-

BD6DF7CAF670}.xpi [2017-03-10] [Lagacy]
FF Extension: (Video DownloadHelper) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\b8pypxzl.Kapi\Extensions\{b9db16a4-6edc-47ec-a1f4-

b86292ed211d}.xpi [2017-05-10] [Lagacy]
FF Extension: (Greasemonkey) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\b8pypxzl.Kapi\Extensions\{e4a8a97b-f2ed-450b-b12d-

ee082ba24781}.xpi [2017-04-26] [Lagacy]
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff => nicht 

gefunden
FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\extensions

\searchengine@gmail.com => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2015-09-04] [Lagacy] [ist nicht 

signiert]
FF HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart 

Web Printing\MozillaAddOn3
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_187.dll [2017-11-14] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2012-10-19] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_187.dll [2017-11-14] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft 

Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-07-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-07-18] (NVIDIA 

Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-226341798-1494298974-1954543524-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer

\loader\npUnity3D32.dll [2015-08-28] (Unity Technologies ApS)
StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox Kapi\firefox.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat 

aufgelistet wird.)

S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [529984 2017-11-15] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [8330304 2017-11-15] (GOG.com)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [323952 2017-

09-27] (HP Inc.)
R2 HPTouchpointAnalyticsService; C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe [332216 2017-11-22] (HP Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist 

nicht signiert]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-07-18] (NVIDIA 

Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
R2 ogmservice; C:\Program Files (x86)\Online Games Manager\ogmservice.exe [582544 2016-07-13] (RealNetworks, Inc.)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7248144 2016-08-08] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat 

aufgelistet wird.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [14392 2007-12-17] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-03-30] (Disc Soft Ltd)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
R1 MpKsl6693fc20; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C386D1DA-5677-4ED8-9323-B15696B6DA3E}\MpKsl6693fc20.sys [58120 

2017-11-23] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
S3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [10550272 2007-03-27] (Sonix Co. Ltd.)
S3 StMp3Recx64; C:\Windows\System32\Drivers\StMp3Recx64.sys [26112 2007-01-12] (Generic)
S1 pfnfd_1_10_0_9; system32\drivers\pfnfd_1_10_0_9.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat 

aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-11-23 09:00 - 2017-11-23 09:00 - 000000000 ____D C:\Users\User\AppData\Roaming\VS Revo Group
2017-11-22 19:17 - 2017-11-23 08:08 - 000000000 ____D C:\AdwCleaner
2017-11-22 08:10 - 2017-11-22 08:10 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-11-22 08:09 - 2017-11-22 08:31 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-11-22 08:09 - 2017-11-22 08:09 - 000255928 _____ (Malwarebytes) C:\Windows\system32\Drivers\3625535C.sys
2017-11-22 08:09 - 2017-11-22 08:09 - 000192952 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2017-11-22 08:09 - 2017-11-22 08:09 - 000000000 ____D C:\Program Files\HP
2017-11-22 08:08 - 2017-11-22 08:08 - 014178840 _____ (Malwarebytes Corp.) C:\Users\User\Downloads\mbar-1.10.3.1001.exe
2017-11-21 10:55 - 2017-11-23 10:43 - 000000000 ____D C:\Users\User\Desktop\PC bereinigen 11_17
2017-11-21 10:40 - 2017-11-21 10:40 - 000000000 ____D C:\Users\User\Downloads\FRST-OlderVersion
2017-11-18 19:36 - 2017-11-18 19:36 - 007189760 _____ (VS Revo Group ) C:\Users\User\Downloads\revo204setup.exe
2017-11-18 19:36 - 2017-11-18 19:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-11-18 19:36 - 2017-11-18 19:36 - 000000000 ____D C:\Program Files\VS Revo Group
2017-11-16 10:29 - 2017-11-16 10:29 - 000831360 _____ C:\Windows\Minidump\111617-26395-01.dmp
2017-11-16 09:01 - 2017-11-16 09:01 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-11-15 10:56 - 2017-11-23 10:43 - 000000000 ____D C:\FRST
2017-11-15 09:58 - 2017-10-18 08:31 - 000395976 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-11-15 09:58 - 2017-10-18 07:45 - 000347336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-11-15 09:58 - 2017-10-18 03:34 - 000134376 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2017-11-15 09:58 - 2017-10-18 03:30 - 000605184 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-11-15 09:58 - 2017-10-18 03:06 - 000344064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2017-11-15 09:58 - 2017-10-18 03:06 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2017-11-15 09:58 - 2017-10-18 03:06 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2017-11-15 09:58 - 2017-10-18 03:06 - 000056320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2017-11-15 09:58 - 2017-10-18 03:06 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2017-11-15 09:58 - 2017-10-18 03:06 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2017-11-15 09:58 - 2017-10-18 03:06 - 000007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2017-11-15 09:58 - 2017-10-17 00:07 - 001680616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-11-15 09:58 - 2017-10-16 23:34 - 003222528 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-11-15 09:58 - 2017-10-16 22:55 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2017-11-15 09:58 - 2017-10-15 23:04 - 000407392 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2017-11-15 09:58 - 2017-10-14 09:38 - 025731584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-11-15 09:58 - 2017-10-14 09:23 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-11-15 09:58 - 2017-10-14 09:23 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-11-15 09:58 - 2017-10-14 09:13 - 002903552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-11-15 09:58 - 2017-10-14 09:12 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-11-15 09:58 - 2017-10-14 09:11 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-11-15 09:58 - 2017-10-14 09:11 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-11-15 09:58 - 2017-10-14 09:11 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-11-15 09:58 - 2017-10-14 09:11 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-11-15 09:58 - 2017-10-14 09:09 - 005979648 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-11-15 09:58 - 2017-10-14 09:05 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-11-15 09:58 - 2017-10-14 09:04 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-11-15 09:58 - 2017-10-14 09:02 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-11-15 09:58 - 2017-10-14 09:01 - 000816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-11-15 09:58 - 2017-10-14 09:01 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-11-15 09:58 - 2017-10-14 09:01 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-11-15 09:58 - 2017-10-14 09:00 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-11-15 09:58 - 2017-10-14 08:55 - 000968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-11-15 09:58 - 2017-10-14 08:53 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-11-15 09:58 - 2017-10-14 08:47 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-11-15 09:58 - 2017-10-14 08:47 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-11-15 09:58 - 2017-10-14 08:46 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-11-15 09:58 - 2017-10-14 08:43 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-11-15 09:58 - 2017-10-14 08:43 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-11-15 09:58 - 2017-10-14 08:41 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-11-15 09:58 - 2017-10-14 08:40 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-11-15 09:58 - 2017-10-14 08:31 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-11-15 09:58 - 2017-10-14 08:30 - 015266816 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-11-15 09:58 - 2017-10-14 08:30 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-11-15 09:58 - 2017-10-14 08:29 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-11-15 09:58 - 2017-10-14 08:28 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-11-15 09:58 - 2017-10-14 08:27 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-11-15 09:58 - 2017-10-14 08:21 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-11-15 09:58 - 2017-10-14 08:14 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-11-15 09:58 - 2017-10-14 08:09 - 001544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-11-15 09:58 - 2017-10-14 08:03 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-11-15 09:58 - 2017-10-14 07:58 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-11-15 09:58 - 2017-10-14 07:53 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-11-15 09:58 - 2017-10-14 07:53 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-11-15 09:58 - 2017-10-14 07:52 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-11-15 09:58 - 2017-10-14 07:52 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-11-15 09:58 - 2017-10-14 07:51 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-11-15 09:58 - 2017-10-14 07:50 - 002293760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-11-15 09:58 - 2017-10-14 07:47 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-11-15 09:58 - 2017-10-14 07:47 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-11-15 09:58 - 2017-10-14 07:46 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-11-15 09:58 - 2017-10-14 07:45 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-11-15 09:58 - 2017-10-14 07:45 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-11-15 09:58 - 2017-10-14 07:45 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-11-15 09:58 - 2017-10-14 07:38 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-11-15 09:58 - 2017-10-14 07:35 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-11-15 09:58 - 2017-10-14 07:35 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-11-15 09:58 - 2017-10-14 07:34 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-11-15 09:58 - 2017-10-14 07:33 - 004542464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-11-15 09:58 - 2017-10-14 07:33 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-11-15 09:58 - 2017-10-14 07:32 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-11-15 09:58 - 2017-10-14 07:31 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-11-15 09:58 - 2017-10-14 07:30 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-11-15 09:58 - 2017-10-14 07:28 - 013680128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-11-15 09:58 - 2017-10-14 07:25 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-11-15 09:58 - 2017-10-14 07:24 - 000694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-11-15 09:58 - 2017-10-14 07:23 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-11-15 09:58 - 2017-10-14 07:23 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-11-15 09:58 - 2017-10-14 07:10 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-11-15 09:58 - 2017-10-14 07:07 - 001314304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-11-15 09:58 - 2017-10-14 07:04 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-11-15 09:58 - 2017-10-12 01:58 - 000382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 014635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 012574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2017-11-15 09:58 - 2017-10-12 01:55 - 002319872 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 002222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 002058240 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2017-11-15 09:58 - 2017-10-12 01:55 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2017-11-15 09:58 - 2017-10-12 01:55 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2017-11-15 09:58 - 2017-10-12 01:40 - 000308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-11-15 09:58 - 2017-10-12 01:39 - 000591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-11-15 09:58 - 2017-10-12 01:38 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-11-15 09:58 - 2017-10-12 01:38 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-11-15 09:58 - 2017-10-12 01:37 - 012574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2017-11-15 09:58 - 2017-10-12 01:37 - 011410944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 001549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 001400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 001363968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2017-11-15 09:58 - 2017-10-12 01:37 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2017-11-15 09:58 - 2017-10-12 01:26 - 000427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-11-15 09:58 - 2017-10-12 01:26 - 000164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-11-15 09:58 - 2017-10-12 01:25 - 000086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2017-11-15 09:58 - 2017-10-12 01:25 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2017-11-15 09:58 - 2017-10-12 01:24 - 000008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2017-11-15 09:58 - 2017-10-12 01:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2017-11-15 09:58 - 2017-10-12 01:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2017-11-15 09:58 - 2017-10-12 01:20 - 000113152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2017-11-15 09:58 - 2017-10-12 01:16 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-11-15 09:58 - 2017-10-04 14:04 - 002023936 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2017-11-15 09:58 - 2017-10-04 14:04 - 001570304 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-11-15 09:58 - 2017-10-04 14:04 - 000670208 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2017-11-15 09:58 - 2017-10-04 14:04 - 000603648 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-11-15 09:58 - 2017-10-04 14:04 - 000370688 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-11-15 09:58 - 2017-10-04 14:04 - 000241664 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2017-11-15 09:58 - 2017-10-04 14:04 - 000181760 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000995272 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2017-11-15 09:58 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2017-11-14 17:52 - 2017-11-14 17:52 - 000000000 ____D C:\Users\User\AppData\Local\ESET
2017-11-14 17:51 - 2017-11-14 17:51 - 006974584 _____ (ESET spol. s r.o.) C:\Users\User\Downloads\esetonlinescanner_deu.exe
2017-11-10 08:11 - 2017-11-10 08:11 - 001004024 _____ C:\Windows\Minidump\111017-29484-01.dmp
2017-11-09 15:58 - 2017-11-09 15:59 - 000000000 ____D C:\Users\User\Downloads\Altdeutsch für Word
2017-10-30 17:03 - 2017-10-30 17:03 - 000000000 ____D C:\Users\User\AppData\Local\Introversion
2017-10-30 16:52 - 2017-10-30 16:52 - 000000222 _____ C:\Users\User\Desktop\Prison Architect.url
2017-10-29 21:10 - 2017-11-16 10:29 - 624295804 _____ C:\Windows\MEMORY.DMP
2017-10-29 21:10 - 2017-10-29 21:10 - 000719064 _____ C:\Windows\Minidump\102917-17581-01.dmp

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-11-23 10:41 - 2015-08-07 08:19 - 000001220 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001UA.job
2017-11-23 08:18 - 2009-07-14 05:45 - 000022656 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-11-23 08:18 - 2009-07-14 05:45 - 000022656 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-11-23 08:13 - 2016-11-21 07:36 - 000000000 ____D C:\Users\User\AppData\LocalLow\Mozilla
2017-11-23 08:09 - 2016-02-09 17:56 - 000000000 ____D C:\ProgramData\NVIDIA
2017-11-23 08:09 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-11-22 19:26 - 2017-02-28 22:21 - 000000000 ____D C:\Users\User\AppData\Local\Downloaded Installations
2017-11-22 19:04 - 2017-10-11 07:51 - 000000328 _____ C:\Windows\Tasks\HPCeeScheduleForUser.job
2017-11-22 08:12 - 2017-10-11 07:51 - 000003180 _____ C:\Windows\System32\Tasks\HPCeeScheduleForUser
2017-11-22 08:09 - 2015-09-04 21:32 - 000000000 ____D C:\ProgramData\HP
2017-11-22 07:58 - 2012-12-12 10:15 - 000065512 _____ C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2017-11-22 07:57 - 2009-07-14 05:45 - 000297920 _____ C:\Windows\system32\FNTCACHE.DAT
2017-11-21 14:41 - 2015-08-07 08:19 - 000001168 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001Core.job
2017-11-21 09:16 - 2013-03-21 23:41 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2017-11-21 09:16 - 2009-07-14 19:18 - 000000000 ____D C:\Windows\ShellNew
2017-11-21 09:16 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2017-11-20 21:32 - 2012-12-11 19:50 - 000545440 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-11-18 13:44 - 2016-11-19 16:09 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-11-18 13:44 - 2012-12-15 01:33 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-11-17 17:36 - 2012-12-15 01:33 - 000000000 ____D C:\Users\User\AppData\Roaming\Mozilla
2017-11-17 09:19 - 2012-12-15 16:36 - 000000000 ____D C:\Users\User\Documents\Chat, Bilder
2017-11-17 09:18 - 2012-12-15 16:36 - 000000000 ____D C:\Users\User\Documents\Chat, sonstiges
2017-11-17 09:17 - 2012-12-15 16:36 - 000000000 ____D C:\Users\User\Documents\Chat, Sprüche
2017-11-16 20:37 - 2017-02-04 18:29 - 000000000 ____D C:\Users\User\Desktop\Kapi-Regnum
2017-11-16 12:17 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\rescache
2017-11-16 10:29 - 2016-11-22 16:20 - 000000000 ____D C:\Windows\Minidump
2017-11-16 09:07 - 2016-02-16 12:24 - 000003542 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-11-16 09:07 - 2016-02-16 12:24 - 000003414 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-11-16 09:02 - 2013-11-03 14:20 - 000000000 ____D C:\Users\User\AppData\Roaming\Dropbox
2017-11-15 20:20 - 2014-12-10 17:11 - 000000000 ____D C:\Windows\system32\appraiser
2017-11-15 20:03 - 2014-02-27 22:46 - 001593424 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-11-15 20:03 - 2009-07-14 18:58 - 000699284 _____ C:\Windows\system32\perfh007.dat
2017-11-15 20:03 - 2009-07-14 18:58 - 000149424 _____ C:\Windows\system32\perfc007.dat
2017-11-15 20:03 - 2009-07-14 06:13 - 001593424 _____ C:\Windows\system32\PerfStringBackup.INI
2017-11-15 11:50 - 2017-04-16 16:43 - 000000000 ____D C:\Users\User\Desktop\Bewerben
2017-11-15 09:40 - 2017-10-20 09:58 - 000000000 ____D C:\Program Files (x86)\GOG Galaxy
2017-11-14 20:11 - 2012-12-15 02:26 - 000004366 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-11-14 20:11 - 2012-12-11 19:39 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-11-14 20:11 - 2012-12-11 19:39 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-11-14 20:11 - 2012-12-11 19:39 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-11-14 20:11 - 2012-12-11 19:39 - 000000000 ____D C:\Windows\system32\Macromed
2017-11-13 10:51 - 2016-01-16 21:52 - 000000000 ____D C:\Program Files (x86)\Steam
2017-11-13 10:48 - 2016-02-07 20:04 - 000000000 ____D C:\Users\User\AppData\Local\Ubisoft Game Launcher
2017-11-13 07:56 - 2016-02-23 16:53 - 000000000 ____D C:\Users\User\AppData\Local\CrashDumps
2017-11-09 09:14 - 2012-12-15 16:22 - 000000000 ____D C:\Users\User\Documents\Kapi-Land
2017-11-09 09:02 - 2014-03-01 11:58 - 000000000 ____D C:\Users\User\Documents\GB Einträge
2017-11-09 09:02 - 2012-12-15 16:22 - 000000000 ____D C:\Users\User\Documents\Meine empfangenen Dateien

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-08-29 22:00 - 2016-08-29 22:00 - 000000000 _____ () C:\Program Files\nsr161D.tmp
2017-03-12 23:02 - 2017-03-12 23:02 - 000009199 _____ () C:\Users\User\AppData\Local\recently-used.xbel
2015-02-19 18:28 - 2015-02-19 18:28 - 000000017 _____ () C:\Users\User\AppData\Local\resmon.resmoncfg

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\User\AppData\Local\Temp\DMR\Downloads\152e221a8bef8d2d13c58f995563a1a1\2a159b5701df8e9d7bfd558a3c761b6e\GWX1720_control_panel.exe


Einige Dateien in TEMP:
====================
2017-11-22 08:09 - 2017-11-22 08:09 - 000935864 _____ () C:\Users\User\AppData\Local\Temp\TAInstaller.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-11-19 19:15

==================== Ende von FRST.txt ============================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 22-11-2017
durchgeführt von User (23-11-2017 10:44:33)
Gestartet von C:\Users\User\Desktop\PC bereinigen 11_17
Windows 7 Home Premium Service Pack 1 (X64) (2012-12-11 18:19:12)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-226341798-1494298974-1954543524-500 - Administrator - Disabled)
Gast (S-1-5-21-226341798-1494298974-1954543524-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-226341798-1494298974-1954543524-1004 - Limited - Enabled)
User (S-1-5-21-226341798-1494298974-1954543524-1001 - Administrator - Enabled) => C:\Users\User

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell 

deinstalliert werden.)

4500_G510gm_Help (HKLM-x32\...\{DF0B357C-5874-47D0-81E7-79AA890B0CE0}) (Version: 000.0.440.000 - Hewlett-Packard) Hidden
4500G510gm (HKLM-x32\...\{BE0D4271-69C9-4f28-AD9B-BB33D126A30E}) (Version: 000.0.423.000 - Hewlett-Packard) Hidden
4500G510gm_Software_Min (HKLM-x32\...\{28379381-B56A-43e1-B505-3098D82B1C30}) (Version: 000.0.423.000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 27 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 27.0.0.187 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated)
Age of Empires III - The Asian Dynasties (HKLM-x32\...\{C43C1415-3DFC-4089-9A32-0BECF28A6046}) (Version: 1.00.0000 - Microsoft Game Studios) Hidden
Age of Empires III - The Asian Dynasties (HKLM-x32\...\InstallShield_{C43C1415-3DFC-4089-9A32-0BECF28A6046}) (Version: 1.00.0000 - Microsoft Game 

Studios)
Age of Empires III - The WarChiefs (HKLM-x32\...\{1C08A24C-B168-407E-A826-68FAF5F20710}) (Version: 1.00.0000 - Microsoft Game Studios) Hidden
Age of Empires III - The WarChiefs (HKLM-x32\...\InstallShield_{1C08A24C-B168-407E-A826-68FAF5F20710}) (Version: 1.00.0000 - Microsoft Game Studios)
Age of Empires III (HKLM-x32\...\{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}) (Version: 1.00.0000 - Microsoft Game Studios) Hidden
Age of Empires III (HKLM-x32\...\InstallShield_{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}) (Version: 1.00.0000 - Microsoft Game Studios)
Airline Tycoon Evolution (HKLM-x32\...\{16E43D5F-5296-4D53-B303-9D951AFE510F}) (Version:  - )
Anno 2205 (HKLM-x32\...\Uplay Install 1253) (Version:  - Ubisoft)
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 384.94 - NVIDIA Corporation) Hidden
ASUSUpdate (HKLM-x32\...\{587178E7-B1DF-494E-9838-FA4DD36E873C}) (Version:  - )
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
BufferChm (HKLM-x32\...\{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}) (Version: 130.0.331.000 - Hewlett-Packard) Hidden
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.7.6623 - CDBurnerXP)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CPUID CPU-Z 1.78 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DaVinci Resolve (HKLM\...\{5D6009B3-E646-463A-805A-D5B95D0E36A2}) (Version: 12.5.5026 - Blackmagic Design)
DaVinci Resolve Panels (HKLM\...\{6FC8261F-6046-4ABB-851B-12FC923D0724}) (Version: 1.0.0.0 - Blackmagic Design)
Destinations (HKLM-x32\...\{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}) (Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (HKLM-x32\...\{21A2F5EE-1DC5-488A-BE7E-E526F8C61488}) (Version: 130.0.372.000 - Hewlett-Packard) Hidden
DocMgr (HKLM-x32\...\{92A51949-EE4C-466D-AAF0-99E74A49A63F}) (Version: 130.0.000.000 - Ihr Firmenname) Hidden
DocProc (HKLM-x32\...\{9B362566-EC1B-4700-BB9C-EC661BDE2175}) (Version: 13.0.0.0 - Hewlett-Packard) Hidden
Dropbox (HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\Dropbox) (Version: 39.4.49 - Dropbox, Inc.)
FastStone Capture 5.3 (HKLM-x32\...\FastStone Capture) (Version: 5.3 - FastStone Soft)
Fax (HKLM-x32\...\{440B915A-0C85-45DB-92AE-75AE14704A64}) (Version: 130.0.418.000 - Hewlett-Packard) Hidden
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
GPBaseService2 (HKLM-x32\...\{63FF21C9-A810-464F-B60A-3111747B1A6D}) (Version: 130.0.371.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Officejet 4500 G510g-m (HKLM\...\{E5083D57-D93F-404C-A91F-1C50D67C2BEB}) (Version: 13.0 - HP)
HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Support Assistant (HKLM-x32\...\{61EB474B-67A6-47F4-B1B7-386851BAB3D0}) (Version: 8.5.37.19 - Hewlett-Packard Company)
HP Support Solutions Framework (HKLM-x32\...\{8F1A441E-AD6D-4732-BD6A-F38D5F1D1E47}) (Version: 12.8.37.11 - Hewlett-Packard Company)
HP Touchpoint Analytics Client (HKLM\...\{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}) (Version: 4.0.2.1439 - HP Inc.)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (HKLM-x32\...\{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}) (Version: 1.00.0001 - Microsoft) Hidden
HPProductAssistant (HKLM-x32\...\{C43326F5-F135-4551-8270-7F7ABA0462E1}) (Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (HKLM-x32\...\{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}) (Version: 130.0.371.000 - Hewlett-Packard) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.35 - Irfan Skiljan)
Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech)
MarketResearch (HKLM-x32\...\{175F0111-2968-4935-8F70-33108C6A4DE3}) (Version: 130.0.374.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 4.7 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Excel Viewer (HKLM-x32\...\{95120000-003F-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft 

Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft 

Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - 

Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft 

Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft 

Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft 

Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft 

Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft 

Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft 

Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft 

Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft 

Corporation)
Mozilla Firefox 47.0.1 (x64 de) (HKLM\...\Mozilla Firefox 47.0.1 (x64 de)) (Version: 47.0.1 - Mozilla)
Mozilla Firefox 57.0 (x64 de) (HKLM\...\Mozilla Firefox 57.0 (x64 de)) (Version: 57.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 57.0.0.6525 - Mozilla)
MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Network64 (HKLM\...\{05EFBF37-0E52-4579-875C-7EEF0DFB4FCB}) (Version: 130.0.550.000 - Hewlett-Packard) Hidden
Network64 (HKLM\...\{6BFAB6C1-6D46-46DB-A538-A269907C9F2F}) (Version: 140.0.221.000 - Hewlett-Packard) Hidden
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 384.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 384.94 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.62.40 - NVIDIA Corporation)
NVIDIA Grafiktreiber 384.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 384.94 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.27 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
Online Games Manager v1.50 (HKLM-x32\...\Online Games Manager) (Version: 1.50.4 - Real Networks, Inc.)
Planetbase (HKLM-x32\...\1351624781_is1) (Version: 1.2.3 - GOG.com)
Revo Uninstaller 2.0.4 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.4 - VS Revo Group, Ltd.)
Scan (HKLM-x32\...\{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}) (Version: 13.0.0.0 - Hewlett-Packard) Hidden
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 2.11.4.0 - NVIDIA Corporation) 

Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
SimCity 4 Deluxe (HKLM-x32\...\{3F0D0ABE-CDAF-431A-00BC-CBBE018EA74E}) (Version:  - )
Skype™ 7.1 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.1.105 - Skype Technologies S.A.)
SmartWebPrinting (HKLM-x32\...\{68A10D12-0D0F-4212-BDE6-D87FAD32A8FA}) (Version: 130.0.373.000 - Hewlett-Packard) Hidden
SolutionCenter (HKLM-x32\...\{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}) (Version: 130.0.373.000 - Hewlett-Packard) Hidden
Star Wars Galactic Battlegrounds: Clone Campaigns (HKLM-x32\...\{0314ED3D-26A7-4F62-86A2-6B23353445E8}) (Version:  - )
Status (HKLM-x32\...\{AE8705FB-E13C-40A9-8A2D-68D6733FBFC2}) (Version: 130.0.373.000 - Hewlett-Packard) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.64630 - TeamViewer)
Toolbox (HKLM-x32\...\{6BBA26E9-AB03-4FE7-831A-3535584CA002}) (Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (HKLM-x32\...\{DC0A5F99-FD66-433F-9D3A-05DCBA64BE42}) (Version: 130.0.376.000 - Hewlett-Packard) Hidden
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Unity Web Player (HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\UnityWebPlayer) (Version: 5.2.0f3 - Unity Technologies ApS)
Uplay (HKLM-x32\...\Uplay) (Version: 15.0 - Ubisoft)
VLC media player 2.0.4 (HKLM\...\VLC media player) (Version: 2.0.4 - VideoLAN)
VoipConnect (HKLM-x32\...\VoipConnect_is1) (Version: 4.14 build 760 - Finarea S.A. Switzerland)
Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
WebReg (HKLM-x32\...\{43CDF946-F5D9-4292-B006-BA0D92013021}) (Version: 130.0.132.017 - Hewlett-Packard) Hidden
XSplit Gamecaster (HKLM-x32\...\{A41F3C62-007F-4705-8680-4475B0B602FD}) (Version: 3.0.1705.3131 - SplitmediaLabs)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat 

aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\User

\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll 

[2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll 

[2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll 

[2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll 

[2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin

\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin

\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin

\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft 

Corporation)
ContextMenuHandlers1: [MRAICQCMenu] -> {7C9E7B90-88EC-4852-AC7A-C938268A5D04} =>  -> Keine Datei
ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft 

Corporation)
ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft 

Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-07-19] (NVIDIA 

Corporation)
ContextMenuHandlers1_S-1-5-21-226341798-1494298974-1954543524-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\User\AppData

\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers4_S-1-5-21-226341798-1494298974-1954543524-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\User\AppData

\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers5_S-1-5-21-226341798-1494298974-1954543524-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\User\AppData

\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat 

aufgelistet wird.)

Task: {00477B31-D346-4BE6-96AD-ED99712E3EB2} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files

\Microsoft Security Client\\MpCmdRun.exe [2016-11-14] (Microsoft Corporation)
Task: {0052C2F8-7C55-4D27-AB02-106FFDAB27D3} - System32\Tasks\HPCeeScheduleForUser => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015

-06-16] (Hewlett-Packard)
Task: {17708C3A-DDC0-43A2-981D-FE98A890555F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-

02-16] (Google Inc.)
Task: {3C0D7E49-AA5A-43E6-B64B-DF85F5842B6E} - \Microsoft\Windows\Setup\GWXTriggers\Logon-URT -> Keine Datei <==== ACHTUNG
Task: {44ADDDD1-1A02-4588-B902-ADBA582E557D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {4CD7CAF9-B019-4054-8691-1B7D494C90A3} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {4F691EFD-E8BE-4E03-A749-C61BE5962428} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program 

Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2017-06-22] (HP Inc.)
Task: {5704B1A2-7A58-4AB3-9082-5B85DB1F4C8D} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {57DEA349-D687-45A6-A2DD-C9214A147E69} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash

\FlashPlayerUpdateService.exe [2017-11-14] (Adobe Systems Incorporated)
Task: {5A3BEDC0-5151-4155-B225-BF744AEB3689} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {A17F317D-07D5-46E5-B475-7008F7624A5D} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001UA => C:\Users\User

\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.)
Task: {A30D37C3-D3F4-4541-96B9-59ECFC00AB1F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {ABF7A751-AEAA-4E27-8861-7C56100DCEEC} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {AC8B81DD-3A33-464D-94F0-3B91A28A6519} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 

[2016-02-16] (Google Inc.)
Task: {B27F599C-9E7E-4027-8A92-E14A149E7693} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001Core => C:\Users\User

\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.)
Task: {B738F78A-440A-4791-9583-06B66E6A8201} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program 

Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.)
Task: {BE3C62C4-A13B-440C-8E4B-EF2BA1B91FFA} - System32\Tasks\{EA293D0F-8058-4073-9A0E-78436C85A867} => C:\Windows\system32\pcalua.exe -a D:\autorun.exe 

-d D:\
Task: {C0AE8643-9D91-4090-BAAA-E1ECC6BE1F98} - System32\Tasks\{7621CC34-6AA8-449C-B81E-0206C457E8C3} => C:\Program Files (x86)\Monte Cristo\Airline 

Tycoon Evolution\at.exe [2002-07-22] (Spellbound Entertainment AG)
Task: {C5CC7521-EDE4-47D8-ADA9-FEC7729EC854} - System32\Tasks\{011FBEBA-B072-4150-ADB4-8D6548C6FF6B} => C:\Windows\system32\pcalua.exe -a E:\autorun.exe 

-d E:\
Task: {C7124BA0-581D-48F2-8BEB-7957395AEA54} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {D06B9396-AB79-4AF1-A7C1-75BC51EDCE90} - System32\Tasks\ASUS\ASUS Update Checker => C:\Program Files (x86)\ASUS\ASUSUpdate\UpdateChecker

\UpdateChecker.exe [2008-12-11] ()
Task: {D8174689-0ACF-4C40-B4DE-16ABDCB4FE68} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files 

(x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2017-10-11] (HP Inc.)
Task: {E0D482FD-E2D5-4629-BE49-5D404B76CCEC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files 

(x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.)
Task: {E4D86C89-09D5-4B08-B38A-8657C4706273} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {F50FB200-165F-431F-9E03-D3403946CCC3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files 

(x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.)
Task: {F604F927-1BD8-4ED3-B8DF-5AF815E4B2F8} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files 

(x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2017-11-22] ()

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001Core.job => C:\Users\User\AppData\Local\Dropbox\Update

\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001UA.job => C:\Users\User\AppData\Local\Dropbox\Update

\DropboxUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForUser.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-03-16 21:18 - 2016-06-14 21:03 - 000367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-04-01 09:15 - 2016-06-14 21:03 - 001147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-03-16 21:18 - 2016-06-14 21:03 - 003611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-02-09 17:58 - 2016-06-14 21:03 - 000288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2006-09-19 10:07 - 2006-09-19 10:07 - 000827392 _____ () C:\Windows\vsnpstd3.exe
2016-04-01 09:15 - 2016-06-14 21:03 - 002665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-04-01 09:15 - 2016-06-14 21:03 - 001988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-04-01 09:15 - 2016-06-14 21:03 - 001840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-02-09 17:58 - 2016-06-14 21:03 - 000207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2016-04-01 09:15 - 2016-06-14 21:03 - 000034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-04-01 09:15 - 2016-06-14 21:03 - 000920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2015-08-08 00:31 - 2016-06-14 21:03 - 000018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2017-11-16 09:00 - 2017-11-13 11:26 - 000725312 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\dropbox_watchdog.dll
2017-11-16 09:00 - 2017-11-13 11:26 - 002075456 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\dropbox_crashpad.dll
2017-11-16 09:01 - 2017-11-13 11:26 - 000100296 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\_ctypes.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000018888 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\select.pyd
2017-11-16 09:01 - 2017-11-13 11:28 - 000020800 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000035792 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000694224 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\unicodedata.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000021848 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000130512 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 001856848 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000022864 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd
2017-11-16 09:00 - 2017-11-13 11:26 - 000145864 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\pyexpat.pyd
2017-11-16 09:00 - 2017-11-13 11:26 - 000116688 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\pywintypes27.dll
2017-11-16 09:01 - 2017-11-13 11:26 - 000105928 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32api.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000022864 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.crt.compiled._winffi_crt.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000040248 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\fastpath.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000024528 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32event.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000043472 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32process.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000062784 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd
2017-11-16 09:00 - 2017-11-13 11:26 - 000392656 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\pythoncom27.dll
2017-11-16 09:00 - 2017-11-13 11:26 - 000020936 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\mmapfile.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000124880 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32file.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000116176 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32security.pyd
2017-11-16 09:01 - 2017-11-13 11:28 - 000392512 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000026456 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.kernel32.compiled._winffi_kernel32.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000024016 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32clipboard.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000175560 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32gui.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000030160 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32pipe.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000026056 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32job.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000048592 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32service.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000057808 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32evtlog.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000021824 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000023368 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winshell.compiled._winshell.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000066392 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winenumhandles.compiled._WinEnumHandles.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000025432 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000022856 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\crashpad.compiled._Crashpad.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 001796920 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000084424 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\sip.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 001956152 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 003859264 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000155464 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000521024 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000050496 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineCore.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000042304 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000131384 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000218944 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000204096 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000060880 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32print.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000054608 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winrpcserver.compiled._RPCServer.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000024016 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32profile.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000022864 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.user32.compiled._winffi_user32.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000028616 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32ts.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000022360 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000021848 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.winerror.compiled._winffi_winerror.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000022360 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.wininet.compiled._winffi_wininet.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000027488 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd
2017-11-16 09:01 - 2017-11-13 11:26 - 000349128 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winxpgui.pyd
2017-11-16 09:01 - 2017-11-13 11:29 - 000023896 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000025424 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd
2017-11-16 09:00 - 2017-11-13 11:26 - 000036296 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\librsync.dll
2017-11-16 09:00 - 2017-11-13 11:28 - 000181056 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL
2017-11-16 09:01 - 2017-11-13 11:29 - 000030536 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\wind3d11.compiled._wind3d11.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000024368 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\libEGL.DLL
2017-11-16 09:00 - 2017-11-13 11:28 - 001638200 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2017-11-16 09:01 - 2017-11-13 11:29 - 000026456 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.winhttp.compiled._winffi_winhttp.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000545080 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000359224 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd
2017-11-16 09:00 - 2017-11-13 11:28 - 000038208 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngine.pyd

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-226341798-1494298974-1954543524-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\User\AppData\Roaming\Microsoft\Windows\Themes

\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupfolder: C:^Users^User^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: Dropbox Update => "C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat 

aufgelistet wird.)

FirewallRules: [TCP Query User{38C73ECF-EEAA-4689-8F6E-E596A9AFD63C}F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds.exe] => (Allow) F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds.exe
FirewallRules: [UDP Query User{7CABFE57-E2F4-4804-8340-8B4EF61777CD}F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds.exe] => (Allow) F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds.exe
FirewallRules: [TCP Query User{D4F08B6E-00D4-4D93-8C51-3EA54DDCE158}F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [UDP Query User{A1B5C363-4D48-434B-ABF1-4CBD28E743C3}F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [{4885EE98-93C0-43CD-A64D-54FF1B5C6D56}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{7A2C65A5-AE95-4536-9174-632482754346}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{3FE381B2-1975-4C81-B880-1B567F1130A4}] => (Allow) C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3x.exe
FirewallRules: [{1CD83B4F-5B46-47A1-A92E-75AA41DEECBC}] => (Allow) C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3x.exe
FirewallRules: [{C8CB8EE3-E21E-48CC-B9FF-F010949966BD}] => (Allow) C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3y.exe
FirewallRules: [{A096DE85-F95F-42F0-9463-B7037530692F}] => (Allow) C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3y.exe
FirewallRules: [TCP Query User{CB929C3C-F7B6-42D1-8747-2716FCBF7577}H:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) H:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [UDP Query User{B23DF31A-B7F3-4A73-9810-F1C5E7BEFCB7}H:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) H:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [{8A16690E-1847-497B-97C7-CEA4FEBD3F40}] => (Allow) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{A8F38F22-121F-4AEB-83B2-565615A4A80F}] => (Allow) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{045401DF-BBD4-4EC3-ACAD-92668CE6057E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{953F28D7-D6C8-4681-AA90-9453FD215647}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0CBBC1FA-2A7F-4D7F-96C0-21EB1BD8D430}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BB8C7394-3C10-4437-BC39-1810CAC924C0}] => (Allow) C:\Program Files (x86)\VoipConnect.com\VoipConnect\VoipConnect.exe
FirewallRules: [{8698A9EF-6000-4B02-8720-2B3C33A5C3D9}] => (Allow) C:\Program Files (x86)\VoipConnect.com\VoipConnect\VoipConnect.exe
FirewallRules: [{D978678F-DDF8-4A1F-BCDD-163EDEE37395}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{0D4DBBE6-92C8-4366-95FB-E6EEB77E99CE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{3410AFC9-004F-467F-A1F0-85C8D43AA1F6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{6177BC3D-0796-46FD-989E-D9ED1A0BE4A1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{218D843F-B0C2-44A9-8436-A02AC0890903}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{9D1EF3DA-4BB0-45DE-8DAC-5D6604B9635A}C:\users\user\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\user

\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{309E308D-CE1E-4694-9192-736FDE5DCEDE}C:\users\user\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\user

\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{DE2A0670-F767-4C25-AD57-36257F4C77B5}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{9540191E-C19D-448F-95CF-0BBBA5402F9C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{8F5DDD73-069E-4429-A2D0-5F0B69A7E237}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{55E8DCF6-AA14-4F93-AF26-18A701E8B28F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{16E102C1-B93C-4A3D-B61E-80C4A7916331}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{F5AE4738-8ED6-4978-B023-B83CA6CF4D30}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{673FD18B-90C0-4C03-8E8B-896324A1FB23}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{54DE837F-A44E-4606-965D-2A1828764E92}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{005B2836-7074-4043-A94E-AD557B83D09D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{451D2D2A-7448-4572-9A79-1DC22EB937AA}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{D4BFBFAB-6A1F-47EE-99B8-B522C1DA6B5A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{CA2B5042-5795-499F-933A-71969FD10822}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{53237DB8-36F8-468F-A07A-CC12C35346BF}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{0E84EC79-2897-4D68-B21A-E3B242E4BA36}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{9A310C86-8365-49CE-ACA0-575CB1023294}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{67E68B86-BEAA-41CA-B8C2-0336459EE05B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{EE75CCF1-D530-4B20-920A-C6D7A3856AFB}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{2EA0AA21-5559-4C81-8014-5AC8E2C09DB4}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{C1896BD8-8A8D-4C51-9295-05494A2DF994}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{83DFE077-D21E-4E8B-9988-B5C39E747DBE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{08417A10-4CE7-4CDE-8231-9D3F02D76DBA}I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds.exe] => (Allow) I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds.exe
FirewallRules: [UDP Query User{A8AC8D4A-DE6D-4661-9B21-F40F933066C7}I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds.exe] => (Allow) I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds.exe
FirewallRules: [TCP Query User{4DBBCD17-8227-477A-A4F9-21CD82A0C749}I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [UDP Query User{AE1A6059-9D11-4E21-9F5D-69C324F5AF1C}I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic 

battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [{6F9A41C0-770F-48A4-8CF5-210D1A036CF5}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{FF8033BC-0D0D-41B1-84C0-478BB14C4033}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{29AA8AE5-3674-4295-8449-CF542BAC1835}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{A114A23C-7599-4EF9-BFAD-20A2AD17BDC5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{EFFE880E-FFA9-4BDF-AFFF-517F9EE12D7C}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Anno 2205\Bin

\Win64\Anno2205.exe
FirewallRules: [{0494C639-441C-44C7-9AF1-CA2EC7DD8DC6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{EE7BD039-DCBF-48BA-8F85-F70E379D726A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{A71781DF-CC1A-49E1-AC35-D6E3CC5A3E05}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{C7296545-CAF5-4C9B-B9F1-EBF93D69B47B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{88874CF6-667C-48D2-90C8-1C10FC120020}] => (Allow) C:\Program Files\Mozilla Firefox Kapi\firefox.exe
FirewallRules: [{F122B669-EA8E-4FF0-B505-A0FEC94C905D}] => (Allow) C:\Program Files\Mozilla Firefox Kapi\firefox.exe
FirewallRules: [{36700C50-E9C9-4C57-87B3-9120C3723ADE}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{7C8890CB-8E8C-4151-BBFF-A57A93D379F6}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{A2E3B6CF-E313-4BA3-BB73-FB538AD219CF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Northgard\Northgard.exe
FirewallRules: [{50E095B0-F8CA-44BF-8C6D-D0D47A7306E1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Northgard\Northgard.exe
FirewallRules: [{2BD9EF50-C96B-4223-9CB8-D4E11EE8A8D9}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe
FirewallRules: [{997E7E88-35A2-40C3-9FC0-EB91860BF627}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe
FirewallRules: [{EF852EFC-EAF4-4DDF-9ED5-B57E8B567392}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe
FirewallRules: [{9A97B598-9304-47B3-BD8A-7432BB850E6B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe
FirewallRules: [{96CD9007-3BE7-4625-9CD5-120D64FFE525}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe
FirewallRules: [{619C430A-1947-4C57-B8A1-513291EEB5D3}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe
FirewallRules: [{BEDDA18D-D18D-4FC0-B905-60A47D5CA44E}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DPDecoder.exe
FirewallRules: [{AA39EECE-F4F1-4082-8255-3A5C0C00053D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Universim Demo\The Universim.exe
FirewallRules: [{12A0A37E-45EF-4C6A-B031-0D6486DC09C2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Universim Demo\The Universim.exe
FirewallRules: [{34AD938E-A5B7-4983-BB6A-2B8DFB520240}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Gamecaster\XSplit.Gamecaster.exe
FirewallRules: [{63B6A152-6093-42FC-8F27-DAA389E7C24C}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Gamecaster\XSplit.Gamecaster.exe
FirewallRules: [{F0FC645E-B43C-42EF-9681-4CC91FB0DC1F}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Gamecaster\XSplit.cam.exe
FirewallRules: [{252CE295-74D3-423B-A08E-E96A414F954B}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Gamecaster\XSplit.cam.exe
FirewallRules: [{2CA3B65B-F27B-4FF0-9915-F74279BBB069}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{1E802BAE-5A68-40C5-A149-BE9EA6416803}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe

==================== Wiederherstellungspunkte =========================

05-11-2017 12:16:03 Windows Update
09-11-2017 08:21:27 Windows Update
12-11-2017 19:09:18 Windows Update
15-11-2017 20:00:15 Windows Update
18-11-2017 19:39:03 Revo Uninstaller's restore point - 7-Zip 9.20 (x64 edition)
18-11-2017 19:41:22 Revo Uninstaller's restore point - Adobe Acrobat Reader DC - Deutsch
18-11-2017 19:42:54 Revo Uninstaller's restore point - CCleaner
18-11-2017 19:43:28 Revo Uninstaller's restore point - chip 1-click download service
18-11-2017 19:43:40 chip 1-click download service wurde entfernt.
18-11-2017 19:44:38 Revo Uninstaller's restore point - GIMP 2.8.20
20-11-2017 14:04:15 Windows Update
21-11-2017 09:14:17 Revo Uninstaller's restore point - Microsoft Office Professional Edition 2003
21-11-2017 09:18:04 Revo Uninstaller's restore point - Microsoft Office Professional Edition 2003
21-11-2017 09:18:28 Revo Uninstaller's restore point - Microsoft Office Professional Edition 2003

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Officejet 4500 G510g-m
Description: Officejet 4500 G510g-m
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Officejet 4500 G510g-m
Description: Officejet 4500 G510g-m
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: pfnfd_1_10_0_9
Description: pfnfd_1_10_0_9
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: pfnfd_1_10_0_9
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Coprozessor
Description: Coprozessor
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/21/2017 09:14:16 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 

0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   

Generatorinstanz-ID: {2eef1a47-6c0b-4b17-9ad1-9eac8032eef2}

Error: (11/18/2017 07:39:02 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 

0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   

Generatorinstanz-ID: {4a17bf11-ce63-425f-8634-37424af72206}

Error: (11/13/2017 07:55:59 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GalaxyClient Helper.exe, Version: 1.2.26.8, Zeitstempel: 0x59e72d17
Name des fehlerhaften Moduls: libcef.dll, Version: 3.2704.1434.0, Zeitstempel: 0x57d833c4
Ausnahmecode: 0x80000003
Fehleroffset: 0x000a173d
ID des fehlerhaften Prozesses: 0x149c
Startzeit der fehlerhaften Anwendung: 0x01d35c4c6d9e4860
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\GOG Galaxy\libcef.dll
Berichtskennung: b41d4f20-c83f-11e7-a296-002618810f02

Error: (11/07/2017 08:00:11 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: hpqtra08.exe, Version: 130.0.376.0, Zeitstempel: 0x4a163449
Name des fehlerhaften Moduls: hpqusg.dll, Version: 130.0.374.0, Zeitstempel: 0x4a161738
Ausnahmecode: 0xc0000417
Fehleroffset: 0x00032dab
ID des fehlerhaften Prozesses: 0x838
Startzeit der fehlerhaften Anwendung: 0x01d35795e36e88e0
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusg.dll
Berichtskennung: 4b9b6320-c389-11e7-9aed-002618810f02

Error: (11/03/2017 11:40:41 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm firefox.exe, Version 56.0.2.6506 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den 

Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 15b8

Startzeit: 01d3548b344b7c90

Endzeit: 265

Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Berichts-ID: 6c3e4331-c083-11e7-9a7a-002618810f02

Error: (11/02/2017 09:28:51 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm firefox.exe, Version 47.0.1.6018 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den 

Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 698

Startzeit: 01d35409c40009a0

Endzeit: 201

Anwendungspfad: C:\Program Files\Mozilla Firefox Kapi\firefox.exe

Berichts-ID: 6c27b6a1-c00c-11e7-b997-002618810f02

Error: (10/09/2017 07:48:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: HPSupportSolutionsFrameworkService.exe, Version: 8.7.27.15, Zeitstempel: 0x595d9791
Name des fehlerhaften Moduls: clr.dll, Version: 4.7.2114.0, Zeitstempel: 0x59a63e48
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000001c2716
ID des fehlerhaften Prozesses: 0x8f8
Startzeit der fehlerhaften Anwendung: 0x01d340c953af06e0
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
Pfad des fehlerhaften Moduls: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
Berichtskennung: e698f5f0-acbd-11e7-a22d-002618810f02

Error: (10/09/2017 07:48:45 AM) (Source: .NET Runtime) (EventID: 1023) (User: )
Description: Anwendung: HPSupportSolutionsFrameworkService.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines internen 

Fehlers in der .NET-Laufzeit beendet. bei IP 000007FEF6BB2716 (000007FEF69F0000) mit Exitcode 80131506.

Error: (10/06/2017 07:11:30 AM) (Source: chip 1-click download service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (09/28/2017 10:53:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 55.0.3.6445, Zeitstempel: 0x599edbef
Name des fehlerhaften Moduls: xul.dll, Version: 55.0.3.6445, Zeitstempel: 0x599edbdd
Ausnahmecode: 0x80000003
Fehleroffset: 0x0076a5cf
ID des fehlerhaften Prozesses: 0x15e8
Startzeit der fehlerhaften Anwendung: 0x01d33892d4376850
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Mozilla Firefox\xul.dll
Berichtskennung: 7bd4fb70-a497-11e7-b141-002618810f02


Systemfehler:
=============
Error: (11/23/2017 08:10:22 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen (Anwendungsspezifisch) wird der SID (S-1-5-18) für Benutzer NT-AUTORITÄT\SYSTEM von Adresse LocalHost 

(unter Verwendung von LRPC) keine Berechtigung zum Start (Lokal) für die COM-Serveranwendung mit CLSID 
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
 und APPID 
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
 gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungsprogramm für Komponentendienste geändert werden.

Error: (11/23/2017 08:09:52 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
pfnfd_1_10_0_9

Error: (11/23/2017 08:08:09 AM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 70.

Error: (11/23/2017 08:08:09 AM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 70.

Error: (11/23/2017 08:07:54 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Software Protection" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 

Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/23/2017 08:07:54 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 

120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/23/2017 08:07:53 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende 

Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/23/2017 08:07:53 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "HP Touchpoint Analytics" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/23/2017 08:07:53 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Online Games Manager" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/23/2017 08:07:53 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "NVIDIA Display Container LS" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden 

in 1000 Millisekunden durchgeführt: Neustart des Diensts.


==================== Speicherinformationen =========================== 

Prozessor: AMD Phenom(tm) II X4 940 Processor
Prozentuale Nutzung des RAM: 38%
Installierter physikalischer RAM: 8191.18 MB
Verfügbarer physikalischer RAM: 5023.96 MB
Summe virtueller Speicher: 16380.54 MB
Verfügbarer virtueller Speicher: 12713.5 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:178.91 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 95DD2725)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
         

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

HKLM\...\Run: [GwxControlPanelMonitor] => C:\Users\User\AppData\Local\Temp\DMR\Downloads\152e221a8bef8d2d13c58f995563a1a1\2a159b5701df8e9d7bfd558a3c761b6e\GWX1720_control_panel.exe [4559944 2016-02-07] (UltimateOutsider) <==== ACHTUNG
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\Run: [*LABAL*] => [X]
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {780042B5-BA4C-4321-A76F-511211A27969} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {DDD1F70E-8AF5-429F-818F-E369432D2A7A} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {F208F861-48A5-4BA7-9C80-75413C389F68} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
ContextMenuHandlers1: [MRAICQCMenu] -> {7C9E7B90-88EC-4852-AC7A-C938268A5D04} =>  -> Keine Datei
C:\Users\User\AppData\Local\Temp\DMR\Downloads\152e221a8bef8d2d13c58f995563a1a1
C:\Program Files\nsr161D.tmp
emptytemp:
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.