Windows 7 PUP.Optional.Trovigo + PUP.Optional.Conduit nicht zu beseitigen

trude · 30.11.2017, 17:09

Hi, zuerst nachdem ich die Regeln gelesen habe:
Ich bin ebay-Kleingewerbetreibender!?

Ich habe eigentlich Bitdefender-Virenschutz
Ich bekam den Verdacht auf Virus, nachdem über t-online 100erte Mails (100/TG) rausgehen und ich nichts mehr senden kann.
Adwcleaner habe ich laufen lassen, der hat einiges gefunden und gelöscht,
Malewarebytes scan hat auch einiges gefunden und in Quarantäne gegeben.
Doch: jeder erneute scan findet immer wieder folgendes:PUP.Optional.Trovigo, C:\USERS\xxx xxx\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Ersetzt, [16169], [455258],1.0.3381
PUP.Optional.Conduit, C:\USERS\xxx xxx\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Ersetzt, [580], [454832],1.0.3381
(username hab ich ge-xt)
ich wollte erst nach der Anleitung vorgehen und die Datei für logfiles runterladen. das hat mir malewarebytes blockiert:
Einzelheiten zu blockierten Websites-
Bösartige Website: 1
, , Blockiert, [-1], [-1],0.0.0

-Website-Daten-
Domäne: filesendsuite.dl.myway.com
IP-Adresse: 74.113.235.138
Port: [60301]
Typ: Ausgehend
Datei: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

cosinus · 04.12.2017, 14:14

Zitat:

Malewarebytes scan hat auch einiges gefunden und in Quarantäne gegeben.
Doch: jeder erneute scan findet immer wieder folgendes:

Nacherzählungen helfen da nicht weiter!

Logfiles müssen GRUNDSÄTZLICH VOLLSTÄNDIG gepostet werden (in CODE-Tags!)

Zudem noch ein paar Takte zum Google-Browser:

Lesestoff:
Google Chrome

Offensichtlich nutzt du den Browser Chrome von Google. Ich muss von der Verwendung dieses Browsers aus Datenschutzgründen dringend abraten.

Deinstalliere Google Chrome und verwende stattdessen Mozilla Firefox.

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

trude · 04.12.2017, 21:00

Ich komm erst morgen nachmittag dazu die logfiles zu posten
Trude

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 30-11-2017
durchgeführt von ***** (Administrator) auf *****-PC (04-12-2017 20:46:15)
Gestartet von C:\Users\*****\Downloads
Geladene Profile: ***** & UpdatusUser (Verfügbare Profile: ***** & UpdatusUser)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\vsserv.exe
(AuthenTec, Inc.) C:\Program Files\Fingerprint Sensor\ATService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\System32\nvwmi64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\System32\nvwmi64.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe
() C:\Program Files (x86)\Common Files\DeviceHelper\DeviceManager.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(O2Micro International) C:\Windows\SysWOW64\o2flash.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\PSUtility\PSUService.exe
(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe
() C:\Windows\SysWOW64\ScsiAccess.EXE
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
(Fujitsu Technology Solutions) C:\Program Files (x86)\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McTkSchedulerService.exe
() C:\Program Files (x86)\Mobile Partner Manager\AssistantServices.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\updatesrv.exe
(CSR, plc) C:\Program Files\CSR\Bluetooth Feature Pack 5.0\VFPRadioSupportService.exe
() C:\Program Files\Fujitsu\WirelessSelector\WSUService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.SmartMonitor.exe
(CSR, plc) C:\Program Files\CSR\Bluetooth Feature Pack 5.0\CSRBthFtpServer.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\PSUtility\TrayManager.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\bdagent.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxTray64.exe
(Dropbox, Inc.) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Dropbox, Inc.) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Dropbox, Inc.) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\Kodak EasyShare software\bin\EasyShare.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [CSRFTP] => C:\Program Files\CSR\Bluetooth Feature Pack 5.0\CSRBthFtpServer.exe [463216 2009-10-12] (CSR, plc)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [PSUTility] => C:\Program Files\Fujitsu\PSUtility\TrayManager.exe [188264 2009-07-30] (FUJITSU LIMITED)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2017\bdagent.exe [322312 2017-11-14] (Bitdefender)
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\Run: [Adobe Reader Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe [886768 2017-11-04] (Adobe Systems Incorporated)
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {01dec9f4-5a65-11e1-8872-00231445c1b4} - D:\AutoRun.exe
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {10420407-3172-11e1-b630-00231445c1b4} - D:\AutoRun.exe
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {317b2f4e-59a2-11e1-9f33-00231445c1b4} - D:\AutoRun.exe
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {57673dfa-be00-11e0-9d7c-00231445c1b4} - D:\AutoRun.exe
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {57673e16-be00-11e0-9d7c-00231445c1b4} - D:\AutoRun.exe
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {6aafc7b9-9892-11e2-abfb-00231445c1b4} - D:\AutoRun.exe
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {6ec8c0f9-6b2f-11e0-beb8-00231445c1b4} - D:\autorun.exe
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {e777e9c9-72c4-11e2-abab-00231445c1b4} - D:\AutoRun.exe
Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Network PC Fax.lnk [2015-05-06]
ShortcutTarget: Samsung Network PC Fax.lnk -> C:\Windows\System32\spool\drivers\x64\3\NetFaxTray64.exe (Samsung Electronics Co., Ltd.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup\LaunchCenter.lnk [2009-03-11]
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files (x86)\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup\LaunchCenter.lnk [2009-03-11]
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files (x86)\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions)
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2017-11-16]
ShortcutTarget: Dropbox.lnk -> C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup\LaunchCenter.lnk [2009-03-11]
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files (x86)\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions)
BootExecute: wsusnative64autocheck autochk * 

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: 0.0.0.1	mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{1A2A8147-FE8B-4889-80F7-4F9EFE2B2D82}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{FFED7905-18A6-421F-8705-531317AA3102}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-04-26] (Intel Security)
BHO: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2017\pmbxie.dll [2017-11-14] (Bitdefender)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.)
BHO-x32: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-04-26] (Intel Security)
BHO-x32: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2017\Antispam32\pmbxie.dll [2017-11-14] (Bitdefender)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)
Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2017\pmbxie.dll [2017-11-14] (Bitdefender)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.)
Toolbar: HKLM - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-04-26] (Intel Security)
Toolbar: HKLM-x32 - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2017\Antispam32\pmbxie.dll [2017-11-14] (Bitdefender)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)
Toolbar: HKLM-x32 - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-04-26] (Intel Security)
Toolbar: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: cxxowm5j.default-1478595552035-1511909166602
FF ProfilePath: C:\Users\*****\AppData\Roaming\TomTom\HOME\Profiles\vbaie3xl.default [2017-10-15]
FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\cxxowm5j.default-1478595552035-1511909166602 [2017-12-04]
FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\\bdwteff
FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender 2017\\bdwteff [2017-09-14]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext [2016-10-19] [Lagacy] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\\bdwteff
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext
FF HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\1vwla5d5.default\extensions\cliqz@cliqz.com => nicht gefunden
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_187.dll [2017-11-14] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_187.dll [2017-11-14] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [Keine Datei]
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\ZoomBrowser EX\Program\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-14] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-14] (NVIDIA Corporation)
FF Plugin-x32: @pack.google.com/Google Updater;version=14 -> C:\Program Files (x86)\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll [2011-09-12] (Google)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default [2017-11-30]
CHR Extension: (YouTube) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-04]
CHR Extension: (Google-Suche) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-04]
CHR Extension: (Avira Browserschutz) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-02-04]
CHR Extension: (Bitdefender Wallet) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\gannpgaobkkhmpomoijebaigcapoeebl [2017-11-25]
CHR Extension: (Iminent Toolbar) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcemhggbahmlmhgnbpbbdaklcojhbecn [2013-03-14] [UpdateUrl: hxxp://vz.iminent.com/vz/2FE796A5-06CC-48F6-8C8F-BDCC0ABB0D92/100/update.xml] <==== ACHTUNG
CHR Extension: (Iminent) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl [2017-11-25]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-11-25]
CHR Extension: (Google Mail) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-04]
CHR Extension: (Chrome Media Router) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-11-25]
CHR Profile: C:\Users\*****\AppData\Local\Google\Chrome\User Data\System Profile [2017-11-30]
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2090152 2017-09-14] (Bitdefender)
S2 DeskViewBasicService; C:\Program Files (x86)\Fujitsu\DeskViewBasic\DeskViewBasicService.exe [34816 2009-08-19] (Fujitsu Technology Solutions) [Datei ist nicht signiert]
R2 DeviceManager; C:\Program Files (x86)\Common Files\DeviceHelper\DeviceManager.exe [40960 2009-11-17] () [Datei ist nicht signiert]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-23] (NVIDIA Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.561\McCHSvc.exe [404368 2017-05-16] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-06-12] ()
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [50688 2012-02-08] (Hewlett-Packard) [Datei ist nicht signiert]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-05-23] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23006864 2015-05-23] (NVIDIA Corporation)
R2 NVWMI; C:\Windows\system32\nvwmi64.exe [2708936 2016-08-16] ()
R2 O2Flash; C:\Windows\SysWOW64\o2flash.exe [65536 2007-02-12] (O2Micro International) [Datei ist nicht signiert]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [66048 2012-02-08] (Hewlett-Packard) [Datei ist nicht signiert]
R2 PowerSavingUtilityService; C:\Program Files\Fujitsu\PSUtility\PSUService.exe [63336 2009-07-30] (FUJITSU LIMITED)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1254736 2017-04-11] (Bitdefender)
R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [801472 2015-03-10] (Samsung Electronics Co., Ltd.)
R2 ScsiAccess; C:\Windows\SysWOW64\ScsiAccess.EXE [181312 2003-02-04] () [Datei ist nicht signiert]
R2 TestHandler; C:\Program Files (x86)\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [341264 2009-02-19] (Fujitsu Technology Solutions)
R2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [996736 2017-04-18] (McAfee, Inc.)
R2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [16160 2017-04-18] (McAfee, Inc.)
S3 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [86776 2017-04-18] (McAfee, Inc.)
R2 UI Assistant Service; C:\Program Files (x86)\Mobile Partner Manager\AssistantServices.exe [252784 2010-07-16] ()
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2017\updatesrv.exe [218416 2017-11-14] (Bitdefender)
R2 VFPRadioSupportService; C:\Program Files\CSR\Bluetooth Feature Pack 5.0\VFPRadioSupportService.exe [145792 2009-10-12] (CSR, plc)
R2 vsserv; C:\Program Files\Bitdefender\Bitdefender 2017\vsserv.exe [1230880 2017-11-14] (Bitdefender)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WirelessSelectorService; C:\Program Files\Fujitsu\WirelessSelector\WSUService.exe [62312 2009-07-21] ()
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3831200 2015-06-12] (Intel® Corporation)
S2 InstallerService; C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [36096 2013-05-21] (Advanced Micro Devices, Inc.)
R1 atc; C:\Windows\System32\DRIVERS\atc.sys [1019880 2017-10-02] (BitDefender S.R.L. Bucharest, ROMANIA)
R3 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1763744 2017-10-02] (BitDefender)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-10-09] (AVG Technologies)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [124424 2017-07-26] (BitDefender LLC)
R2 bdprivmon; C:\Windows\System32\DRIVERS\bdprivmon.sys [47376 2017-11-24] (© Bitdefender SRL)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [87912 2015-12-04] (BitDefender)
R1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
S3 ewsercd; C:\Windows\System32\DRIVERS\ewsercd.sys [112896 2010-03-18] (Huawei Technologies Co., Ltd.)
R0 FJGSDisk; C:\Windows\System32\DRIVERS\FJGSDisk.sys [14696 2010-09-08] (FUJITSU LIMITED)
R3 FUJ02B1; C:\Windows\System32\DRIVERS\FUJ02B1.sys [59152 2016-05-11] (FUJITSU LIMITED)
R3 FUJ02E3; C:\Windows\System32\DRIVERS\FUJ02E3.sys [7296 2006-11-01] (FUJITSU LIMITED)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [187688 2017-09-14] (BitDefender LLC)
R1 HBtnKey; C:\Windows\System32\DRIVERS\wstbtndb.sys [9856 2007-09-14] (Lenovo)
R0 ignis; C:\Windows\System32\DRIVERS\ignis.sys [362664 2017-10-02] (Bitdefender)
S3 jrdusbser; C:\Windows\System32\DRIVERS\jrdusbser.sys [119680 2010-04-07] (Olivetti)
S3 Jukebox3_x64; C:\Windows\System32\DRIVERS\ctpdusbx.sys [27264 2006-01-19] (Creative Technology Ltd.)
S3 LHidFilt; C:\Windows\System32\DRIVERS\LHidFilt.Sys [54800 2008-02-29] (Logicool, Inc.)
S3 LMouFilt; C:\Windows\System32\DRIVERS\LMouFilt.Sys [57360 2008-02-29] (Logicool, Inc.)
S3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [41488 2008-02-29] (Logicool, Inc.)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [193464 2017-11-26] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [110016 2017-12-04] (Malwarebytes)
R3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [46008 2017-12-04] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253880 2017-11-27] (Malwarebytes)
R3 NETwNs64; C:\Windows\System32\DRIVERS\NETwsw01.sys [11534096 2015-05-04] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2015-04-03] (NVIDIA Corporation)
R3 O2MDRDR; C:\Windows\System32\DRIVERS\o2mdx64.sys [57576 2010-05-10] (O2Micro )
R3 O2SCBUS; C:\Windows\System32\DRIVERS\ozscrx64.sys [107808 2009-05-15] (O2Micro)
S3 qcfiltersra2k; C:\Windows\System32\DRIVERS\qcfiltersra2k.sys [6400 2009-10-01] (QUALCOMM Incorporated)
S3 qcusbnetsra2k; C:\Windows\System32\DRIVERS\qcusbnetsra2k.sys [243712 2010-04-26] (QUALCOMM Incorporated)
R3 qcusbsersra2k; C:\Windows\System32\DRIVERS\qcusbsersra2k.sys [121600 2010-04-26] (QUALCOMM Incorporated)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [44344 2012-11-23] (Synaptics Incorporated)
R3 ST50220; C:\Windows\System32\Drivers\ST50220.sys [51248 2008-12-02] (Sonix)
R2 trufos; C:\Windows\System32\DRIVERS\trufos.sys [439576 2017-09-14] (BitDefender S.R.L.)
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)
S3 cpuz130; \??\C:\Users\*****H~1\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X] <==== ACHTUNG
S3 DrvAgent64; \??\C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]
S3 SNP2UVC; system32\DRIVERS\snp2uvc.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-12-04 20:46 - 2017-12-04 20:47 - 000026272 _____ C:\Users\*****\Downloads\FRST.txt
2017-12-04 20:45 - 2017-12-04 20:46 - 000000000 ____D C:\FRST
2017-12-04 20:45 - 2017-12-04 20:45 - 002391552 _____ (Farbar) C:\Users\*****\Downloads\FRST64.exe
2017-12-04 11:34 - 2017-12-04 11:35 - 000005018 _____ C:\Users\*****\Downloads\plain label.pdf
2017-12-03 01:31 - 2017-12-04 10:45 - 000110016 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-11-30 17:42 - 2017-11-30 17:42 - 001533960 _____ (CHIP Digital GmbH) C:\Users\*****\Downloads\LicenseCrawler - CHIP-Installer.exe
2017-11-27 09:42 - 2017-11-27 09:42 - 078346672 _____ (Malwarebytes ) C:\Users\*****\Downloads\mb3-setup-consumer-3.3.1.2183(2).exe
2017-11-26 13:18 - 2017-12-04 10:45 - 000046008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-11-26 13:18 - 2017-11-27 09:57 - 000002030 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-11-26 13:18 - 2017-11-27 09:01 - 000253880 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2017-11-26 13:18 - 2017-11-26 13:18 - 000193464 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2017-11-26 13:18 - 2017-11-26 13:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-11-26 13:18 - 2017-11-01 08:54 - 000077432 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-11-26 13:17 - 2017-11-26 13:17 - 078346672 _____ (Malwarebytes ) C:\Users\*****\Downloads\mb3-setup-consumer-3.3.1.2183(1).exe
2017-11-26 13:17 - 2017-11-26 13:17 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-11-26 13:17 - 2017-11-26 13:17 - 000000000 ____D C:\Program Files\Malwarebytes
2017-11-26 13:15 - 2017-11-26 13:16 - 078346672 _____ (Malwarebytes ) C:\Users\*****\Downloads\mb3-setup-consumer-3.3.1.2183.exe
2017-11-25 15:24 - 2017-11-25 15:24 - 008261584 _____ (Malwarebytes) C:\Users\*****\Downloads\adwcleaner_7.0.4.0(2).exe
2017-11-25 14:46 - 2017-11-25 14:46 - 001790024 _____ (Malwarebytes) C:\Users\*****\Downloads\JRT.exe
2017-11-25 14:27 - 2017-11-25 14:27 - 008261584 _____ (Malwarebytes) C:\Users\*****\Downloads\adwcleaner_7.0.4.0(1).exe
2017-11-25 11:41 - 2017-11-25 11:41 - 000194126 _____ C:\Users\*****\Downloads\DHL_label_2017-11-25_11_41_13.pdf
2017-11-24 18:25 - 2017-11-24 18:25 - 008261584 _____ (Malwarebytes) C:\Users\*****\Downloads\adwcleaner_7.0.4.0.exe
2017-11-24 11:36 - 2017-11-24 11:36 - 000040359 _____ C:\Users\*****\Downloads\Randale_f-korr.odt
2017-11-24 11:01 - 2017-11-24 11:01 - 000047376 _____ (© Bitdefender SRL) C:\Windows\system32\Drivers\bdprivmon.sys
2017-11-16 23:15 - 2017-11-16 23:16 - 000000000 ____D C:\Program Files (x86)\GUM18C2.tmp
2017-11-16 10:10 - 2017-11-16 10:10 - 000000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-11-15 09:51 - 2017-10-16 23:34 - 003222528 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-11-15 09:51 - 2017-10-14 09:38 - 025731584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-11-15 09:51 - 2017-10-14 09:13 - 002903552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-11-15 09:51 - 2017-10-14 09:09 - 005979648 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-11-15 09:51 - 2017-10-14 08:30 - 015266816 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-11-15 09:51 - 2017-10-14 08:21 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-11-15 09:51 - 2017-10-14 08:14 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-11-15 09:51 - 2017-10-14 08:09 - 001544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-11-15 09:51 - 2017-10-14 07:50 - 002293760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-11-15 09:51 - 2017-10-14 07:33 - 004542464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-11-15 09:51 - 2017-10-14 07:28 - 013680128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-11-15 09:51 - 2017-10-14 07:10 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-11-15 09:51 - 2017-10-12 01:55 - 014635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2017-11-15 09:50 - 2017-10-18 08:31 - 000395976 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-11-15 09:50 - 2017-10-18 07:45 - 000347336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-11-15 09:50 - 2017-10-18 03:06 - 000344064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2017-11-15 09:50 - 2017-10-18 03:06 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2017-11-15 09:50 - 2017-10-18 03:06 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2017-11-15 09:50 - 2017-10-18 03:06 - 000056320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2017-11-15 09:50 - 2017-10-18 03:06 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2017-11-15 09:50 - 2017-10-18 03:06 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2017-11-15 09:50 - 2017-10-18 03:06 - 000007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2017-11-15 09:50 - 2017-10-17 00:07 - 001680616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-11-15 09:50 - 2017-10-16 22:55 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2017-11-15 09:50 - 2017-10-14 09:23 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-11-15 09:50 - 2017-10-14 09:23 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-11-15 09:50 - 2017-10-14 09:12 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-11-15 09:50 - 2017-10-14 09:11 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-11-15 09:50 - 2017-10-14 09:11 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-11-15 09:50 - 2017-10-14 09:11 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-11-15 09:50 - 2017-10-14 09:11 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-11-15 09:50 - 2017-10-14 09:05 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-11-15 09:50 - 2017-10-14 09:04 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-11-15 09:50 - 2017-10-14 09:02 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-11-15 09:50 - 2017-10-14 09:01 - 000816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-11-15 09:50 - 2017-10-14 09:01 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-11-15 09:50 - 2017-10-14 09:01 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-11-15 09:50 - 2017-10-14 09:00 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-11-15 09:50 - 2017-10-14 08:55 - 000968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-11-15 09:50 - 2017-10-14 08:53 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-11-15 09:50 - 2017-10-14 08:47 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-11-15 09:50 - 2017-10-14 08:47 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-11-15 09:50 - 2017-10-14 08:46 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-11-15 09:50 - 2017-10-14 08:43 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-11-15 09:50 - 2017-10-14 08:43 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-11-15 09:50 - 2017-10-14 08:41 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-11-15 09:50 - 2017-10-14 08:40 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-11-15 09:50 - 2017-10-14 08:31 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-11-15 09:50 - 2017-10-14 08:30 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-11-15 09:50 - 2017-10-14 08:29 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-11-15 09:50 - 2017-10-14 08:28 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-11-15 09:50 - 2017-10-14 08:27 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-11-15 09:50 - 2017-10-14 08:03 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-11-15 09:50 - 2017-10-14 07:58 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-11-15 09:50 - 2017-10-14 07:53 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-11-15 09:50 - 2017-10-14 07:53 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-11-15 09:50 - 2017-10-14 07:52 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-11-15 09:50 - 2017-10-14 07:52 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-11-15 09:50 - 2017-10-14 07:51 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-11-15 09:50 - 2017-10-14 07:47 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-11-15 09:50 - 2017-10-14 07:47 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-11-15 09:50 - 2017-10-14 07:46 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-11-15 09:50 - 2017-10-14 07:45 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-11-15 09:50 - 2017-10-14 07:45 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-11-15 09:50 - 2017-10-14 07:45 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-11-15 09:50 - 2017-10-14 07:38 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-11-15 09:50 - 2017-10-14 07:35 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-11-15 09:50 - 2017-10-14 07:35 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-11-15 09:50 - 2017-10-14 07:34 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-11-15 09:50 - 2017-10-14 07:33 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-11-15 09:50 - 2017-10-14 07:32 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-11-15 09:50 - 2017-10-14 07:31 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-11-15 09:50 - 2017-10-14 07:30 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-11-15 09:50 - 2017-10-14 07:25 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-11-15 09:50 - 2017-10-14 07:24 - 000694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-11-15 09:50 - 2017-10-14 07:23 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-11-15 09:50 - 2017-10-14 07:23 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-11-15 09:50 - 2017-10-14 07:07 - 001314304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-11-15 09:50 - 2017-10-14 07:04 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-11-15 09:50 - 2017-10-12 01:58 - 000382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 012574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2017-11-15 09:50 - 2017-10-12 01:55 - 002319872 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 002222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 002058240 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2017-11-15 09:50 - 2017-10-12 01:55 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2017-11-15 09:50 - 2017-10-12 01:40 - 000308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-11-15 09:50 - 2017-10-12 01:39 - 000591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-11-15 09:50 - 2017-10-12 01:38 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-11-15 09:50 - 2017-10-12 01:38 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-11-15 09:50 - 2017-10-12 01:37 - 012574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2017-11-15 09:50 - 2017-10-12 01:37 - 011410944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 001549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 001400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 001363968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2017-11-15 09:50 - 2017-10-12 01:26 - 000427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-11-15 09:50 - 2017-10-12 01:26 - 000164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-11-15 09:50 - 2017-10-12 01:25 - 000086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2017-11-15 09:50 - 2017-10-12 01:25 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2017-11-15 09:50 - 2017-10-12 01:24 - 000008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2017-11-15 09:50 - 2017-10-12 01:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2017-11-15 09:50 - 2017-10-12 01:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2017-11-15 09:50 - 2017-10-12 01:20 - 000113152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2017-11-15 09:50 - 2017-10-12 01:16 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-11-15 09:49 - 2017-10-18 03:34 - 000134376 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2017-11-15 09:49 - 2017-10-18 03:30 - 000605184 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-11-15 09:49 - 2017-10-15 23:04 - 000407392 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2017-11-15 09:49 - 2017-10-04 14:04 - 002023936 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2017-11-15 09:49 - 2017-10-04 14:04 - 001570304 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-11-15 09:49 - 2017-10-04 14:04 - 000670208 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2017-11-15 09:49 - 2017-10-04 14:04 - 000603648 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-11-15 09:49 - 2017-10-04 14:04 - 000370688 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-11-15 09:49 - 2017-10-04 14:04 - 000241664 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2017-11-15 09:49 - 2017-10-04 14:04 - 000181760 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-12-04 20:47 - 2009-07-14 05:45 - 000021680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-12-04 20:47 - 2009-07-14 05:45 - 000021680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-12-04 20:37 - 2016-11-18 10:58 - 000000000 ____D C:\Users\*****\AppData\LocalLow\Mozilla
2017-12-04 20:12 - 2009-08-10 21:20 - 000714474 _____ C:\Windows\system32\perfh007.dat
2017-12-04 20:12 - 2009-08-10 21:20 - 000154526 _____ C:\Windows\system32\perfc007.dat
2017-12-04 20:12 - 2009-07-14 06:13 - 001649664 _____ C:\Windows\system32\PerfStringBackup.INI
2017-12-04 20:12 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2017-12-04 20:08 - 2016-01-12 00:46 - 000001256 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2773882716-4014048892-2402612297-1001UA.job
2017-12-04 20:08 - 2016-01-12 00:46 - 000001204 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2773882716-4014048892-2402612297-1001Core.job
2017-12-04 13:28 - 2010-09-08 08:36 - 000001034 _____ C:\Windows\Tasks\Google Software Updater.job
2017-12-04 10:44 - 2015-11-26 13:58 - 000065536 _____ C:\Windows\system32\Ikeext.etl
2017-12-04 10:44 - 2010-09-08 17:00 - 000000000 ____D C:\ProgramData\NVIDIA
2017-12-04 10:44 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-12-04 00:44 - 2015-11-26 14:07 - 000710859 _____ C:\bdlog.txt
2017-12-03 23:35 - 2010-09-08 08:44 - 000003990 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{E1C67B7B-AD2F-4AAF-8D04-12CBA86209E5}
2017-12-03 01:27 - 2017-03-28 23:27 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-12-03 01:27 - 2012-05-05 10:08 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-12-02 02:26 - 2010-09-08 08:23 - 000000000 ____D C:\Users\*****
2017-11-30 22:04 - 2015-12-09 18:59 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-11-29 16:10 - 2016-05-18 12:56 - 000000000 ____D C:\Program Files (x86)\Portrait Professional 8 Test
2017-11-29 01:48 - 2010-09-22 21:24 - 000000000 ____D C:\Users\*****\Data
2017-11-28 09:30 - 2010-09-24 16:31 - 000000000 ____D C:\Users\*****\AppData\Local\ElevatedDiagnostics
2017-11-27 21:52 - 2009-07-14 06:08 - 000032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-11-27 12:38 - 2014-11-16 02:39 - 000000000 ___RD C:\Users\*****\Dropbox
2017-11-27 09:53 - 2014-10-15 17:04 - 000000000 ____D C:\AdwCleaner
2017-11-25 14:59 - 2010-09-08 08:44 - 000000000 ____D C:\Users\*****\AppData\Local\Google
2017-11-17 11:18 - 2009-07-14 05:57 - 000001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-11-16 23:15 - 2010-09-08 09:03 - 000003542 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-11-16 23:15 - 2010-09-08 09:03 - 000003414 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-11-16 18:31 - 2014-11-16 02:36 - 000000000 ____D C:\Users\*****\AppData\Roaming\Dropbox
2017-11-16 18:20 - 2012-10-22 13:21 - 000002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-11-16 18:08 - 2013-07-24 02:13 - 000000000 ____D C:\Windows\system32\MRT
2017-11-16 18:07 - 2017-10-11 23:03 - 127017032 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2017-11-16 18:07 - 2010-09-22 13:35 - 127017032 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-11-16 11:13 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\rescache
2017-11-16 09:34 - 2009-07-14 05:45 - 000415672 _____ C:\Windows\system32\FNTCACHE.DAT
2017-11-16 09:31 - 2014-12-11 04:26 - 000000000 ____D C:\Windows\system32\appraiser
2017-11-15 13:30 - 2015-11-26 13:40 - 000000000 ____D C:\Program Files\Bitdefender Agent
2017-11-15 09:46 - 2014-12-27 16:50 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-11-15 03:32 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\NDF
2017-11-15 03:12 - 2010-09-22 12:05 - 000000000 ____D C:\Users\*****\AppData\Roaming\Mozilla
2017-11-14 21:45 - 2012-04-19 19:51 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-11-14 21:45 - 2012-04-19 19:51 - 000004366 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-11-14 21:45 - 2011-11-21 10:35 - 000000000 ____D C:\Windows\system32\Macromed
2017-11-14 21:45 - 2011-06-04 09:11 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-11-14 21:45 - 2010-09-08 08:46 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-11-08 23:41 - 2010-09-22 15:20 - 000000000 ____D C:\Users\*****\Documents\Turbo Lister Backup

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-04-28 14:25 - 2016-04-28 14:35 - 001192656 _____ (Adobe Systems Incorporated) C:\Users\*****\flashplayer21_xa_install.exe
2012-02-14 12:58 - 2017-09-28 18:39 - 000000157 _____ () C:\Users\*****\AppData\Roaming\default.rss
2013-06-10 14:32 - 2013-06-10 14:32 - 000000000 _____ () C:\Users\*****\AppData\Roaming\downloads.m3u
2014-10-11 14:52 - 2015-02-22 20:29 - 000141984 _____ () C:\Users\*****\AppData\Local\ars.cache
2014-10-11 14:53 - 2015-02-22 20:30 - 000320039 _____ () C:\Users\*****\AppData\Local\census.cache
2016-04-17 19:00 - 2016-04-17 19:00 - 000003584 _____ () C:\Users\*****\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-10-11 14:12 - 2014-10-11 14:12 - 000000036 _____ () C:\Users\*****\AppData\Local\housecall.guid.cache
2015-06-12 04:25 - 2016-02-03 19:24 - 000007609 _____ () C:\Users\*****\AppData\Local\resmon.resmoncfg
2017-09-17 11:16 - 2017-09-17 11:16 - 000000000 _____ () C:\Users\*****\AppData\Local\{B6544D82-3436-4391-B325-FABC58789C45}

Einige Dateien in TEMP:
====================
2016-02-11 22:04 - 2016-02-11 22:04 - 000736352 _____ (Oracle Corporation) C:\Users\*****\AppData\Local\Temp\jre-8u73-windows-au.exe
2017-04-30 17:52 - 2017-04-30 17:52 - 007545931 _____ (MusicToMP3.org                                              ) C:\Users\*****\AppData\Local\Temp\music-to-mp3.exe
2017-01-02 14:32 - 2017-01-02 14:32 - 000000000 ____D () C:\Users\*****\AppData\Local\Temp\SystemDiagnostics.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-11-29 03:55

==================== Ende von FRST.txt ============================

trude · 04.12.2017, 21:07

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 30-11-2017
durchgeführt von ***** (04-12-2017 20:48:36)
Gestartet von C:\Users\*****\Downloads
Windows 7 Professional Service Pack 1 (X64) (2010-09-08 07:23:23)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2773882716-4014048892-2402612297-500 - Administrator - Disabled)
Gast (S-1-5-21-2773882716-4014048892-2402612297-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2773882716-4014048892-2402612297-1005 - Limited - Enabled)
***** (S-1-5-21-2773882716-4014048892-2402612297-1001 - Administrator - Enabled) => C:\Users\*****
UpdatusUser (S-1-5-21-2773882716-4014048892-2402612297-1006 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AV: Bitdefender Virenschutz (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371}
AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Enabled) {078AF241-05A3-0EFF-40E0-3E0D69EA140A}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

64 Bit HP CIO Components Installer (HKLM\...\{FD868C71-6CCF-42E2-B90D-0504AB0036FE}) (Version: 13.2.1 - Hewlett-Packard) Hidden
7-Zip 16.04 (HKLM-x32\...\7-Zip) (Version: 16.04 - Igor Pavlov)
A1 Dashboard (HKLM-x32\...\{86790597-5E41-47AF-A6E4-6295D0C21B8B}) (Version: 1.9.0.0 - A1 Telekom Austria AG) Hidden
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 18.009.20050 - Adobe Systems Incorporated)
Adobe Flash Player 27 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 27.0.0.187 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated)
Advertising Center (HKLM-x32\...\{b2ec4a38-b545-4a00-8214-13fe0e915e6d}) (Version: 0.0.0.1 - Nero AG) Hidden
ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.201.1711.120 - Alps Electric)
Anti-Twin (Installation 4/29/2017) (HKLM-x32\...\Anti-Twin 2017-04-29 15.57.09) (Version:  - Joerg Rosenthal, Germany)
aspi (HKLM-x32\...\{015E4B8A-29B5-4AE3-BD08-38220FADFF4C}) (Version: 3.00.0008.0000 - Eastman Kodak Company) Hidden
AuthenTec Fingerprint Software (HKLM\...\{6B99AF03-2668-4572-BD3D-8C7A5D103065}) (Version: 8.5.1.28 - Ihr Firmenname)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.18.1035 - Bitdefender)
Bitdefender Internet Security (HKLM\...\Bitdefender) (Version: 22.0.1.1 - Bitdefender)
Bluetooth Feature Pack 5.0 (HKLM\...\{B2F4C332-2359-4ADE-AF0C-C631768BBB89}) (Version: 5.0.13 - CSR Plc.)
Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v7.00.05(D) - TOSHIBA CORPORATION)
calibre (HKLM-x32\...\{BDE6D02A-86B7-4D4C-8248-7705C1C0CC79}) (Version: 2.78.0 - Kovid Goyal)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM-x32\...\CANON iMAGE GATEWAY Task) (Version: 1.7.0.4 - Canon Inc.)
Canon Internet Library for ZoomBrowser EX (HKLM-x32\...\Canon Internet Library for ZoomBrowser EX) (Version: 1.6.3.9 - Canon Inc.)
Canon MOV Decoder (HKLM-x32\...\Canon MOV Decoder) (Version: 1.3.0.14 - Canon Inc.)
Canon MOV Encoder (HKLM-x32\...\Canon MOV Encoder) (Version: 1.1.0.18 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM-x32\...\MovieEditTask) (Version: 3.1.0.27 - Canon Inc.)
Canon Utilities CameraWindow DC 8 (HKLM-x32\...\CameraWindowDC) (Version: 8.10.4.24 - Canon Inc.)
Canon Utilities MyCamera (HKLM-x32\...\MyCamera) (Version: 7.2.0.4 - Canon Inc.)
Canon Utilities MyCamera DC (HKLM-x32\...\MyCameraDC) (Version: 7.2.0.5 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities RemoteCapture Task for ZoomBrowser EX (HKLM-x32\...\RemoteCaptureTask) (Version: 1.8.0.1 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (HKLM-x32\...\ZoomBrowser EX Memory Card Utility) (Version: 1.2.2.11 - Canon Inc.)
CCHelp (HKLM-x32\...\{9D1CF8B6-17B3-4832-B062-2C2DD0B57B04}) (Version: 3.00.0010.0000 - Ihr Firmenname) Hidden
CCScore (HKLM-x32\...\{B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}) (Version: 3.01.0001.0014 - Eastman Kodak) Hidden
Chiavetta Internet Olicard 145 (HKLM-x32\...\Chiavetta Internet Olicard 145 ALCATEL_is1) (Version:  - Olivetti)
Cliqz (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.53 - Cliqz.com)
Common Desktop Agent (HKLM\...\{031A0E14-0413-4C97-9772-2639B782F46F}) (Version: 1.62.0 - OEM) Hidden
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Creative Jukebox Driver (HKLM-x32\...\Creative Jukebox Driver) (Version:  - )
Creative MediaSource (HKLM-x32\...\{56F3E1FF-54FE-4384-A153-6CCABA097814}) (Version:  - )
Creative NOMAD II Driver (HKLM-x32\...\Creative NOMAD II Driver) (Version:  - )
Creative NOMAD Jukebox Zen Xtra (HKLM-x32\...\{66F324A1-BDC0-11D7-9E5C-00D0B76A8705}) (Version:  - )
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)
DeskUpdate (HKLM-x32\...\DeskUpdate_is1) (Version: 4.15.0148 - Fujitsu Technology Solutions)
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
DolbyFiles (HKLM-x32\...\{b1adf008-e898-4fe2-8a1f-690d9a06acaf}) (Version: 2.0 - Nero AG) Hidden
Dropbox (HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\Dropbox) (Version: 39.4.49 - Dropbox, Inc.)
ESSAdpt (HKLM-x32\...\{D15E9DB5-6BEB-4534-901E-80C0A29BAB97}) (Version: 3.01.0002.0001 - Ihr Firmenname) Hidden
ESSANUP (HKLM-x32\...\{A6F18A67-B771-4191-8A33-36D2E742D6D9}) (Version: 3.01.0002.0001 - Ihr Firmenname) Hidden
ESSBrwr (HKLM-x32\...\{643EAE81-920C-4931-9F0B-4B343B225CA6}) (Version: 3.01.0002.0001 - Ihr Firmenname) Hidden
ESSCAM (HKLM-x32\...\{469730CC-78DF-4CD3-B286-562D459EA619}) (Version: 3.01.0002.0001 - Ihr Firmenname) Hidden
ESSCDBK (HKLM-x32\...\{AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}) (Version: 3.01.0002.0001 - Ihr Firmenname) Hidden
ESScore (HKLM-x32\...\{9D8FEE90-0377-49A9-AEFB-525BDE549BA4}) (Version: 3.01.0003.0001 - Ihr Firmenname) Hidden
ESSgui (HKLM-x32\...\{91517631-A9F3-4B7C-B482-43E0068FD55A}) (Version: 3.01.0002.0001 - Ihr Firmenname) Hidden
ESShelp (HKLM-x32\...\{87843A41-7808-4F2E-B13F-25C1E67CF2FD}) (Version: 3.01.0001.0001 - Ihr Firmenname) Hidden
ESSini (HKLM-x32\...\{8E92D746-CD9F-4B90-9668-42B74C14F765}) (Version: 3.01.0002.0001 - Ihr Firmenname) Hidden
ESSPCD (HKLM-x32\...\{14D4ED84-6A9A-45A0-96F6-1753768C3CB5}) (Version: 3.01.0002.0001 - Ihr Firmenname) Hidden
ESSstore (HKLM-x32\...\{6016734B-42A7-4AEB-9248-1D1E4F69AB52}) (Version: 3.01.0001.0001 - Eastman Kodak) Hidden
ESSTUTOR (HKLM-x32\...\{CA60320D-6A16-49C8-A34F-84EEF4799567}) (Version: 3.01.0001.0002 - Eastman Kodak Company) Hidden
ESSvpaht (HKLM-x32\...\{A5B3EB8A-4071-42F0-8E8E-7A8342AA8E69}) (Version: 3.01.0002.0001 - Ihr Firmenname) Hidden
ESSvpot (HKLM-x32\...\{48C82F7A-F100-4DAB-A310-8E18BF2159E1}) (Version: 3.01.0002.0001 - Ihr Firmenname) Hidden
FJ Camera (HKLM-x32\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 6.0.1218.4_WHQL - Sonix)
Free M4a to MP3 Converter 9.3 (HKLM-x32\...\Free M4a to MP3 Converter_is1) (Version:  - ManiacTools.com)
Fujitsu Display Manager (HKLM\...\{4108974B-DE87-4AD4-9167-930C62C45691}) (Version: 7.01.20.204 - Ihr Firmenname) Hidden
Fujitsu Display Manager (HKLM-x32\...\InstallShield_{4108974B-DE87-4AD4-9167-930C62C45691}) (Version:  - )
Fujitsu Hotkey Utility (HKLM-x32\...\{BA0CC975-682B-4678-A35C-05E607F36387}) (Version: 3.60.1.0 - FUJITSU LIMITED) Hidden
Fujitsu Hotkey Utility (HKLM-x32\...\InstallShield_{BA0CC975-682B-4678-A35C-05E607F36387}) (Version: 3.60.1.0 - FUJITSU LIMITED)
Fujitsu MobilityCenter Extension Utility (HKLM\...\{EC314CDF-3521-482B-A21C-65AC95664814}) (Version: 3.01.00.000 - Ihr Firmenname) Hidden
Fujitsu MobilityCenter Extension Utility (HKLM-x32\...\InstallShield_{EC314CDF-3521-482B-A21C-65AC95664814}) (Version:  - )
Fujitsu System Extension Utility (HKLM\...\{E8A5B78F-4456-4511-AB3D-E7BFFB974A7A}) (Version: 3.1.0.0 - FUJITSU LIMITED) Hidden
Fujitsu System Extension Utility (HKLM-x32\...\InstallShield_{E8A5B78F-4456-4511-AB3D-E7BFFB974A7A}) (Version:  - )
Futuremark SystemInfo (HKLM-x32\...\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}) (Version: 3.21.2.1 - Futuremark Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 62.0.3202.94 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Google Updater (HKLM-x32\...\Google Updater) (Version: 2.4.2432.1652 - Google Inc.)
HUAWEI DataCard Driver 4.25.17.04 (HKLM-x32\...\HUAWEI DataCard Driver) (Version: 4.25.17.04 - Huawei technologies Co., Ltd.)
ImagXpress (HKLM-x32\...\{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}) (Version: 7.0.74.0 - Nero AG) Hidden
Intel Security True Key (HKLM\...\TrueKey) (Version: 4.16.112.1 - Intel Security)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.2.50.1050 - Intel Corporation)
Intel(R) Network Connections 18.7.28.1 (HKLM\...\PROSetDX) (Version: 18.7.28.1 - Intel)
Intel® PROSet/Wireless Software (HKLM-x32\...\{e6f0207e-ac43-48a9-bfff-3d879b45694d}) (Version: 18.12.1 - Intel Corporation)
Java 8 Update 73 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218073F0}) (Version: 8.0.730.2 - Oracle Corporation)
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
JPEGmini (HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\5d2010e174743543) (Version: 1.8.23.0 - ICVT Ltd)
Junk Mail filter update (HKLM-x32\...\{E2DFE069-083E-4631-9B6C-43C48E991DE5}) (Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Kodak EasyShare Software (HKLM-x32\...\{D32470A1-B10C-4059-BA53-CF0486F68EBC}) (Version:  - Eastman Kodak Company)
KSU (HKLM-x32\...\{B997C2A0-4383-41BF-B76E-9B8B7ECFB267}) (Version: 612.7.0013.0000 - Ihr Firmenname) Hidden
LifeBook Application Panel (HKLM\...\{6226477E-444F-4DFE-BA19-9F4F7D4565BC}) (Version: 8.1.0.0 - FUJITSU LIMITED) Hidden
LifeBook Application Panel (HKLM-x32\...\InstallShield_{6226477E-444F-4DFE-BA19-9F4F7D4565BC}) (Version:  - )
LSI HDA Modem (HKLM\...\LSI Soft Modem) (Version: 2.2.97 - LSI Corporation)
LSI V92 MOH Application (HKLM\...\LTMOH) (Version:  - LSI Corporation)
Malwarebytes Version 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.561.1 - McAfee, Inc.)
Menu Templates - Starter Kit (HKLM-x32\...\{b78120a0-cf84-4366-a393-4d0a59bc546c}) (Version: 9.4.2.0 - Nero AG) Hidden
Microsoft .NET Framework 4.7 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{91110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 (HKLM-x32\...\{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}) (Version: 9.0.21022.218 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mobile Partner Manager (HKLM-x32\...\{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}) (Version: 1.0.0.1 - ZTE Corporation)
Movie Templates - Starter Kit (HKLM-x32\...\{e498385e-1c51-459a-b45f-1721e37aa1a0}) (Version: 9.4.2.0 - Nero AG) Hidden
Mozilla Firefox 57.0.1 (x64 de) (HKLM\...\Mozilla Firefox 57.0.1 (x64 de)) (Version: 57.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 57.0.1.6541 - Mozilla)
Mozilla Thunderbird (3.1.4) (HKLM-x32\...\Mozilla Thunderbird (3.1.4)) (Version: 3.1.4 (de) - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 9 Essentials (HKLM-x32\...\{6fb6193a-66b8-4669-a133-d6c5ada08ad9}) (Version:  - Nero AG)
Nero BurnRights 12 (HKLM-x32\...\{0F9EAB70-E891-49E0-9974-37C6BE3BA6D0}) (Version: 12.0.00900 - Nero AG)
Nero WaveEditor (HKLM-x32\...\{831D3D7B-169D-47F3-9117-D74934BF71BF}) (Version: 12.5.00100 - Nero AG)
Notifier (HKLM-x32\...\{0008546E-DF6E-4CC1-AFD0-2CB8E16C95A2}) (Version: 3.01.0001.0002 - Ihr Firmenname) Hidden
NVIDIA 3D Vision Treiber 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 342.01 - NVIDIA Corporation)
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.11.9756 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.5.28 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.5.28 - NVIDIA Corporation)
NVIDIA Grafiktreiber 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 342.01 - NVIDIA Corporation)
NVIDIA nView 141.36 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView) (Version: 141.36 - NVIDIA Corporation)
NVIDIA WMI 2.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVWMI) (Version: 2.18.0 - NVIDIA Corporation)
O2Micro 1394 OHCI Compliant Host Controller Driver (HKLM\...\{AFC44A23-E6A8-4625-B6B1-23D438525D59}) (Version: 1.0.00 - O2Micro International LTD.) Hidden
O2Micro 1394 OHCI Compliant Host Controller Driver (HKLM-x32\...\InstallShield_{AFC44A23-E6A8-4625-B6B1-23D438525D59}) (Version: 1.0.00 - O2Micro International LTD.)
O2Micro Flash Memory Card Windows Driver (HKLM\...\{165EB7E8-619F-4054-80D5-2CFCD9155361}) (Version: 3.00.0009 - O2Micro International LTD.) Hidden
O2Micro Flash Memory Card Windows Driver (HKLM-x32\...\InstallShield_{165EB7E8-619F-4054-80D5-2CFCD9155361}) (Version: 3.00.0009 - O2Micro International LTD.)
O2Micro PCIe SCR Driver (HKLM\...\{1B78AF5F-2120-445B-961E-FE275CA1FE7C}) (Version: 1.0.01 - O2Micro) Hidden
O2Micro PCIe SCR Driver (HKLM-x32\...\InstallShield_{1B78AF5F-2120-445B-961E-FE275CA1FE7C}) (Version: 1.0.01 - O2Micro)
OTtBP (HKLM-x32\...\{F71760CD-0F8B-4DCC-B7B7-6B223CC3843C}) (Version: 3.00.0007.0000 - Eastman Kodak Company) Hidden
OZ711 SCR Driver V3.0.1.6B (x64) (HKLM\...\{BC796E78-3F5B-467B-816F-4DB16DE8750A}) (Version: 3.0.1.6B - O2Micro) Hidden
OZ711 SCR Driver V3.0.1.6B (x64) (HKLM-x32\...\InstallShield_{BC796E78-3F5B-467B-816F-4DB16DE8750A}) (Version: 3.0.1.6B - O2Micro)
PCDLNCH (HKLM-x32\...\{69BD6399-3D8F-45B7-81D9-819361F5101D}) (Version: 3.01.0002.0001 - Eastman Kodak Company) Hidden
Power Saving Utility (HKLM\...\{7254349B-460B-488F-B4DB-A96100C5C48B}) (Version: 31.01.11.009 - FUJITSU LIMITED) Hidden
Power Saving Utility (HKLM-x32\...\InstallShield_{7254349B-460B-488F-B4DB-A96100C5C48B}) (Version:  - )
Prerequisite installer (HKLM-x32\...\{3AAB08A3-F129-4BD5-B409-AE674F93759D}) (Version: 12.0.0003 - Nero AG) Hidden
Qualcomm Gobi 2000 Package for Sierra (HKLM-x32\...\{A23619B4-373D-4CA1-A204-A185203C0EBA}) (Version: 1.1.140 - QUALCOMM)
QuickTime (HKLM-x32\...\QuickTime) (Version:  - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6886 - Realtek Semiconductor Corp.)
Resilio Sync (HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\Resilio Sync) (Version: 2.4.4 - Resilio, Inc.)
Samsung Drucker-Diagnose (HKLM-x32\...\Samsung Printer Diagnostics) (Version: 1.0.0.17 - Samsung Electronics Co., Ltd.)
Samsung Easy Document Creator (HKLM-x32\...\Samsung Easy Document Creator) (Version: 1.06.60 (17.03.2015) - Samsung Electronics Co., Ltd.)
Samsung Easy Printer Manager (HKLM-x32\...\Samsung Easy Printer Manager) (Version: 1.05.79.00(26.03.2015) - Samsung Electronics Co., Ltd.)
Samsung Network PC Fax (HKLM-x32\...\Samsung Network PC Fax) (Version: 1.11.28 (10.03.2015) - Samsung Electronics Co., Ltd.)
Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)
Samsung Scan Process Machine (HKLM-x32\...\Samsung Scan Process Machine) (Version: 1.03.05.25 - Samsung Electronics Co., Ltd.) Hidden
Samsung SCX-3400 Series (HKLM-x32\...\Samsung SCX-3400 Series) (Version: 1.27 (10.04.2015) - Samsung Electronics Co., Ltd.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.25.0 - SAMSUNG Electronics Co., Ltd.)
SFR (HKLM-x32\...\{C354C9B6-A4E0-4BB0-A368-6DC6BCA0E314}) (Version: 3.01.0002.0001 - Eastman Kodak Company) Hidden
SFR2 (HKLM-x32\...\{ABE068DF-8DC4-4947-ABFC-DD2B40850225}) (Version: 3.00.0004.0000 - Eastman Kodak Company) Hidden
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 4.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 2.4.5.28 - NVIDIA Corporation) Hidden
Shock Sensor Utility (HKLM\...\{ABE8CE7E-01CC-4500-BAF5-FFC29EA108A1}) (Version: 4.01.00.000 - Ihr Firmenname) Hidden
Shock Sensor Utility (HKLM-x32\...\InstallShield_{ABE8CE7E-01CC-4500-BAF5-FFC29EA108A1}) (Version:  - )
SNS Upload for Easy Document Creator (HKLM-x32\...\{B6B5F07C-88D5-49D3-A1A7-A6D4BC37DCCC}) (Version: 1.0.0 - Samsung Electronics Co.,Ltd)
Sun ODF Plugin for Microsoft Office 3.2 (HKLM-x32\...\{BD136CE7-6666-4273-A056-8D92F8625AAB}) (Version: 3.2.9483 - Sun Microsystems)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.21.4 - Synaptics Incorporated)
Synchronizer (HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\Synchroniser) (Version:  - F.J. Wechselberger)
SystemDiagnostics (HKLM-x32\...\{EF59DB7F-7426-426E-B862-7031F83ED304}) (Version: 2.04.0006 - Fujitsu Technology Solutions)
TeamViewer 5 (HKLM-x32\...\TeamViewer 5) (Version: 5.1.9192  - TeamViewer GmbH)
TextMaker Viewer (HKLM-x32\...\TextMaker Viewer) (Version:  - SoftMaker Software GmbH)
TomTom HOME (HKLM-x32\...\{0E778C56-3A87-497E-BEF0-EF0D3EE4871C}) (Version: 2.10.2 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
TuneUp Utilities Language Pack (de-DE) (HKLM-x32\...\{F4811919-F252-4B25-9AB2-8859A85810B5}) (Version: 13.0.4000.179 - TuneUp Software) Hidden
Turbo Lister 2 (HKLM-x32\...\{8927E07C-97F7-4A54-88FB-D976F50DD46E}) (Version: 2.00.0000 - eBay Inc.)
VC_CRT_x64 (HKLM\...\{54F2237F-018C-483B-8884-9FC0D88840C3}) (Version: 1.02.0000 - Intel Corporation) Hidden
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Windows Live Anmelde-Assistent (HKLM-x32\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Wireless Selector (HKLM\...\{51692C66-5505-41B8-92A7-548C69FB867C}) (Version: 4.01.00.100 - FUJITSU LIMITED) Hidden
Wireless Selector (HKLM-x32\...\InstallShield_{51692C66-5505-41B8-92A7-548C69FB867C}) (Version:  - )

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{45C6AFA5-2C13-402f-BC5D-45CC8172EF6B}\InprocServer32 -> C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtExt.dll (TOSHIBA)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{581FFA00-FC33-0004-0402-95003A5CDE89}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Resilio Sync\ShellExtensionPath64_2DC.dll ()
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{581FFA01-FC33-0004-0402-95003A5CDE89}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Resilio Sync\ShellExtensionPath64_2DC.dll ()
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [!Resilio Sync 2.4.0Done] -> {581FFA04-FC33-0000-0402-95003A5CDE89} => C:\ProgramData\Resilio Sync\ShellExtensionOverlay64_29A.dll [2016-09-18] ()
ShellIconOverlayIdentifiers: [!Resilio Sync 2.4.0RO] -> {581FFA03-FC33-0000-0402-95003A5CDE89} => C:\ProgramData\Resilio Sync\ShellExtensionOverlay64_29A.dll [2016-09-18] ()
ShellIconOverlayIdentifiers: [!Resilio Sync 2.4.0RW] -> {581FFA02-FC33-0000-0402-95003A5CDE89} => C:\ProgramData\Resilio Sync\ShellExtensionOverlay64_29A.dll [2016-09-18] ()
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [!Resilio Sync 2.4.0Done] -> {581FFA04-FC33-0000-0402-95003A5CDE89} => C:\ProgramData\Resilio Sync\ShellExtensionOverlay64_29A.dll [2016-09-18] ()
ShellIconOverlayIdentifiers-x32: [!Resilio Sync 2.4.0RO] -> {581FFA03-FC33-0000-0402-95003A5CDE89} => C:\ProgramData\Resilio Sync\ShellExtensionOverlay64_29A.dll [2016-09-18] ()
ShellIconOverlayIdentifiers-x32: [!Resilio Sync 2.4.0RW] -> {581FFA02-FC33-0000-0402-95003A5CDE89} => C:\ProgramData\Resilio Sync\ShellExtensionOverlay64_29A.dll [2016-09-18] ()
ContextMenuHandlers1: [!NetFax0] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\Windows\system32\spool\drivers\x64\3\NetFaxShell64.dll [2015-03-10] (Samsung Electronics Co., Ltd.)
ContextMenuHandlers1: [!NetFax1] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\Windows\system32\spool\drivers\x64\3\NetFaxShell64.dll [2015-03-10] (Samsung Electronics Co., Ltd.)
ContextMenuHandlers1: [!NetFax2] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\Windows\system32\spool\drivers\x64\3\NetFaxShell64.dll [2015-03-10] (Samsung Electronics Co., Ltd.)
ContextMenuHandlers1: [!NetFax3] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\Windows\system32\spool\drivers\x64\3\NetFaxShell64.dll [2015-03-10] (Samsung Electronics Co., Ltd.)
ContextMenuHandlers1: [!NetFax4] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\Windows\system32\spool\drivers\x64\3\NetFaxShell64.dll [2015-03-10] (Samsung Electronics Co., Ltd.)
ContextMenuHandlers1: [!NetFax5] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\Windows\system32\spool\drivers\x64\3\NetFaxShell64.dll [2015-03-10] (Samsung Electronics Co., Ltd.)
ContextMenuHandlers1: [!NetFax6] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\Windows\system32\spool\drivers\x64\3\NetFaxShell64.dll [2015-03-10] (Samsung Electronics Co., Ltd.)
ContextMenuHandlers1: [!NetFax7] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\Windows\system32\spool\drivers\x64\3\NetFaxShell64.dll [2015-03-10] (Samsung Electronics Co., Ltd.)
ContextMenuHandlers1-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers1-x32: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt_20160518_14_23_17.dll [2015-07-07] (Cyberlink)
ContextMenuHandlers1-x32-x32: [Cover Designer] -> {73FCA462-9BD5-4065-A73F-A8E5F6904EF7} => C:\Program Files (x86)\Nero\Nero 9\Nero CoverDesigner\CoverEdExtension.dll [2009-06-16] (Nero AG)
ContextMenuHandlers1-x32-x32: [tosBtShllExt] -> {6BEF3D0B-53F0-4b0d-B91C-C19ED3D4C9D1} => C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtShell.dll [2009-06-18] (TOSHIBA)
ContextMenuHandlers2: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt_20160518_14_23_17.dll [2015-07-07] (Cyberlink)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers4-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers4-x32: [tosBtShllExt] -> {6BEF3D0B-53F0-4b0d-B91C-C19ED3D4C9D1} => C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtShell.dll [2009-06-18] (TOSHIBA)
ContextMenuHandlers5: [00nView] -> {1E9B04FB-F9E5-4718-997B-B8DA88302A48} => C:\Program Files\NVIDIA Corporation\nview\nvshell.dll [2015-10-13] ()
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2016-11-14] (NVIDIA Corporation)
ContextMenuHandlers6-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers6-x32: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers1_S-1-5-21-2773882716-4014048892-2402612297-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers1_S-1-5-21-2773882716-4014048892-2402612297-1001: [Resilio Sync 2.4.4] -> {581FFA00-FC33-0004-0402-95003A5CDE89} => C:\Users\*****\AppData\Roaming\Resilio Sync\ShellExtensionPath64_2DC.dll [2016-12-13] ()
ContextMenuHandlers4_S-1-5-21-2773882716-4014048892-2402612297-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers4_S-1-5-21-2773882716-4014048892-2402612297-1001: [Resilio Sync 2.4.4] -> {581FFA00-FC33-0004-0402-95003A5CDE89} => C:\Users\*****\AppData\Roaming\Resilio Sync\ShellExtensionPath64_2DC.dll [2016-12-13] ()
ContextMenuHandlers5_S-1-5-21-2773882716-4014048892-2402612297-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {07917191-5203-4E57-B78D-75C260D290AD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-05-08] (Adobe Systems Incorporated)
Task: {09D1C2A0-E828-4B6B-A376-B55CB2DF1E64} - System32\Tasks\{F64994A0-D0D8-40B9-B88C-4220910DFA19} => C:\Users\*****\Music\Pictures\FestZirndorf21.07.04\Desktop\Sun ODF Plugin for Microsoft Office 3.2 (en-US) Installation Files\redist\vcredist_x64.exe
Task: {0A07F728-F252-4330-AACD-43CCD155BFA5} - System32\Tasks\{71469CF0-1309-4E0B-846E-639C91217AA2} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {0EBE5864-6337-428A-8D11-6545BA3D5B74} - System32\Tasks\{53C191A9-0EF9-4481-9CD8-7B9DC9BA99C5} => C:\Fujitsu\Images\Nero Image Burning\Nero Image Burning.exe [2009-05-08] (Nero AG)
Task: {0F6CBF46-2467-41C1-863A-1CB207FE0EC9} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {13BF5DF5-FEF3-42A1-824B-2A6144D5AA84} - System32\Tasks\{190DD93C-CD71-4176-B76A-603815CC13EF} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {15727D08-5A15-4541-BB8B-ECC98AC0F252} - System32\Tasks\{75DA7499-212F-4491-B48E-7A00C5452BC2} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {177A589C-5442-4173-A39E-B51BC998BDC1} - System32\Tasks\{7C8F4609-5A05-4C18-ADF1-2252DB8C6F29} => C:\Program Files (x86)\A1 Dashboard\Dashboard.exe [2010-09-16] (mquadr.at software engineering and consulting GmbH, web: www.mquadr.at, mail: office@mquadr.at)
Task: {228107D1-99A1-45C1-8DC9-C65D9D88BD15} - System32\Tasks\{28586B28-6207-4D19-8A49-A1A88D350FD6} => C:\Users\*****\Music\Pictures\FestZirndorf21.07.04\Desktop\Sun ODF Plugin for Microsoft Office 3.2 (en-US) Installation Files\redist\vcredist_x64.exe
Task: {2C172ABB-4AF6-4063-80A7-02F814D79469} - System32\Tasks\{01B970CA-E281-4CDF-90D2-301862A1542B} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {38B62D7A-EACD-4C94-83F1-8E9F8D283427} - System32\Tasks\{7B2D1991-9D94-431A-AC01-8B7A56FC602F} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {3B61D1F8-1D29-4AB2-9841-79354413F814} - System32\Tasks\{82C82CBD-934A-4BBF-9CD1-DB8E09BD9864} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {474D17E3-4FF7-47B8-A215-682B867D7947} - System32\Tasks\{8342F5A8-C651-4135-952E-2497FBC194C1} => C:\Windows\system32\pcalua.exe -a "C:\Users\*****\Downloads\odp-3.2-bin-windows-en-US(4).exe" -d "C:\Users\*****\Downloads"
Task: {491D1642-1B66-45D2-BF3C-F7C24DB5A309} - System32\Tasks\{E8C4DF28-D342-4564-B10D-F904CF36E3B6} => C:\ProgramData\Adobe\Setup\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}\setup.exe [2015-03-17] (Adobe Systems Incorporated) <==== ACHTUNG
Task: {4AED4E4C-71D5-4928-8EB4-9A32FBF5C1DB} - System32\Tasks\{63DD856D-912C-4E4F-9A23-48828E660F40} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {4C93D82E-942A-4673-93A5-E7EC930576E5} - System32\Tasks\{88AEAA87-8DD4-4B3B-BA96-129AA319623D} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {50FE6ADB-9486-45A6-B9C2-C647241F6C95} - System32\Tasks\{B0FCD2C5-C961-4182-A92A-BCF8299EC70D} => C:\Windows\system32\pcalua.exe -a "C:\Users\*****\Downloads\Syncronizer_Setup.exe" -d "C:\Users\*****\Downloads"
Task: {549E23E9-9872-42C7-B159-F8AC6C8BE694} - System32\Tasks\{AE064593-DF2B-4937-B358-D896CD477CDF} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {596686D1-3DB1-4470-917C-2C39A812A80C} - System32\Tasks\{BCA61F8D-5153-4DC1-8826-DE6D9AB32828} => C:\Users\*****\Music\Pictures\FestZirndorf21.07.04\Desktop\Sun ODF Plugin for Microsoft Office 3.2 (en-US) Installation Files\redist\vcredist_x64.exe
Task: {5BC5D688-5C10-41A6-8CF6-8FDB60331C50} - System32\Tasks\{11AE8B4F-1776-4145-AA55-ED0ED607C212} => C:\Windows\system32\pcalua.exe -a "C:\Users\*****\Downloads\odp-3.2-bin-windows-en-US(2).exe" -d "C:\Users\*****\Downloads"
Task: {6AFE2FE1-ACC9-4899-AEBA-B413EA8BEC72} - System32\Tasks\{1AB99C80-C888-4664-939B-995B1997B178} => C:\Fujitsu\Images\Nero Image Burning\Nero Image Burning.exe [2009-05-08] (Nero AG)
Task: {6C887AC9-E162-4AE4-93DC-E3AFA3631EE4} - System32\Tasks\{DAEE4238-DD2E-4621-AA65-89840F00BDAA} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {715922D0-D730-4A08-9043-C1D721CBA776} - System32\Tasks\{AF97BA7F-1118-4901-A1AB-2AB741F96531} => C:\Windows\system32\pcalua.exe -a "C:\Users\*****\Downloads\Shockwave_Installer_Slim.exe"
Task: {7216CC9B-88FB-4E92-B9B0-E28B3AA229F5} - System32\Tasks\Fujitsu\DeskUpdate => C:\Program Files (x86)\Fujitsu\DeskUpdate\ducmd.exe
Task: {77539094-7848-4AEB-BFEF-DF9799DB889D} - System32\Tasks\{F313404B-D3D3-4091-B4C5-7F0D239A7456} => C:\Program Files (x86)\Kodak\Kodak EasyShare software\bin\EasyShare.exe [2003-08-25] (Eastman Kodak Company)
Task: {778546B8-1E4D-4AE7-ADDF-A6DBECE40AFF} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated)
Task: {7C6883FA-D3A7-4B29-B854-2F66FB274C1A} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated)
Task: {7C765003-9A9E-4BB4-BABF-B8AA08905730} - System32\Tasks\{69CDDBD5-CB8B-4120-BFF2-519F2EDE7525} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {824B0E4C-105C-4372-9E3E-414EE7D0EE7F} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2773882716-4014048892-2402612297-1001UA => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-01-12] (Dropbox, Inc.)
Task: {848796EB-C24B-4C1A-9797-C7CC9CF37CE0} - System32\Tasks\{912E9858-EA36-4154-AE40-9514681F3710} => C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
Task: {84AE98A1-B5DA-4C9D-A758-703C996C40BE} - System32\Tasks\Google Software Updater => C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-21] (Google) <==== ACHTUNG
Task: {89311ED2-8559-46A0-BE41-95B76C22B700} - System32\Tasks\{FFE6F069-F837-440B-A99C-85AC803741C6} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {8AF195AF-9245-4A80-A7FE-41E1EF200126} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-01-29] (Oracle Corporation)
Task: {906FD91B-9DC5-43E5-8591-38C55808C06A} - System32\Tasks\{8B2794BD-5E5C-49AB-8DD8-22E14E39F74C} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {919F1766-48FB-4A8F-86AF-2E80A1453514} - System32\Tasks\{656F46CA-071A-4829-B8B1-DE64828727FC} => C:\Users\*****\Music\Pictures\FestZirndorf21.07.04\Desktop\Sun ODF Plugin for Microsoft Office 3.2 (en-US) Installation Files\redist\vcredist_x64.exe
Task: {973AE359-DA26-459E-A405-FB1FCC01AABE} - System32\Tasks\{849704BD-7FFD-48AF-9192-262B0B4C49CD} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {97F2303C-E709-4F54-BD93-F86F1C1A5111} - System32\Tasks\{086657B8-58AE-4FE0-A412-FB86A1D8E28D} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {9E420050-3954-40FD-A71B-6FBA7900E0C2} - System32\Tasks\{3B7E1157-71A2-4406-94F2-28C848971F64} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {9F2C2ECE-F9CF-40B5-A242-5B53F9B37787} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2017-04-11] (Bitdefender)
Task: {A63EE592-0933-47E2-BFFD-D9FBAC4E9521} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2773882716-4014048892-2402612297-1001Core => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-01-12] (Dropbox, Inc.)
Task: {AADC8F9F-494F-42B5-9BF8-B91CCBEB490E} - System32\Tasks\{C809FDBA-387B-4726-B436-8EE5C8429442} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {AFAC7C00-4B97-43B6-A25E-6E736B46E87F} - System32\Tasks\{7BB894D2-93DB-4384-94B8-D17D6A15218E} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {AFE0E316-6FC0-4669-95EE-D585B698B116} - System32\Tasks\{5CB6381B-2736-47E8-9E13-69255A748754} => C:\Windows\system32\pcalua.exe -a "C:\Users\*****\Downloads\odp-3.2-bin-windows-en-US.exe" -d "C:\Users\*****\Downloads"
Task: {AFF94710-4A26-4DE5-AB46-13FD779885F0} - System32\Tasks\{E6135D56-98E0-4950-BD68-621200FAA9C1} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {B0756905-07D5-4CDB-ABDA-2341E54B421F} - System32\Tasks\{6C672292-7566-4001-94A8-87EA1E20A0A4} => C:\Program Files (x86)\Canon\CameraWindow\CameraWindowLauncher\CameraLauncher.exe
Task: {B33ADB70-4FFB-4B57-9395-C3D36750D9B1} - System32\Tasks\{E200163A-CC16-4369-8B29-6AB5AE5BD671} => C:\Program Files (x86)\Canon\CameraWindow\CameraWindowLauncher\CameraLauncher.exe
Task: {B5F4F768-2528-4381-8A6B-A52EC95003D6} - System32\Tasks\{30AD0698-632D-4DA4-96A3-0812516F584B} => C:\Program Files (x86)\Canon\CameraWindow\CameraWindowLauncher\CameraLauncher.exe
Task: {B5F99541-4B6D-4894-BE96-E858D94A8496} - System32\Tasks\{530AEF6E-547D-4771-BC09-6A54FB522747} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {B7ACC88A-02CF-4AD2-BB07-72019D7FB6A8} - System32\Tasks\{8BD694D5-7DC1-4EEA-9EED-47F31AAFA047} => C:\Windows\system32\pcalua.exe -a "C:\Users\*****\Downloads\odp-3.2-bin-windows-en-US(1).exe" -d "C:\Users\*****\Downloads"
Task: {BF6F9FCC-99B6-4FF2-9706-C213C8E9677D} - System32\Tasks\{C10FB94B-7A41-4DC3-9BF4-CEE909DAE4CA} => C:\Windows\system32\pcalua.exe -a "C:\Users\*****\Downloads\Creative_LabsCreativeJukeboxZenXtra30GB.exe" -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {C5B334BB-B1C2-495B-990C-A908BB7F5715} - System32\Tasks\{7707CD5D-4F20-4226-B722-80670B37C652} => C:\Windows\system32\pcalua.exe -a D:\IrfanView3_51\iview351g.exe -d D:\IrfanView3_51
Task: {C9747F91-DCF2-44BF-9A7C-3F38848393B2} - System32\Tasks\{98CE380E-8B3B-4181-BA07-FA7DFC4DD957} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {CAFEDDF2-2767-4A6C-A65B-7F4D1B167A62} - System32\Tasks\{CE61994F-0071-49D8-8C54-3DA91BFADB74} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {CDBF0339-2E8F-45A5-86D9-3EC8B25C254F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {D20E548D-0D7E-4862-84DA-AB3622D3D373} - System32\Tasks\{EB01B7B0-A176-47C1-9946-BE20598D22D4} => C:\Windows\system32\pcalua.exe -a "C:\Users\*****\AppData\Local\Temp\park-v1.7.8\driver deployment utility\setup.exe" -d "C:\Users\*****\AppData\Local\Temp\park-v1.7.8\driver deployment utility" <==== ACHTUNG
Task: {D90596AE-0AA0-4857-88E7-964321EDF09E} - System32\Tasks\{A9E84934-2890-4CAD-83AD-2E33545CBD84} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {D97495C2-A770-4197-A016-159DF472A7C2} - System32\Tasks\{79E68EE7-CBD8-44F7-8BDE-702B748B26CB} => C:\Windows\system32\pcalua.exe -a "C:\Users\*****\Music\Pictures\FestZirndorf21.07.04\Desktop\Sun ODF Plugin for Microsoft Office 3.2 (en-US) Installation Files\redist\vcredist_x64.exe" -d "C:\Users\*****\Music\Pictures\FestZirndorf21.07.04\Desktop\Sun ODF Plugin for Microsoft Office 3.2 (en-US) Installation Files (Der Dateneintrag hat 8 mehr Zeichen).
Task: {E7A9C417-898D-4776-9A11-6C6FFF376953} - System32\Tasks\{9207B18E-33BC-4497-A223-1F0A9F63BDD5} => C:\Users\*****\Music\Pictures\FestZirndorf21.07.04\Desktop\Sun ODF Plugin for Microsoft Office 3.2 (en-US) Installation Files\redist\vcredist_x64.exe
Task: {EF5D2B52-3B23-4F05-9378-729FA2C33A5C} - System32\Tasks\{2B70CEB2-2EAF-475C-BE02-641307A5D4B3} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {EF774E5F-CEC6-49BB-8589-725DF7CFAF9B} - System32\Tasks\{82CEF4FD-27C4-4F29-A643-4B05D0B04A81} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {F31D3C93-8FB7-40C2-B388-8237B135B724} - System32\Tasks\{04A6BF12-5AA8-40FD-BC41-3A6AA8FC5139} => C:\Program Files (x86)\A1 Dashboard\Dashboard.exe [2010-09-16] (mquadr.at software engineering and consulting GmbH, web: www.mquadr.at, mail: office@mquadr.at)
Task: {F59245A2-19AD-4A09-A6E5-D228F675A6F8} - System32\Tasks\{8B525D02-2C6B-4318-9D4F-71E797E3998F} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {F6ED342A-3AC1-4048-8A78-52D9283B8CBD} - System32\Tasks\{0DB09C4E-879B-404A-A8B8-3A5A12C99A14} => C:\Windows\system32\pcalua.exe -a "C:\Users\*****\Downloads\jxpiinstall(2).exe" -d "C:\Users\*****\Downloads"
Task: {F72B3DE1-06CD-4802-843C-74C15575C2E8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {F7FCF5DE-7B12-4071-AAE3-366AC2C4DA32} - System32\Tasks\{E059F358-EAF1-4BC5-A631-48CBB94DCAE1} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {F8A460E8-7AA0-4EEE-84BC-FC84DD39F28C} - System32\Tasks\{CC24097B-A0DB-4548-B318-D61EBD424CF9} => C:\Users\*****\Music\Pictures\FestZirndorf21.07.04\Desktop\Sun ODF Plugin for Microsoft Office 3.2 (en-US) Installation Files\redist\vcredist_x86.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2773882716-4014048892-2402612297-1001Core.job => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2773882716-4014048892-2402612297-1001UA.job => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\Google Software Updater.job => C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe <==== ACHTUNG

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


Shortcut: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Meine Websites auf MSN\target.lnk -> hxxp://www.msnusers.co

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2017-09-14 08:54 - 2017-09-14 08:54 - 000111832 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\bdmetrics.dll
2017-05-08 08:28 - 2017-05-08 08:29 - 001008448 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_02451_002\ashttpbr.mdl
2017-05-08 08:28 - 2017-05-08 08:29 - 000541952 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_02451_002\ashttpdsp.mdl
2017-05-08 08:28 - 2017-05-08 08:29 - 003243920 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_02451_002\ashttpph.mdl
2017-05-08 08:28 - 2017-05-08 08:29 - 001544568 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_02451_002\ashttprbl.mdl
2013-10-27 11:21 - 2016-08-16 17:15 - 002708936 _____ () C:\Windows\system32\nvwmi64.exe
2013-05-24 01:54 - 2016-11-14 12:15 - 000135224 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-04-09 05:27 - 2015-04-09 05:27 - 000022528 _____ () C:\Windows\System32\ssm1mlm.dll
2011-04-20 10:26 - 2009-11-17 09:44 - 000040960 _____ () C:\Program Files (x86)\Common Files\DeviceHelper\DeviceManager.exe
2003-02-04 07:22 - 2003-02-04 07:22 - 000181312 _____ () C:\Windows\SysWOW64\ScsiAccess.EXE
2010-11-23 20:45 - 2010-07-16 09:49 - 000252784 _____ () C:\Program Files (x86)\Mobile Partner Manager\AssistantServices.exe
2009-07-21 19:31 - 2009-07-21 19:31 - 000062312 _____ () C:\Program Files\Fujitsu\WirelessSelector\WSUService.exe
2017-11-26 13:18 - 2017-11-01 08:55 - 002299344 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2016-09-18 20:54 - 2016-09-18 20:54 - 000532480 _____ () C:\ProgramData\Resilio Sync\ShellExtensionOverlay64_29A.dll
2016-12-13 18:22 - 2016-12-13 18:22 - 001222656 _____ () C:\Users\*****\AppData\Roaming\Resilio Sync\ShellExtensionPath64_2DC.dll
2017-11-16 10:10 - 2017-11-13 11:26 - 000725312 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\dropbox_watchdog.dll
2017-11-16 10:10 - 2017-11-13 11:26 - 002075456 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\dropbox_crashpad.dll
2017-03-25 00:11 - 2017-11-13 11:26 - 000100296 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\_ctypes.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000018888 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\select.pyd
2017-03-25 00:11 - 2017-11-13 11:28 - 000020800 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000035792 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000694224 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\unicodedata.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000021848 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000130512 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 001856848 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000022864 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd
2017-11-16 10:10 - 2017-11-13 11:26 - 000145864 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\pyexpat.pyd
2017-11-16 10:10 - 2017-11-13 11:26 - 000116688 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\pywintypes27.dll
2017-03-25 00:11 - 2017-11-13 11:26 - 000105928 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32api.pyd
2017-03-25 00:11 - 2017-11-13 11:29 - 000022864 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winffi.crt.compiled._winffi_crt.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000040248 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\fastpath.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000024528 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32event.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000043472 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32process.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000062784 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd
2017-11-16 10:10 - 2017-11-13 11:26 - 000392656 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\pythoncom27.dll
2017-11-16 10:10 - 2017-11-13 11:26 - 000020936 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\mmapfile.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000124880 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32file.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000116176 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32security.pyd
2017-03-25 00:11 - 2017-11-13 11:28 - 000392512 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd
2017-03-25 00:11 - 2017-11-13 11:29 - 000026456 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winffi.kernel32.compiled._winffi_kernel32.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000024016 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32clipboard.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000175560 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32gui.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000030160 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32pipe.pyd
2017-09-21 21:09 - 2017-11-13 11:26 - 000026056 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32job.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000048592 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32service.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000057808 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32evtlog.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000021824 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd
2017-09-09 10:10 - 2017-11-13 11:29 - 000023368 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winshell.compiled._winshell.pyd
2017-05-18 09:09 - 2017-11-13 11:29 - 000066392 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winenumhandles.compiled._WinEnumHandles.pyd
2017-03-25 00:11 - 2017-11-13 11:29 - 000025432 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000022856 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\crashpad.compiled._Crashpad.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 001796920 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000084424 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\sip.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 001956152 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 003859264 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000155464 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000521024 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000050496 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineCore.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000042304 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000131384 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000218944 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000204096 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000060880 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32print.pyd
2017-03-25 00:11 - 2017-11-13 11:29 - 000054608 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winrpcserver.compiled._RPCServer.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000024016 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32profile.pyd
2017-03-25 00:11 - 2017-11-13 11:29 - 000022864 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winffi.user32.compiled._winffi_user32.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000028616 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32ts.pyd
2017-03-25 00:11 - 2017-11-13 11:29 - 000022360 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
2017-03-25 00:11 - 2017-11-13 11:29 - 000021848 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winffi.winerror.compiled._winffi_winerror.pyd
2017-03-25 00:11 - 2017-11-13 11:29 - 000022360 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winffi.wininet.compiled._winffi_wininet.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000027488 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000349128 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winxpgui.pyd
2017-03-25 00:11 - 2017-11-13 11:29 - 000023896 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000025424 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd
2017-11-16 10:10 - 2017-11-13 11:26 - 000036296 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\librsync.dll
2017-11-16 10:10 - 2017-11-13 11:28 - 000181056 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL
2017-03-25 00:11 - 2017-11-13 11:29 - 000030536 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\wind3d11.compiled._wind3d11.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000024368 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\libEGL.DLL
2017-11-16 10:10 - 2017-11-13 11:28 - 001638200 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2017-03-25 00:11 - 2017-11-13 11:29 - 000026456 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winffi.winhttp.compiled._winffi_winhttp.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000545080 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000359224 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000038208 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngine.pyd
2015-06-07 21:57 - 2015-05-23 02:48 - 000011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2003-08-25 15:28 - 2003-08-25 15:28 - 000229517 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\SpiffyExt.dll
2003-08-25 15:51 - 2003-08-25 15:51 - 000954513 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\VistaControls.dll
2003-07-23 02:01 - 2003-07-23 02:01 - 000536721 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\VistaCDBackup.dll
2003-08-25 15:51 - 2003-08-25 15:51 - 000061579 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\KPCDInterface.dll
2003-07-23 01:03 - 2003-07-23 01:03 - 000036864 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\LocAcqMod.dll
2003-08-25 15:44 - 2003-08-25 15:44 - 000110724 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\kpri40.dll
2003-08-25 15:58 - 2003-08-25 15:58 - 000352404 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\VistaPrintOnLine.DLL
2003-08-25 15:49 - 2003-08-25 15:49 - 000295058 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\VPrintOnlineHelper40.dll
2003-08-25 15:57 - 2003-08-25 15:57 - 001122442 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\VPrintOnline.dll
2003-08-25 15:53 - 2003-08-25 15:53 - 000389262 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\VistaEmail.DLL
2003-08-25 15:23 - 2003-08-25 15:23 - 000356484 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\keml40.dll
2003-07-23 02:27 - 2003-07-23 02:27 - 000139264 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\cameratodos.syx
2003-07-23 01:22 - 2003-07-23 01:22 - 000028672 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\LocCameraToDosCamBack.dll
2003-07-23 02:33 - 2003-07-23 02:33 - 000081920 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\PCDLaunchSysX.syx
2003-07-23 02:19 - 2003-07-23 02:19 - 000270489 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\VistacameraUploadSysx.syx
2003-07-23 01:28 - 2003-07-23 01:28 - 000024576 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\LocVistaCameraUploadCamBack.dll
2016-09-18 20:54 - 2016-09-18 20:54 - 000464384 _____ () C:\ProgramData\Resilio Sync\ShellExtensionOverlay86_29A.dll
2003-07-23 02:23 - 2003-07-23 02:23 - 000278665 _____ () C:\Program Files (x86)\Kodak\Kodak Easyshare Software\bin\Escom.dll
2017-07-17 18:30 - 2017-07-17 18:30 - 000863744 _____ () C:\Windows\mod_frst.exe

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\*****\flashplayer21_xa_install.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\antitwin_setup.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\bdupdsvrptch(1).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\bdupdsvrptch.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\bitdefender_windows_0cd6b341-f8d8-4f1d-8137-d30a1605e035.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\bitdefender_windows_e0f57a1e-b8e5-4662-96e1-5f1ec114a09e.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\connectivity_issues(1).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\connectivity_issues(2).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\connectivity_issues.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\Firefox_Setup_48.0.1.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\install_flash_player(1).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\jxpiinstall(1).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\jxpiinstall(2).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\m4a-to-mp3-converter.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\odp-3.2-bin-windows-en-US - CHIP-Installer.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\odp-3.2-bin-windows-en-US(1).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\odp-3.2-bin-windows-en-US(2).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\odp-3.2-bin-windows-en-US(3).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\odp-3.2-bin-windows-en-US(4).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\odp-3.2-bin-windows-en-US.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\Resilio-Sync_x64(1).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\Resilio-Sync_x64.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\The_New_Bitdefender_SPT.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\vlc-2.2.4-win64.exe:BDU [0]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2017-12-04 20:44 - 000000037 _____ C:\Windows\system32\Drivers\etc\hosts

0.0.0.1	mssplus.mcafee.com

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\*****\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\Services: AeLookupSvc => 3
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Image Transfer Utility.lnk => C:\Windows\pss\Image Transfer Utility.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupreg: Apoint => C:\Program Files\Apoint2K\Apoint.exe
MSCONFIG\startupreg: CDAServer => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
MSCONFIG\startupreg: CLMLServer_For_P2G8 => "C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
MSCONFIG\startupreg: CLVirtualDrive => "C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R
MSCONFIG\startupreg: DeskUpdateNotifier => "C:\Program Files (x86)\Fujitsu\DeskUpdate\DeskUpdateNotifier.exe"
MSCONFIG\startupreg: FDM7 => C:\Program Files\Fujitsu\FDM7\FdmDaemon.exe
MSCONFIG\startupreg: FUJ02B1_Apps => "C:\Program Files (x86)\Fujitsu\FUJ02B1\CheckBatteryPack.exe" -ViewTarget -langid 0x411
MSCONFIG\startupreg: Kernel and Hardware Abstraction Layer => KHALMNPR.EXE
MSCONFIG\startupreg: LoadBtnHnd => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe
MSCONFIG\startupreg: LoadFujitsuQuickTouch => C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe
MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
MSCONFIG\startupreg: nwiz => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe /installquiet
MSCONFIG\startupreg: PSUTility => C:\Program Files\Fujitsu\PSUtility\TrayManager.exe
MSCONFIG\startupreg: SSUtility => C:\Program Files\Fujitsu\SSUtility\FJSSDMN.exe
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SynTPEnh => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{5BF9778A-3006-43C8-9EB3-B92359615432}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\wlcsdk.exe
FirewallRules: [{B5C8B731-9E2C-407E-A3AE-72DA9D8D0850}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{3883C125-2417-4B9E-B211-36C33DB0776A}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [TCP Query User{53F2EDF7-268F-4587-8554-DC62B3234F48}C:\program files (x86)\kodak\kodak software updater\7288971\program\backweb-7288971.exe] => (Allow) C:\program files (x86)\kodak\kodak software updater\7288971\program\backweb-7288971.exe
FirewallRules: [UDP Query User{4AD1B1B0-14F6-4E46-8D25-14058B8D868F}C:\program files (x86)\kodak\kodak software updater\7288971\program\backweb-7288971.exe] => (Allow) C:\program files (x86)\kodak\kodak software updater\7288971\program\backweb-7288971.exe
FirewallRules: [TCP Query User{5F3498C2-D940-47E7-9E40-A7E2DBE0358B}C:\program files (x86)\kodak\kodak software updater\7288971\program\backweb-7288971.exe] => (Allow) C:\program files (x86)\kodak\kodak software updater\7288971\program\backweb-7288971.exe
FirewallRules: [UDP Query User{2ED8C2F9-93AA-4EBB-A7B0-D0FCD060AB8F}C:\program files (x86)\kodak\kodak software updater\7288971\program\backweb-7288971.exe] => (Allow) C:\program files (x86)\kodak\kodak software updater\7288971\program\backweb-7288971.exe
FirewallRules: [{90527EDA-AF7C-4653-B49F-8B373B5B5C8D}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{F0D8473E-D4CF-45EB-9DE4-F3A4AEADECB0}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{C4B03820-B191-4570-BAB1-5224B7D68080}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{2293E7A0-A95F-4A10-B01D-DD0CD4C9D859}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{3763F255-167E-490F-8F7F-3A8C81AC8CBC}] => (Allow) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{52F88968-BE82-4D76-A1AE-4B944E4CF012}] => (Allow) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{88C3466D-90A5-4AA4-952A-262ADC74B11B}C:\users\*****\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\*****\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{2606A728-1FB0-4A34-9F0B-09227F10AD85}C:\users\*****\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\*****\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{E3F33546-C39B-4A46-BD14-613CBA205C09}C:\program files (x86)\calibre2\calibre.exe] => (Allow) C:\program files (x86)\calibre2\calibre.exe
FirewallRules: [UDP Query User{DCF29C39-CA25-442E-AA4D-4BD3B04A5A0A}C:\program files (x86)\calibre2\calibre.exe] => (Allow) C:\program files (x86)\calibre2\calibre.exe
FirewallRules: [{3804ADB9-6301-48F4-AEC2-7F0870A6E67E}] => (Allow) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer.exe
FirewallRules: [{FBA8B31C-5CE7-418C-AF13-298F5DA1FEB6}] => (Allow) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer.exe
FirewallRules: [{04E7121C-FF06-46D0-8071-056C3E23CD94}] => (Allow) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
FirewallRules: [{2DFA7589-CE9C-4005-8746-7EE902CBA7AA}] => (Allow) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
FirewallRules: [TCP Query User{776CB37A-43A1-4347-8EBB-5CF04D1BDD34}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{8F70BB71-916B-46AC-9AC5-6B2C0EF03FC0}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{77DF3854-B869-458C-AD40-07FE9EF60725}] => (Allow) C:\Windows\twain_32\Samsung\SCX3400\SCNSearch\USDAgent.exe
FirewallRules: [{A0339C7C-EBC8-4CFC-880A-47C57F7732B3}] => (Allow) C:\Windows\twain_32\Samsung\SCX3400\SCNSearch\USDAgent.exe
FirewallRules: [{61A0892A-BE02-4A5B-A0C0-57D17F9F7025}] => (Allow) C:\Program Files (x86)\Samsung\Network PC Fax\drv\NetFaxMon64.exe
FirewallRules: [{1980A69C-04EA-45CE-A576-5D89849CF159}] => (Allow) C:\Program Files (x86)\Samsung\Network PC Fax\drv\NetFaxMon.exe
FirewallRules: [{63BD7AC1-5342-4701-B08F-7D9C43413382}] => (Allow) C:\Windows\system32\spool\drivers\x64\3\NetFaxMon64.exe
FirewallRules: [{32FD7549-E9FE-46F7-A7CA-3DDC4CC793FA}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDC.exe
FirewallRules: [{CC78F39B-D169-4B86-B8C0-F6F83395A31D}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDC.exe
FirewallRules: [{3388EDB2-3338-4BFA-AA52-B10ED46286B1}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
FirewallRules: [{C438A0B4-DC73-4E43-A3F4-1ACBF23F5485}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
FirewallRules: [{64F241C0-B40B-4DA3-9AC3-03076AEACA19}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\IDS.Application.exe
FirewallRules: [{43F337A4-3903-42FB-BAEE-985CBB501622}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\IDS.Application.exe
FirewallRules: [{80909DDB-A277-4C4F-9C2C-90BA110A63C8}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\OrderSupplies.exe
FirewallRules: [{D0A31146-2461-457A-AC06-A0024ED457D0}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\OrderSupplies.exe
FirewallRules: [{ED69C908-EA6F-4F9F-AF6B-0C30EDD948B1}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\IDSAlert.exe
FirewallRules: [{714F01DF-D630-4BC5-B3B1-ED7FCC34B62A}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\IDSAlert.exe
FirewallRules: [{345EC3BC-7F59-4DB0-927E-B41D01556950}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\uninstall.exe
FirewallRules: [{30EC23EB-445A-4E4E-9E46-05EABED8CDD5}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\uninstall.exe
FirewallRules: [{0A920FBB-E451-407C-9BC9-20BBC75E68A2}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\CDAS2PC.exe
FirewallRules: [{B30C5670-000D-4E4C-8C9B-6B36B23B068D}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\CDAS2PC.exe
FirewallRules: [{313DDBEF-C9D5-4F51-8F3C-766EB69ED034}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\ScanProcess.exe
FirewallRules: [{0786B060-16E0-4F41-9313-D886BF76F0A4}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\ScanProcess.exe
FirewallRules: [{A68D50E3-4E39-4E8C-AA05-77D5178EF131}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\Scan2PCNotify.exe
FirewallRules: [{68220900-C513-4D1D-A91F-F1F903B57206}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\Scan2PCNotify.exe
FirewallRules: [{C0553F86-07DB-488F-A937-DE0C37A3A018}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{B7DD0B31-EFD4-4C54-A553-CA660928EF83}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{EEBCC923-E621-4D26-B3F1-4CD4E054AB06}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{18A99382-FC72-4272-8015-301530FC7EFC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{8360ADFF-A9A3-4603-B4AB-830CBF75B96F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{156166F4-1E29-4520-8E6E-97BC65B61426}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{77FFDAED-86E4-47E2-B71C-3C3ADDBAA2C8}C:\program files (x86)\samsung\easy printer manager\ids.application.exe] => (Block) C:\program files (x86)\samsung\easy printer manager\ids.application.exe
FirewallRules: [UDP Query User{E265EE1D-148E-47CE-A58A-7DA715B4980B}C:\program files (x86)\samsung\easy printer manager\ids.application.exe] => (Block) C:\program files (x86)\samsung\easy printer manager\ids.application.exe
FirewallRules: [{71796ADA-6F13-4511-9F66-D1448B4995B7}] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{7295BDDD-C98F-4BF4-90F4-A207E119A610}] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{0046C183-1A77-4467-B7AC-B9071526D89B}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{51BF0347-5CD0-4A8B-AB97-59CD546AD925}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F62012D1-5A28-4598-B0E1-CA1B5E6F8DE7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{B5917166-018B-472D-83B1-7845FB86B343}C:\program files (x86)\calibre2\calibre.exe] => (Block) C:\program files (x86)\calibre2\calibre.exe
FirewallRules: [UDP Query User{EC127856-819D-4E48-A2DC-E3D791E7652D}C:\program files (x86)\calibre2\calibre.exe] => (Block) C:\program files (x86)\calibre2\calibre.exe
FirewallRules: [{900312FD-5B26-41DE-8744-F8DE37E6250C}] => (Allow) C:\Users\*****\AppData\Roaming\Resilio Sync\Resilio Sync.exe
FirewallRules: [{59511564-A151-4671-8E08-55DFF6C18C4B}] => (Allow) C:\Users\*****\AppData\Roaming\Resilio Sync\Resilio Sync.exe
FirewallRules: [{E6ACFC6A-B517-4316-8AD0-1C71233808CF}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Wiederherstellungspunkte =========================

20-11-2017 23:20:58 Windows Update
25-11-2017 14:46:44 JRT Pre-Junkware Removal
28-11-2017 10:59:09 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: USB Bluetooth Driver (V2.1+EDR)
Description: USB Bluetooth Driver (V2.1+EDR)
Class Guid: {7240100f-6512-4548-8418-9ebb5c6a1a94}
Manufacturer: Toshiba
Service: tosrfusb
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/03/2017 05:48:50 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (NvStreamUserAgent restarted too many times in a short period. Aborting. [0]).

Error: (12/03/2017 11:31:34 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "D:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (12/02/2017 11:24:20 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "D:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (12/01/2017 08:53:57 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "D:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (11/30/2017 09:11:01 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "D:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (11/29/2017 10:26:08 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "D:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (11/28/2017 08:57:27 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "D:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (11/27/2017 09:11:46 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "D:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (11/26/2017 06:00:03 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "D:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (11/25/2017 06:00:04 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "D:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"


Systemfehler:
=============
Error: (12/04/2017 06:54:34 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst LanmanServer erreicht.

Error: (12/04/2017 10:47:55 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535

Error: (12/04/2017 10:47:55 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140993535

Error: (12/04/2017 10:47:55 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535

Error: (12/04/2017 10:47:55 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140993535

Error: (12/04/2017 10:47:55 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: Die Peer Name Resolution-Protokoll-Cloud wurde nicht gestartet. Fehler bei Standardidentität. Fehlercode: 0x80630801.

Error: (12/04/2017 10:47:55 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: Die Peer Name Resolution-Protokoll-Cloud wurde nicht gestartet. Fehler bei Standardidentität. Fehlercode: 0x80630801.

Error: (12/04/2017 10:47:44 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140993535

Error: (12/04/2017 10:47:44 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535

Error: (12/04/2017 10:47:44 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: Die Peer Name Resolution-Protokoll-Cloud wurde nicht gestartet. Fehler bei Standardidentität. Fehlercode: 0x80630801.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7 CPU Q 820 @ 1.73GHz
Prozentuale Nutzung des RAM: 49%
Installierter physikalischer RAM: 8123.44 MB
Verfügbarer physikalischer RAM: 4125.2 MB
Summe virtueller Speicher: 20305.62 MB
Verfügbarer virtueller Speicher: 15949.16 MB

==================== Laufwerke ================================

Drive c: (System) (Fixed) (Total:463.75 GB) (Free:61.77 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 27987793)
Partition 1: (Active) - (Size=2 GB) - (Type=27)
Partition 2: (Not Active) - (Size=463.8 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

Hi, ich hoffe, ich hab alles richtig gemacht!? Tr

cosinus · 04.12.2017, 21:14

CODE-Tags sind nicht richtig gesetzt, korrigiere das bitte!
Außerdem fehlen alle anderen Logs.

trude · 05.12.2017, 10:22

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 30-11-2017
durchgeführt von ***** (Administrator) auf *****-PC (04-12-2017 20:46:15)
Gestartet von C:\Users\*****\Downloads
Geladene Profile: ***** & UpdatusUser (Verfügbare Profile: ***** & UpdatusUser)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\vsserv.exe
(AuthenTec, Inc.) C:\Program Files\Fingerprint Sensor\ATService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\System32\nvwmi64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\System32\nvwmi64.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe
() C:\Program Files (x86)\Common Files\DeviceHelper\DeviceManager.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(O2Micro International) C:\Windows\SysWOW64\o2flash.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\PSUtility\PSUService.exe
(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe
() C:\Windows\SysWOW64\ScsiAccess.EXE
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
(Fujitsu Technology Solutions) C:\Program Files (x86)\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McTkSchedulerService.exe
() C:\Program Files (x86)\Mobile Partner Manager\AssistantServices.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\updatesrv.exe
(CSR, plc) C:\Program Files\CSR\Bluetooth Feature Pack 5.0\VFPRadioSupportService.exe
() C:\Program Files\Fujitsu\WirelessSelector\WSUService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.SmartMonitor.exe
(CSR, plc) C:\Program Files\CSR\Bluetooth Feature Pack 5.0\CSRBthFtpServer.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\PSUtility\TrayManager.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\bdagent.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxTray64.exe
(Dropbox, Inc.) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Dropbox, Inc.) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Dropbox, Inc.) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\Kodak EasyShare software\bin\EasyShare.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [CSRFTP] => C:\Program Files\CSR\Bluetooth Feature Pack 5.0\CSRBthFtpServer.exe [463216 2009-10-12] (CSR, plc)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [PSUTility] => C:\Program Files\Fujitsu\PSUtility\TrayManager.exe [188264 2009-07-30] (FUJITSU LIMITED)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2017\bdagent.exe [322312 2017-11-14] (Bitdefender)
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\Run: [Adobe Reader Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe [886768 2017-11-04] (Adobe Systems Incorporated)
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {01dec9f4-5a65-11e1-8872-00231445c1b4} - D:\AutoRun.exe
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {10420407-3172-11e1-b630-00231445c1b4} - D:\AutoRun.exe
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {317b2f4e-59a2-11e1-9f33-00231445c1b4} - D:\AutoRun.exe
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {57673dfa-be00-11e0-9d7c-00231445c1b4} - D:\AutoRun.exe
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {57673e16-be00-11e0-9d7c-00231445c1b4} - D:\AutoRun.exe
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {6aafc7b9-9892-11e2-abfb-00231445c1b4} - D:\AutoRun.exe
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {6ec8c0f9-6b2f-11e0-beb8-00231445c1b4} - D:\autorun.exe
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {e777e9c9-72c4-11e2-abab-00231445c1b4} - D:\AutoRun.exe
Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Network PC Fax.lnk [2015-05-06]
ShortcutTarget: Samsung Network PC Fax.lnk -> C:\Windows\System32\spool\drivers\x64\3\NetFaxTray64.exe (Samsung Electronics Co., Ltd.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup\LaunchCenter.lnk [2009-03-11]
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files (x86)\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup\LaunchCenter.lnk [2009-03-11]
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files (x86)\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions)
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2017-11-16]
ShortcutTarget: Dropbox.lnk -> C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup\LaunchCenter.lnk [2009-03-11]
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files (x86)\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions)
BootExecute: wsusnative64autocheck autochk * 

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: 0.0.0.1	mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{1A2A8147-FE8B-4889-80F7-4F9EFE2B2D82}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{FFED7905-18A6-421F-8705-531317AA3102}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-04-26] (Intel Security)
BHO: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2017\pmbxie.dll [2017-11-14] (Bitdefender)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.)
BHO-x32: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-04-26] (Intel Security)
BHO-x32: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2017\Antispam32\pmbxie.dll [2017-11-14] (Bitdefender)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)
Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2017\pmbxie.dll [2017-11-14] (Bitdefender)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.)
Toolbar: HKLM - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-04-26] (Intel Security)
Toolbar: HKLM-x32 - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2017\Antispam32\pmbxie.dll [2017-11-14] (Bitdefender)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)
Toolbar: HKLM-x32 - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-04-26] (Intel Security)
Toolbar: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: cxxowm5j.default-1478595552035-1511909166602
FF ProfilePath: C:\Users\*****\AppData\Roaming\TomTom\HOME\Profiles\vbaie3xl.default [2017-10-15]
FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\cxxowm5j.default-1478595552035-1511909166602 [2017-12-04]
FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\\bdwteff
FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender 2017\\bdwteff [2017-09-14]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext [2016-10-19] [Lagacy] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\\bdwteff
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext
FF HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\1vwla5d5.default\extensions\cliqz@cliqz.com => nicht gefunden
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_187.dll [2017-11-14] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_187.dll [2017-11-14] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [Keine Datei]
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\ZoomBrowser EX\Program\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-14] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-14] (NVIDIA Corporation)
FF Plugin-x32: @pack.google.com/Google Updater;version=14 -> C:\Program Files (x86)\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll [2011-09-12] (Google)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default [2017-11-30]
CHR Extension: (YouTube) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-04]
CHR Extension: (Google-Suche) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-04]
CHR Extension: (Avira Browserschutz) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-02-04]
CHR Extension: (Bitdefender Wallet) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\gannpgaobkkhmpomoijebaigcapoeebl [2017-11-25]
CHR Extension: (Iminent Toolbar) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcemhggbahmlmhgnbpbbdaklcojhbecn [2013-03-14] [UpdateUrl: hxxp://vz.iminent.com/vz/2FE796A5-06CC-48F6-8C8F-BDCC0ABB0D92/100/update.xml] <==== ACHTUNG
CHR Extension: (Iminent) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl [2017-11-25]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-11-25]
CHR Extension: (Google Mail) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-04]
CHR Extension: (Chrome Media Router) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-11-25]
CHR Profile: C:\Users\*****\AppData\Local\Google\Chrome\User Data\System Profile [2017-11-30]
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2090152 2017-09-14] (Bitdefender)
S2 DeskViewBasicService; C:\Program Files (x86)\Fujitsu\DeskViewBasic\DeskViewBasicService.exe [34816 2009-08-19] (Fujitsu Technology Solutions) [Datei ist nicht signiert]
R2 DeviceManager; C:\Program Files (x86)\Common Files\DeviceHelper\DeviceManager.exe [40960 2009-11-17] () [Datei ist nicht signiert]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-23] (NVIDIA Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.561\McCHSvc.exe [404368 2017-05-16] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-06-12] ()
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [50688 2012-02-08] (Hewlett-Packard) [Datei ist nicht signiert]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-05-23] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23006864 2015-05-23] (NVIDIA Corporation)
R2 NVWMI; C:\Windows\system32\nvwmi64.exe [2708936 2016-08-16] ()
R2 O2Flash; C:\Windows\SysWOW64\o2flash.exe [65536 2007-02-12] (O2Micro International) [Datei ist nicht signiert]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [66048 2012-02-08] (Hewlett-Packard) [Datei ist nicht signiert]
R2 PowerSavingUtilityService; C:\Program Files\Fujitsu\PSUtility\PSUService.exe [63336 2009-07-30] (FUJITSU LIMITED)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1254736 2017-04-11] (Bitdefender)
R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [801472 2015-03-10] (Samsung Electronics Co., Ltd.)
R2 ScsiAccess; C:\Windows\SysWOW64\ScsiAccess.EXE [181312 2003-02-04] () [Datei ist nicht signiert]
R2 TestHandler; C:\Program Files (x86)\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [341264 2009-02-19] (Fujitsu Technology Solutions)
R2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [996736 2017-04-18] (McAfee, Inc.)
R2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [16160 2017-04-18] (McAfee, Inc.)
S3 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [86776 2017-04-18] (McAfee, Inc.)
R2 UI Assistant Service; C:\Program Files (x86)\Mobile Partner Manager\AssistantServices.exe [252784 2010-07-16] ()
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2017\updatesrv.exe [218416 2017-11-14] (Bitdefender)
R2 VFPRadioSupportService; C:\Program Files\CSR\Bluetooth Feature Pack 5.0\VFPRadioSupportService.exe [145792 2009-10-12] (CSR, plc)
R2 vsserv; C:\Program Files\Bitdefender\Bitdefender 2017\vsserv.exe [1230880 2017-11-14] (Bitdefender)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WirelessSelectorService; C:\Program Files\Fujitsu\WirelessSelector\WSUService.exe [62312 2009-07-21] ()
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3831200 2015-06-12] (Intel® Corporation)
S2 InstallerService; C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [36096 2013-05-21] (Advanced Micro Devices, Inc.)
R1 atc; C:\Windows\System32\DRIVERS\atc.sys [1019880 2017-10-02] (BitDefender S.R.L. Bucharest, ROMANIA)
R3 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1763744 2017-10-02] (BitDefender)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-10-09] (AVG Technologies)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [124424 2017-07-26] (BitDefender LLC)
R2 bdprivmon; C:\Windows\System32\DRIVERS\bdprivmon.sys [47376 2017-11-24] (© Bitdefender SRL)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [87912 2015-12-04] (BitDefender)
R1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
S3 ewsercd; C:\Windows\System32\DRIVERS\ewsercd.sys [112896 2010-03-18] (Huawei Technologies Co., Ltd.)
R0 FJGSDisk; C:\Windows\System32\DRIVERS\FJGSDisk.sys [14696 2010-09-08] (FUJITSU LIMITED)
R3 FUJ02B1; C:\Windows\System32\DRIVERS\FUJ02B1.sys [59152 2016-05-11] (FUJITSU LIMITED)
R3 FUJ02E3; C:\Windows\System32\DRIVERS\FUJ02E3.sys [7296 2006-11-01] (FUJITSU LIMITED)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [187688 2017-09-14] (BitDefender LLC)
R1 HBtnKey; C:\Windows\System32\DRIVERS\wstbtndb.sys [9856 2007-09-14] (Lenovo)
R0 ignis; C:\Windows\System32\DRIVERS\ignis.sys [362664 2017-10-02] (Bitdefender)
S3 jrdusbser; C:\Windows\System32\DRIVERS\jrdusbser.sys [119680 2010-04-07] (Olivetti)
S3 Jukebox3_x64; C:\Windows\System32\DRIVERS\ctpdusbx.sys [27264 2006-01-19] (Creative Technology Ltd.)
S3 LHidFilt; C:\Windows\System32\DRIVERS\LHidFilt.Sys [54800 2008-02-29] (Logicool, Inc.)
S3 LMouFilt; C:\Windows\System32\DRIVERS\LMouFilt.Sys [57360 2008-02-29] (Logicool, Inc.)
S3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [41488 2008-02-29] (Logicool, Inc.)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [193464 2017-11-26] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [110016 2017-12-04] (Malwarebytes)
R3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [46008 2017-12-04] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253880 2017-11-27] (Malwarebytes)
R3 NETwNs64; C:\Windows\System32\DRIVERS\NETwsw01.sys [11534096 2015-05-04] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2015-04-03] (NVIDIA Corporation)
R3 O2MDRDR; C:\Windows\System32\DRIVERS\o2mdx64.sys [57576 2010-05-10] (O2Micro )
R3 O2SCBUS; C:\Windows\System32\DRIVERS\ozscrx64.sys [107808 2009-05-15] (O2Micro)
S3 qcfiltersra2k; C:\Windows\System32\DRIVERS\qcfiltersra2k.sys [6400 2009-10-01] (QUALCOMM Incorporated)
S3 qcusbnetsra2k; C:\Windows\System32\DRIVERS\qcusbnetsra2k.sys [243712 2010-04-26] (QUALCOMM Incorporated)
R3 qcusbsersra2k; C:\Windows\System32\DRIVERS\qcusbsersra2k.sys [121600 2010-04-26] (QUALCOMM Incorporated)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [44344 2012-11-23] (Synaptics Incorporated)
R3 ST50220; C:\Windows\System32\Drivers\ST50220.sys [51248 2008-12-02] (Sonix)
R2 trufos; C:\Windows\System32\DRIVERS\trufos.sys [439576 2017-09-14] (BitDefender S.R.L.)
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)
S3 cpuz130; \??\C:\Users\*****H~1\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X] <==== ACHTUNG
S3 DrvAgent64; \??\C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]
S3 SNP2UVC; system32\DRIVERS\snp2uvc.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-12-04 20:46 - 2017-12-04 20:47 - 000026272 _____ C:\Users\*****\Downloads\FRST.txt
2017-12-04 20:45 - 2017-12-04 20:46 - 000000000 ____D C:\FRST
2017-12-04 20:45 - 2017-12-04 20:45 - 002391552 _____ (Farbar) C:\Users\*****\Downloads\FRST64.exe
2017-12-04 11:34 - 2017-12-04 11:35 - 000005018 _____ C:\Users\*****\Downloads\plain label.pdf
2017-12-03 01:31 - 2017-12-04 10:45 - 000110016 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-11-30 17:42 - 2017-11-30 17:42 - 001533960 _____ (CHIP Digital GmbH) C:\Users\*****\Downloads\LicenseCrawler - CHIP-Installer.exe
2017-11-27 09:42 - 2017-11-27 09:42 - 078346672 _____ (Malwarebytes ) C:\Users\*****\Downloads\mb3-setup-consumer-3.3.1.2183(2).exe
2017-11-26 13:18 - 2017-12-04 10:45 - 000046008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-11-26 13:18 - 2017-11-27 09:57 - 000002030 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-11-26 13:18 - 2017-11-27 09:01 - 000253880 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2017-11-26 13:18 - 2017-11-26 13:18 - 000193464 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2017-11-26 13:18 - 2017-11-26 13:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-11-26 13:18 - 2017-11-01 08:54 - 000077432 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-11-26 13:17 - 2017-11-26 13:17 - 078346672 _____ (Malwarebytes ) C:\Users\*****\Downloads\mb3-setup-consumer-3.3.1.2183(1).exe
2017-11-26 13:17 - 2017-11-26 13:17 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-11-26 13:17 - 2017-11-26 13:17 - 000000000 ____D C:\Program Files\Malwarebytes
2017-11-26 13:15 - 2017-11-26 13:16 - 078346672 _____ (Malwarebytes ) C:\Users\*****\Downloads\mb3-setup-consumer-3.3.1.2183.exe
2017-11-25 15:24 - 2017-11-25 15:24 - 008261584 _____ (Malwarebytes) C:\Users\*****\Downloads\adwcleaner_7.0.4.0(2).exe
2017-11-25 14:46 - 2017-11-25 14:46 - 001790024 _____ (Malwarebytes) C:\Users\*****\Downloads\JRT.exe
2017-11-25 14:27 - 2017-11-25 14:27 - 008261584 _____ (Malwarebytes) C:\Users\*****\Downloads\adwcleaner_7.0.4.0(1).exe
2017-11-25 11:41 - 2017-11-25 11:41 - 000194126 _____ C:\Users\*****\Downloads\DHL_label_2017-11-25_11_41_13.pdf
2017-11-24 18:25 - 2017-11-24 18:25 - 008261584 _____ (Malwarebytes) C:\Users\*****\Downloads\adwcleaner_7.0.4.0.exe
2017-11-24 11:36 - 2017-11-24 11:36 - 000040359 _____ C:\Users\*****\Downloads\Randale_f-korr.odt
2017-11-24 11:01 - 2017-11-24 11:01 - 000047376 _____ (© Bitdefender SRL) C:\Windows\system32\Drivers\bdprivmon.sys
2017-11-16 23:15 - 2017-11-16 23:16 - 000000000 ____D C:\Program Files (x86)\GUM18C2.tmp
2017-11-16 10:10 - 2017-11-16 10:10 - 000000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-11-15 09:51 - 2017-10-16 23:34 - 003222528 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-11-15 09:51 - 2017-10-14 09:38 - 025731584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-11-15 09:51 - 2017-10-14 09:13 - 002903552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-11-15 09:51 - 2017-10-14 09:09 - 005979648 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-11-15 09:51 - 2017-10-14 08:30 - 015266816 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-11-15 09:51 - 2017-10-14 08:21 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-11-15 09:51 - 2017-10-14 08:14 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-11-15 09:51 - 2017-10-14 08:09 - 001544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-11-15 09:51 - 2017-10-14 07:50 - 002293760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-11-15 09:51 - 2017-10-14 07:33 - 004542464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-11-15 09:51 - 2017-10-14 07:28 - 013680128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-11-15 09:51 - 2017-10-14 07:10 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-11-15 09:51 - 2017-10-12 01:55 - 014635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2017-11-15 09:50 - 2017-10-18 08:31 - 000395976 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-11-15 09:50 - 2017-10-18 07:45 - 000347336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-11-15 09:50 - 2017-10-18 03:06 - 000344064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2017-11-15 09:50 - 2017-10-18 03:06 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2017-11-15 09:50 - 2017-10-18 03:06 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2017-11-15 09:50 - 2017-10-18 03:06 - 000056320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2017-11-15 09:50 - 2017-10-18 03:06 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2017-11-15 09:50 - 2017-10-18 03:06 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2017-11-15 09:50 - 2017-10-18 03:06 - 000007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2017-11-15 09:50 - 2017-10-17 00:07 - 001680616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-11-15 09:50 - 2017-10-16 22:55 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2017-11-15 09:50 - 2017-10-14 09:23 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-11-15 09:50 - 2017-10-14 09:23 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-11-15 09:50 - 2017-10-14 09:12 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-11-15 09:50 - 2017-10-14 09:11 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-11-15 09:50 - 2017-10-14 09:11 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-11-15 09:50 - 2017-10-14 09:11 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-11-15 09:50 - 2017-10-14 09:11 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-11-15 09:50 - 2017-10-14 09:05 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-11-15 09:50 - 2017-10-14 09:04 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-11-15 09:50 - 2017-10-14 09:02 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-11-15 09:50 - 2017-10-14 09:01 - 000816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-11-15 09:50 - 2017-10-14 09:01 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-11-15 09:50 - 2017-10-14 09:01 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-11-15 09:50 - 2017-10-14 09:00 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-11-15 09:50 - 2017-10-14 08:55 - 000968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-11-15 09:50 - 2017-10-14 08:53 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-11-15 09:50 - 2017-10-14 08:47 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-11-15 09:50 - 2017-10-14 08:47 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-11-15 09:50 - 2017-10-14 08:46 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-11-15 09:50 - 2017-10-14 08:43 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-11-15 09:50 - 2017-10-14 08:43 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-11-15 09:50 - 2017-10-14 08:41 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-11-15 09:50 - 2017-10-14 08:40 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-11-15 09:50 - 2017-10-14 08:31 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-11-15 09:50 - 2017-10-14 08:30 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-11-15 09:50 - 2017-10-14 08:29 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-11-15 09:50 - 2017-10-14 08:28 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-11-15 09:50 - 2017-10-14 08:27 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-11-15 09:50 - 2017-10-14 08:03 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-11-15 09:50 - 2017-10-14 07:58 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-11-15 09:50 - 2017-10-14 07:53 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-11-15 09:50 - 2017-10-14 07:53 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-11-15 09:50 - 2017-10-14 07:52 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-11-15 09:50 - 2017-10-14 07:52 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-11-15 09:50 - 2017-10-14 07:51 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-11-15 09:50 - 2017-10-14 07:47 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-11-15 09:50 - 2017-10-14 07:47 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-11-15 09:50 - 2017-10-14 07:46 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-11-15 09:50 - 2017-10-14 07:45 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-11-15 09:50 - 2017-10-14 07:45 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-11-15 09:50 - 2017-10-14 07:45 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-11-15 09:50 - 2017-10-14 07:38 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-11-15 09:50 - 2017-10-14 07:35 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-11-15 09:50 - 2017-10-14 07:35 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-11-15 09:50 - 2017-10-14 07:34 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-11-15 09:50 - 2017-10-14 07:33 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-11-15 09:50 - 2017-10-14 07:32 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-11-15 09:50 - 2017-10-14 07:31 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-11-15 09:50 - 2017-10-14 07:30 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-11-15 09:50 - 2017-10-14 07:25 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-11-15 09:50 - 2017-10-14 07:24 - 000694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-11-15 09:50 - 2017-10-14 07:23 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-11-15 09:50 - 2017-10-14 07:23 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-11-15 09:50 - 2017-10-14 07:07 - 001314304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-11-15 09:50 - 2017-10-14 07:04 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-11-15 09:50 - 2017-10-12 01:58 - 000382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 012574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2017-11-15 09:50 - 2017-10-12 01:55 - 002319872 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 002222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 002058240 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2017-11-15 09:50 - 2017-10-12 01:55 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2017-11-15 09:50 - 2017-10-12 01:40 - 000308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-11-15 09:50 - 2017-10-12 01:39 - 000591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-11-15 09:50 - 2017-10-12 01:38 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-11-15 09:50 - 2017-10-12 01:38 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-11-15 09:50 - 2017-10-12 01:37 - 012574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2017-11-15 09:50 - 2017-10-12 01:37 - 011410944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 001549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 001400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 001363968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2017-11-15 09:50 - 2017-10-12 01:26 - 000427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-11-15 09:50 - 2017-10-12 01:26 - 000164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-11-15 09:50 - 2017-10-12 01:25 - 000086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2017-11-15 09:50 - 2017-10-12 01:25 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2017-11-15 09:50 - 2017-10-12 01:24 - 000008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2017-11-15 09:50 - 2017-10-12 01:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2017-11-15 09:50 - 2017-10-12 01:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2017-11-15 09:50 - 2017-10-12 01:20 - 000113152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2017-11-15 09:50 - 2017-10-12 01:16 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-11-15 09:49 - 2017-10-18 03:34 - 000134376 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2017-11-15 09:49 - 2017-10-18 03:30 - 000605184 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-11-15 09:49 - 2017-10-15 23:04 - 000407392 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2017-11-15 09:49 - 2017-10-04 14:04 - 002023936 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2017-11-15 09:49 - 2017-10-04 14:04 - 001570304 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-11-15 09:49 - 2017-10-04 14:04 - 000670208 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2017-11-15 09:49 - 2017-10-04 14:04 - 000603648 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-11-15 09:49 - 2017-10-04 14:04 - 000370688 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-11-15 09:49 - 2017-10-04 14:04 - 000241664 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2017-11-15 09:49 - 2017-10-04 14:04 - 000181760 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-12-04 20:47 - 2009-07-14 05:45 - 000021680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-12-04 20:47 - 2009-07-14 05:45 - 000021680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-12-04 20:37 - 2016-11-18 10:58 - 000000000 ____D C:\Users\*****\AppData\LocalLow\Mozilla
2017-12-04 20:12 - 2009-08-10 21:20 - 000714474 _____ C:\Windows\system32\perfh007.dat
2017-12-04 20:12 - 2009-08-10 21:20 - 000154526 _____ C:\Windows\system32\perfc007.dat
2017-12-04 20:12 - 2009-07-14 06:13 - 001649664 _____ C:\Windows\system32\PerfStringBackup.INI
2017-12-04 20:12 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2017-12-04 20:08 - 2016-01-12 00:46 - 000001256 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2773882716-4014048892-2402612297-1001UA.job
2017-12-04 20:08 - 2016-01-12 00:46 - 000001204 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2773882716-4014048892-2402612297-1001Core.job
2017-12-04 13:28 - 2010-09-08 08:36 - 000001034 _____ C:\Windows\Tasks\Google Software Updater.job
2017-12-04 10:44 - 2015-11-26 13:58 - 000065536 _____ C:\Windows\system32\Ikeext.etl
2017-12-04 10:44 - 2010-09-08 17:00 - 000000000 ____D C:\ProgramData\NVIDIA
2017-12-04 10:44 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-12-04 00:44 - 2015-11-26 14:07 - 000710859 _____ C:\bdlog.txt
2017-12-03 23:35 - 2010-09-08 08:44 - 000003990 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{E1C67B7B-AD2F-4AAF-8D04-12CBA86209E5}
2017-12-03 01:27 - 2017-03-28 23:27 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-12-03 01:27 - 2012-05-05 10:08 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-12-02 02:26 - 2010-09-08 08:23 - 000000000 ____D C:\Users\*****
2017-11-30 22:04 - 2015-12-09 18:59 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-11-29 16:10 - 2016-05-18 12:56 - 000000000 ____D C:\Program Files (x86)\Portrait Professional 8 Test
2017-11-29 01:48 - 2010-09-22 21:24 - 000000000 ____D C:\Users\*****\Data
2017-11-28 09:30 - 2010-09-24 16:31 - 000000000 ____D C:\Users\*****\AppData\Local\ElevatedDiagnostics
2017-11-27 21:52 - 2009-07-14 06:08 - 000032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-11-27 12:38 - 2014-11-16 02:39 - 000000000 ___RD C:\Users\*****\Dropbox
2017-11-27 09:53 - 2014-10-15 17:04 - 000000000 ____D C:\AdwCleaner
2017-11-25 14:59 - 2010-09-08 08:44 - 000000000 ____D C:\Users\*****\AppData\Local\Google
2017-11-17 11:18 - 2009-07-14 05:57 - 000001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-11-16 23:15 - 2010-09-08 09:03 - 000003542 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-11-16 23:15 - 2010-09-08 09:03 - 000003414 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-11-16 18:31 - 2014-11-16 02:36 - 000000000 ____D C:\Users\*****\AppData\Roaming\Dropbox
2017-11-16 18:20 - 2012-10-22 13:21 - 000002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-11-16 18:08 - 2013-07-24 02:13 - 000000000 ____D C:\Windows\system32\MRT
2017-11-16 18:07 - 2017-10-11 23:03 - 127017032 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2017-11-16 18:07 - 2010-09-22 13:35 - 127017032 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-11-16 11:13 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\rescache
2017-11-16 09:34 - 2009-07-14 05:45 - 000415672 _____ C:\Windows\system32\FNTCACHE.DAT
2017-11-16 09:31 - 2014-12-11 04:26 - 000000000 ____D C:\Windows\system32\appraiser
2017-11-15 13:30 - 2015-11-26 13:40 - 000000000 ____D C:\Program Files\Bitdefender Agent
2017-11-15 09:46 - 2014-12-27 16:50 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-11-15 03:32 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\NDF
2017-11-15 03:12 - 2010-09-22 12:05 - 000000000 ____D C:\Users\*****\AppData\Roaming\Mozilla
2017-11-14 21:45 - 2012-04-19 19:51 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-11-14 21:45 - 2012-04-19 19:51 - 000004366 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-11-14 21:45 - 2011-11-21 10:35 - 000000000 ____D C:\Windows\system32\Macromed
2017-11-14 21:45 - 2011-06-04 09:11 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-11-14 21:45 - 2010-09-08 08:46 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-11-08 23:41 - 2010-09-22 15:20 - 000000000 ____D C:\Users\*****\Documents\Turbo Lister Backup

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-04-28 14:25 - 2016-04-28 14:35 - 001192656 _____ (Adobe Systems Incorporated) C:\Users\*****\flashplayer21_xa_install.exe
2012-02-14 12:58 - 2017-09-28 18:39 - 000000157 _____ () C:\Users\*****\AppData\Roaming\default.rss
2013-06-10 14:32 - 2013-06-10 14:32 - 000000000 _____ () C:\Users\*****\AppData\Roaming\downloads.m3u
2014-10-11 14:52 - 2015-02-22 20:29 - 000141984 _____ () C:\Users\*****\AppData\Local\ars.cache
2014-10-11 14:53 - 2015-02-22 20:30 - 000320039 _____ () C:\Users\*****\AppData\Local\census.cache
2016-04-17 19:00 - 2016-04-17 19:00 - 000003584 _____ () C:\Users\*****\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-10-11 14:12 - 2014-10-11 14:12 - 000000036 _____ () C:\Users\*****\AppData\Local\housecall.guid.cache
2015-06-12 04:25 - 2016-02-03 19:24 - 000007609 _____ () C:\Users\*****\AppData\Local\resmon.resmoncfg
2017-09-17 11:16 - 2017-09-17 11:16 - 000000000 _____ () C:\Users\*****\AppData\Local\{B6544D82-3436-4391-B325-FABC58789C45}

Einige Dateien in TEMP:
====================
2016-02-11 22:04 - 2016-02-11 22:04 - 000736352 _____ (Oracle Corporation) C:\Users\*****\AppData\Local\Temp\jre-8u73-windows-au.exe
2017-04-30 17:52 - 2017-04-30 17:52 - 007545931 _____ (MusicToMP3.org                                              ) C:\Users\*****\AppData\Local\Temp\music-to-mp3.exe
2017-01-02 14:32 - 2017-01-02 14:32 - 000000000 ____D () C:\Users\*****\AppData\Local\Temp\SystemDiagnostics.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-11-29 03:55

==================== Ende von FRST.txt ============================

trude · 05.12.2017, 10:24

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 30-11-2017
durchgeführt von ***** (04-12-2017 20:48:36)
Gestartet von C:\Users\*****\Downloads
Windows 7 Professional Service Pack 1 (X64) (2010-09-08 07:23:23)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2773882716-4014048892-2402612297-500 - Administrator - Disabled)
Gast (S-1-5-21-2773882716-4014048892-2402612297-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2773882716-4014048892-2402612297-1005 - Limited - Enabled)
***** (S-1-5-21-2773882716-4014048892-2402612297-1001 - Administrator - Enabled) => C:\Users\*****
UpdatusUser (S-1-5-21-2773882716-4014048892-2402612297-1006 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AV: Bitdefender Virenschutz (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371}
AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Enabled) {078AF241-05A3-0EFF-40E0-3E0D69EA140A}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

64 Bit HP CIO Components Installer (HKLM\...\{FD868C71-6CCF-42E2-B90D-0504AB0036FE}) (Version: 13.2.1 - Hewlett-Packard) Hidden
7-Zip 16.04 (HKLM-x32\...\7-Zip) (Version: 16.04 - Igor Pavlov)
A1 Dashboard (HKLM-x32\...\{86790597-5E41-47AF-A6E4-6295D0C21B8B}) (Version: 1.9.0.0 - A1 Telekom Austria AG) Hidden
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 18.009.20050 - Adobe Systems Incorporated)
Adobe Flash Player 27 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 27.0.0.187 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated)
Advertising Center (HKLM-x32\...\{b2ec4a38-b545-4a00-8214-13fe0e915e6d}) (Version: 0.0.0.1 - Nero AG) Hidden
ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.201.1711.120 - Alps Electric)
Anti-Twin (Installation 4/29/2017) (HKLM-x32\...\Anti-Twin 2017-04-29 15.57.09) (Version:  - Joerg Rosenthal, Germany)
aspi (HKLM-x32\...\{015E4B8A-29B5-4AE3-BD08-38220FADFF4C}) (Version: 3.00.0008.0000 - Eastman Kodak Company) Hidden
AuthenTec Fingerprint Software (HKLM\...\{6B99AF03-2668-4572-BD3D-8C7A5D103065}) (Version: 8.5.1.28 - Ihr Firmenname)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.18.1035 - Bitdefender)
Bitdefender Internet Security (HKLM\...\Bitdefender) (Version: 22.0.1.1 - Bitdefender)
Bluetooth Feature Pack 5.0 (HKLM\...\{B2F4C332-2359-4ADE-AF0C-C631768BBB89}) (Version: 5.0.13 - CSR Plc.)
Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v7.00.05(D) - TOSHIBA CORPORATION)
calibre (HKLM-x32\...\{BDE6D02A-86B7-4D4C-8248-7705C1C0CC79}) (Version: 2.78.0 - Kovid Goyal)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM-x32\...\CANON iMAGE GATEWAY Task) (Version: 1.7.0.4 - Canon Inc.)
Canon Internet Library for ZoomBrowser EX (HKLM-x32\...\Canon Internet Library for ZoomBrowser EX) (Version: 1.6.3.9 - Canon Inc.)
Canon MOV Decoder (HKLM-x32\...\Canon MOV Decoder) (Version: 1.3.0.14 - Canon Inc.)
Canon MOV Encoder (HKLM-x32\...\Canon MOV Encoder) (Version: 1.1.0.18 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM-x32\...\MovieEditTask) (Version: 3.1.0.27 - Canon Inc.)
Canon Utilities CameraWindow DC 8 (HKLM-x32\...\CameraWindowDC) (Version: 8.10.4.24 - Canon Inc.)
Canon Utilities MyCamera (HKLM-x32\...\MyCamera) (Version: 7.2.0.4 - Canon Inc.)
Canon Utilities MyCamera DC (HKLM-x32\...\MyCameraDC) (Version: 7.2.0.5 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities RemoteCapture Task for ZoomBrowser EX (HKLM-x32\...\RemoteCaptureTask) (Version: 1.8.0.1 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (HKLM-x32\...\ZoomBrowser EX Memory Card Utility) (Version: 1.2.2.11 - Canon Inc.)
CCHelp (HKLM-x32\...\{9D1CF8B6-17B3-4832-B062-2C2DD0B57B04}) (Version: 3.00.0010.0000 - Ihr Firmenname) Hidden
CCScore (HKLM-x32\...\{B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}) (Version: 3.01.0001.0014 - Eastman Kodak) Hidden
Chiavetta Internet Olicard 145 (HKLM-x32\...\Chiavetta Internet Olicard 145 ALCATEL_is1) (Version:  - Olivetti)
Cliqz (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.53 - Cliqz.com)
Common Desktop Agent (HKLM\...\{031A0E14-0413-4C97-9772-2639B782F46F}) (Version: 1.62.0 - OEM) Hidden
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Creative Jukebox Driver (HKLM-x32\...\Creative Jukebox Driver) (Version:  - )
Creative MediaSource (HKLM-x32\...\{56F3E1FF-54FE-4384-A153-6CCABA097814}) (Version:  - )
Creative NOMAD II Driver (HKLM-x32\...\Creative NOMAD II Driver) (Version:  - )
Creative NOMAD Jukebox Zen Xtra (HKLM-x32\...\{66F324A1-BDC0-11D7-9E5C-00D0B76A8705}) (Version:  - )
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)
DeskUpdate (HKLM-x32\...\DeskUpdate_is1) (Version: 4.15.0148 - Fujitsu Technology Solutions)
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
DolbyFiles (HKLM-x32\...\{b1adf008-e898-4fe2-8a1f-690d9a06acaf}) (Version: 2.0 - Nero AG) Hidden
Dropbox (HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\Dropbox) (Version: 39.4.49 - Dropbox, Inc.)
ESSAdpt (HKLM-x32\...\{D15E9DB5-6BEB-4534-901E-80C0A29BAB97}) (Version: 3.01.0002.0001 - Ihr Firmenname) Hidden
ESSANUP (HKLM-x32\...\{A6F18A67-B771-4191-8A33-36D2E742D6D9}) (Version: 3.01.0002.0001 - Ihr Firmenname) Hidden
ESSBrwr (HKLM-x32\...\{643EAE81-920C-4931-9F0B-4B343B225CA6}) (Version: 3.01.0002.0001 - Ihr Firmenname) Hidden
ESSCAM (HKLM-x32\...\{469730CC-78DF-4CD3-B286-562D459EA619}) (Version: 3.01.0002.0001 - Ihr Firmenname) Hidden
ESSCDBK (HKLM-x32\...\{AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}) (Version: 3.01.0002.0001 - Ihr Firmenname) Hidden
ESScore (HKLM-x32\...\{9D8FEE90-0377-49A9-AEFB-525BDE549BA4}) (Version: 3.01.0003.0001 - Ihr Firmenname) Hidden
ESSgui (HKLM-x32\...\{91517631-A9F3-4B7C-B482-43E0068FD55A}) (Version: 3.01.0002.0001 - Ihr Firmenname) Hidden
ESShelp (HKLM-x32\...\{87843A41-7808-4F2E-B13F-25C1E67CF2FD}) (Version: 3.01.0001.0001 - Ihr Firmenname) Hidden
ESSini (HKLM-x32\...\{8E92D746-CD9F-4B90-9668-42B74C14F765}) (Version: 3.01.0002.0001 - Ihr Firmenname) Hidden
ESSPCD (HKLM-x32\...\{14D4ED84-6A9A-45A0-96F6-1753768C3CB5}) (Version: 3.01.0002.0001 - Ihr Firmenname) Hidden
ESSstore (HKLM-x32\...\{6016734B-42A7-4AEB-9248-1D1E4F69AB52}) (Version: 3.01.0001.0001 - Eastman Kodak) Hidden
ESSTUTOR (HKLM-x32\...\{CA60320D-6A16-49C8-A34F-84EEF4799567}) (Version: 3.01.0001.0002 - Eastman Kodak Company) Hidden
ESSvpaht (HKLM-x32\...\{A5B3EB8A-4071-42F0-8E8E-7A8342AA8E69}) (Version: 3.01.0002.0001 - Ihr Firmenname) Hidden
ESSvpot (HKLM-x32\...\{48C82F7A-F100-4DAB-A310-8E18BF2159E1}) (Version: 3.01.0002.0001 - Ihr Firmenname) Hidden
FJ Camera (HKLM-x32\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 6.0.1218.4_WHQL - Sonix)
Free M4a to MP3 Converter 9.3 (HKLM-x32\...\Free M4a to MP3 Converter_is1) (Version:  - ManiacTools.com)
Fujitsu Display Manager (HKLM\...\{4108974B-DE87-4AD4-9167-930C62C45691}) (Version: 7.01.20.204 - Ihr Firmenname) Hidden
Fujitsu Display Manager (HKLM-x32\...\InstallShield_{4108974B-DE87-4AD4-9167-930C62C45691}) (Version:  - )
Fujitsu Hotkey Utility (HKLM-x32\...\{BA0CC975-682B-4678-A35C-05E607F36387}) (Version: 3.60.1.0 - FUJITSU LIMITED) Hidden
Fujitsu Hotkey Utility (HKLM-x32\...\InstallShield_{BA0CC975-682B-4678-A35C-05E607F36387}) (Version: 3.60.1.0 - FUJITSU LIMITED)
Fujitsu MobilityCenter Extension Utility (HKLM\...\{EC314CDF-3521-482B-A21C-65AC95664814}) (Version: 3.01.00.000 - Ihr Firmenname) Hidden
Fujitsu MobilityCenter Extension Utility (HKLM-x32\...\InstallShield_{EC314CDF-3521-482B-A21C-65AC95664814}) (Version:  - )
Fujitsu System Extension Utility (HKLM\...\{E8A5B78F-4456-4511-AB3D-E7BFFB974A7A}) (Version: 3.1.0.0 - FUJITSU LIMITED) Hidden
Fujitsu System Extension Utility (HKLM-x32\...\InstallShield_{E8A5B78F-4456-4511-AB3D-E7BFFB974A7A}) (Version:  - )
Futuremark SystemInfo (HKLM-x32\...\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}) (Version: 3.21.2.1 - Futuremark Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 62.0.3202.94 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Google Updater (HKLM-x32\...\Google Updater) (Version: 2.4.2432.1652 - Google Inc.)
HUAWEI DataCard Driver 4.25.17.04 (HKLM-x32\...\HUAWEI DataCard Driver) (Version: 4.25.17.04 - Huawei technologies Co., Ltd.)
ImagXpress (HKLM-x32\...\{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}) (Version: 7.0.74.0 - Nero AG) Hidden
Intel Security True Key (HKLM\...\TrueKey) (Version: 4.16.112.1 - Intel Security)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.2.50.1050 - Intel Corporation)
Intel(R) Network Connections 18.7.28.1 (HKLM\...\PROSetDX) (Version: 18.7.28.1 - Intel)
Intel® PROSet/Wireless Software (HKLM-x32\...\{e6f0207e-ac43-48a9-bfff-3d879b45694d}) (Version: 18.12.1 - Intel Corporation)
Java 8 Update 73 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218073F0}) (Version: 8.0.730.2 - Oracle Corporation)
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
JPEGmini (HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\5d2010e174743543) (Version: 1.8.23.0 - ICVT Ltd)
Junk Mail filter update (HKLM-x32\...\{E2DFE069-083E-4631-9B6C-43C48E991DE5}) (Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Kodak EasyShare Software (HKLM-x32\...\{D32470A1-B10C-4059-BA53-CF0486F68EBC}) (Version:  - Eastman Kodak Company)
KSU (HKLM-x32\...\{B997C2A0-4383-41BF-B76E-9B8B7ECFB267}) (Version: 612.7.0013.0000 - Ihr Firmenname) Hidden
LifeBook Application Panel (HKLM\...\{6226477E-444F-4DFE-BA19-9F4F7D4565BC}) (Version: 8.1.0.0 - FUJITSU LIMITED) Hidden
LifeBook Application Panel (HKLM-x32\...\InstallShield_{6226477E-444F-4DFE-BA19-9F4F7D4565BC}) (Version:  - )
LSI HDA Modem (HKLM\...\LSI Soft Modem) (Version: 2.2.97 - LSI Corporation)
LSI V92 MOH Application (HKLM\...\LTMOH) (Version:  - LSI Corporation)
Malwarebytes Version 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.561.1 - McAfee, Inc.)
Menu Templates - Starter Kit (HKLM-x32\...\{b78120a0-cf84-4366-a393-4d0a59bc546c}) (Version: 9.4.2.0 - Nero AG) Hidden
Microsoft .NET Framework 4.7 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{91110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 (HKLM-x32\...\{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}) (Version: 9.0.21022.218 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mobile Partner Manager (HKLM-x32\...\{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}) (Version: 1.0.0.1 - ZTE Corporation)
Movie Templates - Starter Kit (HKLM-x32\...\{e498385e-1c51-459a-b45f-1721e37aa1a0}) (Version: 9.4.2.0 - Nero AG) Hidden
Mozilla Firefox 57.0.1 (x64 de) (HKLM\...\Mozilla Firefox 57.0.1 (x64 de)) (Version: 57.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 57.0.1.6541 - Mozilla)
Mozilla Thunderbird (3.1.4) (HKLM-x32\...\Mozilla Thunderbird (3.1.4)) (Version: 3.1.4 (de) - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 9 Essentials (HKLM-x32\...\{6fb6193a-66b8-4669-a133-d6c5ada08ad9}) (Version:  - Nero AG)
Nero BurnRights 12 (HKLM-x32\...\{0F9EAB70-E891-49E0-9974-37C6BE3BA6D0}) (Version: 12.0.00900 - Nero AG)
Nero WaveEditor (HKLM-x32\...\{831D3D7B-169D-47F3-9117-D74934BF71BF}) (Version: 12.5.00100 - Nero AG)
Notifier (HKLM-x32\...\{0008546E-DF6E-4CC1-AFD0-2CB8E16C95A2}) (Version: 3.01.0001.0002 - Ihr Firmenname) Hidden
NVIDIA 3D Vision Treiber 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 342.01 - NVIDIA Corporation)
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.11.9756 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.5.28 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.5.28 - NVIDIA Corporation)
NVIDIA Grafiktreiber 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 342.01 - NVIDIA Corporation)
NVIDIA nView 141.36 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView) (Version: 141.36 - NVIDIA Corporation)
NVIDIA WMI 2.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVWMI) (Version: 2.18.0 - NVIDIA Corporation)
O2Micro 1394 OHCI Compliant Host Controller Driver (HKLM\...\{AFC44A23-E6A8-4625-B6B1-23D438525D59}) (Version: 1.0.00 - O2Micro International LTD.) Hidden
O2Micro 1394 OHCI Compliant Host Controller Driver (HKLM-x32\...\InstallShield_{AFC44A23-E6A8-4625-B6B1-23D438525D59}) (Version: 1.0.00 - O2Micro International LTD.)
O2Micro Flash Memory Card Windows Driver (HKLM\...\{165EB7E8-619F-4054-80D5-2CFCD9155361}) (Version: 3.00.0009 - O2Micro International LTD.) Hidden
O2Micro Flash Memory Card Windows Driver (HKLM-x32\...\InstallShield_{165EB7E8-619F-4054-80D5-2CFCD9155361}) (Version: 3.00.0009 - O2Micro International LTD.)
O2Micro PCIe SCR Driver (HKLM\...\{1B78AF5F-2120-445B-961E-FE275CA1FE7C}) (Version: 1.0.01 - O2Micro) Hidden
O2Micro PCIe SCR Driver (HKLM-x32\...\InstallShield_{1B78AF5F-2120-445B-961E-FE275CA1FE7C}) (Version: 1.0.01 - O2Micro)
OTtBP (HKLM-x32\...\{F71760CD-0F8B-4DCC-B7B7-6B223CC3843C}) (Version: 3.00.0007.0000 - Eastman Kodak Company) Hidden
OZ711 SCR Driver V3.0.1.6B (x64) (HKLM\...\{BC796E78-3F5B-467B-816F-4DB16DE8750A}) (Version: 3.0.1.6B - O2Micro) Hidden
OZ711 SCR Driver V3.0.1.6B (x64) (HKLM-x32\...\InstallShield_{BC796E78-3F5B-467B-816F-4DB16DE8750A}) (Version: 3.0.1.6B - O2Micro)
PCDLNCH (HKLM-x32\...\{69BD6399-3D8F-45B7-81D9-819361F5101D}) (Version: 3.01.0002.0001 - Eastman Kodak Company) Hidden
Power Saving Utility (HKLM\...\{7254349B-460B-488F-B4DB-A96100C5C48B}) (Version: 31.01.11.009 - FUJITSU LIMITED) Hidden
Power Saving Utility (HKLM-x32\...\InstallShield_{7254349B-460B-488F-B4DB-A96100C5C48B}) (Version:  - )
Prerequisite installer (HKLM-x32\...\{3AAB08A3-F129-4BD5-B409-AE674F93759D}) (Version: 12.0.0003 - Nero AG) Hidden
Qualcomm Gobi 2000 Package for Sierra (HKLM-x32\...\{A23619B4-373D-4CA1-A204-A185203C0EBA}) (Version: 1.1.140 - QUALCOMM)
QuickTime (HKLM-x32\...\QuickTime) (Version:  - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6886 - Realtek Semiconductor Corp.)
Resilio Sync (HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\Resilio Sync) (Version: 2.4.4 - Resilio, Inc.)
Samsung Drucker-Diagnose (HKLM-x32\...\Samsung Printer Diagnostics) (Version: 1.0.0.17 - Samsung Electronics Co., Ltd.)
Samsung Easy Document Creator (HKLM-x32\...\Samsung Easy Document Creator) (Version: 1.06.60 (17.03.2015) - Samsung Electronics Co., Ltd.)
Samsung Easy Printer Manager (HKLM-x32\...\Samsung Easy Printer Manager) (Version: 1.05.79.00(26.03.2015) - Samsung Electronics Co., Ltd.)
Samsung Network PC Fax (HKLM-x32\...\Samsung Network PC Fax) (Version: 1.11.28 (10.03.2015) - Samsung Electronics Co., Ltd.)
Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)
Samsung Scan Process Machine (HKLM-x32\...\Samsung Scan Process Machine) (Version: 1.03.05.25 - Samsung Electronics Co., Ltd.) Hidden
Samsung SCX-3400 Series (HKLM-x32\...\Samsung SCX-3400 Series) (Version: 1.27 (10.04.2015) - Samsung Electronics Co., Ltd.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.25.0 - SAMSUNG Electronics Co., Ltd.)
SFR (HKLM-x32\...\{C354C9B6-A4E0-4BB0-A368-6DC6BCA0E314}) (Version: 3.01.0002.0001 - Eastman Kodak Company) Hidden
SFR2 (HKLM-x32\...\{ABE068DF-8DC4-4947-ABFC-DD2B40850225}) (Version: 3.00.0004.0000 - Eastman Kodak Company) Hidden
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 4.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 2.4.5.28 - NVIDIA Corporation) Hidden
Shock Sensor Utility (HKLM\...\{ABE8CE7E-01CC-4500-BAF5-FFC29EA108A1}) (Version: 4.01.00.000 - Ihr Firmenname) Hidden
Shock Sensor Utility (HKLM-x32\...\InstallShield_{ABE8CE7E-01CC-4500-BAF5-FFC29EA108A1}) (Version:  - )
SNS Upload for Easy Document Creator (HKLM-x32\...\{B6B5F07C-88D5-49D3-A1A7-A6D4BC37DCCC}) (Version: 1.0.0 - Samsung Electronics Co.,Ltd)
Sun ODF Plugin for Microsoft Office 3.2 (HKLM-x32\...\{BD136CE7-6666-4273-A056-8D92F8625AAB}) (Version: 3.2.9483 - Sun Microsystems)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.21.4 - Synaptics Incorporated)
Synchronizer (HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\Synchroniser) (Version:  - F.J. Wechselberger)
SystemDiagnostics (HKLM-x32\...\{EF59DB7F-7426-426E-B862-7031F83ED304}) (Version: 2.04.0006 - Fujitsu Technology Solutions)
TeamViewer 5 (HKLM-x32\...\TeamViewer 5) (Version: 5.1.9192  - TeamViewer GmbH)
TextMaker Viewer (HKLM-x32\...\TextMaker Viewer) (Version:  - SoftMaker Software GmbH)
TomTom HOME (HKLM-x32\...\{0E778C56-3A87-497E-BEF0-EF0D3EE4871C}) (Version: 2.10.2 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
TuneUp Utilities Language Pack (de-DE) (HKLM-x32\...\{F4811919-F252-4B25-9AB2-8859A85810B5}) (Version: 13.0.4000.179 - TuneUp Software) Hidden
Turbo Lister 2 (HKLM-x32\...\{8927E07C-97F7-4A54-88FB-D976F50DD46E}) (Version: 2.00.0000 - eBay Inc.)
VC_CRT_x64 (HKLM\...\{54F2237F-018C-483B-8884-9FC0D88840C3}) (Version: 1.02.0000 - Intel Corporation) Hidden
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Windows Live Anmelde-Assistent (HKLM-x32\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Wireless Selector (HKLM\...\{51692C66-5505-41B8-92A7-548C69FB867C}) (Version: 4.01.00.100 - FUJITSU LIMITED) Hidden
Wireless Selector (HKLM-x32\...\InstallShield_{51692C66-5505-41B8-92A7-548C69FB867C}) (Version:  - )

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{45C6AFA5-2C13-402f-BC5D-45CC8172EF6B}\InprocServer32 -> C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtExt.dll (TOSHIBA)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{581FFA00-FC33-0004-0402-95003A5CDE89}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Resilio Sync\ShellExtensionPath64_2DC.dll ()
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{581FFA01-FC33-0004-0402-95003A5CDE89}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Resilio Sync\ShellExtensionPath64_2DC.dll ()
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [!Resilio Sync 2.4.0Done] -> {581FFA04-FC33-0000-0402-95003A5CDE89} => C:\ProgramData\Resilio Sync\ShellExtensionOverlay64_29A.dll [2016-09-18] ()
ShellIconOverlayIdentifiers: [!Resilio Sync 2.4.0RO] -> {581FFA03-FC33-0000-0402-95003A5CDE89} => C:\ProgramData\Resilio Sync\ShellExtensionOverlay64_29A.dll [2016-09-18] ()
ShellIconOverlayIdentifiers: [!Resilio Sync 2.4.0RW] -> {581FFA02-FC33-0000-0402-95003A5CDE89} => C:\ProgramData\Resilio Sync\ShellExtensionOverlay64_29A.dll [2016-09-18] ()
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [!Resilio Sync 2.4.0Done] -> {581FFA04-FC33-0000-0402-95003A5CDE89} => C:\ProgramData\Resilio Sync\ShellExtensionOverlay64_29A.dll [2016-09-18] ()
ShellIconOverlayIdentifiers-x32: [!Resilio Sync 2.4.0RO] -> {581FFA03-FC33-0000-0402-95003A5CDE89} => C:\ProgramData\Resilio Sync\ShellExtensionOverlay64_29A.dll [2016-09-18] ()
ShellIconOverlayIdentifiers-x32: [!Resilio Sync 2.4.0RW] -> {581FFA02-FC33-0000-0402-95003A5CDE89} => C:\ProgramData\Resilio Sync\ShellExtensionOverlay64_29A.dll [2016-09-18] ()
ContextMenuHandlers1: [!NetFax0] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\Windows\system32\spool\drivers\x64\3\NetFaxShell64.dll [2015-03-10] (Samsung Electronics Co., Ltd.)
ContextMenuHandlers1: [!NetFax1] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\Windows\system32\spool\drivers\x64\3\NetFaxShell64.dll [2015-03-10] (Samsung Electronics Co., Ltd.)
ContextMenuHandlers1: [!NetFax2] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\Windows\system32\spool\drivers\x64\3\NetFaxShell64.dll [2015-03-10] (Samsung Electronics Co., Ltd.)
ContextMenuHandlers1: [!NetFax3] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\Windows\system32\spool\drivers\x64\3\NetFaxShell64.dll [2015-03-10] (Samsung Electronics Co., Ltd.)
ContextMenuHandlers1: [!NetFax4] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\Windows\system32\spool\drivers\x64\3\NetFaxShell64.dll [2015-03-10] (Samsung Electronics Co., Ltd.)
ContextMenuHandlers1: [!NetFax5] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\Windows\system32\spool\drivers\x64\3\NetFaxShell64.dll [2015-03-10] (Samsung Electronics Co., Ltd.)
ContextMenuHandlers1: [!NetFax6] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\Windows\system32\spool\drivers\x64\3\NetFaxShell64.dll [2015-03-10] (Samsung Electronics Co., Ltd.)
ContextMenuHandlers1: [!NetFax7] -> {35308360-D4A6-436D-B701-1FEC7E96BA48} => C:\Windows\system32\spool\drivers\x64\3\NetFaxShell64.dll [2015-03-10] (Samsung Electronics Co., Ltd.)
ContextMenuHandlers1-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers1-x32: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt_20160518_14_23_17.dll [2015-07-07] (Cyberlink)
ContextMenuHandlers1-x32-x32: [Cover Designer] -> {73FCA462-9BD5-4065-A73F-A8E5F6904EF7} => C:\Program Files (x86)\Nero\Nero 9\Nero CoverDesigner\CoverEdExtension.dll [2009-06-16] (Nero AG)
ContextMenuHandlers1-x32-x32: [tosBtShllExt] -> {6BEF3D0B-53F0-4b0d-B91C-C19ED3D4C9D1} => C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtShell.dll [2009-06-18] (TOSHIBA)
ContextMenuHandlers2: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt_20160518_14_23_17.dll [2015-07-07] (Cyberlink)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers4-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers4-x32: [tosBtShllExt] -> {6BEF3D0B-53F0-4b0d-B91C-C19ED3D4C9D1} => C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtShell.dll [2009-06-18] (TOSHIBA)
ContextMenuHandlers5: [00nView] -> {1E9B04FB-F9E5-4718-997B-B8DA88302A48} => C:\Program Files\NVIDIA Corporation\nview\nvshell.dll [2015-10-13] ()
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2016-11-14] (NVIDIA Corporation)
ContextMenuHandlers6-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers6-x32: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers1_S-1-5-21-2773882716-4014048892-2402612297-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers1_S-1-5-21-2773882716-4014048892-2402612297-1001: [Resilio Sync 2.4.4] -> {581FFA00-FC33-0004-0402-95003A5CDE89} => C:\Users\*****\AppData\Roaming\Resilio Sync\ShellExtensionPath64_2DC.dll [2016-12-13] ()
ContextMenuHandlers4_S-1-5-21-2773882716-4014048892-2402612297-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers4_S-1-5-21-2773882716-4014048892-2402612297-1001: [Resilio Sync 2.4.4] -> {581FFA00-FC33-0004-0402-95003A5CDE89} => C:\Users\*****\AppData\Roaming\Resilio Sync\ShellExtensionPath64_2DC.dll [2016-12-13] ()
ContextMenuHandlers5_S-1-5-21-2773882716-4014048892-2402612297-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {07917191-5203-4E57-B78D-75C260D290AD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-05-08] (Adobe Systems Incorporated)
Task: {09D1C2A0-E828-4B6B-A376-B55CB2DF1E64} - System32\Tasks\{F64994A0-D0D8-40B9-B88C-4220910DFA19} => C:\Users\*****\Music\Pictures\FestZirndorf21.07.04\Desktop\Sun ODF Plugin for Microsoft Office 3.2 (en-US) Installation Files\redist\vcredist_x64.exe
Task: {0A07F728-F252-4330-AACD-43CCD155BFA5} - System32\Tasks\{71469CF0-1309-4E0B-846E-639C91217AA2} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {0EBE5864-6337-428A-8D11-6545BA3D5B74} - System32\Tasks\{53C191A9-0EF9-4481-9CD8-7B9DC9BA99C5} => C:\Fujitsu\Images\Nero Image Burning\Nero Image Burning.exe [2009-05-08] (Nero AG)
Task: {0F6CBF46-2467-41C1-863A-1CB207FE0EC9} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {13BF5DF5-FEF3-42A1-824B-2A6144D5AA84} - System32\Tasks\{190DD93C-CD71-4176-B76A-603815CC13EF} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {15727D08-5A15-4541-BB8B-ECC98AC0F252} - System32\Tasks\{75DA7499-212F-4491-B48E-7A00C5452BC2} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {177A589C-5442-4173-A39E-B51BC998BDC1} - System32\Tasks\{7C8F4609-5A05-4C18-ADF1-2252DB8C6F29} => C:\Program Files (x86)\A1 Dashboard\Dashboard.exe [2010-09-16] (mquadr.at software engineering and consulting GmbH, web: www.mquadr.at, mail: office@mquadr.at)
Task: {228107D1-99A1-45C1-8DC9-C65D9D88BD15} - System32\Tasks\{28586B28-6207-4D19-8A49-A1A88D350FD6} => C:\Users\*****\Music\Pictures\FestZirndorf21.07.04\Desktop\Sun ODF Plugin for Microsoft Office 3.2 (en-US) Installation Files\redist\vcredist_x64.exe
Task: {2C172ABB-4AF6-4063-80A7-02F814D79469} - System32\Tasks\{01B970CA-E281-4CDF-90D2-301862A1542B} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {38B62D7A-EACD-4C94-83F1-8E9F8D283427} - System32\Tasks\{7B2D1991-9D94-431A-AC01-8B7A56FC602F} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {3B61D1F8-1D29-4AB2-9841-79354413F814} - System32\Tasks\{82C82CBD-934A-4BBF-9CD1-DB8E09BD9864} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {474D17E3-4FF7-47B8-A215-682B867D7947} - System32\Tasks\{8342F5A8-C651-4135-952E-2497FBC194C1} => C:\Windows\system32\pcalua.exe -a "C:\Users\*****\Downloads\odp-3.2-bin-windows-en-US(4).exe" -d "C:\Users\*****\Downloads"
Task: {491D1642-1B66-45D2-BF3C-F7C24DB5A309} - System32\Tasks\{E8C4DF28-D342-4564-B10D-F904CF36E3B6} => C:\ProgramData\Adobe\Setup\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}\setup.exe [2015-03-17] (Adobe Systems Incorporated) <==== ACHTUNG
Task: {4AED4E4C-71D5-4928-8EB4-9A32FBF5C1DB} - System32\Tasks\{63DD856D-912C-4E4F-9A23-48828E660F40} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {4C93D82E-942A-4673-93A5-E7EC930576E5} - System32\Tasks\{88AEAA87-8DD4-4B3B-BA96-129AA319623D} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {50FE6ADB-9486-45A6-B9C2-C647241F6C95} - System32\Tasks\{B0FCD2C5-C961-4182-A92A-BCF8299EC70D} => C:\Windows\system32\pcalua.exe -a "C:\Users\*****\Downloads\Syncronizer_Setup.exe" -d "C:\Users\*****\Downloads"
Task: {549E23E9-9872-42C7-B159-F8AC6C8BE694} - System32\Tasks\{AE064593-DF2B-4937-B358-D896CD477CDF} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {596686D1-3DB1-4470-917C-2C39A812A80C} - System32\Tasks\{BCA61F8D-5153-4DC1-8826-DE6D9AB32828} => C:\Users\*****\Music\Pictures\FestZirndorf21.07.04\Desktop\Sun ODF Plugin for Microsoft Office 3.2 (en-US) Installation Files\redist\vcredist_x64.exe
Task: {5BC5D688-5C10-41A6-8CF6-8FDB60331C50} - System32\Tasks\{11AE8B4F-1776-4145-AA55-ED0ED607C212} => C:\Windows\system32\pcalua.exe -a "C:\Users\*****\Downloads\odp-3.2-bin-windows-en-US(2).exe" -d "C:\Users\*****\Downloads"
Task: {6AFE2FE1-ACC9-4899-AEBA-B413EA8BEC72} - System32\Tasks\{1AB99C80-C888-4664-939B-995B1997B178} => C:\Fujitsu\Images\Nero Image Burning\Nero Image Burning.exe [2009-05-08] (Nero AG)
Task: {6C887AC9-E162-4AE4-93DC-E3AFA3631EE4} - System32\Tasks\{DAEE4238-DD2E-4621-AA65-89840F00BDAA} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {715922D0-D730-4A08-9043-C1D721CBA776} - System32\Tasks\{AF97BA7F-1118-4901-A1AB-2AB741F96531} => C:\Windows\system32\pcalua.exe -a "C:\Users\*****\Downloads\Shockwave_Installer_Slim.exe"
Task: {7216CC9B-88FB-4E92-B9B0-E28B3AA229F5} - System32\Tasks\Fujitsu\DeskUpdate => C:\Program Files (x86)\Fujitsu\DeskUpdate\ducmd.exe
Task: {77539094-7848-4AEB-BFEF-DF9799DB889D} - System32\Tasks\{F313404B-D3D3-4091-B4C5-7F0D239A7456} => C:\Program Files (x86)\Kodak\Kodak EasyShare software\bin\EasyShare.exe [2003-08-25] (Eastman Kodak Company)
Task: {778546B8-1E4D-4AE7-ADDF-A6DBECE40AFF} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated)
Task: {7C6883FA-D3A7-4B29-B854-2F66FB274C1A} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated)
Task: {7C765003-9A9E-4BB4-BABF-B8AA08905730} - System32\Tasks\{69CDDBD5-CB8B-4120-BFF2-519F2EDE7525} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {824B0E4C-105C-4372-9E3E-414EE7D0EE7F} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2773882716-4014048892-2402612297-1001UA => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-01-12] (Dropbox, Inc.)
Task: {848796EB-C24B-4C1A-9797-C7CC9CF37CE0} - System32\Tasks\{912E9858-EA36-4154-AE40-9514681F3710} => C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
Task: {84AE98A1-B5DA-4C9D-A758-703C996C40BE} - System32\Tasks\Google Software Updater => C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-21] (Google) <==== ACHTUNG
Task: {89311ED2-8559-46A0-BE41-95B76C22B700} - System32\Tasks\{FFE6F069-F837-440B-A99C-85AC803741C6} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {8AF195AF-9245-4A80-A7FE-41E1EF200126} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-01-29] (Oracle Corporation)
Task: {906FD91B-9DC5-43E5-8591-38C55808C06A} - System32\Tasks\{8B2794BD-5E5C-49AB-8DD8-22E14E39F74C} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {919F1766-48FB-4A8F-86AF-2E80A1453514} - System32\Tasks\{656F46CA-071A-4829-B8B1-DE64828727FC} => C:\Users\*****\Music\Pictures\FestZirndorf21.07.04\Desktop\Sun ODF Plugin for Microsoft Office 3.2 (en-US) Installation Files\redist\vcredist_x64.exe
Task: {973AE359-DA26-459E-A405-FB1FCC01AABE} - System32\Tasks\{849704BD-7FFD-48AF-9192-262B0B4C49CD} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {97F2303C-E709-4F54-BD93-F86F1C1A5111} - System32\Tasks\{086657B8-58AE-4FE0-A412-FB86A1D8E28D} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {9E420050-3954-40FD-A71B-6FBA7900E0C2} - System32\Tasks\{3B7E1157-71A2-4406-94F2-28C848971F64} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {9F2C2ECE-F9CF-40B5-A242-5B53F9B37787} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2017-04-11] (Bitdefender)
Task: {A63EE592-0933-47E2-BFFD-D9FBAC4E9521} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2773882716-4014048892-2402612297-1001Core => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-01-12] (Dropbox, Inc.)
Task: {AADC8F9F-494F-42B5-9BF8-B91CCBEB490E} - System32\Tasks\{C809FDBA-387B-4726-B436-8EE5C8429442} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {AFAC7C00-4B97-43B6-A25E-6E736B46E87F} - System32\Tasks\{7BB894D2-93DB-4384-94B8-D17D6A15218E} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {AFE0E316-6FC0-4669-95EE-D585B698B116} - System32\Tasks\{5CB6381B-2736-47E8-9E13-69255A748754} => C:\Windows\system32\pcalua.exe -a "C:\Users\*****\Downloads\odp-3.2-bin-windows-en-US.exe" -d "C:\Users\*****\Downloads"
Task: {AFF94710-4A26-4DE5-AB46-13FD779885F0} - System32\Tasks\{E6135D56-98E0-4950-BD68-621200FAA9C1} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {B0756905-07D5-4CDB-ABDA-2341E54B421F} - System32\Tasks\{6C672292-7566-4001-94A8-87EA1E20A0A4} => C:\Program Files (x86)\Canon\CameraWindow\CameraWindowLauncher\CameraLauncher.exe
Task: {B33ADB70-4FFB-4B57-9395-C3D36750D9B1} - System32\Tasks\{E200163A-CC16-4369-8B29-6AB5AE5BD671} => C:\Program Files (x86)\Canon\CameraWindow\CameraWindowLauncher\CameraLauncher.exe
Task: {B5F4F768-2528-4381-8A6B-A52EC95003D6} - System32\Tasks\{30AD0698-632D-4DA4-96A3-0812516F584B} => C:\Program Files (x86)\Canon\CameraWindow\CameraWindowLauncher\CameraLauncher.exe
Task: {B5F99541-4B6D-4894-BE96-E858D94A8496} - System32\Tasks\{530AEF6E-547D-4771-BC09-6A54FB522747} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {B7ACC88A-02CF-4AD2-BB07-72019D7FB6A8} - System32\Tasks\{8BD694D5-7DC1-4EEA-9EED-47F31AAFA047} => C:\Windows\system32\pcalua.exe -a "C:\Users\*****\Downloads\odp-3.2-bin-windows-en-US(1).exe" -d "C:\Users\*****\Downloads"
Task: {BF6F9FCC-99B6-4FF2-9706-C213C8E9677D} - System32\Tasks\{C10FB94B-7A41-4DC3-9BF4-CEE909DAE4CA} => C:\Windows\system32\pcalua.exe -a "C:\Users\*****\Downloads\Creative_LabsCreativeJukeboxZenXtra30GB.exe" -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {C5B334BB-B1C2-495B-990C-A908BB7F5715} - System32\Tasks\{7707CD5D-4F20-4226-B722-80670B37C652} => C:\Windows\system32\pcalua.exe -a D:\IrfanView3_51\iview351g.exe -d D:\IrfanView3_51
Task: {C9747F91-DCF2-44BF-9A7C-3F38848393B2} - System32\Tasks\{98CE380E-8B3B-4181-BA07-FA7DFC4DD957} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {CAFEDDF2-2767-4A6C-A65B-7F4D1B167A62} - System32\Tasks\{CE61994F-0071-49D8-8C54-3DA91BFADB74} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {CDBF0339-2E8F-45A5-86D9-3EC8B25C254F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {D20E548D-0D7E-4862-84DA-AB3622D3D373} - System32\Tasks\{EB01B7B0-A176-47C1-9946-BE20598D22D4} => C:\Windows\system32\pcalua.exe -a "C:\Users\*****\AppData\Local\Temp\park-v1.7.8\driver deployment utility\setup.exe" -d "C:\Users\*****\AppData\Local\Temp\park-v1.7.8\driver deployment utility" <==== ACHTUNG
Task: {D90596AE-0AA0-4857-88E7-964321EDF09E} - System32\Tasks\{A9E84934-2890-4CAD-83AD-2E33545CBD84} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {D97495C2-A770-4197-A016-159DF472A7C2} - System32\Tasks\{79E68EE7-CBD8-44F7-8BDE-702B748B26CB} => C:\Windows\system32\pcalua.exe -a "C:\Users\*****\Music\Pictures\FestZirndorf21.07.04\Desktop\Sun ODF Plugin for Microsoft Office 3.2 (en-US) Installation Files\redist\vcredist_x64.exe" -d "C:\Users\*****\Music\Pictures\FestZirndorf21.07.04\Desktop\Sun ODF Plugin for Microsoft Office 3.2 (en-US) Installation Files (Der Dateneintrag hat 8 mehr Zeichen).
Task: {E7A9C417-898D-4776-9A11-6C6FFF376953} - System32\Tasks\{9207B18E-33BC-4497-A223-1F0A9F63BDD5} => C:\Users\*****\Music\Pictures\FestZirndorf21.07.04\Desktop\Sun ODF Plugin for Microsoft Office 3.2 (en-US) Installation Files\redist\vcredist_x64.exe
Task: {EF5D2B52-3B23-4F05-9378-729FA2C33A5C} - System32\Tasks\{2B70CEB2-2EAF-475C-BE02-641307A5D4B3} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {EF774E5F-CEC6-49BB-8589-725DF7CFAF9B} - System32\Tasks\{82CEF4FD-27C4-4F29-A643-4B05D0B04A81} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {F31D3C93-8FB7-40C2-B388-8237B135B724} - System32\Tasks\{04A6BF12-5AA8-40FD-BC41-3A6AA8FC5139} => C:\Program Files (x86)\A1 Dashboard\Dashboard.exe [2010-09-16] (mquadr.at software engineering and consulting GmbH, web: www.mquadr.at, mail: office@mquadr.at)
Task: {F59245A2-19AD-4A09-A6E5-D228F675A6F8} - System32\Tasks\{8B525D02-2C6B-4318-9D4F-71E797E3998F} => C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
Task: {F6ED342A-3AC1-4048-8A78-52D9283B8CBD} - System32\Tasks\{0DB09C4E-879B-404A-A8B8-3A5A12C99A14} => C:\Windows\system32\pcalua.exe -a "C:\Users\*****\Downloads\jxpiinstall(2).exe" -d "C:\Users\*****\Downloads"
Task: {F72B3DE1-06CD-4802-843C-74C15575C2E8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {F7FCF5DE-7B12-4071-AAE3-366AC2C4DA32} - System32\Tasks\{E059F358-EAF1-4BC5-A631-48CBB94DCAE1} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2017-11-27] (Adobe Systems Incorporated)
Task: {F8A460E8-7AA0-4EEE-84BC-FC84DD39F28C} - System32\Tasks\{CC24097B-A0DB-4548-B318-D61EBD424CF9} => C:\Users\*****\Music\Pictures\FestZirndorf21.07.04\Desktop\Sun ODF Plugin for Microsoft Office 3.2 (en-US) Installation Files\redist\vcredist_x86.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2773882716-4014048892-2402612297-1001Core.job => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2773882716-4014048892-2402612297-1001UA.job => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\Google Software Updater.job => C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe <==== ACHTUNG

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


Shortcut: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Meine Websites auf MSN\target.lnk -> hxxp://www.msnusers.co

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2017-09-14 08:54 - 2017-09-14 08:54 - 000111832 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\bdmetrics.dll
2017-05-08 08:28 - 2017-05-08 08:29 - 001008448 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_02451_002\ashttpbr.mdl
2017-05-08 08:28 - 2017-05-08 08:29 - 000541952 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_02451_002\ashttpdsp.mdl
2017-05-08 08:28 - 2017-05-08 08:29 - 003243920 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_02451_002\ashttpph.mdl
2017-05-08 08:28 - 2017-05-08 08:29 - 001544568 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_02451_002\ashttprbl.mdl
2013-10-27 11:21 - 2016-08-16 17:15 - 002708936 _____ () C:\Windows\system32\nvwmi64.exe
2013-05-24 01:54 - 2016-11-14 12:15 - 000135224 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-04-09 05:27 - 2015-04-09 05:27 - 000022528 _____ () C:\Windows\System32\ssm1mlm.dll
2011-04-20 10:26 - 2009-11-17 09:44 - 000040960 _____ () C:\Program Files (x86)\Common Files\DeviceHelper\DeviceManager.exe
2003-02-04 07:22 - 2003-02-04 07:22 - 000181312 _____ () C:\Windows\SysWOW64\ScsiAccess.EXE
2010-11-23 20:45 - 2010-07-16 09:49 - 000252784 _____ () C:\Program Files (x86)\Mobile Partner Manager\AssistantServices.exe
2009-07-21 19:31 - 2009-07-21 19:31 - 000062312 _____ () C:\Program Files\Fujitsu\WirelessSelector\WSUService.exe
2017-11-26 13:18 - 2017-11-01 08:55 - 002299344 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2016-09-18 20:54 - 2016-09-18 20:54 - 000532480 _____ () C:\ProgramData\Resilio Sync\ShellExtensionOverlay64_29A.dll
2016-12-13 18:22 - 2016-12-13 18:22 - 001222656 _____ () C:\Users\*****\AppData\Roaming\Resilio Sync\ShellExtensionPath64_2DC.dll
2017-11-16 10:10 - 2017-11-13 11:26 - 000725312 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\dropbox_watchdog.dll
2017-11-16 10:10 - 2017-11-13 11:26 - 002075456 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\dropbox_crashpad.dll
2017-03-25 00:11 - 2017-11-13 11:26 - 000100296 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\_ctypes.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000018888 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\select.pyd
2017-03-25 00:11 - 2017-11-13 11:28 - 000020800 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000035792 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000694224 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\unicodedata.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000021848 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000130512 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 001856848 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000022864 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd
2017-11-16 10:10 - 2017-11-13 11:26 - 000145864 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\pyexpat.pyd
2017-11-16 10:10 - 2017-11-13 11:26 - 000116688 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\pywintypes27.dll
2017-03-25 00:11 - 2017-11-13 11:26 - 000105928 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32api.pyd
2017-03-25 00:11 - 2017-11-13 11:29 - 000022864 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winffi.crt.compiled._winffi_crt.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000040248 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\fastpath.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000024528 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32event.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000043472 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32process.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000062784 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd
2017-11-16 10:10 - 2017-11-13 11:26 - 000392656 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\pythoncom27.dll
2017-11-16 10:10 - 2017-11-13 11:26 - 000020936 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\mmapfile.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000124880 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32file.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000116176 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32security.pyd
2017-03-25 00:11 - 2017-11-13 11:28 - 000392512 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd
2017-03-25 00:11 - 2017-11-13 11:29 - 000026456 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winffi.kernel32.compiled._winffi_kernel32.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000024016 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32clipboard.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000175560 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32gui.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000030160 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32pipe.pyd
2017-09-21 21:09 - 2017-11-13 11:26 - 000026056 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32job.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000048592 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32service.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000057808 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32evtlog.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000021824 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd
2017-09-09 10:10 - 2017-11-13 11:29 - 000023368 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winshell.compiled._winshell.pyd
2017-05-18 09:09 - 2017-11-13 11:29 - 000066392 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winenumhandles.compiled._WinEnumHandles.pyd
2017-03-25 00:11 - 2017-11-13 11:29 - 000025432 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000022856 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\crashpad.compiled._Crashpad.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 001796920 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000084424 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\sip.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 001956152 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 003859264 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000155464 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000521024 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000050496 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineCore.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000042304 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000131384 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000218944 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000204096 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000060880 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32print.pyd
2017-03-25 00:11 - 2017-11-13 11:29 - 000054608 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winrpcserver.compiled._RPCServer.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000024016 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32profile.pyd
2017-03-25 00:11 - 2017-11-13 11:29 - 000022864 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winffi.user32.compiled._winffi_user32.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000028616 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\win32ts.pyd
2017-03-25 00:11 - 2017-11-13 11:29 - 000022360 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
2017-03-25 00:11 - 2017-11-13 11:29 - 000021848 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winffi.winerror.compiled._winffi_winerror.pyd
2017-03-25 00:11 - 2017-11-13 11:29 - 000022360 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winffi.wininet.compiled._winffi_wininet.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000027488 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd
2017-03-25 00:11 - 2017-11-13 11:26 - 000349128 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winxpgui.pyd
2017-03-25 00:11 - 2017-11-13 11:29 - 000023896 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000025424 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd
2017-11-16 10:10 - 2017-11-13 11:26 - 000036296 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\librsync.dll
2017-11-16 10:10 - 2017-11-13 11:28 - 000181056 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL
2017-03-25 00:11 - 2017-11-13 11:29 - 000030536 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\wind3d11.compiled._wind3d11.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000024368 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\libEGL.DLL
2017-11-16 10:10 - 2017-11-13 11:28 - 001638200 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2017-03-25 00:11 - 2017-11-13 11:29 - 000026456 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\winffi.winhttp.compiled._winffi_winhttp.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000545080 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000359224 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd
2017-11-16 10:10 - 2017-11-13 11:28 - 000038208 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngine.pyd
2015-06-07 21:57 - 2015-05-23 02:48 - 000011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2003-08-25 15:28 - 2003-08-25 15:28 - 000229517 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\SpiffyExt.dll
2003-08-25 15:51 - 2003-08-25 15:51 - 000954513 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\VistaControls.dll
2003-07-23 02:01 - 2003-07-23 02:01 - 000536721 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\VistaCDBackup.dll
2003-08-25 15:51 - 2003-08-25 15:51 - 000061579 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\KPCDInterface.dll
2003-07-23 01:03 - 2003-07-23 01:03 - 000036864 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\LocAcqMod.dll
2003-08-25 15:44 - 2003-08-25 15:44 - 000110724 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\kpri40.dll
2003-08-25 15:58 - 2003-08-25 15:58 - 000352404 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\VistaPrintOnLine.DLL
2003-08-25 15:49 - 2003-08-25 15:49 - 000295058 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\VPrintOnlineHelper40.dll
2003-08-25 15:57 - 2003-08-25 15:57 - 001122442 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\VPrintOnline.dll
2003-08-25 15:53 - 2003-08-25 15:53 - 000389262 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\VistaEmail.DLL
2003-08-25 15:23 - 2003-08-25 15:23 - 000356484 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\keml40.dll
2003-07-23 02:27 - 2003-07-23 02:27 - 000139264 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\cameratodos.syx
2003-07-23 01:22 - 2003-07-23 01:22 - 000028672 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\LocCameraToDosCamBack.dll
2003-07-23 02:33 - 2003-07-23 02:33 - 000081920 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\PCDLaunchSysX.syx
2003-07-23 02:19 - 2003-07-23 02:19 - 000270489 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\VistacameraUploadSysx.syx
2003-07-23 01:28 - 2003-07-23 01:28 - 000024576 _____ () C:\Program Files (x86)\Kodak\Kodak EasyShare Software\bin\LocVistaCameraUploadCamBack.dll
2016-09-18 20:54 - 2016-09-18 20:54 - 000464384 _____ () C:\ProgramData\Resilio Sync\ShellExtensionOverlay86_29A.dll
2003-07-23 02:23 - 2003-07-23 02:23 - 000278665 _____ () C:\Program Files (x86)\Kodak\Kodak Easyshare Software\bin\Escom.dll
2017-07-17 18:30 - 2017-07-17 18:30 - 000863744 _____ () C:\Windows\mod_frst.exe

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\*****\flashplayer21_xa_install.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\antitwin_setup.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\bdupdsvrptch(1).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\bdupdsvrptch.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\bitdefender_windows_0cd6b341-f8d8-4f1d-8137-d30a1605e035.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\bitdefender_windows_e0f57a1e-b8e5-4662-96e1-5f1ec114a09e.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\connectivity_issues(1).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\connectivity_issues(2).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\connectivity_issues.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\Firefox_Setup_48.0.1.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\install_flash_player(1).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\jxpiinstall(1).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\jxpiinstall(2).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\m4a-to-mp3-converter.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\odp-3.2-bin-windows-en-US - CHIP-Installer.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\odp-3.2-bin-windows-en-US(1).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\odp-3.2-bin-windows-en-US(2).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\odp-3.2-bin-windows-en-US(3).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\odp-3.2-bin-windows-en-US(4).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\odp-3.2-bin-windows-en-US.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\Resilio-Sync_x64(1).exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\Resilio-Sync_x64.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\The_New_Bitdefender_SPT.exe:BDU [0]
AlternateDataStreams: C:\Users\*****\Downloads\vlc-2.2.4-win64.exe:BDU [0]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2017-12-04 20:44 - 000000037 _____ C:\Windows\system32\Drivers\etc\hosts

0.0.0.1	mssplus.mcafee.com

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\*****\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\Services: AeLookupSvc => 3
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Image Transfer Utility.lnk => C:\Windows\pss\Image Transfer Utility.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupreg: Apoint => C:\Program Files\Apoint2K\Apoint.exe
MSCONFIG\startupreg: CDAServer => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
MSCONFIG\startupreg: CLMLServer_For_P2G8 => "C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
MSCONFIG\startupreg: CLVirtualDrive => "C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R
MSCONFIG\startupreg: DeskUpdateNotifier => "C:\Program Files (x86)\Fujitsu\DeskUpdate\DeskUpdateNotifier.exe"
MSCONFIG\startupreg: FDM7 => C:\Program Files\Fujitsu\FDM7\FdmDaemon.exe
MSCONFIG\startupreg: FUJ02B1_Apps => "C:\Program Files (x86)\Fujitsu\FUJ02B1\CheckBatteryPack.exe" -ViewTarget -langid 0x411
MSCONFIG\startupreg: Kernel and Hardware Abstraction Layer => KHALMNPR.EXE
MSCONFIG\startupreg: LoadBtnHnd => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe
MSCONFIG\startupreg: LoadFujitsuQuickTouch => C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe
MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
MSCONFIG\startupreg: nwiz => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe /installquiet
MSCONFIG\startupreg: PSUTility => C:\Program Files\Fujitsu\PSUtility\TrayManager.exe
MSCONFIG\startupreg: SSUtility => C:\Program Files\Fujitsu\SSUtility\FJSSDMN.exe
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SynTPEnh => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{5BF9778A-3006-43C8-9EB3-B92359615432}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\wlcsdk.exe
FirewallRules: [{B5C8B731-9E2C-407E-A3AE-72DA9D8D0850}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{3883C125-2417-4B9E-B211-36C33DB0776A}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [TCP Query User{53F2EDF7-268F-4587-8554-DC62B3234F48}C:\program files (x86)\kodak\kodak software updater\7288971\program\backweb-7288971.exe] => (Allow) C:\program files (x86)\kodak\kodak software updater\7288971\program\backweb-7288971.exe
FirewallRules: [UDP Query User{4AD1B1B0-14F6-4E46-8D25-14058B8D868F}C:\program files (x86)\kodak\kodak software updater\7288971\program\backweb-7288971.exe] => (Allow) C:\program files (x86)\kodak\kodak software updater\7288971\program\backweb-7288971.exe
FirewallRules: [TCP Query User{5F3498C2-D940-47E7-9E40-A7E2DBE0358B}C:\program files (x86)\kodak\kodak software updater\7288971\program\backweb-7288971.exe] => (Allow) C:\program files (x86)\kodak\kodak software updater\7288971\program\backweb-7288971.exe
FirewallRules: [UDP Query User{2ED8C2F9-93AA-4EBB-A7B0-D0FCD060AB8F}C:\program files (x86)\kodak\kodak software updater\7288971\program\backweb-7288971.exe] => (Allow) C:\program files (x86)\kodak\kodak software updater\7288971\program\backweb-7288971.exe
FirewallRules: [{90527EDA-AF7C-4653-B49F-8B373B5B5C8D}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{F0D8473E-D4CF-45EB-9DE4-F3A4AEADECB0}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{C4B03820-B191-4570-BAB1-5224B7D68080}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{2293E7A0-A95F-4A10-B01D-DD0CD4C9D859}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{3763F255-167E-490F-8F7F-3A8C81AC8CBC}] => (Allow) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{52F88968-BE82-4D76-A1AE-4B944E4CF012}] => (Allow) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{88C3466D-90A5-4AA4-952A-262ADC74B11B}C:\users\*****\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\*****\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{2606A728-1FB0-4A34-9F0B-09227F10AD85}C:\users\*****\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\*****\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{E3F33546-C39B-4A46-BD14-613CBA205C09}C:\program files (x86)\calibre2\calibre.exe] => (Allow) C:\program files (x86)\calibre2\calibre.exe
FirewallRules: [UDP Query User{DCF29C39-CA25-442E-AA4D-4BD3B04A5A0A}C:\program files (x86)\calibre2\calibre.exe] => (Allow) C:\program files (x86)\calibre2\calibre.exe
FirewallRules: [{3804ADB9-6301-48F4-AEC2-7F0870A6E67E}] => (Allow) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer.exe
FirewallRules: [{FBA8B31C-5CE7-418C-AF13-298F5DA1FEB6}] => (Allow) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer.exe
FirewallRules: [{04E7121C-FF06-46D0-8071-056C3E23CD94}] => (Allow) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
FirewallRules: [{2DFA7589-CE9C-4005-8746-7EE902CBA7AA}] => (Allow) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
FirewallRules: [TCP Query User{776CB37A-43A1-4347-8EBB-5CF04D1BDD34}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{8F70BB71-916B-46AC-9AC5-6B2C0EF03FC0}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{77DF3854-B869-458C-AD40-07FE9EF60725}] => (Allow) C:\Windows\twain_32\Samsung\SCX3400\SCNSearch\USDAgent.exe
FirewallRules: [{A0339C7C-EBC8-4CFC-880A-47C57F7732B3}] => (Allow) C:\Windows\twain_32\Samsung\SCX3400\SCNSearch\USDAgent.exe
FirewallRules: [{61A0892A-BE02-4A5B-A0C0-57D17F9F7025}] => (Allow) C:\Program Files (x86)\Samsung\Network PC Fax\drv\NetFaxMon64.exe
FirewallRules: [{1980A69C-04EA-45CE-A576-5D89849CF159}] => (Allow) C:\Program Files (x86)\Samsung\Network PC Fax\drv\NetFaxMon.exe
FirewallRules: [{63BD7AC1-5342-4701-B08F-7D9C43413382}] => (Allow) C:\Windows\system32\spool\drivers\x64\3\NetFaxMon64.exe
FirewallRules: [{32FD7549-E9FE-46F7-A7CA-3DDC4CC793FA}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDC.exe
FirewallRules: [{CC78F39B-D169-4B86-B8C0-F6F83395A31D}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDC.exe
FirewallRules: [{3388EDB2-3338-4BFA-AA52-B10ED46286B1}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
FirewallRules: [{C438A0B4-DC73-4E43-A3F4-1ACBF23F5485}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
FirewallRules: [{64F241C0-B40B-4DA3-9AC3-03076AEACA19}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\IDS.Application.exe
FirewallRules: [{43F337A4-3903-42FB-BAEE-985CBB501622}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\IDS.Application.exe
FirewallRules: [{80909DDB-A277-4C4F-9C2C-90BA110A63C8}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\OrderSupplies.exe
FirewallRules: [{D0A31146-2461-457A-AC06-A0024ED457D0}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\OrderSupplies.exe
FirewallRules: [{ED69C908-EA6F-4F9F-AF6B-0C30EDD948B1}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\IDSAlert.exe
FirewallRules: [{714F01DF-D630-4BC5-B3B1-ED7FCC34B62A}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\IDSAlert.exe
FirewallRules: [{345EC3BC-7F59-4DB0-927E-B41D01556950}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\uninstall.exe
FirewallRules: [{30EC23EB-445A-4E4E-9E46-05EABED8CDD5}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\uninstall.exe
FirewallRules: [{0A920FBB-E451-407C-9BC9-20BBC75E68A2}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\CDAS2PC.exe
FirewallRules: [{B30C5670-000D-4E4C-8C9B-6B36B23B068D}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\CDAS2PC.exe
FirewallRules: [{313DDBEF-C9D5-4F51-8F3C-766EB69ED034}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\ScanProcess.exe
FirewallRules: [{0786B060-16E0-4F41-9313-D886BF76F0A4}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\ScanProcess.exe
FirewallRules: [{A68D50E3-4E39-4E8C-AA05-77D5178EF131}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\Scan2PCNotify.exe
FirewallRules: [{68220900-C513-4D1D-A91F-F1F903B57206}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\Scan2PCNotify.exe
FirewallRules: [{C0553F86-07DB-488F-A937-DE0C37A3A018}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{B7DD0B31-EFD4-4C54-A553-CA660928EF83}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{EEBCC923-E621-4D26-B3F1-4CD4E054AB06}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{18A99382-FC72-4272-8015-301530FC7EFC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{8360ADFF-A9A3-4603-B4AB-830CBF75B96F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{156166F4-1E29-4520-8E6E-97BC65B61426}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{77FFDAED-86E4-47E2-B71C-3C3ADDBAA2C8}C:\program files (x86)\samsung\easy printer manager\ids.application.exe] => (Block) C:\program files (x86)\samsung\easy printer manager\ids.application.exe
FirewallRules: [UDP Query User{E265EE1D-148E-47CE-A58A-7DA715B4980B}C:\program files (x86)\samsung\easy printer manager\ids.application.exe] => (Block) C:\program files (x86)\samsung\easy printer manager\ids.application.exe
FirewallRules: [{71796ADA-6F13-4511-9F66-D1448B4995B7}] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{7295BDDD-C98F-4BF4-90F4-A207E119A610}] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{0046C183-1A77-4467-B7AC-B9071526D89B}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{51BF0347-5CD0-4A8B-AB97-59CD546AD925}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F62012D1-5A28-4598-B0E1-CA1B5E6F8DE7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{B5917166-018B-472D-83B1-7845FB86B343}C:\program files (x86)\calibre2\calibre.exe] => (Block) C:\program files (x86)\calibre2\calibre.exe
FirewallRules: [UDP Query User{EC127856-819D-4E48-A2DC-E3D791E7652D}C:\program files (x86)\calibre2\calibre.exe] => (Block) C:\program files (x86)\calibre2\calibre.exe
FirewallRules: [{900312FD-5B26-41DE-8744-F8DE37E6250C}] => (Allow) C:\Users\*****\AppData\Roaming\Resilio Sync\Resilio Sync.exe
FirewallRules: [{59511564-A151-4671-8E08-55DFF6C18C4B}] => (Allow) C:\Users\*****\AppData\Roaming\Resilio Sync\Resilio Sync.exe
FirewallRules: [{E6ACFC6A-B517-4316-8AD0-1C71233808CF}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Wiederherstellungspunkte =========================

20-11-2017 23:20:58 Windows Update
25-11-2017 14:46:44 JRT Pre-Junkware Removal
28-11-2017 10:59:09 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: USB Bluetooth Driver (V2.1+EDR)
Description: USB Bluetooth Driver (V2.1+EDR)
Class Guid: {7240100f-6512-4548-8418-9ebb5c6a1a94}
Manufacturer: Toshiba
Service: tosrfusb
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/03/2017 05:48:50 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (NvStreamUserAgent restarted too many times in a short period. Aborting. [0]).

Error: (12/03/2017 11:31:34 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "D:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (12/02/2017 11:24:20 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "D:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (12/01/2017 08:53:57 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "D:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (11/30/2017 09:11:01 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "D:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (11/29/2017 10:26:08 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "D:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (11/28/2017 08:57:27 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "D:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (11/27/2017 09:11:46 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "D:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (11/26/2017 06:00:03 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "D:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (11/25/2017 06:00:04 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "D:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"


Systemfehler:
=============
Error: (12/04/2017 06:54:34 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst LanmanServer erreicht.

Error: (12/04/2017 10:47:55 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535

Error: (12/04/2017 10:47:55 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140993535

Error: (12/04/2017 10:47:55 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535

Error: (12/04/2017 10:47:55 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140993535

Error: (12/04/2017 10:47:55 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: Die Peer Name Resolution-Protokoll-Cloud wurde nicht gestartet. Fehler bei Standardidentität. Fehlercode: 0x80630801.

Error: (12/04/2017 10:47:55 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: Die Peer Name Resolution-Protokoll-Cloud wurde nicht gestartet. Fehler bei Standardidentität. Fehlercode: 0x80630801.

Error: (12/04/2017 10:47:44 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140993535

Error: (12/04/2017 10:47:44 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535

Error: (12/04/2017 10:47:44 AM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: Die Peer Name Resolution-Protokoll-Cloud wurde nicht gestartet. Fehler bei Standardidentität. Fehlercode: 0x80630801.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7 CPU Q 820 @ 1.73GHz
Prozentuale Nutzung des RAM: 49%
Installierter physikalischer RAM: 8123.44 MB
Verfügbarer physikalischer RAM: 4125.2 MB
Summe virtueller Speicher: 20305.62 MB
Verfügbarer virtueller Speicher: 15949.16 MB

==================== Laufwerke ================================

Drive c: (System) (Fixed) (Total:463.75 GB) (Free:61.77 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 27987793)
Partition 1: (Active) - (Size=2 GB) - (Type=27)
Partition 2: (Not Active) - (Size=463.8 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

cosinus · 05.12.2017, 10:33

Logs von Malwarebytes?

trude · 05.12.2017, 10:34

Code:

ATTFilter

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 05.12.17
Scan-Zeit: 02:58
Protokolldatei: c229cf2c-d95f-11e7-9106-00ffc823c733.json
Administrator: Ja

-Softwaredaten-
Version: 3.3.1.2183
Komponentenversion: 1.0.236
Version des Aktualisierungspakets: 1.0.3410
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: System

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 330808
Erkannte Bedrohungen: 2
In die Quarantäne verschobene Bedrohungen: 0
(keine bösartigen Elemente erkannt)
Abgelaufene Zeit: 7 Std., 0 Min., 24 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 2
PUP.Optional.Trovigo, C:\USERS\TRUDE HERBERT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Keine Aktion durch Benutzer, [14610], [455258],1.0.3410
PUP.Optional.Conduit, C:\USERS\TRUDE HERBERT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Keine Aktion durch Benutzer, [518], [454832],1.0.3410

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)


(end)

cosinus · 05.12.2017, 10:36

Lesestoff:
Google Chrome

Offensichtlich nutzt du den Browser Chrome von Google. Ich muss von der Verwendung dieses Browsers aus Datenschutzgründen dringend abraten.

Deinstalliere Google Chrome und verwende stattdessen Mozilla Firefox.

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

trude · 05.12.2017, 15:31

Code:

ATTFilter

Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 7 Professional x64 
Ran by **** (Administrator) on 25.11.2017 at 14:46:37,53
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 30 

Successfully deleted: C:\ProgramData\1478006194.bdinstall.bin (File) 
Successfully deleted: C:\ProgramData\nico mak computing (Folder) 
Successfully deleted: C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl (Folder) 
Successfully deleted: C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aaaaojmikegpiepcfdkkjaplodkpfmlo (Folder) 
Successfully deleted: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uninstall.lnk (Shortcut) 
Successfully deleted: C:\Users\****\AppData\Roaming\nico mak computing (Folder) 
Successfully deleted: C:\Users\****\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\****\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\****\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7921451Z (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\****\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ESABKKT1 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\****\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\****\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GXQJS49E (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\****\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\****\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MI5AA6HE (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\****\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SJ2D2VW5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\****\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TGDVQMXW (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\****\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TNR6FJPY (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\****\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZMV0NSSW (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7921451Z (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ESABKKT1 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GXQJS49E (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MI5AA6HE (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SJ2D2VW5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TGDVQMXW (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TNR6FJPY (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZMV0NSSW (Temporary Internet Files Folder) 



Registry: 2 

Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} (Registry Key)
Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 25.11.2017 at 14:54:42,61
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

erneuter scan mit adwcleaner:
# AdwCleaner 7.0.4.0 - Logfile created on Sat Nov 25 14:26:46 2017
# Updated on 2017/27/10 by Malwarebytes 
# Database: 11-23-2017.1
# Running on Windows 7 Professional (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Interface\{94952EC4-DB66-3F32-BE4C-F0BB875EA98E}


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************

C:/AdwCleaner/AdwCleaner[C0].txt - [11068 B] - [2017/11/25 13:19:50]
C:/AdwCleaner/AdwCleaner[S0].txt - [94983 B] - [2014/10/15 17:14:10]
C:/AdwCleaner/AdwCleaner[S1].txt - [12753 B] - [2017/11/24 17:29:15]


########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt ##########

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.10.3.1001
www.malwarebytes.org

Database version:
  main:    v2017.12.05.08
  rootkit: v2017.10.14.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18837
Trude Herbert :: TRUDEHERBERT-PC [administrator]

05.12.2017 14:39:32
mbar-log-2017-12-05 (14-39-32).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 280688
Time elapsed: 47 minute(s), 36 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

cosinus · 05.12.2017, 15:49

adwCleaner bitte nochmal richtig machen:

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

adwCleaner v7.x

Downloade Dir bitte

AdwCleaner auf Deinen Desktop (Bebilderte Anleitung).

Schließe alle offenen Programme und Browser.
Starte die adwcleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Werkzeuge > Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- Tracing Schlüssel
- Prefetch Dateien
- Proxy
- Winsock
- IE Richtlinien
- Chrome Richtlinien
Bestätige die Auswahl mit Ok.
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist. Am Ende des Suchlaufs öffnet sich automatisch eine Logdatei. Schließe diese.
Klicke nun auf Löschen (auch dann wenn AdwCleaner sagt, dass nichts gefunden wurde) und bestätige auftretende Hinweise mit Ok.
Klicke am Ende der Bereinigung auf Jetzt neu starten. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

trude · 05.12.2017, 17:51

Code:

ATTFilter

# AdwCleaner 7.0.5.0 - Logfile created on Tue Dec 05 16:39:21 2017
# Updated on 2017/29/11 by Malwarebytes 
# Running on Windows 7 Professional (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

No malicious folders deleted.

***** [ Files ] *****

No malicious files deleted.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

No malicious registry entries deleted.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries deleted.

*************************

::Tracing keys deleted
::Winsock settings cleared
::Prefetch files deleted
::Proxy settings cleared
::IE policies deleted
::Chrome policies deleted
::Additional Actions: 0



*************************

C:/AdwCleaner/AdwCleaner[S0].txt - [952 B] - [2017/12/5 16:38:4]


########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########

Ich habe alles gemacht:
unter downloads adwCleaner gelöscht
Virenscanner: sowohl bei Malwarebytes als auch bitdefender alle Häkchen auf "Aus"- eine andere Deaktivierungsmöglichkeit konnte ich je nicht erkennen!?
Gruß Tr

cosinus · 06.12.2017, 09:33

Ich brauche neue FRST-Logs . Haken setzen bei addition.txt dann auf Untersuchen klicken.

trude · 06.12.2017, 11:02

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 30-11-2017
durchgeführt von Trude Herbert (Administrator) auf TRUDEHERBERT-PC (06-12-2017 10:52:16)
Gestartet von C:\Users\Trude Herbert\Downloads
Geladene Profile: Trude Herbert & UpdatusUser (Verfügbare Profile: Trude Herbert & UpdatusUser)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\vsserv.exe
(AuthenTec, Inc.) C:\Program Files\Fingerprint Sensor\ATService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\System32\nvwmi64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\System32\nvwmi64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe
() C:\Program Files (x86)\Common Files\DeviceHelper\DeviceManager.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(O2Micro International) C:\Windows\SysWOW64\o2flash.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\PSUtility\PSUService.exe
(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe
() C:\Windows\SysWOW64\ScsiAccess.EXE
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
(Fujitsu Technology Solutions) C:\Program Files (x86)\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McTkSchedulerService.exe
() C:\Program Files (x86)\Mobile Partner Manager\AssistantServices.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\updatesrv.exe
(CSR, plc) C:\Program Files\CSR\Bluetooth Feature Pack 5.0\VFPRadioSupportService.exe
() C:\Program Files\Fujitsu\WirelessSelector\WSUService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Fujitsu Technology Solutions) C:\Program Files (x86)\Fujitsu\DeskViewBasic\DeskViewBasicService.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.SmartMonitor.exe
(CSR, plc) C:\Program Files\CSR\Bluetooth Feature Pack 5.0\CSRBthFtpServer.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\PSUtility\TrayManager.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\bdagent.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxTray64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Dropbox, Inc.) C:\Users\Trude Herbert\AppData\Roaming\Dropbox\bin\Dropbox.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Dropbox, Inc.) C:\Users\Trude Herbert\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Dropbox, Inc.) C:\Users\Trude Herbert\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\seccenter.exe
(Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\bdwtxag.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [CSRFTP] => C:\Program Files\CSR\Bluetooth Feature Pack 5.0\CSRBthFtpServer.exe [463216 2009-10-12] (CSR, plc)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [PSUTility] => C:\Program Files\Fujitsu\PSUtility\TrayManager.exe [188264 2009-07-30] (FUJITSU LIMITED)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2017\bdagent.exe [322312 2017-11-14] (Bitdefender)
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\Run: [Adobe Reader Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe [886768 2017-11-04] (Adobe Systems Incorporated)
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {01dec9f4-5a65-11e1-8872-00231445c1b4} - D:\AutoRun.exe
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {10420407-3172-11e1-b630-00231445c1b4} - D:\AutoRun.exe
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {317b2f4e-59a2-11e1-9f33-00231445c1b4} - D:\AutoRun.exe
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {57673dfa-be00-11e0-9d7c-00231445c1b4} - D:\AutoRun.exe
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {57673e16-be00-11e0-9d7c-00231445c1b4} - D:\AutoRun.exe
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {6aafc7b9-9892-11e2-abfb-00231445c1b4} - D:\AutoRun.exe
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {6ec8c0f9-6b2f-11e0-beb8-00231445c1b4} - D:\autorun.exe
HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\MountPoints2: {e777e9c9-72c4-11e2-abab-00231445c1b4} - D:\AutoRun.exe
Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Network PC Fax.lnk [2015-05-06]
ShortcutTarget: Samsung Network PC Fax.lnk -> C:\Windows\System32\spool\drivers\x64\3\NetFaxTray64.exe (Samsung Electronics Co., Ltd.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup\LaunchCenter.lnk [2009-03-11]
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files (x86)\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup\LaunchCenter.lnk [2009-03-11]
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files (x86)\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions)
Startup: C:\Users\Trude Herbert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2017-11-16]
ShortcutTarget: Dropbox.lnk -> C:\Users\Trude Herbert\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup\LaunchCenter.lnk [2009-03-11]
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files (x86)\Fujitsu\LaunchCenter\LaunchCenter.exe (Fujitsu Technology Solutions)
BootExecute: wsusnative64autocheck autochk * 

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: 0.0.0.1	mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{1A2A8147-FE8B-4889-80F7-4F9EFE2B2D82}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{FFED7905-18A6-421F-8705-531317AA3102}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-04-26] (Intel Security)
BHO: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2017\pmbxie.dll [2017-11-14] (Bitdefender)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.)
BHO-x32: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-04-26] (Intel Security)
BHO-x32: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2017\Antispam32\pmbxie.dll [2017-11-14] (Bitdefender)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)
Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2017\pmbxie.dll [2017-11-14] (Bitdefender)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.)
Toolbar: HKLM - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-04-26] (Intel Security)
Toolbar: HKLM-x32 - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2017\Antispam32\pmbxie.dll [2017-11-14] (Bitdefender)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)
Toolbar: HKLM-x32 - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-04-26] (Intel Security)
Toolbar: HKU\S-1-5-21-2773882716-4014048892-2402612297-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: cxxowm5j.default-1478595552035-1511909166602
FF ProfilePath: C:\Users\Trude Herbert\AppData\Roaming\TomTom\HOME\Profiles\vbaie3xl.default [2017-10-15]
FF ProfilePath: C:\Users\Trude Herbert\AppData\Roaming\Mozilla\Firefox\Profiles\cxxowm5j.default-1478595552035-1511909166602 [2017-12-06]
FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\\bdwteff
FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender 2017\\bdwteff [2017-09-14]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext [2016-10-19] [Lagacy] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\\bdwteff
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext
FF HKU\S-1-5-21-2773882716-4014048892-2402612297-1001\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Trude Herbert\AppData\Roaming\Mozilla\Firefox\Profiles\1vwla5d5.default\extensions\cliqz@cliqz.com => nicht gefunden
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_187.dll [2017-11-14] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_187.dll [2017-11-14] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [Keine Datei]
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\ZoomBrowser EX\Program\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-14] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-14] (NVIDIA Corporation)
FF Plugin-x32: @pack.google.com/Google Updater;version=14 -> C:\Program Files (x86)\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll [2011-09-12] (Google)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Trude Herbert\AppData\Local\Google\Chrome\User Data\Default [2017-12-05]
CHR Extension: (YouTube) - C:\Users\Trude Herbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-04]
CHR Extension: (Google-Suche) - C:\Users\Trude Herbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-04]
CHR Extension: (Avira Browserschutz) - C:\Users\Trude Herbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-02-04]
CHR Extension: (Bitdefender Wallet) - C:\Users\Trude Herbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\gannpgaobkkhmpomoijebaigcapoeebl [2017-11-25]
CHR Extension: (Iminent Toolbar) - C:\Users\Trude Herbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcemhggbahmlmhgnbpbbdaklcojhbecn [2013-03-14] [UpdateUrl: hxxp://vz.iminent.com/vz/2FE796A5-06CC-48F6-8C8F-BDCC0ABB0D92/100/update.xml] <==== ACHTUNG
CHR Extension: (Iminent) - C:\Users\Trude Herbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl [2017-11-25]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Trude Herbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-11-25]
CHR Extension: (Google Mail) - C:\Users\Trude Herbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-04]
CHR Extension: (Chrome Media Router) - C:\Users\Trude Herbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-11-25]
CHR Profile: C:\Users\Trude Herbert\AppData\Local\Google\Chrome\User Data\System Profile [2017-11-30]
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2090152 2017-09-14] (Bitdefender)
R2 DeskViewBasicService; C:\Program Files (x86)\Fujitsu\DeskViewBasic\DeskViewBasicService.exe [34816 2009-08-19] (Fujitsu Technology Solutions) [Datei ist nicht signiert]
R2 DeviceManager; C:\Program Files (x86)\Common Files\DeviceHelper\DeviceManager.exe [40960 2009-11-17] () [Datei ist nicht signiert]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-23] (NVIDIA Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.561\McCHSvc.exe [404368 2017-05-16] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-06-12] ()
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [50688 2012-02-08] (Hewlett-Packard) [Datei ist nicht signiert]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-05-23] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23006864 2015-05-23] (NVIDIA Corporation)
R2 NVWMI; C:\Windows\system32\nvwmi64.exe [2708936 2016-08-16] ()
R2 O2Flash; C:\Windows\SysWOW64\o2flash.exe [65536 2007-02-12] (O2Micro International) [Datei ist nicht signiert]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [66048 2012-02-08] (Hewlett-Packard) [Datei ist nicht signiert]
R2 PowerSavingUtilityService; C:\Program Files\Fujitsu\PSUtility\PSUService.exe [63336 2009-07-30] (FUJITSU LIMITED)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1254736 2017-04-11] (Bitdefender)
R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [801472 2015-03-10] (Samsung Electronics Co., Ltd.)
R2 ScsiAccess; C:\Windows\SysWOW64\ScsiAccess.EXE [181312 2003-02-04] () [Datei ist nicht signiert]
R2 TestHandler; C:\Program Files (x86)\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [341264 2009-02-19] (Fujitsu Technology Solutions)
R2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [996736 2017-04-18] (McAfee, Inc.)
R2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [16160 2017-04-18] (McAfee, Inc.)
S3 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [86776 2017-04-18] (McAfee, Inc.)
R2 UI Assistant Service; C:\Program Files (x86)\Mobile Partner Manager\AssistantServices.exe [252784 2010-07-16] ()
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2017\updatesrv.exe [218416 2017-11-14] (Bitdefender)
R2 VFPRadioSupportService; C:\Program Files\CSR\Bluetooth Feature Pack 5.0\VFPRadioSupportService.exe [145792 2009-10-12] (CSR, plc)
R2 vsserv; C:\Program Files\Bitdefender\Bitdefender 2017\vsserv.exe [1230880 2017-11-14] (Bitdefender)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WirelessSelectorService; C:\Program Files\Fujitsu\WirelessSelector\WSUService.exe [62312 2009-07-21] ()
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3831200 2015-06-12] (Intel® Corporation)
S2 InstallerService; C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [36096 2013-05-21] (Advanced Micro Devices, Inc.)
R1 atc; C:\Windows\System32\DRIVERS\atc.sys [1019880 2017-10-02] (BitDefender S.R.L. Bucharest, ROMANIA)
R3 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1763744 2017-10-02] (BitDefender)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-10-09] (AVG Technologies)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [124424 2017-07-26] (BitDefender LLC)
R2 bdprivmon; C:\Windows\System32\DRIVERS\bdprivmon.sys [47376 2017-11-24] (© Bitdefender SRL)
R1 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [87912 2015-12-04] (BitDefender)
R1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77432 2017-11-01] ()
S3 ewsercd; C:\Windows\System32\DRIVERS\ewsercd.sys [112896 2010-03-18] (Huawei Technologies Co., Ltd.)
R0 FJGSDisk; C:\Windows\System32\DRIVERS\FJGSDisk.sys [14696 2010-09-08] (FUJITSU LIMITED)
R3 FUJ02B1; C:\Windows\System32\DRIVERS\FUJ02B1.sys [59152 2016-05-11] (FUJITSU LIMITED)
R3 FUJ02E3; C:\Windows\System32\DRIVERS\FUJ02E3.sys [7296 2006-11-01] (FUJITSU LIMITED)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [187688 2017-09-14] (BitDefender LLC)
R1 HBtnKey; C:\Windows\System32\DRIVERS\wstbtndb.sys [9856 2007-09-14] (Lenovo)
R0 ignis; C:\Windows\System32\DRIVERS\ignis.sys [362664 2017-10-02] (Bitdefender)
S3 jrdusbser; C:\Windows\System32\DRIVERS\jrdusbser.sys [119680 2010-04-07] (Olivetti)
S3 Jukebox3_x64; C:\Windows\System32\DRIVERS\ctpdusbx.sys [27264 2006-01-19] (Creative Technology Ltd.)
S3 LHidFilt; C:\Windows\System32\DRIVERS\LHidFilt.Sys [54800 2008-02-29] (Logicool, Inc.)
S3 LMouFilt; C:\Windows\System32\DRIVERS\LMouFilt.Sys [57360 2008-02-29] (Logicool, Inc.)
S3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [41488 2008-02-29] (Logicool, Inc.)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [193464 2017-12-05] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [110016 2017-12-06] (Malwarebytes)
R3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [46008 2017-12-06] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253880 2017-11-27] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [84256 2017-12-06] (Malwarebytes)
R3 NETwNs64; C:\Windows\System32\DRIVERS\NETwsw01.sys [11534096 2015-05-04] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2015-04-03] (NVIDIA Corporation)
R3 O2MDRDR; C:\Windows\System32\DRIVERS\o2mdx64.sys [57576 2010-05-10] (O2Micro )
R3 O2SCBUS; C:\Windows\System32\DRIVERS\ozscrx64.sys [107808 2009-05-15] (O2Micro)
S3 qcfiltersra2k; C:\Windows\System32\DRIVERS\qcfiltersra2k.sys [6400 2009-10-01] (QUALCOMM Incorporated)
S3 qcusbnetsra2k; C:\Windows\System32\DRIVERS\qcusbnetsra2k.sys [243712 2010-04-26] (QUALCOMM Incorporated)
R3 qcusbsersra2k; C:\Windows\System32\DRIVERS\qcusbsersra2k.sys [121600 2010-04-26] (QUALCOMM Incorporated)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [44344 2012-11-23] (Synaptics Incorporated)
R3 ST50220; C:\Windows\System32\Drivers\ST50220.sys [51248 2008-12-02] (Sonix)
R2 trufos; C:\Windows\System32\DRIVERS\trufos.sys [439576 2017-09-14] (BitDefender S.R.L.)
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)
S3 cpuz130; \??\C:\Users\TRUDEH~1\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X] <==== ACHTUNG
S3 DrvAgent64; \??\C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]
S3 SNP2UVC; system32\DRIVERS\snp2uvc.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-12-05 17:54 - 2017-12-05 17:54 - 000193464 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2017-12-05 17:53 - 2017-12-06 10:26 - 000084256 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-12-05 17:53 - 2017-12-06 10:24 - 000110016 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-12-05 17:34 - 2017-12-05 17:39 - 000000000 ____D C:\AdwCleaner
2017-12-05 17:33 - 2017-12-05 17:33 - 008187336 _____ (Malwarebytes) C:\Users\Trude Herbert\Downloads\adwcleaner_7.0.5.0.exe
2017-12-05 14:39 - 2017-12-05 14:39 - 000255928 _____ (Malwarebytes) C:\Windows\system32\Drivers\75466216.sys
2017-12-05 13:44 - 2017-12-05 13:44 - 000255928 _____ (Malwarebytes) C:\Windows\system32\Drivers\71B631C9.sys
2017-12-05 13:41 - 2017-12-05 13:41 - 000255928 _____ (Malwarebytes) C:\Windows\system32\Drivers\752651B1.sys
2017-12-05 11:19 - 2017-12-05 11:19 - 014178840 _____ (Malwarebytes Corp.) C:\Users\Trude Herbert\Downloads\mbar-1.10.3.1001(1).exe
2017-12-05 11:17 - 2017-12-05 11:17 - 000255928 _____ (Malwarebytes) C:\Windows\system32\Drivers\3511E477.sys
2017-12-05 11:09 - 2017-12-05 15:28 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-12-05 11:08 - 2017-12-05 11:08 - 014178840 _____ (Malwarebytes Corp.) C:\Users\Trude Herbert\Downloads\mbar-1.10.3.1001.exe
2017-12-04 20:48 - 2017-12-05 14:35 - 000085913 _____ C:\Users\Trude Herbert\Downloads\Addition.txt
2017-12-04 20:46 - 2017-12-06 10:54 - 000026673 _____ C:\Users\Trude Herbert\Downloads\FRST.txt
2017-12-04 20:45 - 2017-12-06 10:52 - 000000000 ____D C:\FRST
2017-12-04 20:45 - 2017-12-04 20:45 - 002391552 _____ (Farbar) C:\Users\Trude Herbert\Downloads\FRST64.exe
2017-12-04 11:34 - 2017-12-04 11:35 - 000005018 _____ C:\Users\Trude Herbert\Downloads\plain label.pdf
2017-11-30 17:42 - 2017-11-30 17:42 - 001533960 _____ (CHIP Digital GmbH) C:\Users\Trude Herbert\Downloads\LicenseCrawler - CHIP-Installer.exe
2017-11-27 09:42 - 2017-11-27 09:42 - 078346672 _____ (Malwarebytes ) C:\Users\Trude Herbert\Downloads\mb3-setup-consumer-3.3.1.2183(2).exe
2017-11-26 13:18 - 2017-12-06 10:23 - 000046008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-11-26 13:18 - 2017-11-27 09:57 - 000002030 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-11-26 13:18 - 2017-11-27 09:01 - 000253880 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2017-11-26 13:18 - 2017-11-26 13:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-11-26 13:18 - 2017-11-01 08:54 - 000077432 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-11-26 13:17 - 2017-12-05 11:18 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-11-26 13:17 - 2017-11-26 13:17 - 078346672 _____ (Malwarebytes ) C:\Users\Trude Herbert\Downloads\mb3-setup-consumer-3.3.1.2183(1).exe
2017-11-26 13:17 - 2017-11-26 13:17 - 000000000 ____D C:\Program Files\Malwarebytes
2017-11-26 13:15 - 2017-11-26 13:16 - 078346672 _____ (Malwarebytes ) C:\Users\Trude Herbert\Downloads\mb3-setup-consumer-3.3.1.2183.exe
2017-11-25 14:46 - 2017-11-25 14:46 - 001790024 _____ (Malwarebytes) C:\Users\Trude Herbert\Downloads\JRT.exe
2017-11-24 11:36 - 2017-11-24 11:36 - 000040359 _____ C:\Users\Trude Herbert\Downloads\Randale_f-korr.odt
2017-11-24 11:01 - 2017-11-24 11:01 - 000047376 _____ (© Bitdefender SRL) C:\Windows\system32\Drivers\bdprivmon.sys
2017-11-16 23:15 - 2017-11-16 23:16 - 000000000 ____D C:\Program Files (x86)\GUM18C2.tmp
2017-11-16 10:10 - 2017-11-16 10:10 - 000000000 ____D C:\Users\Trude Herbert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-11-15 09:51 - 2017-10-16 23:34 - 003222528 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-11-15 09:51 - 2017-10-14 09:38 - 025731584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-11-15 09:51 - 2017-10-14 09:13 - 002903552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-11-15 09:51 - 2017-10-14 09:09 - 005979648 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-11-15 09:51 - 2017-10-14 08:30 - 015266816 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-11-15 09:51 - 2017-10-14 08:21 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-11-15 09:51 - 2017-10-14 08:14 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-11-15 09:51 - 2017-10-14 08:09 - 001544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-11-15 09:51 - 2017-10-14 07:50 - 002293760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-11-15 09:51 - 2017-10-14 07:33 - 004542464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-11-15 09:51 - 2017-10-14 07:28 - 013680128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-11-15 09:51 - 2017-10-14 07:10 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-11-15 09:51 - 2017-10-12 01:55 - 014635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2017-11-15 09:50 - 2017-10-18 08:31 - 000395976 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-11-15 09:50 - 2017-10-18 07:45 - 000347336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-11-15 09:50 - 2017-10-18 03:06 - 000344064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2017-11-15 09:50 - 2017-10-18 03:06 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2017-11-15 09:50 - 2017-10-18 03:06 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2017-11-15 09:50 - 2017-10-18 03:06 - 000056320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2017-11-15 09:50 - 2017-10-18 03:06 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2017-11-15 09:50 - 2017-10-18 03:06 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2017-11-15 09:50 - 2017-10-18 03:06 - 000007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2017-11-15 09:50 - 2017-10-17 00:07 - 001680616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-11-15 09:50 - 2017-10-16 22:55 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2017-11-15 09:50 - 2017-10-14 09:23 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-11-15 09:50 - 2017-10-14 09:23 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-11-15 09:50 - 2017-10-14 09:12 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-11-15 09:50 - 2017-10-14 09:11 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-11-15 09:50 - 2017-10-14 09:11 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-11-15 09:50 - 2017-10-14 09:11 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-11-15 09:50 - 2017-10-14 09:11 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-11-15 09:50 - 2017-10-14 09:05 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-11-15 09:50 - 2017-10-14 09:04 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-11-15 09:50 - 2017-10-14 09:02 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-11-15 09:50 - 2017-10-14 09:01 - 000816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-11-15 09:50 - 2017-10-14 09:01 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-11-15 09:50 - 2017-10-14 09:01 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-11-15 09:50 - 2017-10-14 09:00 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-11-15 09:50 - 2017-10-14 08:55 - 000968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-11-15 09:50 - 2017-10-14 08:53 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-11-15 09:50 - 2017-10-14 08:47 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-11-15 09:50 - 2017-10-14 08:47 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-11-15 09:50 - 2017-10-14 08:46 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-11-15 09:50 - 2017-10-14 08:43 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-11-15 09:50 - 2017-10-14 08:43 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-11-15 09:50 - 2017-10-14 08:41 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-11-15 09:50 - 2017-10-14 08:40 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-11-15 09:50 - 2017-10-14 08:31 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-11-15 09:50 - 2017-10-14 08:30 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-11-15 09:50 - 2017-10-14 08:29 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-11-15 09:50 - 2017-10-14 08:28 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-11-15 09:50 - 2017-10-14 08:27 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-11-15 09:50 - 2017-10-14 08:03 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-11-15 09:50 - 2017-10-14 07:58 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-11-15 09:50 - 2017-10-14 07:53 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-11-15 09:50 - 2017-10-14 07:53 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-11-15 09:50 - 2017-10-14 07:52 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-11-15 09:50 - 2017-10-14 07:52 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-11-15 09:50 - 2017-10-14 07:51 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-11-15 09:50 - 2017-10-14 07:47 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-11-15 09:50 - 2017-10-14 07:47 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-11-15 09:50 - 2017-10-14 07:46 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-11-15 09:50 - 2017-10-14 07:45 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-11-15 09:50 - 2017-10-14 07:45 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-11-15 09:50 - 2017-10-14 07:45 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-11-15 09:50 - 2017-10-14 07:38 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-11-15 09:50 - 2017-10-14 07:35 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-11-15 09:50 - 2017-10-14 07:35 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-11-15 09:50 - 2017-10-14 07:34 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-11-15 09:50 - 2017-10-14 07:33 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-11-15 09:50 - 2017-10-14 07:32 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-11-15 09:50 - 2017-10-14 07:31 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-11-15 09:50 - 2017-10-14 07:30 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-11-15 09:50 - 2017-10-14 07:25 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-11-15 09:50 - 2017-10-14 07:24 - 000694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-11-15 09:50 - 2017-10-14 07:23 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-11-15 09:50 - 2017-10-14 07:23 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-11-15 09:50 - 2017-10-14 07:07 - 001314304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-11-15 09:50 - 2017-10-14 07:04 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-11-15 09:50 - 2017-10-12 01:58 - 000382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 012574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2017-11-15 09:50 - 2017-10-12 01:55 - 002319872 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 002222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 002058240 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2017-11-15 09:50 - 2017-10-12 01:55 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2017-11-15 09:50 - 2017-10-12 01:55 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2017-11-15 09:50 - 2017-10-12 01:40 - 000308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-11-15 09:50 - 2017-10-12 01:39 - 000591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-11-15 09:50 - 2017-10-12 01:38 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-11-15 09:50 - 2017-10-12 01:38 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-11-15 09:50 - 2017-10-12 01:37 - 012574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2017-11-15 09:50 - 2017-10-12 01:37 - 011410944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 001549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 001400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 001363968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2017-11-15 09:50 - 2017-10-12 01:37 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2017-11-15 09:50 - 2017-10-12 01:26 - 000427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-11-15 09:50 - 2017-10-12 01:26 - 000164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-11-15 09:50 - 2017-10-12 01:25 - 000086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2017-11-15 09:50 - 2017-10-12 01:25 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2017-11-15 09:50 - 2017-10-12 01:24 - 000008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2017-11-15 09:50 - 2017-10-12 01:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2017-11-15 09:50 - 2017-10-12 01:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2017-11-15 09:50 - 2017-10-12 01:20 - 000113152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2017-11-15 09:50 - 2017-10-12 01:16 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-11-15 09:49 - 2017-10-18 03:34 - 000134376 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2017-11-15 09:49 - 2017-10-18 03:30 - 000605184 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-11-15 09:49 - 2017-10-15 23:04 - 000407392 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2017-11-15 09:49 - 2017-10-04 14:04 - 002023936 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2017-11-15 09:49 - 2017-10-04 14:04 - 001570304 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-11-15 09:49 - 2017-10-04 14:04 - 000670208 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2017-11-15 09:49 - 2017-10-04 14:04 - 000603648 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-11-15 09:49 - 2017-10-04 14:04 - 000370688 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-11-15 09:49 - 2017-10-04 14:04 - 000241664 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2017-11-15 09:49 - 2017-10-04 14:04 - 000181760 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-12-06 10:42 - 2009-07-14 05:45 - 000021680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-12-06 10:42 - 2009-07-14 05:45 - 000021680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-12-06 10:26 - 2010-09-08 08:44 - 000003990 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{E1C67B7B-AD2F-4AAF-8D04-12CBA86209E5}
2017-12-06 10:25 - 2016-11-18 10:58 - 000000000 ____D C:\Users\Trude Herbert\AppData\LocalLow\Mozilla
2017-12-06 10:22 - 2015-11-26 13:58 - 000065536 _____ C:\Windows\system32\Ikeext.etl
2017-12-06 10:22 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-12-06 10:21 - 2010-09-08 17:00 - 000000000 ____D C:\ProgramData\NVIDIA
2017-12-06 00:32 - 2015-11-26 14:07 - 000713244 _____ C:\bdlog.txt
2017-12-06 00:09 - 2016-01-12 00:46 - 000001256 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2773882716-4014048892-2402612297-1001UA.job
2017-12-05 20:08 - 2016-01-12 00:46 - 000001204 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2773882716-4014048892-2402612297-1001Core.job
2017-12-05 14:38 - 2010-09-22 21:24 - 000000000 ____D C:\Users\Trude Herbert\Data
2017-12-05 13:28 - 2010-09-08 08:36 - 000001034 _____ C:\Windows\Tasks\Google Software Updater.job
2017-12-04 20:12 - 2009-08-10 21:20 - 000714474 _____ C:\Windows\system32\perfh007.dat
2017-12-04 20:12 - 2009-08-10 21:20 - 000154526 _____ C:\Windows\system32\perfc007.dat
2017-12-04 20:12 - 2009-07-14 06:13 - 001649664 _____ C:\Windows\system32\PerfStringBackup.INI
2017-12-04 20:12 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2017-12-03 01:27 - 2017-03-28 23:27 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-12-03 01:27 - 2012-05-05 10:08 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-12-02 02:26 - 2010-09-08 08:23 - 000000000 ____D C:\Users\Trude Herbert
2017-11-30 22:04 - 2015-12-09 18:59 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-11-29 16:10 - 2016-05-18 12:56 - 000000000 ____D C:\Program Files (x86)\Portrait Professional 8 Test
2017-11-28 09:30 - 2010-09-24 16:31 - 000000000 ____D C:\Users\Trude Herbert\AppData\Local\ElevatedDiagnostics
2017-11-27 21:52 - 2009-07-14 06:08 - 000032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-11-27 12:38 - 2014-11-16 02:39 - 000000000 ___RD C:\Users\Trude Herbert\Dropbox
2017-11-25 14:59 - 2010-09-08 08:44 - 000000000 ____D C:\Users\Trude Herbert\AppData\Local\Google
2017-11-17 11:18 - 2009-07-14 05:57 - 000001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-11-16 23:15 - 2010-09-08 09:03 - 000003542 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-11-16 23:15 - 2010-09-08 09:03 - 000003414 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-11-16 18:31 - 2014-11-16 02:36 - 000000000 ____D C:\Users\Trude Herbert\AppData\Roaming\Dropbox
2017-11-16 18:20 - 2012-10-22 13:21 - 000002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-11-16 18:08 - 2013-07-24 02:13 - 000000000 ____D C:\Windows\system32\MRT
2017-11-16 18:07 - 2017-10-11 23:03 - 127017032 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2017-11-16 18:07 - 2010-09-22 13:35 - 127017032 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-11-16 11:13 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\rescache
2017-11-16 09:34 - 2009-07-14 05:45 - 000415672 _____ C:\Windows\system32\FNTCACHE.DAT
2017-11-16 09:31 - 2014-12-11 04:26 - 000000000 ____D C:\Windows\system32\appraiser
2017-11-15 13:30 - 2015-11-26 13:40 - 000000000 ____D C:\Program Files\Bitdefender Agent
2017-11-15 09:46 - 2014-12-27 16:50 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-11-15 03:32 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\NDF
2017-11-15 03:12 - 2010-09-22 12:05 - 000000000 ____D C:\Users\Trude Herbert\AppData\Roaming\Mozilla
2017-11-14 21:45 - 2012-04-19 19:51 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-11-14 21:45 - 2012-04-19 19:51 - 000004366 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-11-14 21:45 - 2011-11-21 10:35 - 000000000 ____D C:\Windows\system32\Macromed
2017-11-14 21:45 - 2011-06-04 09:11 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-11-14 21:45 - 2010-09-08 08:46 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-11-08 23:41 - 2010-09-22 15:20 - 000000000 ____D C:\Users\Trude Herbert\Documents\Turbo Lister Backup

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-04-28 14:25 - 2016-04-28 14:35 - 001192656 _____ (Adobe Systems Incorporated) C:\Users\Trude Herbert\flashplayer21_xa_install.exe
2012-02-14 12:58 - 2017-09-28 18:39 - 000000157 _____ () C:\Users\Trude Herbert\AppData\Roaming\default.rss
2013-06-10 14:32 - 2013-06-10 14:32 - 000000000 _____ () C:\Users\Trude Herbert\AppData\Roaming\downloads.m3u
2014-10-11 14:52 - 2015-02-22 20:29 - 000141984 _____ () C:\Users\Trude Herbert\AppData\Local\ars.cache
2014-10-11 14:53 - 2015-02-22 20:30 - 000320039 _____ () C:\Users\Trude Herbert\AppData\Local\census.cache
2016-04-17 19:00 - 2016-04-17 19:00 - 000003584 _____ () C:\Users\Trude Herbert\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-10-11 14:12 - 2014-10-11 14:12 - 000000036 _____ () C:\Users\Trude Herbert\AppData\Local\housecall.guid.cache
2015-06-12 04:25 - 2016-02-03 19:24 - 000007609 _____ () C:\Users\Trude Herbert\AppData\Local\resmon.resmoncfg
2017-09-17 11:16 - 2017-09-17 11:16 - 000000000 _____ () C:\Users\Trude Herbert\AppData\Local\{B6544D82-3436-4391-B325-FABC58789C45}

Einige Dateien in TEMP:
====================
2016-02-11 22:04 - 2016-02-11 22:04 - 000736352 _____ (Oracle Corporation) C:\Users\Trude Herbert\AppData\Local\Temp\jre-8u73-windows-au.exe
2017-04-30 17:52 - 2017-04-30 17:52 - 007545931 _____ (MusicToMP3.org                                              ) C:\Users\Trude Herbert\AppData\Local\Temp\music-to-mp3.exe
2014-10-12 17:54 - 2014-10-12 17:54 - 000787968 _____ (SQLite Development Team) C:\Users\Trude Herbert\AppData\Local\Temp\sqlite3.dll
2017-01-02 14:32 - 2017-01-02 14:32 - 000000000 ____D () C:\Users\Trude Herbert\AppData\Local\Temp\SystemDiagnostics.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-11-29 03:55

==================== Ende von FRST.txt ============================

04.12.2017, 21:14	#5
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Windows 7 PUP.Optional.Trovigo + PUP.Optional.Conduit nicht zu beseitigen CODE-Tags sind nicht richtig gesetzt, korrigiere das bitte! Außerdem fehlen alle anderen Logs. __________________ Logfiles bitte immer in CODE-Tags posten

05.12.2017, 10:33	#8
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Windows 7 PUP.Optional.Trovigo + PUP.Optional.Conduit nicht zu beseitigen Logs von Malwarebytes? __________________ Logfiles bitte immer in CODE-Tags posten

06.12.2017, 09:33	#14
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Windows 7 PUP.Optional.Trovigo + PUP.Optional.Conduit nicht zu beseitigen Ich brauche neue FRST-Logs . Haken setzen bei addition.txt dann auf Untersuchen klicken. __________________ Logfiles bitte immer in CODE-Tags posten

Windows 7 PUP.Optional.Trovigo + PUP.Optional.Conduit nicht zu beseitigen

Plagegeister aller Art und deren Bekämpfung: Windows 7 PUP.Optional.Trovigo + PUP.Optional.Conduit nicht zu beseitigen