Laptop verdächtig langsam

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12.02.2018
durchgeführt von usrname (Administrator) auf USRNAME-PC (15-02-2018 12:47:09)
Gestartet von C:\Users\usrname\Desktop
Geladene Profile: usrname (Verfügbare Profile: usrname & standard)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Borland Software Corporation) D:\Programme\Borland\InterBase\bin\ibguard.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(f.lux Software LLC) C:\Users\usrname\AppData\Local\FluxSoftware\Flux\flux.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Spotify Ltd) C:\Users\usrname\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Borland Software Corporation) D:\Programme\Borland\InterBase\bin\ibserver.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
() L:\Notizblock\NotizblockP.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(Mozilla Corporation) D:\Programme\Thunderbird\thunderbird.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2885944 2012-09-20] (Synaptics Incorporated)
HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [177936 2012-02-17] (Intel Corporation)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-04-02] (Realtek Semiconductor)
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2012-02-10] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-04-09] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [60552 2011-09-20] (Sony Corporation)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [210432 2016-07-05] (Geek Software GmbH)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [98024 2018-01-30] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-2056474287-1676708938-3234247259-1000\...\Run: [f.lux] => C:\Users\usrname\AppData\Local\FluxSoftware\Flux\flux.exe [1678840 2017-10-10] (f.lux Software LLC)
HKU\S-1-5-21-2056474287-1676708938-3234247259-1000\...\Run: [Spotify Web Helper] => C:\Users\usrname\AppData\Roaming\Spotify\SpotifyWebHelper.exe [780688 2018-02-02] (Spotify Ltd)
HKU\S-1-5-21-2056474287-1676708938-3234247259-1000\...\Run: [Spotify] => C:\Users\usrname\AppData\Roaming\Spotify\Spotify.exe [21091728 2018-02-02] (Spotify Ltd)
HKU\S-1-5-21-2056474287-1676708938-3234247259-1000\...\MountPoints2: {2f57b68f-0412-11e8-90b7-844bf5c7bf22} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-2056474287-1676708938-3234247259-1000\...\MountPoints2: {dd740ae6-0b5a-11e5-9d42-844bf5c7bf22} - F:\LaunchU3.exe -a
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 
Startup: C:\Users\standard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\reminder.exe - Verknüpfung.lnk [2014-08-23]
ShortcutTarget: reminder.exe - Verknüpfung.lnk -> D:\Daten\OleProjekte\Reminder\reminder.exe ()
Startup: C:\Users\usrname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\reminder.exe - Verknüpfung.lnk [2014-08-23]
ShortcutTarget: reminder.exe - Verknüpfung.lnk -> D:\Daten\OleProjekte\Reminder\reminder.exe ()

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 172.30.3.254
Tcpip\..\Interfaces\{70D5710F-8257-4843-BB0B-0064207CEE80}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{C7B3823C-10E0-4C1D-81E5-91F799C8D74B}: [DhcpNameServer] 172.30.3.254

Internet Explorer:
==================
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll => Keine Datei
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-18] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2014-05-27] (DVDVideoSoft Ltd.)
BHO-x32: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll => Keine Datei
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-18] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-09-27] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-09-27] (Oracle Corporation)
BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2014-08-20] (DVDVideoSoft Ltd.)
Toolbar: HKLM - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll Keine Datei
Toolbar: HKLM-x32 - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll Keine Datei
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

FireFox:
========
FF ProfilePath: C:\Users\usrname\AppData\Roaming\Mozilla\Firefox\Profiles\lbe9slzc.default [2018-02-15]
FF Homepage: Mozilla\Firefox\Profiles\lbe9slzc.default -> www.google.de
FF NewTab: Mozilla\Firefox\Profiles\lbe9slzc.default -> www.google.de
FF Extension: (NoScript) - C:\Users\usrname\AppData\Roaming\Mozilla\Firefox\Profiles\lbe9slzc.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2017-04-23] [Legacy]
FF HKU\S-1-5-21-2056474287-1676708938-3234247259-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: (Download videos and MP3s from YouTube) - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-08-31] [Legacy] [ist nicht signiert]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_126.dll [2017-06-15] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_126.dll [2017-06-15] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-04-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-04-03] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-09-27] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-09-27] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin HKU\S-1-5-21-2056474287-1676708938-3234247259-1000: SkypeForBusinessPlugin-15.8 -> C:\Users\usrname\AppData\Local\Microsoft\SkypeForBusinessPlugin\15.8.20020.400\npGatewayNpapi.dll [2015-06-15] (Microsoft Corporation)
FF Plugin HKU\S-1-5-21-2056474287-1676708938-3234247259-1000: SkypeForBusinessPlugin64-15.8 -> C:\Users\usrname\AppData\Local\Microsoft\SkypeForBusinessPlugin\15.8.20020.400\npGatewayNpapi-x64.dll [2015-06-15] (Microsoft Corporation)

Chrome: 
=======
CHR Profile: C:\Users\usrname\AppData\Local\Google\Chrome\User Data\Default [2017-11-11]
CHR Extension: (Google Präsentationen) - C:\Users\usrname\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-06-02]
CHR Extension: (Google Docs) - C:\Users\usrname\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-06-02]
CHR Extension: (Google Drive) - C:\Users\usrname\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-06-02]
CHR Extension: (YouTube) - C:\Users\usrname\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-06-02]
CHR Extension: (Google Tabellen) - C:\Users\usrname\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-06-02]
CHR Extension: (Google Docs Offline) - C:\Users\usrname\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-06-02]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\usrname\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-06-02]
CHR Extension: (Google Mail) - C:\Users\usrname\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-06-02]
CHR Extension: (Chrome Media Router) - C:\Users\usrname\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-06-02]

Opera: 
=======
OPR StartupUrls: "hxxp://www.google.de/"

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [1136744 2018-02-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [492560 2018-02-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [492560 2018-02-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1533608 2018-02-13] (Avira Operations GmbH & Co. KG)
S4 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [445112 2018-01-30] (Avira Operations GmbH & Co. KG)
S3 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [112256 2012-03-21] (Atheros Communication Inc.) [Datei ist nicht signiert]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-04-03] ()
R2 InterBaseGuardian; d:\Programme\Borland\InterBase\bin\ibguard.exe [32768 2001-11-29] (Borland Software Corporation) [Datei ist nicht signiert]
R3 InterBaseServer; d:\Programme\Borland\InterBase\bin\ibserver.exe [1769472 2001-11-29] (Borland Software Corporation) [Datei ist nicht signiert]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-04-03] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2011-12-08] ()
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [50688 2013-11-14] (Hewlett-Packard) [Datei ist nicht signiert]
S4 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [Datei ist nicht signiert]
S4 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-06-20] (The OpenVPN Project)
S4 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-06-20] (The OpenVPN Project)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [66048 2013-11-14] (Hewlett-Packard) [Datei ist nicht signiert]
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite Platinum.SP2\RpcAgentSrv.exe [135728 2018-01-11] (SiSoftware) [Datei ist nicht signiert]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10945264 2017-12-05] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [594704 2011-12-08] (Intel® Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [64504 2017-06-14] (Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [196344 2017-12-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [153552 2018-02-01] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [35328 2017-03-22] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [78600 2017-03-22] (Avira Operations GmbH & Co. KG)
R1 ElRawDisk; C:\Windows\system32\drivers\rsdrvx64.sys [26024 2009-02-12] (EldoS Corporation)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite Platinum.SP2\WNt600x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
R1 truecrypt; C:\Windows\SysWow64\drivers\truecrypt.sys [219840 2014-08-23] (TrueCrypt Foundation)
S3 AthBTPort; system32\DRIVERS\btath_flt.sys [X]
S3 BTATH_A2DP; system32\drivers\btath_a2dp.sys [X]
S3 btath_avdt; system32\drivers\btath_avdt.sys [X]
S3 BTATH_BUS; system32\DRIVERS\btath_bus.sys [X]
S3 BTATH_HCRP; system32\DRIVERS\btath_hcrp.sys [X]
S3 BTATH_LWFLT; system32\DRIVERS\btath_lwflt.sys [X]
S3 BTATH_RCP; system32\DRIVERS\btath_rcp.sys [X]
S3 BTATH_VDP; system32\drivers\btath_vdp.sys [X]
S3 BtFilter; system32\DRIVERS\btfilter.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2018-02-15 12:47 - 2018-02-15 12:47 - 000021261 _____ C:\Users\usrname\Desktop\FRST.txt
2018-02-15 12:46 - 2018-02-15 12:47 - 000000000 ____D C:\FRST
2018-02-15 12:46 - 2018-02-15 12:46 - 002405376 _____ (Farbar) C:\Users\usrname\Desktop\FRST64.exe
2018-02-15 12:28 - 2018-02-15 12:28 - 000000000 ____D C:\Users\usrname\Desktop\Neuer Ordner
2018-02-14 14:04 - 2018-02-14 14:04 - 002476296 _____ C:\Users\usrname\Desktop\patellofemoral-osteochondral-autologous-transfer.pdf
2018-02-12 17:04 - 2018-02-12 17:10 - 000000000 ____D C:\Users\usrname\Desktop\Wolf Shaver
2018-02-09 10:44 - 2018-02-09 17:35 - 000000000 ____D C:\Users\usrname\Desktop\Hannoversche leben
2018-02-04 15:53 - 2018-02-04 15:53 - 000462251 _____ C:\Users\usrname\Downloads\ASIO4ALL_2_14_English.exe
2018-02-04 15:53 - 2018-02-04 15:53 - 000000000 ____D C:\Users\usrname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2018-02-04 15:53 - 2018-02-04 15:53 - 000000000 ____D C:\Program Files (x86)\ASIO4ALL v2
2018-02-04 15:43 - 2012-04-02 22:52 - 001361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2018-02-04 15:43 - 2012-04-02 22:52 - 000836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2018-02-04 15:43 - 2012-04-02 22:52 - 000148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2018-02-04 15:43 - 2012-04-02 22:52 - 000065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2018-02-04 15:43 - 2012-04-02 22:50 - 002605400 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2018-02-04 15:43 - 2012-04-02 22:50 - 000518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2018-02-04 15:43 - 2012-04-02 22:50 - 000331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2018-02-04 15:43 - 2012-04-02 22:50 - 000221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2018-02-04 15:43 - 2012-04-02 22:50 - 000220776 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2018-02-04 15:43 - 2012-04-02 22:50 - 000211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2018-02-04 15:43 - 2012-04-02 22:50 - 000198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2018-02-04 15:43 - 2012-04-02 22:50 - 000155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2018-02-04 15:43 - 2012-04-02 22:50 - 000081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2018-02-04 15:43 - 2012-04-02 22:50 - 000078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2018-02-04 15:43 - 2012-04-02 22:50 - 000074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2018-02-04 15:43 - 2012-04-02 22:49 - 004754536 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2018-02-04 15:43 - 2012-04-02 22:49 - 003846248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2018-02-04 15:43 - 2012-04-02 22:49 - 002729472 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2018-02-04 15:43 - 2012-04-02 22:49 - 002652264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2018-02-04 15:43 - 2012-04-02 22:49 - 001560168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2018-02-04 15:43 - 2012-04-02 22:49 - 001247848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2018-02-04 15:43 - 2012-04-02 22:49 - 000823912 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2018-02-04 15:43 - 2012-04-02 22:49 - 000375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2018-02-04 15:43 - 2012-04-02 22:49 - 000310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2018-02-04 15:43 - 2012-04-02 22:49 - 000310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2018-02-04 15:43 - 2012-04-02 22:49 - 000238476 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2018-02-04 15:43 - 2012-04-02 22:49 - 000204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2018-02-04 15:43 - 2012-04-02 22:49 - 000149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2018-02-04 15:43 - 2012-04-02 22:49 - 000102504 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2018-02-04 15:43 - 2012-04-02 22:49 - 000101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2018-02-04 15:43 - 2012-04-02 22:49 - 000078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2018-02-04 15:43 - 2012-04-02 22:49 - 000014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2018-02-04 15:43 - 2012-04-02 22:48 - 003308376 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2018-02-04 15:43 - 2012-04-02 22:48 - 000426328 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2018-02-04 15:43 - 2012-04-02 22:48 - 000334680 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2018-02-04 15:43 - 2012-04-02 22:48 - 000136024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2018-02-04 15:43 - 2012-04-02 22:48 - 000118104 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2018-02-04 15:43 - 2012-04-02 22:48 - 000074072 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2018-02-04 15:43 - 2012-04-02 22:47 - 008363864 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2018-02-04 15:43 - 2012-04-02 22:47 - 000978776 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2018-02-04 15:43 - 2012-04-02 22:47 - 000341336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2018-02-04 15:43 - 2012-04-02 22:47 - 000318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2018-02-04 15:43 - 2012-04-02 22:46 - 002528832 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2018-02-04 15:43 - 2012-04-02 22:46 - 000603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2018-02-04 15:43 - 2012-04-02 22:45 - 001756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2018-02-04 15:43 - 2012-04-02 22:45 - 001568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2018-02-04 15:43 - 2012-04-02 22:45 - 001486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2018-02-04 15:43 - 2012-04-02 22:45 - 000728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2018-02-04 15:43 - 2012-04-02 22:45 - 000712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2018-02-04 15:43 - 2012-04-02 22:45 - 000693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2018-02-04 15:43 - 2012-04-02 22:45 - 000537456 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2018-02-04 15:43 - 2012-04-02 22:45 - 000524656 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2018-02-04 15:43 - 2012-04-02 22:45 - 000491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2018-02-04 15:43 - 2012-04-02 22:45 - 000449392 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2018-02-04 15:43 - 2012-04-02 22:45 - 000432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2018-02-04 15:43 - 2012-04-02 22:45 - 000428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2018-02-04 15:43 - 2012-04-02 22:45 - 000242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2018-02-04 15:43 - 2012-04-02 22:45 - 000242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2018-02-04 15:43 - 2012-04-02 22:45 - 000241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2018-02-04 15:43 - 2012-04-02 22:44 - 000200800 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2018-02-04 15:43 - 2012-04-02 22:44 - 000108960 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2018-02-03 13:11 - 2018-02-03 13:11 - 000000000 ____H C:\ProgramData\DP45977C.lfl
2018-02-03 13:10 - 2018-02-03 13:10 - 000000000 ____D C:\Windows\system32\DAX3
2018-02-03 13:10 - 2018-02-03 13:10 - 000000000 ____D C:\Windows\system32\DAX2
2018-02-03 13:10 - 2017-06-29 18:55 - 013122576 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 012988336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO4064.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 006410088 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV3apo.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 005938904 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV2apo.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 005593608 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 003509256 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 003410832 _____ (DTS, Inc.) C:\Windows\system32\slcnt64.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 003299816 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE2.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 003122656 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 003092336 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RltkAPO.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 002190976 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 001435136 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR64.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 001337640 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaeapo64.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 001016928 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDHF64.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 000984912 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 000923736 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 000877424 _____ (Sound Research, Corp.) C:\Windows\SysWOW64\SEHDHF32.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 000868176 _____ (Sound Research, Corp.) C:\Windows\system32\SECOMN64.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 000866640 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDRA64.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 000852128 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tosasfapo64.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 000737960 _____ (Sound Research, Corp.) C:\Windows\SysWOW64\SECOMN32.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 000691680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 000604792 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaemaxapo64.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 000525768 _____ (Sound Research, Corp.) C:\Windows\system32\SEAPO64.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 000467152 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO64.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 000447176 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\toseaeapo64.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 000381408 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM64.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 000341144 _____ (Synopsys, Inc.) C:\Windows\SysWOW64\SRCOM.dll
2018-02-03 13:10 - 2017-06-29 18:55 - 000341144 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll
2018-02-03 13:10 - 2017-06-29 18:54 - 010536152 _____ (Intel Corporation) C:\Windows\system32\IntelSSTAPO.dll
2018-02-03 13:10 - 2017-06-29 18:54 - 002291304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO7064.dll
2018-02-03 13:10 - 2017-06-29 18:54 - 001422920 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2018-02-03 13:10 - 2017-06-29 18:54 - 001334376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2018-02-03 13:10 - 2017-06-29 18:54 - 001213656 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2018-02-03 13:10 - 2017-06-29 18:54 - 001166152 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2018-02-03 13:10 - 2017-06-29 18:54 - 000999848 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2018-02-03 13:10 - 2017-06-29 18:54 - 000680544 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2018-02-03 13:10 - 2017-06-29 18:54 - 000406448 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2APIPCLL.dll
2018-02-03 13:10 - 2017-06-29 18:54 - 000366120 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\HMAPO.dll
2018-02-03 13:10 - 2017-06-29 18:54 - 000360344 _____ (Harman) C:\Windows\system32\HMClariFi.dll
2018-02-03 13:10 - 2017-06-29 18:54 - 000203840 _____ (Harman) C:\Windows\system32\HMHVS.dll
2018-02-03 13:10 - 2017-06-29 18:54 - 000190928 _____ (Harman) C:\Windows\system32\HMEQ_Voice.dll
2018-02-03 13:10 - 2017-06-29 18:54 - 000190928 _____ (Harman) C:\Windows\system32\HMEQ.dll
2018-02-03 13:10 - 2017-06-29 18:54 - 000179592 _____ (Harman) C:\Windows\system32\HMLimiter.dll
2018-02-03 13:10 - 2017-06-29 18:53 - 005346992 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv211.dll
2018-02-03 13:10 - 2017-06-29 18:53 - 002444680 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv201.dll
2018-02-03 13:10 - 2017-06-29 18:53 - 001965808 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2018-02-03 13:10 - 2017-06-29 18:53 - 001959600 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64AF3.dll
2018-02-03 13:10 - 2017-06-29 18:53 - 001616680 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64APO.dll
2018-02-03 13:10 - 2017-06-29 18:53 - 001554600 _____ (Dolby Laboratories) C:\Windows\system32\DAX3APOProp.dll
2018-02-03 13:10 - 2017-06-29 18:53 - 001529136 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64Proxy.dll
2018-02-03 13:10 - 2017-06-29 18:53 - 001326424 _____ (Dolby Laboratories) C:\Windows\system32\DAX3APOv251.dll
2018-02-03 13:10 - 2017-06-29 18:53 - 001170872 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOvlldp.dll
2018-02-03 13:10 - 2017-06-29 18:53 - 000362048 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64AF3.dll
2018-02-03 13:10 - 2017-06-29 18:53 - 000327448 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2018-02-03 13:10 - 2017-06-29 18:53 - 000310416 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64F3.dll
2018-02-03 13:10 - 2017-06-29 18:53 - 000272712 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2018-02-03 13:10 - 2017-06-29 18:52 - 002110592 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2018-02-03 13:10 - 2017-06-29 18:52 - 000258856 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2018-02-03 13:10 - 2017-06-29 18:51 - 014057248 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2018-02-03 13:10 - 2017-06-29 18:51 - 007096184 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2018-02-03 13:10 - 2017-06-29 18:51 - 006264632 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64AF3.dll
2018-02-03 13:10 - 2017-06-29 18:51 - 002050176 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2018-02-03 13:10 - 2017-06-29 18:51 - 001186832 _____ (Intel Corporation) C:\Windows\system32\IntelSstCApoPropPage.dll
2018-02-03 13:10 - 2017-06-29 18:51 - 001133064 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOProp.dll
2018-02-03 13:10 - 2017-06-29 18:51 - 001003856 _____ (Nahimic Inc) C:\Windows\system32\NahimicAPONSControl.dll
2018-02-03 13:10 - 2017-06-29 18:51 - 000416504 _____ (Harman) C:\Windows\system32\HMUI.dll
2018-02-03 13:10 - 2017-06-29 18:51 - 000378384 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2API.dll
2018-02-03 13:10 - 2017-06-29 18:51 - 000154360 _____ (Harman) C:\Windows\system32\HarmanAudioInterface.dll
2018-02-03 13:10 - 2017-06-29 18:50 - 000122320 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2018-02-03 13:10 - 2017-06-29 18:50 - 000118584 _____ C:\Windows\system32\AcpiServiceVnA64.dll
2018-02-03 13:10 - 2017-06-29 18:50 - 000105304 _____ C:\Windows\system32\audioLibVc.dll
2018-02-03 13:10 - 2017-06-29 03:05 - 005804772 _____ C:\Windows\system32\Drivers\rtvienna.dat
2018-02-03 13:10 - 2017-06-29 03:05 - 001920870 _____ C:\Windows\system32\Drivers\rtkSSTsetting.dat
2018-02-03 12:38 - 2018-02-03 13:13 - 000000000 ____D C:\Program Files (x86)\No23 Recorder
2018-02-03 12:38 - 2018-02-03 12:38 - 000000000 ____D C:\ProgramData\Caphyon
2018-02-02 19:41 - 2018-02-15 12:36 - 000000000 ____D C:\Users\usrname\AppData\Roaming\Spotify
2018-02-02 19:41 - 2018-02-15 12:36 - 000000000 ____D C:\Users\usrname\AppData\Local\Spotify
2018-02-02 19:41 - 2018-02-02 19:41 - 000001803 _____ C:\Users\usrname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2018-02-02 19:35 - 2018-02-02 19:35 - 000000000 ____D C:\ProgramData\AVS4YOU
2018-02-02 19:34 - 2018-02-03 11:46 - 000000000 ____D C:\Program Files (x86)\AVS4YOU
2018-02-02 19:34 - 2018-02-02 19:34 - 000000000 ____D C:\Users\usrname\AppData\Roaming\AVS4YOU
2018-02-02 19:34 - 2010-05-11 13:17 - 000024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll
2018-02-02 19:27 - 2018-02-02 19:27 - 000725488 _____ (Spotify Ltd) C:\Users\usrname\Downloads\SpotifySetup.exe
2018-02-01 09:06 - 2018-02-01 09:06 - 000019040 _____ C:\Users\usrname\Desktop\kalender.xlsx
2018-01-29 17:37 - 2018-01-29 17:37 - 000000754 _____ C:\Users\usrname\Desktop\EBM Ziffern - Verknüpfung.lnk
2018-01-28 11:39 - 2018-01-28 11:39 - 000000410 _____ C:\Users\usrname\Desktop\congstar daten.txt
2018-01-21 16:32 - 2018-01-21 16:32 - 000114364 _____ C:\Users\usrname\Desktop\Rezept Uli Pectoralis.pdf
2018-01-18 14:32 - 2018-01-18 14:35 - 008773632 _____ C:\Users\usrname\Downloads\SkypeForBusinessPlugin.msi

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2018-02-15 12:44 - 2009-07-14 05:45 - 000023840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-02-15 12:44 - 2009-07-14 05:45 - 000023840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-02-15 12:43 - 2016-11-17 23:43 - 000000000 ____D C:\Users\usrname\AppData\LocalLow\Mozilla
2018-02-15 12:40 - 2009-07-14 18:58 - 000699666 _____ C:\Windows\system32\perfh007.dat
2018-02-15 12:40 - 2009-07-14 18:58 - 000149774 _____ C:\Windows\system32\perfc007.dat
2018-02-15 12:40 - 2009-07-14 06:13 - 001620612 _____ C:\Windows\system32\PerfStringBackup.INI
2018-02-15 12:40 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2018-02-15 12:36 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-02-15 12:35 - 2017-09-18 12:47 - 000003316 _____ C:\Windows\System32\Tasks\Avira_Antivirus_Systray
2018-02-13 11:56 - 2016-07-25 19:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2018-02-13 11:35 - 2015-02-09 14:42 - 000000000 ____D C:\ProgramData\Package Cache
2018-02-12 17:27 - 2017-02-04 15:46 - 000000000 ____D C:\Users\usrname\Desktop\Medizindateien OP
2018-02-11 09:47 - 2014-09-22 20:05 - 000000000 ____D C:\Users\usrname\AppData\Local\CrashDumps
2018-02-10 14:54 - 2017-03-20 13:19 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-02-10 14:54 - 2014-08-23 14:12 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-02-09 15:11 - 2016-01-13 21:18 - 000689152 _____ C:\Users\usrname\Desktop\WH Newsletter Emailadressen.xls
2018-02-05 12:12 - 2014-09-09 21:20 - 000000001 ____R C:\Users\usrname\serverport
2018-02-05 12:08 - 2014-08-22 23:08 - 000000000 ____D C:\Users\usrname
2018-02-04 16:05 - 2014-08-23 20:18 - 000000000 ____D C:\Users\usrname\AppData\Local\ElevatedDiagnostics
2018-02-04 15:44 - 2014-08-22 23:32 - 000000000 ___HD C:\Program Files (x86)\Temp
2018-02-04 15:44 - 2014-08-22 23:32 - 000000000 ____D C:\Windows\SysWOW64\RTCOM
2018-02-04 15:43 - 2014-08-22 23:13 - 000000024 _____ C:\Windows\Model.txt
2018-02-04 15:32 - 2017-11-11 14:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SiSoftware
2018-02-03 12:39 - 2014-08-31 11:19 - 000000000 ____D C:\Users\usrname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MultimediaProgramme
2018-02-03 10:38 - 2009-07-14 05:45 - 000443312 _____ C:\Windows\system32\FNTCACHE.DAT
2018-02-02 19:34 - 2014-08-22 23:31 - 000118104 _____ C:\Users\usrname\AppData\Local\GDIPFONTCACHEV1.DAT
2018-02-01 17:50 - 2014-08-23 22:16 - 000153552 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2018-01-30 07:46 - 2009-07-14 06:08 - 000032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2018-01-27 18:19 - 2017-03-12 18:38 - 000000000 ____D C:\Users\usrname\Desktop\ebay
2018-01-26 11:46 - 2017-12-29 09:21 - 000000000 ____D C:\Users\usrname\Desktop\Emma iPhone
2018-01-22 16:45 - 2015-03-22 01:00 - 000000600 _____ C:\Users\usrname\AppData\Local\PUTTY.RND
2018-01-22 16:45 - 2014-12-16 20:03 - 000000000 ____D C:\Users\usrname\AppData\Roaming\FileZilla
2018-01-19 11:35 - 2014-12-16 20:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2018-01-19 11:35 - 2014-12-16 20:03 - 000000000 ____D C:\Program Files (x86)\FileZilla FTP Client

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-11-16 22:49 - 2016-11-21 22:33 - 000003072 _____ () C:\Users\usrname\AppData\Roaming\fotobook Designer Prefsv3
2016-04-17 20:31 - 2016-04-17 20:31 - 000000600 _____ () C:\Users\usrname\AppData\Roaming\PUTTY.RND
2017-11-11 14:22 - 2017-11-11 14:42 - 016400384 _____ () C:\Users\usrname\AppData\Roaming\Sandra.mdb
2014-11-07 19:16 - 2017-12-23 20:58 - 000044544 _____ () C:\Users\usrname\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-03-22 01:00 - 2018-01-22 16:45 - 000000600 _____ () C:\Users\usrname\AppData\Local\PUTTY.RND
2017-10-28 12:13 - 2017-11-12 14:57 - 000007610 _____ () C:\Users\usrname\AppData\Local\Resmon.ResmonCfg
2014-08-22 23:23 - 2014-08-22 23:23 - 000002853 _____ () C:\Users\usrname\AppData\Local\WiDiSetupLog.20140823.002310.txt

Einige Dateien in TEMP:
====================
2015-02-28 14:36 - 2015-02-28 14:36 - 000000000 ____D () C:\Users\standard\AppData\Local\Temp\avgnt.exe
2018-02-04 15:43 - 2010-06-20 22:42 - 000046456 _____ (Sony Electronics, Inc) C:\Users\usrname\AppData\Local\Temp\GLFB427.EXE
2018-02-04 15:43 - 2003-05-02 15:13 - 000151552 _____ () C:\Users\usrname\AppData\Local\Temp\GLFE130.EXE
2018-01-05 08:47 - 2018-01-05 08:47 - 003996560 _____ (Don HO don.h@free.fr) C:\Users\usrname\AppData\Local\Temp\npp.7.5.3.Installer.exe
2018-02-02 19:40 - 2018-02-02 19:28 - 021091728 _____ (Spotify Ltd) C:\Users\usrname\AppData\Local\Temp\SpotifyUninstall.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2016-05-18 17:50

==================== Ende von FRST.txt ============================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12.02.2018
durchgeführt von usrname (15-02-2018 12:47:39)
Gestartet von C:\Users\usrname\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2014-08-22 22:08:04)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2056474287-1676708938-3234247259-500 - Administrator - Disabled)
Gast (S-1-5-21-2056474287-1676708938-3234247259-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2056474287-1676708938-3234247259-1004 - Limited - Enabled)
standard (S-1-5-21-2056474287-1676708938-3234247259-1001 - Limited - Enabled) => C:\Users\standard
usrname (S-1-5-21-2056474287-1676708938-3234247259-1000 - Administrator - Enabled) => C:\Users\usrname

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

64 Bit HP CIO Components Installer (HKLM\...\{F8F948EA-5AEA-4158-8821-A2F788ECE936}) (Version: 16.2.1 - Hewlett-Packard) Hidden
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
Adobe Flash Player 26 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.126 - Adobe Systems Incorporated)
Advertising Center (HKLM-x32\...\{B2EC4A38-B545-4A00-8214-13FE0E915E6D}) (Version: 0.0.0.2 - Nero AG) Hidden
AMD Catalyst Install Manager (HKLM\...\{EBF1529E-D2D5-47CF-97EC-7D90CEF0FE04}) (Version: 3.0.859.0 - Advanced Micro Devices, Inc.)
Apple Application Support (32-Bit) (HKLM-x32\...\{447CDCE5-F555-429B-BFA6-642C3C6D684F}) (Version: 3.1.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{0DF7096B-715A-4233-8633-C7A16ED6D616}) (Version: 3.1.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.14 - Michael Tippach)
Avira (HKLM-x32\...\{0d7485e0-9bee-4f51-be99-b5ed9e4c3cad}) (Version: 1.2.105.36322 - Avira Operations GmbH & Co. KG)
Avira (HKLM-x32\...\{1EC8A200-307B-4964-A67D-6E10088C1CE1}) (Version: 1.2.105.36322 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.34.23 - Avira Operations GmbH & Co. KG)
AVM FRITZ!Box Dokumentation (HKLM-x32\...\AVMFBox) (Version:  - AVM Berlin)
AVM FRITZ!Box Druckeranschluss (HKLM-x32\...\AVMFBoxPrinter) (Version:  - AVM Berlin)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Borland Delphi 7 (HKLM-x32\...\{72263053-50D1-4598-9502-51ED64E54C51}) (Version: 7.0 - Borland Software Corporation)
CDex extraction audio (HKLM-x32\...\CDex) (Version:  - )
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Email Extractor (HKLM-x32\...\{30482B99-CAD6-4370-8A3B-8939BCDC90EC}) (Version: 5.8.2.7 - Pro Software) Hidden
Email Extractor (HKLM-x32\...\Email Extractor) (Version: 5.8.2.7 - Pro Software)
EndNote 8.0.2 Upgrade (HKLM-x32\...\{3F55B0C9-D552-4D02-BBCF-76E2EE60C686}) (Version: 8.0.2.1150 - Thomson ResearchSoft)
f.lux (HKU\S-1-5-21-2056474287-1676708938-3234247259-1000\...\Flux) (Version:  - f.lux Software LLC)
FileZilla Client 3.30.0 (HKLM-x32\...\FileZilla Client) (Version: 3.30.0 - Tim Kosse)
fotobook Designer (HKU\S-1-5-21-2056474287-1676708938-3234247259-1000\...\fotobook Designer) (Version: fotobook Designer 2016.3.1 - Printcenter Lamprechter GmbH)
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.07) (Version: 9.07 - Artifex Software Inc.)
Help Workshop (HKLM-x32\...\Help Workshop) (Version:  - )
HP Officejet 6600 - Grundlegende Software für das Gerät (HKLM\...\{C768E610-4DFB-4A60-A59B-71549EB7BF75}) (Version: 25.0.619.0 - Hewlett-Packard Co.)
HP Officejet 6600 Hilfe (HKLM-x32\...\{C818BA3A-226F-4ED0-9CEF-96A0DF300211}) (Version: 140.0.2.2 - Hewlett Packard)
HTML Help Workshop (HKLM-x32\...\HTML Help Workshop) (Version:  - )
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.2.1410 - Intel Corporation)
Intel(R) PROSet/Wireless for Bluetooth(R) 3.0 + High Speed (HKLM\...\{2C0E6BD4-65B1-4E82-B2AC-43EFFC8F100C}) (Version: 15.0.0.0059 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{520C4DD4-2BC7-409B-BA48-E1A4F832662D}) (Version: 2.1.0.0140 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.225 - Intel Corporation)
Intel® PROSet/Wireless WiFi-Software (HKLM\...\{DF7756DD-656A-45C3-BA71-74673E8259A9}) (Version: 15.00.0000.0642 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
InterBase 6.5 (HKLM-x32\...\InterBase) (Version:  - )
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
ISI ResearchSoft - Export Helper (HKLM-x32\...\ISI ResearchSoft - Export Helper) (Version:  - )
iTunes (HKLM\...\{D227565A-0033-40AD-89BA-653A205CDC11}) (Version: 12.1.1.4 - Apple Inc.)
Java 8 Update 144 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180144F0}) (Version: 8.0.1440.1 - Oracle Corporation)
JiveX [dv] Viewer 4.6.1 (HKLM-x32\...\JiveX [dv] Viewer 4.6.1) (Version:  - VISUS Technology Transfer GmbH)
KUx86 (HKLM-x32\...\{6FD21053-829D-40E7-B04C-CAFB7D5CD025}) (Version: 1.0.0 - Sony Corporation ) Hidden
LameXP (HKLM-x32\...\{FBD7A67D-D700-4043-B54F-DD106D00F308}) (Version:  - )
Magical Jelly Bean KeyFinder (HKLM-x32\...\KeyFinder_is1) (Version: 2.0.10.13 - Magical Jelly Bean)
Microsoft .NET Framework 4.7 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft RichCopy 4.0 (HKLM-x32\...\{86F4F32B-77C7-4951-B33C-05D41A8190C1}) (Version: 4.0.216 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Core Components (x64) ENU  (HKLM\...\{8CCBEC22-D2DB-4DC9-A58A-E1A1F3A38C8A}) (Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Provider Services (x64) ENU  (HKLM\...\{03AC245F-4C64-425C-89CF-7783C1D3AB2C}) (Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.12.25810 (HKLM-x32\...\{e2ee15e2-a480-4bc5-bfb7-e9803d1d9823}) (Version: 14.12.25810.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.12.25810 (HKLM-x32\...\{56e11d69-7cc9-40a5-a4f9-8f6190c4d84d}) (Version: 14.12.25810.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft_VC100_CRT_x86 (HKLM-x32\...\{6FDDB201-2CA0-42BD-973F-7B2C4A61EA3F}) (Version: 1.0.0 - Microsoft)
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 58.0.2 (x64 de) (HKLM\...\Mozilla Firefox 58.0.2 (x64 de)) (Version: 58.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 58.0.2.6611 - Mozilla)
Mozilla Thunderbird 31.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.0 (x86 de)) (Version: 31.0 - Mozilla)
Mozilla Thunderbird 52.6.0 (x86 de) (HKU\S-1-5-21-2056474287-1676708938-3234247259-1000\...\Mozilla Thunderbird 52.6.0 (x86 de)) (Version: 52.6.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Namo WebEditor 3.0 (HKLM-x32\...\Namo WebEditor 3.0) (Version:  - )
Nero 9 Lite (HKLM-x32\...\{5abf21ec-0e27-49f7-b96f-8fb89f96d418}) (Version:  - Nero AG)
No23 Recorder (HKLM-x32\...\{6DED41BC-C9EF-4330-B4E5-46CB2C5C6E2D}) (Version: 2.1.0.3 - No23) Hidden
No23 Recorder (HKLM-x32\...\No23 Recorder) (Version: 2.1.0.3 - No23)
Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.5.3 - Notepad++ Team)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
OpenVPN 2.4.3-I601  (HKLM\...\OpenVPN) (Version: 2.4.3-I601 - OpenVPN Technologies, Inc.)
Qualcomm Atheros Direct Connect (HKLM-x32\...\{21DD6041-7251-40FA-9D06-C5EB30268E0F}) (Version: 3.1 - Qualcomm Atheros) Hidden
Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{E727B31A-8B24-4C1C-934A-69634E0D2C0B}) (Version: 3.0 - Qualcomm Atheros)
QuickTime (HKLM-x32\...\{BFD96B89-B769-4CD6-B11E-E79FFD46F067}) (Version: 7.4.1.14 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6573 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.91 - Realtek Semiconductor Corp.)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version:  - )
Roentgen-Trainer Chirurgische Ambulanz Version 5.0 (HKLM-x32\...\Roentgen-Trainer 5.0_is1) (Version:  - )
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
SiSoftware Sandra Lite Platinum.SP4 (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2596}_is1) (Version: 24.57.2017.12 - SiSoftware)
Skype for Business Web App Plug-in (HKLM-x32\...\{37C8167B-B653-4955-A6E8-EBB8DE937DDD}) (Version: 15.8.20020.400 - Microsoft Corporation)
Spotify (HKU\S-1-5-21-2056474287-1676708938-3234247259-1000\...\Spotify) (Version: 1.0.73.345.g6c9971ef - Spotify AB)
SSLx64 (HKLM\...\{312395BC-7CC2-434C-A660-30250276A926}) (Version: 1.0.0 - Sony Corporation ) Hidden
SSLx86 (HKLM-x32\...\{63C43435-F428-42BA-8E7B-5848749D9262}) (Version: 1.0.0 - Sony Corporation ) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.0.1.6 - Synaptics Incorporated)
SyncToy 2.1 (x64) (HKLM\...\{88DAAF05-5A72-46D2-A7C5-C3759697E943}) (Version: 2.1.0 - Microsoft)
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
TeamViewer 13 (HKLM-x32\...\TeamViewer) (Version: 13.0.5640 - TeamViewer)
TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 6.1a - TrueCrypt Foundation)
USB-COM-x64 (HKLM\...\{84BDD487-D5CB-46B4-B047-62B4564A4138}) (Version: 3.1.64 - Datalogic Scanning Inc.)
VAIO Control Center (HKLM-x32\...\{8E797841-A110-41FD-B17A-3ABC0641187A}) (Version: 5.2.1.15070 - Sony Corporation)
VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.11.1.15220 - Sony Corporation)
VCCx64 (HKLM\...\{549AD5FB-F52D-4307-864A-C0008FB35D96}) (Version: 1.0.0 - Sony Corporation) Hidden
VCCx86 (HKLM-x32\...\{DF184496-1CA2-4D07-92E7-0BD251D7DEF0}) (Version: 1.0.0 - Sony Corporation) Hidden
VOB2MPG v3 (HKLM-x32\...\{908B5359-244E-4E09-AA9F-DBF240679B46}) (Version: 3.2.2000 - BadgerIT)
VPMx64 (HKLM\...\{DBEAA361-F8A4-4298-B41C-9E9DCB9AAB84}) (Version: 1.0.0 - Sony Corporation ) Hidden
VSNx64 (HKLM\...\{F2611404-06BF-4E67-A5B7-8DB2FFC1CBF6}) (Version: 1.0.0 - Sony Corporation) Hidden
VSNx86 (HKLM-x32\...\{A49A517F-5332-4665-922C-6D9AD31ADD4F}) (Version: 1.0.0 - Sony Corporation) Hidden
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Mobile-Gerätecenter (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation)
Windows-Treiberpaket - Sony Corporation (SFEP) HIDClass  (11/15/2011 8.0.2.3) (HKLM\...\D3980EE1930054D2BAB3D957A731D6C24AF9F739) (Version: 11/15/2011 8.0.2.3 - Sony Corporation)
Windows-Treiberpaket - USB-COM Driver (dlsusb) MultiportSerial  (01/18/2011 3.12.0.64) (HKLM\...\2D4BBBFB3EA69A8758A7A199D6788B339EF1F602) (Version: 01/18/2011 3.12.0.64 - USB-COM Driver)
Windows-Treiberpaket - USB-COM Software (dlsusb) Ports  (01/18/2011 3.12.0.64) (HKLM\...\B10839A4D3FB3238A92B7EB203CAD385FAE3B421) (Version: 01/18/2011 3.12.0.64 - USB-COM Software)
XAMPP (HKLM-x32\...\xampp) (Version: 5.5.33-0 - Bitnami)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2056474287-1676708938-3234247259-1000_Classes\CLSID\{7ECF6F97-B4F3-4168-9835-F59C06D7875F}\InprocServer32 -> C:\Users\usrname\AppData\Local\Microsoft\SkypeForBusinessPlugin\15.8.20020.400\GatewayActiveX-x64.dll (Microsoft Corporation)
ContextMenuHandlers1-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov)
ContextMenuHandlers1-x32: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2017-02-12] ()
ContextMenuHandlers1-x32: [Atheros] -> {B8952421-0E55-400B-94A6-FA858FC0A39F} =>  -> Keine Datei
ContextMenuHandlers1-x32: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-12-14] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers1-x32: [WinMerge] -> {4E716236-AA30-4C65-B225-D68BBA81E9C2} => C:\Program Files (x86)\WinMerge\ShellExtensionX64.dll [2013-02-02] (hxxp://winmerge.org)
ContextMenuHandlers2: [WinMerge] -> {4E716236-AA30-4C65-B225-D68BBA81E9C2} => C:\Program Files (x86)\WinMerge\ShellExtensionX64.dll [2013-02-02] (hxxp://winmerge.org)
ContextMenuHandlers4-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov)
ContextMenuHandlers4-x32: [WinMerge] -> {4E716236-AA30-4C65-B225-D68BBA81E9C2} => C:\Program Files (x86)\WinMerge\ShellExtensionX64.dll [2013-02-02] (hxxp://winmerge.org)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2012-02-09] (Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [WinMerge] -> {4E716236-AA30-4C65-B225-D68BBA81E9C2} => C:\Program Files (x86)\WinMerge\ShellExtensionX64.dll [2013-02-02] (hxxp://winmerge.org)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-12-14] (Avira Operations GmbH & Co. KG)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {012B69F0-9434-4131-9396-7E181BCD0CE3} - System32\Tasks\{A4EDBC72-AEFB-422F-B379-47D1E14EABA9} => C:\Windows\system32\pcalua.exe -a "D:\Daten\Installation\irfanView portable\irfanview_plugins_438_setup.exe" -d "D:\Daten\Installation\irfanView portable"
Task: {04F2BEF0-B410-467C-8140-269EA33350CC} - System32\Tasks\{559BFC4C-D7A1-47EC-820A-40BBFA2B9129} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {0ADB8966-FBB5-4693-94B8-3E1B6D38A5B8} - System32\Tasks\Sony Corporation\VAIO Smart Network\VSN Logon Start => net [Argument = start VSNService]
Task: {10BB72F2-DDFB-43E0-90D4-08EABA6869ED} - System32\Tasks\{410E2E8A-B63F-4798-B295-83C5C790AB81} => E:\CLINTUT.EXE
Task: {13F28122-5A4A-415A-A0BD-F4C63CCC95AD} - System32\Tasks\{0DD91F8F-B522-4159-AC54-D18A532F97FB} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {1643C0BB-6704-4757-8537-12C392573360} - System32\Tasks\{A219CF70-A533-494D-90C1-36C5323A8429} => E:\CLINTUT.EXE
Task: {292A9149-3FE6-4614-B79F-293B33250907} - System32\Tasks\{5EB703D1-492F-4376-967F-BA6F8E45A4F7} => E:\CLINTUT.EXE
Task: {2AB05F60-EEB1-4528-9210-5E61D4725E2A} - System32\Tasks\{485C19F3-3DBF-451C-A5BF-21298EE649D7} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {2BB0B963-24C7-4F35-BD97-99C53E84AC94} - System32\Tasks\{72A8FBDA-E6F9-4B4D-86A1-14247F5AC213} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {2CC1BA65-138F-4F77-A9DE-70450FD7C54B} - System32\Tasks\{D715521D-A6AB-4E4E-8061-FE5E1909F3C9} => E:\CLINTUT.EXE
Task: {2F57269B-1E09-4E2D-AB1E-B0FDAC7D279C} - \Microsoft\Windows\WindowsBackup\ConfigNotification -> Keine Datei <==== ACHTUNG
Task: {31EB1FBD-B3A1-41AE-A834-9B748E56D585} - System32\Tasks\{828B1787-2260-4A9D-AB94-5C96D7AF1E7C} => E:\CLINTUT.EXE
Task: {3260D0C1-C9A2-4B70-BDF0-E9640B9381B2} - System32\Tasks\{A828C4DB-8810-4E83-AFB7-57DEB726B75B} => E:\CLINTUT.EXE
Task: {4162E068-70F4-4143-8106-662DDD840317} - System32\Tasks\{9FE8208C-2FD6-46AA-8FAD-B57851C3456D} => D:\Daten\Ole Programme\Excel 3.0\EXCEL.EXE
Task: {41DE6981-6418-4A16-B198-1D4584316405} - System32\Tasks\{0F2FA99C-FAD5-4BDA-AAC8-067F37BCD221} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {42540984-E923-4C7B-BD61-B700BC9B95D5} - System32\Tasks\{41CAB104-5784-483E-9CBA-5FCD79ADAA7F} => E:\CLINTUT.EXE
Task: {448C12B3-8162-430A-B791-8191B3E8C414} - System32\Tasks\{D918666A-3F55-4992-831A-5F287DC1B4A1} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {4AF85443-056B-450B-91A5-70113B3D57E4} - System32\Tasks\{745628D7-5921-4F47-91CA-7AFE97A5C5A0} => E:\CLINTUT.EXE
Task: {4D65DCBF-05BE-48B7-9007-CA5A525746FA} - System32\Tasks\{43803A85-1D0A-4778-9F5D-EA11153609E1} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {4E563BE2-45E0-405C-A7B5-56EAE819522F} - System32\Tasks\{561D9A61-641B-43F4-9974-7E34D1D9D3F7} => E:\CLINTUT.EXE
Task: {4FAABC0E-EFE8-4CB6-B6BE-EC25C8E76B50} - System32\Tasks\{F8036B3D-0F73-401E-8247-CA1B5DE58F76} => F:\3,5 Zoll Disketten\haus vom nitroklaus\HAUSVOM.EXE
Task: {50AC6532-A58D-487F-BF08-CE7A0542E501} - System32\Tasks\{639ECBEA-B9DE-4995-936F-5353A46C5F51} => E:\CLINTUT.EXE
Task: {55F04794-17C9-4BC6-978D-9B2A3EB3E815} - System32\Tasks\{148FE1D8-762A-4876-B62B-898BB84F7204} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {583EE021-FED5-4404-8263-1DAC3608281B} - System32\Tasks\{AF9EB32F-F415-4C03-9C32-C8C4B76D99B4} => E:\CLINTUT.EXE
Task: {59B3B51F-3886-4F10-9839-FD3EC45E88A4} - System32\Tasks\{2186CC03-4872-43AB-8054-7DDD7F9D258D} => E:\CLINTUT.EXE
Task: {5C85A588-58D9-4F27-8D61-46F1E22C1DF3} - System32\Tasks\{8CB0D9AD-65AE-4D27-AB6B-A68EF856E296} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {731AE879-8B5F-4028-AF45-3514D765921B} - System32\Tasks\{4D998D37-C3D1-45BD-B455-E85214EE1E9F} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {8112A4F2-12DD-4FA2-8232-17B931A26DEC} - System32\Tasks\{C14E0A66-4AFB-40DD-8C5D-9854B7708AC1} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {8B08B9E6-E16F-4AF0-AD11-F88D6EA05240} - System32\Tasks\{EABD2DE2-283C-45DD-AC15-79209D2C4617} => E:\CLINTUT.EXE
Task: {8CEE8B03-9FAD-4D2F-B26B-31717F7F5338} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Daily => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-03-07] (Sony Corporation)
Task: {926947E3-5E09-4AFA-8355-0CC0FDE6A0EE} - System32\Tasks\{34C18A93-5012-4276-9DD2-7480C70BDFF7} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {9333ED4A-FFFA-4F28-BB02-893BD8AFE663} - System32\Tasks\{B0937C1A-F29B-4E4E-9AD3-E07FD28719B6} => E:\CLINTUT.EXE
Task: {933CCDB9-4222-463C-AAE0-A30957A65A61} - System32\Tasks\{A23C69D7-CDF4-40A9-AABE-9F5E2A34778C} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {94E39246-DB4E-444C-80A8-5F5AD4CE415E} - System32\Tasks\{E4AEFE5E-D5A8-429B-845E-B6B275BCBD9B} => E:\CLINTUT.EXE
Task: {97704731-7F55-4EE1-9DFC-764F8A66ABB9} - System32\Tasks\{E3C3C66B-69E9-4111-A6A5-2C8420515126} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {994C86AD-A929-4B2C-88A0-4E25A107A029} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\system32\srtasks.exe
Task: {9E4D3F8B-3E58-4AA0-9E72-AB81AF59C919} - System32\Tasks\{087C2672-FFE9-4D4D-B07C-E5E367F30974} => F:\3,5 Zoll Disketten\haus vom nitroklaus\HAUSVOM.EXE
Task: {9F889209-EFAB-4084-A8DB-4E93B3C6BC22} - System32\Tasks\{9E0CE78D-C9C0-458D-B0E2-54D592D41CD5} => E:\CLINTUT.EXE
Task: {A13757A8-4E22-45E7-9FA8-259CF9B22D31} - System32\Tasks\{AD087C8F-BFC8-43AA-80C2-0ABC301925B0} => E:\CLINTUT.EXE
Task: {A2FF351D-74B4-4C82-B4D8-ABDBA8EBD193} - System32\Tasks\{FD82B595-427F-4F49-8ADB-8F3EA98B95DD} => E:\CLINTUT.EXE
Task: {A6AF9377-77CE-47AB-AD7D-EC32CAD0C82D} - System32\Tasks\Microsoft\Windows\Location\Notifications => C:\Windows\System32\LocationNotificationWindows.exe
Task: {AAA6BFD9-BE1F-46AB-B443-FF37E7E2A0E5} - System32\Tasks\{A85E265B-7F6D-4336-BE9A-C16CE0F869DC} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {AB932A05-78BF-4776-9929-69D28EB5FAFE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-08-20] (Adobe Systems Incorporated)
Task: {AC17F17D-8EE6-43EE-BDBA-BB3626A72299} - System32\Tasks\{EADF00A8-5BCC-4141-9493-B2C3CD0C8D17} => F:\3,5 Zoll Disketten\spiele\EMIR\EMIR.EXE
Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - \Microsoft\Windows\Application Experience\AitAgent -> Keine Datei <==== ACHTUNG
Task: {B0BD5093-A16F-40D5-A943-8C3D7ABEDA96} - System32\Tasks\{1A7F2200-AF8D-41D5-8D03-17FC073782B8} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {B711D4D9-1D9E-4904-B0A7-E25B02674E00} - System32\Tasks\{FEAC2158-2FEE-4686-A370-7B85B2274267} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {BEAC7947-F0E5-45E2-B77E-0D021139EA01} - System32\Tasks\{BBAEEADA-5DED-4E0C-AD91-2191D06ABDBD} => E:\CLINTUT.EXE
Task: {BEE9C958-3AF5-454B-8686-0C1A4A0D5EEC} - System32\Tasks\{10E59F9E-4817-4871-880B-785536BC890F} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {C2B922CD-D831-486C-B5F6-E8DDB2F1D08B} - System32\Tasks\{397947C5-698D-4D7D-AFBE-194FEDFBD6D2} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {C527E36B-5EA1-49A2-9695-F17073666EFC} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2018-02-13] (Avira Operations GmbH & Co. KG)
Task: {C5F6FEC0-D0A9-452D-8808-CE0B91414921} - System32\Tasks\{89BA6518-55A7-4445-964C-1A9F90FF4ECD} => E:\CLINTUT.EXE
Task: {C613DE23-374A-48BE-ADD9-132D39BD425A} - System32\Tasks\{B84C4EDF-11E9-47DE-8149-03B552950967} => F:\3,5 Zoll Disketten\spiele\EMIR\EMIR.EXE
Task: {CD592A56-97EA-4881-93D3-01B24CFE148C} - System32\Tasks\{97BC7E8D-6191-49BE-BDA3-CBB8A6F93F76} => E:\CLINTUT.EXE
Task: {CEE64558-E1A7-4D9D-80A7-2001912BE5B5} - \Microsoft\Windows\MemoryDiagnostic\CorruptionDetector -> Keine Datei <==== ACHTUNG
Task: {D0648609-9237-4B16-8F10-A2722C6ED93E} - System32\Tasks\{2A365BE7-EDDF-4B9B-8040-B6855D04BF14} => E:\CLINTUT.EXE
Task: {D11B4B42-935A-4CFE-9028-D3EB9E9E8CBF} - System32\Tasks\{9575B9C8-690A-4C9A-A426-DEDE724FEE9C} => E:\CLINTUT.EXE
Task: {D13D59C6-5FCF-4CC1-9CA9-D1A1C43983DF} - System32\Tasks\{3D702AEB-BA20-4420-92C0-BB0CE75660EB} => C:\Windows\system32\pcalua.exe -a "D:\Daten\Aktuell\kindergeburtstage\Emma 2016\Dalliklick.exe" -d "D:\Daten\Aktuell\kindergeburtstage\Emma 2016"
Task: {D1D56C03-D6E7-4EAB-A430-847E8AFD5F86} - System32\Tasks\{7858CC17-1BD0-461E-A921-3B498FE15E98} => D:\Daten\Ole Programme\Excel 3.0\EXCEL.EXE
Task: {D3966761-E4D6-4CCC-A8BB-09BCC651A928} - System32\Tasks\{5B58F978-B313-4EC2-8C83-07400B37E5FC} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {DEEEC776-61EB-410C-81CF-7217A9A1640B} - System32\Tasks\{B5421BF8-A22F-416C-9FCE-94EA2FC4D3AC} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {E2FD86D6-E8AF-4B77-BF9D-DCC472986F36} - System32\Tasks\{9B4A5C64-91B5-4E55-A18D-85713659E102} => D:\Installation\Abbyy PDF TRansformer\setup.exe [2004-08-02] ()
Task: {E31E147D-9EF0-496C-98D3-794CC45D18B4} - System32\Tasks\{DFB75000-0BF4-4CF8-A183-0A193CB99C01} => E:\CLINTUT.EXE
Task: {E49E6658-5420-4505-AB97-57FFB51F43AD} - System32\Tasks\{A47E3BDE-9B26-42DE-A12F-E05867F7A669} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {EFA2749B-B66B-48FB-94F1-79E9D61DD4EC} - System32\Tasks\{CB28D417-4151-4E5D-88A1-A0433E8D6C31} => E:\CLINTUT.EXE
Task: {EFAEA987-CCA4-4EC3-A840-75102B4306F0} - System32\Tasks\{6679991B-FF07-41FF-AD4E-94CF46D4E575} => E:\CLINTUT.EXE
Task: {F2E2A4C2-8DA7-4C91-9F0C-7FAB0495705D} - System32\Tasks\{7B165A4F-5EB1-4217-9F4B-DADD785E9F21} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {F6202E30-AE55-400E-A7DD-C3514A06DDB2} - System32\Tasks\{DA1C0397-FFBA-49D0-B579-91C7FA877356} => D:\Daten\Ole Programme\Excel 3.0\EXCEL.EXE
Task: {F69376F7-CE10-4DA7-BBC9-F77296B15177} - System32\Tasks\{E423361B-E041-458C-BAE4-87782F2E0A86} => E:\CLINTUT.EXE
Task: {FA2BC0A6-8D4B-458A-85C8-2B8C72487513} - \Microsoft\Windows\MemoryDiagnostic\DecompressionFailureDetector -> Keine Datei <==== ACHTUNG
Task: {FB85B204-523E-4782-B35A-D38FF798A5B2} - System32\Tasks\{64BEF992-29E3-4280-AA79-CE4AE52CFC9D} => D:\Daten\Ole Programme\Fantasy\alt\MERSKPF2.exe
Task: {FC36DB1A-9091-414B-8961-12681C735970} - System32\Tasks\{C0019A0B-5ADA-4709-A30C-AF9693D038BB} => E:\CLINTUT.EXE
Task: {FFB4D01F-85F7-408D-BD90-00DFB827A170} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Month => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-03-07] (Sony Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


Shortcut: C:\Users\usrname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MultimediaProgramme\CDex\CDex Site.lnk -> hxxp://www.cdex.n3.net
Shortcut: C:\Users\usrname\AppData\Roaming\Microsoft\Windows\Network Shortcuts\My Web Sites on MSN\target.lnk -> hxxp://www.msnusers.co

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2014-08-24 15:18 - 2005-03-12 01:07 - 000087040 _____ () C:\Windows\System32\redmonnt.dll
2013-09-04 23:17 - 2013-09-04 23:17 - 004300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2018-01-08 14:00 - 2018-01-08 14:00 - 000076456 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2014-08-22 23:27 - 2012-04-03 20:45 - 000128280 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
2011-11-09 08:55 - 2011-11-09 08:55 - 000016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2012-02-09 22:19 - 2012-02-09 22:19 - 000369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2017-07-21 20:53 - 2018-01-25 22:54 - 000733184 _____ () L:\Notizblock\NotizblockP.exe
2014-08-22 23:40 - 2012-03-07 17:57 - 000021128 _____ () C:\Program Files (x86)\Sony\VAIO Control Center\VESBasePS.dll
2013-09-04 23:14 - 2013-09-04 23:14 - 004300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2017-09-14 06:51 - 2017-09-14 06:51 - 000172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\f203ecbdc8e8f4f836e1627efb89f9ae\IsdiInterop.ni.dll
2014-08-22 23:27 - 2011-11-29 19:00 - 000059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-08-22 23:27 - 2012-04-03 20:46 - 001198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:6DDED7D9 [149]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2056474287-1676708938-3234247259-1000\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 172.30.3.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\Services: Apple Mobile Device Service => 2
MSCONFIG\Services: IconMan_R => 2
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: OpenVPNService => 3
MSCONFIG\Services: OpenVPNServiceInteractive => 2
MSCONFIG\Services: OpenVPNServiceLegacy => 3
MSCONFIG\startupfolder: C:^Users^usrname^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Tintenwarnungen überwachen - HP Officejet 6600.lnk => C:\Windows\pss\Tintenwarnungen überwachen - HP Officejet 6600.lnk.Startup
MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: NeroCheck => C:\Windows\system32\NeroCheck.exe
MSCONFIG\startupreg: OPENVPN-GUI => C:\Program Files\OpenVPN\bin\openvpn-gui.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: Syncios device service => C:\Program Files (x86)\Syncios\SynciosDeviceService.exe

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{B03BEFC8-F752-49BC-AE10-88F60F7ECEBB}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{040D646C-1D23-4F74-B040-AC0E4C132946}] => (Allow) C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe
FirewallRules: [{732FDC6B-75FB-42AE-8B1C-4FCE730569D3}] => (Allow) C:\Program Files\Sony\VAIO Smart Network\WFDA\WiFiDirectApplication.exe
FirewallRules: [{B7CECA6C-31CF-4EA9-95E6-529C36BDACE7}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{D1756B5F-3571-41E6-9232-F6AD16AF85CF}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{903623A5-342C-4386-BA5C-A3D09493D7BB}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{EF153DC5-2370-4B75-8A22-1EC212737ED0}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{6F5C6BA3-39B3-4CEB-97F6-7E5C0F1404F3}] => (Allow) C:\Program Files\HP\HP Officejet 6600\Bin\DeviceSetup.exe
FirewallRules: [{7F7DAB72-312C-4423-8452-CA8E58F2A749}] => (Allow) C:\Program Files\HP\HP Officejet 6600\Bin\HPNetworkCommunicator.exe
FirewallRules: [TCP Query User{02D3B74A-4DB8-40E1-A767-918D36286800}D:\programme\jivex\jre\bin\jivex[dv]] => (Allow) D:\programme\jivex\jre\bin\jivex[dv]
FirewallRules: [UDP Query User{1EB438FF-B9B0-4565-BDBE-FDC6D31A94AE}D:\programme\jivex\jre\bin\jivex[dv]] => (Allow) D:\programme\jivex\jre\bin\jivex[dv]
FirewallRules: [{B874F25A-561B-488A-9E89-E1AFF78FD6D7}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Free Audio Recorder\Apowersoft Free Audio Recorder.exe
FirewallRules: [{22128676-84D0-43F8-971B-E12BE76FA677}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Free Audio Recorder\Apowersoft Free Audio Recorder.exe
FirewallRules: [TCP Query User{CF0DA9D0-AE77-4EE5-B5B4-6EC006C814B3}C:\users\usrname\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light] => (Allow) C:\users\usrname\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light
FirewallRules: [UDP Query User{BAAE6AF0-976F-45F7-8F2F-1A8ABC31B863}C:\users\usrname\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light] => (Allow) C:\users\usrname\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light
FirewallRules: [{619B0AEA-8C09-4E21-824E-3847E4EBEF55}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7DA2C88B-7306-4A25-B97C-D66F3770A496}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{80C986D5-9AFF-4B41-A8E6-7526DBACC5A4}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{3188D813-3E22-4977-AFBD-E880E342CB72}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{372FDE14-CBB0-4B27-B281-1B724B7EDFB7}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{5B43A85A-22CC-4BCF-8A2C-496ACE06C9E6}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [TCP Query User{792FA980-4CAA-4A16-9CCC-6C02F1AFE0EC}C:\program files\openvpn\bin\openvpn.exe] => (Allow) C:\program files\openvpn\bin\openvpn.exe
FirewallRules: [UDP Query User{3154798F-8B3A-40D8-8D1C-47DC4C3487F3}C:\program files\openvpn\bin\openvpn.exe] => (Allow) C:\program files\openvpn\bin\openvpn.exe
FirewallRules: [TCP Query User{2AC73C9D-AF43-485D-AC94-A04020603C72}D:\programme\jivex\jre\bin\jivex[dv]] => (Allow) D:\programme\jivex\jre\bin\jivex[dv]
FirewallRules: [UDP Query User{3E65D610-0CB6-44A2-A843-C143FDFF8203}D:\programme\jivex\jre\bin\jivex[dv]] => (Allow) D:\programme\jivex\jre\bin\jivex[dv]
FirewallRules: [{BC657296-8500-42EB-88B9-02C4BB968DC1}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{13F5DD9D-D643-4BB2-B260-7A9DA0564203}] => (Allow) LPort=2869
FirewallRules: [{FB6CE38E-C9CD-495E-9AA6-166BC535F2D7}] => (Allow) LPort=1900
FirewallRules: [TCP Query User{14947A10-F5A7-42D8-905B-82BDA301A1C3}C:\users\usrname\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light] => (Block) C:\users\usrname\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light
FirewallRules: [UDP Query User{F9CB451C-8E52-4B8D-ACBF-F98E938C0E23}C:\users\usrname\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light] => (Block) C:\users\usrname\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light
FirewallRules: [{6A1171BC-613B-4645-8705-A61E682194BA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8DAE7A49-D28F-4691-A229-8F546D316BC0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{17F741B5-95F9-4EA1-8187-9A84F3C71654}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{DE683ADF-B8E1-444C-BCC3-D489659350B5}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{9768813D-13FF-464E-8886-40779D2D281D}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{366B6A72-7A80-4F73-A843-509F8BE4402D}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [{B182A8C0-2D25-4F01-8141-024A5F2AB158}] => (Allow) E:\fsetup.exe
FirewallRules: [{DF5B27B6-575B-4D0A-B1DE-CE2097B0B3FE}] => (Allow) E:\fsetup.exe
FirewallRules: [{D1C4449E-F15A-4D65-B264-81C6225256BD}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{16F7D064-840A-47F0-A059-7E251B730582}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{D5C690D7-D829-4951-992C-F5953AED2291}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{88A6370F-88E6-4153-8A47-DB609E9753BE}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{CF71E744-670C-4765-9359-A315EBED6CA1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{C9116E27-EA72-4AE1-A691-772E727F0E76}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{D2540A4D-E962-40A8-9AAC-CEB5517CD9BE}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{4B273669-2193-4FC6-B12B-3C89FB05E5D0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [TCP Query User{A77FA688-EAF5-4329-A57D-D1D46599ED06}C:\users\usrname\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\usrname\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{1162F35B-8E1D-4D4B-AF12-E60CE2EE5882}C:\users\usrname\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\usrname\appdata\roaming\spotify\spotify.exe
FirewallRules: [{FB2CCDDF-77E4-4F24-96F9-68557D3FE614}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite Platinum.SP2\RpcAgentSrv.exe
FirewallRules: [{EA4AD15F-CE35-4C8D-A0DF-2D38F496459A}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite Platinum.SP2\WNt600x64\RpcSandraSrv.exe

==================== Wiederherstellungspunkte =========================

14-11-2017 10:34:11 Installed Windows 7 USB/DVD Download Tool
15-11-2017 08:38:55 Windows Update
22-11-2017 18:54:35 Windows Update
30-11-2017 00:00:48 Windows Update
03-02-2018 12:38:30 No23 Recorder wird installiert
03-02-2018 13:10:23 Installiert Realtek High Definition Audio Driver
04-02-2018 15:32:01 SiSoftware Sandra Lite
04-02-2018 15:32:41 Microsoft Visual C++ 2017 Redistributable (x86) - 14.12.25810
04-02-2018 15:32:50 Microsoft Visual C++ 2017 Redistributable (x86) - 14.11.25325
04-02-2018 15:32:57 Microsoft Visual C++ 2017 Redistributable (x64) - 14.12.25810
04-02-2018 15:33:10 Microsoft Visual C++ 2017 Redistributable (x64) - 14.11.25325

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Unknown Device
Description: Unknown Device
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standard-USB-Hostcontroller)
Service: 
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (02/13/2018 08:52:09 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 11174133

Error: (02/13/2018 08:52:09 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 11174133

Error: (02/13/2018 08:52:09 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/13/2018 08:52:08 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 11173135

Error: (02/13/2018 08:52:08 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 11173135

Error: (02/13/2018 08:52:08 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/13/2018 05:45:56 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 998

Error: (02/13/2018 05:45:56 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 998


Systemfehler:
=============
Error: (02/15/2018 12:37:46 PM) (Source: Ntfs) (EventID: 137) (User: )
Description: Auf dem Volume "F:" konnte der Transaktionsressourcen-Manager aufgrund eines nicht wiederholbaren Fehlers nicht gestartet werden. Der Fehlercode ist in den Daten enthalten.

Error: (02/15/2018 12:37:15 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "Intenso" den Befehl "chkdsk" aus.

Error: (02/15/2018 12:37:15 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "Intenso" den Befehl "chkdsk" aus.

Error: (02/15/2018 12:37:15 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "Intenso" den Befehl "chkdsk" aus.

Error: (02/15/2018 12:37:15 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "Intenso" den Befehl "chkdsk" aus.

Error: (02/15/2018 12:37:15 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "Intenso" den Befehl "chkdsk" aus.

Error: (02/15/2018 12:37:14 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "Intenso" den Befehl "chkdsk" aus.

Error: (02/15/2018 12:37:14 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "Intenso" den Befehl "chkdsk" aus.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-3612QM CPU @ 2.10GHz
Prozentuale Nutzung des RAM: 40%
Installierter physikalischer RAM: 6114.36 MB
Verfügbarer physikalischer RAM: 3622.7 MB
Summe virtueller Speicher: 12226.9 MB
Verfügbarer virtueller Speicher: 9004 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:310.76 GB) (Free:212.11 GB) NTFS
Drive d: () (Fixed) (Total:619.87 GB) (Free:121.76 GB) NTFS
Drive l: (DERSTICK) (Removable) (Total:28.63 GB) (Free:11.25 GB) FAT32

\\?\Volume{0f50926e-2a48-11e4-bb2c-806e6f6e6963}\ () (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: AC2223EC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=619.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=310.8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 28.6 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt ============================