|
Log-Analyse und Auswertung: Google - Werbe(Fake-)Links legen sich über Suchergebnisse (Firefox und Chrome)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
17.11.2018, 14:04 | #1 |
| Google - Werbe(Fake-)Links legen sich über Suchergebnisse (Firefox und Chrome) Hallo Community, ich hoffe Ihr könnt helfen: Gestern wollte ich aus dem Internet eine mp3-Datei runterladen, hab leider übersehen, dass es eine exe-Datei war (wurde beim Download nicht als exe-Datei angezeigt)... Hab die Datei doppel-geklickt, und dann gibg's los: Zuerst wurde mal Microsoft Edge als Standardbrowser ausgewählt... Okay, hab Firefox wieder als Standard eingestellt... Jedoch habe ich jetzt in Firefox und Chrome immer Werbelinks vor den Google-Suchergebnissen (nicht im IE)... Zuerst werden kurz die normalen Suchergebnisse angezeigt, und dann springt die Anzeige um, und die Werbelinks legen sich über die Suchergebnisse... (Links zu Urlaubsbuchungen, Hotels und div. kryptische Angebote)... Ich hab' hier die Inhalte aus den Dateien FRST.txt, Addition.txt, AdwCleaner[C00] und AdwCleaner[S00]. Ich hoffe, Ihr könnt helfen. Lieben Dank und Gruß, Roman |
17.11.2018, 17:15 | #2 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Google - Werbe(Fake-)Links legen sich über Suchergebnisse (Firefox und Chrome)Lesestoff: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
18.11.2018, 04:07 | #3 |
| Hier die Logdateien als Text Hallo Cosinus,
__________________vielen Dank für Deine Rückmeldung und Hilfe. Nur zur Info: Ich habe zwischenzeitlich Kaspersky drüberlaufen lassen, es wurden keine Viren o.ä. gefunden, und - oh Wunder - mittlerweile tritt das merkwürdige Phänomen in Firefox nicht mehr auf, in Google Chrome jedoch nach wie vor sehr wohl. Hab die Log-Dateien soeben alle neu erstellt, ist also der aktuelle Stand. ADWCleaner hat nur mehr die S00 ausgespuckt, nicht mehr die C00 (kenn leider den Unterschied nicht) Würd' mich freuen, wenn sich die Ursache eruieren lässt, vielleicht versteckt sich ja auch noch ein anderer Bug im System, von dem ich gar nix weiß... Besten Dank für alle Hilfe!!! Gruß, Roman Hier also nun die Codes: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 15.11.2018 durchgeführt von xxxxx (Administrator) auf RS-OFFICE (18-11-2018 03:48:42) Gestartet von C:\Users\xxxxx\Downloads Geladene Profile: xxxxx (Verfügbare Profile: xxxxx & DefaultAppPool) Platform: Windows 10 Pro Version 1803 17134.407 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe (ABBYY Production LLC) C:\Program Files (x86)\ABBYY FineReader 12\NetworkLicenseServer.exe (ABBYY) C:\Program Files (x86)\ABBYY Screenshot Reader\NetworkLicenseServer.exe () C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (ALL-INKL.COM) C:\Program Files\ALL-INKL WebDisk\WebdiskService.exe (AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\avp.exe (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe () C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe (DTS) C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe () C:\Program Files (x86)\FreeStyle Libre\MAS.FreeStyleLibre.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe (VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe (Microsoft Corporation) C:\Windows\System32\mqsvc.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe (Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.4.3.236\WsAppService.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\SkypeApp.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe (AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\avpui.exe () C:\Program Files\WindowsApps\AudibleInc.AudibleforWindowsPhone_10.5.49.0_x64__xns73kv1ymhp2\AudibleRT.WindowsPhone.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\Video.UI.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.10314.31700.1000_x64__8wekyb3d8bbwe\Office16\OfficeHubTaskHost.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (RME) C:\Windows\System32\hdsp32.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (F.J. Wechselberger) C:\Program Files (x86)\MyPhoneExplorer\MyPhoneExplorer.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe (shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe (Contour Design, Inc.) C:\Program Files (x86)\Contour Shuttle\ShuttleHelper.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Contour Design, Inc.) C:\Program Files (x86)\Contour Shuttle\ShuttleEngine.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe (HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe (HP Inc.) C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe (AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 2.0\ksde.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe (Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 2.0\ksdeui.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1809.2731.0_x64__8wekyb3d8bbwe\Calculator.exe () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18091.10321.0_x64__8wekyb3d8bbwe\Music.UI.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (ALL-INKL.COM) C:\Program Files\ALL-INKL WebDisk\ALL-INKL.COM WebDisk.exe (The OpenVPN Project) C:\Program Files\ALL-INKL WebDisk\openvpn.exe () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Farbar) C:\Users\xxxxx\Downloads\FRST64(1).exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation) HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-03-13] (Atheros Commnucations) HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2670056 2018-09-10] (Adobe Systems, Incorporated) HKLM\...\Run: [HDSPTray1] => C:\WINDOWS\system32\hdsp32.exe [672992 2016-07-19] (RME) HKLM\...\Run: [FirefaceMixTray2] => C:\WINDOWS\system32\TotalMixFX.exe [23923416 2016-07-19] (RME) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9228800 2017-06-29] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1489920 2017-06-29] (Realtek Semiconductor) HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [43632 2010-01-19] () HKLM-x32\...\Run: [ASUS ShellProcess Execute] => C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe [252544 2010-11-25] (ASUSTeK Computer Inc.) HKLM-x32\...\Run: [FreePDF Assistant] => C:\Program Files (x86)\FreePDF_XP\fpassist.exe [373760 2014-03-18] (shbox.de) HKLM-x32\...\Run: [UATrayIcon] => C:\Program Files (x86)\Universal Audio\Powered Plugins\UATrayIcon.exe [1484800 2015-02-25] (Universal Audio, Inc.) HKLM-x32\...\Run: [UAPerfMon] => C:\Program Files (x86)\Universal Audio\Powered Plugins\UADPerfMon.exe [3822080 2015-02-25] () HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [ABBYY Screenshot Reader Retail] => C:\Program Files (x86)\ABBYY Screenshot Reader\ScreenShotReader.exe [959752 2009-10-27] (ABBYY) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) HKLM-x32\...\Run: [KORG USB-MIDI Driver] => C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe [394088 2015-01-15] (KORG Inc.) HKLM-x32\...\Run: [Bonus.SSR.FR12] => C:\Program Files (x86)\ABBYY FineReader 12\Bonus.ScreenshotReader.exe [1472312 2014-01-30] (ABBYY Production LLC.) HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation) HKLM-x32\...\Run: [Contour Shuttle Device Helper] => C:\Program Files (x86)\Contour Shuttle\ShuttleHelper.exe [126464 2015-09-23] (Contour Design, Inc.) HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [318112 2017-11-15] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [Aimersoft Helper Compact.exe] => C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe [2138272 2016-10-08] (AimerSoft) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [432776 2018-06-28] (Geek Software GmbH) HKLM-x32\...\Run: [FreeStyleLibreautorunexe] => C:\Program Files (x86)\FreeStyle Libre\MASLaunchClient.FreeStyleLibre.exe [4348928 2018-02-07] () HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Beschränkung <==== ACHTUNG HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation) HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [Remote Control Editor] => C:\Program Files (x86)\Common Files\TERRATEC\Remote\TTTvRc.exe [1844296 2011-11-09] (Elgato Systems) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [Polar FlowSync] => C:\Program Files (x86)\Polar\Polar FlowSync\FlowSync.exe [1191936 2015-11-19] (Polar Electro Oy) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [TomTomHOME.exe] => C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [254840 2018-07-04] (TomTom) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [MyPhoneExplorer] => "C:\Program Files (x86)\MyPhoneExplorer\MyPhoneExplorer.exe" autorun HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [HP Officejet Pro 8620 (NET)] => C:\Program Files\HP\HP Officejet Pro 8620\Bin\ScanToPCActivationApp.exe [3487240 2014-07-21] (Hewlett-Packard Development Company, LP) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [MP3 Skype recorder] => C:\Users\xxxxx\AppData\Local\MP3 Skype recorder\MP3SkypeRecorder.exe [2525312 2016-12-13] (Domit UK LTD) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [Lingoes] => C:\Program Files\Lingoes\Translator2\Lingoes64.exe [3422208 2014-08-16] (Lingoes Project) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [2052328 2018-07-24] (TomTom) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [QMxNetworkSync] => C:\Program Files\Common Files\MAGIX Services\QMxNetworkSync\QMxNetworkSync.exe [355584 2017-08-31] (MAGIX) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [Avanquest Message] => C:\Users\xxxxx\AppData\Local\Avanquest\Avanquest Message\AQNotif.exe [497664 2018-06-13] (Avanquest Software) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [HP OfficeJet Pro 8710 (NET)] => C:\Program Files\HP\HP OfficeJet Pro 8710\Bin\ScanToPCActivationApp.exe [3770504 2018-04-06] (HP Inc.) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [49803328 2018-09-10] (Skype Technologies S.A.) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Policies\Explorer: [NoSecurityTab] 1 HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\MountPoints2: {f28af592-9374-11e8-b5ee-002683337584} - "K:\Setup.exe" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\MountPoints2: {f28af5aa-9374-11e8-b5ee-002683337584} - "L:\InsertOtherCD.exe" Startup: C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2018-09-02] ShortcutTarget: An OneNote senden.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation) GroupPolicy: Beschränkung ? <==== ACHTUNG CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21 Tcpip\..\Interfaces\{68a71b88-e927-49c4-b198-83d75bef3dac}: [DhcpNameServer] 8.8.8.8 8.8.4.4 Tcpip\..\Interfaces\{74c993ea-6b72-499d-8a38-200fe582abb5}: [DhcpNameServer] 195.34.133.21 212.186.211.21 Internet Explorer: ================== HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/ SearchScopes: HKU\S-1-5-21-3837192191-2688150623-3177619377-1000 -> DefaultScope {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = hxxps://at.search.yahoo.com/search?fr=vmn&type=vmn__webcompa__1_0__ya__ch_WCYID10099_swoc_campaign_150520__yaie&p={searchTerms} SearchScopes: HKU\S-1-5-21-3837192191-2688150623-3177619377-1000 -> {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = hxxps://at.search.yahoo.com/search?fr=vmn&type=vmn__webcompa__1_0__ya__ch_WCYID10099_swoc_campaign_150520__yaie&p={searchTerms} BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-10-22] (Microsoft Corporation) BHO: Kein Name -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> Keine Datei BHO: Kaspersky Protection -> {EC1E29BB-F56A-45D8-B023-D3EF710FA0E0} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\IEExt\ie_plugin.dll [2018-10-02] (AO Kaspersky Lab) BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-03-13] (Atheros Commnucations) BHO-x32: Kaspersky Protection -> {EC1E29BB-F56A-45D8-B023-D3EF710FA0E0} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\IEExt\ie_plugin.dll [2018-10-02] (AO Kaspersky Lab) Toolbar: HKLM - Kaspersky Protection Toolbar - {C500C267-63BF-451F-8797-4D720C9A2ED9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\IEExt\ie_plugin.dll [2018-10-02] (AO Kaspersky Lab) Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\ThcDeskBand.dll [2011-06-24] (TerraTec Electronic GmbH) Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {C500C267-63BF-451F-8797-4D720C9A2ED9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\IEExt\ie_plugin.dll [2018-10-02] (AO Kaspersky Lab) Toolbar: HKU\S-1-5-21-3837192191-2688150623-3177619377-1000 -> Kaspersky Protection Toolbar - {C500C267-63BF-451F-8797-4D720C9A2ED9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\IEExt\ie_plugin.dll [2018-10-02] (AO Kaspersky Lab) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-10-04] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-10-04] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-10-04] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-10-04] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\xxxxx\AppData\Roaming\TomTom\HOME\Profiles\ndosaxwi.default [2018-09-08] FF Extension: (Emulator) - C:\Users\xxxxx\AppData\Roaming\TomTom\HOME\Profiles\ndosaxwi.default\Extensions\Navcore.8.351.9982@tomtom.com [2016-09-12] [Legacy] [ist nicht signiert] FF Extension: (Map status indicator) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [2018-09-08] [Legacy] [ist nicht signiert] FF ProfilePath: C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973 [2018-11-18] FF Homepage: Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973 -> hxxp://www.google.at FF NewTab: Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973 -> hxxp://www.google.at FF Session Restore: Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973 -> ist aktiviert. FF Extension: (Classic Theme Restorer) - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973\Extensions\ClassicThemeRestorer@ArisT2Noia4dev.xpi [2017-11-17] [Legacy] FF Extension: (Babylon Translation Activation) - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973\Extensions\ocr@babylon.com.xpi [2016-11-06] [Legacy] FF Extension: (Avast SafePrice) - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973\Extensions\sp@avast.com.xpi [2018-06-20] FF Extension: (Google Translator for Firefox) - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973\Extensions\translator@zoli.bod.xpi [2018-10-14] FF Extension: (Avast Online Security) - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973\Extensions\wrc@avast.com.xpi [2018-10-09] FF Extension: (Firefox Protection) - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973\Extensions\{ab10d63e-3096-4492-ab0e-5edcf4baf988} [2018-11-17] [ist nicht signiert] FF Extension: (Video DownloadHelper) - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2018-09-05] FF Extension: (URL der Filterliste) - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2018-11-14] FF Extension: (DownThemAll!) - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2018-07-25] [Legacy] FF Extension: (Firefox Monitor) - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973\features\{1d7e7e88-4ab1-4ae4-b60d-3d4b74a1a37b}\fxmonitor@mozilla.org.xpi [2018-11-14] FF HKLM\...\Firefox\Extensions: [light_plugin_F88CEF8523DE460F9FA1D6E48BF8D340@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\FFExt\light_plugin_firefox\addon.xpi FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\FFExt\light_plugin_firefox\addon.xpi [2018-05-31] FF HKLM-x32\...\Firefox\Extensions: [light_plugin_F88CEF8523DE460F9FA1D6E48BF8D340@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\FFExt\light_plugin_firefox\addon.xpi FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_31_0_0_148.dll [2018-11-13] () FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2018-01-24] (Tracker Software Products (Canada) Ltd.) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2018-01-24] (Tracker Software Products (Canada) Ltd.) FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2018-08-10] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2018-08-10] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.2.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2018-08-10] (VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2018-08-10] (VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2018-08-10] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_31_0_0_148.dll [2018-11-13] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1229199.dll [2017-03-31] (Adobe Systems, Inc.) FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-01-24] (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Keine Datei] FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Keine Datei] FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-09-15] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-09-06] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-09-06] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.) FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-01-24] (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-09-20] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-3837192191-2688150623-3177619377-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-01-24] (Tracker Software Products (Canada) Ltd.) FF Plugin HKU\S-1-5-21-3837192191-2688150623-3177619377-1000: @zoom.us/ZoomVideoPlugin -> C:\Users\xxxxx\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2018-04-02] (Zoom Video Communications, Inc.) Chrome: ======= CHR DefaultProfile: Default CHR StartupUrls: Default -> "hxxp://www.google.de/" CHR Profile: C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default [2018-11-17] CHR Extension: (Slides) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-02-11] CHR Extension: (Kaspersky Protection) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\amkpcclbbgegoafihnpgomddadjhcadd [2018-11-17] CHR Extension: (Docs) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-02-11] CHR Extension: (Google Drive) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-02-11] CHR Extension: (YouTube) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-02-11] CHR Extension: (Google Search) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-29] CHR Extension: (Sheets) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-02-11] CHR Extension: (Google Docs Offline) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-10-17] CHR Extension: (Chrome Web Store Payments) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-05-06] CHR Extension: (Gmail) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-29] CHR Extension: (Chrome Media Router) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-11-17] CHR HKLM\...\Chrome\Extension: [amkpcclbbgegoafihnpgomddadjhcadd] - hxxps://chrome.google.com/webstore/detail/amkpcclbbgegoafihnpgomddadjhcadd CHR HKLM-x32\...\Chrome\Extension: [amkpcclbbgegoafihnpgomddadjhcadd] - hxxps://chrome.google.com/webstore/detail/amkpcclbbgegoafihnpgomddadjhcadd ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 ABBYY.Licensing.FineReader.Professional.12.0; C:\Program Files (x86)\ABBYY FineReader 12\NetworkLicenseServer.exe [925904 2014-01-23] (ABBYY Production LLC) R2 ABBYY.Licensing.FineReader.ScreenshotReader.9.0; C:\Program Files (x86)\ABBYY Screenshot Reader\NetworkLicenseServer.exe [759048 2009-05-15] (ABBYY) R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2910696 2018-09-10] (Adobe Systems, Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2704872 2018-09-10] (Adobe Systems, Incorporated) R2 ALL-INKL.COM WebDisk; C:\Program Files\ALL-INKL WebDisk\WebdiskService.exe [100352 2015-03-04] (ALL-INKL.COM) [Datei ist nicht signiert] R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe [918144 2010-11-03] () R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe [915584 2010-12-02] () R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] () R2 AVP19.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\avp.exe [619640 2018-02-28] (AO Kaspersky Lab) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9667872 2018-10-24] (Microsoft Corporation) R2 DTSAudioService; C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe [218760 2017-06-29] (DTS) R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [Datei ist nicht signiert] S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [Datei ist nicht signiert] R2 FreeStyleLibre MAS Server; C:\Program Files (x86)\FreeStyle Libre\MAS.FreeStyleLibre.exe [4538368 2018-02-07] () [Datei ist nicht signiert] R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [333688 2018-06-13] (HP Inc.) R2 HPTouchpointAnalyticsService; C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe [332216 2017-11-22] (HP Inc.) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Datei ist nicht signiert] S3 klvssbridge64_19.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\vssbridge64.exe [416560 2018-05-31] (AO Kaspersky Lab) R2 KSDE2.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 2.0\ksde.exe [354672 2017-01-24] (AO Kaspersky Lab) R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764456 2018-07-19] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764456 2018-07-19] (NVIDIA Corporation) R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [432776 2018-06-28] (Geek Software GmbH) S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite Titanium.SP2\RpcAgentSrv.exe [136192 2018-09-25] (SiSoftware) [Datei ist nicht signiert] S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4737448 2018-07-15] (Microsoft Corporation) S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] () R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (DEVGURU Co., LTD.) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10351856 2016-12-15] (TeamViewer GmbH) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4451616 2018-04-12] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [107136 2018-09-21] (Microsoft Corporation) R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.236\WsAppService.exe [495840 2018-01-26] (Wondershare) R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r R2 PaceLicenseDServices; "C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe" -u https://activation.paceap.com/InitiateActivation [X] S3 WsDrvInst; C:\Program Files (x86)\Aimersoft\Aimersoft iMusic\DriverInstall.exe [X] ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] () R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] () R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [243400 2018-01-27] (AO Kaspersky Lab) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2017-01-16] (Samsung Electronics Co., Ltd.) R3 hdsp; C:\WINDOWS\system32\drivers\hdsp_64.sys [83456 2016-02-22] (RME) R3 iLokDrvr; C:\WINDOWS\System32\drivers\iLokDrvr.sys [33544 2018-07-11] () R0 klbackupdisk; C:\WINDOWS\System32\DRIVERS\klbackupdisk.sys [73416 2018-10-02] (AO Kaspersky Lab) R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [123152 2018-10-02] (AO Kaspersky Lab) R2 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [89168 2018-10-02] (AO Kaspersky Lab) S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [29208 2017-03-30] (AO Kaspersky Lab) R3 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [220472 2018-10-02] (AO Kaspersky Lab) R1 klhk; C:\WINDOWS\System32\drivers\klhk.sys [1214752 2018-10-02] (AO Kaspersky Lab) R3 klids; C:\ProgramData\Kaspersky Lab\AVP19.0.0\Bases\klids.sys [185576 2018-10-24] (AO Kaspersky Lab) R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1113912 2018-10-02] (AO Kaspersky Lab) R1 klim6; C:\WINDOWS\system32\DRIVERS\klim6.sys [57032 2018-02-12] (AO Kaspersky Lab) R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [58048 2018-01-15] (AO Kaspersky Lab) R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [83496 2017-12-11] (AO Kaspersky Lab) R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [50648 2017-05-30] (AO Kaspersky Lab) S3 klpnpflt; C:\WINDOWS\system32\DRIVERS\klpnpflt.sys [45768 2018-10-02] (AO Kaspersky Lab) R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [52152 2016-06-07] (The OpenVPN Project) R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [238528 2018-11-03] (AO Kaspersky Lab) R3 klupd_klif_kimul; C:\WINDOWS\System32\Drivers\klupd_klif_kimul.sys [100136 2018-11-17] (AO Kaspersky Lab) R3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [289856 2018-11-03] (AO Kaspersky Lab) R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [110640 2018-11-03] (AO Kaspersky Lab) R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [193168 2018-11-17] (AO Kaspersky Lab) R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [100552 2018-02-17] (AO Kaspersky Lab) R1 Klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [161080 2018-07-23] (AO Kaspersky Lab) R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [203968 2018-02-24] (AO Kaspersky Lab) R3 KORGUMDS; C:\WINDOWS\System32\Drivers\KORGUM64.SYS [34128 2015-01-15] (KORG INC.) R3 mlkumidi; C:\WINDOWS\system32\drivers\mlkumidi.sys [55856 2014-08-30] (MusicLab, Inc.) R2 npf; C:\WINDOWS\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_amd64_8e4f37220e99138f\nvlddmkm.sys [17213824 2018-09-25] (NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30656 2018-07-12] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [69544 2018-06-08] (NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [65792 2018-04-24] (NVIDIA Corporation) R3 PowerCore; C:\WINDOWS\System32\drivers\pcore.sys [325840 2013-11-08] (TC Electronic A/S) S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite Titanium.SP2\WNt600x64\Sandra.sys [23112 2009-08-07] (SiSoftware) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2017-01-16] (Samsung Electronics Co., Ltd.) R3 synusb64; C:\WINDOWS\System32\drivers\synusb64.sys [30352 2011-12-14] (Steinberg Media Technologies GmbH) R3 UAD2Pcie; C:\WINDOWS\System32\drivers\UAD2Pcie.sys [48640 2015-02-25] (Universal Audio Inc.) R3 UAD2System; C:\WINDOWS\System32\drivers\UAD2System.sys [94208 2015-02-25] (Universal Audio Inc.) S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [22016 2018-04-12] (Microsoft Corporation) S3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [200832 2018-01-15] (Oracle Corporation) R0 vsock; C:\WINDOWS\System32\drivers\vsock.sys [76480 2015-01-07] (VMware, Inc.) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44616 2018-04-12] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [331680 2018-04-12] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [44032 2018-04-12] (Microsoft Corporation) S3 WsAudio_Device; C:\WINDOWS\system32\drivers\VirtualAudio.sys [48424 2018-01-19] (Wondershare) U3 idsvc; kein ImagePath ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2018-11-18 03:48 - 2018-11-18 03:48 - 002416128 _____ (Farbar) C:\Users\xxxxx\Downloads\FRST64(1).exe 2018-11-18 03:48 - 2018-11-18 03:48 - 000038344 _____ C:\Users\xxxxx\Downloads\FRST.txt 2018-11-17 13:47 - 2018-11-17 13:47 - 000065832 _____ C:\Users\xxxxx\Desktop\Addition_Teil2.txt 2018-11-17 13:46 - 2018-11-17 13:46 - 000049347 _____ C:\Users\xxxxx\Desktop\Addition_Teil1.txt 2018-11-17 12:45 - 2018-11-17 13:20 - 000115247 _____ C:\Users\xxxxx\Desktop\Addition.txt 2018-11-17 12:44 - 2018-11-18 03:48 - 000000000 ____D C:\FRST 2018-11-17 12:44 - 2018-11-17 13:20 - 000097803 _____ C:\Users\xxxxx\Desktop\FRST.txt 2018-11-17 12:43 - 2018-11-17 12:43 - 002416128 _____ (Farbar) C:\Users\xxxxx\Downloads\FRST64.exe 2018-11-17 03:31 - 2018-11-17 03:31 - 005937968 _____ (EnigmaSoft Limited) C:\Users\xxxxx\Downloads\sh-remover.exe 2018-11-17 02:46 - 2018-11-17 13:19 - 000006769 _____ C:\Users\xxxxx\Desktop\AdwCleaner[C00].txt 2018-11-17 02:45 - 2018-11-17 13:19 - 000007815 _____ C:\Users\xxxxx\Desktop\AdwCleaner[S00].txt 2018-11-17 02:45 - 2018-11-17 02:46 - 000000000 ____D C:\AdwCleaner 2018-11-17 02:42 - 2018-11-17 02:42 - 007592144 _____ (Malwarebytes) C:\Users\xxxxx\Desktop\adwcleaner_7.2.4.0.exe 2018-11-17 02:32 - 2018-11-17 02:32 - 000002583 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk 2018-11-17 02:32 - 2018-11-17 02:32 - 000002579 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk 2018-11-17 02:32 - 2018-11-17 02:32 - 000002558 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk 2018-11-17 02:32 - 2018-11-17 02:32 - 000002533 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk 2018-11-17 02:32 - 2018-11-17 02:32 - 000002500 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk 2018-11-17 02:32 - 2018-11-17 02:32 - 000002497 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk 2018-11-17 02:32 - 2018-11-17 02:32 - 000002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk 2018-11-17 02:32 - 2018-11-17 02:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools 2018-11-17 01:58 - 2018-11-17 01:58 - 004277760 _____ (MAGIX AG) C:\Users\xxxxx\Downloads\Protein.dll 2018-11-17 01:58 - 2018-11-17 01:58 - 000000000 ____D C:\Users\xxxxx\AppData\Local\WServices 2018-11-17 01:44 - 2018-11-17 01:44 - 005513216 _____ C:\Users\xxxxx\Downloads\magix-video-delux-2013-keygen_16a02ca-1246.iso 2018-11-16 21:16 - 2018-11-16 21:16 - 000000000 ____D C:\Program Files\rempl 2018-11-13 21:40 - 2018-11-01 12:46 - 002394960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL 2018-11-13 21:40 - 2018-11-01 12:27 - 000878592 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll 2018-11-13 21:40 - 2018-11-01 08:25 - 001934808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2018-11-13 21:40 - 2018-11-01 08:25 - 000413720 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2018-11-13 21:40 - 2018-11-01 05:50 - 000861712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll 2018-11-13 21:40 - 2018-11-01 05:48 - 002331480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2018-11-13 21:40 - 2018-11-01 05:48 - 001805656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2018-11-13 21:40 - 2018-11-01 05:30 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll 2018-11-13 21:39 - 2018-11-01 12:49 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe 2018-11-13 21:39 - 2018-11-01 12:45 - 004527776 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2018-11-13 21:39 - 2018-11-01 12:45 - 001617320 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2018-11-13 21:39 - 2018-11-01 12:45 - 001376672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2018-11-13 21:39 - 2018-11-01 12:32 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll 2018-11-13 21:39 - 2018-11-01 12:31 - 006602240 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2018-11-13 21:39 - 2018-11-01 12:30 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2018-11-13 21:39 - 2018-11-01 12:30 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msisip.dll 2018-11-13 21:39 - 2018-11-01 12:29 - 012710400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2018-11-13 21:39 - 2018-11-01 12:29 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll 2018-11-13 21:39 - 2018-11-01 12:28 - 004491264 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe 2018-11-13 21:39 - 2018-11-01 12:28 - 003649024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2018-11-13 21:39 - 2018-11-01 12:28 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnntfy.dll 2018-11-13 21:39 - 2018-11-01 12:27 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll 2018-11-13 21:39 - 2018-11-01 12:26 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll 2018-11-13 21:39 - 2018-11-01 12:26 - 000503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2018-11-13 21:39 - 2018-11-01 12:26 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe 2018-11-13 21:39 - 2018-11-01 12:26 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2018-11-13 21:39 - 2018-11-01 12:26 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe 2018-11-13 21:39 - 2018-11-01 12:25 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe 2018-11-13 21:39 - 2018-11-01 11:09 - 001027000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2018-11-13 21:39 - 2018-11-01 10:59 - 005669888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2018-11-13 21:39 - 2018-11-01 10:56 - 011902464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2018-11-13 21:39 - 2018-11-01 10:56 - 000226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnntfy.dll 2018-11-13 21:39 - 2018-11-01 10:56 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msisip.dll 2018-11-13 21:39 - 2018-11-01 10:54 - 003397632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe 2018-11-13 21:39 - 2018-11-01 10:54 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2018-11-13 21:39 - 2018-11-01 10:53 - 000908288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll 2018-11-13 21:39 - 2018-11-01 10:52 - 002892800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2018-11-13 21:39 - 2018-11-01 10:15 - 023861760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2018-11-13 21:39 - 2018-11-01 10:13 - 019525120 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll 2018-11-13 21:39 - 2018-11-01 08:39 - 001035256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe 2018-11-13 21:39 - 2018-11-01 08:38 - 000269336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll 2018-11-13 21:39 - 2018-11-01 08:37 - 000272408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll 2018-11-13 21:39 - 2018-11-01 08:28 - 001221432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2018-11-13 21:39 - 2018-11-01 08:28 - 001062712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2018-11-13 21:39 - 2018-11-01 08:28 - 001029944 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2018-11-13 21:39 - 2018-11-01 08:28 - 000566568 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2018-11-13 21:39 - 2018-11-01 08:28 - 000134968 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2018-11-13 21:39 - 2018-11-01 08:28 - 000076088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2018-11-13 21:39 - 2018-11-01 08:27 - 001017152 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll 2018-11-13 21:39 - 2018-11-01 08:27 - 000491200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2018-11-13 21:39 - 2018-11-01 08:26 - 007432120 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2018-11-13 21:39 - 2018-11-01 08:26 - 003291640 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2018-11-13 21:39 - 2018-11-01 08:26 - 003180080 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2018-11-13 21:39 - 2018-11-01 08:26 - 001363536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 009089848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2018-11-13 21:39 - 2018-11-01 08:25 - 007520088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 004404912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 002822456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2018-11-13 21:39 - 2018-11-01 08:25 - 002571320 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 002371296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 001784680 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 001456728 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2018-11-13 21:39 - 2018-11-01 08:25 - 001288920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 001257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2018-11-13 21:39 - 2018-11-01 08:25 - 001209888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 001190248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 001140672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2018-11-13 21:39 - 2018-11-01 08:25 - 000982592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2018-11-13 21:39 - 2018-11-01 08:25 - 000885968 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 000793080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2018-11-13 21:39 - 2018-11-01 08:25 - 000713472 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 000594224 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2018-11-13 21:39 - 2018-11-01 08:25 - 000463672 _____ (Microsoft Corporation) C:\WINDOWS\system32\coml2.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 000412984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2018-11-13 21:39 - 2018-11-01 08:25 - 000375824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys 2018-11-13 21:39 - 2018-11-01 08:25 - 000268088 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 000261000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2018-11-13 21:39 - 2018-11-01 08:09 - 025855488 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2018-11-13 21:39 - 2018-11-01 08:03 - 003397120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2018-11-13 21:39 - 2018-11-01 08:03 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmtask.exe 2018-11-13 21:39 - 2018-11-01 08:02 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmapi.dll 2018-11-13 21:39 - 2018-11-01 08:02 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\CSystemEventsBrokerClient.dll 2018-11-13 21:39 - 2018-11-01 08:01 - 022716416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2018-11-13 21:39 - 2018-11-01 08:01 - 009084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2018-11-13 21:39 - 2018-11-01 08:01 - 007057408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2018-11-13 21:39 - 2018-11-01 08:00 - 008189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2018-11-13 21:39 - 2018-11-01 08:00 - 006031360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2018-11-13 21:39 - 2018-11-01 08:00 - 003392000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2018-11-13 21:39 - 2018-11-01 08:00 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2018-11-13 21:39 - 2018-11-01 08:00 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll 2018-11-13 21:39 - 2018-11-01 07:59 - 000322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2018-11-13 21:39 - 2018-11-01 07:59 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll 2018-11-13 21:39 - 2018-11-01 07:59 - 000192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll 2018-11-13 21:39 - 2018-11-01 07:59 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPTaskScheduler.dll 2018-11-13 21:39 - 2018-11-01 07:59 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll 2018-11-13 21:39 - 2018-11-01 07:58 - 007573504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2018-11-13 21:39 - 2018-11-01 07:58 - 004867072 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2018-11-13 21:39 - 2018-11-01 07:58 - 004383744 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll 2018-11-13 21:39 - 2018-11-01 07:58 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2018-11-13 21:39 - 2018-11-01 07:58 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2018-11-13 21:39 - 2018-11-01 07:58 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2018-11-13 21:39 - 2018-11-01 07:58 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 003381248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 002825728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 000356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2018-11-13 21:39 - 2018-11-01 07:56 - 002929664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll 2018-11-13 21:39 - 2018-11-01 07:56 - 002172928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2018-11-13 21:39 - 2018-11-01 07:56 - 001768448 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2018-11-13 21:39 - 2018-11-01 07:56 - 001395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2018-11-13 21:39 - 2018-11-01 07:56 - 000506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll 2018-11-13 21:39 - 2018-11-01 07:55 - 002738688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2018-11-13 21:39 - 2018-11-01 07:55 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2018-11-13 21:39 - 2018-11-01 07:55 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 001679360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 001551360 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 001264640 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 001225216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 001023488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 000943616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 000884736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 000796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 000606208 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2018-11-13 21:39 - 2018-11-01 07:53 - 002248192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2018-11-13 21:39 - 2018-11-01 07:53 - 001373696 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2018-11-13 21:39 - 2018-11-01 07:53 - 001159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll 2018-11-13 21:39 - 2018-11-01 07:53 - 000889344 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll 2018-11-13 21:39 - 2018-11-01 07:53 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2018-11-13 21:39 - 2018-11-01 07:53 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2018-11-13 21:39 - 2018-11-01 06:39 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim 2018-11-13 21:39 - 2018-11-01 06:08 - 002417952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2018-11-13 21:39 - 2018-11-01 05:50 - 000786288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2018-11-13 21:39 - 2018-11-01 05:48 - 006039064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2018-11-13 21:39 - 2018-11-01 05:48 - 004790184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2018-11-13 21:39 - 2018-11-01 05:48 - 002478872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2018-11-13 21:39 - 2018-11-01 05:48 - 001011872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2018-11-13 21:39 - 2018-11-01 05:48 - 000880248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2018-11-13 21:39 - 2018-11-01 05:48 - 000384520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coml2.dll 2018-11-13 21:39 - 2018-11-01 05:47 - 006570368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2018-11-13 21:39 - 2018-11-01 05:47 - 001980776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2018-11-13 21:39 - 2018-11-01 05:47 - 001379792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2018-11-13 21:39 - 2018-11-01 05:47 - 001020064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2018-11-13 21:39 - 2018-11-01 05:47 - 000581600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll 2018-11-13 21:39 - 2018-11-01 05:47 - 000567256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2018-11-13 21:39 - 2018-11-01 05:47 - 000129304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2018-11-13 21:39 - 2018-11-01 05:40 - 022015488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2018-11-13 21:39 - 2018-11-01 05:35 - 019403776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2018-11-13 21:39 - 2018-11-01 05:34 - 002700288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2018-11-13 21:39 - 2018-11-01 05:33 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2018-11-13 21:39 - 2018-11-01 05:33 - 003711488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2018-11-13 21:39 - 2018-11-01 05:32 - 006647296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2018-11-13 21:39 - 2018-11-01 05:31 - 005307904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2018-11-13 21:39 - 2018-11-01 05:31 - 000288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll 2018-11-13 21:39 - 2018-11-01 05:30 - 005883904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2018-11-13 21:39 - 2018-11-01 05:30 - 005775872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2018-11-13 21:39 - 2018-11-01 05:30 - 002449408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll 2018-11-13 21:39 - 2018-11-01 05:30 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll 2018-11-13 21:39 - 2018-11-01 05:30 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2018-11-13 21:39 - 2018-11-01 05:30 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2018-11-13 21:39 - 2018-11-01 05:29 - 002258944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2018-11-13 21:39 - 2018-11-01 05:29 - 001986560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll 2018-11-13 21:39 - 2018-11-01 05:29 - 001862656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll 2018-11-13 21:39 - 2018-11-01 05:29 - 000848384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll 2018-11-13 21:39 - 2018-11-01 05:29 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2018-11-13 21:39 - 2018-11-01 05:29 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2018-11-13 21:39 - 2018-11-01 05:29 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll 2018-11-13 21:39 - 2018-11-01 05:28 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll 2018-11-13 21:39 - 2018-11-01 05:28 - 001000448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2018-11-13 21:39 - 2018-11-01 05:28 - 000978944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2018-11-13 21:39 - 2018-11-01 05:27 - 001627648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2018-11-13 21:39 - 2018-11-01 05:27 - 000856576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2018-11-13 21:39 - 2018-11-01 05:27 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll 2018-11-13 21:39 - 2018-11-01 05:27 - 000678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2018-11-13 21:39 - 2018-11-01 05:27 - 000534016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2018-11-13 21:39 - 2018-11-01 05:26 - 000795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll 2018-11-13 21:39 - 2018-11-01 05:26 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll 2018-11-13 21:39 - 2018-11-01 05:26 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2018-11-13 21:39 - 2018-10-21 14:04 - 002267448 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll 2018-11-13 21:39 - 2018-10-21 14:00 - 021386368 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2018-11-13 21:39 - 2018-10-21 14:00 - 001639560 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2018-11-13 21:39 - 2018-10-21 14:00 - 001516120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2018-11-13 21:39 - 2018-10-21 14:00 - 000790416 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2018-11-13 21:39 - 2018-10-21 14:00 - 000396304 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2018-11-13 21:39 - 2018-10-21 13:59 - 000766480 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll 2018-11-13 21:39 - 2018-10-21 13:59 - 000236728 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll 2018-11-13 21:39 - 2018-10-21 13:46 - 013572096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2018-11-13 21:39 - 2018-10-21 13:46 - 004393472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2018-11-13 21:39 - 2018-10-21 13:45 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2018-11-13 21:39 - 2018-10-21 13:44 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe 2018-11-13 21:39 - 2018-10-21 13:44 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\INETRES.dll 2018-11-13 21:39 - 2018-10-21 13:43 - 000345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll 2018-11-13 21:39 - 2018-10-21 13:43 - 000276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll 2018-11-13 21:39 - 2018-10-21 13:43 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll 2018-11-13 21:39 - 2018-10-21 13:42 - 001127936 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll 2018-11-13 21:39 - 2018-10-21 13:42 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll 2018-11-13 21:39 - 2018-10-21 13:42 - 000592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll 2018-11-13 21:39 - 2018-10-21 13:42 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll 2018-11-13 21:39 - 2018-10-21 13:41 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2018-11-13 21:39 - 2018-10-21 12:41 - 001540408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll 2018-11-13 21:39 - 2018-10-21 12:41 - 000023056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hvsicontainerservice.dll 2018-11-13 21:39 - 2018-10-21 12:38 - 001322376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2018-11-13 21:39 - 2018-10-21 12:38 - 000662312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2018-11-13 21:39 - 2018-10-21 12:38 - 000660480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll 2018-11-13 21:39 - 2018-10-21 12:38 - 000221216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeManagerObj.dll 2018-11-13 21:39 - 2018-10-21 12:37 - 020381808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2018-11-13 21:39 - 2018-10-21 12:37 - 001626656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2018-11-13 21:39 - 2018-10-21 12:28 - 012501504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2018-11-13 21:39 - 2018-10-21 12:28 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\INETRES.dll 2018-11-13 21:39 - 2018-10-21 12:23 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll 2018-11-13 21:39 - 2018-10-21 12:23 - 000523264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll 2018-11-13 21:39 - 2018-10-21 12:22 - 002405888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll 2018-11-13 21:39 - 2018-10-21 12:22 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll 2018-11-13 21:39 - 2018-10-21 10:29 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll 2018-11-13 21:39 - 2018-10-21 09:44 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll 2018-11-13 21:39 - 2018-10-21 08:48 - 005602456 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2018-11-13 21:39 - 2018-10-21 08:47 - 000368440 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll 2018-11-13 21:39 - 2018-10-21 08:46 - 000717112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll 2018-11-13 21:39 - 2018-10-21 08:46 - 000709936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2018-11-13 21:39 - 2018-10-21 08:46 - 000611640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2018-11-13 21:39 - 2018-10-21 08:46 - 000560136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2018-11-13 21:39 - 2018-10-21 08:46 - 000497864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll 2018-11-13 21:39 - 2018-10-21 08:46 - 000171024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2018-11-13 21:39 - 2018-10-21 08:45 - 003283512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll 2018-11-13 21:39 - 2018-10-21 08:45 - 002719032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2018-11-13 21:39 - 2018-10-21 08:45 - 001946208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2018-11-13 21:39 - 2018-10-21 08:45 - 001098064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll 2018-11-13 21:39 - 2018-10-21 08:45 - 000607136 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2018-11-13 21:39 - 2018-10-21 08:45 - 000185120 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll 2018-11-13 21:39 - 2018-10-21 08:45 - 000175624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys 2018-11-13 21:39 - 2018-10-21 08:45 - 000139792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys 2018-11-13 21:39 - 2018-10-21 08:45 - 000058088 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe 2018-11-13 21:39 - 2018-10-21 08:28 - 016592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2018-11-13 21:39 - 2018-10-21 08:22 - 004710912 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2018-11-13 21:39 - 2018-10-21 08:21 - 001589248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll 2018-11-13 21:39 - 2018-10-21 08:21 - 000123424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll 2018-11-13 21:39 - 2018-10-21 08:20 - 000424000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll 2018-11-13 21:39 - 2018-10-21 08:20 - 000295224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll 2018-11-13 21:39 - 2018-10-21 08:20 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll 2018-11-13 21:39 - 2018-10-21 08:20 - 000141312 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe 2018-11-13 21:39 - 2018-10-21 08:20 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll 2018-11-13 21:39 - 2018-10-21 08:19 - 002487088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2018-11-13 21:39 - 2018-10-21 08:19 - 001620776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2018-11-13 21:39 - 2018-10-21 08:19 - 001130768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll 2018-11-13 21:39 - 2018-10-21 08:19 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe 2018-11-13 21:39 - 2018-10-21 08:19 - 000505616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll 2018-11-13 21:39 - 2018-10-21 08:19 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2018-11-13 21:39 - 2018-10-21 08:19 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll 2018-11-13 21:39 - 2018-10-21 08:19 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys 2018-11-13 21:39 - 2018-10-21 08:19 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll 2018-11-13 21:39 - 2018-10-21 08:19 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2018-11-13 21:39 - 2018-10-21 08:19 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys 2018-11-13 21:39 - 2018-10-21 08:19 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ofdeploy.exe 2018-11-13 21:39 - 2018-10-21 08:19 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvrcpAppSvc.dll 2018-11-13 21:39 - 2018-10-21 08:19 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhf.sys 2018-11-13 21:39 - 2018-10-21 08:19 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll 2018-11-13 21:39 - 2018-10-21 08:18 - 000761344 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2018-11-13 21:39 - 2018-10-21 08:18 - 000461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Activities.dll 2018-11-13 21:39 - 2018-10-21 08:18 - 000395264 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvctpSvc.dll 2018-11-13 21:39 - 2018-10-21 08:18 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll 2018-11-13 21:39 - 2018-10-21 08:18 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll 2018-11-13 21:39 - 2018-10-21 08:18 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll 2018-11-13 21:39 - 2018-10-21 08:18 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll 2018-11-13 21:39 - 2018-10-21 08:17 - 001826816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll 2018-11-13 21:39 - 2018-10-21 08:17 - 001668096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdprt.dll 2018-11-13 21:39 - 2018-10-21 08:17 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys 2018-11-13 21:39 - 2018-10-21 08:17 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2018-11-13 21:39 - 2018-10-21 08:17 - 000473600 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2018-11-13 21:39 - 2018-10-21 08:17 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvrcp.dll 2018-11-13 21:39 - 2018-10-21 08:17 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll 2018-11-13 21:39 - 2018-10-21 08:16 - 002584576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2018-11-13 21:39 - 2018-10-21 08:16 - 002368512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll 2018-11-13 21:39 - 2018-10-21 08:16 - 001535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2018-11-13 21:39 - 2018-10-21 08:16 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2018-11-13 21:39 - 2018-10-21 08:16 - 000514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll 2018-11-13 21:39 - 2018-10-21 08:16 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2018-11-13 21:39 - 2018-10-21 08:15 - 003212800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2018-11-13 21:39 - 2018-10-21 08:15 - 002904064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2018-11-13 21:39 - 2018-10-21 08:15 - 000743936 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintRenderAPIHost.DLL 2018-11-13 21:39 - 2018-10-21 08:15 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2018-11-13 21:39 - 2018-10-21 08:14 - 002224640 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2018-11-13 21:39 - 2018-10-21 08:14 - 001919488 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2018-11-13 21:39 - 2018-10-21 08:14 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2018-11-13 21:39 - 2018-10-21 08:14 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2018-11-13 21:39 - 2018-10-21 08:14 - 001034752 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2018-11-13 21:39 - 2018-10-21 08:14 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2018-11-13 21:39 - 2018-10-21 08:14 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll 2018-11-13 21:39 - 2018-10-21 08:14 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll 2018-11-13 21:39 - 2018-10-21 08:14 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll 2018-11-13 21:39 - 2018-10-21 08:09 - 013873664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2018-11-13 21:39 - 2018-10-21 08:02 - 002966528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2018-11-13 21:39 - 2018-10-21 08:02 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spacebridge.dll 2018-11-13 21:39 - 2018-10-21 08:01 - 001189376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll 2018-11-13 21:39 - 2018-10-21 08:01 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Diagnostics.dll 2018-11-13 21:39 - 2018-10-21 08:00 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll 2018-11-13 21:39 - 2018-10-21 07:59 - 000602112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2018-11-13 21:39 - 2018-10-21 07:58 - 001124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdprt.dll 2018-11-13 21:39 - 2018-10-21 07:58 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2018-11-13 21:39 - 2018-10-21 07:58 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2018-11-13 21:39 - 2018-10-21 07:57 - 002611200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2018-11-13 21:39 - 2018-10-21 06:59 - 000806320 _____ C:\WINDOWS\SysWOW64\locale.nls 2018-11-13 21:39 - 2018-10-21 06:59 - 000806320 _____ C:\WINDOWS\system32\locale.nls 2018-11-13 21:39 - 2018-04-28 05:02 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2018-11-10 23:01 - 2018-11-17 00:13 - 000100136 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_kimul.sys 2018-11-08 15:41 - 2018-11-08 15:42 - 000600617 _____ C:\Users\xxxxx\Desktop\AMSG.pdf 2018-11-03 19:33 - 2018-11-17 00:13 - 000193168 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_mark.sys 2018-11-03 19:33 - 2018-11-03 21:34 - 000238528 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_arkmon.sys 2018-11-03 17:33 - 2018-11-03 17:33 - 000289856 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klark.sys 2018-11-03 17:32 - 2018-11-03 17:32 - 000110640 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klbg.sys 2018-10-28 14:40 - 2018-10-26 15:03 - 000001427 _____ C:\WINDOWS\SysWOW64\ulolo.bat 2018-10-28 14:40 - 2018-10-21 06:02 - 000000498 _____ C:\WINDOWS\SysWOW64\AdvancedRun.cfg 2018-10-28 14:40 - 2016-08-04 11:00 - 000089296 _____ (NirSoft) C:\WINDOWS\SysWOW64\AdvancedRun.exe 2018-10-25 17:55 - 2018-10-23 13:46 - 000001408 _____ C:\WINDOWS\SysWOW64\updat.bat 2018-10-22 00:09 - 2018-10-22 00:10 - 000181962 _____ C:\Users\xxxxx\Desktop\sidiary pdf export.pdf 2018-10-22 00:06 - 2018-10-21 23:47 - 000095514 _____ C:\Users\xxxxx\Desktop\export20181022-004710.csv 2018-10-20 15:50 - 2018-10-20 15:50 - 002348055 _____ C:\Users\xxxxx\Downloads\mxuninstaller.exe 2018-10-20 15:50 - 2010-11-05 13:19 - 000000000 ____D C:\Users\xxxxx\Downloads\MXUninstaller 2018-10-20 15:32 - 2018-10-20 15:34 - 000000000 ____D C:\Users\xxxxx\Desktop\Magix Backup Dateien 2018-10-19 20:10 - 2018-10-19 21:21 - 017408000 _____ C:\Users\xxxxx\AppData\Roaming\Sandra.mdb 2018-10-19 20:10 - 2018-10-19 20:10 - 000000064 _____ C:\Users\xxxxx\AppData\Roaming\Sandra.ldb 2018-10-19 20:06 - 2018-10-19 20:06 - 000001255 _____ C:\Users\Public\Desktop\SiSoftware Sandra Lite Titanium.SP2.lnk 2018-10-19 20:06 - 2018-10-19 20:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SiSoftware 2018-10-19 20:05 - 2018-10-19 20:05 - 000000000 ____D C:\Program Files\SiSoftware 2018-10-19 17:23 - 2018-10-19 17:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MP4Tools 2018-10-19 17:23 - 2018-10-19 17:23 - 000000000 ____D C:\Program Files (x86)\MP4Tools 2018-10-19 17:22 - 2018-10-19 17:22 - 020835546 _____ (Thüring IT-Consulting ) C:\Users\xxxxx\Downloads\MP4Tools-3.6.1-win32.exe ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2018-11-18 03:49 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2018-11-18 03:05 - 2015-03-10 23:19 - 000000000 ____D C:\ProgramData\Kaspersky Lab 2018-11-18 02:08 - 2015-03-13 21:27 - 000000000 ____D C:\Users\xxxxx\AppData\Roaming\vlc 2018-11-18 00:15 - 2018-06-10 01:08 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2018-11-18 00:12 - 2018-06-10 01:29 - 000004176 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B251721C-2E46-412D-8CDC-A97772E6F216} 2018-11-17 13:48 - 2018-06-10 01:10 - 002004990 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2018-11-17 13:48 - 2018-04-12 17:14 - 000854138 _____ C:\WINDOWS\system32\perfh007.dat 2018-11-17 13:48 - 2018-04-12 17:14 - 000191640 _____ C:\WINDOWS\system32\perfc007.dat 2018-11-17 13:48 - 2018-04-12 00:36 - 000000000 ____D C:\WINDOWS\INF 2018-11-17 13:44 - 2017-06-19 10:26 - 000000000 ____D C:\ProgramData\NVIDIA 2018-11-17 13:42 - 2018-09-22 13:52 - 000000000 ____D C:\Users\xxxxx\AppData\Local\Deployment 2018-11-17 13:42 - 2018-06-10 01:29 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2018-11-17 13:42 - 2017-03-18 01:45 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2018-11-17 13:42 - 2016-11-18 11:07 - 000000000 ____D C:\Users\xxxxx\AppData\LocalLow\Mozilla 2018-11-17 13:42 - 2015-05-25 21:58 - 000001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2018-11-17 13:42 - 2015-05-25 21:58 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2018-11-17 13:42 - 2015-04-20 21:37 - 000000000 ____D C:\ProgramData\VMware 2018-11-17 13:42 - 2015-03-14 02:07 - 000000000 ____D C:\Users\xxxxx\AppData\Roaming\MyPhoneExplorer 2018-11-17 13:42 - 2015-03-14 01:51 - 000000000 ____D C:\Users\xxxxx\AppData\Local\FreePDF_XP 2018-11-17 13:41 - 2018-04-11 22:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2018-11-17 03:53 - 2017-02-02 15:41 - 000000000 ____D C:\Program Files (x86)\TeamViewer 2018-11-17 02:47 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\AppReadiness 2018-11-17 02:46 - 2018-04-11 22:04 - 000008192 _____ C:\WINDOWS\system32\config\ELAM 2018-11-17 02:46 - 2015-05-20 14:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft 2018-11-17 02:40 - 2018-04-12 00:38 - 000000000 ___HD C:\Program Files\WindowsApps 2018-11-17 02:32 - 2018-06-10 01:15 - 000000000 ____D C:\Users\xxxxx 2018-11-17 02:32 - 2016-10-20 22:30 - 000000000 ___RD C:\Users\xxxxx\3D Objects 2018-11-17 02:32 - 2016-04-27 06:55 - 000000000 __RHD C:\Users\Public\AccountPictures 2018-11-17 02:31 - 2018-06-10 01:08 - 000757248 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2018-11-17 02:31 - 2016-11-13 00:12 - 000000384 _____ C:\WINDOWS\Tasks\HPCeeScheduleForxxxxx.job 2018-11-17 02:31 - 2016-09-01 09:01 - 000000702 _____ C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-3837192191-2688150623-3177619377-1000.job 2018-11-17 02:31 - 2016-09-01 09:01 - 000000606 _____ C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-3837192191-2688150623-3177619377-1000.job 2018-11-17 02:31 - 2015-03-10 22:40 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2018-11-17 02:30 - 2018-04-12 00:38 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12 2018-11-17 02:30 - 2018-04-12 00:38 - 000000000 ___SD C:\WINDOWS\system32\F12 2018-11-17 02:30 - 2018-04-12 00:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2018-11-17 02:30 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\TextInput 2018-11-17 02:30 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences 2018-11-17 02:30 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\ShellExperiences 2018-11-17 02:30 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\bcastdvr 2018-11-17 02:29 - 2018-09-29 02:23 - 000000000 ____D C:\Users\xxxxx\AppData\Roaming\WhatsApp 2018-11-17 02:12 - 2015-03-13 21:17 - 000000000 ____D C:\Users\xxxxx\AppData\Local\CrashDumps 2018-11-16 20:13 - 2017-12-30 00:25 - 000000000 ____D C:\Users\xxxxx\AppData\Local\Packages 2018-11-16 17:58 - 2018-06-10 01:29 - 000003382 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3837192191-2688150623-3177619377-1000 2018-11-16 17:58 - 2018-06-10 01:15 - 000002446 _____ C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2018-11-16 17:58 - 2016-07-06 09:37 - 000000000 ___RD C:\Users\xxxxx\OneDrive 2018-11-16 12:04 - 2016-11-06 05:42 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2018-11-15 03:23 - 2015-05-29 01:08 - 000000000 ____D C:\Users\xxxxx\AppData\Local\Google 2018-11-14 20:02 - 2017-10-14 09:47 - 000000000 ____D C:\Users\xxxxx\Desktop\FreeFileSync-BatchAufgaben 2018-11-14 19:59 - 2015-03-23 15:16 - 000000000 ____D C:\bb 2018-11-14 04:41 - 2015-05-29 01:08 - 000002293 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2018-11-13 21:51 - 2018-04-12 00:30 - 000000000 ____D C:\WINDOWS\CbsTemp 2018-11-13 21:50 - 2015-03-10 23:30 - 000000000 ____D C:\WINDOWS\system32\MRT 2018-11-13 21:45 - 2015-03-10 23:30 - 137810048 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2018-11-13 19:14 - 2018-06-10 01:29 - 000004646 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier 2018-11-13 19:14 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed 2018-11-13 19:14 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\Macromed 2018-11-12 18:52 - 2015-04-10 21:43 - 000000000 ____D C:\Users\xxxxx\AppData\Local\Spectrasonics 2018-11-11 14:51 - 2018-06-10 01:29 - 000003308 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForxxxxx 2018-11-08 22:07 - 2018-09-29 02:23 - 000002344 _____ C:\Users\xxxxx\Desktop\WhatsApp.lnk 2018-11-08 22:07 - 2018-09-29 02:23 - 000000000 ____D C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp 2018-11-08 22:07 - 2018-09-29 02:23 - 000000000 ____D C:\Users\xxxxx\AppData\Local\WhatsApp 2018-11-08 22:06 - 2018-06-26 01:00 - 000000000 ____D C:\Users\xxxxx\AppData\Local\SquirrelTemp 2018-11-07 01:31 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\NDF 2018-11-07 01:00 - 2018-04-12 00:34 - 000395776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll 2018-11-07 01:00 - 2018-04-12 00:34 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll 2018-11-05 18:34 - 2018-04-12 00:41 - 000835168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2018-11-05 18:34 - 2018-04-12 00:41 - 000179808 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2018-11-03 03:27 - 2018-06-10 01:29 - 000003876 _____ C:\WINDOWS\System32\Tasks\G2MUploadTask-S-1-5-21-3837192191-2688150623-3177619377-1000 2018-11-03 03:27 - 2018-06-10 01:29 - 000003780 _____ C:\WINDOWS\System32\Tasks\G2MUpdateTask-S-1-5-21-3837192191-2688150623-3177619377-1000 2018-11-03 03:27 - 2017-07-08 22:44 - 000000000 ____D C:\Users\xxxxx\AppData\Local\GoToMeeting 2018-10-30 15:25 - 2015-03-13 22:37 - 000000000 ____D C:\Users\xxxxx\AppData\Local\ElevatedDiagnostics 2018-10-29 19:39 - 2015-05-14 23:14 - 000000000 ____D C:\Users\xxxxx\AppData\Roaming\SWAM 2018-10-29 19:37 - 2015-04-10 14:25 - 000000048 _____ C:\Users\xxxxx\AppData\Roaming\msregsvv.dll 2018-10-27 17:58 - 2018-02-03 01:31 - 000000000 ____D C:\Users\xxxxx\AppData\Local\PlaceholderTileLogoFolder 2018-10-27 17:51 - 2018-07-06 13:35 - 000004543 _____ C:\Users\xxxxx\AppData\Roaming\CamStudio.cfg 2018-10-27 17:51 - 2018-07-06 13:35 - 000000408 _____ C:\Users\xxxxx\AppData\Roaming\CamShapes.ini 2018-10-27 17:51 - 2018-07-06 13:35 - 000000408 _____ C:\Users\xxxxx\AppData\Roaming\CamLayout.ini 2018-10-27 17:51 - 2018-07-06 13:35 - 000000118 _____ C:\Users\xxxxx\AppData\Roaming\Camdata.ini 2018-10-27 16:21 - 2018-07-06 13:31 - 000000096 _____ C:\Users\xxxxx\AppData\Roaming\version2.xml 2018-10-22 00:04 - 2015-03-19 01:22 - 000000000 ____D C:\Users\xxxxx\AppData\Local\SiDiary 2018-10-20 15:37 - 2018-07-11 23:27 - 000000000 ____D C:\Program Files\CCleaner 2018-10-19 20:07 - 2015-03-15 18:55 - 000000000 ____D C:\ProgramData\Package Cache ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2017-10-12 23:26 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Absynth 5 FX Surround.64.dll 2017-10-12 23:26 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Absynth 5 FX.64.dll 2017-10-12 23:26 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Absynth 5 Stereo.64.dll 2017-10-12 23:26 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Absynth 5.64.dll 2017-10-12 23:26 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Battery 4.64.dll 2017-10-12 23:26 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Driver.64.dll 2017-10-12 23:26 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Enhanced EQ.64.dll 2017-10-12 23:26 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\FM8 FX.64.dll 2017-10-12 23:26 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\FM8.64.dll 2017-10-12 23:27 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Guitar Rig 5.64.dll 2017-10-12 23:27 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Ivory VST.64.dll 2017-10-12 23:27 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Kontakt 5 16out.64.dll 2017-10-12 23:27 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Kontakt 5 8out.64.dll 2017-10-12 23:27 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Kontakt 5.64.dll 2017-10-12 23:27 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Massive.64.dll 2017-10-12 23:27 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Passive EQ.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\RC 24.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\RC 48.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Reaktor5 16out.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Reaktor5 FX 2x8.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Reaktor5 FX.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Reaktor5 FX16x16.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Reaktor5 Surround.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Reaktor5.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\RealGuitar.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\RealLPC.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\RealStrat.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\RX 6 De-click.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\RX 6 De-clip.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\RX 6 De-hum.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\RX 6 Voice De-noise.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\SampleTank2.x.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Solid Bus Comp.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Solid Dynamics.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Solid EQ.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\StylusRMX.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Supercharger GT.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Supercharger.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Black 76.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Brickwall Lim.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS British Channel.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Bus Comp.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Classic Clipper.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Classic Comp.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Classic EQ.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Classic MBand Lim.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS CSR Hall.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS CSR Inverse.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS CSR Plate.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS CSR Room.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS DeEsser.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS EQ 73.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS EQ 81.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS EQ PA.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS EQ PB.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS EQ PG.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Lin Phase EQ.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Master EQ 432.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Metering.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Opto Comp.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Precision Comp Lim.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Prog EQ 1A.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Quad Comp.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Quad Image.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Quad Lim.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Tape Echo.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Vint Comp 670.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS White 2A.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS White Channel.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS.64.dll 2017-10-12 23:29 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Transient Master.64.dll 2017-10-12 23:29 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Trilian.64.dll 2017-10-12 23:29 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Vari Comp.64.dll 2017-10-12 23:29 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\VC 160.64.dll 2017-10-12 23:29 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\VC 2A.64.dll 2017-10-12 23:29 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\VC 76.64.dll 2018-07-06 13:35 - 2018-10-27 17:51 - 000000118 _____ () C:\Users\xxxxx\AppData\Roaming\Camdata.ini 2018-07-06 13:35 - 2018-10-27 17:51 - 000000408 _____ () C:\Users\xxxxx\AppData\Roaming\CamLayout.ini 2018-07-06 13:35 - 2018-10-27 17:51 - 000000408 _____ () C:\Users\xxxxx\AppData\Roaming\CamShapes.ini 2018-07-06 13:35 - 2018-10-27 17:51 - 000004543 _____ () C:\Users\xxxxx\AppData\Roaming\CamStudio.cfg 2016-06-05 03:54 - 2015-10-13 19:06 - 000006565 _____ () C:\Users\xxxxx\AppData\Roaming\DeviceCompatibility.xml 2015-04-10 14:25 - 2018-10-29 19:37 - 000000048 _____ () C:\Users\xxxxx\AppData\Roaming\msregsvv.dll 2018-10-19 20:10 - 2018-10-19 20:10 - 000000064 _____ () C:\Users\xxxxx\AppData\Roaming\Sandra.ldb 2018-10-19 20:10 - 2018-10-19 21:21 - 017408000 _____ () C:\Users\xxxxx\AppData\Roaming\Sandra.mdb 2018-07-06 13:31 - 2018-10-27 16:21 - 000000096 _____ () C:\Users\xxxxx\AppData\Roaming\version2.xml 2015-04-20 22:15 - 2015-04-20 22:15 - 000000026 _____ () C:\Users\xxxxx\AppData\Local\isoworkshop.ini 2018-09-28 11:24 - 2018-09-28 11:24 - 000000000 _____ () C:\Users\xxxxx\AppData\Local\oobelibMkey.log 2018-05-04 00:41 - 2018-05-04 00:41 - 000006120 _____ () C:\Users\xxxxx\AppData\Local\recently-used.xbel 2017-09-03 22:47 - 2017-09-03 22:47 - 000007605 _____ () C:\Users\xxxxx\AppData\Local\Resmon.ResmonCfg 2008-02-05 13:28 - 2008-02-05 13:28 - 000000051 _____ () C:\Users\xxxxx\AppData\Local\setup.txt ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2018-06-10 01:08 ==================== Ende von FRST.txt ============================ Geändert von Dudo01 (18.11.2018 um 04:15 Uhr) Grund: Ergänzung |
18.11.2018, 04:09 | #4 |
| Google - Werbe(Fake-)Links legen sich über Suchergebnisse (Firefox und Chrome)Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 15.11.2018 durchgeführt von xxxxx (18-11-2018 03:49:20) Gestartet von C:\Users\xxxxx\Downloads Windows 10 Pro Version 1803 17134.407 (X64) (2018-06-10 00:29:45) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-3837192191-2688150623-3177619377-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-3837192191-2688150623-3177619377-503 - Limited - Disabled) Gast (S-1-5-21-3837192191-2688150623-3177619377-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3837192191-2688150623-3177619377-1003 - Limited - Enabled) xxxxx (S-1-5-21-3837192191-2688150623-3177619377-1000 - Administrator - Enabled) => C:\Users\xxxxx WDAGUtilityAccount (S-1-5-21-3837192191-2688150623-3177619377-504 - Limited - Disabled) ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Kaspersky Internet Security (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8} AS: Kaspersky Internet Security (Enabled - Up to date) {B1D2E896-6D96-7460-F17A-838B9D00DD65} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Internet Security (Enabled) {32888857-01C3-7AB6-E095-11CC1854D0A3} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) ABBYY FineReader 12 Professional (HKLM-x32\...\{F12000FE-0001-0000-0000-074957833700}) (Version: 12.0.501 - ABBYY Production LLC) ABBYY Screenshot Reader (HKLM-x32\...\{F9000000-0015-0000-0000-074957833700}) (Version: 9.010.483.59811 - ABBYY) Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 19.008.20081 - Adobe Systems Incorporated) Adobe Flash Player 31 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 31.0.0.148 - Adobe Systems Incorporated) Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.9.199 - Adobe Systems, Inc.) AI Suite II (HKLM-x32\...\{34D3688E-A737-44C5-9E2A-FF73618728E1}) (Version: 1.01.28 - ASUSTeK Computer Inc.) Aimersoft Helper Compact 2.5.2 (HKLM-x32\...\{405147F7-FCC5-499B-A27E-EA6BD4A80435}_is1) (Version: 2.5.2 - Aimersoft) AllDup 4.1.5 (HKLM-x32\...\AllDup_is1) (Version: 4.1.5 - Michael Thummerer Software Design) ALL-INKL.COM WebDisk Version 0.2.1.9 (HKLM\...\{420BEC99-F9B3-446B-85A9-974192AFBEAD}_is1) (Version: 0.2.1.9 - ALL-INKL.COM) Amazon Kindle (HKLM-x32\...\Amazon Kindle) (Version: 1.15.0.43061 - Amazon) Amazon Kindle (HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Amazon Kindle) (Version: 1.17.0.44170 - Amazon) AmpliTube 3 version 3.14.0 (HKLM\...\{DA5202AC-12BF-4330-B8EA-BC77F991FA1C}_is1) (Version: 3.14.0 - IK Multimedia) Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.) ARIA Engine v1.6.0.6 (HKLM\...\ARIA Engine_is1) (Version: v1.6.0.6 - Plogue Art et Technologie, Inc) Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.4.5.0 - Asmedia Technology) Audacity 2.2.2 (HKLM-x32\...\Audacity_is1) (Version: 2.2.2 - Audacity Team) Autocue QStart (HKLM-x32\...\{30BAA650-5FC3-4125-84DF-6CD49F28AD01}_is1) (Version: 1.5.2153 - Vitec Videocom Ltd) Avanquest Message (HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\{20573C69-4A68-4BEF-A23D-365CB66924CE}) (Version: 2.08.0 - Avanquest Software) Avanquest update (HKLM-x32\...\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}) (Version: 1.34 - Avanquest Software) Babylon (HKLM-x32\...\Babylon) (Version: - Babylon) Balabolka (HKLM-x32\...\Balabolka) (Version: 2.11.0.608 - Ilya Morozov) Band-in-a-Box and RealBand 2012 (HKLM-x32\...\BB_is1) (Version: - PG Music Inc.) Band-in-a-Box Server (HKLM-x32\...\BBServer_is1) (Version: - PG Music Inc.) Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.2.0.65 - Atheros Communications) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Box Shot 3D (HKLM-x32\...\Box Shot 3D) (Version: 2.13.3 - www.BoxShot3D.com) Boxshot (HKLM\...\Boxshot) (Version: 4.14.2 - Appsforlife Ltd) CalDavSynchronizer (HKLM-x32\...\{8B5E2DBB-6C21-433C-B656-30E7918DA49A}) (Version: 3.2.1 - Gerhard Zehetbauer) CalDavSynchronizer (HKLM-x32\...\{9BEEA50C-9BE8-405A-B9B7-7AC794F37655}) (Version: 3.2.0 - Gerhard Zehetbauer) calibre 64bit (HKLM\...\{7A345D03-2C46-4483-855B-01C7C320600F}) (Version: 3.31.0 - Kovid Goyal) CamStudio 2.7.4 (HKLM\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7.4 - CamStudio Open Source) CamStudio Lossless Codec v1.5 (HKLM-x32\...\camcodec) (Version: 1.5 - CamStudio) Canon Inkjet Printer Driver Add-On Module (HKLM\...\CANONIJINBOXADDON100) (Version: - ) CASHFLOW® THE E-GAME (HKLM-x32\...\CASHFLOW® THE E-GAME) (Version: - ) CDex - Open Source Digital Audio CD Extractor (HKLM-x32\...\CDex) (Version: 1.79.0.2015 - Georgy Berdyshev) ChromaCam (remove only) (HKLM-x32\...\ChromaCam) (Version: 2.2.1.14 - Personify, Inc.) ColorPic (HKLM-x32\...\ColorPic) (Version: 4.1 - Iconico) Complete Composers Collection PRO (HKLM\...\{6A9615EE-4DC3-4439-B563-EC35142F39DB}) (Version: 1.0.0 - EastWest Sounds, Inc) Connect (HKLM-x32\...\MAGIX_connector_is1) (Version: 2.5.1.84 - MAGIX Software GmbH) Contour Shuttle (HKLM-x32\...\{51ADFD15-6B63-4F8E-8076-F4E31FFEE32A}) (Version: 2.13.1 - Contour Design, Inc.) Corel Applications (HKLM-x32\...\Corel Applications) (Version: - ) Custom Shop version 1.6.0 (HKLM-x32\...\{21BAD046-50EC-49E2-BE7B-F9729704F2C3}_is1) (Version: 1.6.0 - IK Multimedia) EarMaster 7.0 (HKLM-x32\...\EarMaster 7_is1) (Version: 7.0 - EarMaster ApS) eLicenser Control (HKLM-x32\...\eLicenser Control) (Version: 6.11.3.1231 - Steinberg Media Technologies GmbH) Etude Sight Reader 1.4.1 (HKLM-x32\...\Etude Sight Reader 1.4_is1) (Version: 1.4.1 - Etude Software) FileZilla Client 3.32.0 (HKLM-x32\...\FileZilla Client) (Version: 3.32.0 - Tim Kosse) Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG) Forte 4 (4.1.9.25) (HKLM\...\Forte 4_is1) (Version: 4.1.9.25 - brainspawn) FreeFileSync 10.2 [Spendenversion] (HKLM-x32\...\FreeFileSync_is1) (Version: 10.2 - FreeFileSync.org) FreeOCR v5.4 (HKLM-x32\...\freeocr_is1) (Version: - ) FreePDF (Remove only) (HKLM-x32\...\FreePDF_XP) (Version: - ) FreeStyle Libre (HKLM-x32\...\FreeStyle Libre 1.0) (Version: 1.0 - Abbott Diabetes Care) Garritan ARIA Player v1.606 (HKLM\...\__ARIA_1012___is1) (Version: v1.6.0.6 - Garritan) GNU Solfege 3.22.2 (HKLM-x32\...\GNU Solfege_is1) (Version: - ) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 70.0.3538.102 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden GoTo Opener (HKLM-x32\...\{1F803452-798F-49FB-A5DD-9F527F7017E4}) (Version: 1.0.473 - LogMeIn, Inc.) GoToMeeting 8.37.0.10996 (HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\GoToMeeting) (Version: 8.37.0.10996 - LogMeIn, Inc.) GPL Ghostscript (HKLM\...\GPL Ghostscript 9.07) (Version: 9.07 - Artifex Software Inc.) HandBrake 1.1.1 (HKLM-x32\...\HandBrake) (Version: 1.1.1 - ) HP Dropbox Plugin (HKLM-x32\...\{1E18E86D-632C-48B5-962C-B60C2E53A478}) (Version: 36.0.41.58587 - HP) HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard) HP Google Drive Plugin (HKLM-x32\...\{039DDA62-50CC-4E7F-9D54-7CF032A2D362}) (Version: 36.0.41.58587 - HP) HP Officejet Pro 8620 - Grundlegende Software für das Gerät (HKLM\...\{F6CE08BC-6929-412E-BB42-A9A7CD9721D7}) (Version: 32.3.198.49673 - Hewlett-Packard Co.) HP Officejet Pro 8620 Hilfe (HKLM-x32\...\{F8E43C63-DFF2-4134-A46C-2A6F00517A35}) (Version: 32.0.0 - Hewlett Packard) HP OfficeJet Pro 8710 - Grundlegende Software für das Gerät (HKLM\...\{3574B2B8-5FA1-4F63-A6C7-652F213DFD80}) (Version: 40.12.1161.1896 - HP Inc.) HP OfficeJet Pro 8710 Hilfe (HKLM-x32\...\{AC6E479B-DD73-4490-8B91-E497003E89AA}) (Version: 38.0.0 - HP) HP Support Assistant (HKLM-x32\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.6.18.11 - Hewlett-Packard Company) HP Support Solutions Framework (HKLM-x32\...\{A38E954F-9043-42BD-9DE9-246ED183791D}) (Version: 12.9.24.3 - HP) HP Touchpoint Analytics Client (HKLM\...\{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}) (Version: 4.0.2.1439 - HP Inc.) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HPDiagnosticAlert (HKLM-x32\...\{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}) (Version: 1.00.0001 - Microsoft) Hidden HPDiagnosticCoreDll (HKLM-x32\...\{9262B08F-E183-4FED-A2BD-23FF1A84EB79}) (Version: 1.0.15.0 - Hewlett Packard) I.R.I.S. OCR (HKLM-x32\...\{77374D45-3BBF-4633-A2DF-188CD2106A67}) (Version: 12.3.7.0 - HP) I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP) IK Multimedia Authorization Manager version 1.0.12 (HKLM\...\{85BC0DCB-69E5-4279-AA25-F108EF896588}_is1) (Version: 1.0.12 - IK Multimedia) Imaginary Teleprompter (HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\imaginary-teleprompter) (Version: 2.3.4 - Imaginary Sense) Inkscape 0.91 (HKLM\...\{81922150-317E-4BB0-A31D-FF1C14F707C5}) (Version: 0.91 - inkscape.org) inPixio Photo Clip 8 (HKLM-x32\...\{65634D2B-B6D1-4B35-B4C9-F3999B8D008B}) (Version: 8.5.0 - InPixio) InPixio Photo Clip 8 Demo (HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\{9F45A8A5-0487-4aa6-A67E-46E103C927AD}) (Version: 8.00 - InPixio) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation) Intel(R) Network Connections 15.6.25.0 (HKLM\...\PROSetDX) (Version: 15.6.25.0 - Intel) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3958 - Intel Corporation) Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version: - Intel Corporation) Interaktive Sprachreise - Intensivkurs Italiano (HKLM-x32\...\ISRIIK_18_689517) (Version: - digital publishing AG) Interaktive Sprachreise - Komplettkurs English (HKLM-x32\...\ISREKK_18_689504) (Version: - digital publishing AG) Interlok driver setup x64 (HKLM\...\{25613C10-27D2-410B-942B-D922D5C3A7BE}) (Version: 5.9.6 - PACE Anti-Piracy, Inc.) IrfanView 4.50 (64-bit) (HKLM\...\IrfanView64) (Version: 4.50 - Irfan Skiljan) Ivory 2.5 (HKLM-x32\...\{c123b423-de4e-499d-bee4-694171fad8c2}) (Version: 2.5.0.8 - Synthogy, LLC) Ivory Software Components (HKLM\...\{D1D5FDFA-37CA-4376-8E14-3E2484D1B537}) (Version: 2.5.0.11 - Synthogy, LLC) Hidden JMicron JMB36X Driver (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.17.58.2 - JMicron Technology Corp.) Kaspersky Internet Security (HKLM-x32\...\{718613F4-492D-4272-ACC3-D04A8EF0F883}) (Version: 19.0.0.1088 - Kaspersky Lab) Hidden Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{718613F4-492D-4272-ACC3-D04A8EF0F883}) (Version: 19.0.0.1088 - Kaspersky Lab) Kaspersky Secure Connection (HKLM-x32\...\{F33C0717-8E04-4EB5-90C8-47221287DB4F}) (Version: 18.0.0.405 - Kaspersky Lab) Hidden Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{F33C0717-8E04-4EB5-90C8-47221287DB4F}) (Version: 18.0.0.405 - Kaspersky Lab) KORG KONTROL Editor (HKLM-x32\...\{2994E3F1-B6A3-40FD-860E-A54363FC266C}) (Version: 1.50.0000 - KORG Inc.) KORG USB-MIDI Driver Tools for Windows (HKLM-x32\...\{A370DD06-F5FE-4490-A232-41AB38208ED8}) (Version: 1.15.0801 - Korg Inc.) LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) Langenscheidt T1 6.0 (HKLM-x32\...\{57EB87EF-23DF-4A76-9B90-FD7B53E1C6CE}) (Version: - ) Lingoes 2.9.2 (HKLM\...\Lingoes Translator (x64)_is1) (Version: 2.9.2 - Lingoes Project) LiquidControl 2.3 (HKLM-x32\...\LiquidControl_is1) (Version: 2.3 - Focusrite Audio Engineering Limited.) Logitech Kameraeinstellungen (HKLM-x32\...\LogiUCDPP) (Version: 1.1.87.0 - Logitech Europe S.A.) Macromedia Fireworks 3 (HKLM-x32\...\Macromedia Fireworks 3) (Version: 3 - Macromedia) MAGIX Cloud Import (HKLM\...\{F26F0643-45C1-4CCC-A98A-0F8B44A6E899}) (Version: 0.0.0.20 - MAGIX Software GmbH) Hidden MAGIX Cloud Import (HKLM\...\MX.{F26F0643-45C1-4CCC-A98A-0F8B44A6E899}) (Version: 0.0.0.20 - MAGIX Software GmbH) MAGIX Content und Soundpools (HKLM-x32\...\MAGIX_GlobalContent) (Version: 1.0.0.0 - MAGIX Software GmbH) MAGIX Network Sync (HKLM\...\{46659432-E58E-4BF9-829B-E10976DBC1B7}) (Version: 0.0.0.34 - MAGIX Software GmbH) Hidden MAGIX Network Sync (HKLM\...\MX.{46659432-E58E-4BF9-829B-E10976DBC1B7}) (Version: 0.0.0.34 - MAGIX Software GmbH) MAGIX Soundpool Music Maker - Feel good (HKLM\...\{DFEE4333-B802-4E27-9521-2D9E970B7813}) (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden MAGIX Speed burnR (HKLM\...\{95D5EB4D-6848-4937-B034-6B8868FA426D}) (Version: 7.0.2.6 - MAGIX Software GmbH) Hidden MAGIX Speed burnR (HKLM-x32\...\MX.{95D5EB4D-6848-4937-B034-6B8868FA426D}) (Version: 7.0.2.6 - MAGIX Software GmbH) MAGIX Video deluxe 2013 Plus (HKLM\...\{258D56DE-24F2-479E-BED2-8103CB0B9D58}) (Version: 12.0.0.32 - MAGIX AG) Hidden MAGIX Video deluxe 2013 Plus (HKLM-x32\...\MAGIX_{258D56DE-24F2-479E-BED2-8103CB0B9D58}) (Version: 12.0.0.32 - MAGIX AG) MAGIX Video deluxe 2014 Plus (HKLM\...\{85061988-E889-4A37-9CB7-4F695AC35544}) (Version: 13.0.2.8 - MAGIX AG) Hidden MAGIX Video deluxe 2014 Plus (HKLM-x32\...\MX.{85061988-E889-4A37-9CB7-4F695AC35544}) (Version: 13.0.2.8 - MAGIX AG) MAGIX Video deluxe 2014 Plus (Titeleffekte) (HKLM\...\{BF5D08F8-0E32-4035-94D5-BACC5A63C2FE}) (Version: 1.0.1.0 - MAGIX AG) Hidden MAGIX Video deluxe 2014 Plus (Titeleffekte) (HKLM-x32\...\MX.{BF5D08F8-0E32-4035-94D5-BACC5A63C2FE}) (Version: 1.0.1.0 - MAGIX AG) MAGIX Video deluxe 2014 Plus Update (HKLM\...\{A34A35CA-2E1F-4378-9AE6-B140CF08EF26}) (Version: 13.0.5.5 - MAGIX AG) Hidden marvell 91xx driver (HKLM-x32\...\MagniDriver) (Version: 1.0.0.1045 - Marvell) Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.11001.20074 - Microsoft Corporation) Microsoft Office Home and Business 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Outlook SMS Add-in (HKLM-x32\...\{FD5C399F-2D43-4EC5-AAF7-D600041EF25C}) (Version: 12.0.0006.0 - Microsoft Office) Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\OneDriveSetup.exe) (Version: 18.192.0920.0015 - Microsoft Corporation) Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Speech SDK 5.1 (HKLM-x32\...\{A403D88E-ED7D-48E3-91FD-B8C8A720EDA1}) (Version: 5.1.4324.0 - Microsoft) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{3c3aafc8-d898-43ec-998f-965ffdae065a}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x64) - 14.15.26706 (HKLM-x32\...\{95ac1cfa-f4fb-4d1b-8912-7f9d5fbb140d}) (Version: 14.15.26706.0 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x86) - 14.15.26706 (HKLM-x32\...\{7e9fae12-5bbf-47fb-b944-09c49e75c061}) (Version: 14.15.26706.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation) MIDI-OX (HKLM-x32\...\{A6457851-5EA9-45B0-AF1D-D2A0A4781CFB}) (Version: 7.02.372 - MIDIOX Computing) Mozilla Firefox 63.0.3 (x64 de) (HKLM\...\Mozilla Firefox 63.0.3 (x64 de)) (Version: 63.0.3 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 56.0.2 - Mozilla) MP3 Skype recorder (HKLM-x32\...\{C0BC2932-EE22-4432-9439-B2117B08C9EF}) (Version: 4.29.1.0 - Domit LTD) MP4Tools v3.6.1 (HKLM-x32\...\MP4Tools_is1) (Version: - Thüring IT-Consulting) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MuseScore 2 (HKLM-x32\...\{7D01160E-D30F-4E88-8872-4A0A0A782E2E}) (Version: 2.3.2 - Werner Schweer and Others) Music Maker (HKLM\...\{D5FF45D3-3AE3-4490-85DE-04D059606382}) (Version: 25.0.2.44 - MAGIX Software GmbH) Hidden Music Maker (HKLM-x32\...\MX.{D5FF45D3-3AE3-4490-85DE-04D059606382}) (Version: 25.0.2.44 - MAGIX Software GmbH) Music Maker Update (HKLM\...\{D3DEAE5C-1BC4-4995-9929-7B701150EBC3}) (Version: 25.1.2.78 - MAGIX Software GmbH) Hidden MusicLab RealGuitar (32-bit) (HKLM-x32\...\{786AD1AB-9A88-47C9-9983-D31FEEB25C9D}) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealGuitar (64-bit) (HKLM\...\{7EA13484-2AB8-454E-9281-2EFDF032CD2F}) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealGuitar (HKLM-x32\...\{c6ddbd3b-69d5-4236-b629-3040eadcbec3}) (Version: 3.1.0.7127 - MusicLab, Inc.) MusicLab RealGuitar Sound Bank (HKLM-x32\...\{0B306805-D14D-49E2-A68C-EEEE08392AC8}) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealLPC (32-bit) (HKLM-x32\...\{7957CEE5-D437-468A-A184-15AE383C65E2}) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealLPC (64-bit) (HKLM\...\{9D08A43A-2219-46DE-94FF-1FB6F2FE8BF3}) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealLPC (HKLM-x32\...\{0658abdf-9e34-429a-87e1-7515d9ed27f7}) (Version: 3.1.0.7127 - MusicLab, Inc.) MusicLab RealLPC Sound Bank (HKLM-x32\...\{4F392720-98CC-47DE-9E51-10DB501BAA93}) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealStrat (32-bit) (HKLM-x32\...\{ADF58BEE-5C90-4CB6-9491-21010F48D68C}) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealStrat (64-bit) (HKLM\...\{E61FC281-458E-4E87-A5DC-59A853CEDCAC}) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealStrat (HKLM-x32\...\{7d0a204e-374e-46b7-bb7a-7118683f692e}) (Version: 3.1.0.7127 - MusicLab, Inc.) MusicLab RealStrat Sound Bank (HKLM-x32\...\{B81907D2-E3C9-47A9-AAFE-33DD27C04461}) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab Virtual Midi Driver (64-bit) (HKLM\...\{2B019162-86C7-4D14-AED0-2CB5110BA4FF}) (Version: 2.0.2.0 - MusicLab, Inc.) MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.9 - F.J. Wechselberger) Native Instruments Abbey Road 50s Drummer (HKLM-x32\...\Native Instruments Abbey Road 50s Drummer) (Version: 1.2.0.10 - Native Instruments) Native Instruments Abbey Road 60s Drummer (HKLM-x32\...\Native Instruments Abbey Road 60s Drummer) (Version: 1.3.0.11 - Native Instruments) Native Instruments Abbey Road 70s Drummer (HKLM-x32\...\Native Instruments Abbey Road 70s Drummer) (Version: 1.3.0.7 - Native Instruments) Native Instruments Abbey Road 80s Drummer (HKLM-x32\...\Native Instruments Abbey Road 80s Drummer) (Version: 1.3.0.4 - Native Instruments) Native Instruments Abbey Road Modern Drummer (HKLM-x32\...\Native Instruments Abbey Road Modern Drummer) (Version: 1.3.0.2 - Native Instruments) Native Instruments Abbey Road Vintage Drummer (HKLM-x32\...\Native Instruments Abbey Road Vintage Drummer) (Version: 1.3.0.9 - Native Instruments) Native Instruments Absynth 5 (HKLM-x32\...\Native Instruments Absynth 5) (Version: 5.3.1.1628 - Native Instruments) Native Instruments Action Strikes (HKLM-x32\...\Native Instruments Action Strikes) (Version: 1.2.0.2 - Native Instruments) Native Instruments Action Strings (HKLM-x32\...\Native Instruments Action Strings) (Version: 1.5.0.1 - Native Instruments) Native Instruments Alicias Keys (HKLM-x32\...\Native Instruments Alicias Keys) (Version: 1.5.0.1 - Native Instruments) Native Instruments Balinese Gamelan (HKLM-x32\...\Native Instruments Balinese Gamelan) (Version: 1.2.0.5 - Native Instruments) Native Instruments Battery 4 (HKLM-x32\...\Native Instruments Battery 4) (Version: 4.1.5.254 - Native Instruments) Native Instruments Battery 4 Factory Library (HKLM-x32\...\Native Instruments Battery 4 Factory Library) (Version: 1.1.0.1 - Native Instruments) Native Instruments Cuba (HKLM-x32\...\Native Instruments Cuba) (Version: 1.2.0.1 - Native Instruments) Native Instruments Damage (HKLM-x32\...\Native Instruments Damage) (Version: 1.5.0.2 - Native Instruments) Native Instruments Driver (HKLM-x32\...\Native Instruments Driver) (Version: 1.3.1.45 - Native Instruments) Native Instruments Drum Lab (HKLM-x32\...\Native Instruments Drum Lab) (Version: 1.2.0.5 - Native Instruments) Native Instruments Enhanced EQ (HKLM-x32\...\Native Instruments Enhanced EQ) (Version: 1.3.1.45 - Native Instruments) Native Instruments Evolve Mutations (HKLM-x32\...\Native Instruments Evolve Mutations) (Version: 1.2.0.1 - Native Instruments) Native Instruments Evolve Mutations 2 (HKLM-x32\...\Native Instruments Evolve Mutations 2) (Version: 1.2.0.1 - Native Instruments) Native Instruments Evolve R2 (HKLM-x32\...\Native Instruments Evolve R2) (Version: 1.7.0.2 - Native Instruments) Native Instruments FM8 (HKLM-x32\...\Native Instruments FM8) (Version: 1.4.1.1599 - Native Instruments) Native Instruments George Duke Soul Treasures (HKLM-x32\...\Native Instruments George Duke Soul Treasures) (Version: 1.3.0.15 - Native Instruments) Native Instruments Guitar Rig 5 (HKLM-x32\...\Native Instruments Guitar Rig 5) (Version: 5.2.2.8 - Native Instruments) Native Instruments Kinetic Metal (HKLM-x32\...\Native Instruments Kinetic Metal) (Version: 1.1.0.13 - Native Instruments) Native Instruments Kinetic Treats (HKLM-x32\...\Native Instruments Kinetic Treats) (Version: 1.0.0.18 - Native Instruments) Native Instruments Komplete 10 (HKLM-x32\...\Native Instruments Komplete 10) (Version: - Native Instruments) Native Instruments Komplete 10 Ultimate (HKLM-x32\...\Native Instruments Komplete 10 Ultimate) (Version: - Native Instruments) Native Instruments Kontakt 5 (HKLM-x32\...\Native Instruments Kontakt 5) (Version: 5.6.5.13 - Native Instruments) Native Instruments Kontakt Factory Library (HKLM-x32\...\Native Instruments Kontakt Factory Library) (Version: 1.3.0.5 - Native Instruments) Native Instruments Kontour (HKLM-x32\...\Native Instruments Kontour) (Version: 1.0.0.1 - Native Instruments) Native Instruments Maschine Drum Selection (HKLM-x32\...\Native Instruments Maschine Drum Selection) (Version: 1.3.0.1 - Native Instruments) Native Instruments Massive (HKLM-x32\...\Native Instruments Massive) (Version: 1.5.1.637 - Native Instruments) Native Instruments Molekular (HKLM-x32\...\Native Instruments Molekular) (Version: 1.0.0.2 - Native Instruments) Native Instruments Monark (HKLM-x32\...\Native Instruments Monark) (Version: 1.3.0.2 - Native Instruments) Native Instruments Native Access (HKLM-x32\...\Native Instruments Native Access) (Version: 1.5.1.64 - Native Instruments) Native Instruments Passive EQ (HKLM-x32\...\Native Instruments Passive EQ) (Version: 1.3.1.45 - Native Instruments) Native Instruments Phasis (HKLM-x32\...\Native Instruments Phasis) (Version: 1.0.0.77 - Native Instruments) Native Instruments Polyplex (HKLM-x32\...\Native Instruments Polyplex) (Version: 1.1.0.2 - Native Instruments) Native Instruments Rammfire (HKLM-x32\...\Native Instruments Rammfire) (Version: 2.0.0.4 - Native Instruments) Native Instruments Razor (HKLM-x32\...\Native Instruments Razor) (Version: 1.7.0.1 - Native Instruments) Native Instruments RC 24 (HKLM-x32\...\Native Instruments RC 24) (Version: 1.3.1.45 - Native Instruments) Native Instruments RC 48 (HKLM-x32\...\Native Instruments RC 48) (Version: 1.3.1.45 - Native Instruments) Native Instruments Reaktor 5 (HKLM-x32\...\Native Instruments Reaktor 5) (Version: 5.9.3.1344 - Native Instruments) Native Instruments Reaktor 6 (HKLM-x32\...\Native Instruments Reaktor 6) (Version: 6.0.4.23 - Native Instruments) Native Instruments Reaktor Prism (HKLM-x32\...\Native Instruments Reaktor Prism) (Version: 1.6.0.1 - Native Instruments) Native Instruments Reaktor Spark R2 (HKLM-x32\...\Native Instruments Reaktor Spark R2) (Version: 1.4.0.3 - Native Instruments) Native Instruments Reflektor (HKLM-x32\...\Native Instruments Reflektor) (Version: 2.0.0.6 - Native Instruments) Native Instruments Retro Machines Mk2 (HKLM-x32\...\Native Instruments Retro Machines Mk2) (Version: 1.3.0.3 - Native Instruments) Native Instruments Rise and Hit (HKLM-x32\...\Native Instruments Rise and Hit) (Version: 1.2.0.10 - Native Instruments) Native Instruments Rounds (HKLM-x32\...\Native Instruments Rounds) (Version: 1.2.0.3 - Native Instruments) Native Instruments Scarbee Funk Guitarist (HKLM-x32\...\Native Instruments Scarbee Funk Guitarist) (Version: 1.2.0.1 - Native Instruments) Native Instruments Scarbee Jay-Bass (HKLM-x32\...\Native Instruments Scarbee Jay-Bass) (Version: 1.1.0.2 - Native Instruments) Native Instruments Scarbee MM-Bass (HKLM-x32\...\Native Instruments Scarbee MM-Bass) (Version: 1.2.0.4 - Native Instruments) Native Instruments Scarbee MM-Bass Amped (HKLM-x32\...\Native Instruments Scarbee MM-Bass Amped) (Version: 1.1.0.2 - Native Instruments) Native Instruments Scarbee Pre-Bass (HKLM-x32\...\Native Instruments Scarbee Pre-Bass) (Version: 1.2.0.2 - Native Instruments) Native Instruments Scarbee Pre-Bass Amped (HKLM-x32\...\Native Instruments Scarbee Pre-Bass Amped) (Version: 1.1.0.2 - Native Instruments) Native Instruments Scarbee Rickenbacker Bass (HKLM-x32\...\Native Instruments Scarbee Rickenbacker Bass) (Version: 1.2.0.2 - Native Instruments) Native Instruments Scarbee Vintage Keys (HKLM-x32\...\Native Instruments Scarbee Vintage Keys) (Version: 1.3.0.4 - Native Instruments) Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.5.4.1587 - Native Instruments) Native Instruments Session Horns (HKLM-x32\...\Native Instruments Session Horns) (Version: 1.1.0.2 - Native Instruments) Native Instruments Session Horns Pro (HKLM-x32\...\Native Instruments Session Horns Pro) (Version: 1.3.0.2 - Native Instruments) Native Instruments Session Strings (HKLM-x32\...\Native Instruments Session Strings) (Version: 1.3.0.2 - Native Instruments) Native Instruments Session Strings Pro (HKLM-x32\...\Native Instruments Session Strings Pro) (Version: 1.4.0.2 - Native Instruments) Native Instruments Skanner XT (HKLM-x32\...\Native Instruments Skanner XT) (Version: 1.3.0.2 - Native Instruments) Native Instruments Solid Bus Comp FX (HKLM-x32\...\Native Instruments Solid Bus Comp FX) (Version: 1.3.1.45 - Native Instruments) Native Instruments Solid Dynamics FX (HKLM-x32\...\Native Instruments Solid Dynamics FX) (Version: 1.3.1.45 - Native Instruments) Native Instruments Solid EQ FX (HKLM-x32\...\Native Instruments Solid EQ FX) (Version: 1.3.1.45 - Native Instruments) Native Instruments Studio Drummer (HKLM-x32\...\Native Instruments Studio Drummer) (Version: 1.4.0.12 - Native Instruments) Native Instruments Supercharger (HKLM-x32\...\Native Instruments Supercharger) (Version: 1.3.1.45 - Native Instruments) Native Instruments Supercharger GT (HKLM-x32\...\Native Instruments Supercharger GT) (Version: 1.3.1.45 - Native Instruments) Native Instruments The Finger R2 (HKLM-x32\...\Native Instruments The Finger R2) (Version: 1.3.0.12 - Native Instruments) Native Instruments The Gentleman (HKLM-x32\...\Native Instruments The Gentleman) (Version: 1.2.0.2 - Native Instruments) Native Instruments The Giant (HKLM-x32\...\Native Instruments The Giant) (Version: 1.2.0.7 - Native Instruments) Native Instruments The Grandeur (HKLM-x32\...\Native Instruments The Grandeur) (Version: 1.2.0.2 - Native Instruments) Native Instruments The Maverick (HKLM-x32\...\Native Instruments The Maverick) (Version: 1.2.0.2 - Native Instruments) Native Instruments The Mouth (HKLM-x32\...\Native Instruments The Mouth) (Version: 1.3.0.4 - Native Instruments) Native Instruments Traktors 12 (HKLM-x32\...\Native Instruments Traktors 12) (Version: 2.0.0.6 - Native Instruments) Native Instruments Transient Master FX (HKLM-x32\...\Native Instruments Transient Master FX) (Version: 1.3.1.45 - Native Instruments) Native Instruments Vari Comp (HKLM-x32\...\Native Instruments Vari Comp) (Version: 1.3.1.45 - Native Instruments) Native Instruments VC 160 FX (HKLM-x32\...\Native Instruments VC 160 FX) (Version: 1.3.1.45 - Native Instruments) Native Instruments VC 2A FX (HKLM-x32\...\Native Instruments VC 2A FX) (Version: 1.3.1.45 - Native Instruments) Native Instruments VC 76 FX (HKLM-x32\...\Native Instruments VC 76 FX) (Version: 1.3.1.45 - Native Instruments) Native Instruments Vintage Organs (HKLM-x32\...\Native Instruments Vintage Organs) (Version: 1.4.0.5 - Native Instruments) Native Instruments West Africa (HKLM-x32\...\Native Instruments West Africa) (Version: 1.3.0.2 - Native Instruments) NVIDIA 3D Vision Controller-Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 399.24 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 399.24 - NVIDIA Corporation) NVIDIA GeForce Experience 3.14.1.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.14.1.48 - NVIDIA Corporation) NVIDIA Grafiktreiber 399.24 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 399.24 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.37.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.37.4 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation) Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.11001.20074 - Microsoft Corporation) Hidden Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.11001.20074 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.11001.20074 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.11001.20074 - Microsoft Corporation) Hidden PACE License Support Win64 (HKLM\...\{378041F5-BE99-4f26-AED4-B1819C8E60F7}) (Version: 4.1.2.2231 - PACE Anti-Piracy, Inc.) Hidden PACE License Support Win64 (HKLM-x32\...\InstallShield_{378041F5-BE99-4f26-AED4-B1819C8E60F7}) (Version: 4.1.2.2231 - PACE Anti-Piracy, Inc.) PDF24 Creator 8.4.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org) PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.322.8 - Tracker Software Products Ltd) PG Music DirectX Plugins 2.0.0.0 (HKLM-x32\...\PG_DX_Plugins_is1) (Version: - PG Music Inc.) Phase 5 HTML-Editor (HKLM-x32\...\{20B1B020-DEAE-48D1-9960-D4C3185D758B}) (Version: 5.6.2.3 - Systemberatung Schommer) PLAY 5.0.3 (HKLM-x32\...\EW PLAY_is1) (Version: 5.0.3 - EastWest Sounds, Inc.) Play Update 4.2.2 (HKLM\...\{D5A16FC4-9409-4289-921B-E79FBC5E17DB}) (Version: 4.2.2 - EastWest Sounds, Inc) Polar FlowSync Version 2.6.2 (HKLM-x32\...\{A1538F5C-7B65-4DB6-9FFB-FFC0DF2E85D8}_is1) (Version: 2.6.2 - Polar Electro Oy) PowerCore 2.1 (HKLM-x32\...\PowerCore) (Version: 2.1.0.3 - TC Electronic) QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.) Readiris Pro 14 (HKLM-x32\...\{038CE681-B496-4ACA-90A7-BE78EF30A076}) (Version: 14.00.7941 - I.R.I.S.) RealSpeak Solo fur Deutsch - Steffi (HKLM-x32\...\{BFBB91DB-9F0F-4A9C-9669-A97DA3512CF2}) (Version: 4.00.0000 - ScanSoft) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8186 - Realtek Semiconductor Corp.) RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version: 1.90 - Ghostgum Software Pty Ltd) Remote Control Server (HKLM-x32\...\{755C6515-9FEA-490C-B15E-22BB6519E57E}) (Version: 3.1.1.12 - Steppschuh) RME Hammerfall DSP (WDM) (HKLM\...\HDSP) (Version: 4.1.5.0 - RME Intelligent Audio Solutions) SampleTank 3 version 3.5.0 (HKLM\...\{4A5CE684-33A5-4EE6-AB22-4B92D92D37D8}_is1) (Version: 3.5.0 - IK Multimedia) SampleTank FREE (HKLM-x32\...\{6559654F-2F38-491F-8411-211517C3E635}) (Version: 2.5.5 - IK Multimedia) Samsung Kies (HKLM-x32\...\{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.4.17113.1 - Samsung Electronics Co., Ltd.) Hidden Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.4.17113.1 - Samsung Electronics Co., Ltd.) Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.63.0 - Samsung Electronics Co., Ltd.) Sena Bluetooth Device Manager 3.5 (HKLM-x32\...\Sena Bluetooth Device Manager) (Version: 3.5 - Copyright (C) 2012 ~ 2017 Sena Technologies Inc.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) SFX Search (HKLM-x32\...\{2CEA7752-5FEA-411C-B388-6E27FD671BB6}) (Version: 1.0.2 - Sound Ideas) SharpKeys (HKLM-x32\...\{58D335B6-B3C6-4465-AEC3-6442BC323723}) (Version: 2.1.1000 - RandyRants.com) SiDiary 6 (HKLM-x32\...\{73C96D3B-F9D2-4A0C-81F7-FBED6C75CE77}) (Version: 6.0 - SINOVO GmbH & Co. KG) SiSoftware Sandra Lite Titanium.SP2 (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2596}_is1) (Version: 28.28.2018.9 - SiSoftware) Skype Version 8.30 (HKLM-x32\...\Skype_is1) (Version: 8.30 - Skype Technologies S.A.) Smart Switch (HKLM-x32\...\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.18014.6 - Samsung Electronics Co., Ltd.) Hidden Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.18014.6 - Samsung Electronics Co., Ltd.) SmartKeyMap v1.0 (HKLM-x32\...\{350868DC-FEE6-48CD-BA2B-536C9BAD69E6}_is1) (Version: 1.0 - Gaon-InT Co., Ltd.) SmartScore X2 Midi Edition (HKLM-x32\...\{425884B7-D78E-4EE2-91D3-29F3A02181E7}) (Version: 10.5.8 - Musitek) Soundforum Synth (HKLM-x32\...\Soundforum Synth) (Version: - ) Steinberg Caleidoscope Sampler Track Content (HKLM-x32\...\{BD830EFB-4884-422C-8AA0-F564E839FC6F}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg Content Updater (HKLM-x32\...\{23BAFE62-0AF0-4D71-98C2-47286139DC45}) (Version: 4.0.0 - Steinberg Media Technologies GmbH) Steinberg Cubase 7 64bit (HKLM\...\{57FB2180-0FC7-41FC-8D76-3C4271CF4422}) (Version: 7.0.5 - Steinberg Media Technologies GmbH) Steinberg Cubase 8 64bit (HKLM\...\{C806BE81-01DE-4EFA-33AC-34635B3EAB4A}) (Version: 8.0.40 - Steinberg Media Technologies GmbH) Steinberg Cubase 9 (HKLM\...\{C1F742B9-1B31-4949-9A25-9C4204FADD8B}) (Version: 9.0.0 - Steinberg Media Technologies GmbH) Steinberg Cubase 9.5 (HKLM\...\{0D6C3731-C484-4711-A85E-D36C9176A237}) (Version: 9.5.30 - Steinberg Media Technologies GmbH) Steinberg Download Assistant (HKLM-x32\...\Steinberg Download Assistant) (Version: 1.8.3 - Steinberg Media Technologies GmbH) Steinberg Drum Loop Expansion 01 (HKLM-x32\...\{490BF87E-1F75-4453-BF55-9F540543A3CA}) (Version: 2.0.0.0 - Steinberg Media Technologies GmbH) Steinberg EDM Toolbox MIDI Loops (HKLM-x32\...\{8C9B2EA8-9A30-4347-95E9-10E919C4F32E}) (Version: 1.1.0 - Steinberg Media Technologies GmbH) Steinberg Eucon Adapter 6.5 64bit (HKLM\...\{95D90857-61C2-4927-85FF-A317E46E7351}) (Version: 6.5.1 - Steinberg Media Technologies GmbH) Steinberg Generic Lower Latency ASIO Driver 64bit (HKLM\...\{16D5A798-10BE-4FF3-BB71-54C012CD0D7D}) (Version: 1.0.12 - Steinberg Media Technologies GmbH) Steinberg Groove Agent ONE Content (HKLM-x32\...\{BD86F1AC-B594-46E4-85DC-1258AC9E2232}) (Version: 1.0.0.003 - Steinberg Media Technologies GmbH) Steinberg Groove Agent ONE Vintage Beatboxes (HKLM-x32\...\{DBF4BC99-53F1-4C97-84C3-7557D103E182}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH) Steinberg Groove Agent SE 64bit (HKLM\...\{A5AB0D21-21BD-4DB8-F097-02E8FC8C486A}) (Version: 4.2.30 - Steinberg Media Technologies GmbH) Steinberg Groove Agent SE Acoustic Agent (HKLM-x32\...\{F34EA13C-F078-4003-AE21-43EAB2680EC5}) (Version: 1.0.2 - Steinberg Media Technologies GmbH) Steinberg Groove Agent SE Allen Morgan Signature Drums (HKLM-x32\...\{09D3BF0C-54D0-40AE-B917-B9BBD7873BB5}) (Version: 2.0.0 - Steinberg Media Technologies GmbH) Steinberg Groove Agent SE Content (HKLM-x32\...\{AFC9D1CE-F050-437C-35A5-62DEDB262DC7}) (Version: 1.3.0 - Steinberg Media Technologies GmbH) Steinberg Groove Agent SE Rock Pop Toolbox Drums (HKLM-x32\...\{E9BFA009-DD72-4F2A-84CB-6DF46472B563}) (Version: 1.0.2 - Steinberg Media Technologies GmbH) Steinberg HALion Content Registration (HKLM-x32\...\{D3BC09D3-55D7-424D-9B7B-5CAF1C6113FD}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Hidden Steinberg HALion Library Manager (HKLM\...\{55B14661-3F86-4974-9097-D7508EC63D97}) (Version: 3.0.16 - Steinberg Media Technologies GmbH) Steinberg HALion Sonic SE Component (HKLM\...\{B99C316B-C135-43B5-8E77-2BC5E241F964}) (Version: 3.1.0 - Steinberg Media Technologies GmbH) Steinberg HALion Sonic SE Content (HKLM-x32\...\{A5051ABF-A497-4C3C-85EA-F7A4D5C19B82}) (Version: 2.0.1 - Steinberg Media Technologies GmbH) Steinberg LoopMash Content (HKLM-x32\...\{4D454CF8-12FD-464D-B57B-B46FE27B78BB}) (Version: 2.0.0.000 - Steinberg Media Technologies GmbH) Steinberg LoopMash Content 2 (HKLM-x32\...\{88C337F0-4CF2-4098-BDC0-D94859ECA2B4}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH) Steinberg Midi Loop Library (HKLM-x32\...\{89DE2651-6DD9-4C15-AC94-8348362D456C}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg Padshop 64bit (HKLM\...\{75F15019-C0C2-4047-AA45-97B4BD313719}) (Version: 1.1.0 - Steinberg Media Technologies GmbH) Steinberg Production Grooves Content (HKLM-x32\...\{F72824BC-4856-4050-A745-D92BC601CCDE}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg Retrologue 64bit (HKLM\...\{4D65ECE6-131D-4B5F-8470-2750D3161619}) (Version: 2.1.0 - Steinberg Media Technologies GmbH) Steinberg REVerence Content 01 (HKLM-x32\...\{532B917B-8235-4FA5-BE36-643A8BB053A5}) (Version: 2.0.1.000 - Steinberg Media Technologies GmbH) Steinberg Upload Manager (HKLM-x32\...\{88BBBD8F-4C19-4809-B84B-7A8F8238B48D}) (Version: 1.0.2 - Steinberg Media Technologies GmbH) Steinberg VST Amp Rack Content 01 (HKLM-x32\...\{8CBA7E47-48DA-47DC-8E98-6984BA830295}) (Version: 1.0.1 - Steinberg Media Technologies GmbH) Steinberg VST Bass Amp Content (HKLM-x32\...\{A2FC1750-B90F-4948-9D6E-DDDA155C6EC8}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg VST Transit 64bit (HKLM\...\{FF1A114C-0F88-11E5-A6C0-1697F925EC7B}) (Version: 1.0.13 - Steinberg Media Technologies GmbH) Studie zur Verbesserung von HP Officejet Pro 8620 (HKLM\...\{825BC9A9-A005-4FDB-BDE9-A4F2DF69C3B7}) (Version: 32.3.198.49673 - Hewlett-Packard Co.) Studie zur Verbesserung von HP OfficeJet Pro 8710 (HKLM\...\{94E4242D-9AEA-458E-A74F-4C345DA16867}) (Version: 40.12.1161.1896 - HP Inc.) Superior Drummer 32-bit (HKLM-x32\...\{8752CE2D-F312-499D-AE46-4AD80506A890}) (Version: 2.4.0 - Toontrack) Superior Drummer 64-bit (HKLM\...\{0E54CF79-AE40-409E-9253-9563418C730C}) (Version: 2.4.0 - Toontrack) SWAM Double Reeds version 2.5.1 64bit (HKLM\...\{479639F1-9DD5-43B8-A67C-F67850213A51}_is1) (Version: 2.5.1 64bit - Samplemodeling) SWAM Flutes version 1.2.2 64bit (HKLM\...\{41F9E74C-140F-43E8-AA5E-563AA6CE43DF}_is1) (Version: 1.2.2 64bit - Samplemodeling) SWAM The Saxophones version 2.5.1 64bit (HKLM\...\{6A85AE8B-8674-4014-A976-6C7727B585E4}_is1) (Version: 2.5.1 64bit - Samplemodeling) SWAM The Soprano and Bass Clarinets version 2.5.1 64bit (HKLM\...\{8DD33B84-8B9C-48A6-9075-9BB7F00EE991}_is1) (Version: 2.5.1 64bit - Samplemodeling) swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden TaskCracker for Outlook (HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\{398d543d-71ef-4754-b0a0-9ee13f436d52}) (Version: 2.1.11.0 - TaskCracker) TC Electronic PowerCore (HKLM\...\{29E65F87-3B96-4F74-84E8-6088411A85C3}) (Version: 4.4.3.62 - TC Electronic) TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.72365 - TeamViewer) TEControl Midi Breath Controller (HKLM-x32\...\TECMidiBreathCtrl) (Version: - ) Telegram Desktop Version 1.2.17 (HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.2.17 - Telegram Messenger LLP) TERRATEC Cinergy HTC USB XS HD (64 Bit) (HKLM-x32\...\{D4DC2182-41B4-4623-81A7-2A69AB169E6B}) (Version: 5.09.1202.00 - TERRATEC) TerraTec Home Cinema (HKLM-x32\...\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}) (Version: 6.25.6 - ) THC Codec Patch (HKLM-x32\...\{03DF2CB2-FF23-47F7-8754-8C3938A5F44C}) (Version: 1.00.0000 - ) THC codec patch (HKLM-x32\...\{667774E0-26BB-4194-9854-656A8DC5337B}) (Version: 1.00.0000 - TERRATEC) TomTom HOME (HKLM-x32\...\{30E6FC43-C31F-4968-9A06-AA38E3C3CF73}) (Version: 2.10.1 - Ihr Firmenname) TomTom HOME (HKLM-x32\...\{9F1953B3-B0EE-402C-A29F-A8AB775A6D1D}) (Version: 2.11.3 - Ihr Firmenname) TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.) TomTom MyDrive Connect 4.2.2.3561 (HKLM-x32\...\MyDriveConnect) (Version: 4.2.2.3561 - TomTom) Toontrack solo 64 bit (HKLM\...\{FA9D0D8C-FDD1-45C2-8291-079FBA72D2CB}) (Version: 1.3.2 - Toontrack) T-RackS CS version 4.7.1 (HKLM\...\{E931EBCC-55F9-4D67-BA0E-D57C4A893A44}_is1) (Version: 4.7.1 - IK Multimedia) UAD drivers. This may take a while... (HKLM-x32\...\{0A122638-B9F6-4E89-A537-B1A5899A8A03}) (Version: 8.0.0.10598 - Universal Audio, Inc.) Hidden UAD Powered Plug-Ins (HKLM\...\{21D30CDB-3338-4BC7-9006-DF3C7DAA3C17}) (Version: 8.0.0.10598 - Universal Audio, Inc.) Hidden UAD Powered Plug-Ins (HKLM\...\{298B735D-98C5-4320-8DA8-1D92129FE4BC}) (Version: 8.0.0.10598 - Universal Audio, Inc.) Hidden UAD Powered Plug-Ins (HKLM-x32\...\{110C0D69-2D68-4522-85C8-D4B404474E03}) (Version: 8.0.0.10598 - Universal Audio, Inc.) Hidden UAD Powered Plug-Ins (HKLM-x32\...\{1d23d860-61b7-4bf1-ae24-8f29c3b8d9db}) (Version: 8.0.0.10598 - Universal Audio, Inc.) UAD Powered Plug-Ins (HKLM-x32\...\{A65E6089-D8B0-4484-9401-7A4D7008119D}) (Version: 8.0.0.10598 - Universal Audio, Inc.) Hidden UAD Powered Plug-Ins (HKLM-x32\...\{ACDF367C-A0C7-4ADF-8EFE-4FB9EA8B94E2}) (Version: 8.0.0.10598 - Universal Audio, Inc.) Hidden Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{C5FDDED7-DEC7-48B4-AFD8-DFB8A0FD199A}) (Version: 2.51.0.0 - Microsoft Corporation) VdhCoApp 1.2.4 (HKLM\...\weh-iss-net.downloadhelper.coapp_is1) (Version: - DownloadHelper) Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.) Vita Concert Grand LE (HKLM\...\{BFA88ABE-D175-42C7-B374-92A2D9333CAB}) (Version: 2.4.0.95 - MAGIX Software GmbH) Hidden VLC media player (HKLM\...\VLC media player) (Version: 3.0.4 - VideoLAN) VMware Player (HKLM\...\{E452E727-86B8-4233-8CC3-41FD817AFAFF}) (Version: 7.1.0 - VMware, Inc.) Hidden VMware Player (HKLM-x32\...\VMware_Player) (Version: 7.1.0 - VMware, Inc) Voice Reader Home 15 Deutsch-Männlich (Markus) (HKLM-x32\...\{C13DDB54-A508-49E3-918E-C904C217D4BA}) (Version: 15.0.0.0 - Linguatec GmbH) Voice Reader Home 15 Deutsch-Weiblich (Petra) (HKLM-x32\...\{6F6B2DBF-CF7C-43F1-BB05-0D41C2240D92}) (Version: 15.0.0.0 - Linguatec GmbH) Voxengo SPAN (HKLM\...\Voxengo SPAN_is1) (Version: 3.1 - Voxengo) WhatsApp (HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\WhatsApp) (Version: 0.3.1475 - WhatsApp) WinCDEmu (HKLM-x32\...\WinCDEmu) (Version: 3.6 - Bazis) Windows-Treiberpaket - Cambridge Silicon Radio Ltd. (CSRBC) USB (05/02/2017 2.5.2.8) (HKLM\...\C7C4712DD9EFA5115CB6017C22C344F393FA248C) (Version: 05/02/2017 2.5.2.8 - Cambridge Silicon Radio Ltd.) Windows-Treiberpaket - RME HDSP Series (02/04/2014 4.0.6.0) (HKLM\...\FAD5BDA71BDE72190DA8A6EDDD0DAB0FA0BDFBE8) (Version: 02/04/2014 4.0.6.0 - RME) Windows-Treiberpaket - RME HDSP Series (07/19/2016 4.1.5.0) (HKLM\...\D481728C4C968FD941A71EF8EF57682A3941896D) (Version: 07/19/2016 4.1.5.0 - RME) Windows-Treiberpaket - RME HDSP Series (07/21/2015 4.1.0.0) (HKLM\...\81B817F88F03F6AC1D25E95A91B9D5A7E559C916) (Version: 07/21/2015 4.1.0.0 - RME) Windows-Treiberpaket - TerraTec (USB28xxBGA) Media (12/02/2009 5.09.1202.00) (HKLM\...\65164506FD435CC3986FDA4C94F3FFBAE17E7F97) (Version: 12/02/2009 5.09.1202.00 - TerraTec ) WinHTTrack Website Copier 3.49-2 (HKLM-x32\...\WinHTTrack Website Copier_is1) (Version: 3.49.2 - HTTrack) winKeyLock version 1.0.1.3 (HKLM-x32\...\winKeyLock_is1) (Version: 1.0.1 - winKeyLock) WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies) WinRAR 5.50 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH) Zoom (HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\ZoomUMX) (Version: 4.1 - Zoom Video Communications, Inc.) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-3837192191-2688150623-3177619377-1000_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\xxxxx\AppData\Local\GoToMeeting\8789\G2MOutlookAddin64.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-3837192191-2688150623-3177619377-1000_Classes\CLSID\{E0F441A0-95B4-6F16-242E-5C9535A10BEE}\InprocServer32 -> C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Keine Datei ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> Keine Datei ContextMenuHandlers1: [BabylonDocTrans] -> {947217BD-E967-400A-B14A-BA851A8EDCBB} => -> Keine Datei ContextMenuHandlers1: [Balabolka] -> {6CB83A5A-AA68-4895-9F54-175E789AE149} => C:\Program Files (x86)\Balabolka\BFileExt.dll [2013-02-28] (Ilya Morozov) ContextMenuHandlers1: [FineReader12ContextMenu] -> {55344AC6-630B-430C-B292-C7BE21F90061} => C:\Program Files (x86)\ABBYY FineReader 12\FRIntegration.x64.dll [2014-01-30] (ABBYY Production LLC.) ContextMenuHandlers1: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\ShellEx.dll [2018-05-31] (AO Kaspersky Lab) ContextMenuHandlers1-x32: [MyPhoneExplorer] -> {A372C6DF-7A85-41B1-B3B0-D1E24073DCBF} => C:\Program Files (x86)\MyPhoneExplorer\DLL\ShellMgr.dll [2010-03-30] (F.J. Wechselberger) ContextMenuHandlers1-x32: [WinCDEmu] -> {D0E37FD2-F675-426F-B09A-2CF37BA46FD5} => C:\Program Files (x86)\WinCDEmu\x64\WinCDEmuContextMenu.dll [2011-06-19] (SysProgs.org) ContextMenuHandlers1-x32: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal) ContextMenuHandlers1-x32-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal) ContextMenuHandlers2: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\ShellEx.dll [2018-05-31] (AO Kaspersky Lab) ContextMenuHandlers2-x32: [VMDiskMenuHandler] -> {271DC252-6FE1-4D59-9053-E4CF50AB99DE} => C:\Program Files (x86)\VMware\VMware Player\vmdkShellExt.dll [2015-02-06] (VMware, Inc.) ContextMenuHandlers2-x32: [VMDiskMenuHandler64] -> {E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC} => C:\Program Files (x86)\VMware\VMware Player\x64\vmdkShellExt64.dll [2015-02-06] (VMware, Inc.) ContextMenuHandlers2-x32: [WinCDEmu] -> {A9901FCD-B4DF-43A1-BD5D-6C9F88679497} => C:\Program Files (x86)\WinCDEmu\x64\WinCDEmuContextMenu.dll [2011-06-19] (SysProgs.org) ContextMenuHandlers4: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\ShellEx.dll [2018-05-31] (AO Kaspersky Lab) ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Keine Datei ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Keine Datei ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => -> Keine Datei ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2018-09-06] (NVIDIA Corporation) ContextMenuHandlers6: [Fast Explorer] -> {693BE9C0-BEC3-11D2-B4C1-C33BBD3AD64B} => C:\ProgramData\AllDup\FEShlExt.dll [2008-08-20] (Alex Yakovlev) ContextMenuHandlers6: [FineReader12ContextMenu] -> {55344AC6-630B-430C-B292-C7BE21F90061} => C:\Program Files (x86)\ABBYY FineReader 12\FRIntegration.x64.dll [2014-01-30] (ABBYY Production LLC.) ContextMenuHandlers6: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\ShellEx.dll [2018-05-31] (AO Kaspersky Lab) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {019E00F2-B24A-4429-9ED8-8661E47FEBB7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_CN7BHBT148 => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2018-11-09] (HP Inc.) Task: {02D52FF0-0802-479F-A103-637DBED1607E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG Task: {072C2E97-A6EF-42EA-B557-5584C8421C4A} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-07-19] (NVIDIA Corporation) Task: {07B9B513-EBA2-4717-B1C6-9B97452EC3D6} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG Task: {09A3CD32-D158-4F32-9817-C095A01C0901} - System32\Tasks\{F896069C-EE12-4541-9D74-CBE75145141C} => C:\Program Files (x86)\ScanWizard 5\BtnScan.exe Task: {0AF072E1-BE29-423F-AB8C-04B92BFE9846} - System32\Tasks\{A2EB9C37-4DED-4351-AFC9-4EA81DD80D3A} => C:\Program Files (x86)\ScanWizard 5\BtnScan.exe Task: {0BEA68B7-CD57-411F-812F-A25B4F450753} - System32\Tasks\ASUS\ASUS DigiVRM Help => C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe [2011-04-13] (ASUSTeK Computer Inc.) Task: {0FA2E930-EDD3-4AD1-BF31-5E8787DF8740} - System32\Tasks\G2MUploadTask-S-1-5-21-3837192191-2688150623-3177619377-1000 => C:\Users\xxxxx\AppData\Local\GoToMeeting\10996\g2mupload.exe [2018-11-03] (LogMeIn, Inc.) Task: {1007CF8E-D233-47B7-BD60-D287FD9E7754} - System32\Tasks\{B099E173-9F43-40C9-A20F-46DAA44FBC82} => C:\Program Files (x86)\ScanWizard 5\ScannerFinder.exe Task: {1067DE47-6A39-44F8-9056-F70F8C4D03CA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-29] (Google Inc.) Task: {14081E9D-B685-4718-A475-B8B4DBE634F6} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [2018-01-24] (Tracker Software Products (Canada) Ltd.) Task: {15B0A3FF-6968-43BE-BEB0-1EB3F43268A4} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-07-19] (NVIDIA Corporation) Task: {19700205-43E5-4DB9-AA65-DC0243C85125} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-08-13] (Adobe Systems Incorporated) Task: {1AD0943E-B4CE-42AD-880A-6BD430B8B0E9} - System32\Tasks\G2MUpdateTask-S-1-5-21-3837192191-2688150623-3177619377-1000 => C:\Users\xxxxx\AppData\Local\GoToMeeting\10996\g2mupdate.exe [2018-11-03] (LogMeIn, Inc.) Task: {1FD330A6-7814-45D2-A1FB-C5D9DC9EA0F6} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-11-03] (Microsoft Corporation) Task: {24486F47-FAD4-4D7A-BE3F-43DCF413886D} - System32\Tasks\Connect => C:\Program Files (x86)\MAGIX\Connect\connect.exe [2017-05-10] (MAGIX Software GmbH) Task: {27CFCD81-515C-411D-8E31-67AC667F8180} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG Task: {2B4EBF40-CA24-4723-8738-97D50AC9720F} - System32\Tasks\HP AR Program Upload => C:\Program Files\HP\HP Officejet Pro 8620\bin\HPRewards.exe [2014-07-21] (TODO: <Company name>) Task: {2F7DB506-82AE-4A1A-9453-4C30851F4120} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2018-07-19] (NVIDIA Corporation) Task: {30DFC851-C634-4594-B351-DA193D08ACF0} - System32\Tasks\HPCeeScheduleForxxxxx => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard) Task: {35F108C1-C418-4341-9644-EA575D23A117} - System32\Tasks\ScanToPCActivationApp.exe_{8ABB3C05-F4FC-48DA-8D3B-6346DE18998C} => C:\Program Files\HP\hp officejet pro 8620\bin\ScanToPCActivationApp.exe [2014-07-21] (Hewlett-Packard Development Company, LP) Task: {387FFA2C-C6B6-4C9D-808B-424AF7133D1F} - \Microsoft\Windows\Setup\gwx\rundetector -> Keine Datei <==== ACHTUNG Task: {3DB2E37C-024E-4100-BA04-448CB84BEB05} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {417853FE-EAE6-4B1A-8D3D-E732DF2D59BC} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe Task: {425620DD-6687-46B2-A6D4-02FEB0A49838} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2018-05-04] (HP Inc.) Task: {443F1F74-6B81-40BA-9540-1A6D5C633B50} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {46BE4B97-5B77-44FC-B0F7-BC8C28A89B26} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2017-11-19] () Task: {47324E10-A462-4853-AFA1-5AD8E35CE612} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2018-07-19] (NVIDIA Corporation) Task: {492706C2-916A-40A3-9679-3967FABC30BC} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2018-11-03] (Microsoft Corporation) Task: {4A17FF8B-43AC-42D7-BD46-9E6DD09C614A} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe Task: {4C3948A9-4A66-42D8-AB92-CDB9B9C60BA6} - System32\Tasks\{F3057795-FC08-4BA7-A011-9F06D983C366} => C:\Program Files (x86)\ScanWizard 5\ScannerFinder.exe Task: {4DF0187A-670F-4CBC-A64A-4076F81FFB43} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG Task: {513BAAED-D225-46B2-9305-DB65E0B71203} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG Task: {51630D4A-6479-46FC-8AA0-C62EB4771BAE} - System32\Tasks\AdobeGCInvoker-1.0-MicrosoftAccount-office@romansillipp.com => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-09-10] (Adobe Systems, Incorporated) Task: {55638E04-1E74-4732-A378-A830838C6D8E} - System32\Tasks\{166B1474-E07F-4CFA-8D2E-098F22B7F486} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\Uninstall.exe" -c /app FreeYTVDownloader Task: {58937CEF-0A12-42B3-A4AB-10A4B6C4E13D} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {5D089FA5-3096-40FD-BECC-908A76CE9954} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2018-11-09] (HP Inc.) Task: {5DD0DF2A-EC5B-4F5C-B86E-EA50088E592B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [2018-11-03] (Microsoft Corporation) Task: {5F6A3109-CA18-4A5C-87DC-291855984212} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2018-05-04] (HP Inc.) Task: {61F27FF8-833F-4335-A812-F4C9EABA9358} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe Task: {6440C7D5-554F-42F7-9224-E6E66FF2720A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-29] (Google Inc.) Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] () Task: {6634F99B-0A86-45F5-87B8-C76DF575B898} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe Task: {68B8AA64-6E86-42A8-9B51-98FE521ED42E} - System32\Tasks\S-1-5-21-3837192191-2688150623-3177619377-1000\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2018-04-12] (Microsoft Corporation) Task: {6C1027BD-03CE-44D6-87F0-BCD4A2072EDD} - \Microsoft\Windows\Google\GoogleUpdateTaskMachineUP -> Keine Datei <==== ACHTUNG Task: {6EC4DBED-59D1-4BE9-8564-1AC472BEC748} - System32\Tasks\HP AR Program Upload - 2d96347c3d134f9999642121a983270c84243094439f4908a4829deed35a075a => C:\Program Files\HP\HP Officejet Pro 8620\bin\HPRewards.exe [2014-07-21] (TODO: <Company name>) Task: {6F1C0081-4BCD-4EE8-B3FD-A597622C2702} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {70743A58-ADD3-40CF-9121-F409ADDCF4B3} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-07-19] (NVIDIA Corporation) Task: {7282BFE0-9FD0-4F0C-A840-92B0ABB484C1} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2018-07-19] (NVIDIA Corporation) Task: {739BB8B1-377E-40EA-91EC-DD5BC11F5E3E} - System32\Tasks\Eigene Dateien mobile HD => C:\Program Files\FreeFileSync\FreeFileSync.exe [2018-07-06] (FreeFileSync.org) Task: {7779BA5A-9A74-4BA8-8AB2-A6717D1F379B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.) Task: {78F82A38-88D6-4273-81D3-7716D1AD9BAA} - System32\Tasks\{1AEF08D0-6D11-4793-AC78-9563B8964124} => C:\Program Files (x86)\ScanWizard 5\MSC.exe Task: {7DA2D159-4E73-400E-B74D-B2273339E925} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-07-19] (NVIDIA Corporation) Task: {7EC9D539-5FCF-433F-871F-F805E95C8D89} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2010-11-26] (ASUSTeK Computer Inc.) Task: {7F8E016A-76B9-4A87-8C39-0C74811547C5} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe Task: {84224A7F-1FEC-4FBF-9DD4-CA54BA7BF7CF} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe Task: {85B1C03F-B57A-4D53-92F5-95A6F91ED28C} - System32\Tasks\{8DF6D001-E1C9-4E26-9DBB-700D8BB48307} => C:\Program Files (x86)\ScanWizard 5\BtnScan.exe Task: {864FC368-734F-4C12-BBF4-59252CBF604B} - System32\Tasks\ScanToPCActivationApp.exe_{F3DCC517-C18B-4314-A155-116E3A37C231} => C:\Program Files\HP\HP Officejet Pro 8620\Bin\ScanToPCActivationApp.exe [2014-07-21] (Hewlett-Packard Development Company, LP) Task: {86DCE478-ADE6-4467-B97C-55378D52D44A} - System32\Tasks\Outlook pst mobile HD => C:\Program Files\FreeFileSync\FreeFileSync.exe [2018-07-06] (FreeFileSync.org) Task: {8974A6CA-824E-4B3A-9484-58C00C95254E} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {89B5DE8D-5859-4371-A1EA-E2F4D8BCF5D7} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-07-19] (NVIDIA Corporation) Task: {8BD6D1F4-283F-46CE-85FE-BBB4D4CC1CE4} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {93A71FD6-D0C8-4446-8FD9-939EEBA65823} - System32\Tasks\{6079CCA0-70CE-430D-90F0-E0364C2210C0} => C:\Program Files (x86)\ScanWizard 5\BtnScan.exe Task: {9433C927-8D03-45B0-B73C-2D41B034B90F} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-07-19] (NVIDIA Corporation) Task: {9612DA30-1B35-4738-AD06-0F0597824AEB} - System32\Tasks\HP AR Program Upload - c5da1bba60ad4b1389a839d5ac29448c60c74baaa36642f689743c9a5eeb539a => C:\Program Files\HP\HP Officejet Pro 8620\bin\HPRewards.exe [2014-07-21] (TODO: <Company name>) Task: {96443316-8FE8-42A8-8002-E0D0F4C68965} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-11-03] (Microsoft Corporation) Task: {96571150-49DF-415D-B1FD-E2B0DC5C130C} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-07-19] (NVIDIA Corporation) Task: {9A568DB6-710C-4764-B54B-4CFCA5587FB7} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-10-24] (Microsoft Corporation) Task: {A130215C-D677-4B2C-93B6-6EAF3F5F62EC} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {A45E616E-EB93-4DCC-9975-14499C534653} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.) Task: {A57947A4-D99E-4C6A-86CD-4C6D0806ADAE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2018-08-30] (HP Inc.) Task: {A9B7F902-E767-44DF-BF4D-B71AF050693D} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG Task: {B373F560-0F0D-406D-B7E8-6BA8F5D32FE6} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [2018-11-03] (Microsoft Corporation) Task: {B426768B-3CD8-4E8D-89AF-080086000578} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG Task: {B5381109-73CF-410C-B0E6-80293072D8B6} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-07-19] (NVIDIA Corporation) Task: {BDB36AA9-EAC5-4D8A-9398-ECCC747792DE} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe Task: {BDC5C6D1-FBA2-4FDE-A30C-A3E41A07FCD2} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG Task: {BF0BC14F-94E6-497F-879F-6BE694A71F83} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-11-13] (Adobe Systems Incorporated) Task: {C0C262E2-7484-4365-84F2-B2D3FDCB6DEE} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_31_0_0_148_Plugin.exe [2018-11-13] (Adobe Systems Incorporated) Task: {C12EBEFE-FDE0-4585-BA5A-E02A52E7C1F9} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG Task: {C179397E-C1B8-4161-8FDF-A0417300E843} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG Task: {CC1B0517-79FB-4E32-9464-3CD6FA94C455} - System32\Tasks\Datenplatte Komplett-Backup => C:\Program Files\FreeFileSync\FreeFileSync.exe [2018-07-06] (FreeFileSync.org) Task: {CC9D5757-6159-424D-A571-7240D6F2B013} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe Task: {CF388D4F-B982-416A-BCA0-8461AEBB0530} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe Task: {D5E03BC4-0FFD-41D5-AD19-B05192B1293E} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG Task: {D650AA22-2808-4AC4-938C-E86D6458389F} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe Task: {D65A7DDB-8726-446D-ADB1-411B173B3909} - System32\Tasks\ScanToPCActivationApp.exe_{B111B4C8-06CA-48C1-90A6-5F8FF479DCFD} => C:\Program Files\HP\HP Officejet Pro 8620\Bin\ScanToPCActivationApp.exe [2014-07-21] (Hewlett-Packard Development Company, LP) Task: {D893F536-DD41-46C4-952F-DEDEC35BDC1C} - System32\Tasks\HPCustParticipation HP Officejet Pro 8620 => C:\Program Files\HP\HP Officejet Pro 8620\Bin\HPCustPartic.exe [2014-07-21] (Hewlett-Packard Development Company, LP) Task: {DD4541EB-9950-4EFE-9D30-EF6DC4FB8666} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG Task: {DF9C17BF-A607-4B98-8649-A733C3F8D7F9} - System32\Tasks\{821DCBCD-C72C-4126-A5B8-D41C58A85639} => C:\Program Files (x86)\ScanWizard 5\BtnScan.exe Task: {E41514F5-08D2-4254-B9AA-E1BE7705D8D8} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Keine Datei <==== ACHTUNG Task: {E57DA3E0-9ADB-4796-B790-A43B819E821C} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-10-24] (Microsoft Corporation) Task: {E8BC7499-CFA4-4BB8-ADD7-DEF59A9BEE80} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe Task: {EBAC64DC-BEF0-4DE0-98AD-EC0729F475CB} - System32\Tasks\RunAsStdUser Task => C:\Program Files (x86)\inPixio\InPixio Photo Clip 8\LauncherIPC8.exe [2018-06-13] (InPixio) Task: {EE24FE8E-BE37-4919-ACE6-250EB9E7BA1F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe Task: {EF42EE8B-15CF-4EBF-815D-B79C42BD9D74} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG Task: {EF8445D5-3674-4171-9816-C4BB9EB7FB23} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {F2AAD0F8-5AF5-4A5B-ADE8-902FE9DC313B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.) Task: {F34B3870-5DD4-4AA2-8593-34B0AB8680BE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2018-08-21] (HP Inc.) Task: {F370F96C-8732-48A7-912B-2752E3E7132C} - System32\Tasks\AdobeAAMUpdater-1.0-RS-Office-xxxxx => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe Task: {F4D529A7-2DCF-479A-8603-7A68B2C4064B} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG Task: {F59BCD11-EEA7-4CC4-912A-FBE023E3F1CC} - System32\Tasks\{B1849062-D7C6-4068-9881-0248F137DBED} => C:\Windows\system32\pcalua.exe -a F:\Setup.exe -d F:\ Task: {F61FC410-59B5-418D-94A7-08AB1C6FBBF4} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG Task: {FC5039D3-B9FA-41EF-BD43-09E9CC992B42} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {FCA5CA3D-5EA4-43E2-9FD3-F623C8EF37DA} - System32\Tasks\HPCustParticipation HP OfficeJet Pro 8710 => C:\Program Files\HP\HP OfficeJet Pro 8710\Bin\HPCustPartic.exe [2018-04-06] (HP Inc.) Task: {FE35B46E-01E8-48D7-A58A-33C80B27B252} - System32\Tasks\ASUS\ASUS Mobilink Execute => C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\ASUS Mobilink.exe [2010-11-25] (ASUSTeK Computer Inc.) Task: {FE46248B-DEED-412B-A733-F9963D4953EC} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\Connect.job => C:\Program Files (x86)\MAGIX\Connect\connect.exe Task: C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-3837192191-2688150623-3177619377-1000.job => C:\Users\xxxxx\AppData\Local\GoToMeeting\10996\g2mupdate.exe Task: C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-3837192191-2688150623-3177619377-1000.job => C:\Users\xxxxx\AppData\Local\GoToMeeting\10996\g2mupload.exe Task: C:\WINDOWS\Tasks\HPCeeScheduleForxxxxx.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe-CheckUpdate(Tracker Software Products (Canada) Ltd.Kee ==================== Verknüpfungen & WMI ======================== (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2018-04-12 00:34 - 2018-04-12 00:34 - 000491744 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll 2015-03-14 01:48 - 2012-06-21 07:25 - 000113152 _____ () C:\WINDOWS\System32\redmon64.dll 2018-04-12 00:34 - 2018-04-12 00:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll 2018-04-12 00:34 - 2018-04-12 00:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll 2010-12-02 03:15 - 2010-12-02 03:15 - 000915584 _____ () C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe 2015-03-13 20:52 - 2010-10-21 10:52 - 000586880 _____ () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe 2010-11-03 10:30 - 2010-11-03 10:30 - 000918144 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe 2016-10-06 22:02 - 2018-02-07 07:21 - 004538368 _____ () C:\Program Files (x86)\FreeStyle Libre\MAS.FreeStyleLibre.exe 2018-10-17 15:34 - 2018-07-19 21:16 - 001314856 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll 2018-11-13 21:39 - 2018-11-01 07:55 - 002185216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2018-10-17 15:34 - 2018-07-19 21:15 - 095437352 _____ () C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll 2018-10-04 13:37 - 2018-10-04 13:37 - 000009216 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\ImagePipelineNative.dll 2018-11-13 20:35 - 2018-11-13 20:35 - 000060416 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\ChakraBridge.dll 2018-11-13 20:35 - 2018-11-13 20:35 - 000019456 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\SkypeProxiesAndStubs.dll 2018-11-13 20:35 - 2018-11-13 20:35 - 010873344 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\LibWrapper.dll 2018-11-13 20:35 - 2018-11-13 20:35 - 002834432 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\skypert.dll 2018-11-13 20:35 - 2018-11-13 20:35 - 000685568 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll 2018-11-13 20:35 - 2018-11-13 20:35 - 000183808 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe 2018-10-27 03:13 - 2018-10-27 03:14 - 000019968 _____ () C:\Program Files\WindowsApps\AudibleInc.AudibleforWindowsPhone_10.5.49.0_x64__xns73kv1ymhp2\AudibleRT.WindowsPhone.exe 2018-10-27 03:13 - 2018-10-27 03:13 - 041113088 _____ () C:\Program Files\WindowsApps\AudibleInc.AudibleforWindowsPhone_10.5.49.0_x64__xns73kv1ymhp2\AudibleRT.WindowsPhone.dll 2018-06-22 14:03 - 2018-06-22 14:03 - 001123840 _____ () C:\Program Files\WindowsApps\AudibleInc.AudibleforWindowsPhone_10.5.49.0_x64__xns73kv1ymhp2\e_sqlite3.dll 2018-10-27 03:13 - 2018-10-27 03:14 - 000052224 _____ () C:\Program Files\WindowsApps\AudibleInc.AudibleforWindowsPhone_10.5.49.0_x64__xns73kv1ymhp2\AudibleSystemFileWrapperRT.dll 2018-08-30 19:38 - 2018-08-30 19:38 - 004445248 _____ () C:\Program Files\WindowsApps\AudibleInc.AudibleforWindowsPhone_10.5.49.0_x64__xns73kv1ymhp2\Microsoft.UI.Xaml.dll 2018-10-17 15:34 - 2018-07-19 21:15 - 003029032 _____ () C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\swiftshader\libglesv2.dll 2018-10-17 15:34 - 2018-07-19 21:15 - 000149544 _____ () C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\swiftshader\libegl.dll 2018-10-23 18:55 - 2018-10-23 18:55 - 035118592 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\Video.UI.exe 2018-10-23 18:55 - 2018-10-23 18:55 - 000290816 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\SharedUI.dll 2018-10-23 18:55 - 2018-10-23 18:55 - 005987328 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\EntCommon.dll 2017-09-26 13:21 - 2017-09-26 13:21 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2018-10-23 18:55 - 2018-10-23 18:55 - 009064448 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\EntPlat.dll 2018-07-11 04:56 - 2018-07-11 04:56 - 001922224 _____ () C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.10314.31700.1000_x64__8wekyb3d8bbwe\Microsoft.Applications.Telemetry.Windows.dll 2018-10-16 01:07 - 2018-10-16 01:07 - 004183040 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1809.2731.0_x64__8wekyb3d8bbwe\Calculator.exe 2018-09-26 15:43 - 2018-09-26 15:43 - 004472952 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1809.2731.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2018-10-05 18:38 - 2018-10-05 18:38 - 032535040 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18091.10321.0_x64__8wekyb3d8bbwe\Music.UI.exe 2018-10-05 18:38 - 2018-10-05 18:38 - 000290816 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18091.10321.0_x64__8wekyb3d8bbwe\SharedUI.dll 2017-12-01 11:19 - 2017-12-01 11:19 - 000902656 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18091.10321.0_x64__8wekyb3d8bbwe\Microsoft.Membership.MeControl.UI.Xaml.dll 2017-09-26 13:21 - 2017-09-26 13:21 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18091.10321.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2018-10-05 18:38 - 2018-10-05 18:38 - 005951488 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18091.10321.0_x64__8wekyb3d8bbwe\EntCommon.dll 2018-05-29 23:57 - 2014-12-01 09:10 - 000122960 _____ () C:\Program Files\ALL-INKL WebDisk\libpkcs11-helper-1.dll 2018-05-29 23:57 - 2014-12-01 09:10 - 000224856 _____ () C:\Program Files\ALL-INKL WebDisk\liblzo2-2.dll 2018-04-03 07:30 - 2018-04-03 07:30 - 000076456 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll 2018-11-16 12:25 - 2018-11-16 12:26 - 000478720 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 2018-11-16 12:25 - 2018-11-16 12:26 - 066031104 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll 2017-09-19 22:22 - 2017-09-19 22:22 - 002523136 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\UnityEngineDelegates.dll 2018-11-16 12:25 - 2018-11-16 12:26 - 000010752 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\RenderingPlugin.dll 2018-11-16 12:25 - 2018-11-16 12:26 - 003715072 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll 2018-08-30 19:38 - 2018-08-30 19:39 - 002480640 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\opencv_imgproc320.dll 2018-08-30 19:38 - 2018-08-30 19:39 - 002280960 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\opencv_core320.dll 2018-03-30 07:23 - 2018-03-30 07:24 - 002283008 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\TrackingDLLUWP.dll 2018-11-16 12:25 - 2018-11-16 12:26 - 000036352 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\WinMLWrapper.UWP.dll 2018-11-16 12:25 - 2018-11-16 12:26 - 014097920 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll 2018-11-16 12:25 - 2018-11-16 12:26 - 003569152 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\MediaEngine.dll 2018-11-16 12:25 - 2018-11-16 12:25 - 002863616 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll 2018-08-30 19:38 - 2018-08-30 19:39 - 000973312 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll 2018-07-26 03:42 - 2018-07-26 03:43 - 004584960 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2015-03-13 20:51 - 2018-11-17 13:42 - 000025600 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.13\PEbiosinterface32.dll 2015-03-13 20:51 - 2010-06-29 03:58 - 000104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.13\ATKEX.dll 2015-02-06 17:40 - 2015-02-06 17:40 - 001301696 _____ () C:\Program Files (x86)\VMware\VMware Player\libxml2.dll 2018-10-17 15:34 - 2018-07-19 21:16 - 001032744 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll 2015-03-13 20:53 - 2010-11-25 15:12 - 000086016 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\AsNetlib.dll 2015-03-13 20:53 - 2010-11-25 15:12 - 000661504 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\aaHMLib.dll 2015-03-13 20:53 - 2010-11-25 15:12 - 000253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pngio.dll 2015-03-13 20:53 - 2010-11-25 15:12 - 000208896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\ImageHelper.dll 2015-03-13 20:56 - 2010-11-19 04:06 - 000094208 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\IccLibDll.dll 2015-03-13 20:56 - 2011-03-04 09:33 - 000053248 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\HookKey32.dll 2015-03-13 20:56 - 2009-05-21 10:14 - 000253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\pngio.dll 2011-02-19 01:10 - 2011-02-19 01:10 - 001818624 _____ () C:\Program Files (x86)\MyPhoneExplorer\IconLib.dll 2015-03-13 20:52 - 2011-02-24 10:19 - 000143360 _____ () C:\Program Files (x86)\ASUS\AI Suite II\AssistFunc.dll 2015-03-13 20:52 - 2010-06-21 15:21 - 000208896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ImageHelper.dll 2015-03-13 20:52 - 2009-08-12 20:15 - 000253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\pngio.dll 2015-03-13 20:53 - 2010-10-15 17:40 - 001031680 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Update\Update.dll 2015-03-13 20:52 - 2011-03-23 15:05 - 000964608 _____ () C:\Program Files (x86)\ASUS\AI Suite II\BarGadget\BarGadget.dll 2015-03-13 20:54 - 2011-01-19 21:23 - 001655296 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Bluetooth Go!\BluetoothGo.dll 2015-03-13 20:55 - 2010-12-01 12:33 - 001244672 _____ () C:\Program Files (x86)\ASUS\AI Suite II\MyLogo\MyLogo.dll 2015-03-13 20:56 - 2011-01-06 10:38 - 001027072 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Probe_II\ProbeII.dll 2015-03-13 20:52 - 2011-01-13 16:47 - 000881152 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\Sensor.dll 2015-03-13 20:52 - 2011-04-07 17:33 - 001607168 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor Graph\SensorGraph.dll 2015-03-13 20:52 - 2011-01-07 16:39 - 001246208 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Settings\Settings.dll 2015-03-13 20:52 - 2010-08-06 18:11 - 000850944 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Splitter\Splitter.dll 2015-03-13 20:52 - 2010-08-06 18:13 - 000886272 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TabGadget\TabGadget.dll 2015-03-13 20:51 - 2010-08-23 03:17 - 000662016 _____ () C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMLib.dll 2015-03-13 20:52 - 2010-06-21 15:21 - 000208896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\ImageHelper.dll 2006-12-14 14:11 - 2006-12-14 14:11 - 000356160 _____ () C:\Program Files (x86)\Microsoft Office\Microsoft Office Outlook SMS Add-in\mosasqm.dll 2018-08-03 20:46 - 2018-11-03 10:31 - 001072912 _____ () C:\Program Files (x86)\Microsoft Office\Root\Office16\ADDINS\UmOutlookAddin.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) AlternateDataStreams: C:\ProgramData:18E09477A156DCF9 [217] AlternateDataStreams: C:\Users\All Users:18E09477A156DCF9 [217] AlternateDataStreams: C:\ProgramData\Anwendungsdaten:18E09477A156DCF9 [217] AlternateDataStreams: C:\ProgramData\PACE:6B8B6B826B21358C [217] ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) IE trusted site: HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\localhost -> localhost ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\Control Panel\Desktop\\Wallpaper -> d:\eigene dateien\eigene bilder\sundown_1600x1200.jpg DNS Servers: 195.34.133.21 - 212.186.211.21 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Keine Datei) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt. HKLM\...\StartupApproved\StartupFolder: => "ACCU-CHEK 360 Connection Manager.lnk" HKLM\...\StartupApproved\StartupFolder: => "ACCU-CHEK Connect Geräteschnittstelle.lnk" HKLM\...\StartupApproved\Run: => "RtHDVCpl" HKLM\...\StartupApproved\Run: => "FirefaceMixTray2" HKLM\...\StartupApproved\Run: => "AthBtTray" HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0" HKLM\...\StartupApproved\Run32: => "ABBYY Screenshot Reader Retail" HKLM\...\StartupApproved\Run32: => "APSDaemon" HKLM\...\StartupApproved\Run32: => "HP Software Update" HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKLM\...\StartupApproved\Run32: => "KORG USB-MIDI Driver" HKLM\...\StartupApproved\Run32: => "QuickTime Task" HKLM\...\StartupApproved\Run32: => "UATrayIcon" HKLM\...\StartupApproved\Run32: => "UAPerfMon" HKLM\...\StartupApproved\Run32: => "JMB36X IDE Setup" HKLM\...\StartupApproved\Run32: => "Bonus.SSR.FR12" HKLM\...\StartupApproved\Run32: => "FreeStyleLibreautorunexe" HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe" HKLM\...\StartupApproved\Run32: => "KiesTrayAgent" HKLM\...\StartupApproved\Run32: => "Aimersoft Helper Compact.exe" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\StartupFolder: => "An OneNote senden.lnk" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "CCleaner Monitoring" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "Polar FlowSync" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "Remote Control Editor" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "HP Officejet Pro 8620 (NET)" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "TomTomHOME.exe" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "Lingoes" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "QMxNetworkSync" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "MP3 Skype recorder" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "MyDriveConnect.exe" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "Avanquest Message" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "HP OfficeJet Pro 8710 (NET)" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "Skype for Desktop" ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [{7303F5EC-8D09-4809-9938-EC07065036DC}] => (Allow) C:\Program Files\HP\HP OfficeJet Pro 8710\Bin\HPNetworkCommunicatorCom.exe FirewallRules: [{70EE7A19-67A6-4F1E-A6F7-C67C32FD8740}] => (Allow) C:\Program Files\HP\HP OfficeJet Pro 8710\Bin\DeviceSetup.exe FirewallRules: [{FD882F9A-28FA-4536-B213-F147FFEA82B6}] => (Allow) C:\Program Files\HP\HP OfficeJet Pro 8710\bin\FaxPrinterUtility.exe FirewallRules: [{8E6BB16D-E2A3-41C6-A2D4-676DF42A9CA1}] => (Allow) C:\Program Files\HP\HP OfficeJet Pro 8710\bin\SendAFax.exe FirewallRules: [{64D441EB-973D-4DF3-A878-CCDA84E5E186}] => (Allow) C:\Program Files\HP\HP OfficeJet Pro 8710\bin\DigitalWizards.exe FirewallRules: [{ADAEAD1F-A83F-4036-ACA9-3216BD4E5F06}] => (Allow) C:\Program Files\HP\HP OfficeJet Pro 8710\bin\FaxApplications.exe FirewallRules: [{CDC3199E-5C51-4D56-A311-16272D278151}] => (Allow) C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe FirewallRules: [{C3E49B51-95F8-4EA8-85BA-F3447A5BACB2}] => (Allow) C:\Program Files\Steinberg\Cubase 9\Cubase9.exe FirewallRules: [{9A08BF1C-763D-4C28-967A-6AC0CBC3F28B}] => (Allow) LPort=51113 FirewallRules: [{D9CF824E-79CF-4D24-B6F0-B3D1147540D9}] => (Allow) LPort=51112 FirewallRules: [{7EFA9ED4-36E1-4154-8984-380BB3AAA7C6}] => (Allow) LPort=51111 FirewallRules: [{0264E8DF-1F97-4E08-989C-B64EFABC4FFC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{F9B97853-8B8A-4A3A-8A31-8FD61A62322F}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{C92BFD48-0B01-4F73-ADAE-50D0DB9CB3F6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{A8655947-7AFA-4699-B28D-14A97DEB9057}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{B32E25B0-C09A-4DD5-9D38-D754B5DC751E}] => (Allow) C:\Program Files (x86)\MAGIX\Video deluxe 2014 Plus\videodeluxe.exe FirewallRules: [{C78DC9EA-89AA-4BBA-829E-365E55459E06}] => (Allow) C:\Program Files (x86)\MAGIX\Video deluxe 2014 Plus\videodeluxe.exe FirewallRules: [UDP Query User{1E972E70-F2C9-4F4D-977E-08699D94B9BB}C:\windows\system32\totalmixfx.exe] => (Allow) C:\windows\system32\totalmixfx.exe FirewallRules: [TCP Query User{552F0C7C-E917-4841-913D-66E32BEDD77A}C:\windows\system32\totalmixfx.exe] => (Allow) C:\windows\system32\totalmixfx.exe FirewallRules: [{3F15D328-3C39-4476-9B38-1B1D725CB395}] => (Allow) LPort=5354 FirewallRules: [{29BFCB03-22DA-41B2-A7C8-5701B07F4D62}] => (Allow) LPort=5354 FirewallRules: [{4D8F6C56-C7EF-4A23-BDC5-A1783E24281D}] => (Allow) LPort=5354 FirewallRules: [{7E339C72-2CF7-4A09-B846-98FD58E5624D}] => (Allow) LPort=5354 FirewallRules: [{DE9B01A8-02D2-47C9-9D78-09CD4D7763D6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{1FB62AD6-B79C-4CC4-B3F0-7AD3B63F6B89}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{E6A16672-A4AE-452D-B3B1-AD262D42D8D0}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\VersionCheck\VersionCheck.exe FirewallRules: [{4ADE219C-5F1F-4170-99AB-C13AA4194B2D}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\VersionCheck\VersionCheck.exe FirewallRules: [{B18EF35E-C635-4CC9-AD47-4A2FA8120FE7}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe FirewallRules: [{FA83A48F-9E3F-4495-B807-9597733D1FCC}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe FirewallRules: [{03E82E18-5060-497A-B592-CFFA5A0F6499}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\CinergyDvr.exe FirewallRules: [{4F6CD7E2-366F-47BC-9ED2-FF48122F16A3}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\CinergyDvr.exe FirewallRules: [{B40000F1-10A2-4C00-A68D-AF567298F992}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\InstTool.exe FirewallRules: [{AB45B824-4CE1-4C55-83BA-23CFB0FE7C50}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\InstTool.exe FirewallRules: [{C9E37327-C8E9-48DE-9D59-6CF3B5F71DA0}] => (Allow) C:\bb\BBHelper\BandinaBoxServer.exe FirewallRules: [{5A4D2A7D-9946-40F9-BFF5-8787AB7904E3}] => (Allow) C:\bb\BBHelper\BandinaBoxServer.exe FirewallRules: [{6C42674C-D284-4862-88F9-09BB3E8FC992}] => (Allow) K:\bb\BBHelper\BandinaBoxServer.exe FirewallRules: [{BADA8387-F25D-4A60-997C-306679A8D832}] => (Allow) K:\bb\BBHelper\BandinaBoxServer.exe FirewallRules: [{F56C41B0-6B95-49C5-ACCE-5760DE58D01B}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe FirewallRules: [{8DB2DCA6-15E3-4891-BEF1-ED85AED9F9CB}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe FirewallRules: [{064D86F7-81ED-457B-A653-36051CC7B82D}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe FirewallRules: [{067BFFC7-E3B1-4237-803B-5B4869CA257A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{562DCCB2-1137-4624-A65D-80FFBA5FFCC6}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{16D2D2AD-D55E-4475-8306-CDEDDEF36152}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{05E1372B-2F7F-4D1F-A967-413E452B0837}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{D0A590BC-6C56-45C2-8BAA-AA5D8C6ADD81}] => (Allow) C:\Program Files\Steinberg\Cubase 7\Cubase7.exe FirewallRules: [{6BADB1B9-0141-48A6-94A6-57F357972DB3}] => (Allow) LPort=51113 FirewallRules: [{18110699-223B-4ACB-BBC6-7075B347C56F}] => (Allow) LPort=51112 FirewallRules: [{173C70E6-82EF-4F31-85B1-405D9C95E54C}] => (Allow) LPort=51111 FirewallRules: [{9E204933-332A-4B9C-ADD9-08CF714903E1}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe FirewallRules: [{DCFA8255-84B4-4FE9-9009-3B44249BA1B7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{925EBB46-9100-40F9-90F8-D93BA11B9B67}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe FirewallRules: [{6DC070BE-2406-4853-83F6-AF47C23F0979}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe FirewallRules: [TCP Query User{F9E5FC7F-9FD6-4758-87F4-0D5E97D4E44B}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe FirewallRules: [UDP Query User{AACDB14A-AF40-4939-BC73-616718F2AA2A}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe FirewallRules: [{7C9E1D46-836D-45BB-B90E-16557887A984}] => (Block) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe FirewallRules: [{16F0B7D0-909D-460B-A4E1-6D96CA184495}] => (Block) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe FirewallRules: [{3CC67F23-D6DB-4583-87E8-195592B26C51}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\CinergyDvr.exe FirewallRules: [{06B98CF7-3E05-4389-86D5-333A97E41315}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\CinergyDvr.exe FirewallRules: [{F6D411BE-8106-498A-9E07-68B59E3D1597}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe FirewallRules: [{BE870776-F538-4654-BF13-74CAE0C8464D}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe FirewallRules: [{9F24E919-135E-4ABA-9DFD-8F9D6632368F}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\InstTool.exe FirewallRules: [{E49D89A4-769D-48B3-96C6-AFB07ADF5C22}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\InstTool.exe FirewallRules: [{535DFBD5-08EB-4925-B1F3-796EB60004C7}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\FaxApplications.exe FirewallRules: [{752AE614-88DE-4455-8DEC-B0742EF7C1D3}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\DigitalWizards.exe FirewallRules: [{D66348BC-017C-4EB2-AD0F-1A2F59E9A8B8}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\SendAFax.exe FirewallRules: [{7D061DA3-58E7-4536-9BB0-C75F6CAE034A}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\Bin\DeviceSetup.exe FirewallRules: [{4D2EA4C8-4CEE-4E08-BDD0-8349C1B26B5B}] => (Allow) LPort=5357 FirewallRules: [{46A4F905-B700-4497-972A-A4A30503EB11}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\Bin\HPNetworkCommunicatorCom.exe FirewallRules: [{D3D3FF1B-2DBB-4E60-9113-ABA0CA92ABE7}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe FirewallRules: [{0D3D800F-3F78-4D5F-A200-50E1627ADCF5}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe FirewallRules: [{BD5CA351-D95C-462C-8B04-13DFC3A335B1}] => (Allow) C:\Program Files\Common Files\MAGIX Services\MxCloudSync\MxCloudSync.exe FirewallRules: [{ADF11896-0695-44F6-9309-F67975367D70}] => (Allow) C:\Program Files\Common Files\MAGIX Services\QMxNetworkSync\QMxNetworkSync.exe FirewallRules: [{1E713B5C-0868-4B8C-B94E-9A8F000DD16C}] => (Allow) C:\Program Files (x86)\MAGIX\Music Maker\25\MusicMaker.exe FirewallRules: [{3ECDD1E9-13E1-4C2B-8B81-B22298E9D724}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe FirewallRules: [{75C9F332-0AF6-454B-9D0F-ADAF365FBAAE}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe FirewallRules: [{F9E28840-969D-46E3-BC38-77416BD3014E}] => (Allow) C:\Program Files (x86)\Multilizer\MultilizerPDFTranslator\PDFTRanslationWizard.exe FirewallRules: [{98CC572F-8FA9-4680-92F7-AC1690E11BD0}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe FirewallRules: [{DEBC383F-2349-4157-B5D1-E14792FBD1C3}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe FirewallRules: [{C490FAC7-6FE5-4154-BCF7-AC0E90DB9856}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe FirewallRules: [{6C34499C-81DD-4986-86F5-39BEDAE26562}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{7159A9C9-1028-4D5E-9957-94011BEDB68D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{01AF5A12-BE3C-4EDA-A44D-5A2157466ADA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{1F8026A4-95B5-4EBF-8238-658E0132758C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{F44A98BC-DD87-40DF-9C64-82B9FC1DBEF9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{2942D0D4-B8FA-4538-A0CF-18F0663CD42A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{05C8E5C7-A14D-43EE-AD10-5FD007CDD6B2}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite Titanium.SP2\RpcAgentSrv.exe FirewallRules: [{AFD9D7C7-30F9-4BAA-AD80-F4B93F552D70}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite Titanium.SP2\WNt600x64\RpcSandraSrv.exe FirewallRules: [{18469DE5-6A36-4CB5-BAF2-287D3B6E5EE7}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Wiederherstellungspunkte ========================= 17-11-2018 09:00:07 Geplanter Prüfpunkt ==================== Fehlerhafte Geräte im Gerätemanager ============= Name: Unbekanntes USB-Gerät (Fehler beim Anfordern einer Gerätebeschreibung.) Description: Unbekanntes USB-Gerät (Fehler beim Anfordern einer Gerätebeschreibung.) Class Guid: {36fc9e60-c465-11cf-8056-444553540000} Manufacturer: (Standard-USB-Hostcontroller) Service: Problem: : Windows has stopped this device because it has reported problems. (Code 43) Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (11/17/2018 06:46:23 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (11/17/2018 02:33:02 AM) (Source: Outlook) (EventID: 35) (User: ) Description: Fehler beim Bestimmen, ob sich der Speicher im Durchforstungsbereich befindet (Fehler=0x8007045b). Error: (11/17/2018 02:33:02 AM) (Source: Outlook) (EventID: 34) (User: ) Description: Fehler beim Abrufen des Durchforstungsbereichs-Managers. Fehler=0x8007045b. Error: (11/17/2018 02:12:50 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: Videodeluxe.exe, Version: 12.0.0.32, Zeitstempel: 0x50290212 Name des fehlerhaften Moduls: mfc90.dll, Version: 9.0.30729.6161, Zeitstempel: 0x4dad06e0 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0020cab2 ID des fehlerhaften Prozesses: 0x676c Startzeit der fehlerhaften Anwendung: 0x01d47e1165082144 Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\MAGIX\Video deluxe 2013 Plus\Videodeluxe.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\WinSxS\x86_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_4bf7e3e2bf9ada4c\mfc90.dll Berichtskennung: bd2e4a6d-307f-4130-8124-fb444e5f21dd Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (11/17/2018 02:12:44 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: Videodeluxe.exe, Version: 12.0.0.32, Zeitstempel: 0x50290212 Name des fehlerhaften Moduls: mfc90.dll, Version: 9.0.30729.6161, Zeitstempel: 0x4dad06e0 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0020c397 ID des fehlerhaften Prozesses: 0x676c Startzeit der fehlerhaften Anwendung: 0x01d47e1165082144 Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\MAGIX\Video deluxe 2013 Plus\Videodeluxe.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\WinSxS\x86_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_4bf7e3e2bf9ada4c\mfc90.dll Berichtskennung: e3c188fa-919d-4507-899b-a1ec086ad94b Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (11/16/2018 06:46:22 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (11/15/2018 06:46:22 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (11/14/2018 08:02:20 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm bbw.exe, Version 2012.0.0.349 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 7adc Startzeit: 01d47c41f8e35fa7 Beendigungszeit: 4294967295 Anwendungspfad: C:\bb\bbw.exe Berichts-ID: 91efc87d-60a6-4f36-adca-823e7c06058d Vollständiger Name des fehlerhaften Pakets: Auf das fehlerhafte Paket bezogene Anwendungs-ID: Systemfehler: ============= Error: (11/17/2018 11:58:28 PM) (Source: DCOM) (EventID: 10016) (User: RS-OFFICE) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "RS-Office\xxxxx" (SID: S-1-5-21-3837192191-2688150623-3177619377-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {8BC3F05E-D86B-11D0-A075-00C04FB68820} und der APPID {8BC3F05E-D86B-11D0-A075-00C04FB68820} im Anwendungscontainer "Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (11/17/2018 05:57:58 PM) (Source: DCOM) (EventID: 10016) (User: RS-OFFICE) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "RS-Office\xxxxx" (SID: S-1-5-21-3837192191-2688150623-3177619377-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {8BC3F05E-D86B-11D0-A075-00C04FB68820} und der APPID {8BC3F05E-D86B-11D0-A075-00C04FB68820} im Anwendungscontainer "Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (11/17/2018 01:44:46 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Start" für die COM-Serveranwendung mit der CLSID Windows.SecurityCenter.WscBrokerManager und der APPID Nicht verfügbar im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (11/17/2018 01:42:13 PM) (Source: DCOM) (EventID: 10016) (User: RS-OFFICE) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "RS-Office\xxxxx" (SID: S-1-5-21-3837192191-2688150623-3177619377-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Start" für die COM-Serveranwendung mit der CLSID {7022A3B3-D004-4F52-AF11-E9E987FEE25F} und der APPID {ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (11/17/2018 01:42:11 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} und der APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (11/17/2018 01:42:11 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} und der APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (11/17/2018 01:42:11 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} und der APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (11/17/2018 01:41:11 PM) (Source: DCOM) (EventID: 10010) (User: RS-OFFICE) Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. CodeIntegrity: =================================== Date: 2018-11-17 08:38:01.293 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements. Date: 2018-11-17 08:38:01.274 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements. Date: 2018-11-17 08:38:01.247 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements. Date: 2018-11-17 08:38:01.158 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements. Date: 2018-11-17 08:38:01.147 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements. Date: 2018-11-17 08:38:01.139 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements. Date: 2018-11-17 08:38:00.366 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements. Date: 2018-11-17 08:38:00.235 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements. ==================== Speicherinformationen =========================== Prozessor: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz Prozentuale Nutzung des RAM: 22% Installierter physikalischer RAM: 32735.13 MB Verfügbarer physikalischer RAM: 25219.24 MB Summe virtueller Speicher: 65503.13 MB Verfügbarer virtueller Speicher: 56364.71 MB ==================== Laufwerke ================================ Drive c: () (Fixed) (Total:232.35 GB) (Free:30.39 GB) NTFS Drive d: (Daten) (Fixed) (Total:1863.01 GB) (Free:220.45 GB) NTFS Drive e: (Audio) (Fixed) (Total:1863.01 GB) (Free:431.78 GB) NTFS Drive f: (DVD-Projekt) (CDROM) (Total:3.74 GB) (Free:0 GB) UDF Drive h: (Elements) (Fixed) (Total:1862.98 GB) (Free:83.09 GB) NTFS \\?\Volume{48ea0bbe-c759-11e4-b910-806e6f6e6963}\ (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS \\?\Volume{ca6d39e7-0000-0000-0000-801c3a000000}\ () (Fixed) (Total:0.44 GB) (Free:0.04 GB) NTFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: DBDA6ECA) Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: CE1927CF) Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (MBR Code: Windows 7/8/10) (Size: 232.9 GB) (Disk ID: CA6D39E7) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=232.3 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=450 MB) - (Type=27) ======================================================== Disk: 3 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: 7EFFBCD6) Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS) ==================== Ende von Addition.txt ============================ Code:
ATTFilter # ------------------------------- # Malwarebytes AdwCleaner 7.2.4.0 # ------------------------------- # Build: 09-25-2018 # Database: 2018-11-14.2 (Cloud) # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Scan # ------------------------------- # Start: 11-18-2018 # Duration: 00:00:12 # OS: Windows 10 Pro # Scanned: 32073 # Detected: 0 ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** No malicious folders found. ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** No malicious tasks found. ***** [ Registry ] ***** No malicious registry entries found. ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries found. ***** [ Chromium URLs ] ***** No malicious Chromium URLs found. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries found. ***** [ Firefox URLs ] ***** No malicious Firefox URLs found. ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ########## |
18.11.2018, 04:13 | #5 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | Google - Werbe(Fake-)Links legen sich über Suchergebnisse (Firefox und Chrome)Zitat:
Gib Bescheid wenn das erledigt ist.
__________________ Logfiles bitte immer in CODE-Tags posten |
18.11.2018, 04:30 | #6 |
| What instead? Hey, noch wach? Danke für die prompte Rückmeldung... Wenn Kaspersky nicht benötigt wird, welche Windows 10 - Bordmittel muss ich dann denn wie aktivieren? Bin nicht sicher, ob die der Techniker bei der Installation von Kaspersky nicht deaktiviert hat... Nur zur Sicherheit... checken ob sie aktiv sind... ;-) Thxs a lot, cuuu... |
18.11.2018, 04:36 | #7 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Google - Werbe(Fake-)Links legen sich über Suchergebnisse (Firefox und Chrome) Bist du dir sicher, dass wir diesen Check bei mir machen sollten?
__________________ Logfiles bitte immer in CODE-Tags posten |
18.11.2018, 04:43 | #8 |
| ??? Versteh ich jetzt nicht... Ob wir den Check bei Dir machen sollten? Ich wollt's eigentlich auf meinem System überprüfen... Oder hab ich die Pointe nicht verstanden... |
18.11.2018, 04:44 | #9 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Google - Werbe(Fake-)Links legen sich über Suchergebnisse (Firefox und Chrome) Ja vllt solltest mir helfen.
__________________ Logfiles bitte immer in CODE-Tags posten |
18.11.2018, 11:18 | #10 |
| O.k. Damit weiß ich immer noch nicht, wie ich sicherstelle, dass die Bordmittel von Windows 10 aktiviert sind, bevor ich Kaspersky abstelle und somit keinen Schutz mehr habe... |
19.11.2018, 09:14 | #11 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Google - Werbe(Fake-)Links legen sich über Suchergebnisse (Firefox und Chrome) Deinstallier diesen Unsinn jetzt endlich bitte!
__________________ Logfiles bitte immer in CODE-Tags posten |
19.11.2018, 16:00 | #12 |
/// TB-Senior | Google - Werbe(Fake-)Links legen sich über Suchergebnisse (Firefox und Chrome) *kurz einmisch* Der Virsnschutz vom Windows Defender geht automatisch aus, wenn ein anderes AV installiert wird, und nach dem Deinstallieren automatisch wieder an. Falls das aus irgendwelchen Gründen nicht der Fall sein sollte, sieht Cosinus das sofort in den nächsten Logs, ob der Defender läuft oder nicht.
__________________ Zum Schutz vor Trojanerinnen und Femaleware ist bei einem aktuellen Windows 10 die Windows-Defenderin ausreichend. |
20.11.2018, 00:00 | #13 |
| Google - Werbe(Fake-)Links legen sich über Suchergebnisse (Firefox und Chrome) Danke Fragerin, danke Cosinus. Sodale, sollte alles gelöscht sein. Hier die neuen Logs: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 15.11.2018 durchgeführt von xxxxx (Administrator) auf RS-OFFICE (19-11-2018 23:56:33) Gestartet von C:\Users\xxxxx\Downloads Geladene Profile: xxxxx (Verfügbare Profile: xxxxx & DefaultAppPool) Platform: Windows 10 Pro Version 1803 17134.407 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe (ABBYY Production LLC) C:\Program Files (x86)\ABBYY FineReader 12\NetworkLicenseServer.exe (ABBYY) C:\Program Files (x86)\ABBYY Screenshot Reader\NetworkLicenseServer.exe (ALL-INKL.COM) C:\Program Files\ALL-INKL WebDisk\WebdiskService.exe (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe () C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe () C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (DTS) C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe () C:\Program Files (x86)\FreeStyle Libre\MAS.FreeStyleLibre.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (Microsoft Corporation) C:\Windows\System32\mqsvc.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe (DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe (Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.4.3.236\WsAppService.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\SkypeApp.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.10314.31700.1000_x64__8wekyb3d8bbwe\Office16\OfficeHubTaskHost.exe () C:\Program Files\WindowsApps\AudibleInc.AudibleforWindowsPhone_10.5.49.0_x64__xns73kv1ymhp2\AudibleRT.WindowsPhone.exe () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\Video.UI.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (RME) C:\Windows\System32\hdsp32.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe (F.J. Wechselberger) C:\Program Files (x86)\MyPhoneExplorer\MyPhoneExplorer.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe (shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe (Contour Design, Inc.) C:\Program Files (x86)\Contour Shuttle\ShuttleHelper.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Contour Design, Inc.) C:\Program Files (x86)\Contour Shuttle\ShuttleEngine.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe (HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe (HP Inc.) C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe (Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Farbar) C:\Users\xxxxx\Downloads\FRST64(2).exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation) HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-03-13] (Atheros Commnucations) HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2670056 2018-09-10] (Adobe Systems, Incorporated) HKLM\...\Run: [HDSPTray1] => C:\WINDOWS\system32\hdsp32.exe [672992 2016-07-19] (RME) HKLM\...\Run: [FirefaceMixTray2] => C:\WINDOWS\system32\TotalMixFX.exe [23923416 2016-07-19] (RME) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9228800 2017-06-29] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1489920 2017-06-29] (Realtek Semiconductor) HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [43632 2010-01-19] () HKLM-x32\...\Run: [ASUS ShellProcess Execute] => C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe [252544 2010-11-25] (ASUSTeK Computer Inc.) HKLM-x32\...\Run: [FreePDF Assistant] => C:\Program Files (x86)\FreePDF_XP\fpassist.exe [373760 2014-03-18] (shbox.de) HKLM-x32\...\Run: [UATrayIcon] => C:\Program Files (x86)\Universal Audio\Powered Plugins\UATrayIcon.exe [1484800 2015-02-25] (Universal Audio, Inc.) HKLM-x32\...\Run: [UAPerfMon] => C:\Program Files (x86)\Universal Audio\Powered Plugins\UADPerfMon.exe [3822080 2015-02-25] () HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [ABBYY Screenshot Reader Retail] => C:\Program Files (x86)\ABBYY Screenshot Reader\ScreenShotReader.exe [959752 2009-10-27] (ABBYY) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) HKLM-x32\...\Run: [KORG USB-MIDI Driver] => C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe [394088 2015-01-15] (KORG Inc.) HKLM-x32\...\Run: [Bonus.SSR.FR12] => C:\Program Files (x86)\ABBYY FineReader 12\Bonus.ScreenshotReader.exe [1472312 2014-01-30] (ABBYY Production LLC.) HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation) HKLM-x32\...\Run: [Contour Shuttle Device Helper] => C:\Program Files (x86)\Contour Shuttle\ShuttleHelper.exe [126464 2015-09-23] (Contour Design, Inc.) HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [318112 2017-11-15] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [Aimersoft Helper Compact.exe] => C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe [2138272 2016-10-08] (AimerSoft) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [432776 2018-06-28] (Geek Software GmbH) HKLM-x32\...\Run: [FreeStyleLibreautorunexe] => C:\Program Files (x86)\FreeStyle Libre\MASLaunchClient.FreeStyleLibre.exe [4348928 2018-02-07] () HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Beschränkung <==== ACHTUNG HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation) HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [Remote Control Editor] => C:\Program Files (x86)\Common Files\TERRATEC\Remote\TTTvRc.exe [1844296 2011-11-09] (Elgato Systems) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [Polar FlowSync] => C:\Program Files (x86)\Polar\Polar FlowSync\FlowSync.exe [1191936 2015-11-19] (Polar Electro Oy) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [TomTomHOME.exe] => C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [254840 2018-07-04] (TomTom) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [MyPhoneExplorer] => "C:\Program Files (x86)\MyPhoneExplorer\MyPhoneExplorer.exe" autorun HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [HP Officejet Pro 8620 (NET)] => C:\Program Files\HP\HP Officejet Pro 8620\Bin\ScanToPCActivationApp.exe [3487240 2014-07-21] (Hewlett-Packard Development Company, LP) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [MP3 Skype recorder] => C:\Users\xxxxx\AppData\Local\MP3 Skype recorder\MP3SkypeRecorder.exe [2525312 2016-12-13] (Domit UK LTD) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [Lingoes] => C:\Program Files\Lingoes\Translator2\Lingoes64.exe [3422208 2014-08-16] (Lingoes Project) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [2052328 2018-07-24] (TomTom) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [QMxNetworkSync] => C:\Program Files\Common Files\MAGIX Services\QMxNetworkSync\QMxNetworkSync.exe [355584 2017-08-31] (MAGIX) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [Avanquest Message] => C:\Users\xxxxx\AppData\Local\Avanquest\Avanquest Message\AQNotif.exe [497664 2018-06-13] (Avanquest Software) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [HP OfficeJet Pro 8710 (NET)] => C:\Program Files\HP\HP OfficeJet Pro 8710\Bin\ScanToPCActivationApp.exe [3770504 2018-04-06] (HP Inc.) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [49803328 2018-09-10] (Skype Technologies S.A.) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Policies\Explorer: [NoSecurityTab] 1 HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\MountPoints2: {f28af592-9374-11e8-b5ee-002683337584} - "K:\Setup.exe" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\MountPoints2: {f28af5aa-9374-11e8-b5ee-002683337584} - "L:\InsertOtherCD.exe" Startup: C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2018-09-02] ShortcutTarget: An OneNote senden.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation) GroupPolicy: Beschränkung ? <==== ACHTUNG CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21 Tcpip\..\Interfaces\{74c993ea-6b72-499d-8a38-200fe582abb5}: [DhcpNameServer] 195.34.133.21 212.186.211.21 Internet Explorer: ================== HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/ SearchScopes: HKU\S-1-5-21-3837192191-2688150623-3177619377-1000 -> DefaultScope {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = hxxps://at.search.yahoo.com/search?fr=vmn&type=vmn__webcompa__1_0__ya__ch_WCYID10099_swoc_campaign_150520__yaie&p={searchTerms} SearchScopes: HKU\S-1-5-21-3837192191-2688150623-3177619377-1000 -> {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = hxxps://at.search.yahoo.com/search?fr=vmn&type=vmn__webcompa__1_0__ya__ch_WCYID10099_swoc_campaign_150520__yaie&p={searchTerms} BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-10-22] (Microsoft Corporation) BHO: Kein Name -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> Keine Datei BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-03-13] (Atheros Commnucations) Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\ThcDeskBand.dll [2011-06-24] (TerraTec Electronic GmbH) Toolbar: HKU\S-1-5-21-3837192191-2688150623-3177619377-1000 -> Kein Name - {C500C267-63BF-451F-8797-4D720C9A2ED9} - Keine Datei Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-10-04] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-10-04] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-10-04] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-10-04] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\xxxxx\AppData\Roaming\TomTom\HOME\Profiles\ndosaxwi.default [2018-09-08] FF Extension: (Emulator) - C:\Users\xxxxx\AppData\Roaming\TomTom\HOME\Profiles\ndosaxwi.default\Extensions\Navcore.8.351.9982@tomtom.com [2016-09-12] [Legacy] [ist nicht signiert] FF Extension: (Map status indicator) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [2018-09-08] [Legacy] [ist nicht signiert] FF ProfilePath: C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973 [2018-11-19] FF Homepage: Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973 -> hxxp://www.google.at FF NewTab: Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973 -> hxxp://www.google.at FF Session Restore: Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973 -> ist aktiviert. FF Extension: (Classic Theme Restorer) - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973\Extensions\ClassicThemeRestorer@ArisT2Noia4dev.xpi [2017-11-17] [Legacy] FF Extension: (Babylon Translation Activation) - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973\Extensions\ocr@babylon.com.xpi [2016-11-06] [Legacy] FF Extension: (Avast SafePrice) - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973\Extensions\sp@avast.com.xpi [2018-06-20] FF Extension: (Google Translator for Firefox) - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973\Extensions\translator@zoli.bod.xpi [2018-10-14] FF Extension: (Avast Online Security) - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973\Extensions\wrc@avast.com.xpi [2018-10-09] FF Extension: (Firefox Protection) - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973\Extensions\{ab10d63e-3096-4492-ab0e-5edcf4baf988} [2018-11-17] [ist nicht signiert] FF Extension: (Video DownloadHelper) - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2018-09-05] FF Extension: (URL der Filterliste) - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2018-11-14] FF Extension: (DownThemAll!) - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2018-07-25] [Legacy] FF Extension: (Firefox Monitor) - C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\hvxxfeez.default-1432634926973\features\{8cb9981c-7624-4dc8-8c4c-02926fe5de72}\fxmonitor@mozilla.org.xpi [2018-11-17] FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_31_0_0_148.dll [2018-11-13] () FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2018-01-24] (Tracker Software Products (Canada) Ltd.) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2018-01-24] (Tracker Software Products (Canada) Ltd.) FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2018-08-10] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2018-08-10] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.2.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2018-08-10] (VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2018-08-10] (VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2018-08-10] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_31_0_0_148.dll [2018-11-13] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1229199.dll [2017-03-31] (Adobe Systems, Inc.) FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-01-24] (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Keine Datei] FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Keine Datei] FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-09-15] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-09-06] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-09-06] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.) FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-01-24] (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-09-20] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-3837192191-2688150623-3177619377-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-01-24] (Tracker Software Products (Canada) Ltd.) FF Plugin HKU\S-1-5-21-3837192191-2688150623-3177619377-1000: @zoom.us/ZoomVideoPlugin -> C:\Users\xxxxx\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2018-04-02] (Zoom Video Communications, Inc.) Chrome: ======= CHR DefaultProfile: Default CHR StartupUrls: Default -> "hxxp://www.google.de/" CHR Profile: C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default [2018-11-19] CHR Extension: (Slides) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-02-11] CHR Extension: (Kaspersky Protection) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\amkpcclbbgegoafihnpgomddadjhcadd [2018-11-17] CHR Extension: (Docs) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-02-11] CHR Extension: (Google Drive) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-02-11] CHR Extension: (YouTube) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-02-11] CHR Extension: (Google Search) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-29] CHR Extension: (Sheets) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-02-11] CHR Extension: (Google Docs Offline) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-10-17] CHR Extension: (Chrome Web Store Payments) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-05-06] CHR Extension: (Gmail) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-29] CHR Extension: (Chrome Media Router) - C:\Users\xxxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-11-17] ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 ABBYY.Licensing.FineReader.Professional.12.0; C:\Program Files (x86)\ABBYY FineReader 12\NetworkLicenseServer.exe [925904 2014-01-23] (ABBYY Production LLC) R2 ABBYY.Licensing.FineReader.ScreenshotReader.9.0; C:\Program Files (x86)\ABBYY Screenshot Reader\NetworkLicenseServer.exe [759048 2009-05-15] (ABBYY) R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2910696 2018-09-10] (Adobe Systems, Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2704872 2018-09-10] (Adobe Systems, Incorporated) R2 ALL-INKL.COM WebDisk; C:\Program Files\ALL-INKL WebDisk\WebdiskService.exe [100352 2015-03-04] (ALL-INKL.COM) [Datei ist nicht signiert] R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe [918144 2010-11-03] () R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe [915584 2010-12-02] () R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] () R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9669920 2018-11-02] (Microsoft Corporation) R2 DTSAudioService; C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe [218760 2017-06-29] (DTS) R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [Datei ist nicht signiert] S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [Datei ist nicht signiert] R2 FreeStyleLibre MAS Server; C:\Program Files (x86)\FreeStyle Libre\MAS.FreeStyleLibre.exe [4538368 2018-02-07] () [Datei ist nicht signiert] R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [333688 2018-06-13] (HP Inc.) R2 HPTouchpointAnalyticsService; C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe [332216 2017-11-22] (HP Inc.) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Datei ist nicht signiert] R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764456 2018-07-19] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764456 2018-07-19] (NVIDIA Corporation) R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [432776 2018-06-28] (Geek Software GmbH) S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite Titanium.SP2\RpcAgentSrv.exe [136192 2018-09-25] (SiSoftware) [Datei ist nicht signiert] S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4737448 2018-07-15] (Microsoft Corporation) S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] () R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (DEVGURU Co., LTD.) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10351856 2016-12-15] (TeamViewer GmbH) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4451616 2018-04-12] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [107136 2018-09-21] (Microsoft Corporation) R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.236\WsAppService.exe [495840 2018-01-26] (Wondershare) R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r R2 PaceLicenseDServices; "C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe" -u https://activation.paceap.com/InitiateActivation [X] S3 WsDrvInst; C:\Program Files (x86)\Aimersoft\Aimersoft iMusic\DriverInstall.exe [X] ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] () R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] () S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2017-01-16] (Samsung Electronics Co., Ltd.) R3 hdsp; C:\WINDOWS\system32\drivers\hdsp_64.sys [83456 2016-02-22] (RME) R3 iLokDrvr; C:\WINDOWS\System32\drivers\iLokDrvr.sys [33544 2018-07-11] () R3 KORGUMDS; C:\WINDOWS\System32\Drivers\KORGUM64.SYS [34128 2015-01-15] (KORG INC.) R3 mlkumidi; C:\WINDOWS\system32\drivers\mlkumidi.sys [55856 2014-08-30] (MusicLab, Inc.) R2 npf; C:\WINDOWS\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_amd64_8e4f37220e99138f\nvlddmkm.sys [17213824 2018-09-25] (NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30656 2018-07-12] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [69544 2018-06-08] (NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [65792 2018-04-24] (NVIDIA Corporation) R3 PowerCore; C:\WINDOWS\System32\drivers\pcore.sys [325840 2013-11-08] (TC Electronic A/S) S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite Titanium.SP2\WNt600x64\Sandra.sys [23112 2009-08-07] (SiSoftware) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2017-01-16] (Samsung Electronics Co., Ltd.) R3 synusb64; C:\WINDOWS\System32\drivers\synusb64.sys [30352 2011-12-14] (Steinberg Media Technologies GmbH) R3 UAD2Pcie; C:\WINDOWS\System32\drivers\UAD2Pcie.sys [48640 2015-02-25] (Universal Audio Inc.) R3 UAD2System; C:\WINDOWS\System32\drivers\UAD2System.sys [94208 2015-02-25] (Universal Audio Inc.) S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [22016 2018-04-12] (Microsoft Corporation) S3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [200832 2018-01-15] (Oracle Corporation) R0 vsock; C:\WINDOWS\System32\drivers\vsock.sys [76480 2015-01-07] (VMware, Inc.) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44616 2018-04-12] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [331680 2018-04-12] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [44032 2018-04-12] (Microsoft Corporation) S3 WsAudio_Device; C:\WINDOWS\system32\drivers\VirtualAudio.sys [48424 2018-01-19] (Wondershare) U3 idsvc; kein ImagePath ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2018-11-19 23:56 - 2018-11-19 23:56 - 002416128 _____ (Farbar) C:\Users\xxxxx\Downloads\FRST64(2).exe 2018-11-19 01:31 - 2018-11-19 01:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools 2018-11-18 03:52 - 2018-11-18 03:52 - 007592144 _____ (Malwarebytes) C:\Users\xxxxx\Downloads\adwcleaner_7.2.4.0.exe 2018-11-18 03:49 - 2018-11-18 03:51 - 000116942 _____ C:\Users\xxxxx\Downloads\Addition.txt 2018-11-18 03:48 - 2018-11-19 23:56 - 000032624 _____ C:\Users\xxxxx\Downloads\FRST.txt 2018-11-18 03:48 - 2018-11-18 03:48 - 002416128 _____ (Farbar) C:\Users\xxxxx\Downloads\FRST64(1).exe 2018-11-17 12:45 - 2018-11-18 03:51 - 000116942 _____ C:\Users\xxxxx\Desktop\Addition.txt 2018-11-17 12:44 - 2018-11-19 23:56 - 000000000 ____D C:\FRST 2018-11-17 12:44 - 2018-11-18 03:51 - 000097598 _____ C:\Users\xxxxx\Desktop\FRST.txt 2018-11-17 12:43 - 2018-11-17 12:43 - 002416128 _____ (Farbar) C:\Users\xxxxx\Downloads\FRST64.exe 2018-11-17 03:31 - 2018-11-17 03:31 - 005937968 _____ (EnigmaSoft Limited) C:\Users\xxxxx\Downloads\sh-remover.exe 2018-11-17 02:46 - 2018-11-17 13:19 - 000006769 _____ C:\Users\xxxxx\Desktop\AdwCleaner[C00].txt 2018-11-17 02:45 - 2018-11-18 03:54 - 000001249 _____ C:\Users\xxxxx\Desktop\AdwCleaner[S00].txt 2018-11-17 02:45 - 2018-11-17 02:46 - 000000000 ____D C:\AdwCleaner 2018-11-17 02:42 - 2018-11-17 02:42 - 007592144 _____ (Malwarebytes) C:\Users\xxxxx\Desktop\adwcleaner_7.2.4.0.exe 2018-11-17 02:32 - 2018-11-19 01:31 - 000002583 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk 2018-11-17 02:32 - 2018-11-19 01:31 - 000002579 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk 2018-11-17 02:32 - 2018-11-19 01:31 - 000002558 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk 2018-11-17 02:32 - 2018-11-19 01:31 - 000002533 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk 2018-11-17 02:32 - 2018-11-19 01:31 - 000002500 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk 2018-11-17 02:32 - 2018-11-19 01:31 - 000002497 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk 2018-11-17 02:32 - 2018-11-19 01:31 - 000002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk 2018-11-17 01:58 - 2018-11-17 01:58 - 004277760 _____ (MAGIX AG) C:\Users\xxxxx\Downloads\Protein.dll 2018-11-17 01:58 - 2018-11-17 01:58 - 000000000 ____D C:\Users\xxxxx\AppData\Local\WServices 2018-11-17 01:44 - 2018-11-17 01:44 - 005513216 _____ C:\Users\xxxxx\Downloads\magix-video-delux-2013-keygen_16a02ca-1246.iso 2018-11-16 21:16 - 2018-11-16 21:16 - 000000000 ____D C:\Program Files\rempl 2018-11-13 21:40 - 2018-11-01 12:46 - 002394960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL 2018-11-13 21:40 - 2018-11-01 12:27 - 000878592 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll 2018-11-13 21:40 - 2018-11-01 08:25 - 001934808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2018-11-13 21:40 - 2018-11-01 08:25 - 000413720 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2018-11-13 21:40 - 2018-11-01 05:50 - 000861712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll 2018-11-13 21:40 - 2018-11-01 05:48 - 002331480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2018-11-13 21:40 - 2018-11-01 05:48 - 001805656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2018-11-13 21:40 - 2018-11-01 05:30 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll 2018-11-13 21:39 - 2018-11-01 12:49 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe 2018-11-13 21:39 - 2018-11-01 12:45 - 004527776 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2018-11-13 21:39 - 2018-11-01 12:45 - 001617320 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2018-11-13 21:39 - 2018-11-01 12:45 - 001376672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2018-11-13 21:39 - 2018-11-01 12:32 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll 2018-11-13 21:39 - 2018-11-01 12:31 - 006602240 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2018-11-13 21:39 - 2018-11-01 12:30 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2018-11-13 21:39 - 2018-11-01 12:30 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msisip.dll 2018-11-13 21:39 - 2018-11-01 12:29 - 012710400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2018-11-13 21:39 - 2018-11-01 12:29 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll 2018-11-13 21:39 - 2018-11-01 12:28 - 004491264 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe 2018-11-13 21:39 - 2018-11-01 12:28 - 003649024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2018-11-13 21:39 - 2018-11-01 12:28 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnntfy.dll 2018-11-13 21:39 - 2018-11-01 12:27 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll 2018-11-13 21:39 - 2018-11-01 12:26 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll 2018-11-13 21:39 - 2018-11-01 12:26 - 000503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2018-11-13 21:39 - 2018-11-01 12:26 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe 2018-11-13 21:39 - 2018-11-01 12:26 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2018-11-13 21:39 - 2018-11-01 12:26 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe 2018-11-13 21:39 - 2018-11-01 12:25 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe 2018-11-13 21:39 - 2018-11-01 11:09 - 001027000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2018-11-13 21:39 - 2018-11-01 10:59 - 005669888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2018-11-13 21:39 - 2018-11-01 10:56 - 011902464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2018-11-13 21:39 - 2018-11-01 10:56 - 000226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnntfy.dll 2018-11-13 21:39 - 2018-11-01 10:56 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msisip.dll 2018-11-13 21:39 - 2018-11-01 10:54 - 003397632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe 2018-11-13 21:39 - 2018-11-01 10:54 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2018-11-13 21:39 - 2018-11-01 10:53 - 000908288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll 2018-11-13 21:39 - 2018-11-01 10:52 - 002892800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2018-11-13 21:39 - 2018-11-01 10:15 - 023861760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2018-11-13 21:39 - 2018-11-01 10:13 - 019525120 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll 2018-11-13 21:39 - 2018-11-01 08:39 - 001035256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe 2018-11-13 21:39 - 2018-11-01 08:38 - 000269336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll 2018-11-13 21:39 - 2018-11-01 08:37 - 000272408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll 2018-11-13 21:39 - 2018-11-01 08:28 - 001221432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2018-11-13 21:39 - 2018-11-01 08:28 - 001062712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2018-11-13 21:39 - 2018-11-01 08:28 - 001029944 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2018-11-13 21:39 - 2018-11-01 08:28 - 000566568 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2018-11-13 21:39 - 2018-11-01 08:28 - 000134968 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2018-11-13 21:39 - 2018-11-01 08:28 - 000076088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2018-11-13 21:39 - 2018-11-01 08:27 - 001017152 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll 2018-11-13 21:39 - 2018-11-01 08:27 - 000491200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2018-11-13 21:39 - 2018-11-01 08:26 - 007432120 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2018-11-13 21:39 - 2018-11-01 08:26 - 003291640 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2018-11-13 21:39 - 2018-11-01 08:26 - 003180080 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2018-11-13 21:39 - 2018-11-01 08:26 - 001363536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 009089848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2018-11-13 21:39 - 2018-11-01 08:25 - 007520088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 004404912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 002822456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2018-11-13 21:39 - 2018-11-01 08:25 - 002571320 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 002371296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 001784680 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 001456728 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2018-11-13 21:39 - 2018-11-01 08:25 - 001288920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 001257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2018-11-13 21:39 - 2018-11-01 08:25 - 001209888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 001190248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 001140672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2018-11-13 21:39 - 2018-11-01 08:25 - 000982592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2018-11-13 21:39 - 2018-11-01 08:25 - 000885968 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 000793080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2018-11-13 21:39 - 2018-11-01 08:25 - 000713472 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 000594224 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2018-11-13 21:39 - 2018-11-01 08:25 - 000463672 _____ (Microsoft Corporation) C:\WINDOWS\system32\coml2.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 000412984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2018-11-13 21:39 - 2018-11-01 08:25 - 000375824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys 2018-11-13 21:39 - 2018-11-01 08:25 - 000268088 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2018-11-13 21:39 - 2018-11-01 08:25 - 000261000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2018-11-13 21:39 - 2018-11-01 08:09 - 025855488 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2018-11-13 21:39 - 2018-11-01 08:03 - 003397120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2018-11-13 21:39 - 2018-11-01 08:03 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmtask.exe 2018-11-13 21:39 - 2018-11-01 08:02 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmapi.dll 2018-11-13 21:39 - 2018-11-01 08:02 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\CSystemEventsBrokerClient.dll 2018-11-13 21:39 - 2018-11-01 08:01 - 022716416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2018-11-13 21:39 - 2018-11-01 08:01 - 009084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2018-11-13 21:39 - 2018-11-01 08:01 - 007057408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2018-11-13 21:39 - 2018-11-01 08:00 - 008189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2018-11-13 21:39 - 2018-11-01 08:00 - 006031360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2018-11-13 21:39 - 2018-11-01 08:00 - 003392000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2018-11-13 21:39 - 2018-11-01 08:00 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2018-11-13 21:39 - 2018-11-01 08:00 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll 2018-11-13 21:39 - 2018-11-01 07:59 - 000322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2018-11-13 21:39 - 2018-11-01 07:59 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll 2018-11-13 21:39 - 2018-11-01 07:59 - 000192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll 2018-11-13 21:39 - 2018-11-01 07:59 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPTaskScheduler.dll 2018-11-13 21:39 - 2018-11-01 07:59 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll 2018-11-13 21:39 - 2018-11-01 07:58 - 007573504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2018-11-13 21:39 - 2018-11-01 07:58 - 004867072 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2018-11-13 21:39 - 2018-11-01 07:58 - 004383744 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll 2018-11-13 21:39 - 2018-11-01 07:58 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2018-11-13 21:39 - 2018-11-01 07:58 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2018-11-13 21:39 - 2018-11-01 07:58 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2018-11-13 21:39 - 2018-11-01 07:58 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 003381248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 002825728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 000356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2018-11-13 21:39 - 2018-11-01 07:57 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2018-11-13 21:39 - 2018-11-01 07:56 - 002929664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll 2018-11-13 21:39 - 2018-11-01 07:56 - 002172928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2018-11-13 21:39 - 2018-11-01 07:56 - 001768448 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2018-11-13 21:39 - 2018-11-01 07:56 - 001395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2018-11-13 21:39 - 2018-11-01 07:56 - 000506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll 2018-11-13 21:39 - 2018-11-01 07:55 - 002738688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2018-11-13 21:39 - 2018-11-01 07:55 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2018-11-13 21:39 - 2018-11-01 07:55 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 001679360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 001551360 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 001264640 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 001225216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 001023488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 000943616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 000884736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 000796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll 2018-11-13 21:39 - 2018-11-01 07:54 - 000606208 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2018-11-13 21:39 - 2018-11-01 07:53 - 002248192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2018-11-13 21:39 - 2018-11-01 07:53 - 001373696 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2018-11-13 21:39 - 2018-11-01 07:53 - 001159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll 2018-11-13 21:39 - 2018-11-01 07:53 - 000889344 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll 2018-11-13 21:39 - 2018-11-01 07:53 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2018-11-13 21:39 - 2018-11-01 07:53 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2018-11-13 21:39 - 2018-11-01 06:39 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim 2018-11-13 21:39 - 2018-11-01 06:08 - 002417952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2018-11-13 21:39 - 2018-11-01 05:50 - 000786288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2018-11-13 21:39 - 2018-11-01 05:48 - 006039064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2018-11-13 21:39 - 2018-11-01 05:48 - 004790184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2018-11-13 21:39 - 2018-11-01 05:48 - 002478872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2018-11-13 21:39 - 2018-11-01 05:48 - 001011872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2018-11-13 21:39 - 2018-11-01 05:48 - 000880248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2018-11-13 21:39 - 2018-11-01 05:48 - 000384520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coml2.dll 2018-11-13 21:39 - 2018-11-01 05:47 - 006570368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2018-11-13 21:39 - 2018-11-01 05:47 - 001980776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2018-11-13 21:39 - 2018-11-01 05:47 - 001379792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2018-11-13 21:39 - 2018-11-01 05:47 - 001020064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2018-11-13 21:39 - 2018-11-01 05:47 - 000581600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll 2018-11-13 21:39 - 2018-11-01 05:47 - 000567256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2018-11-13 21:39 - 2018-11-01 05:47 - 000129304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2018-11-13 21:39 - 2018-11-01 05:40 - 022015488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2018-11-13 21:39 - 2018-11-01 05:35 - 019403776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2018-11-13 21:39 - 2018-11-01 05:34 - 002700288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2018-11-13 21:39 - 2018-11-01 05:33 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2018-11-13 21:39 - 2018-11-01 05:33 - 003711488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2018-11-13 21:39 - 2018-11-01 05:32 - 006647296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2018-11-13 21:39 - 2018-11-01 05:31 - 005307904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2018-11-13 21:39 - 2018-11-01 05:31 - 000288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll 2018-11-13 21:39 - 2018-11-01 05:30 - 005883904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2018-11-13 21:39 - 2018-11-01 05:30 - 005775872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2018-11-13 21:39 - 2018-11-01 05:30 - 002449408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll 2018-11-13 21:39 - 2018-11-01 05:30 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll 2018-11-13 21:39 - 2018-11-01 05:30 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2018-11-13 21:39 - 2018-11-01 05:30 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2018-11-13 21:39 - 2018-11-01 05:29 - 002258944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2018-11-13 21:39 - 2018-11-01 05:29 - 001986560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll 2018-11-13 21:39 - 2018-11-01 05:29 - 001862656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll 2018-11-13 21:39 - 2018-11-01 05:29 - 000848384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll 2018-11-13 21:39 - 2018-11-01 05:29 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2018-11-13 21:39 - 2018-11-01 05:29 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2018-11-13 21:39 - 2018-11-01 05:29 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll 2018-11-13 21:39 - 2018-11-01 05:28 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll 2018-11-13 21:39 - 2018-11-01 05:28 - 001000448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2018-11-13 21:39 - 2018-11-01 05:28 - 000978944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2018-11-13 21:39 - 2018-11-01 05:27 - 001627648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2018-11-13 21:39 - 2018-11-01 05:27 - 000856576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2018-11-13 21:39 - 2018-11-01 05:27 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll 2018-11-13 21:39 - 2018-11-01 05:27 - 000678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2018-11-13 21:39 - 2018-11-01 05:27 - 000534016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2018-11-13 21:39 - 2018-11-01 05:26 - 000795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll 2018-11-13 21:39 - 2018-11-01 05:26 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll 2018-11-13 21:39 - 2018-11-01 05:26 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2018-11-13 21:39 - 2018-10-21 14:04 - 002267448 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll 2018-11-13 21:39 - 2018-10-21 14:00 - 021386368 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2018-11-13 21:39 - 2018-10-21 14:00 - 001639560 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2018-11-13 21:39 - 2018-10-21 14:00 - 001516120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2018-11-13 21:39 - 2018-10-21 14:00 - 000790416 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2018-11-13 21:39 - 2018-10-21 14:00 - 000396304 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2018-11-13 21:39 - 2018-10-21 13:59 - 000766480 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll 2018-11-13 21:39 - 2018-10-21 13:59 - 000236728 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll 2018-11-13 21:39 - 2018-10-21 13:46 - 013572096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2018-11-13 21:39 - 2018-10-21 13:46 - 004393472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2018-11-13 21:39 - 2018-10-21 13:45 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2018-11-13 21:39 - 2018-10-21 13:44 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe 2018-11-13 21:39 - 2018-10-21 13:44 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\INETRES.dll 2018-11-13 21:39 - 2018-10-21 13:43 - 000345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll 2018-11-13 21:39 - 2018-10-21 13:43 - 000276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll 2018-11-13 21:39 - 2018-10-21 13:43 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll 2018-11-13 21:39 - 2018-10-21 13:42 - 001127936 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll 2018-11-13 21:39 - 2018-10-21 13:42 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll 2018-11-13 21:39 - 2018-10-21 13:42 - 000592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll 2018-11-13 21:39 - 2018-10-21 13:42 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll 2018-11-13 21:39 - 2018-10-21 13:41 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2018-11-13 21:39 - 2018-10-21 12:41 - 001540408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll 2018-11-13 21:39 - 2018-10-21 12:41 - 000023056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hvsicontainerservice.dll 2018-11-13 21:39 - 2018-10-21 12:38 - 001322376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2018-11-13 21:39 - 2018-10-21 12:38 - 000662312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2018-11-13 21:39 - 2018-10-21 12:38 - 000660480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll 2018-11-13 21:39 - 2018-10-21 12:38 - 000221216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeManagerObj.dll 2018-11-13 21:39 - 2018-10-21 12:37 - 020381808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2018-11-13 21:39 - 2018-10-21 12:37 - 001626656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2018-11-13 21:39 - 2018-10-21 12:28 - 012501504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2018-11-13 21:39 - 2018-10-21 12:28 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\INETRES.dll 2018-11-13 21:39 - 2018-10-21 12:23 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll 2018-11-13 21:39 - 2018-10-21 12:23 - 000523264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll 2018-11-13 21:39 - 2018-10-21 12:22 - 002405888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll 2018-11-13 21:39 - 2018-10-21 12:22 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll 2018-11-13 21:39 - 2018-10-21 10:29 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll 2018-11-13 21:39 - 2018-10-21 09:44 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll 2018-11-13 21:39 - 2018-10-21 08:48 - 005602456 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2018-11-13 21:39 - 2018-10-21 08:47 - 000368440 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll 2018-11-13 21:39 - 2018-10-21 08:46 - 000717112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll 2018-11-13 21:39 - 2018-10-21 08:46 - 000709936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2018-11-13 21:39 - 2018-10-21 08:46 - 000611640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2018-11-13 21:39 - 2018-10-21 08:46 - 000560136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2018-11-13 21:39 - 2018-10-21 08:46 - 000497864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll 2018-11-13 21:39 - 2018-10-21 08:46 - 000171024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2018-11-13 21:39 - 2018-10-21 08:45 - 003283512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll 2018-11-13 21:39 - 2018-10-21 08:45 - 002719032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2018-11-13 21:39 - 2018-10-21 08:45 - 001946208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2018-11-13 21:39 - 2018-10-21 08:45 - 001098064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll 2018-11-13 21:39 - 2018-10-21 08:45 - 000607136 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2018-11-13 21:39 - 2018-10-21 08:45 - 000185120 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll 2018-11-13 21:39 - 2018-10-21 08:45 - 000175624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys 2018-11-13 21:39 - 2018-10-21 08:45 - 000139792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys 2018-11-13 21:39 - 2018-10-21 08:45 - 000058088 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe 2018-11-13 21:39 - 2018-10-21 08:28 - 016592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2018-11-13 21:39 - 2018-10-21 08:22 - 004710912 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2018-11-13 21:39 - 2018-10-21 08:21 - 001589248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll 2018-11-13 21:39 - 2018-10-21 08:21 - 000123424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll 2018-11-13 21:39 - 2018-10-21 08:20 - 000424000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll 2018-11-13 21:39 - 2018-10-21 08:20 - 000295224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll 2018-11-13 21:39 - 2018-10-21 08:20 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll 2018-11-13 21:39 - 2018-10-21 08:20 - 000141312 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe 2018-11-13 21:39 - 2018-10-21 08:20 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll 2018-11-13 21:39 - 2018-10-21 08:19 - 002487088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2018-11-13 21:39 - 2018-10-21 08:19 - 001620776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2018-11-13 21:39 - 2018-10-21 08:19 - 001130768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll 2018-11-13 21:39 - 2018-10-21 08:19 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe 2018-11-13 21:39 - 2018-10-21 08:19 - 000505616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll 2018-11-13 21:39 - 2018-10-21 08:19 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2018-11-13 21:39 - 2018-10-21 08:19 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll 2018-11-13 21:39 - 2018-10-21 08:19 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys 2018-11-13 21:39 - 2018-10-21 08:19 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll 2018-11-13 21:39 - 2018-10-21 08:19 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2018-11-13 21:39 - 2018-10-21 08:19 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys 2018-11-13 21:39 - 2018-10-21 08:19 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ofdeploy.exe 2018-11-13 21:39 - 2018-10-21 08:19 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvrcpAppSvc.dll 2018-11-13 21:39 - 2018-10-21 08:19 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhf.sys 2018-11-13 21:39 - 2018-10-21 08:19 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll 2018-11-13 21:39 - 2018-10-21 08:18 - 000761344 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2018-11-13 21:39 - 2018-10-21 08:18 - 000461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Activities.dll 2018-11-13 21:39 - 2018-10-21 08:18 - 000395264 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvctpSvc.dll 2018-11-13 21:39 - 2018-10-21 08:18 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll 2018-11-13 21:39 - 2018-10-21 08:18 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll 2018-11-13 21:39 - 2018-10-21 08:18 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll 2018-11-13 21:39 - 2018-10-21 08:18 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll 2018-11-13 21:39 - 2018-10-21 08:17 - 001826816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll 2018-11-13 21:39 - 2018-10-21 08:17 - 001668096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdprt.dll 2018-11-13 21:39 - 2018-10-21 08:17 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys 2018-11-13 21:39 - 2018-10-21 08:17 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2018-11-13 21:39 - 2018-10-21 08:17 - 000473600 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2018-11-13 21:39 - 2018-10-21 08:17 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvrcp.dll 2018-11-13 21:39 - 2018-10-21 08:17 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll 2018-11-13 21:39 - 2018-10-21 08:16 - 002584576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2018-11-13 21:39 - 2018-10-21 08:16 - 002368512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll 2018-11-13 21:39 - 2018-10-21 08:16 - 001535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2018-11-13 21:39 - 2018-10-21 08:16 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2018-11-13 21:39 - 2018-10-21 08:16 - 000514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll 2018-11-13 21:39 - 2018-10-21 08:16 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2018-11-13 21:39 - 2018-10-21 08:15 - 003212800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2018-11-13 21:39 - 2018-10-21 08:15 - 002904064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2018-11-13 21:39 - 2018-10-21 08:15 - 000743936 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintRenderAPIHost.DLL 2018-11-13 21:39 - 2018-10-21 08:15 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2018-11-13 21:39 - 2018-10-21 08:14 - 002224640 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2018-11-13 21:39 - 2018-10-21 08:14 - 001919488 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2018-11-13 21:39 - 2018-10-21 08:14 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2018-11-13 21:39 - 2018-10-21 08:14 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2018-11-13 21:39 - 2018-10-21 08:14 - 001034752 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2018-11-13 21:39 - 2018-10-21 08:14 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2018-11-13 21:39 - 2018-10-21 08:14 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll 2018-11-13 21:39 - 2018-10-21 08:14 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll 2018-11-13 21:39 - 2018-10-21 08:14 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll 2018-11-13 21:39 - 2018-10-21 08:09 - 013873664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2018-11-13 21:39 - 2018-10-21 08:02 - 002966528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2018-11-13 21:39 - 2018-10-21 08:02 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spacebridge.dll 2018-11-13 21:39 - 2018-10-21 08:01 - 001189376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll 2018-11-13 21:39 - 2018-10-21 08:01 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Diagnostics.dll 2018-11-13 21:39 - 2018-10-21 08:00 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll 2018-11-13 21:39 - 2018-10-21 07:59 - 000602112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2018-11-13 21:39 - 2018-10-21 07:58 - 001124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdprt.dll 2018-11-13 21:39 - 2018-10-21 07:58 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2018-11-13 21:39 - 2018-10-21 07:58 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2018-11-13 21:39 - 2018-10-21 07:57 - 002611200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2018-11-13 21:39 - 2018-10-21 06:59 - 000806320 _____ C:\WINDOWS\SysWOW64\locale.nls 2018-11-13 21:39 - 2018-10-21 06:59 - 000806320 _____ C:\WINDOWS\system32\locale.nls 2018-11-13 21:39 - 2018-04-28 05:02 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2018-11-08 15:41 - 2018-11-08 15:42 - 000600617 _____ C:\Users\xxxxx\Desktop\AMSG.pdf 2018-10-28 14:40 - 2018-10-26 15:03 - 000001427 _____ C:\WINDOWS\SysWOW64\ulolo.bat 2018-10-28 14:40 - 2018-10-21 06:02 - 000000498 _____ C:\WINDOWS\SysWOW64\AdvancedRun.cfg 2018-10-28 14:40 - 2016-08-04 11:00 - 000089296 _____ (NirSoft) C:\WINDOWS\SysWOW64\AdvancedRun.exe 2018-10-25 17:55 - 2018-10-23 13:46 - 000001408 _____ C:\WINDOWS\SysWOW64\updat.bat 2018-10-22 00:09 - 2018-10-22 00:10 - 000181962 _____ C:\Users\xxxxx\Desktop\sidiary pdf export.pdf 2018-10-22 00:06 - 2018-10-21 23:47 - 000095514 _____ C:\Users\xxxxx\Desktop\export20181022-004710.csv 2018-10-20 15:50 - 2018-10-20 15:50 - 002348055 _____ C:\Users\xxxxx\Downloads\mxuninstaller.exe 2018-10-20 15:50 - 2010-11-05 13:19 - 000000000 ____D C:\Users\xxxxx\Downloads\MXUninstaller 2018-10-20 15:32 - 2018-10-20 15:34 - 000000000 ____D C:\Users\xxxxx\Desktop\Magix Backup Dateien ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2018-11-19 23:55 - 2018-06-10 01:10 - 002004990 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2018-11-19 23:55 - 2018-04-12 17:14 - 000854138 _____ C:\WINDOWS\system32\perfh007.dat 2018-11-19 23:55 - 2018-04-12 17:14 - 000191640 _____ C:\WINDOWS\system32\perfc007.dat 2018-11-19 23:55 - 2018-04-12 00:36 - 000000000 ____D C:\WINDOWS\INF 2018-11-19 23:54 - 2017-06-19 10:26 - 000000000 ____D C:\ProgramData\NVIDIA 2018-11-19 23:54 - 2016-11-18 11:07 - 000000000 ____D C:\Users\xxxxx\AppData\LocalLow\Mozilla 2018-11-19 23:53 - 2015-03-14 02:07 - 000000000 ____D C:\Users\xxxxx\AppData\Roaming\MyPhoneExplorer 2018-11-19 23:53 - 2015-03-14 01:51 - 000000000 ____D C:\Users\xxxxx\AppData\Local\FreePDF_XP 2018-11-19 23:52 - 2018-06-10 01:29 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2018-11-19 23:52 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2018-11-19 23:52 - 2018-04-11 22:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2018-11-19 23:52 - 2015-04-20 21:37 - 000000000 ____D C:\ProgramData\VMware 2018-11-19 23:51 - 2015-03-10 23:19 - 000000000 ____D C:\ProgramData\Kaspersky Lab 2018-11-19 23:46 - 2018-09-22 13:52 - 000000000 ____D C:\Users\xxxxx\AppData\Local\Deployment 2018-11-19 23:44 - 2018-09-29 02:23 - 000000000 ____D C:\Users\xxxxx\AppData\Roaming\WhatsApp 2018-11-19 23:44 - 2015-09-10 01:34 - 000000000 ____D C:\Program Files\Common Files\AV 2018-11-19 23:42 - 2018-06-10 01:29 - 000004176 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B251721C-2E46-412D-8CDC-A97772E6F216} 2018-11-19 22:40 - 2015-04-21 00:21 - 000000000 ____D C:\Users\xxxxx\AppData\Roaming\MuseScore 2018-11-19 15:11 - 2015-04-10 21:43 - 000000000 ____D C:\Users\xxxxx\AppData\Local\Spectrasonics 2018-11-19 15:10 - 2017-10-14 09:47 - 000000000 ____D C:\Users\xxxxx\Desktop\FreeFileSync-BatchAufgaben 2018-11-19 13:21 - 2018-06-10 01:08 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2018-11-19 01:45 - 2015-03-13 21:27 - 000000000 ____D C:\Users\xxxxx\AppData\Roaming\vlc 2018-11-19 01:35 - 2016-11-13 00:12 - 000000384 _____ C:\WINDOWS\Tasks\HPCeeScheduleForxxxxx.job 2018-11-19 01:35 - 2015-05-25 21:58 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2018-11-19 01:33 - 2015-03-13 22:37 - 000000000 ____D C:\Users\xxxxx\AppData\Local\ElevatedDiagnostics 2018-11-19 01:30 - 2015-03-10 22:40 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2018-11-19 01:24 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2018-11-18 14:19 - 2018-06-10 01:29 - 000003308 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForxxxxx 2018-11-17 13:42 - 2017-03-18 01:45 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2018-11-17 13:42 - 2015-05-25 21:58 - 000001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2018-11-17 03:53 - 2017-02-02 15:41 - 000000000 ____D C:\Program Files (x86)\TeamViewer 2018-11-17 02:47 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\AppReadiness 2018-11-17 02:46 - 2018-04-11 22:04 - 000008192 _____ C:\WINDOWS\system32\config\ELAM 2018-11-17 02:46 - 2015-05-20 14:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft 2018-11-17 02:40 - 2018-04-12 00:38 - 000000000 ___HD C:\Program Files\WindowsApps 2018-11-17 02:32 - 2018-06-10 01:15 - 000000000 ____D C:\Users\xxxxx 2018-11-17 02:32 - 2016-10-20 22:30 - 000000000 ___RD C:\Users\xxxxx\3D Objects 2018-11-17 02:32 - 2016-04-27 06:55 - 000000000 __RHD C:\Users\Public\AccountPictures 2018-11-17 02:31 - 2018-06-10 01:08 - 000757248 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2018-11-17 02:31 - 2016-09-01 09:01 - 000000702 _____ C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-3837192191-2688150623-3177619377-1000.job 2018-11-17 02:31 - 2016-09-01 09:01 - 000000606 _____ C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-3837192191-2688150623-3177619377-1000.job 2018-11-17 02:30 - 2018-04-12 00:38 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12 2018-11-17 02:30 - 2018-04-12 00:38 - 000000000 ___SD C:\WINDOWS\system32\F12 2018-11-17 02:30 - 2018-04-12 00:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2018-11-17 02:30 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\TextInput 2018-11-17 02:30 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences 2018-11-17 02:30 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\ShellExperiences 2018-11-17 02:30 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\bcastdvr 2018-11-17 02:12 - 2015-03-13 21:17 - 000000000 ____D C:\Users\xxxxx\AppData\Local\CrashDumps 2018-11-16 20:13 - 2017-12-30 00:25 - 000000000 ____D C:\Users\xxxxx\AppData\Local\Packages 2018-11-16 17:58 - 2018-06-10 01:29 - 000003382 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3837192191-2688150623-3177619377-1000 2018-11-16 17:58 - 2018-06-10 01:15 - 000002446 _____ C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2018-11-16 17:58 - 2016-07-06 09:37 - 000000000 ___RD C:\Users\xxxxx\OneDrive 2018-11-16 12:04 - 2016-11-06 05:42 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2018-11-15 03:23 - 2015-05-29 01:08 - 000000000 ____D C:\Users\xxxxx\AppData\Local\Google 2018-11-14 19:59 - 2015-03-23 15:16 - 000000000 ____D C:\bb 2018-11-14 04:41 - 2015-05-29 01:08 - 000002293 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2018-11-13 21:51 - 2018-04-12 00:30 - 000000000 ____D C:\WINDOWS\CbsTemp 2018-11-13 21:50 - 2015-03-10 23:30 - 000000000 ____D C:\WINDOWS\system32\MRT 2018-11-13 21:45 - 2015-03-10 23:30 - 137810048 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2018-11-13 19:14 - 2018-06-10 01:29 - 000004646 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier 2018-11-13 19:14 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed 2018-11-13 19:14 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\Macromed 2018-11-08 22:07 - 2018-09-29 02:23 - 000002344 _____ C:\Users\xxxxx\Desktop\WhatsApp.lnk 2018-11-08 22:07 - 2018-09-29 02:23 - 000000000 ____D C:\Users\xxxxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp 2018-11-08 22:07 - 2018-09-29 02:23 - 000000000 ____D C:\Users\xxxxx\AppData\Local\WhatsApp 2018-11-08 22:06 - 2018-06-26 01:00 - 000000000 ____D C:\Users\xxxxx\AppData\Local\SquirrelTemp 2018-11-07 01:31 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\NDF 2018-11-07 01:00 - 2018-04-12 00:34 - 000395776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll 2018-11-07 01:00 - 2018-04-12 00:34 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll 2018-11-05 18:34 - 2018-04-12 00:41 - 000835168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2018-11-05 18:34 - 2018-04-12 00:41 - 000179808 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2018-11-03 03:27 - 2018-06-10 01:29 - 000003876 _____ C:\WINDOWS\System32\Tasks\G2MUploadTask-S-1-5-21-3837192191-2688150623-3177619377-1000 2018-11-03 03:27 - 2018-06-10 01:29 - 000003780 _____ C:\WINDOWS\System32\Tasks\G2MUpdateTask-S-1-5-21-3837192191-2688150623-3177619377-1000 2018-11-03 03:27 - 2017-07-08 22:44 - 000000000 ____D C:\Users\xxxxx\AppData\Local\GoToMeeting 2018-10-29 19:39 - 2015-05-14 23:14 - 000000000 ____D C:\Users\xxxxx\AppData\Roaming\SWAM 2018-10-29 19:37 - 2015-04-10 14:25 - 000000048 _____ C:\Users\xxxxx\AppData\Roaming\msregsvv.dll 2018-10-27 17:58 - 2018-02-03 01:31 - 000000000 ____D C:\Users\xxxxx\AppData\Local\PlaceholderTileLogoFolder 2018-10-27 17:51 - 2018-07-06 13:35 - 000004543 _____ C:\Users\xxxxx\AppData\Roaming\CamStudio.cfg 2018-10-27 17:51 - 2018-07-06 13:35 - 000000408 _____ C:\Users\xxxxx\AppData\Roaming\CamShapes.ini 2018-10-27 17:51 - 2018-07-06 13:35 - 000000408 _____ C:\Users\xxxxx\AppData\Roaming\CamLayout.ini 2018-10-27 17:51 - 2018-07-06 13:35 - 000000118 _____ C:\Users\xxxxx\AppData\Roaming\Camdata.ini 2018-10-27 16:21 - 2018-07-06 13:31 - 000000096 _____ C:\Users\xxxxx\AppData\Roaming\version2.xml 2018-10-22 00:04 - 2015-03-19 01:22 - 000000000 ____D C:\Users\xxxxx\AppData\Local\SiDiary 2018-10-20 15:37 - 2018-07-11 23:27 - 000000000 ____D C:\Program Files\CCleaner ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2017-10-12 23:26 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Absynth 5 FX Surround.64.dll 2017-10-12 23:26 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Absynth 5 FX.64.dll 2017-10-12 23:26 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Absynth 5 Stereo.64.dll 2017-10-12 23:26 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Absynth 5.64.dll 2017-10-12 23:26 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Battery 4.64.dll 2017-10-12 23:26 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Driver.64.dll 2017-10-12 23:26 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Enhanced EQ.64.dll 2017-10-12 23:26 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\FM8 FX.64.dll 2017-10-12 23:26 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\FM8.64.dll 2017-10-12 23:27 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Guitar Rig 5.64.dll 2017-10-12 23:27 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Ivory VST.64.dll 2017-10-12 23:27 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Kontakt 5 16out.64.dll 2017-10-12 23:27 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Kontakt 5 8out.64.dll 2017-10-12 23:27 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Kontakt 5.64.dll 2017-10-12 23:27 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Massive.64.dll 2017-10-12 23:27 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Passive EQ.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\RC 24.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\RC 48.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Reaktor5 16out.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Reaktor5 FX 2x8.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Reaktor5 FX.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Reaktor5 FX16x16.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Reaktor5 Surround.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Reaktor5.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\RealGuitar.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\RealLPC.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\RealStrat.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\RX 6 De-click.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\RX 6 De-clip.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\RX 6 De-hum.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\RX 6 Voice De-noise.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\SampleTank2.x.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Solid Bus Comp.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Solid Dynamics.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Solid EQ.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\StylusRMX.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Supercharger GT.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Supercharger.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Black 76.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Brickwall Lim.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS British Channel.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Bus Comp.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Classic Clipper.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Classic Comp.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Classic EQ.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Classic MBand Lim.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS CSR Hall.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS CSR Inverse.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS CSR Plate.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS CSR Room.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS DeEsser.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS EQ 73.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS EQ 81.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS EQ PA.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS EQ PB.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS EQ PG.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Lin Phase EQ.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Master EQ 432.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Metering.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Opto Comp.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Precision Comp Lim.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Prog EQ 1A.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Quad Comp.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Quad Image.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Quad Lim.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Tape Echo.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS Vint Comp 670.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS White 2A.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS White Channel.64.dll 2017-10-12 23:28 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\T-RackS CS.64.dll 2017-10-12 23:29 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Transient Master.64.dll 2017-10-12 23:29 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Trilian.64.dll 2017-10-12 23:29 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\Vari Comp.64.dll 2017-10-12 23:29 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\VC 160.64.dll 2017-10-12 23:29 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\VC 2A.64.dll 2017-10-12 23:29 - 2016-12-14 14:17 - 000003584 _____ () C:\Users\xxxxx\VC 76.64.dll 2018-07-06 13:35 - 2018-10-27 17:51 - 000000118 _____ () C:\Users\xxxxx\AppData\Roaming\Camdata.ini 2018-07-06 13:35 - 2018-10-27 17:51 - 000000408 _____ () C:\Users\xxxxx\AppData\Roaming\CamLayout.ini 2018-07-06 13:35 - 2018-10-27 17:51 - 000000408 _____ () C:\Users\xxxxx\AppData\Roaming\CamShapes.ini 2018-07-06 13:35 - 2018-10-27 17:51 - 000004543 _____ () C:\Users\xxxxx\AppData\Roaming\CamStudio.cfg 2016-06-05 03:54 - 2015-10-13 19:06 - 000006565 _____ () C:\Users\xxxxx\AppData\Roaming\DeviceCompatibility.xml 2015-04-10 14:25 - 2018-10-29 19:37 - 000000048 _____ () C:\Users\xxxxx\AppData\Roaming\msregsvv.dll 2018-10-19 20:10 - 2018-10-19 20:10 - 000000064 _____ () C:\Users\xxxxx\AppData\Roaming\Sandra.ldb 2018-10-19 20:10 - 2018-10-19 21:21 - 017408000 _____ () C:\Users\xxxxx\AppData\Roaming\Sandra.mdb 2018-07-06 13:31 - 2018-10-27 16:21 - 000000096 _____ () C:\Users\xxxxx\AppData\Roaming\version2.xml 2015-04-20 22:15 - 2015-04-20 22:15 - 000000026 _____ () C:\Users\xxxxx\AppData\Local\isoworkshop.ini 2018-09-28 11:24 - 2018-09-28 11:24 - 000000000 _____ () C:\Users\xxxxx\AppData\Local\oobelibMkey.log 2018-05-04 00:41 - 2018-05-04 00:41 - 000006120 _____ () C:\Users\xxxxx\AppData\Local\recently-used.xbel 2017-09-03 22:47 - 2017-09-03 22:47 - 000007605 _____ () C:\Users\xxxxx\AppData\Local\Resmon.ResmonCfg 2008-02-05 13:28 - 2008-02-05 13:28 - 000000051 _____ () C:\Users\xxxxx\AppData\Local\setup.txt ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2018-06-10 01:08 ==================== Ende von FRST.txt ============================ |
20.11.2018, 00:00 | #14 |
| Google - Werbe(Fake-)Links legen sich über Suchergebnisse (Firefox und Chrome)Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 15.11.2018 durchgeführt von xxxxx (19-11-2018 23:57:07) Gestartet von C:\Users\xxxxx\Downloads Windows 10 Pro Version 1803 17134.407 (X64) (2018-06-10 00:29:45) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-3837192191-2688150623-3177619377-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-3837192191-2688150623-3177619377-503 - Limited - Disabled) Gast (S-1-5-21-3837192191-2688150623-3177619377-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3837192191-2688150623-3177619377-1003 - Limited - Enabled) xxxxx (S-1-5-21-3837192191-2688150623-3177619377-1000 - Administrator - Enabled) => C:\Users\xxxxx WDAGUtilityAccount (S-1-5-21-3837192191-2688150623-3177619377-504 - Limited - Disabled) ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) ABBYY FineReader 12 Professional (HKLM-x32\...\{F12000FE-0001-0000-0000-074957833700}) (Version: 12.0.501 - ABBYY Production LLC) ABBYY Screenshot Reader (HKLM-x32\...\{F9000000-0015-0000-0000-074957833700}) (Version: 9.010.483.59811 - ABBYY) Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 19.008.20081 - Adobe Systems Incorporated) Adobe Flash Player 31 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 31.0.0.148 - Adobe Systems Incorporated) Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.9.199 - Adobe Systems, Inc.) AI Suite II (HKLM-x32\...\{34D3688E-A737-44C5-9E2A-FF73618728E1}) (Version: 1.01.28 - ASUSTeK Computer Inc.) Aimersoft Helper Compact 2.5.2 (HKLM-x32\...\{405147F7-FCC5-499B-A27E-EA6BD4A80435}_is1) (Version: 2.5.2 - Aimersoft) AllDup 4.1.5 (HKLM-x32\...\AllDup_is1) (Version: 4.1.5 - Michael Thummerer Software Design) ALL-INKL.COM WebDisk Version 0.2.1.9 (HKLM\...\{420BEC99-F9B3-446B-85A9-974192AFBEAD}_is1) (Version: 0.2.1.9 - ALL-INKL.COM) Amazon Kindle (HKLM-x32\...\Amazon Kindle) (Version: 1.15.0.43061 - Amazon) Amazon Kindle (HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\Amazon Kindle) (Version: 1.17.0.44170 - Amazon) AmpliTube 3 version 3.14.0 (HKLM\...\{DA5202AC-12BF-4330-B8EA-BC77F991FA1C}_is1) (Version: 3.14.0 - IK Multimedia) Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.) ARIA Engine v1.6.0.6 (HKLM\...\ARIA Engine_is1) (Version: v1.6.0.6 - Plogue Art et Technologie, Inc) Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.4.5.0 - Asmedia Technology) Audacity 2.2.2 (HKLM-x32\...\Audacity_is1) (Version: 2.2.2 - Audacity Team) Autocue QStart (HKLM-x32\...\{30BAA650-5FC3-4125-84DF-6CD49F28AD01}_is1) (Version: 1.5.2153 - Vitec Videocom Ltd) Avanquest Message (HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\{20573C69-4A68-4BEF-A23D-365CB66924CE}) (Version: 2.08.0 - Avanquest Software) Avanquest update (HKLM-x32\...\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}) (Version: 1.34 - Avanquest Software) Babylon (HKLM-x32\...\Babylon) (Version: - Babylon) Balabolka (HKLM-x32\...\Balabolka) (Version: 2.11.0.608 - Ilya Morozov) Band-in-a-Box and RealBand 2012 (HKLM-x32\...\BB_is1) (Version: - PG Music Inc.) Band-in-a-Box Server (HKLM-x32\...\BBServer_is1) (Version: - PG Music Inc.) Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.2.0.65 - Atheros Communications) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Box Shot 3D (HKLM-x32\...\Box Shot 3D) (Version: 2.13.3 - www.BoxShot3D.com) Boxshot (HKLM\...\Boxshot) (Version: 4.14.2 - Appsforlife Ltd) CalDavSynchronizer (HKLM-x32\...\{8B5E2DBB-6C21-433C-B656-30E7918DA49A}) (Version: 3.2.1 - Gerhard Zehetbauer) CalDavSynchronizer (HKLM-x32\...\{9BEEA50C-9BE8-405A-B9B7-7AC794F37655}) (Version: 3.2.0 - Gerhard Zehetbauer) calibre 64bit (HKLM\...\{7A345D03-2C46-4483-855B-01C7C320600F}) (Version: 3.31.0 - Kovid Goyal) CamStudio 2.7.4 (HKLM\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7.4 - CamStudio Open Source) CamStudio Lossless Codec v1.5 (HKLM-x32\...\camcodec) (Version: 1.5 - CamStudio) Canon Inkjet Printer Driver Add-On Module (HKLM\...\CANONIJINBOXADDON100) (Version: - ) CASHFLOW® THE E-GAME (HKLM-x32\...\CASHFLOW® THE E-GAME) (Version: - ) CDex - Open Source Digital Audio CD Extractor (HKLM-x32\...\CDex) (Version: 1.79.0.2015 - Georgy Berdyshev) ChromaCam (remove only) (HKLM-x32\...\ChromaCam) (Version: 2.2.1.14 - Personify, Inc.) ColorPic (HKLM-x32\...\ColorPic) (Version: 4.1 - Iconico) Complete Composers Collection PRO (HKLM\...\{6A9615EE-4DC3-4439-B563-EC35142F39DB}) (Version: 1.0.0 - EastWest Sounds, Inc) Connect (HKLM-x32\...\MAGIX_connector_is1) (Version: 2.5.1.84 - MAGIX Software GmbH) Contour Shuttle (HKLM-x32\...\{51ADFD15-6B63-4F8E-8076-F4E31FFEE32A}) (Version: 2.13.1 - Contour Design, Inc.) Corel Applications (HKLM-x32\...\Corel Applications) (Version: - ) Custom Shop version 1.6.0 (HKLM-x32\...\{21BAD046-50EC-49E2-BE7B-F9729704F2C3}_is1) (Version: 1.6.0 - IK Multimedia) EarMaster 7.0 (HKLM-x32\...\EarMaster 7_is1) (Version: 7.0 - EarMaster ApS) eLicenser Control (HKLM-x32\...\eLicenser Control) (Version: 6.11.3.1231 - Steinberg Media Technologies GmbH) Etude Sight Reader 1.4.1 (HKLM-x32\...\Etude Sight Reader 1.4_is1) (Version: 1.4.1 - Etude Software) FileZilla Client 3.32.0 (HKLM-x32\...\FileZilla Client) (Version: 3.32.0 - Tim Kosse) Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG) Forte 4 (4.1.9.25) (HKLM\...\Forte 4_is1) (Version: 4.1.9.25 - brainspawn) FreeFileSync 10.2 [Spendenversion] (HKLM-x32\...\FreeFileSync_is1) (Version: 10.2 - FreeFileSync.org) FreeOCR v5.4 (HKLM-x32\...\freeocr_is1) (Version: - ) FreePDF (Remove only) (HKLM-x32\...\FreePDF_XP) (Version: - ) FreeStyle Libre (HKLM-x32\...\FreeStyle Libre 1.0) (Version: 1.0 - Abbott Diabetes Care) Garritan ARIA Player v1.606 (HKLM\...\__ARIA_1012___is1) (Version: v1.6.0.6 - Garritan) GNU Solfege 3.22.2 (HKLM-x32\...\GNU Solfege_is1) (Version: - ) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 70.0.3538.102 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden GoTo Opener (HKLM-x32\...\{1F803452-798F-49FB-A5DD-9F527F7017E4}) (Version: 1.0.473 - LogMeIn, Inc.) GoToMeeting 8.37.0.10996 (HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\GoToMeeting) (Version: 8.37.0.10996 - LogMeIn, Inc.) GPL Ghostscript (HKLM\...\GPL Ghostscript 9.07) (Version: 9.07 - Artifex Software Inc.) HandBrake 1.1.1 (HKLM-x32\...\HandBrake) (Version: 1.1.1 - ) HP Dropbox Plugin (HKLM-x32\...\{1E18E86D-632C-48B5-962C-B60C2E53A478}) (Version: 36.0.41.58587 - HP) HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard) HP Google Drive Plugin (HKLM-x32\...\{039DDA62-50CC-4E7F-9D54-7CF032A2D362}) (Version: 36.0.41.58587 - HP) HP Officejet Pro 8620 - Grundlegende Software für das Gerät (HKLM\...\{F6CE08BC-6929-412E-BB42-A9A7CD9721D7}) (Version: 32.3.198.49673 - Hewlett-Packard Co.) HP Officejet Pro 8620 Hilfe (HKLM-x32\...\{F8E43C63-DFF2-4134-A46C-2A6F00517A35}) (Version: 32.0.0 - Hewlett Packard) HP OfficeJet Pro 8710 - Grundlegende Software für das Gerät (HKLM\...\{3574B2B8-5FA1-4F63-A6C7-652F213DFD80}) (Version: 40.12.1161.1896 - HP Inc.) HP OfficeJet Pro 8710 Hilfe (HKLM-x32\...\{AC6E479B-DD73-4490-8B91-E497003E89AA}) (Version: 38.0.0 - HP) HP Support Assistant (HKLM-x32\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.6.18.11 - Hewlett-Packard Company) HP Support Solutions Framework (HKLM-x32\...\{A38E954F-9043-42BD-9DE9-246ED183791D}) (Version: 12.9.24.3 - HP) HP Touchpoint Analytics Client (HKLM\...\{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}) (Version: 4.0.2.1439 - HP Inc.) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HPDiagnosticAlert (HKLM-x32\...\{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}) (Version: 1.00.0001 - Microsoft) Hidden HPDiagnosticCoreDll (HKLM-x32\...\{9262B08F-E183-4FED-A2BD-23FF1A84EB79}) (Version: 1.0.15.0 - Hewlett Packard) I.R.I.S. OCR (HKLM-x32\...\{77374D45-3BBF-4633-A2DF-188CD2106A67}) (Version: 12.3.7.0 - HP) I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP) IK Multimedia Authorization Manager version 1.0.12 (HKLM\...\{85BC0DCB-69E5-4279-AA25-F108EF896588}_is1) (Version: 1.0.12 - IK Multimedia) Imaginary Teleprompter (HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\imaginary-teleprompter) (Version: 2.3.4 - Imaginary Sense) Inkscape 0.91 (HKLM\...\{81922150-317E-4BB0-A31D-FF1C14F707C5}) (Version: 0.91 - inkscape.org) inPixio Photo Clip 8 (HKLM-x32\...\{65634D2B-B6D1-4B35-B4C9-F3999B8D008B}) (Version: 8.5.0 - InPixio) InPixio Photo Clip 8 Demo (HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\{9F45A8A5-0487-4aa6-A67E-46E103C927AD}) (Version: 8.00 - InPixio) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation) Intel(R) Network Connections 15.6.25.0 (HKLM\...\PROSetDX) (Version: 15.6.25.0 - Intel) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3958 - Intel Corporation) Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version: - Intel Corporation) Interaktive Sprachreise - Intensivkurs Italiano (HKLM-x32\...\ISRIIK_18_689517) (Version: - digital publishing AG) Interaktive Sprachreise - Komplettkurs English (HKLM-x32\...\ISREKK_18_689504) (Version: - digital publishing AG) Interlok driver setup x64 (HKLM\...\{25613C10-27D2-410B-942B-D922D5C3A7BE}) (Version: 5.9.6 - PACE Anti-Piracy, Inc.) IrfanView 4.50 (64-bit) (HKLM\...\IrfanView64) (Version: 4.50 - Irfan Skiljan) Ivory 2.5 (HKLM-x32\...\{c123b423-de4e-499d-bee4-694171fad8c2}) (Version: 2.5.0.8 - Synthogy, LLC) Ivory Software Components (HKLM\...\{D1D5FDFA-37CA-4376-8E14-3E2484D1B537}) (Version: 2.5.0.11 - Synthogy, LLC) Hidden JMicron JMB36X Driver (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.17.58.2 - JMicron Technology Corp.) KORG KONTROL Editor (HKLM-x32\...\{2994E3F1-B6A3-40FD-860E-A54363FC266C}) (Version: 1.50.0000 - KORG Inc.) KORG USB-MIDI Driver Tools for Windows (HKLM-x32\...\{A370DD06-F5FE-4490-A232-41AB38208ED8}) (Version: 1.15.0801 - Korg Inc.) LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) Langenscheidt T1 6.0 (HKLM-x32\...\{57EB87EF-23DF-4A76-9B90-FD7B53E1C6CE}) (Version: - ) Lingoes 2.9.2 (HKLM\...\Lingoes Translator (x64)_is1) (Version: 2.9.2 - Lingoes Project) LiquidControl 2.3 (HKLM-x32\...\LiquidControl_is1) (Version: 2.3 - Focusrite Audio Engineering Limited.) Logitech Kameraeinstellungen (HKLM-x32\...\LogiUCDPP) (Version: 1.1.87.0 - Logitech Europe S.A.) Macromedia Fireworks 3 (HKLM-x32\...\Macromedia Fireworks 3) (Version: 3 - Macromedia) MAGIX Cloud Import (HKLM\...\{F26F0643-45C1-4CCC-A98A-0F8B44A6E899}) (Version: 0.0.0.20 - MAGIX Software GmbH) Hidden MAGIX Cloud Import (HKLM\...\MX.{F26F0643-45C1-4CCC-A98A-0F8B44A6E899}) (Version: 0.0.0.20 - MAGIX Software GmbH) MAGIX Content und Soundpools (HKLM-x32\...\MAGIX_GlobalContent) (Version: 1.0.0.0 - MAGIX Software GmbH) MAGIX Network Sync (HKLM\...\{46659432-E58E-4BF9-829B-E10976DBC1B7}) (Version: 0.0.0.34 - MAGIX Software GmbH) Hidden MAGIX Network Sync (HKLM\...\MX.{46659432-E58E-4BF9-829B-E10976DBC1B7}) (Version: 0.0.0.34 - MAGIX Software GmbH) MAGIX Soundpool Music Maker - Feel good (HKLM\...\{DFEE4333-B802-4E27-9521-2D9E970B7813}) (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden MAGIX Speed burnR (HKLM\...\{95D5EB4D-6848-4937-B034-6B8868FA426D}) (Version: 7.0.2.6 - MAGIX Software GmbH) Hidden MAGIX Speed burnR (HKLM-x32\...\MX.{95D5EB4D-6848-4937-B034-6B8868FA426D}) (Version: 7.0.2.6 - MAGIX Software GmbH) MAGIX Video deluxe 2013 Plus (HKLM\...\{258D56DE-24F2-479E-BED2-8103CB0B9D58}) (Version: 12.0.0.32 - MAGIX AG) Hidden MAGIX Video deluxe 2013 Plus (HKLM-x32\...\MAGIX_{258D56DE-24F2-479E-BED2-8103CB0B9D58}) (Version: 12.0.0.32 - MAGIX AG) MAGIX Video deluxe 2014 Plus (HKLM\...\{85061988-E889-4A37-9CB7-4F695AC35544}) (Version: 13.0.2.8 - MAGIX AG) Hidden MAGIX Video deluxe 2014 Plus (HKLM-x32\...\MX.{85061988-E889-4A37-9CB7-4F695AC35544}) (Version: 13.0.2.8 - MAGIX AG) MAGIX Video deluxe 2014 Plus (Titeleffekte) (HKLM\...\{BF5D08F8-0E32-4035-94D5-BACC5A63C2FE}) (Version: 1.0.1.0 - MAGIX AG) Hidden MAGIX Video deluxe 2014 Plus (Titeleffekte) (HKLM-x32\...\MX.{BF5D08F8-0E32-4035-94D5-BACC5A63C2FE}) (Version: 1.0.1.0 - MAGIX AG) MAGIX Video deluxe 2014 Plus Update (HKLM\...\{A34A35CA-2E1F-4378-9AE6-B140CF08EF26}) (Version: 13.0.5.5 - MAGIX AG) Hidden marvell 91xx driver (HKLM-x32\...\MagniDriver) (Version: 1.0.0.1045 - Marvell) Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.11001.20108 - Microsoft Corporation) Microsoft Office Home and Business 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Outlook SMS Add-in (HKLM-x32\...\{FD5C399F-2D43-4EC5-AAF7-D600041EF25C}) (Version: 12.0.0006.0 - Microsoft Office) Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\OneDriveSetup.exe) (Version: 18.192.0920.0015 - Microsoft Corporation) Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Speech SDK 5.1 (HKLM-x32\...\{A403D88E-ED7D-48E3-91FD-B8C8A720EDA1}) (Version: 5.1.4324.0 - Microsoft) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{3c3aafc8-d898-43ec-998f-965ffdae065a}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x64) - 14.15.26706 (HKLM-x32\...\{95ac1cfa-f4fb-4d1b-8912-7f9d5fbb140d}) (Version: 14.15.26706.0 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x86) - 14.15.26706 (HKLM-x32\...\{7e9fae12-5bbf-47fb-b944-09c49e75c061}) (Version: 14.15.26706.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation) MIDI-OX (HKLM-x32\...\{A6457851-5EA9-45B0-AF1D-D2A0A4781CFB}) (Version: 7.02.372 - MIDIOX Computing) Mozilla Firefox 63.0.3 (x64 de) (HKLM\...\Mozilla Firefox 63.0.3 (x64 de)) (Version: 63.0.3 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 56.0.2 - Mozilla) MP3 Skype recorder (HKLM-x32\...\{C0BC2932-EE22-4432-9439-B2117B08C9EF}) (Version: 4.29.1.0 - Domit LTD) MP4Tools v3.6.1 (HKLM-x32\...\MP4Tools_is1) (Version: - Thüring IT-Consulting) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MuseScore 2 (HKLM-x32\...\{7D01160E-D30F-4E88-8872-4A0A0A782E2E}) (Version: 2.3.2 - Werner Schweer and Others) Music Maker (HKLM\...\{D5FF45D3-3AE3-4490-85DE-04D059606382}) (Version: 25.0.2.44 - MAGIX Software GmbH) Hidden Music Maker (HKLM-x32\...\MX.{D5FF45D3-3AE3-4490-85DE-04D059606382}) (Version: 25.0.2.44 - MAGIX Software GmbH) Music Maker Update (HKLM\...\{D3DEAE5C-1BC4-4995-9929-7B701150EBC3}) (Version: 25.1.2.78 - MAGIX Software GmbH) Hidden MusicLab RealGuitar (32-bit) (HKLM-x32\...\{786AD1AB-9A88-47C9-9983-D31FEEB25C9D}) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealGuitar (64-bit) (HKLM\...\{7EA13484-2AB8-454E-9281-2EFDF032CD2F}) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealGuitar (HKLM-x32\...\{c6ddbd3b-69d5-4236-b629-3040eadcbec3}) (Version: 3.1.0.7127 - MusicLab, Inc.) MusicLab RealGuitar Sound Bank (HKLM-x32\...\{0B306805-D14D-49E2-A68C-EEEE08392AC8}) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealLPC (32-bit) (HKLM-x32\...\{7957CEE5-D437-468A-A184-15AE383C65E2}) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealLPC (64-bit) (HKLM\...\{9D08A43A-2219-46DE-94FF-1FB6F2FE8BF3}) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealLPC (HKLM-x32\...\{0658abdf-9e34-429a-87e1-7515d9ed27f7}) (Version: 3.1.0.7127 - MusicLab, Inc.) MusicLab RealLPC Sound Bank (HKLM-x32\...\{4F392720-98CC-47DE-9E51-10DB501BAA93}) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealStrat (32-bit) (HKLM-x32\...\{ADF58BEE-5C90-4CB6-9491-21010F48D68C}) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealStrat (64-bit) (HKLM\...\{E61FC281-458E-4E87-A5DC-59A853CEDCAC}) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab RealStrat (HKLM-x32\...\{7d0a204e-374e-46b7-bb7a-7118683f692e}) (Version: 3.1.0.7127 - MusicLab, Inc.) MusicLab RealStrat Sound Bank (HKLM-x32\...\{B81907D2-E3C9-47A9-AAFE-33DD27C04461}) (Version: 3.1.0.7127 - MusicLab, Inc.) Hidden MusicLab Virtual Midi Driver (64-bit) (HKLM\...\{2B019162-86C7-4D14-AED0-2CB5110BA4FF}) (Version: 2.0.2.0 - MusicLab, Inc.) MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.9 - F.J. Wechselberger) Native Instruments Abbey Road 50s Drummer (HKLM-x32\...\Native Instruments Abbey Road 50s Drummer) (Version: 1.2.0.10 - Native Instruments) Native Instruments Abbey Road 60s Drummer (HKLM-x32\...\Native Instruments Abbey Road 60s Drummer) (Version: 1.3.0.11 - Native Instruments) Native Instruments Abbey Road 70s Drummer (HKLM-x32\...\Native Instruments Abbey Road 70s Drummer) (Version: 1.3.0.7 - Native Instruments) Native Instruments Abbey Road 80s Drummer (HKLM-x32\...\Native Instruments Abbey Road 80s Drummer) (Version: 1.3.0.4 - Native Instruments) Native Instruments Abbey Road Modern Drummer (HKLM-x32\...\Native Instruments Abbey Road Modern Drummer) (Version: 1.3.0.2 - Native Instruments) Native Instruments Abbey Road Vintage Drummer (HKLM-x32\...\Native Instruments Abbey Road Vintage Drummer) (Version: 1.3.0.9 - Native Instruments) Native Instruments Absynth 5 (HKLM-x32\...\Native Instruments Absynth 5) (Version: 5.3.1.1628 - Native Instruments) Native Instruments Action Strikes (HKLM-x32\...\Native Instruments Action Strikes) (Version: 1.2.0.2 - Native Instruments) Native Instruments Action Strings (HKLM-x32\...\Native Instruments Action Strings) (Version: 1.5.0.1 - Native Instruments) Native Instruments Alicias Keys (HKLM-x32\...\Native Instruments Alicias Keys) (Version: 1.5.0.1 - Native Instruments) Native Instruments Balinese Gamelan (HKLM-x32\...\Native Instruments Balinese Gamelan) (Version: 1.2.0.5 - Native Instruments) Native Instruments Battery 4 (HKLM-x32\...\Native Instruments Battery 4) (Version: 4.1.5.254 - Native Instruments) Native Instruments Battery 4 Factory Library (HKLM-x32\...\Native Instruments Battery 4 Factory Library) (Version: 1.1.0.1 - Native Instruments) Native Instruments Cuba (HKLM-x32\...\Native Instruments Cuba) (Version: 1.2.0.1 - Native Instruments) Native Instruments Damage (HKLM-x32\...\Native Instruments Damage) (Version: 1.5.0.2 - Native Instruments) Native Instruments Driver (HKLM-x32\...\Native Instruments Driver) (Version: 1.3.1.45 - Native Instruments) Native Instruments Drum Lab (HKLM-x32\...\Native Instruments Drum Lab) (Version: 1.2.0.5 - Native Instruments) Native Instruments Enhanced EQ (HKLM-x32\...\Native Instruments Enhanced EQ) (Version: 1.3.1.45 - Native Instruments) Native Instruments Evolve Mutations (HKLM-x32\...\Native Instruments Evolve Mutations) (Version: 1.2.0.1 - Native Instruments) Native Instruments Evolve Mutations 2 (HKLM-x32\...\Native Instruments Evolve Mutations 2) (Version: 1.2.0.1 - Native Instruments) Native Instruments Evolve R2 (HKLM-x32\...\Native Instruments Evolve R2) (Version: 1.7.0.2 - Native Instruments) Native Instruments FM8 (HKLM-x32\...\Native Instruments FM8) (Version: 1.4.1.1599 - Native Instruments) Native Instruments George Duke Soul Treasures (HKLM-x32\...\Native Instruments George Duke Soul Treasures) (Version: 1.3.0.15 - Native Instruments) Native Instruments Guitar Rig 5 (HKLM-x32\...\Native Instruments Guitar Rig 5) (Version: 5.2.2.8 - Native Instruments) Native Instruments Kinetic Metal (HKLM-x32\...\Native Instruments Kinetic Metal) (Version: 1.1.0.13 - Native Instruments) Native Instruments Kinetic Treats (HKLM-x32\...\Native Instruments Kinetic Treats) (Version: 1.0.0.18 - Native Instruments) Native Instruments Komplete 10 (HKLM-x32\...\Native Instruments Komplete 10) (Version: - Native Instruments) Native Instruments Komplete 10 Ultimate (HKLM-x32\...\Native Instruments Komplete 10 Ultimate) (Version: - Native Instruments) Native Instruments Kontakt 5 (HKLM-x32\...\Native Instruments Kontakt 5) (Version: 5.6.5.13 - Native Instruments) Native Instruments Kontakt Factory Library (HKLM-x32\...\Native Instruments Kontakt Factory Library) (Version: 1.3.0.5 - Native Instruments) Native Instruments Kontour (HKLM-x32\...\Native Instruments Kontour) (Version: 1.0.0.1 - Native Instruments) Native Instruments Maschine Drum Selection (HKLM-x32\...\Native Instruments Maschine Drum Selection) (Version: 1.3.0.1 - Native Instruments) Native Instruments Massive (HKLM-x32\...\Native Instruments Massive) (Version: 1.5.1.637 - Native Instruments) Native Instruments Molekular (HKLM-x32\...\Native Instruments Molekular) (Version: 1.0.0.2 - Native Instruments) Native Instruments Monark (HKLM-x32\...\Native Instruments Monark) (Version: 1.3.0.2 - Native Instruments) Native Instruments Native Access (HKLM-x32\...\Native Instruments Native Access) (Version: 1.5.1.64 - Native Instruments) Native Instruments Passive EQ (HKLM-x32\...\Native Instruments Passive EQ) (Version: 1.3.1.45 - Native Instruments) Native Instruments Phasis (HKLM-x32\...\Native Instruments Phasis) (Version: 1.0.0.77 - Native Instruments) Native Instruments Polyplex (HKLM-x32\...\Native Instruments Polyplex) (Version: 1.1.0.2 - Native Instruments) Native Instruments Rammfire (HKLM-x32\...\Native Instruments Rammfire) (Version: 2.0.0.4 - Native Instruments) Native Instruments Razor (HKLM-x32\...\Native Instruments Razor) (Version: 1.7.0.1 - Native Instruments) Native Instruments RC 24 (HKLM-x32\...\Native Instruments RC 24) (Version: 1.3.1.45 - Native Instruments) Native Instruments RC 48 (HKLM-x32\...\Native Instruments RC 48) (Version: 1.3.1.45 - Native Instruments) Native Instruments Reaktor 5 (HKLM-x32\...\Native Instruments Reaktor 5) (Version: 5.9.3.1344 - Native Instruments) Native Instruments Reaktor 6 (HKLM-x32\...\Native Instruments Reaktor 6) (Version: 6.0.4.23 - Native Instruments) Native Instruments Reaktor Prism (HKLM-x32\...\Native Instruments Reaktor Prism) (Version: 1.6.0.1 - Native Instruments) Native Instruments Reaktor Spark R2 (HKLM-x32\...\Native Instruments Reaktor Spark R2) (Version: 1.4.0.3 - Native Instruments) Native Instruments Reflektor (HKLM-x32\...\Native Instruments Reflektor) (Version: 2.0.0.6 - Native Instruments) Native Instruments Retro Machines Mk2 (HKLM-x32\...\Native Instruments Retro Machines Mk2) (Version: 1.3.0.3 - Native Instruments) Native Instruments Rise and Hit (HKLM-x32\...\Native Instruments Rise and Hit) (Version: 1.2.0.10 - Native Instruments) Native Instruments Rounds (HKLM-x32\...\Native Instruments Rounds) (Version: 1.2.0.3 - Native Instruments) Native Instruments Scarbee Funk Guitarist (HKLM-x32\...\Native Instruments Scarbee Funk Guitarist) (Version: 1.2.0.1 - Native Instruments) Native Instruments Scarbee Jay-Bass (HKLM-x32\...\Native Instruments Scarbee Jay-Bass) (Version: 1.1.0.2 - Native Instruments) Native Instruments Scarbee MM-Bass (HKLM-x32\...\Native Instruments Scarbee MM-Bass) (Version: 1.2.0.4 - Native Instruments) Native Instruments Scarbee MM-Bass Amped (HKLM-x32\...\Native Instruments Scarbee MM-Bass Amped) (Version: 1.1.0.2 - Native Instruments) Native Instruments Scarbee Pre-Bass (HKLM-x32\...\Native Instruments Scarbee Pre-Bass) (Version: 1.2.0.2 - Native Instruments) Native Instruments Scarbee Pre-Bass Amped (HKLM-x32\...\Native Instruments Scarbee Pre-Bass Amped) (Version: 1.1.0.2 - Native Instruments) Native Instruments Scarbee Rickenbacker Bass (HKLM-x32\...\Native Instruments Scarbee Rickenbacker Bass) (Version: 1.2.0.2 - Native Instruments) Native Instruments Scarbee Vintage Keys (HKLM-x32\...\Native Instruments Scarbee Vintage Keys) (Version: 1.3.0.4 - Native Instruments) Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.5.4.1587 - Native Instruments) Native Instruments Session Horns (HKLM-x32\...\Native Instruments Session Horns) (Version: 1.1.0.2 - Native Instruments) Native Instruments Session Horns Pro (HKLM-x32\...\Native Instruments Session Horns Pro) (Version: 1.3.0.2 - Native Instruments) Native Instruments Session Strings (HKLM-x32\...\Native Instruments Session Strings) (Version: 1.3.0.2 - Native Instruments) Native Instruments Session Strings Pro (HKLM-x32\...\Native Instruments Session Strings Pro) (Version: 1.4.0.2 - Native Instruments) Native Instruments Skanner XT (HKLM-x32\...\Native Instruments Skanner XT) (Version: 1.3.0.2 - Native Instruments) Native Instruments Solid Bus Comp FX (HKLM-x32\...\Native Instruments Solid Bus Comp FX) (Version: 1.3.1.45 - Native Instruments) Native Instruments Solid Dynamics FX (HKLM-x32\...\Native Instruments Solid Dynamics FX) (Version: 1.3.1.45 - Native Instruments) Native Instruments Solid EQ FX (HKLM-x32\...\Native Instruments Solid EQ FX) (Version: 1.3.1.45 - Native Instruments) Native Instruments Studio Drummer (HKLM-x32\...\Native Instruments Studio Drummer) (Version: 1.4.0.12 - Native Instruments) Native Instruments Supercharger (HKLM-x32\...\Native Instruments Supercharger) (Version: 1.3.1.45 - Native Instruments) Native Instruments Supercharger GT (HKLM-x32\...\Native Instruments Supercharger GT) (Version: 1.3.1.45 - Native Instruments) Native Instruments The Finger R2 (HKLM-x32\...\Native Instruments The Finger R2) (Version: 1.3.0.12 - Native Instruments) Native Instruments The Gentleman (HKLM-x32\...\Native Instruments The Gentleman) (Version: 1.2.0.2 - Native Instruments) Native Instruments The Giant (HKLM-x32\...\Native Instruments The Giant) (Version: 1.2.0.7 - Native Instruments) Native Instruments The Grandeur (HKLM-x32\...\Native Instruments The Grandeur) (Version: 1.2.0.2 - Native Instruments) Native Instruments The Maverick (HKLM-x32\...\Native Instruments The Maverick) (Version: 1.2.0.2 - Native Instruments) Native Instruments The Mouth (HKLM-x32\...\Native Instruments The Mouth) (Version: 1.3.0.4 - Native Instruments) Native Instruments Traktors 12 (HKLM-x32\...\Native Instruments Traktors 12) (Version: 2.0.0.6 - Native Instruments) Native Instruments Transient Master FX (HKLM-x32\...\Native Instruments Transient Master FX) (Version: 1.3.1.45 - Native Instruments) Native Instruments Vari Comp (HKLM-x32\...\Native Instruments Vari Comp) (Version: 1.3.1.45 - Native Instruments) Native Instruments VC 160 FX (HKLM-x32\...\Native Instruments VC 160 FX) (Version: 1.3.1.45 - Native Instruments) Native Instruments VC 2A FX (HKLM-x32\...\Native Instruments VC 2A FX) (Version: 1.3.1.45 - Native Instruments) Native Instruments VC 76 FX (HKLM-x32\...\Native Instruments VC 76 FX) (Version: 1.3.1.45 - Native Instruments) Native Instruments Vintage Organs (HKLM-x32\...\Native Instruments Vintage Organs) (Version: 1.4.0.5 - Native Instruments) Native Instruments West Africa (HKLM-x32\...\Native Instruments West Africa) (Version: 1.3.0.2 - Native Instruments) NVIDIA 3D Vision Controller-Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 399.24 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 399.24 - NVIDIA Corporation) NVIDIA GeForce Experience 3.14.1.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.14.1.48 - NVIDIA Corporation) NVIDIA Grafiktreiber 399.24 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 399.24 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.37.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.37.4 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation) Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.11001.20108 - Microsoft Corporation) Hidden Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.11001.20108 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.11001.20108 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.11001.20108 - Microsoft Corporation) Hidden PACE License Support Win64 (HKLM\...\{378041F5-BE99-4f26-AED4-B1819C8E60F7}) (Version: 4.1.2.2231 - PACE Anti-Piracy, Inc.) Hidden PACE License Support Win64 (HKLM-x32\...\InstallShield_{378041F5-BE99-4f26-AED4-B1819C8E60F7}) (Version: 4.1.2.2231 - PACE Anti-Piracy, Inc.) PDF24 Creator 8.4.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org) PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.322.8 - Tracker Software Products Ltd) PG Music DirectX Plugins 2.0.0.0 (HKLM-x32\...\PG_DX_Plugins_is1) (Version: - PG Music Inc.) Phase 5 HTML-Editor (HKLM-x32\...\{20B1B020-DEAE-48D1-9960-D4C3185D758B}) (Version: 5.6.2.3 - Systemberatung Schommer) PLAY 5.0.3 (HKLM-x32\...\EW PLAY_is1) (Version: 5.0.3 - EastWest Sounds, Inc.) Play Update 4.2.2 (HKLM\...\{D5A16FC4-9409-4289-921B-E79FBC5E17DB}) (Version: 4.2.2 - EastWest Sounds, Inc) Polar FlowSync Version 2.6.2 (HKLM-x32\...\{A1538F5C-7B65-4DB6-9FFB-FFC0DF2E85D8}_is1) (Version: 2.6.2 - Polar Electro Oy) PowerCore 2.1 (HKLM-x32\...\PowerCore) (Version: 2.1.0.3 - TC Electronic) QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.) Readiris Pro 14 (HKLM-x32\...\{038CE681-B496-4ACA-90A7-BE78EF30A076}) (Version: 14.00.7941 - I.R.I.S.) RealSpeak Solo fur Deutsch - Steffi (HKLM-x32\...\{BFBB91DB-9F0F-4A9C-9669-A97DA3512CF2}) (Version: 4.00.0000 - ScanSoft) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8186 - Realtek Semiconductor Corp.) RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version: 1.90 - Ghostgum Software Pty Ltd) Remote Control Server (HKLM-x32\...\{755C6515-9FEA-490C-B15E-22BB6519E57E}) (Version: 3.1.1.12 - Steppschuh) RME Hammerfall DSP (WDM) (HKLM\...\HDSP) (Version: 4.1.5.0 - RME Intelligent Audio Solutions) SampleTank 3 version 3.5.0 (HKLM\...\{4A5CE684-33A5-4EE6-AB22-4B92D92D37D8}_is1) (Version: 3.5.0 - IK Multimedia) SampleTank FREE (HKLM-x32\...\{6559654F-2F38-491F-8411-211517C3E635}) (Version: 2.5.5 - IK Multimedia) Samsung Kies (HKLM-x32\...\{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.4.17113.1 - Samsung Electronics Co., Ltd.) Hidden Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.4.17113.1 - Samsung Electronics Co., Ltd.) Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.63.0 - Samsung Electronics Co., Ltd.) Sena Bluetooth Device Manager 3.5 (HKLM-x32\...\Sena Bluetooth Device Manager) (Version: 3.5 - Copyright (C) 2012 ~ 2017 Sena Technologies Inc.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) SFX Search (HKLM-x32\...\{2CEA7752-5FEA-411C-B388-6E27FD671BB6}) (Version: 1.0.2 - Sound Ideas) SharpKeys (HKLM-x32\...\{58D335B6-B3C6-4465-AEC3-6442BC323723}) (Version: 2.1.1000 - RandyRants.com) SiDiary 6 (HKLM-x32\...\{73C96D3B-F9D2-4A0C-81F7-FBED6C75CE77}) (Version: 6.0 - SINOVO GmbH & Co. KG) SiSoftware Sandra Lite Titanium.SP2 (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2596}_is1) (Version: 28.28.2018.9 - SiSoftware) Skype Version 8.30 (HKLM-x32\...\Skype_is1) (Version: 8.30 - Skype Technologies S.A.) Smart Switch (HKLM-x32\...\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.18014.6 - Samsung Electronics Co., Ltd.) Hidden Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.18014.6 - Samsung Electronics Co., Ltd.) SmartKeyMap v1.0 (HKLM-x32\...\{350868DC-FEE6-48CD-BA2B-536C9BAD69E6}_is1) (Version: 1.0 - Gaon-InT Co., Ltd.) SmartScore X2 Midi Edition (HKLM-x32\...\{425884B7-D78E-4EE2-91D3-29F3A02181E7}) (Version: 10.5.8 - Musitek) Soundforum Synth (HKLM-x32\...\Soundforum Synth) (Version: - ) Steinberg Caleidoscope Sampler Track Content (HKLM-x32\...\{BD830EFB-4884-422C-8AA0-F564E839FC6F}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg Content Updater (HKLM-x32\...\{23BAFE62-0AF0-4D71-98C2-47286139DC45}) (Version: 4.0.0 - Steinberg Media Technologies GmbH) Steinberg Cubase 7 64bit (HKLM\...\{57FB2180-0FC7-41FC-8D76-3C4271CF4422}) (Version: 7.0.5 - Steinberg Media Technologies GmbH) Steinberg Cubase 8 64bit (HKLM\...\{C806BE81-01DE-4EFA-33AC-34635B3EAB4A}) (Version: 8.0.40 - Steinberg Media Technologies GmbH) Steinberg Cubase 9 (HKLM\...\{C1F742B9-1B31-4949-9A25-9C4204FADD8B}) (Version: 9.0.0 - Steinberg Media Technologies GmbH) Steinberg Cubase 9.5 (HKLM\...\{0D6C3731-C484-4711-A85E-D36C9176A237}) (Version: 9.5.30 - Steinberg Media Technologies GmbH) Steinberg Download Assistant (HKLM-x32\...\Steinberg Download Assistant) (Version: 1.8.3 - Steinberg Media Technologies GmbH) Steinberg Drum Loop Expansion 01 (HKLM-x32\...\{490BF87E-1F75-4453-BF55-9F540543A3CA}) (Version: 2.0.0.0 - Steinberg Media Technologies GmbH) Steinberg EDM Toolbox MIDI Loops (HKLM-x32\...\{8C9B2EA8-9A30-4347-95E9-10E919C4F32E}) (Version: 1.1.0 - Steinberg Media Technologies GmbH) Steinberg Eucon Adapter 6.5 64bit (HKLM\...\{95D90857-61C2-4927-85FF-A317E46E7351}) (Version: 6.5.1 - Steinberg Media Technologies GmbH) Steinberg Generic Lower Latency ASIO Driver 64bit (HKLM\...\{16D5A798-10BE-4FF3-BB71-54C012CD0D7D}) (Version: 1.0.12 - Steinberg Media Technologies GmbH) Steinberg Groove Agent ONE Content (HKLM-x32\...\{BD86F1AC-B594-46E4-85DC-1258AC9E2232}) (Version: 1.0.0.003 - Steinberg Media Technologies GmbH) Steinberg Groove Agent ONE Vintage Beatboxes (HKLM-x32\...\{DBF4BC99-53F1-4C97-84C3-7557D103E182}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH) Steinberg Groove Agent SE 64bit (HKLM\...\{A5AB0D21-21BD-4DB8-F097-02E8FC8C486A}) (Version: 4.2.30 - Steinberg Media Technologies GmbH) Steinberg Groove Agent SE Acoustic Agent (HKLM-x32\...\{F34EA13C-F078-4003-AE21-43EAB2680EC5}) (Version: 1.0.2 - Steinberg Media Technologies GmbH) Steinberg Groove Agent SE Allen Morgan Signature Drums (HKLM-x32\...\{09D3BF0C-54D0-40AE-B917-B9BBD7873BB5}) (Version: 2.0.0 - Steinberg Media Technologies GmbH) Steinberg Groove Agent SE Content (HKLM-x32\...\{AFC9D1CE-F050-437C-35A5-62DEDB262DC7}) (Version: 1.3.0 - Steinberg Media Technologies GmbH) Steinberg Groove Agent SE Rock Pop Toolbox Drums (HKLM-x32\...\{E9BFA009-DD72-4F2A-84CB-6DF46472B563}) (Version: 1.0.2 - Steinberg Media Technologies GmbH) Steinberg HALion Content Registration (HKLM-x32\...\{D3BC09D3-55D7-424D-9B7B-5CAF1C6113FD}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Hidden Steinberg HALion Library Manager (HKLM\...\{55B14661-3F86-4974-9097-D7508EC63D97}) (Version: 3.0.16 - Steinberg Media Technologies GmbH) Steinberg HALion Sonic SE Component (HKLM\...\{B99C316B-C135-43B5-8E77-2BC5E241F964}) (Version: 3.1.0 - Steinberg Media Technologies GmbH) Steinberg HALion Sonic SE Content (HKLM-x32\...\{A5051ABF-A497-4C3C-85EA-F7A4D5C19B82}) (Version: 2.0.1 - Steinberg Media Technologies GmbH) Steinberg LoopMash Content (HKLM-x32\...\{4D454CF8-12FD-464D-B57B-B46FE27B78BB}) (Version: 2.0.0.000 - Steinberg Media Technologies GmbH) Steinberg LoopMash Content 2 (HKLM-x32\...\{88C337F0-4CF2-4098-BDC0-D94859ECA2B4}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH) Steinberg Midi Loop Library (HKLM-x32\...\{89DE2651-6DD9-4C15-AC94-8348362D456C}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg Padshop 64bit (HKLM\...\{75F15019-C0C2-4047-AA45-97B4BD313719}) (Version: 1.1.0 - Steinberg Media Technologies GmbH) Steinberg Production Grooves Content (HKLM-x32\...\{F72824BC-4856-4050-A745-D92BC601CCDE}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg Retrologue 64bit (HKLM\...\{4D65ECE6-131D-4B5F-8470-2750D3161619}) (Version: 2.1.0 - Steinberg Media Technologies GmbH) Steinberg REVerence Content 01 (HKLM-x32\...\{532B917B-8235-4FA5-BE36-643A8BB053A5}) (Version: 2.0.1.000 - Steinberg Media Technologies GmbH) Steinberg Upload Manager (HKLM-x32\...\{88BBBD8F-4C19-4809-B84B-7A8F8238B48D}) (Version: 1.0.2 - Steinberg Media Technologies GmbH) Steinberg VST Amp Rack Content 01 (HKLM-x32\...\{8CBA7E47-48DA-47DC-8E98-6984BA830295}) (Version: 1.0.1 - Steinberg Media Technologies GmbH) Steinberg VST Bass Amp Content (HKLM-x32\...\{A2FC1750-B90F-4948-9D6E-DDDA155C6EC8}) (Version: 1.0.0 - Steinberg Media Technologies GmbH) Steinberg VST Transit 64bit (HKLM\...\{FF1A114C-0F88-11E5-A6C0-1697F925EC7B}) (Version: 1.0.13 - Steinberg Media Technologies GmbH) Studie zur Verbesserung von HP Officejet Pro 8620 (HKLM\...\{825BC9A9-A005-4FDB-BDE9-A4F2DF69C3B7}) (Version: 32.3.198.49673 - Hewlett-Packard Co.) Studie zur Verbesserung von HP OfficeJet Pro 8710 (HKLM\...\{94E4242D-9AEA-458E-A74F-4C345DA16867}) (Version: 40.12.1161.1896 - HP Inc.) Superior Drummer 32-bit (HKLM-x32\...\{8752CE2D-F312-499D-AE46-4AD80506A890}) (Version: 2.4.0 - Toontrack) Superior Drummer 64-bit (HKLM\...\{0E54CF79-AE40-409E-9253-9563418C730C}) (Version: 2.4.0 - Toontrack) SWAM Double Reeds version 2.5.1 64bit (HKLM\...\{479639F1-9DD5-43B8-A67C-F67850213A51}_is1) (Version: 2.5.1 64bit - Samplemodeling) SWAM Flutes version 1.2.2 64bit (HKLM\...\{41F9E74C-140F-43E8-AA5E-563AA6CE43DF}_is1) (Version: 1.2.2 64bit - Samplemodeling) SWAM The Saxophones version 2.5.1 64bit (HKLM\...\{6A85AE8B-8674-4014-A976-6C7727B585E4}_is1) (Version: 2.5.1 64bit - Samplemodeling) SWAM The Soprano and Bass Clarinets version 2.5.1 64bit (HKLM\...\{8DD33B84-8B9C-48A6-9075-9BB7F00EE991}_is1) (Version: 2.5.1 64bit - Samplemodeling) swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden TaskCracker for Outlook (HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\{398d543d-71ef-4754-b0a0-9ee13f436d52}) (Version: 2.1.11.0 - TaskCracker) TC Electronic PowerCore (HKLM\...\{29E65F87-3B96-4F74-84E8-6088411A85C3}) (Version: 4.4.3.62 - TC Electronic) TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.72365 - TeamViewer) TEControl Midi Breath Controller (HKLM-x32\...\TECMidiBreathCtrl) (Version: - ) Telegram Desktop Version 1.2.17 (HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.2.17 - Telegram Messenger LLP) TERRATEC Cinergy HTC USB XS HD (64 Bit) (HKLM-x32\...\{D4DC2182-41B4-4623-81A7-2A69AB169E6B}) (Version: 5.09.1202.00 - TERRATEC) TerraTec Home Cinema (HKLM-x32\...\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}) (Version: 6.25.6 - ) THC Codec Patch (HKLM-x32\...\{03DF2CB2-FF23-47F7-8754-8C3938A5F44C}) (Version: 1.00.0000 - ) THC codec patch (HKLM-x32\...\{667774E0-26BB-4194-9854-656A8DC5337B}) (Version: 1.00.0000 - TERRATEC) TomTom HOME (HKLM-x32\...\{30E6FC43-C31F-4968-9A06-AA38E3C3CF73}) (Version: 2.10.1 - Ihr Firmenname) TomTom HOME (HKLM-x32\...\{9F1953B3-B0EE-402C-A29F-A8AB775A6D1D}) (Version: 2.11.3 - Ihr Firmenname) TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.) TomTom MyDrive Connect 4.2.2.3561 (HKLM-x32\...\MyDriveConnect) (Version: 4.2.2.3561 - TomTom) Toontrack solo 64 bit (HKLM\...\{FA9D0D8C-FDD1-45C2-8291-079FBA72D2CB}) (Version: 1.3.2 - Toontrack) T-RackS CS version 4.7.1 (HKLM\...\{E931EBCC-55F9-4D67-BA0E-D57C4A893A44}_is1) (Version: 4.7.1 - IK Multimedia) UAD drivers. This may take a while... (HKLM-x32\...\{0A122638-B9F6-4E89-A537-B1A5899A8A03}) (Version: 8.0.0.10598 - Universal Audio, Inc.) Hidden UAD Powered Plug-Ins (HKLM\...\{21D30CDB-3338-4BC7-9006-DF3C7DAA3C17}) (Version: 8.0.0.10598 - Universal Audio, Inc.) Hidden UAD Powered Plug-Ins (HKLM\...\{298B735D-98C5-4320-8DA8-1D92129FE4BC}) (Version: 8.0.0.10598 - Universal Audio, Inc.) Hidden UAD Powered Plug-Ins (HKLM-x32\...\{110C0D69-2D68-4522-85C8-D4B404474E03}) (Version: 8.0.0.10598 - Universal Audio, Inc.) Hidden UAD Powered Plug-Ins (HKLM-x32\...\{1d23d860-61b7-4bf1-ae24-8f29c3b8d9db}) (Version: 8.0.0.10598 - Universal Audio, Inc.) UAD Powered Plug-Ins (HKLM-x32\...\{A65E6089-D8B0-4484-9401-7A4D7008119D}) (Version: 8.0.0.10598 - Universal Audio, Inc.) Hidden UAD Powered Plug-Ins (HKLM-x32\...\{ACDF367C-A0C7-4ADF-8EFE-4FB9EA8B94E2}) (Version: 8.0.0.10598 - Universal Audio, Inc.) Hidden Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{C5FDDED7-DEC7-48B4-AFD8-DFB8A0FD199A}) (Version: 2.51.0.0 - Microsoft Corporation) VdhCoApp 1.2.4 (HKLM\...\weh-iss-net.downloadhelper.coapp_is1) (Version: - DownloadHelper) Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.) Vita Concert Grand LE (HKLM\...\{BFA88ABE-D175-42C7-B374-92A2D9333CAB}) (Version: 2.4.0.95 - MAGIX Software GmbH) Hidden VLC media player (HKLM\...\VLC media player) (Version: 3.0.4 - VideoLAN) VMware Player (HKLM\...\{E452E727-86B8-4233-8CC3-41FD817AFAFF}) (Version: 7.1.0 - VMware, Inc.) Hidden VMware Player (HKLM-x32\...\VMware_Player) (Version: 7.1.0 - VMware, Inc) Voice Reader Home 15 Deutsch-Männlich (Markus) (HKLM-x32\...\{C13DDB54-A508-49E3-918E-C904C217D4BA}) (Version: 15.0.0.0 - Linguatec GmbH) Voice Reader Home 15 Deutsch-Weiblich (Petra) (HKLM-x32\...\{6F6B2DBF-CF7C-43F1-BB05-0D41C2240D92}) (Version: 15.0.0.0 - Linguatec GmbH) Voxengo SPAN (HKLM\...\Voxengo SPAN_is1) (Version: 3.1 - Voxengo) WhatsApp (HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\WhatsApp) (Version: 0.3.1475 - WhatsApp) WinCDEmu (HKLM-x32\...\WinCDEmu) (Version: 3.6 - Bazis) Windows-Treiberpaket - Cambridge Silicon Radio Ltd. (CSRBC) USB (05/02/2017 2.5.2.8) (HKLM\...\C7C4712DD9EFA5115CB6017C22C344F393FA248C) (Version: 05/02/2017 2.5.2.8 - Cambridge Silicon Radio Ltd.) Windows-Treiberpaket - RME HDSP Series (02/04/2014 4.0.6.0) (HKLM\...\FAD5BDA71BDE72190DA8A6EDDD0DAB0FA0BDFBE8) (Version: 02/04/2014 4.0.6.0 - RME) Windows-Treiberpaket - RME HDSP Series (07/19/2016 4.1.5.0) (HKLM\...\D481728C4C968FD941A71EF8EF57682A3941896D) (Version: 07/19/2016 4.1.5.0 - RME) Windows-Treiberpaket - RME HDSP Series (07/21/2015 4.1.0.0) (HKLM\...\81B817F88F03F6AC1D25E95A91B9D5A7E559C916) (Version: 07/21/2015 4.1.0.0 - RME) Windows-Treiberpaket - TerraTec (USB28xxBGA) Media (12/02/2009 5.09.1202.00) (HKLM\...\65164506FD435CC3986FDA4C94F3FFBAE17E7F97) (Version: 12/02/2009 5.09.1202.00 - TerraTec ) WinHTTrack Website Copier 3.49-2 (HKLM-x32\...\WinHTTrack Website Copier_is1) (Version: 3.49.2 - HTTrack) winKeyLock version 1.0.1.3 (HKLM-x32\...\winKeyLock_is1) (Version: 1.0.1 - winKeyLock) WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies) WinRAR 5.50 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH) Zoom (HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\ZoomUMX) (Version: 4.1 - Zoom Video Communications, Inc.) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-3837192191-2688150623-3177619377-1000_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\xxxxx\AppData\Local\GoToMeeting\8789\G2MOutlookAddin64.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-3837192191-2688150623-3177619377-1000_Classes\CLSID\{E0F441A0-95B4-6F16-242E-5C9535A10BEE}\InprocServer32 -> C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Keine Datei ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> Keine Datei ContextMenuHandlers1: [BabylonDocTrans] -> {947217BD-E967-400A-B14A-BA851A8EDCBB} => -> Keine Datei ContextMenuHandlers1: [Balabolka] -> {6CB83A5A-AA68-4895-9F54-175E789AE149} => C:\Program Files (x86)\Balabolka\BFileExt.dll [2013-02-28] (Ilya Morozov) ContextMenuHandlers1: [FineReader12ContextMenu] -> {55344AC6-630B-430C-B292-C7BE21F90061} => C:\Program Files (x86)\ABBYY FineReader 12\FRIntegration.x64.dll [2014-01-30] (ABBYY Production LLC.) ContextMenuHandlers1-x32: [MyPhoneExplorer] -> {A372C6DF-7A85-41B1-B3B0-D1E24073DCBF} => C:\Program Files (x86)\MyPhoneExplorer\DLL\ShellMgr.dll [2010-03-30] (F.J. Wechselberger) ContextMenuHandlers1-x32: [WinCDEmu] -> {D0E37FD2-F675-426F-B09A-2CF37BA46FD5} => C:\Program Files (x86)\WinCDEmu\x64\WinCDEmuContextMenu.dll [2011-06-19] (SysProgs.org) ContextMenuHandlers1-x32: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal) ContextMenuHandlers1-x32-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal) ContextMenuHandlers2-x32: [VMDiskMenuHandler] -> {271DC252-6FE1-4D59-9053-E4CF50AB99DE} => C:\Program Files (x86)\VMware\VMware Player\vmdkShellExt.dll [2015-02-06] (VMware, Inc.) ContextMenuHandlers2-x32: [VMDiskMenuHandler64] -> {E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC} => C:\Program Files (x86)\VMware\VMware Player\x64\vmdkShellExt64.dll [2015-02-06] (VMware, Inc.) ContextMenuHandlers2-x32: [WinCDEmu] -> {A9901FCD-B4DF-43A1-BD5D-6C9F88679497} => C:\Program Files (x86)\WinCDEmu\x64\WinCDEmuContextMenu.dll [2011-06-19] (SysProgs.org) ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Keine Datei ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Keine Datei ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => -> Keine Datei ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2018-09-06] (NVIDIA Corporation) ContextMenuHandlers6: [Fast Explorer] -> {693BE9C0-BEC3-11D2-B4C1-C33BBD3AD64B} => C:\ProgramData\AllDup\FEShlExt.dll [2008-08-20] (Alex Yakovlev) ContextMenuHandlers6: [FineReader12ContextMenu] -> {55344AC6-630B-430C-B292-C7BE21F90061} => C:\Program Files (x86)\ABBYY FineReader 12\FRIntegration.x64.dll [2014-01-30] (ABBYY Production LLC.) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {019E00F2-B24A-4429-9ED8-8661E47FEBB7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_CN7BHBT148 => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2018-11-09] (HP Inc.) Task: {02D52FF0-0802-479F-A103-637DBED1607E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG Task: {04806CA5-8C1B-406C-8495-25CA0B789A66} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [2018-11-18] (Microsoft Corporation) Task: {072C2E97-A6EF-42EA-B557-5584C8421C4A} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-07-19] (NVIDIA Corporation) Task: {07B9B513-EBA2-4717-B1C6-9B97452EC3D6} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG Task: {09A3CD32-D158-4F32-9817-C095A01C0901} - System32\Tasks\{F896069C-EE12-4541-9D74-CBE75145141C} => C:\Program Files (x86)\ScanWizard 5\BtnScan.exe Task: {0AF072E1-BE29-423F-AB8C-04B92BFE9846} - System32\Tasks\{A2EB9C37-4DED-4351-AFC9-4EA81DD80D3A} => C:\Program Files (x86)\ScanWizard 5\BtnScan.exe Task: {0BEA68B7-CD57-411F-812F-A25B4F450753} - System32\Tasks\ASUS\ASUS DigiVRM Help => C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe [2011-04-13] (ASUSTeK Computer Inc.) Task: {0FA2E930-EDD3-4AD1-BF31-5E8787DF8740} - System32\Tasks\G2MUploadTask-S-1-5-21-3837192191-2688150623-3177619377-1000 => C:\Users\xxxxx\AppData\Local\GoToMeeting\10996\g2mupload.exe [2018-11-03] (LogMeIn, Inc.) Task: {1007CF8E-D233-47B7-BD60-D287FD9E7754} - System32\Tasks\{B099E173-9F43-40C9-A20F-46DAA44FBC82} => C:\Program Files (x86)\ScanWizard 5\ScannerFinder.exe Task: {1067DE47-6A39-44F8-9056-F70F8C4D03CA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-29] (Google Inc.) Task: {14081E9D-B685-4718-A475-B8B4DBE634F6} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [2018-01-24] (Tracker Software Products (Canada) Ltd.) Task: {15B0A3FF-6968-43BE-BEB0-1EB3F43268A4} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-07-19] (NVIDIA Corporation) Task: {19700205-43E5-4DB9-AA65-DC0243C85125} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-08-13] (Adobe Systems Incorporated) Task: {1AD0943E-B4CE-42AD-880A-6BD430B8B0E9} - System32\Tasks\G2MUpdateTask-S-1-5-21-3837192191-2688150623-3177619377-1000 => C:\Users\xxxxx\AppData\Local\GoToMeeting\10996\g2mupdate.exe [2018-11-03] (LogMeIn, Inc.) Task: {237E57FE-3D4E-486A-94AA-A0C98BE852E1} - System32\Tasks\HPCeeScheduleForxxxxx => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard) Task: {24486F47-FAD4-4D7A-BE3F-43DCF413886D} - System32\Tasks\Connect => C:\Program Files (x86)\MAGIX\Connect\connect.exe [2017-05-10] (MAGIX Software GmbH) Task: {27CFCD81-515C-411D-8E31-67AC667F8180} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG Task: {2B4EBF40-CA24-4723-8738-97D50AC9720F} - System32\Tasks\HP AR Program Upload => C:\Program Files\HP\HP Officejet Pro 8620\bin\HPRewards.exe [2014-07-21] (TODO: <Company name>) Task: {2CF46B31-93FA-4D75-A765-3E99903FF49C} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-11-18] (Microsoft Corporation) Task: {2F7DB506-82AE-4A1A-9453-4C30851F4120} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2018-07-19] (NVIDIA Corporation) Task: {35F108C1-C418-4341-9644-EA575D23A117} - System32\Tasks\ScanToPCActivationApp.exe_{8ABB3C05-F4FC-48DA-8D3B-6346DE18998C} => C:\Program Files\HP\hp officejet pro 8620\bin\ScanToPCActivationApp.exe [2014-07-21] (Hewlett-Packard Development Company, LP) Task: {387FFA2C-C6B6-4C9D-808B-424AF7133D1F} - \Microsoft\Windows\Setup\gwx\rundetector -> Keine Datei <==== ACHTUNG Task: {3A29B44E-C81A-4C9C-9CAD-E9178E091FFC} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-11-02] (Microsoft Corporation) Task: {3DB2E37C-024E-4100-BA04-448CB84BEB05} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {40E4ED3B-5749-4161-B2B1-6C93895D795C} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-11-02] (Microsoft Corporation) Task: {417853FE-EAE6-4B1A-8D3D-E732DF2D59BC} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe Task: {425620DD-6687-46B2-A6D4-02FEB0A49838} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2018-05-04] (HP Inc.) Task: {443F1F74-6B81-40BA-9540-1A6D5C633B50} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {46BE4B97-5B77-44FC-B0F7-BC8C28A89B26} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2017-11-19] () Task: {47324E10-A462-4853-AFA1-5AD8E35CE612} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2018-07-19] (NVIDIA Corporation) Task: {492706C2-916A-40A3-9679-3967FABC30BC} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2018-11-18] (Microsoft Corporation) Task: {4A17FF8B-43AC-42D7-BD46-9E6DD09C614A} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe Task: {4C3948A9-4A66-42D8-AB92-CDB9B9C60BA6} - System32\Tasks\{F3057795-FC08-4BA7-A011-9F06D983C366} => C:\Program Files (x86)\ScanWizard 5\ScannerFinder.exe Task: {4DF0187A-670F-4CBC-A64A-4076F81FFB43} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG Task: {513BAAED-D225-46B2-9305-DB65E0B71203} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG Task: {51630D4A-6479-46FC-8AA0-C62EB4771BAE} - System32\Tasks\AdobeGCInvoker-1.0-MicrosoftAccount-office@romansillipp.com => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-09-10] (Adobe Systems, Incorporated) Task: {55638E04-1E74-4732-A378-A830838C6D8E} - System32\Tasks\{166B1474-E07F-4CFA-8D2E-098F22B7F486} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\Uninstall.exe" -c /app FreeYTVDownloader Task: {58937CEF-0A12-42B3-A4AB-10A4B6C4E13D} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {5D089FA5-3096-40FD-BECC-908A76CE9954} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2018-11-09] (HP Inc.) Task: {5F6A3109-CA18-4A5C-87DC-291855984212} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2018-05-04] (HP Inc.) Task: {61F27FF8-833F-4335-A812-F4C9EABA9358} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe Task: {6440C7D5-554F-42F7-9224-E6E66FF2720A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-29] (Google Inc.) Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] () Task: {6634F99B-0A86-45F5-87B8-C76DF575B898} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe Task: {68B8AA64-6E86-42A8-9B51-98FE521ED42E} - System32\Tasks\S-1-5-21-3837192191-2688150623-3177619377-1000\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2018-04-12] (Microsoft Corporation) Task: {6C1027BD-03CE-44D6-87F0-BCD4A2072EDD} - \Microsoft\Windows\Google\GoogleUpdateTaskMachineUP -> Keine Datei <==== ACHTUNG Task: {6EC4DBED-59D1-4BE9-8564-1AC472BEC748} - System32\Tasks\HP AR Program Upload - 2d96347c3d134f9999642121a983270c84243094439f4908a4829deed35a075a => C:\Program Files\HP\HP Officejet Pro 8620\bin\HPRewards.exe [2014-07-21] (TODO: <Company name>) Task: {6F104FE0-E085-4B18-9AB5-635C9878AB64} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [2018-11-18] (Microsoft Corporation) Task: {6F1C0081-4BCD-4EE8-B3FD-A597622C2702} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {70743A58-ADD3-40CF-9121-F409ADDCF4B3} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-07-19] (NVIDIA Corporation) Task: {7282BFE0-9FD0-4F0C-A840-92B0ABB484C1} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2018-07-19] (NVIDIA Corporation) Task: {739BB8B1-377E-40EA-91EC-DD5BC11F5E3E} - System32\Tasks\Eigene Dateien mobile HD => C:\Program Files\FreeFileSync\FreeFileSync.exe [2018-07-06] (FreeFileSync.org) Task: {7779BA5A-9A74-4BA8-8AB2-A6717D1F379B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.) Task: {78F82A38-88D6-4273-81D3-7716D1AD9BAA} - System32\Tasks\{1AEF08D0-6D11-4793-AC78-9563B8964124} => C:\Program Files (x86)\ScanWizard 5\MSC.exe Task: {7DA2D159-4E73-400E-B74D-B2273339E925} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-07-19] (NVIDIA Corporation) Task: {7EC9D539-5FCF-433F-871F-F805E95C8D89} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2010-11-26] (ASUSTeK Computer Inc.) Task: {7F8E016A-76B9-4A87-8C39-0C74811547C5} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe Task: {84224A7F-1FEC-4FBF-9DD4-CA54BA7BF7CF} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe Task: {85B1C03F-B57A-4D53-92F5-95A6F91ED28C} - System32\Tasks\{8DF6D001-E1C9-4E26-9DBB-700D8BB48307} => C:\Program Files (x86)\ScanWizard 5\BtnScan.exe Task: {864FC368-734F-4C12-BBF4-59252CBF604B} - System32\Tasks\ScanToPCActivationApp.exe_{F3DCC517-C18B-4314-A155-116E3A37C231} => C:\Program Files\HP\HP Officejet Pro 8620\Bin\ScanToPCActivationApp.exe [2014-07-21] (Hewlett-Packard Development Company, LP) Task: {86DCE478-ADE6-4467-B97C-55378D52D44A} - System32\Tasks\Outlook pst mobile HD => C:\Program Files\FreeFileSync\FreeFileSync.exe [2018-07-06] (FreeFileSync.org) Task: {8974A6CA-824E-4B3A-9484-58C00C95254E} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {89B5DE8D-5859-4371-A1EA-E2F4D8BCF5D7} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-07-19] (NVIDIA Corporation) Task: {8BD6D1F4-283F-46CE-85FE-BBB4D4CC1CE4} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {93A71FD6-D0C8-4446-8FD9-939EEBA65823} - System32\Tasks\{6079CCA0-70CE-430D-90F0-E0364C2210C0} => C:\Program Files (x86)\ScanWizard 5\BtnScan.exe Task: {9433C927-8D03-45B0-B73C-2D41B034B90F} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-07-19] (NVIDIA Corporation) Task: {9612DA30-1B35-4738-AD06-0F0597824AEB} - System32\Tasks\HP AR Program Upload - c5da1bba60ad4b1389a839d5ac29448c60c74baaa36642f689743c9a5eeb539a => C:\Program Files\HP\HP Officejet Pro 8620\bin\HPRewards.exe [2014-07-21] (TODO: <Company name>) Task: {96571150-49DF-415D-B1FD-E2B0DC5C130C} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-07-19] (NVIDIA Corporation) Task: {A130215C-D677-4B2C-93B6-6EAF3F5F62EC} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {A45E616E-EB93-4DCC-9975-14499C534653} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.) Task: {A57947A4-D99E-4C6A-86CD-4C6D0806ADAE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2018-08-30] (HP Inc.) Task: {A9B7F902-E767-44DF-BF4D-B71AF050693D} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG Task: {B426768B-3CD8-4E8D-89AF-080086000578} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG Task: {B5381109-73CF-410C-B0E6-80293072D8B6} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-07-19] (NVIDIA Corporation) Task: {BDB36AA9-EAC5-4D8A-9398-ECCC747792DE} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe Task: {BDC5C6D1-FBA2-4FDE-A30C-A3E41A07FCD2} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG Task: {BF0BC14F-94E6-497F-879F-6BE694A71F83} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-11-13] (Adobe Systems Incorporated) Task: {C0C262E2-7484-4365-84F2-B2D3FDCB6DEE} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_31_0_0_148_Plugin.exe [2018-11-13] (Adobe Systems Incorporated) Task: {C12EBEFE-FDE0-4585-BA5A-E02A52E7C1F9} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG Task: {C179397E-C1B8-4161-8FDF-A0417300E843} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG Task: {CC1B0517-79FB-4E32-9464-3CD6FA94C455} - System32\Tasks\Datenplatte Komplett-Backup => C:\Program Files\FreeFileSync\FreeFileSync.exe [2018-07-06] (FreeFileSync.org) Task: {CC9D5757-6159-424D-A571-7240D6F2B013} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe Task: {CF388D4F-B982-416A-BCA0-8461AEBB0530} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe Task: {D5E03BC4-0FFD-41D5-AD19-B05192B1293E} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG Task: {D650AA22-2808-4AC4-938C-E86D6458389F} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe Task: {D65A7DDB-8726-446D-ADB1-411B173B3909} - System32\Tasks\ScanToPCActivationApp.exe_{B111B4C8-06CA-48C1-90A6-5F8FF479DCFD} => C:\Program Files\HP\HP Officejet Pro 8620\Bin\ScanToPCActivationApp.exe [2014-07-21] (Hewlett-Packard Development Company, LP) Task: {D893F536-DD41-46C4-952F-DEDEC35BDC1C} - System32\Tasks\HPCustParticipation HP Officejet Pro 8620 => C:\Program Files\HP\HP Officejet Pro 8620\Bin\HPCustPartic.exe [2014-07-21] (Hewlett-Packard Development Company, LP) Task: {DD4541EB-9950-4EFE-9D30-EF6DC4FB8666} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG Task: {DDB313A2-2E6D-42AA-94DD-EF009B504656} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-11-18] (Microsoft Corporation) Task: {DF9C17BF-A607-4B98-8649-A733C3F8D7F9} - System32\Tasks\{821DCBCD-C72C-4126-A5B8-D41C58A85639} => C:\Program Files (x86)\ScanWizard 5\BtnScan.exe Task: {E41514F5-08D2-4254-B9AA-E1BE7705D8D8} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Keine Datei <==== ACHTUNG Task: {E8BC7499-CFA4-4BB8-ADD7-DEF59A9BEE80} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe Task: {EBAC64DC-BEF0-4DE0-98AD-EC0729F475CB} - System32\Tasks\RunAsStdUser Task => C:\Program Files (x86)\inPixio\InPixio Photo Clip 8\LauncherIPC8.exe [2018-06-13] (InPixio) Task: {EE24FE8E-BE37-4919-ACE6-250EB9E7BA1F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe Task: {EF42EE8B-15CF-4EBF-815D-B79C42BD9D74} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG Task: {EF8445D5-3674-4171-9816-C4BB9EB7FB23} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {F2AAD0F8-5AF5-4A5B-ADE8-902FE9DC313B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.) Task: {F34B3870-5DD4-4AA2-8593-34B0AB8680BE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2018-11-08] (HP Inc.) Task: {F370F96C-8732-48A7-912B-2752E3E7132C} - System32\Tasks\AdobeAAMUpdater-1.0-RS-Office-xxxxx => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe Task: {F4D529A7-2DCF-479A-8603-7A68B2C4064B} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG Task: {F59BCD11-EEA7-4CC4-912A-FBE023E3F1CC} - System32\Tasks\{B1849062-D7C6-4068-9881-0248F137DBED} => C:\Windows\system32\pcalua.exe -a F:\Setup.exe -d F:\ Task: {F61FC410-59B5-418D-94A7-08AB1C6FBBF4} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG Task: {FC5039D3-B9FA-41EF-BD43-09E9CC992B42} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {FCA5CA3D-5EA4-43E2-9FD3-F623C8EF37DA} - System32\Tasks\HPCustParticipation HP OfficeJet Pro 8710 => C:\Program Files\HP\HP OfficeJet Pro 8710\Bin\HPCustPartic.exe [2018-04-06] (HP Inc.) Task: {FE35B46E-01E8-48D7-A58A-33C80B27B252} - System32\Tasks\ASUS\ASUS Mobilink Execute => C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\ASUS Mobilink.exe [2010-11-25] (ASUSTeK Computer Inc.) Task: {FE46248B-DEED-412B-A733-F9963D4953EC} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\Connect.job => C:\Program Files (x86)\MAGIX\Connect\connect.exe Task: C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-3837192191-2688150623-3177619377-1000.job => C:\Users\xxxxx\AppData\Local\GoToMeeting\10996\g2mupdate.exe Task: C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-3837192191-2688150623-3177619377-1000.job => C:\Users\xxxxx\AppData\Local\GoToMeeting\10996\g2mupload.exe Task: C:\WINDOWS\Tasks\HPCeeScheduleForxxxxx.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe-CheckUpdate(Tracker Software Products (Canada) Ltd.Kee ==================== Verknüpfungen & WMI ======================== (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2018-04-12 00:34 - 2018-04-12 00:34 - 000491744 _____ () C:\Windows\System32\InputHost.dll 2015-03-14 01:48 - 2012-06-21 07:25 - 000113152 _____ () C:\WINDOWS\System32\redmon64.dll 2010-12-02 03:15 - 2010-12-02 03:15 - 000915584 _____ () C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe 2010-11-03 10:30 - 2010-11-03 10:30 - 000918144 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe 2015-03-13 20:52 - 2010-10-21 10:52 - 000586880 _____ () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe 2016-10-06 22:02 - 2018-02-07 07:21 - 004538368 _____ () C:\Program Files (x86)\FreeStyle Libre\MAS.FreeStyleLibre.exe 2018-10-17 15:34 - 2018-07-19 21:16 - 001314856 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll 2018-04-12 00:34 - 2018-04-12 00:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll 2018-04-12 00:34 - 2018-04-12 00:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll 2018-10-17 15:34 - 2018-07-19 21:15 - 095437352 _____ () C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll 2018-11-13 21:39 - 2018-11-01 07:55 - 002185216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2018-11-13 20:35 - 2018-11-13 20:35 - 000183808 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe 2018-11-13 20:35 - 2018-11-13 20:35 - 000019456 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\SkypeProxiesAndStubs.dll 2018-10-04 13:37 - 2018-10-04 13:37 - 000009216 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\ImagePipelineNative.dll 2018-11-13 20:35 - 2018-11-13 20:35 - 000060416 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\ChakraBridge.dll 2018-11-13 20:35 - 2018-11-13 20:35 - 010873344 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\LibWrapper.dll 2018-11-13 20:35 - 2018-11-13 20:35 - 002834432 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\skypert.dll 2018-11-13 20:35 - 2018-11-13 20:35 - 000685568 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.34.81.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll 2018-10-17 15:34 - 2018-07-19 21:15 - 003029032 _____ () C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\swiftshader\libglesv2.dll 2018-10-17 15:34 - 2018-07-19 21:15 - 000149544 _____ () C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\swiftshader\libegl.dll 2018-07-11 04:56 - 2018-07-11 04:56 - 001922224 _____ () C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.10314.31700.1000_x64__8wekyb3d8bbwe\Microsoft.Applications.Telemetry.Windows.dll 2018-10-27 03:13 - 2018-10-27 03:14 - 000019968 _____ () C:\Program Files\WindowsApps\AudibleInc.AudibleforWindowsPhone_10.5.49.0_x64__xns73kv1ymhp2\AudibleRT.WindowsPhone.exe 2018-10-27 03:13 - 2018-10-27 03:13 - 041113088 _____ () C:\Program Files\WindowsApps\AudibleInc.AudibleforWindowsPhone_10.5.49.0_x64__xns73kv1ymhp2\AudibleRT.WindowsPhone.dll 2018-06-22 14:03 - 2018-06-22 14:03 - 001123840 _____ () C:\Program Files\WindowsApps\AudibleInc.AudibleforWindowsPhone_10.5.49.0_x64__xns73kv1ymhp2\e_sqlite3.dll 2018-10-27 03:13 - 2018-10-27 03:14 - 000052224 _____ () C:\Program Files\WindowsApps\AudibleInc.AudibleforWindowsPhone_10.5.49.0_x64__xns73kv1ymhp2\AudibleSystemFileWrapperRT.dll 2018-08-30 19:38 - 2018-08-30 19:38 - 004445248 _____ () C:\Program Files\WindowsApps\AudibleInc.AudibleforWindowsPhone_10.5.49.0_x64__xns73kv1ymhp2\Microsoft.UI.Xaml.dll 2018-10-23 18:55 - 2018-10-23 18:55 - 035118592 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\Video.UI.exe 2018-10-23 18:55 - 2018-10-23 18:55 - 000290816 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\SharedUI.dll 2018-10-23 18:55 - 2018-10-23 18:55 - 005987328 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\EntCommon.dll 2017-09-26 13:21 - 2017-09-26 13:21 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2018-10-23 18:55 - 2018-10-23 18:55 - 009064448 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.13811.0_x64__8wekyb3d8bbwe\EntPlat.dll 2015-03-13 20:51 - 2018-11-19 23:52 - 000025600 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.13\PEbiosinterface32.dll 2015-03-13 20:51 - 2010-06-29 03:58 - 000104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.13\ATKEX.dll 2015-02-06 17:40 - 2015-02-06 17:40 - 001301696 _____ () C:\Program Files (x86)\VMware\VMware Player\libxml2.dll 2018-10-17 15:34 - 2018-07-19 21:16 - 001032744 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll 2015-03-13 20:53 - 2010-11-25 15:12 - 000086016 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\AsNetlib.dll 2015-03-13 20:53 - 2010-11-25 15:12 - 000661504 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\aaHMLib.dll 2015-03-13 20:53 - 2010-11-25 15:12 - 000253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pngio.dll 2015-03-13 20:53 - 2010-11-25 15:12 - 000208896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\ImageHelper.dll 2015-03-13 20:56 - 2010-11-19 04:06 - 000094208 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\IccLibDll.dll 2015-03-13 20:56 - 2011-03-04 09:33 - 000053248 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\HookKey32.dll 2015-03-13 20:56 - 2009-05-21 10:14 - 000253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\pngio.dll 2015-03-13 20:52 - 2011-02-24 10:19 - 000143360 _____ () C:\Program Files (x86)\ASUS\AI Suite II\AssistFunc.dll 2015-03-13 20:52 - 2010-06-21 15:21 - 000208896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ImageHelper.dll 2015-03-13 20:52 - 2009-08-12 20:15 - 000253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\pngio.dll 2015-03-13 20:53 - 2010-10-15 17:40 - 001031680 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Update\Update.dll 2015-03-13 20:52 - 2011-03-23 15:05 - 000964608 _____ () C:\Program Files (x86)\ASUS\AI Suite II\BarGadget\BarGadget.dll 2015-03-13 20:54 - 2011-01-19 21:23 - 001655296 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Bluetooth Go!\BluetoothGo.dll 2015-03-13 20:55 - 2010-12-01 12:33 - 001244672 _____ () C:\Program Files (x86)\ASUS\AI Suite II\MyLogo\MyLogo.dll 2015-03-13 20:56 - 2011-01-06 10:38 - 001027072 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Probe_II\ProbeII.dll 2015-03-13 20:52 - 2011-01-13 16:47 - 000881152 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\Sensor.dll 2015-03-13 20:52 - 2011-04-07 17:33 - 001607168 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor Graph\SensorGraph.dll 2015-03-13 20:52 - 2011-01-07 16:39 - 001246208 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Settings\Settings.dll 2015-03-13 20:52 - 2010-08-06 18:11 - 000850944 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Splitter\Splitter.dll 2015-03-13 20:52 - 2010-08-06 18:13 - 000886272 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TabGadget\TabGadget.dll 2015-03-13 20:51 - 2010-08-23 03:17 - 000662016 _____ () C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMLib.dll 2015-03-13 20:52 - 2010-06-21 15:21 - 000208896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\ImageHelper.dll 2011-02-19 01:10 - 2011-02-19 01:10 - 001818624 _____ () C:\Program Files (x86)\MyPhoneExplorer\IconLib.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) AlternateDataStreams: C:\ProgramData:18E09477A156DCF9 [217] AlternateDataStreams: C:\Users\All Users:18E09477A156DCF9 [217] AlternateDataStreams: C:\ProgramData\Anwendungsdaten:18E09477A156DCF9 [217] AlternateDataStreams: C:\ProgramData\PACE:6B8B6B826B21358C [217] ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) IE trusted site: HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\localhost -> localhost ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\Control Panel\Desktop\\Wallpaper -> d:\eigene dateien\eigene bilder\sundown_1600x1200.jpg DNS Servers: 195.34.133.21 - 212.186.211.21 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Keine Datei) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt. HKLM\...\StartupApproved\StartupFolder: => "ACCU-CHEK 360 Connection Manager.lnk" HKLM\...\StartupApproved\StartupFolder: => "ACCU-CHEK Connect Geräteschnittstelle.lnk" HKLM\...\StartupApproved\Run: => "RtHDVCpl" HKLM\...\StartupApproved\Run: => "FirefaceMixTray2" HKLM\...\StartupApproved\Run: => "AthBtTray" HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0" HKLM\...\StartupApproved\Run32: => "ABBYY Screenshot Reader Retail" HKLM\...\StartupApproved\Run32: => "APSDaemon" HKLM\...\StartupApproved\Run32: => "HP Software Update" HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKLM\...\StartupApproved\Run32: => "KORG USB-MIDI Driver" HKLM\...\StartupApproved\Run32: => "QuickTime Task" HKLM\...\StartupApproved\Run32: => "UATrayIcon" HKLM\...\StartupApproved\Run32: => "UAPerfMon" HKLM\...\StartupApproved\Run32: => "JMB36X IDE Setup" HKLM\...\StartupApproved\Run32: => "Bonus.SSR.FR12" HKLM\...\StartupApproved\Run32: => "FreeStyleLibreautorunexe" HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe" HKLM\...\StartupApproved\Run32: => "KiesTrayAgent" HKLM\...\StartupApproved\Run32: => "Aimersoft Helper Compact.exe" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\StartupFolder: => "An OneNote senden.lnk" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "CCleaner Monitoring" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "Polar FlowSync" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "Remote Control Editor" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "HP Officejet Pro 8620 (NET)" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "TomTomHOME.exe" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "Lingoes" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "QMxNetworkSync" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "MP3 Skype recorder" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "MyDriveConnect.exe" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "Avanquest Message" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "HP OfficeJet Pro 8710 (NET)" HKU\S-1-5-21-3837192191-2688150623-3177619377-1000\...\StartupApproved\Run: => "Skype for Desktop" ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [{7303F5EC-8D09-4809-9938-EC07065036DC}] => (Allow) C:\Program Files\HP\HP OfficeJet Pro 8710\Bin\HPNetworkCommunicatorCom.exe FirewallRules: [{70EE7A19-67A6-4F1E-A6F7-C67C32FD8740}] => (Allow) C:\Program Files\HP\HP OfficeJet Pro 8710\Bin\DeviceSetup.exe FirewallRules: [{FD882F9A-28FA-4536-B213-F147FFEA82B6}] => (Allow) C:\Program Files\HP\HP OfficeJet Pro 8710\bin\FaxPrinterUtility.exe FirewallRules: [{8E6BB16D-E2A3-41C6-A2D4-676DF42A9CA1}] => (Allow) C:\Program Files\HP\HP OfficeJet Pro 8710\bin\SendAFax.exe FirewallRules: [{64D441EB-973D-4DF3-A878-CCDA84E5E186}] => (Allow) C:\Program Files\HP\HP OfficeJet Pro 8710\bin\DigitalWizards.exe FirewallRules: [{ADAEAD1F-A83F-4036-ACA9-3216BD4E5F06}] => (Allow) C:\Program Files\HP\HP OfficeJet Pro 8710\bin\FaxApplications.exe FirewallRules: [{CDC3199E-5C51-4D56-A311-16272D278151}] => (Allow) C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe FirewallRules: [{C3E49B51-95F8-4EA8-85BA-F3447A5BACB2}] => (Allow) C:\Program Files\Steinberg\Cubase 9\Cubase9.exe FirewallRules: [{9A08BF1C-763D-4C28-967A-6AC0CBC3F28B}] => (Allow) LPort=51113 FirewallRules: [{D9CF824E-79CF-4D24-B6F0-B3D1147540D9}] => (Allow) LPort=51112 FirewallRules: [{7EFA9ED4-36E1-4154-8984-380BB3AAA7C6}] => (Allow) LPort=51111 FirewallRules: [{0264E8DF-1F97-4E08-989C-B64EFABC4FFC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{F9B97853-8B8A-4A3A-8A31-8FD61A62322F}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{C92BFD48-0B01-4F73-ADAE-50D0DB9CB3F6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{A8655947-7AFA-4699-B28D-14A97DEB9057}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{B32E25B0-C09A-4DD5-9D38-D754B5DC751E}] => (Allow) C:\Program Files (x86)\MAGIX\Video deluxe 2014 Plus\videodeluxe.exe FirewallRules: [{C78DC9EA-89AA-4BBA-829E-365E55459E06}] => (Allow) C:\Program Files (x86)\MAGIX\Video deluxe 2014 Plus\videodeluxe.exe FirewallRules: [UDP Query User{1E972E70-F2C9-4F4D-977E-08699D94B9BB}C:\windows\system32\totalmixfx.exe] => (Allow) C:\windows\system32\totalmixfx.exe FirewallRules: [TCP Query User{552F0C7C-E917-4841-913D-66E32BEDD77A}C:\windows\system32\totalmixfx.exe] => (Allow) C:\windows\system32\totalmixfx.exe FirewallRules: [{3F15D328-3C39-4476-9B38-1B1D725CB395}] => (Allow) LPort=5354 FirewallRules: [{29BFCB03-22DA-41B2-A7C8-5701B07F4D62}] => (Allow) LPort=5354 FirewallRules: [{4D8F6C56-C7EF-4A23-BDC5-A1783E24281D}] => (Allow) LPort=5354 FirewallRules: [{7E339C72-2CF7-4A09-B846-98FD58E5624D}] => (Allow) LPort=5354 FirewallRules: [{DE9B01A8-02D2-47C9-9D78-09CD4D7763D6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{1FB62AD6-B79C-4CC4-B3F0-7AD3B63F6B89}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{E6A16672-A4AE-452D-B3B1-AD262D42D8D0}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\VersionCheck\VersionCheck.exe FirewallRules: [{4ADE219C-5F1F-4170-99AB-C13AA4194B2D}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\VersionCheck\VersionCheck.exe FirewallRules: [{B18EF35E-C635-4CC9-AD47-4A2FA8120FE7}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe FirewallRules: [{FA83A48F-9E3F-4495-B807-9597733D1FCC}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe FirewallRules: [{03E82E18-5060-497A-B592-CFFA5A0F6499}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\CinergyDvr.exe FirewallRules: [{4F6CD7E2-366F-47BC-9ED2-FF48122F16A3}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\CinergyDvr.exe FirewallRules: [{B40000F1-10A2-4C00-A68D-AF567298F992}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\InstTool.exe FirewallRules: [{AB45B824-4CE1-4C55-83BA-23CFB0FE7C50}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\InstTool.exe FirewallRules: [{C9E37327-C8E9-48DE-9D59-6CF3B5F71DA0}] => (Allow) C:\bb\BBHelper\BandinaBoxServer.exe FirewallRules: [{5A4D2A7D-9946-40F9-BFF5-8787AB7904E3}] => (Allow) C:\bb\BBHelper\BandinaBoxServer.exe FirewallRules: [{6C42674C-D284-4862-88F9-09BB3E8FC992}] => (Allow) K:\bb\BBHelper\BandinaBoxServer.exe FirewallRules: [{BADA8387-F25D-4A60-997C-306679A8D832}] => (Allow) K:\bb\BBHelper\BandinaBoxServer.exe FirewallRules: [{F56C41B0-6B95-49C5-ACCE-5760DE58D01B}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe FirewallRules: [{8DB2DCA6-15E3-4891-BEF1-ED85AED9F9CB}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe FirewallRules: [{064D86F7-81ED-457B-A653-36051CC7B82D}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe FirewallRules: [{067BFFC7-E3B1-4237-803B-5B4869CA257A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{562DCCB2-1137-4624-A65D-80FFBA5FFCC6}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{16D2D2AD-D55E-4475-8306-CDEDDEF36152}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{05E1372B-2F7F-4D1F-A967-413E452B0837}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{D0A590BC-6C56-45C2-8BAA-AA5D8C6ADD81}] => (Allow) C:\Program Files\Steinberg\Cubase 7\Cubase7.exe FirewallRules: [{6BADB1B9-0141-48A6-94A6-57F357972DB3}] => (Allow) LPort=51113 FirewallRules: [{18110699-223B-4ACB-BBC6-7075B347C56F}] => (Allow) LPort=51112 FirewallRules: [{173C70E6-82EF-4F31-85B1-405D9C95E54C}] => (Allow) LPort=51111 FirewallRules: [{9E204933-332A-4B9C-ADD9-08CF714903E1}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe FirewallRules: [{DCFA8255-84B4-4FE9-9009-3B44249BA1B7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{925EBB46-9100-40F9-90F8-D93BA11B9B67}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe FirewallRules: [{6DC070BE-2406-4853-83F6-AF47C23F0979}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe FirewallRules: [TCP Query User{F9E5FC7F-9FD6-4758-87F4-0D5E97D4E44B}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe FirewallRules: [UDP Query User{AACDB14A-AF40-4939-BC73-616718F2AA2A}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe FirewallRules: [{7C9E1D46-836D-45BB-B90E-16557887A984}] => (Block) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe FirewallRules: [{16F0B7D0-909D-460B-A4E1-6D96CA184495}] => (Block) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe FirewallRules: [{3CC67F23-D6DB-4583-87E8-195592B26C51}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\CinergyDvr.exe FirewallRules: [{06B98CF7-3E05-4389-86D5-333A97E41315}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\CinergyDvr.exe FirewallRules: [{F6D411BE-8106-498A-9E07-68B59E3D1597}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe FirewallRules: [{BE870776-F538-4654-BF13-74CAE0C8464D}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe FirewallRules: [{9F24E919-135E-4ABA-9DFD-8F9D6632368F}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\InstTool.exe FirewallRules: [{E49D89A4-769D-48B3-96C6-AFB07ADF5C22}] => (Allow) C:\Program Files (x86)\TERRATEC\TerraTec Home Cinema\InstTool.exe FirewallRules: [{535DFBD5-08EB-4925-B1F3-796EB60004C7}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\FaxApplications.exe FirewallRules: [{752AE614-88DE-4455-8DEC-B0742EF7C1D3}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\DigitalWizards.exe FirewallRules: [{D66348BC-017C-4EB2-AD0F-1A2F59E9A8B8}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\SendAFax.exe FirewallRules: [{7D061DA3-58E7-4536-9BB0-C75F6CAE034A}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\Bin\DeviceSetup.exe FirewallRules: [{4D2EA4C8-4CEE-4E08-BDD0-8349C1B26B5B}] => (Allow) LPort=5357 FirewallRules: [{46A4F905-B700-4497-972A-A4A30503EB11}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\Bin\HPNetworkCommunicatorCom.exe FirewallRules: [{D3D3FF1B-2DBB-4E60-9113-ABA0CA92ABE7}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe FirewallRules: [{0D3D800F-3F78-4D5F-A200-50E1627ADCF5}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe FirewallRules: [{BD5CA351-D95C-462C-8B04-13DFC3A335B1}] => (Allow) C:\Program Files\Common Files\MAGIX Services\MxCloudSync\MxCloudSync.exe FirewallRules: [{ADF11896-0695-44F6-9309-F67975367D70}] => (Allow) C:\Program Files\Common Files\MAGIX Services\QMxNetworkSync\QMxNetworkSync.exe FirewallRules: [{1E713B5C-0868-4B8C-B94E-9A8F000DD16C}] => (Allow) C:\Program Files (x86)\MAGIX\Music Maker\25\MusicMaker.exe FirewallRules: [{3ECDD1E9-13E1-4C2B-8B81-B22298E9D724}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe FirewallRules: [{75C9F332-0AF6-454B-9D0F-ADAF365FBAAE}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe FirewallRules: [{F9E28840-969D-46E3-BC38-77416BD3014E}] => (Allow) C:\Program Files (x86)\Multilizer\MultilizerPDFTranslator\PDFTRanslationWizard.exe FirewallRules: [{98CC572F-8FA9-4680-92F7-AC1690E11BD0}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe FirewallRules: [{DEBC383F-2349-4157-B5D1-E14792FBD1C3}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe FirewallRules: [{C490FAC7-6FE5-4154-BCF7-AC0E90DB9856}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe FirewallRules: [{6C34499C-81DD-4986-86F5-39BEDAE26562}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{7159A9C9-1028-4D5E-9957-94011BEDB68D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{01AF5A12-BE3C-4EDA-A44D-5A2157466ADA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{1F8026A4-95B5-4EBF-8238-658E0132758C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{F44A98BC-DD87-40DF-9C64-82B9FC1DBEF9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{2942D0D4-B8FA-4538-A0CF-18F0663CD42A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{05C8E5C7-A14D-43EE-AD10-5FD007CDD6B2}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite Titanium.SP2\RpcAgentSrv.exe FirewallRules: [{AFD9D7C7-30F9-4BAA-AD80-F4B93F552D70}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite Titanium.SP2\WNt600x64\RpcSandraSrv.exe FirewallRules: [{18469DE5-6A36-4CB5-BAF2-287D3B6E5EE7}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Wiederherstellungspunkte ========================= 17-11-2018 09:00:07 Geplanter Prüfpunkt ==================== Fehlerhafte Geräte im Gerätemanager ============= Name: Unbekanntes USB-Gerät (Fehler beim Anfordern einer Gerätebeschreibung.) Description: Unbekanntes USB-Gerät (Fehler beim Anfordern einer Gerätebeschreibung.) Class Guid: {36fc9e60-c465-11cf-8056-444553540000} Manufacturer: (Standard-USB-Hostcontroller) Service: Problem: : Windows has stopped this device because it has reported problems. (Code 43) Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (11/19/2018 10:37:56 PM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: RS-OFFICE) Description: httphttp-2147467263 Error: (11/19/2018 04:32:16 PM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: RS-OFFICE) Description: httphttp-2147467263 Error: (11/19/2018 06:46:22 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (11/19/2018 01:34:08 AM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: RS-OFFICE) Description: httphttp-2147467263 Error: (11/19/2018 01:26:11 AM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: RS-OFFICE) Description: httphttp-2147467263 Error: (11/19/2018 01:09:27 AM) (Source: Perflib) (EventID: 1008) (User: ) Description: Die Open-Prozedur für den Dienst "WmiApRpl" in der DLL "C:\WINDOWS\system32\wbem\wmiaprpl.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode. Error: (11/19/2018 01:09:27 AM) (Source: PerfNet) (EventID: 2004) (User: ) Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode. Error: (11/19/2018 01:09:27 AM) (Source: Perflib) (EventID: 1008) (User: ) Description: Die Open-Prozedur für den Dienst "MSDTC" in der DLL "C:\WINDOWS\system32\msdtcuiu.DLL" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode. Systemfehler: ============= Error: (11/19/2018 11:55:25 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Start" für die COM-Serveranwendung mit der CLSID Windows.SecurityCenter.WscBrokerManager und der APPID Nicht verfügbar im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (11/19/2018 11:52:51 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} und der APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (11/19/2018 11:52:51 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} und der APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (11/19/2018 11:52:51 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} und der APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (11/19/2018 11:51:55 PM) (Source: DCOM) (EventID: 10010) (User: RS-OFFICE) Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (11/19/2018 11:51:55 PM) (Source: DCOM) (EventID: 10010) (User: RS-OFFICE) Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (11/19/2018 11:51:54 PM) (Source: DCOM) (EventID: 10010) (User: RS-OFFICE) Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (11/19/2018 11:51:54 PM) (Source: DCOM) (EventID: 10010) (User: RS-OFFICE) Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. CodeIntegrity: =================================== Date: 2018-11-17 08:38:01.293 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements. Date: 2018-11-17 08:38:01.274 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements. Date: 2018-11-17 08:38:01.247 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements. Date: 2018-11-17 08:38:01.158 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements. Date: 2018-11-17 08:38:01.147 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements. Date: 2018-11-17 08:38:01.139 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements. Date: 2018-11-17 08:38:00.366 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements. Date: 2018-11-17 08:38:00.235 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements. ==================== Speicherinformationen =========================== Prozessor: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz Prozentuale Nutzung des RAM: 12% Installierter physikalischer RAM: 32735.13 MB Verfügbarer physikalischer RAM: 28617.05 MB Summe virtueller Speicher: 65503.13 MB Verfügbarer virtueller Speicher: 60681.12 MB ==================== Laufwerke ================================ Drive c: () (Fixed) (Total:232.35 GB) (Free:30.4 GB) NTFS Drive d: (Daten) (Fixed) (Total:1863.01 GB) (Free:220.45 GB) NTFS Drive e: (Audio) (Fixed) (Total:1863.01 GB) (Free:431.82 GB) NTFS Drive f: (DVD-Projekt) (CDROM) (Total:3.74 GB) (Free:0 GB) UDF Drive h: (Elements) (Fixed) (Total:1862.98 GB) (Free:76.46 GB) NTFS \\?\Volume{48ea0bbe-c759-11e4-b910-806e6f6e6963}\ (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS \\?\Volume{ca6d39e7-0000-0000-0000-801c3a000000}\ () (Fixed) (Total:0.44 GB) (Free:0.04 GB) NTFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: DBDA6ECA) Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: CE1927CF) Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (MBR Code: Windows 7/8/10) (Size: 232.9 GB) (Disk ID: CA6D39E7) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=232.3 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=450 MB) - (Type=27) ======================================================== Disk: 3 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: 7EFFBCD6) Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS) ==================== Ende von Addition.txt ============================ |
20.11.2018, 10:00 | #15 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Google - Werbe(Fake-)Links legen sich über Suchergebnisse (Firefox und Chrome) Gut Und sry für den Ton, der war Kaspersky geschuldet und nicht dir, bei Kaspersky krieg ich mittlerweile nen Hals in welche Richtung die sich entwickelt haben. Du hast Malwarebytes installiert. Davon möchte ich auch alle Logs mit Funden sehen wenn es denn welche gab.
__________________ Logfiles bitte immer in CODE-Tags posten |
Themen zu Google - Werbe(Fake-)Links legen sich über Suchergebnisse (Firefox und Chrome) |
angezeigt, anzeige, community, dateien, download, firefox, google, hoffe, inhalte, inter, interne, internet, kryptische, legen, links, microsoft, normale, normalen, runterladen, spring, springt, standardbrowser, suchergebnisse, werbe, übersehen |