| |
| |||||||
Log-Analyse und Auswertung: trojaner eingefangen?Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
07.03.2019, 15:30
| #1 |
| |  trojaner eingefangen? Hallo allerseits, bin neu hier. Habe das mulmige Gefühl dass jemand sich Zugriff auf mein PC verschafft hat. Hab vor kurzem ein OTL-Scan als Benutzer gemacht den ich hier poste damit es jemand auswertet und mir weiterhilft.. Vielen Dank im Voraus ! LG OTL.txt Code:
ATTFilter OTL Extras logfile created on: 07.03.2019 14:10:52 - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\bersem\Desktop
Professional (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.17763.0)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,24 Gb Total Physical Memory | 2,22 Gb Available Physical Memory | 68,67% Memory free
7,23 Gb Paging File | 5,19 Gb Available in Paging File | 71,79% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 152,41 Gb Total Space | 27,36 Gb Free Space | 17,95% Space Free | Partition Type: NTFS
Computer Name: USER-PC | User Name: bersem | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\WINDOWS\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\WINDOWS\winhlp32.exe (Microsoft Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office16\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [mplayerc.enqueue] -- "C:\Program Files\K-Lite Codec Pack\MPC-HC\mpc-hc.exe" /add "%1" (MPC-HC Team)
Directory [mplayerc.play] -- "C:\Program Files\K-Lite Codec Pack\MPC-HC\mpc-hc.exe" "%1" (MPC-HC Team)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Powershell] -- powershell.exe -noexit -command Set-Location '%V' (Microsoft Corporation)
Directory [UpdateEncryptionSettings] -- Reg Error: Key error.
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Feature]
"DisableAvCheck" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\CBP]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\DPA]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\SecurityApp]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\SecurityApp\WebProtection]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" = Reg Error: Unknown registry data type -- File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 1
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{42CD32AD-AFD7-4D44-8FE6-23545A9B29AF}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\opera\58.0.3135.68\opera.exe |
"{9717403B-B921-4943-8655-DF2886688336}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\opera\58.0.3135.79\opera.exe |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{08B9FFBE-0A0E-4E9C-B959-32B31524A467}" = dir=out | name=microsoft pay |
"{0BA81A35-1937-4143-A6DB-F7AA7F7FCADE}" = dir=out | name=onenote |
"{12A3AB2B-DA11-434F-B8E6-5112DD12B262}" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"{171494DC-9986-46AC-B430-C45A03C7E78C}" = dir=in | name=onenote |
"{194B80B4-B578-4B65-BFFC-37329E6FF132}" = dir=out | name=@{microsoft.windows.shellexperiencehost_10.0.17763.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.shellexperiencehost/resources/pkgdisplayname} |
"{1D60A15E-2381-4289-9DFB-784A7B71A140}" = dir=in | name=@{microsoft.windows.photos_2019.18114.17710.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} |
"{1E08EE6A-3408-4BB9-90E4-AFC283025E72}" = dir=out | name=xbox game bar |
"{1FC2EF96-B96D-419F-B296-8B44EC842A44}" = dir=out | name=@{microsoft.lockapp_10.0.17763.1_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} |
"{214A75BA-C185-4052-956C-FB36BA6CE75B}" = dir=in | name=@{microsoft.windows.cortana_1.11.5.17763_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} |
"{22C4A797-6520-458B-A7DD-F05F7206C53C}" = dir=out | name=@{microsoft.bingsports_4.28.3242.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/applicationtitlewithbranding} |
"{26F5BC1D-5117-4A72-8B62-E41AE5B39D90}" = dir=in | name=@{microsoft.xboxgamingoverlay_2.26.28001.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.xboxgamingoverlay/resources/gamebar} |
"{36AFE774-165A-49DD-AB11-1878CAB426DF}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.17763.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} |
"{394F0584-C2E2-4E6E-8AE9-D775D4358DE0}" = dir=out | name=windows_ie_ac_001 |
"{3E0FC964-BB81-48C5-B623-96AFD4D504A2}" = dir=out | name=@{microsoft.windowscamera_2018.825.120.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.windowscamera/resources/appstorename} |
"{4114AC8A-EE4F-4FFF-9000-B8D23FD1F808}" = dir=in | name=@{microsoft.windowscommunicationsapps_16005.11231.20192.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} |
"{42F1F3D1-3F1F-45C9-BC2F-72A2440907DF}" = dir=out | name=@{microsoft.desktopappinstaller_1.0.30311.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} |
"{42FE6514-4E46-4EFD-92BC-FDCDAC43A09A}" = dir=in | name=@{microsoft.win32webviewhost_10.0.17763.1_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.win32webviewhost/resources/displayname} |
"{45EC2C87-D837-4734-A7B2-3B9D872BF6DD}" = dir=in | name=microsoft sticky notes |
"{47CBE536-2B8D-43E5-A651-7EF6A7D97F37}" = dir=out | name=@{microsoft.bingfinance_4.28.3242.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/applicationtitlewithbranding} |
"{5077105D-5FF7-43DD-A656-407ED0451EDC}" = dir=out | name=@{microsoft.messaging_4.1901.10241.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} |
"{510F4EF8-37FE-4B62-85D9-93EB8D64943F}" = dir=out | name=@{microsoft.yourphone_1.0.20453.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.yourphone/resources/appname} |
"{583C46D0-665C-4579-923F-E7D0FFE0DBD6}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.17763.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} |
"{5F726B36-1400-4017-9D17-85DA19E1050C}" = dir=in | name=@{microsoft.yourphone_1.0.20453.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.yourphone/resources/appname} |
"{5FE67EC3-FE30-40EF-8810-61484AFA959F}" = dir=out | name=@{microsoft.windowsstore_11811.1001.18.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} |
"{658A7882-FB25-4C8E-BE86-8158477810CD}" = dir=out | name=@{microsoft.storepurchaseapp_11811.1001.18.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.storepurchaseapp/resources/displaytitle} |
"{66C4F343-9045-4F00-A422-51D611FD4AEC}" = protocol=6 | dir=in | app=c:\program files\microsoft\skype for desktop\skype.exe |
"{67D77465-CE4C-4EFE-910B-D70AD7CD4AE5}" = dir=in | name=@{microsoft.windowsstore_11811.1001.18.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} |
"{67E5DCED-37A2-4762-A3F5-F12140C8769C}" = dir=out | name=@{microsoft.xboxgamingoverlay_2.26.28001.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.xboxgamingoverlay/resources/gamebar} |
"{6C167E34-B2FB-4EA9-9DB5-4EA7F8BA53C6}" = dir=in | name=kodi |
"{6D238767-A530-426B-BDF3-14B87802E849}" = dir=out | name=@{microsoft.windows.cortana_1.11.5.17763_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} |
"{70067D1F-5019-43AD-A0BD-CA1A35265337}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.17763.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} |
"{712F56F1-835B-45E8-8301-B1F217EE056F}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.17763.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} |
"{71CFC24F-ECDB-4FF4-B891-DC2DBE4B5FEF}" = dir=in | name=@{microsoft.microsoftedge_44.17763.1.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} |
"{75CC3503-226B-4261-A393-C6C81D4548F2}" = dir=out | name=@{microsoft.windows.secureassessmentbrowser_10.0.17763.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.secureassessmentbrowser/resources/packagedisplayname} |
"{7615E757-E1B2-4E37-AAEE-93385EB76B57}" = dir=in | name=skype |
"{7AA165F7-242D-4C0F-8194-2E55EC285657}" = dir=out | name=microsoft sticky notes |
"{887D27F8-0202-48C5-83CC-999A8A6595F5}" = dir=in | name=@{microsoft.zunemusic_10.19011.11311.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} |
"{8885494F-6B9D-4400-911C-45B15022CB76}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{96977796-1AD9-40B0-8AAE-565E180D469F}" = dir=out | name=@{microsoft.windows.peopleexperiencehost_10.0.17763.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.peopleexperiencehost/resources/pkgdisplayname} |
"{971478B0-6BC6-44DB-B5F4-55E1B6441CF7}" = dir=out | name=@{microsoft.gethelp_10.1706.13371.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.gethelp/resources/appdisplayname} |
"{98C80423-3953-4AA4-89AA-FD587CABA260}" = protocol=17 | dir=in | app=c:\program files\microsoft\skype for desktop\skype.exe |
"{9D17B289-2BAC-4B2A-BD9C-8E1290784352}" = dir=out | name=@{microsoft.oneconnect_5.1902.361.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnectstrings/oneconnect/appstorename} |
"{9F7486A3-B473-4141-9C7C-6CB125F490CC}" = dir=out | name=@{microsoft.zunemusic_10.19011.11311.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} |
"{A4022D16-92CF-4CC9-91C7-7013158E2F9B}" = dir=out | name=@{microsoft.windowsmaps_5.1812.10071.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.windowsmaps/resources/appstorename} |
"{AA240FE6-F8B0-4BA7-9BE0-B3ED7A4C585E}" = dir=out | name=@{microsoft.windows.photos_2019.18114.17710.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} |
"{AEB4618B-6455-4BB4-8767-ABAE8A5B6C20}" = dir=out | name=kodi |
"{B0D72956-7753-4558-9A7E-16C1D76A6ABE}" = dir=out | name=@{microsoft.microsoftedge_44.17763.1.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} |
"{B3868436-87BC-4A34-8F1B-91AC6CA80291}" = dir=out | name=@{microsoft.windows.apprep.chxapp_1000.17763.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.apprep.chxapp/resources/displayname} |
"{B5EE667D-F603-46F1-86E0-A16B6C2DEDDD}" = dir=out | name=@{microsoft.windows.sechealthui_10.0.17763.1_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.sechealthui/resources/packagedisplayname} |
"{B6B11E6B-7695-4B44-9B80-C027CE908CC0}" = dir=out | name=microsoft solitaire collection |
"{BA832173-F728-4DED-A4F8-878AEDDB7817}" = dir=out | name=@{microsoft.ppiprojection_10.0.17763.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} |
"{BB91ECCD-7B3C-460A-8421-88F61F3AFACE}" = dir=in | name=@{microsoft.ppiprojection_10.0.17763.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} |
"{BCD023B7-87AC-4936-9F99-0F3585801667}" = dir=out | name=@{microsoft.windowscalculator_10.1812.10048.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.windowscalculator/resources/appstorename} |
"{BF575D3F-9140-4750-81AD-A7F950B50AFA}" = dir=out | name=@{microsoft.accountscontrol_10.0.17763.1_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} |
"{C06667CE-D489-406D-8852-E9D58D44FBE1}" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"{C0A58834-24EE-4D48-BE41-4479616CFBB6}" = dir=out | name=@{microsoft.bingnews_4.28.3242.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/applicationtitlewithtagline} |
"{C1E2B8A0-584E-4767-8A95-4164325E92F5}" = dir=out | name=xbox tcui |
"{C247DED7-81EA-4507-BBAD-ADE0AF985E15}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.17763.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} |
"{C29E2BF1-92FA-4E70-97AD-0753B5FA7F8C}" = dir=out | name=@{microsoft.zunevideo_10.19021.10411.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} |
"{C2A75908-2E45-40B6-A195-7C077B0D7B83}" = dir=out | name=@{microsoft.win32webviewhost_10.0.17763.1_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.win32webviewhost/resources/displayname} |
"{C4A57CE5-E922-4CF4-80B3-A57C38197C70}" = dir=out | name=skype |
"{C94F8DBD-DD82-40C3-87E0-70EE6C20CBFE}" = dir=in | name=@{microsoft.oneconnect_5.1902.361.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnectstrings/oneconnect/appstorename} |
"{C9D953D8-2C9F-4709-9590-0A943F13A618}" = dir=out | name=@{microsoft.bingweather_4.28.10351.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} |
"{CAFB65EB-C746-43A8-BA76-381B01B28B7D}" = dir=out | name=@{microsoft.windowscommunicationsapps_16005.11231.20192.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} |
"{CD0C587F-DD0E-4C26-95ED-4EB8D2B2B6C9}" = dir=out | name=@{microsoft.windows.oobenetworkcaptiveportal_10.0.17763.1_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.oobenetworkcaptiveportal/resources/appdisplayname} |
"{CDE7CFF6-2F18-42CF-B9C1-269EB4C8D760}" = dir=in | app=c:\program files\common files\apple\apple application support\apsdaemon.exe |
"{D1B1A0FF-D592-48D5-BF4A-5084ECCBF59A}" = dir=in | name=@{microsoft.messaging_4.1901.10241.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} |
"{D874FB33-8140-4DD1-ACB0-F900E0EE7F86}" = dir=in | name=@{microsoft.desktopappinstaller_1.0.30311.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} |
"{DA6B463A-C5CB-43BB-AA50-2B3D271B8B94}" = dir=in | name=microsoft solitaire collection |
"{DC8111BC-ECDD-4C9D-8F22-51284694D5A8}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.17763.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} |
"{DF5122CC-4BA9-4741-A534-7B4F7974D5D2}" = dir=out | name=@{microsoft.windows.narratorquickstart_10.0.17763.1_neutral_neutral_8wekyb3d8bbwe?ms-resource://microsoft.windows.narratorquickstart/resources/appdisplayname} |
"{E8A88052-87E9-4B6E-8D05-60C185BE18A7}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.17763.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} |
"{E9CA8A56-F048-4FAA-A3DB-05014767CDA8}" = dir=out | name=@{microsoft.people_10.1812.10232.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.people/resources/appstorename} |
"{EED6B05C-CD05-4DB0-A1A7-9A9138920963}" = dir=out | name=@{microsoft.getstarted_7.3.20251.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.getstarted/resources/appstorename} |
"{F7573100-213F-4385-BE15-C51068831FCD}" = dir=out | name=shell input application |
"{F84C678E-50CA-46B5-8940-71CA8F3629C1}" = dir=in | name=@{microsoft.zunevideo_10.19021.10411.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{07502F61-F772-48D9-BF95-5A2DA1B756AC}" = PLEOMAX Web Camera
"{08208143-777D-4A06-BB54-71BF0AD1BB70}" = IPTInstaller
"{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1" = Core Temp 1.13
"{097A0B4C-1568-4735-8C3D-4CB265A115C8}" = Viber
"{09E218A5-2C33-4E05-905E-F622440C1F83}_is1" = NetClientOCX Version 6.4.1.0
"{1052502B-4C91-43F9-B160-AE39ED57C9F0}" = Elevated Installer
"{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
"{179324FF-7B16-4BA8-9836-055CAAEE4F08}" = SDFormatter
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{26A24AE4-039D-4CA4-87B4-2F32180102F0}" = Java 8 Update 102
"{27337663-2619-11D4-99DC-0000F49094C7}" = Memory Stick Formatter
"{29BAAF65-09E5-4F52-8D15-2FAF2E23A8DC}" = WinUSB Drivers ext
"{2A3A4BD6-6CE0-4e2a-80D2-1D0FF6ACBFBA}" = LG United Mobile Driver
"{2EDEB67C-6C6C-4767-9E90-B57BFEFD606F}" = Windows Device Recovery Tool 3.11.34101
"{30E6FC43-C31F-4968-9A06-AA38E3C3CF73}" = TomTom HOME
"{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
"{38057B80-AA2C-3359-A048-FC6A5F972997}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU
"{387843EE-375D-4E28-8436-F73E3E3D02D7}" = Maui META 3G ver 6.1316.1
"{3F0F5AB4-C9CE-4226-8393-E9CFF8369D9D}" = Emergency Download Driver
"{3FC90BF7-B316-40DF-819C-A06D70E5ED2E}" = Xperia Companion
"{4412F224-3849-4461-A3E9-DEEF8D252790}" = Visual Studio C++ 10.0 Runtime
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CEEE5D0-F905-4688-B9F9-ECC710507796}" = HTC Driver Installer
"{4DC59BF3-0D72-3CE8-BFEF-1E8FAF689EB0}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x86)
"{4fd02573-5f12-4ae4-8027-c63f8e1115af}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
"{5199DC5B-D596-4FAA-B464-51E57BCB7872}" = Silicon Laboratories CP210x VCP Drivers for Windows XP/2003 Server/Vista/7
"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)
"{537575D6-3B96-474C-BD8F-DFF667363DBD}" = Naviextras Toolbox Prerequesities
"{555868C6-49FB-484F-BB43-8980651A1B00}" = Nero BurnRights 10 Help (CHM)
"{5A659BE5-849B-484E-A83B-DCB78407F3A4}" = Apple Application Support (32-Bit)
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{69BCE4AC-9572-3271-A2FB-9423BDA36A43}" = Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.24215
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{6E83C075-0805-4D11-B403-8BAC84374B81}" = Avira
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7209d085-ed88-4a08-beb2-c49db2b9e838}" = FFU Loader Driver 1.0.0
"{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}" = Smart Switch
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{7A5D731D-B4B3-490E-B339-75685712BAAB}" = Nero Burning ROM 10
"{7E5D2C4B-E9B9-46AA-B5A2-448B29007DDD}" = iTunes
"{80FA650C-6157-4959-9E2B-977CADCBFC3C}" = FFU Loader Driver 1.0.0
"{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}" = Skype Click to Call
"{88547073-C566-4895-9005-EBE98EA3F7C7}" = Samsung Kies3
"{8BE893D4-107C-4867-9B71-A3CF2C917C0E}" = Windows 10 Update and Privacy Settings
"{90160000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2016
"{90160000-0015-0407-0000-0000000FF1CE}" = Microsoft Access MUI (German) 2016
"{90160000-0016-0407-0000-0000000FF1CE}" = Microsoft Excel MUI (German) 2016
"{90160000-0018-0407-0000-0000000FF1CE}" = Microsoft PowerPoint MUI (German) 2016
"{90160000-0019-0407-0000-0000000FF1CE}" = Microsoft Publisher MUI (German) 2016
"{90160000-001A-0407-0000-0000000FF1CE}" = Microsoft Outlook MUI (German) 2016
"{90160000-001B-0407-0000-0000000FF1CE}" = Microsoft Word MUI (German) 2016
"{90160000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Korrekturhilfen 2016 – Deutsch
"{90160000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proofing Tools 2016 - English
"{90160000-001F-040C-0000-0000000FF1CE}" = Outils de vérification linguistique 2016 de Microsoft Office*- Français
"{90160000-001F-0410-0000-0000000FF1CE}" = Strumenti di correzione di Microsoft Office 2016 - Italiano
"{90160000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2016
"{90160000-0044-0407-0000-0000000FF1CE}" = Microsoft InfoPath MUI (German) 2016
"{90160000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2016
"{90160000-0090-0407-0000-0000000FF1CE}" = Microsoft DCF MUI (German) 2016
"{90160000-00A1-0407-0000-0000000FF1CE}" = Microsoft OneNote MUI (German) 2016
"{90160000-00BA-0407-0000-0000000FF1CE}" = Microsoft Groove MUI (German) 2016
"{90160000-00E1-0407-0000-0000000FF1CE}" = Microsoft Office OSM MUI (German) 2016
"{90160000-00E2-0407-0000-0000000FF1CE}" = Microsoft Office OSM UX MUI (German) 2016
"{90160000-012B-0407-0000-0000000FF1CE}" = Microsoft Skype for Business MUI (German) 2016
"{904CCF62-818D-4675-BC76-D37EB399F917}" = Windows Mobile-Gerätecenter
"{943CFD7D-5336-47AF-9418-E02473A5A517}" = Nero BurnRights 10
"{9755918A-CDF8-4F1E-8453-6359CF1A330A}" = WinUsb CoInstallers
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}" = Nero BurningROM 10 Help (CHM)
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D2A75FE-8CE1-4297-AEC1-A097D47BACE9}" = Lumia UEFI Blue Driver
"{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1" = Revo Uninstaller 2.0.5
"{A30EA700-5515-48F0-88B0-9E99DC356B88}" = Apple Software Update
"{A3FEC306-FBFF-4B0D-95B9-F9C67C65079E}" =
"{A4A0B236-6046-4CAB-8177-1EAF61112C75}" = WinUSB Compatible ID Drivers
"{ABDE67C4-5876-4CDB-82A9-0CBACECC1C4A}" = Apple Mobile Device Support
"{AC76BA86-0804-1033-1959-001824311644}" = Adobe Refresh Manager
"{AC76BA86-7AD7-1031-7B44-AC0F074E4100}" = Adobe Acrobat Reader DC - Deutsch
"{B175520C-86A2-35A7-8619-86DC379688B9}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030
"{B4FDB1F4-F79D-4A6A-8CBF-CF638CF6BB63}" = QPST 2.7
"{B69D41C7-8878-4FD4-B0A1-C3F588C0F39B}" = TVCenter
"{BBF2AC74-720C-3CB3-8291-5E34039232FA}" = Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.24215
"{BCC7CA85-E57F-452D-BB44-15A1CE018BD0}" = Garmin Express
"{bd8bd200-9a60-4969-b267-6b565f36e3da}" = Garmin Express
"{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030
"{C0E08D8D-6076-4117-B644-2AF34F35B757}" = Universal Adb Driver
"{c4570e47-39e0-450b-a02c-d64965cbf0f0}" = Windows Device Recovery Tool 3.11.34101
"{C6457771-434B-4955-9944-A9BB1452772C}" = Quamotion iMobileDevice for Windows
"{C9A7E6A6-110D-4DBC-A8E2-F634613B5A8C}_is1" = Mobile Upgrade S Gotu2v5.2.1
"{CCF298AF-9CE1-4B26-B251-486E98A34789}" = Windows 7 USB/DVD Download Tool
"{ce085a78-074e-4823-8dc1-8a721b94b76d}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
"{D045DF86-7FF9-4CF2-919A-7BD172A43AAC}" = Xperia Companion Service
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = Samsung USB Driver for Mobile Phones
"{D168AAD0-6686-47C1-B599-CDD4888B9D1A}" = Bonjour
"{DA9C865D-6762-4931-8588-0B13B7A0796B}" = Garmin Express Tray
"{DE042823-C359-4B87-B66B-308057E8B6AF}" = Camtasia Studio 7
"{e2803110-78b3-4664-a479-3611a381656a}" = Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215
"{E64275CF-27C4-4BC9-8690-2BC2D1C2CF31}" = iCloud
"{E64F69D8-38FE-48B8-95AB-CC676FA636F1}" = ANT Drivers Installer x86
"{E7044E25-3038-4A76-9064-344AC038043E}" = Windows Mobile-Gerätecenter: Treiberupdate
"{efee6944-1231-492a-a157-93409130a098}" = Xperia Companion
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony PC Companion 2.10.303
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
"{fd422d82-916c-4aca-bc42-67b7eb9925c4}" = Avira
"{FE83F463-7E61-4B18-9FA0-B94B90A0B6B9}" = Nero Burning ROM 10
"{FF0EA481-42DB-A8AE-8356-48C09F7D953D}" = Windows IP Over USB
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"01D4AA89568B59E5941907D403E3B682EE413AB7" = Windows-Treiberpaket - Microsoft USBDevice (02/19/2016 1.0.0.0)
"0FC9CED990518C1E946B3B95FD59B3B0785AD9B1" = Windows-Treiberpaket - Gionee Communication Equipment Co.,Ltd. (winusb) AndroidUsbDeviceClass (04/21/2012 1.0.0000.00000)
"17511B846BE9E9EFA71436DFC880EAD7E4CA1A3A" = Windows-Treiberpaket - Gionee (gnusbnet) Net (04/21/2012 1.0.0000.00000)
"1A5F38038762A5BC1BE1542877A474DFFDBF4A49" = Windows-Treiberpaket - Gionee Communication Equipment Co.,Ltd. (WinUSB) AndroidUsbDeviceClass (04/21/2012 1.0.0000.00000)
"3E13462B4D2FE32916015DDA53F5A1DC2BAC9B11" = Windows Driver Package - SpreadTrum (sprd_enum) USB (02/11/2012 2.4.0.27)
"450B7CBC371CAEC6A328083977AA7A09E7AE5D29" = Windows Driver Package - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/27/2012 7.0.0000.00001)
"4D6A4FCE2980678F71AC013D7A3BB39D141EAA26" = Windows-Treiberpaket - libusb-win32 (libusb0) libusb-win32 devices (03/01/2015 1.2.6.0)
"5C5E744460BC89BBF2EB89161A4F60936B22A1B5" = Windows-Treiberpaket - Qualcomm Incorporated (qcusbser) Ports (01/30/2012 2.0.9.1)
"625B1BC24FDCB32BB62A4A7EF2EB2A31E4A0DCC7" = Windows-Treiberpaket - Gionee Communication Equipment Co.,Ltd. (gnusbser) Modem (04/21/2012 1.0.0000.00000)
"6C89719A41410334FF3B6B56B79EC975B9153A07" = Windows-Treiberpaket - libusb-win32 WorldCup_Device (01/18/2012 1.2.6.0)
"78FCD4595A8B18BF01F3375593207912EA704A85" = Windows-Treiberpaket - DriverCoding (DCCOMBUS) USB (01/11/2012 1.0.1.0)
"7-Zip" = 7-Zip 15.12
"9EAF5C6317C122BCD76E5372013631B6C91D06FC" = Windows-Treiberpaket - Gionee Communication Equipment Co.,Ltd. (gnusbser) Ports (04/21/2012 1.0.0000.00000)
"A4A3BF1EC3B48586178C2C6285019B2D9B0670C4" = Windows-Treiberpaket - Qualcomm Incorporated (qcusbser) Modem (01/30/2012 2.0.9.1)
"Adobe Flash Player NPAPI" = Adobe Flash Player 32 NPAPI
"Adobe Flash Player PPAPI" = Adobe Flash Player 32 PPAPI
"Avira Antivirus" = Avira Antivirus
"CCleaner" = CCleaner
"Content Manager" = Content Manager
"CPUID HWMonitor_is1" = CPUID HWMonitor 1.38
"D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2" = Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1)
"D89B66FA53594B71ACB68093FD8CE3B2E8959162" = Windows-Treiberpaket - Qualcomm (qcusbnet) Net (01/30/2012 1.0.7.2)
"dreamboxEDIT" = dreamboxEDIT -- The one and only settings editor for your Dreambox
"ESET Online Scanner" = ESET Online Scanner v3
"F9D2A789F9CFF8CEC36B544F53877C80F1F73C46" = Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201)
"Flashtool" = Flashtool
"Google Chrome" = Google Chrome
"HaaliMkx" = Haali Media Splitter
"HashTab" = HashTab 5.0.0.19
"InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}" = Smart Switch
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}" = Samsung Kies3
"Made4U_is1" = Katalog/MadeForYou v1.6.118
"Microsoft Visual Studio 2010 Tools for Office Runtime (x86)" = Microsoft Visual Studio 2010 Tools for Office Runtime (x86)
"Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU" = Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x86) Language Pack - DEU
"Mozilla Firefox 65.0.2 (x86 de)" = Mozilla Firefox 65.0.2 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MyDriveConnect" = TomTom MyDrive Connect 4.1.5.3181
"NetSurveillance" = NetSurveillance
"Notepad++" = Notepad++
"Office16.PROPLUS" = Microsoft Office Professional Plus 2016
"Opera 58.0.3135.79" = Opera Stable 58.0.3135.79
"plist Editor Pro" = plist Editor Pro 2.1.0
"PotPlayer" = Daum PotPlayer 1.6.54915
"Realterm" = Realterm 2.0.0.70_SignedWrapper
"Skype_is1" = Skype Version 8.40
"SLABCOMM&10C4&EA60" = Silicon Laboratories CP210x USB to UART Bridge (Driver Removal)
"Update Engine" = Sony Mobile Update Engine
"VLC media player" = VLC media player
"Winamp" = Winamp
"WinRAR archiver" = WinRAR 5.30 Beta 3 (32-Bit)
"WorldUnlock Codes Calculator" = WorldUnlock Codes Calculator
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-3889012066-4205385009-3576731210-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{7de2db6a-6f4b-4b45-82b9-57d5d7f1c952}" = Viber
"58d94f3ce2c27db0" = Dell System Detect
"BitTorrent" = BitTorrent
"OneDriveSetup.exe" = Microsoft OneDrive
"uTorrent" = µTorrent
"WhatsApp" = WhatsApp
"Winamp Detect" = Winamp Erkennungs-Plug-in
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 02.03.2019 05:37:34 | Computer Name = user-PC | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Flashtool\FlashTool64.exe".
Die
abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 02.03.2019 05:40:20 | Computer Name = user-PC | Source = SecurityCenter | ID = 17
Description =
Error - 02.03.2019 06:16:33 | Computer Name = user-PC | Source = SecurityCenter | ID = 17
Description =
Error - 02.03.2019 09:37:37 | Computer Name = user-PC | Source = SecurityCenter | ID = 17
Description =
Error - 02.03.2019 13:39:45 | Computer Name = user-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Avira.ServiceHost.exe, Version: 1.2.129.13789,
Zeitstempel: 0x5c63f40d Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0115e6be ID des fehlerhaften
Prozesses: 0x16c Startzeit der fehlerhaften Anwendung: 0x01d4cdf073d28324 Pfad der
fehlerhaften Anwendung: C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe Pfad
des fehlerhaften Moduls: unknown Berichtskennung: 3d14626e-1713-42a5-a8ce-a73099b8e982
Vollständiger
Name des fehlerhaften Pakets: ? Anwendungs-ID, die relativ zum fehlerhaften Paket
ist: ?
Error - 03.03.2019 14:37:56 | Computer Name = user-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Explorer.EXE, Version: 10.0.17763.107,
Zeitstempel: 0x0d9046f5 Name des fehlerhaften Moduls: combase.dll, Version: 10.0.17763.253,
Zeitstempel: 0xa3f81b2d Ausnahmecode: 0xc0000005 Fehleroffset: 0x000859ea ID des fehlerhaften
Prozesses: 0x1f58 Startzeit der fehlerhaften Anwendung: 0x01d4d198b31759e9 Pfad der
fehlerhaften Anwendung: C:\WINDOWS\Explorer.EXE Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\combase.dll
Berichtskennung:
5543eb54-e426-46e4-ae3a-86a2382fe04f Vollständiger Name des fehlerhaften Pakets:
? Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ?
Error - 04.03.2019 16:40:00 | Computer Name = user-PC | Source = Application Hang | ID = 1002
Description = Das Programm LockApp.exe Version 10.0.17763.134 hat die Interaktion
mit Windows beendet und wurde geschlossen. Überprüfen Sie den Problemverlauf in
der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum
Problem zu suchen. Prozess-ID: fa8 Startzeit: 01d4d2614b0d6452 Beendigungszeit: 4294967295
Anwendungspfad:
C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe Bericht-ID: 2998b643-c426-4113-a3f9-387c8873a0ab
Vollständiger
Name des fehlerhaften Pakets: Microsoft.LockApp_10.0.17763.1_neutral__cw5n1h2txyewy
Relative
Anwendungs-ID des fehlerhaften Pakets: WindowsDefaultLockScreen Absturztyp: Quiesce
Error - 06.03.2019 15:25:12 | Computer Name = user-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: CCleaner.exe, Version: 5.50.0.6911,
Zeitstempel: 0x5bfebb34 Name des fehlerhaften Moduls: CCleaner.exe, Version: 5.50.0.6911,
Zeitstempel: 0x5bfebb34 Ausnahmecode: 0xc0000005 Fehleroffset: 0x004ad57d ID des fehlerhaften
Prozesses: 0xa5c Startzeit der fehlerhaften Anwendung: 0x01d4d45206ec9147 Pfad der
fehlerhaften Anwendung: C:\Program Files\CCleaner\CCleaner.exe Pfad des fehlerhaften
Moduls: C:\Program Files\CCleaner\CCleaner.exe Berichtskennung: 0afd84eb-ead7-4cca-bd1c-dfa2fde0ed25
Vollständiger
Name des fehlerhaften Pakets: ? Anwendungs-ID, die relativ zum fehlerhaften Paket
ist: ?
Error - 07.03.2019 09:03:50 | Computer Name = user-PC | Source = Application Hang | ID = 1002
Description = Das Programm OTL.exe Version 3.2.69.0 hat die Interaktion mit Windows
beendet und wurde geschlossen. Überprüfen Sie den Problemverlauf in der Systemsteuerung
"Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID:
2074 Startzeit: 01d4d4e569145746 Beendigungszeit: 4294967295 Anwendungspfad: C:\Users\bersem\Desktop\OTL.exe
Bericht-ID:
ddc0ee02-e73f-4308-b8e5-bb77762ab538 Vollständiger Name des fehlerhaften Pakets:
? Relative Anwendungs-ID des fehlerhaften Pakets: ? Absturztyp: Top level window
is idle
Error - 07.03.2019 09:10:30 | Computer Name = user-PC | Source = Application Hang | ID = 1002
Description = Das Programm OTL.exe Version 3.2.69.0 hat die Interaktion mit Windows
beendet und wurde geschlossen. Überprüfen Sie den Problemverlauf in der Systemsteuerung
"Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID:
1fa0 Startzeit: 01d4d4e673d928ca Beendigungszeit: 4294967295 Anwendungspfad: C:\Users\bersem\Desktop\OTL.exe
Bericht-ID:
e1f3f14b-9705-457e-9d1b-3d67c7839a73 Vollständiger Name des fehlerhaften Pakets:
? Relative Anwendungs-ID des fehlerhaften Pakets: ? Absturztyp: Top level window
is idle
[ Parameters Events ]
OTL encountered an error while reading this event log. It may be corrupt.
[ State Events ]
OTL encountered an error while reading this event log. It may be corrupt.
Error - 06.03.2019 10:03:29 | Computer Name = user-PC | Source = DCOM | ID = 10016
Description =
Error - 06.03.2019 10:03:42 | Computer Name = user-PC | Source = DCOM | ID = 10016
Description =
Error - 06.03.2019 12:19:14 | Computer Name = user-PC | Source = DCOM | ID = 10016
Description =
Error - 06.03.2019 12:19:29 | Computer Name = user-PC | Source = DCOM | ID = 10016
Description =
Error - 06.03.2019 13:49:09 | Computer Name = user-PC | Source = DCOM | ID = 10016
Description =
Error - 06.03.2019 13:49:26 | Computer Name = user-PC | Source = DCOM | ID = 10016
Description =
Error - 06.03.2019 14:15:07 | Computer Name = user-PC | Source = DCOM | ID = 10016
Description =
Error - 06.03.2019 14:15:20 | Computer Name = user-PC | Source = DCOM | ID = 10016
Description =
Error - 07.03.2019 04:37:28 | Computer Name = user-PC | Source = DCOM | ID = 10016
Description =
Error - 07.03.2019 04:37:39 | Computer Name = user-PC | Source = DCOM | ID = 10016
Description =
< End of report >
Code:
ATTFilter OTL Extras logfile created on: 07.03.2019 14:10:52 - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\bersem\Desktop
Professional (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.17763.0)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,24 Gb Total Physical Memory | 2,22 Gb Available Physical Memory | 68,67% Memory free
7,23 Gb Paging File | 5,19 Gb Available in Paging File | 71,79% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 152,41 Gb Total Space | 27,36 Gb Free Space | 17,95% Space Free | Partition Type: NTFS
Computer Name: USER-PC | User Name: bersem | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\WINDOWS\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\WINDOWS\winhlp32.exe (Microsoft Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office16\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [mplayerc.enqueue] -- "C:\Program Files\K-Lite Codec Pack\MPC-HC\mpc-hc.exe" /add "%1" (MPC-HC Team)
Directory [mplayerc.play] -- "C:\Program Files\K-Lite Codec Pack\MPC-HC\mpc-hc.exe" "%1" (MPC-HC Team)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Powershell] -- powershell.exe -noexit -command Set-Location '%V' (Microsoft Corporation)
Directory [UpdateEncryptionSettings] -- Reg Error: Key error.
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Feature]
"DisableAvCheck" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\CBP]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\DPA]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\SecurityApp]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\SecurityApp\WebProtection]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" = Reg Error: Unknown registry data type -- File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 1
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{42CD32AD-AFD7-4D44-8FE6-23545A9B29AF}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\opera\58.0.3135.68\opera.exe |
"{9717403B-B921-4943-8655-DF2886688336}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\opera\58.0.3135.79\opera.exe |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{08B9FFBE-0A0E-4E9C-B959-32B31524A467}" = dir=out | name=microsoft pay |
"{0BA81A35-1937-4143-A6DB-F7AA7F7FCADE}" = dir=out | name=onenote |
"{12A3AB2B-DA11-434F-B8E6-5112DD12B262}" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"{171494DC-9986-46AC-B430-C45A03C7E78C}" = dir=in | name=onenote |
"{194B80B4-B578-4B65-BFFC-37329E6FF132}" = dir=out | name=@{microsoft.windows.shellexperiencehost_10.0.17763.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.shellexperiencehost/resources/pkgdisplayname} |
"{1D60A15E-2381-4289-9DFB-784A7B71A140}" = dir=in | name=@{microsoft.windows.photos_2019.18114.17710.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} |
"{1E08EE6A-3408-4BB9-90E4-AFC283025E72}" = dir=out | name=xbox game bar |
"{1FC2EF96-B96D-419F-B296-8B44EC842A44}" = dir=out | name=@{microsoft.lockapp_10.0.17763.1_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} |
"{214A75BA-C185-4052-956C-FB36BA6CE75B}" = dir=in | name=@{microsoft.windows.cortana_1.11.5.17763_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} |
"{22C4A797-6520-458B-A7DD-F05F7206C53C}" = dir=out | name=@{microsoft.bingsports_4.28.3242.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/applicationtitlewithbranding} |
"{26F5BC1D-5117-4A72-8B62-E41AE5B39D90}" = dir=in | name=@{microsoft.xboxgamingoverlay_2.26.28001.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.xboxgamingoverlay/resources/gamebar} |
"{36AFE774-165A-49DD-AB11-1878CAB426DF}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.17763.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} |
"{394F0584-C2E2-4E6E-8AE9-D775D4358DE0}" = dir=out | name=windows_ie_ac_001 |
"{3E0FC964-BB81-48C5-B623-96AFD4D504A2}" = dir=out | name=@{microsoft.windowscamera_2018.825.120.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.windowscamera/resources/appstorename} |
"{4114AC8A-EE4F-4FFF-9000-B8D23FD1F808}" = dir=in | name=@{microsoft.windowscommunicationsapps_16005.11231.20192.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} |
"{42F1F3D1-3F1F-45C9-BC2F-72A2440907DF}" = dir=out | name=@{microsoft.desktopappinstaller_1.0.30311.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} |
"{42FE6514-4E46-4EFD-92BC-FDCDAC43A09A}" = dir=in | name=@{microsoft.win32webviewhost_10.0.17763.1_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.win32webviewhost/resources/displayname} |
"{45EC2C87-D837-4734-A7B2-3B9D872BF6DD}" = dir=in | name=microsoft sticky notes |
"{47CBE536-2B8D-43E5-A651-7EF6A7D97F37}" = dir=out | name=@{microsoft.bingfinance_4.28.3242.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/applicationtitlewithbranding} |
"{5077105D-5FF7-43DD-A656-407ED0451EDC}" = dir=out | name=@{microsoft.messaging_4.1901.10241.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} |
"{510F4EF8-37FE-4B62-85D9-93EB8D64943F}" = dir=out | name=@{microsoft.yourphone_1.0.20453.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.yourphone/resources/appname} |
"{583C46D0-665C-4579-923F-E7D0FFE0DBD6}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.17763.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} |
"{5F726B36-1400-4017-9D17-85DA19E1050C}" = dir=in | name=@{microsoft.yourphone_1.0.20453.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.yourphone/resources/appname} |
"{5FE67EC3-FE30-40EF-8810-61484AFA959F}" = dir=out | name=@{microsoft.windowsstore_11811.1001.18.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} |
"{658A7882-FB25-4C8E-BE86-8158477810CD}" = dir=out | name=@{microsoft.storepurchaseapp_11811.1001.18.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.storepurchaseapp/resources/displaytitle} |
"{66C4F343-9045-4F00-A422-51D611FD4AEC}" = protocol=6 | dir=in | app=c:\program files\microsoft\skype for desktop\skype.exe |
"{67D77465-CE4C-4EFE-910B-D70AD7CD4AE5}" = dir=in | name=@{microsoft.windowsstore_11811.1001.18.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} |
"{67E5DCED-37A2-4762-A3F5-F12140C8769C}" = dir=out | name=@{microsoft.xboxgamingoverlay_2.26.28001.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.xboxgamingoverlay/resources/gamebar} |
"{6C167E34-B2FB-4EA9-9DB5-4EA7F8BA53C6}" = dir=in | name=kodi |
"{6D238767-A530-426B-BDF3-14B87802E849}" = dir=out | name=@{microsoft.windows.cortana_1.11.5.17763_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} |
"{70067D1F-5019-43AD-A0BD-CA1A35265337}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.17763.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} |
"{712F56F1-835B-45E8-8301-B1F217EE056F}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.17763.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} |
"{71CFC24F-ECDB-4FF4-B891-DC2DBE4B5FEF}" = dir=in | name=@{microsoft.microsoftedge_44.17763.1.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} |
"{75CC3503-226B-4261-A393-C6C81D4548F2}" = dir=out | name=@{microsoft.windows.secureassessmentbrowser_10.0.17763.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.secureassessmentbrowser/resources/packagedisplayname} |
"{7615E757-E1B2-4E37-AAEE-93385EB76B57}" = dir=in | name=skype |
"{7AA165F7-242D-4C0F-8194-2E55EC285657}" = dir=out | name=microsoft sticky notes |
"{887D27F8-0202-48C5-83CC-999A8A6595F5}" = dir=in | name=@{microsoft.zunemusic_10.19011.11311.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} |
"{8885494F-6B9D-4400-911C-45B15022CB76}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{96977796-1AD9-40B0-8AAE-565E180D469F}" = dir=out | name=@{microsoft.windows.peopleexperiencehost_10.0.17763.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.peopleexperiencehost/resources/pkgdisplayname} |
"{971478B0-6BC6-44DB-B5F4-55E1B6441CF7}" = dir=out | name=@{microsoft.gethelp_10.1706.13371.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.gethelp/resources/appdisplayname} |
"{98C80423-3953-4AA4-89AA-FD587CABA260}" = protocol=17 | dir=in | app=c:\program files\microsoft\skype for desktop\skype.exe |
"{9D17B289-2BAC-4B2A-BD9C-8E1290784352}" = dir=out | name=@{microsoft.oneconnect_5.1902.361.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnectstrings/oneconnect/appstorename} |
"{9F7486A3-B473-4141-9C7C-6CB125F490CC}" = dir=out | name=@{microsoft.zunemusic_10.19011.11311.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} |
"{A4022D16-92CF-4CC9-91C7-7013158E2F9B}" = dir=out | name=@{microsoft.windowsmaps_5.1812.10071.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.windowsmaps/resources/appstorename} |
"{AA240FE6-F8B0-4BA7-9BE0-B3ED7A4C585E}" = dir=out | name=@{microsoft.windows.photos_2019.18114.17710.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} |
"{AEB4618B-6455-4BB4-8767-ABAE8A5B6C20}" = dir=out | name=kodi |
"{B0D72956-7753-4558-9A7E-16C1D76A6ABE}" = dir=out | name=@{microsoft.microsoftedge_44.17763.1.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} |
"{B3868436-87BC-4A34-8F1B-91AC6CA80291}" = dir=out | name=@{microsoft.windows.apprep.chxapp_1000.17763.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.apprep.chxapp/resources/displayname} |
"{B5EE667D-F603-46F1-86E0-A16B6C2DEDDD}" = dir=out | name=@{microsoft.windows.sechealthui_10.0.17763.1_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.sechealthui/resources/packagedisplayname} |
"{B6B11E6B-7695-4B44-9B80-C027CE908CC0}" = dir=out | name=microsoft solitaire collection |
"{BA832173-F728-4DED-A4F8-878AEDDB7817}" = dir=out | name=@{microsoft.ppiprojection_10.0.17763.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} |
"{BB91ECCD-7B3C-460A-8421-88F61F3AFACE}" = dir=in | name=@{microsoft.ppiprojection_10.0.17763.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} |
"{BCD023B7-87AC-4936-9F99-0F3585801667}" = dir=out | name=@{microsoft.windowscalculator_10.1812.10048.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.windowscalculator/resources/appstorename} |
"{BF575D3F-9140-4750-81AD-A7F950B50AFA}" = dir=out | name=@{microsoft.accountscontrol_10.0.17763.1_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} |
"{C06667CE-D489-406D-8852-E9D58D44FBE1}" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"{C0A58834-24EE-4D48-BE41-4479616CFBB6}" = dir=out | name=@{microsoft.bingnews_4.28.3242.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/applicationtitlewithtagline} |
"{C1E2B8A0-584E-4767-8A95-4164325E92F5}" = dir=out | name=xbox tcui |
"{C247DED7-81EA-4507-BBAD-ADE0AF985E15}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.17763.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} |
"{C29E2BF1-92FA-4E70-97AD-0753B5FA7F8C}" = dir=out | name=@{microsoft.zunevideo_10.19021.10411.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} |
"{C2A75908-2E45-40B6-A195-7C077B0D7B83}" = dir=out | name=@{microsoft.win32webviewhost_10.0.17763.1_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.win32webviewhost/resources/displayname} |
"{C4A57CE5-E922-4CF4-80B3-A57C38197C70}" = dir=out | name=skype |
"{C94F8DBD-DD82-40C3-87E0-70EE6C20CBFE}" = dir=in | name=@{microsoft.oneconnect_5.1902.361.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnectstrings/oneconnect/appstorename} |
"{C9D953D8-2C9F-4709-9590-0A943F13A618}" = dir=out | name=@{microsoft.bingweather_4.28.10351.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} |
"{CAFB65EB-C746-43A8-BA76-381B01B28B7D}" = dir=out | name=@{microsoft.windowscommunicationsapps_16005.11231.20192.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} |
"{CD0C587F-DD0E-4C26-95ED-4EB8D2B2B6C9}" = dir=out | name=@{microsoft.windows.oobenetworkcaptiveportal_10.0.17763.1_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.oobenetworkcaptiveportal/resources/appdisplayname} |
"{CDE7CFF6-2F18-42CF-B9C1-269EB4C8D760}" = dir=in | app=c:\program files\common files\apple\apple application support\apsdaemon.exe |
"{D1B1A0FF-D592-48D5-BF4A-5084ECCBF59A}" = dir=in | name=@{microsoft.messaging_4.1901.10241.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} |
"{D874FB33-8140-4DD1-ACB0-F900E0EE7F86}" = dir=in | name=@{microsoft.desktopappinstaller_1.0.30311.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} |
"{DA6B463A-C5CB-43BB-AA50-2B3D271B8B94}" = dir=in | name=microsoft solitaire collection |
"{DC8111BC-ECDD-4C9D-8F22-51284694D5A8}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.17763.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} |
"{DF5122CC-4BA9-4741-A534-7B4F7974D5D2}" = dir=out | name=@{microsoft.windows.narratorquickstart_10.0.17763.1_neutral_neutral_8wekyb3d8bbwe?ms-resource://microsoft.windows.narratorquickstart/resources/appdisplayname} |
"{E8A88052-87E9-4B6E-8D05-60C185BE18A7}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.17763.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} |
"{E9CA8A56-F048-4FAA-A3DB-05014767CDA8}" = dir=out | name=@{microsoft.people_10.1812.10232.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.people/resources/appstorename} |
"{EED6B05C-CD05-4DB0-A1A7-9A9138920963}" = dir=out | name=@{microsoft.getstarted_7.3.20251.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.getstarted/resources/appstorename} |
"{F7573100-213F-4385-BE15-C51068831FCD}" = dir=out | name=shell input application |
"{F84C678E-50CA-46B5-8940-71CA8F3629C1}" = dir=in | name=@{microsoft.zunevideo_10.19021.10411.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{07502F61-F772-48D9-BF95-5A2DA1B756AC}" = PLEOMAX Web Camera
"{08208143-777D-4A06-BB54-71BF0AD1BB70}" = IPTInstaller
"{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1" = Core Temp 1.13
"{097A0B4C-1568-4735-8C3D-4CB265A115C8}" = Viber
"{09E218A5-2C33-4E05-905E-F622440C1F83}_is1" = NetClientOCX Version 6.4.1.0
"{1052502B-4C91-43F9-B160-AE39ED57C9F0}" = Elevated Installer
"{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
"{179324FF-7B16-4BA8-9836-055CAAEE4F08}" = SDFormatter
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{26A24AE4-039D-4CA4-87B4-2F32180102F0}" = Java 8 Update 102
"{27337663-2619-11D4-99DC-0000F49094C7}" = Memory Stick Formatter
"{29BAAF65-09E5-4F52-8D15-2FAF2E23A8DC}" = WinUSB Drivers ext
"{2A3A4BD6-6CE0-4e2a-80D2-1D0FF6ACBFBA}" = LG United Mobile Driver
"{2EDEB67C-6C6C-4767-9E90-B57BFEFD606F}" = Windows Device Recovery Tool 3.11.34101
"{30E6FC43-C31F-4968-9A06-AA38E3C3CF73}" = TomTom HOME
"{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
"{38057B80-AA2C-3359-A048-FC6A5F972997}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU
"{387843EE-375D-4E28-8436-F73E3E3D02D7}" = Maui META 3G ver 6.1316.1
"{3F0F5AB4-C9CE-4226-8393-E9CFF8369D9D}" = Emergency Download Driver
"{3FC90BF7-B316-40DF-819C-A06D70E5ED2E}" = Xperia Companion
"{4412F224-3849-4461-A3E9-DEEF8D252790}" = Visual Studio C++ 10.0 Runtime
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CEEE5D0-F905-4688-B9F9-ECC710507796}" = HTC Driver Installer
"{4DC59BF3-0D72-3CE8-BFEF-1E8FAF689EB0}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x86)
"{4fd02573-5f12-4ae4-8027-c63f8e1115af}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
"{5199DC5B-D596-4FAA-B464-51E57BCB7872}" = Silicon Laboratories CP210x VCP Drivers for Windows XP/2003 Server/Vista/7
"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)
"{537575D6-3B96-474C-BD8F-DFF667363DBD}" = Naviextras Toolbox Prerequesities
"{555868C6-49FB-484F-BB43-8980651A1B00}" = Nero BurnRights 10 Help (CHM)
"{5A659BE5-849B-484E-A83B-DCB78407F3A4}" = Apple Application Support (32-Bit)
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{69BCE4AC-9572-3271-A2FB-9423BDA36A43}" = Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.24215
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{6E83C075-0805-4D11-B403-8BAC84374B81}" = Avira
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7209d085-ed88-4a08-beb2-c49db2b9e838}" = FFU Loader Driver 1.0.0
"{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}" = Smart Switch
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{7A5D731D-B4B3-490E-B339-75685712BAAB}" = Nero Burning ROM 10
"{7E5D2C4B-E9B9-46AA-B5A2-448B29007DDD}" = iTunes
"{80FA650C-6157-4959-9E2B-977CADCBFC3C}" = FFU Loader Driver 1.0.0
"{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}" = Skype Click to Call
"{88547073-C566-4895-9005-EBE98EA3F7C7}" = Samsung Kies3
"{8BE893D4-107C-4867-9B71-A3CF2C917C0E}" = Windows 10 Update and Privacy Settings
"{90160000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2016
"{90160000-0015-0407-0000-0000000FF1CE}" = Microsoft Access MUI (German) 2016
"{90160000-0016-0407-0000-0000000FF1CE}" = Microsoft Excel MUI (German) 2016
"{90160000-0018-0407-0000-0000000FF1CE}" = Microsoft PowerPoint MUI (German) 2016
"{90160000-0019-0407-0000-0000000FF1CE}" = Microsoft Publisher MUI (German) 2016
"{90160000-001A-0407-0000-0000000FF1CE}" = Microsoft Outlook MUI (German) 2016
"{90160000-001B-0407-0000-0000000FF1CE}" = Microsoft Word MUI (German) 2016
"{90160000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Korrekturhilfen 2016 – Deutsch
"{90160000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proofing Tools 2016 - English
"{90160000-001F-040C-0000-0000000FF1CE}" = Outils de vérification linguistique 2016 de Microsoft Office*- Français
"{90160000-001F-0410-0000-0000000FF1CE}" = Strumenti di correzione di Microsoft Office 2016 - Italiano
"{90160000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2016
"{90160000-0044-0407-0000-0000000FF1CE}" = Microsoft InfoPath MUI (German) 2016
"{90160000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2016
"{90160000-0090-0407-0000-0000000FF1CE}" = Microsoft DCF MUI (German) 2016
"{90160000-00A1-0407-0000-0000000FF1CE}" = Microsoft OneNote MUI (German) 2016
"{90160000-00BA-0407-0000-0000000FF1CE}" = Microsoft Groove MUI (German) 2016
"{90160000-00E1-0407-0000-0000000FF1CE}" = Microsoft Office OSM MUI (German) 2016
"{90160000-00E2-0407-0000-0000000FF1CE}" = Microsoft Office OSM UX MUI (German) 2016
"{90160000-012B-0407-0000-0000000FF1CE}" = Microsoft Skype for Business MUI (German) 2016
"{904CCF62-818D-4675-BC76-D37EB399F917}" = Windows Mobile-Gerätecenter
"{943CFD7D-5336-47AF-9418-E02473A5A517}" = Nero BurnRights 10
"{9755918A-CDF8-4F1E-8453-6359CF1A330A}" = WinUsb CoInstallers
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}" = Nero BurningROM 10 Help (CHM)
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D2A75FE-8CE1-4297-AEC1-A097D47BACE9}" = Lumia UEFI Blue Driver
"{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1" = Revo Uninstaller 2.0.5
"{A30EA700-5515-48F0-88B0-9E99DC356B88}" = Apple Software Update
"{A3FEC306-FBFF-4B0D-95B9-F9C67C65079E}" =
"{A4A0B236-6046-4CAB-8177-1EAF61112C75}" = WinUSB Compatible ID Drivers
"{ABDE67C4-5876-4CDB-82A9-0CBACECC1C4A}" = Apple Mobile Device Support
"{AC76BA86-0804-1033-1959-001824311644}" = Adobe Refresh Manager
"{AC76BA86-7AD7-1031-7B44-AC0F074E4100}" = Adobe Acrobat Reader DC - Deutsch
"{B175520C-86A2-35A7-8619-86DC379688B9}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030
"{B4FDB1F4-F79D-4A6A-8CBF-CF638CF6BB63}" = QPST 2.7
"{B69D41C7-8878-4FD4-B0A1-C3F588C0F39B}" = TVCenter
"{BBF2AC74-720C-3CB3-8291-5E34039232FA}" = Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.24215
"{BCC7CA85-E57F-452D-BB44-15A1CE018BD0}" = Garmin Express
"{bd8bd200-9a60-4969-b267-6b565f36e3da}" = Garmin Express
"{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030
"{C0E08D8D-6076-4117-B644-2AF34F35B757}" = Universal Adb Driver
"{c4570e47-39e0-450b-a02c-d64965cbf0f0}" = Windows Device Recovery Tool 3.11.34101
"{C6457771-434B-4955-9944-A9BB1452772C}" = Quamotion iMobileDevice for Windows
"{C9A7E6A6-110D-4DBC-A8E2-F634613B5A8C}_is1" = Mobile Upgrade S Gotu2v5.2.1
"{CCF298AF-9CE1-4B26-B251-486E98A34789}" = Windows 7 USB/DVD Download Tool
"{ce085a78-074e-4823-8dc1-8a721b94b76d}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
"{D045DF86-7FF9-4CF2-919A-7BD172A43AAC}" = Xperia Companion Service
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = Samsung USB Driver for Mobile Phones
"{D168AAD0-6686-47C1-B599-CDD4888B9D1A}" = Bonjour
"{DA9C865D-6762-4931-8588-0B13B7A0796B}" = Garmin Express Tray
"{DE042823-C359-4B87-B66B-308057E8B6AF}" = Camtasia Studio 7
"{e2803110-78b3-4664-a479-3611a381656a}" = Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215
"{E64275CF-27C4-4BC9-8690-2BC2D1C2CF31}" = iCloud
"{E64F69D8-38FE-48B8-95AB-CC676FA636F1}" = ANT Drivers Installer x86
"{E7044E25-3038-4A76-9064-344AC038043E}" = Windows Mobile-Gerätecenter: Treiberupdate
"{efee6944-1231-492a-a157-93409130a098}" = Xperia Companion
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony PC Companion 2.10.303
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
"{fd422d82-916c-4aca-bc42-67b7eb9925c4}" = Avira
"{FE83F463-7E61-4B18-9FA0-B94B90A0B6B9}" = Nero Burning ROM 10
"{FF0EA481-42DB-A8AE-8356-48C09F7D953D}" = Windows IP Over USB
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"01D4AA89568B59E5941907D403E3B682EE413AB7" = Windows-Treiberpaket - Microsoft USBDevice (02/19/2016 1.0.0.0)
"0FC9CED990518C1E946B3B95FD59B3B0785AD9B1" = Windows-Treiberpaket - Gionee Communication Equipment Co.,Ltd. (winusb) AndroidUsbDeviceClass (04/21/2012 1.0.0000.00000)
"17511B846BE9E9EFA71436DFC880EAD7E4CA1A3A" = Windows-Treiberpaket - Gionee (gnusbnet) Net (04/21/2012 1.0.0000.00000)
"1A5F38038762A5BC1BE1542877A474DFFDBF4A49" = Windows-Treiberpaket - Gionee Communication Equipment Co.,Ltd. (WinUSB) AndroidUsbDeviceClass (04/21/2012 1.0.0000.00000)
"3E13462B4D2FE32916015DDA53F5A1DC2BAC9B11" = Windows Driver Package - SpreadTrum (sprd_enum) USB (02/11/2012 2.4.0.27)
"450B7CBC371CAEC6A328083977AA7A09E7AE5D29" = Windows Driver Package - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/27/2012 7.0.0000.00001)
"4D6A4FCE2980678F71AC013D7A3BB39D141EAA26" = Windows-Treiberpaket - libusb-win32 (libusb0) libusb-win32 devices (03/01/2015 1.2.6.0)
"5C5E744460BC89BBF2EB89161A4F60936B22A1B5" = Windows-Treiberpaket - Qualcomm Incorporated (qcusbser) Ports (01/30/2012 2.0.9.1)
"625B1BC24FDCB32BB62A4A7EF2EB2A31E4A0DCC7" = Windows-Treiberpaket - Gionee Communication Equipment Co.,Ltd. (gnusbser) Modem (04/21/2012 1.0.0000.00000)
"6C89719A41410334FF3B6B56B79EC975B9153A07" = Windows-Treiberpaket - libusb-win32 WorldCup_Device (01/18/2012 1.2.6.0)
"78FCD4595A8B18BF01F3375593207912EA704A85" = Windows-Treiberpaket - DriverCoding (DCCOMBUS) USB (01/11/2012 1.0.1.0)
"7-Zip" = 7-Zip 15.12
"9EAF5C6317C122BCD76E5372013631B6C91D06FC" = Windows-Treiberpaket - Gionee Communication Equipment Co.,Ltd. (gnusbser) Ports (04/21/2012 1.0.0000.00000)
"A4A3BF1EC3B48586178C2C6285019B2D9B0670C4" = Windows-Treiberpaket - Qualcomm Incorporated (qcusbser) Modem (01/30/2012 2.0.9.1)
"Adobe Flash Player NPAPI" = Adobe Flash Player 32 NPAPI
"Adobe Flash Player PPAPI" = Adobe Flash Player 32 PPAPI
"Avira Antivirus" = Avira Antivirus
"CCleaner" = CCleaner
"Content Manager" = Content Manager
"CPUID HWMonitor_is1" = CPUID HWMonitor 1.38
"D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2" = Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1)
"D89B66FA53594B71ACB68093FD8CE3B2E8959162" = Windows-Treiberpaket - Qualcomm (qcusbnet) Net (01/30/2012 1.0.7.2)
"dreamboxEDIT" = dreamboxEDIT -- The one and only settings editor for your Dreambox
"ESET Online Scanner" = ESET Online Scanner v3
"F9D2A789F9CFF8CEC36B544F53877C80F1F73C46" = Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201)
"Flashtool" = Flashtool
"Google Chrome" = Google Chrome
"HaaliMkx" = Haali Media Splitter
"HashTab" = HashTab 5.0.0.19
"InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}" = Smart Switch
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}" = Samsung Kies3
"Made4U_is1" = Katalog/MadeForYou v1.6.118
"Microsoft Visual Studio 2010 Tools for Office Runtime (x86)" = Microsoft Visual Studio 2010 Tools for Office Runtime (x86)
"Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU" = Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x86) Language Pack - DEU
"Mozilla Firefox 65.0.2 (x86 de)" = Mozilla Firefox 65.0.2 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MyDriveConnect" = TomTom MyDrive Connect 4.1.5.3181
"NetSurveillance" = NetSurveillance
"Notepad++" = Notepad++
"Office16.PROPLUS" = Microsoft Office Professional Plus 2016
"Opera 58.0.3135.79" = Opera Stable 58.0.3135.79
"plist Editor Pro" = plist Editor Pro 2.1.0
"PotPlayer" = Daum PotPlayer 1.6.54915
"Realterm" = Realterm 2.0.0.70_SignedWrapper
"Skype_is1" = Skype Version 8.40
"SLABCOMM&10C4&EA60" = Silicon Laboratories CP210x USB to UART Bridge (Driver Removal)
"Update Engine" = Sony Mobile Update Engine
"VLC media player" = VLC media player
"Winamp" = Winamp
"WinRAR archiver" = WinRAR 5.30 Beta 3 (32-Bit)
"WorldUnlock Codes Calculator" = WorldUnlock Codes Calculator
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-3889012066-4205385009-3576731210-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{7de2db6a-6f4b-4b45-82b9-57d5d7f1c952}" = Viber
"58d94f3ce2c27db0" = Dell System Detect
"BitTorrent" = BitTorrent
"OneDriveSetup.exe" = Microsoft OneDrive
"uTorrent" = µTorrent
"WhatsApp" = WhatsApp
"Winamp Detect" = Winamp Erkennungs-Plug-in
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 02.03.2019 05:37:34 | Computer Name = user-PC | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Flashtool\FlashTool64.exe".
Die
abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 02.03.2019 05:40:20 | Computer Name = user-PC | Source = SecurityCenter | ID = 17
Description =
Error - 02.03.2019 06:16:33 | Computer Name = user-PC | Source = SecurityCenter | ID = 17
Description =
Error - 02.03.2019 09:37:37 | Computer Name = user-PC | Source = SecurityCenter | ID = 17
Description =
Error - 02.03.2019 13:39:45 | Computer Name = user-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Avira.ServiceHost.exe, Version: 1.2.129.13789,
Zeitstempel: 0x5c63f40d Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0115e6be ID des fehlerhaften
Prozesses: 0x16c Startzeit der fehlerhaften Anwendung: 0x01d4cdf073d28324 Pfad der
fehlerhaften Anwendung: C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe Pfad
des fehlerhaften Moduls: unknown Berichtskennung: 3d14626e-1713-42a5-a8ce-a73099b8e982
Vollständiger
Name des fehlerhaften Pakets: ? Anwendungs-ID, die relativ zum fehlerhaften Paket
ist: ?
Error - 03.03.2019 14:37:56 | Computer Name = user-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Explorer.EXE, Version: 10.0.17763.107,
Zeitstempel: 0x0d9046f5 Name des fehlerhaften Moduls: combase.dll, Version: 10.0.17763.253,
Zeitstempel: 0xa3f81b2d Ausnahmecode: 0xc0000005 Fehleroffset: 0x000859ea ID des fehlerhaften
Prozesses: 0x1f58 Startzeit der fehlerhaften Anwendung: 0x01d4d198b31759e9 Pfad der
fehlerhaften Anwendung: C:\WINDOWS\Explorer.EXE Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\combase.dll
Berichtskennung:
5543eb54-e426-46e4-ae3a-86a2382fe04f Vollständiger Name des fehlerhaften Pakets:
? Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ?
Error - 04.03.2019 16:40:00 | Computer Name = user-PC | Source = Application Hang | ID = 1002
Description = Das Programm LockApp.exe Version 10.0.17763.134 hat die Interaktion
mit Windows beendet und wurde geschlossen. Überprüfen Sie den Problemverlauf in
der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum
Problem zu suchen. Prozess-ID: fa8 Startzeit: 01d4d2614b0d6452 Beendigungszeit: 4294967295
Anwendungspfad:
C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe Bericht-ID: 2998b643-c426-4113-a3f9-387c8873a0ab
Vollständiger
Name des fehlerhaften Pakets: Microsoft.LockApp_10.0.17763.1_neutral__cw5n1h2txyewy
Relative
Anwendungs-ID des fehlerhaften Pakets: WindowsDefaultLockScreen Absturztyp: Quiesce
Error - 06.03.2019 15:25:12 | Computer Name = user-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: CCleaner.exe, Version: 5.50.0.6911,
Zeitstempel: 0x5bfebb34 Name des fehlerhaften Moduls: CCleaner.exe, Version: 5.50.0.6911,
Zeitstempel: 0x5bfebb34 Ausnahmecode: 0xc0000005 Fehleroffset: 0x004ad57d ID des fehlerhaften
Prozesses: 0xa5c Startzeit der fehlerhaften Anwendung: 0x01d4d45206ec9147 Pfad der
fehlerhaften Anwendung: C:\Program Files\CCleaner\CCleaner.exe Pfad des fehlerhaften
Moduls: C:\Program Files\CCleaner\CCleaner.exe Berichtskennung: 0afd84eb-ead7-4cca-bd1c-dfa2fde0ed25
Vollständiger
Name des fehlerhaften Pakets: ? Anwendungs-ID, die relativ zum fehlerhaften Paket
ist: ?
Error - 07.03.2019 09:03:50 | Computer Name = user-PC | Source = Application Hang | ID = 1002
Description = Das Programm OTL.exe Version 3.2.69.0 hat die Interaktion mit Windows
beendet und wurde geschlossen. Überprüfen Sie den Problemverlauf in der Systemsteuerung
"Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID:
2074 Startzeit: 01d4d4e569145746 Beendigungszeit: 4294967295 Anwendungspfad: C:\Users\bersem\Desktop\OTL.exe
Bericht-ID:
ddc0ee02-e73f-4308-b8e5-bb77762ab538 Vollständiger Name des fehlerhaften Pakets:
? Relative Anwendungs-ID des fehlerhaften Pakets: ? Absturztyp: Top level window
is idle
Error - 07.03.2019 09:10:30 | Computer Name = user-PC | Source = Application Hang | ID = 1002
Description = Das Programm OTL.exe Version 3.2.69.0 hat die Interaktion mit Windows
beendet und wurde geschlossen. Überprüfen Sie den Problemverlauf in der Systemsteuerung
"Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID:
1fa0 Startzeit: 01d4d4e673d928ca Beendigungszeit: 4294967295 Anwendungspfad: C:\Users\bersem\Desktop\OTL.exe
Bericht-ID:
e1f3f14b-9705-457e-9d1b-3d67c7839a73 Vollständiger Name des fehlerhaften Pakets:
? Relative Anwendungs-ID des fehlerhaften Pakets: ? Absturztyp: Top level window
is idle
[ Parameters Events ]
OTL encountered an error while reading this event log. It may be corrupt.
[ State Events ]
OTL encountered an error while reading this event log. It may be corrupt.
Error - 06.03.2019 10:03:29 | Computer Name = user-PC | Source = DCOM | ID = 10016
Description =
Error - 06.03.2019 10:03:42 | Computer Name = user-PC | Source = DCOM | ID = 10016
Description =
Error - 06.03.2019 12:19:14 | Computer Name = user-PC | Source = DCOM | ID = 10016
Description =
Error - 06.03.2019 12:19:29 | Computer Name = user-PC | Source = DCOM | ID = 10016
Description =
Error - 06.03.2019 13:49:09 | Computer Name = user-PC | Source = DCOM | ID = 10016
Description =
Error - 06.03.2019 13:49:26 | Computer Name = user-PC | Source = DCOM | ID = 10016
Description =
Error - 06.03.2019 14:15:07 | Computer Name = user-PC | Source = DCOM | ID = 10016
Description =
Error - 06.03.2019 14:15:20 | Computer Name = user-PC | Source = DCOM | ID = 10016
Description =
Error - 07.03.2019 04:37:28 | Computer Name = user-PC | Source = DCOM | ID = 10016
Description =
Error - 07.03.2019 04:37:39 | Computer Name = user-PC | Source = DCOM | ID = 10016
Description =
< End of report >
|
|
07.03.2019, 15:42
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | trojaner eingefangen? Was soll denn der Quatsch mit OTL, wo kommst du auf sowas, das verwenden wir schon seit Jahren nicht mehr.
__________________
__________________ |
|
07.03.2019, 15:49
| #3 |
| | trojaner eingefangen? Hier noch die FRST Logs:
__________________FRST.txt Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version: 06-03-2019
durchgeführt von bersem (Administrator) auf USER-PC (07-03-2019 15:41:07)
Gestartet von C:\Users\bersem\Desktop
Geladene Profile: bersem (Verfügbare Profile: bersem)
Platform: Microsoft Windows 10 Pro Version 1809 17763.316 (X86) Sprache: Deutsch (Deutschland)
Standard-Browser: Opera
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\ProtectedService.exe
(ALCPU -> ALCPU) C:\Program Files\Core Temp\Core Temp.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avgnt.exe
() [Datei ist nicht signiert] C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19021.10411.0_x86__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
() [Datei ist nicht signiert] C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18114.17710.0_x86__8wekyb3d8bbwe\Microsoft.Photos.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [Avira SystrayStartTrigger] => C:\Program Files\Avira\Launcher\Avira.SystrayStartTrigger.exe [98024 2019-02-13] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2018-11-26] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\MountPoints2: {2b47a8bc-2170-11e9-9561-0019b917a34a} - "E:\AutoRun.exe"
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\MountPoints2: {2b47a8c5-2170-11e9-9561-0019b917a34a} - "F:\AutoRun.exe"
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\MountPoints2: {8e06f798-d7e7-11e5-93f6-0019b917a34a} - "E:\Lenovo_Suite.exe"
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\MountPoints2: {bd190897-2cad-11e9-9563-0019b917a34a} - "E:\Lenovo_Suite.exe"
HKLM\...\Drivers32: [VIDC.LAGS] => C:\WINDOWS\system32\lagarith.dll [216064 2011-12-07] ( ) [Datei ist nicht signiert]
HKLM\...\Drivers32: [VIDC.X264] => C:\WINDOWS\system32\x264vfw.dll [3591680 2015-02-28] (x264vfw project) [Datei ist nicht signiert]
HKLM\...\Drivers32: [VIDC.XVID] => C:\WINDOWS\system32\xvidvfw.dll [240128 2015-06-22] () [Datei ist nicht signiert]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\WINDOWS\system32\ac3acm.acm [122880 2012-07-21] (fccHandler) [Datei ist nicht signiert]
HKLM\...\Drivers32: [VIDC.FFDS] => C:\WINDOWS\system32\ff_vfw.dll [112128 2015-10-05] () [Datei ist nicht signiert]
HKLM\...\Drivers32: [VIDC.VP80] => vp8vfw.dll
HKLM\...\Drivers32: [vidc.tscc] => C:\WINDOWS\system32\tsccvid.dll [411480 2010-06-22] (TechSmith Corporation -> TechSmith Corporation)
GroupPolicy: Beschränkung ? <==== ACHTUNG
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{787f2e0b-3330-47c4-826f-0a69b6f42e50}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{a80db799-801b-48b3-a46e-a06cffe106c7}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{da10d2c0-e027-4492-96ae-cf5487a957e9}: [DhcpNameServer] 195.96.0.4 195.70.224.45
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
SearchScopes: HKU\S-1-5-21-3889012066-4205385009-3576731210-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
SearchScopes: HKU\S-1-5-21-3889012066-4205385009-3576731210-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2019-01-16] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_102\bin\ssv.dll [2016-09-14] (Oracle America, Inc. -> Oracle Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2018-07-22] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_102\bin\jp2ssv.dll [2016-09-14] (Oracle America, Inc. -> Oracle Corporation)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2018-04-10] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2018-04-10] (Microsoft Corporation -> Microsoft Corporation)
FireFox:
========
FF DefaultProfile: nqeec3p1.default-1510762528092
FF ProfilePath: C:\Users\bersem\AppData\Roaming\TomTom\HOME\Profiles\9sbr1qnc.default [2017-05-24]
FF Extension: (Emulator) - C:\Users\bersem\AppData\Roaming\TomTom\HOME\Profiles\9sbr1qnc.default\Extensions\Navcore.8.351.9982@tomtom.com [2017-05-22] [Legacy] [ist nicht signiert]
FF ProfilePath: C:\Users\bersem\AppData\Roaming\Mozilla\Firefox\Profiles\nqeec3p1.default-1510762528092 [2019-03-06]
FF Homepage: Mozilla\Firefox\Profiles\nqeec3p1.default-1510762528092 -> google.de
FF Extension: (Avira Browserschutz) - C:\Users\bersem\AppData\Roaming\Mozilla\Firefox\Profiles\nqeec3p1.default-1510762528092\Extensions\abs@avira.com.xpi [2019-01-15]
FF Extension: (Tab Auto Refresh) - C:\Users\bersem\AppData\Roaming\Mozilla\Firefox\Profiles\nqeec3p1.default-1510762528092\Extensions\{7fee47a1-8299-4576-90bf-5fd88d756926}.xpi [2018-12-09]
FF Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\bersem\AppData\Roaming\Mozilla\Firefox\Profiles\nqeec3p1.default-1510762528092\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-01-23]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_32_0_0_101.dll [2018-12-05] (Adobe Systems Incorporated -> )
FF Plugin: @java.com/DTPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\dtplugin\npDeployJava1.dll [2016-09-14] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\plugin2\npjp2.dll [2016-09-14] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2018-04-10] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-16] (Google Inc -> Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-16] (Google Inc -> Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-02-01] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin: JFGuide -> C:\Program Files\NetSurveillance\CMS\npGuide.dll [2016-07-04] () [Datei ist nicht signiert]
FF Plugin: JFWeb -> C:\Program Files\NetSurveillance\CMS\npWebPlugin.dll [2016-07-04] () [Datei ist nicht signiert]
Chrome:
=======
CHR StartupUrls: Default -> "hxxp://google.de/"
CHR Profile: C:\Users\bersem\AppData\Local\Google\Chrome\User Data\Default [2019-03-07]
CHR Extension: (Präsentationen) - C:\Users\bersem\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Docs) - C:\Users\bersem\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\bersem\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-06-01]
CHR Extension: (YouTube) - C:\Users\bersem\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-06-07]
CHR Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\bersem\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2019-01-23]
CHR Extension: (Tabellen) - C:\Users\bersem\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Avira Browserschutz) - C:\Users\bersem\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2019-01-07]
CHR Extension: (Google Docs Offline) - C:\Users\bersem\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-17]
CHR Extension: (Skype) - C:\Users\bersem\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2018-01-03]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\bersem\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-16]
CHR Extension: (Google Mail) - C:\Users\bersem\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-06-07]
CHR Extension: (Chrome Media Router) - C:\Users\bersem\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-12-10]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S2 AntiVirMailService; C:\Program Files\Avira\Antivirus\avmailc7.exe [893008 2019-03-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntivirProtectedService; C:\Program Files\Avira\Antivirus\ProtectedService.exe [314264 2019-03-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\Antivirus\sched.exe [248312 2019-03-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\Antivirus\avguard.exe [248312 2019-03-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\Antivirus\avwebg7.exe [1191152 2019-03-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 Avira.ServiceHost; C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe [453888 2019-02-13] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S3 Garmin Device Interaction Service; C:\Program Files\Garmin\Device Interaction Service\GarminService.exe [1099280 2017-03-28] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries)
R2 IpOverUsbSvc; C:\Program Files\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21184 2015-11-20] (Microsoft Corporation -> Microsoft Corporation)
S4 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [503080 2010-05-04] (Nero AG -> Nero AG)
S4 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () [Datei ist nicht signiert]
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3593264 2019-01-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155520 2015-06-10] (Sony Mobile Communications AB -> Avanquest Software) [Datei ist nicht signiert]
S2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1812.3-0\NisSrv.exe [3183440 2018-12-18] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1812.3-0\MsMpEng.exe [91776 2018-12-18] (Microsoft Corporation -> Microsoft Corporation)
S4 Wind_Italy MIFI40 Modem Device Helper; C:\Program Files\Wind_Italy\MW40\BackgroundService\ServiceManager.exe [76584 2014-12-11] (JRD COMMUNICATION (SHENZHEN) LTD -> )
S4 XperiaCompanionService; C:\Program Files\Sony\Xperia Companion\Service\XperiaCompanionService.exe [1431424 2016-12-22] (Sony Mobile Communications AB -> Sony) [Datei ist nicht signiert]
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 ALSysIO; C:\Users\bersem\AppData\Local\Temp\ALSysIO.sys [46896 2019-02-16] (ALCPU (Arthur Liberman) -> Arthur Liberman) <==== ACHTUNG
S3 AndnetBus; C:\WINDOWS\System32\drivers\lgandnetbus.sys [24576 2015-05-12] (Microsoft Windows Hardware Compatibility Publisher -> LG Electronics Inc.)
S3 AndNetDiag; C:\WINDOWS\system32\DRIVERS\lgandnetdiag.sys [25088 2015-05-12] (Microsoft Windows Hardware Compatibility Publisher -> LG Electronics Inc.)
S3 ANDNetModem; C:\WINDOWS\system32\DRIVERS\lgandnetmodem.sys [30208 2015-05-12] (Microsoft Windows Hardware Compatibility Publisher -> LG Electronics Inc.)
S3 andnetndis; C:\WINDOWS\System32\drivers\lgandnetndis.sys [74752 2015-05-12] (Microsoft Windows Hardware Compatibility Publisher -> LG Electronics Inc.)
R0 avdevprot; C:\WINDOWS\System32\DRIVERS\avdevprot.sys [66280 2019-03-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S0 avelam; C:\WINDOWS\System32\drivers\avelam.sys [19776 2019-03-02] (Microsoft Windows Early Launch Anti-Malware Publisher -> Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [157240 2019-03-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [176072 2019-03-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [54440 2019-03-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [78808 2019-03-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\WINDOWS\System32\Drivers\avusbflt.sys [43304 2019-03-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S3 awUSB; C:\WINDOWS\System32\drivers\USBDrv.sys [14936 2013-01-25] (Allwinner Technology Co.,Ltd. -> Scott)
R3 azvusb; C:\WINDOWS\System32\drivers\azvusb.sys [44544 2009-08-24] (Microsoft Windows Hardware Compatibility Publisher -> AzureWave Technologies, Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [109184 2017-01-16] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 hsCDFiDrv; C:\WINDOWS\system32\DRIVERS\hsCDFiDrv.sys [5248 2010-07-21] () [Datei ist nicht signiert]
R3 igfx; C:\WINDOWS\system32\DRIVERS\igdkmd32.sys [4815872 2012-03-23] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
R1 ISODrive; C:\Program Files\UltraISO\drivers\ISODrive.sys [82168 2013-11-21] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [230120 2018-12-12] (Malwarebytes Corporation -> Malwarebytes)
R3 PhilCap; C:\WINDOWS\system32\DRIVERS\PhilCap.sys [908832 2015-10-20] (NXP Semiconductors Germany GmbH -> NXP Semiconductors Germany GmbH)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [17160 2015-03-05] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [13064 2015-03-05] (MiniTool Solution Ltd -> )
S3 qcfilter; C:\WINDOWS\System32\drivers\qcusbfilter.sys [39456 2015-09-25] (Microsoft Windows Hardware Compatibility Publisher -> QUALCOMM Incorporated)
S3 qcusbser; C:\WINDOWS\system32\DRIVERS\qcusbser.sys [216632 2017-03-15] (Microsoft Windows Hardware Compatibility Publisher -> QUALCOMM Incorporated)
S3 smhwser; C:\WINDOWS\system32\DRIVERS\smhwser.sys [108032 2013-04-03] (QUALCOMM Incorporated) [Datei ist nicht signiert]
S3 sprd_acm_modem; C:\WINDOWS\system32\DRIVERS\sprd_acm.sys [67712 2011-08-22] (SpreadTrum) [Datei ist nicht signiert]
S3 sprd_enum; C:\WINDOWS\System32\drivers\sprd_enum.sys [84224 2011-08-22] (SpreadTrum) [Datei ist nicht signiert]
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [147072 2017-01-16] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 USBAAPL; C:\WINDOWS\System32\Drivers\usbaapl.sys [45056 2016-03-28] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S3 usbbus; C:\WINDOWS\System32\drivers\lgusbbus.sys [13056 2014-05-27] (Microsoft Windows Hardware Compatibility Publisher -> LG Electronics Inc.)
S3 UsbDiag; C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys [20864 2014-05-27] (Microsoft Windows Hardware Compatibility Publisher -> LG Electronics Inc.)
S3 USBModem; C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys [25216 2014-05-27] (Microsoft Windows Hardware Compatibility Publisher -> LG Electronics Inc.)
S3 usbUDisc; C:\WINDOWS\System32\drivers\USBDrv.sys [14936 2013-01-25] (Allwinner Technology Co.,Ltd. -> Scott)
S3 VBoxNetAdp; C:\WINDOWS\System32\drivers\VBoxNetAdp6.sys [171104 2017-09-13] (Oracle Corporation -> Oracle Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [38488 2018-12-18] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [266424 2018-12-18] (Microsoft Windows -> Microsoft Corporation)
S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [128704 2016-08-16] (NGO -> MBB)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [47800 2018-12-18] (Microsoft Windows -> Microsoft Corporation)
S3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [192512 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
S3 ZSMC302; C:\WINDOWS\System32\Drivers\usbvm302.sys [90214 2004-03-30] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd.)
S0 A9951442; system32\drivers\A9951442.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2019-03-07 15:41 - 2019-03-07 15:42 - 000021446 _____ C:\Users\bersem\Desktop\FRST.txt
2019-03-07 15:35 - 2019-03-07 15:35 - 001793536 _____ (Farbar) C:\Users\bersem\Desktop\FRST.exe
2019-03-07 13:57 - 2019-03-07 14:05 - 000602112 _____ (OldTimer Tools) C:\Users\bersem\Desktop\OTL.exe
2019-03-02 14:38 - 2019-03-02 14:36 - 000019776 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avelam.sys
2019-02-28 19:02 - 2019-02-28 19:02 - 000000000 ____D C:\Users\bersem\AppData\Local\Viber
2019-02-22 17:21 - 2019-02-22 17:21 - 000001151 _____ C:\Users\Public\Desktop\Avira.lnk
2019-02-16 10:47 - 2019-02-16 10:47 - 000000020 ___SH C:\Users\bersem\ntuser.ini
2019-02-13 18:14 - 2019-02-01 23:31 - 000835480 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2019-02-13 18:14 - 2019-02-01 23:31 - 000179600 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2019-02-13 18:13 - 2019-02-13 18:13 - 000000000 ____D C:\WINDOWS\Panther
2019-02-13 11:49 - 2019-02-13 11:49 - 020812288 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 019023872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 007897088 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 006901048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-02-13 11:49 - 2019-02-13 11:49 - 006070272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 005112792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 004627456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 003922944 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 003743744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 003550384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 002942464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 002782208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 002701312 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 002466304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 002449920 _____ (Microsoft Corporation) C:\WINDOWS\system32\tellib.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 002392576 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 002323904 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 002275888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 002174264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2019-02-13 11:49 - 2019-02-13 11:49 - 002137912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2019-02-13 11:49 - 2019-02-13 11:49 - 002038608 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 001902592 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 001856000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 001725440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 001653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 001484800 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 001463424 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 001357528 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2019-02-13 11:49 - 2019-02-13 11:49 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msjet40.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 001309184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 001290752 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 001289192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 001219424 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2019-02-13 11:49 - 2019-02-13 11:49 - 001105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 001094440 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2019-02-13 11:49 - 2019-02-13 11:49 - 001012224 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000994272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2019-02-13 11:49 - 2019-02-13 11:49 - 000981304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2019-02-13 11:49 - 2019-02-13 11:49 - 000913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000841528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2019-02-13 11:49 - 2019-02-13 11:49 - 000833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000830976 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000806560 _____ C:\WINDOWS\system32\locale.nls
2019-02-13 11:49 - 2019-02-13 11:49 - 000794112 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000765960 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000762272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000667856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000663040 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000652288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2019-02-13 11:49 - 2019-02-13 11:49 - 000651776 _____ (Microsoft Corporation) C:\WINDOWS\system32\assignedaccessmanagersvc.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000580024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000493568 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000481792 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000451896 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2019-02-13 11:49 - 2019-02-13 11:49 - 000442384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2019-02-13 11:49 - 2019-02-13 11:49 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000394552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2019-02-13 11:49 - 2019-02-13 11:49 - 000387384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000371712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000365368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2019-02-13 11:49 - 2019-02-13 11:49 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrd3x40.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000348632 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Activities.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000331576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2019-02-13 11:49 - 2019-02-13 11:49 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrd2x40.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000276480 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000260096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2019-02-13 11:49 - 2019-02-13 11:49 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2019-02-13 11:49 - 2019-02-13 11:49 - 000199696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2019-02-13 11:49 - 2019-02-13 11:49 - 000193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredui.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiohlp.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe
2019-02-13 11:49 - 2019-02-13 11:49 - 000106512 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000101944 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe
2019-02-13 11:49 - 2019-02-13 11:49 - 000079376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2019-02-13 11:49 - 2019-02-13 11:49 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\nslookup.exe
2019-02-13 11:49 - 2019-02-13 11:49 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdfs.sys
2019-02-13 11:49 - 2019-02-13 11:49 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlahc.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\PktMon.exe
2019-02-13 11:49 - 2019-02-13 11:49 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2019-02-13 11:49 - 2019-02-13 11:49 - 000038712 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2019-02-13 11:48 - 2019-02-13 11:48 - 020655544 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 015224832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 006540424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 005205464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 004762600 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 004526080 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 004016128 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 004006912 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 003500544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 003279360 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 002843648 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 002721280 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2019-02-13 11:48 - 2019-02-13 11:48 - 002466304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 002053944 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 002021584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 001899160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 001871872 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2019-02-13 11:48 - 2019-02-13 11:48 - 001720936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 001573888 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 001344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 001271608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 001254912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 001225728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 001168384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 001098136 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000970256 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000929280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2019-02-13 11:48 - 2019-02-13 11:48 - 000875008 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000807936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000762368 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000711680 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000701376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2019-02-13 11:48 - 2019-02-13 11:48 - 000652320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000636696 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000629576 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000554496 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000539664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2019-02-13 11:48 - 2019-02-13 11:48 - 000520200 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2019-02-13 11:48 - 2019-02-13 11:48 - 000513064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2019-02-13 11:48 - 2019-02-13 11:48 - 000497680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2019-02-13 11:48 - 2019-02-13 11:48 - 000470528 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000434176 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000406016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2019-02-13 11:48 - 2019-02-13 11:48 - 000393064 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2019-02-13 11:48 - 2019-02-13 11:48 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000331592 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2019-02-13 11:48 - 2019-02-13 11:48 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2019-02-13 11:48 - 2019-02-13 11:48 - 000316216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2019-02-13 11:48 - 2019-02-13 11:48 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000303104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys
2019-02-13 11:48 - 2019-02-13 11:48 - 000284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasppp.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000277536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000237072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2019-02-13 11:48 - 2019-02-13 11:48 - 000202552 _____ (Microsoft Corporation) C:\WINDOWS\system32\MTF.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000157496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2019-02-13 11:48 - 2019-02-13 11:48 - 000156680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2019-02-13 11:48 - 2019-02-13 11:48 - 000156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasman.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSrv.exe
2019-02-13 11:48 - 2019-02-13 11:48 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\spopk.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000124432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2019-02-13 11:48 - 2019-02-13 11:48 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcln.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000096776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2019-02-13 11:48 - 2019-02-13 11:48 - 000091424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2019-02-13 11:48 - 2019-02-13 11:48 - 000054248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WindowsTrustedRT.sys
2019-02-13 11:48 - 2019-02-13 11:48 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo-overrides.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000033056 _____ (Microsoft Corporation) C:\WINDOWS\system32\NtlmShared.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2019-02-13 11:48 - 2019-02-13 11:48 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2019-02-13 11:48 - 2019-02-13 11:48 - 000000072 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin
2019-02-10 14:20 - 2019-03-03 19:32 - 000000000 ____D C:\Users\bersem\Desktop\s8 last
==================== Ein Monat (geänderte) ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2019-03-07 15:41 - 2017-07-23 14:57 - 000000000 ____D C:\FRST
2019-03-07 15:30 - 2018-09-15 06:10 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-03-07 15:14 - 2019-01-04 18:33 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-03-07 14:06 - 2015-10-19 22:20 - 000000000 ____D C:\Users\bersem\AppData\Roaming\ViberPC
2019-03-07 09:21 - 2018-09-15 06:09 - 000000000 ____D C:\WINDOWS\INF
2019-03-07 08:51 - 2018-09-15 06:10 - 000000000 ___HD C:\Program Files\WindowsApps
2019-03-07 08:51 - 2018-09-15 06:10 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-03-06 20:24 - 2015-12-23 13:24 - 000000000 ____D C:\Program Files\CCleaner
2019-03-06 17:51 - 2016-11-22 19:07 - 000000000 ____D C:\Users\bersem\AppData\LocalLow\Mozilla
2019-03-06 17:46 - 2015-10-19 22:10 - 000001190 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-03-06 17:46 - 2015-10-19 22:10 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service
2019-03-06 17:45 - 2016-11-22 19:06 - 000000000 ____D C:\Program Files\Mozilla Firefox
2019-03-06 13:57 - 2015-10-19 21:40 - 000000000 ____D C:\Users\bersem\AppData\Local\VirtualStore
2019-03-04 21:39 - 2016-12-05 13:55 - 000000000 ____D C:\Users\bersem\AppData\Roaming\WhatsApp
2019-03-02 14:41 - 2016-01-17 16:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2019-03-02 14:38 - 2018-09-15 06:10 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2019-03-02 14:36 - 2017-10-23 23:51 - 000176072 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2019-03-02 14:36 - 2017-10-23 23:51 - 000157240 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2019-03-02 14:36 - 2017-10-23 23:51 - 000078808 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2019-03-02 14:36 - 2017-10-23 23:51 - 000066280 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avdevprot.sys
2019-03-02 14:36 - 2017-10-23 23:51 - 000054440 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2019-03-02 14:36 - 2017-10-23 23:51 - 000043304 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avusbflt.sys
2019-03-01 13:16 - 2017-06-29 23:09 - 000001107 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk
2019-03-01 13:16 - 2015-10-19 22:03 - 000000000 ____D C:\Program Files\Opera
2019-02-28 19:56 - 2015-10-20 19:01 - 000000000 ____D C:\Users\bersem\Documents\ViberDownloads
2019-02-27 19:11 - 2016-08-16 23:38 - 000000000 ____D C:\Users\bersem\Desktop\musiiik
2019-02-26 18:25 - 2018-09-05 20:48 - 000001341 _____ C:\Users\Public\Desktop\Skype.lnk
2019-02-26 18:25 - 2018-09-05 20:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2019-02-25 22:30 - 2019-01-04 18:51 - 001859034 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-02-25 22:30 - 2018-09-15 13:56 - 000785334 _____ C:\WINDOWS\system32\perfh007.dat
2019-02-25 22:30 - 2018-09-15 13:56 - 000167350 _____ C:\WINDOWS\system32\perfc007.dat
2019-02-23 20:18 - 2015-10-19 22:26 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-02-22 17:21 - 2015-12-30 12:22 - 000000000 ____D C:\ProgramData\Package Cache
2019-02-16 18:24 - 2019-01-04 19:07 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-02-16 18:19 - 2017-12-19 19:52 - 000000000 ____D C:\Users\bersem\Desktop\Neuer Ordner (2)
2019-02-16 10:47 - 2019-01-04 18:38 - 000000000 ____D C:\Users\bersem
2019-02-15 23:12 - 2015-12-30 12:13 - 000000000 ____D C:\Users\bersem\AppData\Roaming\vlc
2019-02-15 18:59 - 2016-10-12 11:18 - 000000000 ____D C:\Users\bersem\Documents\backup ot4030x twrp
2019-02-15 18:36 - 2018-11-18 21:44 - 000000000 ____D C:\Users\bersem\Desktop\Screenshots
2019-02-13 18:18 - 2018-05-01 08:24 - 000000000 ____D C:\Users\bersem\AppData\Local\D3DSCache
2019-02-13 18:16 - 2017-10-24 01:45 - 000000000 ___RD C:\Users\bersem\3D Objects
2019-02-13 18:16 - 2015-10-19 21:41 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-02-13 18:14 - 2019-01-04 18:33 - 000429088 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-02-13 18:11 - 2018-09-15 05:08 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2019-02-13 18:10 - 2018-09-15 06:10 - 000000000 ____D C:\WINDOWS\TextInput
2019-02-13 18:10 - 2018-09-15 06:10 - 000000000 ____D C:\WINDOWS\system32\oobe
2019-02-13 18:10 - 2018-09-15 06:10 - 000000000 ____D C:\WINDOWS\system32\migwiz
2019-02-13 18:10 - 2018-09-15 06:10 - 000000000 ____D C:\WINDOWS\system32\appraiser
2019-02-13 18:10 - 2018-09-15 05:08 - 000000000 ____D C:\WINDOWS\system32\Dism
2019-02-13 18:09 - 2019-01-04 18:09 - 000000000 ____D C:\Program Files\Hyper-V
2019-02-13 18:09 - 2018-09-15 06:10 - 000000000 ____D C:\WINDOWS\ShellExperiences
2019-02-13 18:09 - 2018-09-15 06:10 - 000000000 ____D C:\WINDOWS\ShellComponents
2019-02-13 18:09 - 2018-09-15 06:10 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-02-13 14:19 - 2015-07-10 09:28 - 000000167 _____ C:\WINDOWS\win.ini
2019-02-13 13:55 - 2015-11-07 19:37 - 000000000 ____D C:\adb
2019-02-13 13:38 - 2016-05-12 16:16 - 000000000 ____D C:\ProgramData\SP_FT_Logs
2019-02-13 11:51 - 2018-09-15 06:02 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-02-13 11:42 - 2015-10-19 22:55 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-02-13 11:33 - 2015-10-19 22:55 - 126228304 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-02-12 10:53 - 2015-10-19 21:48 - 000000000 ___RD C:\Users\bersem\OneDrive
2019-02-12 10:45 - 2017-05-16 13:48 - 000000000 ____D C:\Users\bersem\Documents\Camera
2019-02-09 13:30 - 2017-10-24 00:53 - 000000000 ____D C:\Users\bersem\AppData\Local\Packages
2019-02-08 10:18 - 2018-07-10 19:08 - 000000000 ____D C:\ProgramData\Packages
2019-02-05 05:21 - 2018-09-15 05:08 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2016-09-14 13:45 - 2017-01-09 21:51 - 000000600 _____ () C:\Users\bersem\AppData\Roaming\winscp.rnd
2015-10-25 11:02 - 2015-10-25 11:02 - 000000001 _____ () C:\Users\bersem\AppData\Local\llftool.4.40.agreement
2016-04-05 08:56 - 2017-01-09 21:45 - 000000600 _____ () C:\Users\bersem\AppData\Local\PUTTY.RND
2017-09-10 20:56 - 2017-09-10 20:56 - 000000218 _____ () C:\Users\bersem\AppData\Local\recently-used.xbel
2015-12-27 13:38 - 2015-12-27 13:38 - 000000017 _____ () C:\Users\bersem\AppData\Local\resmon.resmoncfg
2017-09-10 20:53 - 2017-09-10 20:53 - 000000000 _____ () C:\Users\bersem\AppData\Local\zenmap.exe.log
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\dllhost.exe => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
==================== Ende vom FRST.txt ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version: 06-03-2019
durchgeführt von bersem (07-03-2019 15:42:58)
Gestartet von C:\Users\bersem\Desktop
Microsoft Windows 10 Pro Version 1809 17763.316 (X86) (2019-01-04 18:09:08)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-3889012066-4205385009-3576731210-500 - Administrator - Disabled)
bersem (S-1-5-21-3889012066-4205385009-3576731210-1000 - Administrator - Enabled) => C:\Users\bersem
DefaultAccount (S-1-5-21-3889012066-4205385009-3576731210-503 - Limited - Disabled)
Gast (S-1-5-21-3889012066-4205385009-3576731210-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-3889012066-4205385009-3576731210-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
µTorrent (HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\uTorrent) (Version: 3.5.3.44494 - BitTorrent Inc.)
7-Zip 15.12 (HKLM\...\7-Zip) (Version: 15.12 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 19.010.20098 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 32.0.0.101 - Adobe Systems Incorporated)
Adobe Flash Player 32 PPAPI (HKLM\...\Adobe Flash Player PPAPI) (Version: 32.0.0.101 - Adobe Systems Incorporated)
ANT Drivers Installer x86 (HKLM\...\{E64F69D8-38FE-48B8-95AB-CC676FA636F1}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Apple Application Support (32-Bit) (HKLM\...\{5A659BE5-849B-484E-A83B-DCB78407F3A4}) (Version: 7.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{ABDE67C4-5876-4CDB-82A9-0CBACECC1C4A}) (Version: 12.1.0.25 - Apple Inc.)
Apple Software Update (HKLM\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
Avira (HKLM\...\{6E83C075-0805-4D11-B403-8BAC84374B81}) (Version: 1.2.129.13789 - Avira Operations GmbH & Co. KG) Hidden
Avira (HKLM\...\{fd422d82-916c-4aca-bc42-67b7eb9925c4}) (Version: 1.2.129.13789 - Avira Operations GmbH & Co. KG)
Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.44.142 - Avira Operations GmbH & Co. KG)
BitTorrent (HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\BitTorrent) (Version: 7.10.0.43581 - BitTorrent Inc.)
Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.)
Camtasia Studio 7 (HKLM\...\{DE042823-C359-4B87-B66B-308057E8B6AF}) (Version: 7.0.1 - TechSmith Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.50 - Piriform)
Content Manager (HKLM\...\Content Manager) (Version: 3.18.5.639191 - NNG Llc.)
Core Temp 1.13 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.13 - ALCPU)
CPUID HWMonitor 1.38 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.38 - CPUID, Inc.)
Daum PotPlayer 1.6.54915 (HKLM\...\PotPlayer) (Version: - )
Dell System Detect (HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\58d94f3ce2c27db0) (Version: 7.11.0.6 - Dell)
dreamboxEDIT -- The one and only settings editor for your Dreambox (HKLM\...\dreamboxEDIT) (Version: - )
Elevated Installer (HKLM\...\{1052502B-4C91-43F9-B160-AE39ED57C9F0}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Emergency Download Driver (HKLM\...\{3F0F5AB4-C9CE-4226-8393-E9CFF8369D9D}) (Version: 1.1.16.1526 - Microsoft)
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version: - )
FFU Loader Driver 1.0.0 (HKLM\...\{7209d085-ed88-4a08-beb2-c49db2b9e838}) (Version: 1.0.0 - Microsoft)
FFU Loader Driver 1.0.0 (HKLM\...\{80FA650C-6157-4959-9E2B-977CADCBFC3C}) (Version: 1.0.0 - Microsoft) Hidden
Flashtool (HKLM\...\Flashtool) (Version: 0.9.18.2 - Androxyde)
Garmin Express (HKLM\...\{BCC7CA85-E57F-452D-BB44-15A1CE018BD0}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express (HKLM\...\{bd8bd200-9a60-4969-b267-6b565f36e3da}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries)
Garmin Express Tray (HKLM\...\{DA9C865D-6762-4931-8588-0B13B7A0796B}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Google Chrome (HKLM\...\Google Chrome) (Version: 71.0.3578.80 - Google Inc.)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
Haali Media Splitter (HKLM\...\HaaliMkx) (Version: - )
HashTab 5.0.0.19 (HKLM\...\HashTab) (Version: 5.0.0.19 - Implbits Software)
HTC Driver Installer (HKLM\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.2.0.001 - HTC Corporation)
iCloud (HKLM\...\{E64275CF-27C4-4BC9-8690-2BC2D1C2CF31}) (Version: 7.10.0.9 - Apple Inc.)
IPTInstaller (HKLM\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.8 - HTC)
iTunes (HKLM\...\{7E5D2C4B-E9B9-46AA-B5A2-448B29007DDD}) (Version: 12.9.3.3 - Apple Inc.)
Java 8 Update 102 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180102F0}) (Version: 8.0.1020.14 - Oracle Corporation)
Katalog/MadeForYou v1.6.118 (HKLM\...\Made4U_is1) (Version: - )
LG United Mobile Driver (HKLM\...\{2A3A4BD6-6CE0-4e2a-80D2-1D0FF6ACBFBA}) (Version: 3.13.2.0 - LG Electronics)
Lumia UEFI Blue Driver (HKLM\...\{9D2A75FE-8CE1-4297-AEC1-A097D47BACE9}) (Version: 1.1.10.1526 - Microsoft)
Maui META 3G ver 6.1316.1 (HKLM\...\{387843EE-375D-4E28-8436-F73E3E3D02D7}) (Version: 6.13.16.1 - MediaTek)
Memory Stick Formatter (HKLM\...\{27337663-2619-11D4-99DC-0000F49094C7}) (Version: 2.5.05090 - Sony Corporation)
Microsoft Office Professional Plus 2016 (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\OneDriveSetup.exe) (Version: 18.212.1021.0008 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{4fd02573-5f12-4ae4-8027-c63f8e1115af}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x86) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mobile Upgrade S Gotu2v5.2.1 (HKLM\...\{C9A7E6A6-110D-4DBC-A8E2-F634613B5A8C}_is1) (Version: - TCL Communication Technology Holdings Limited)
Mozilla Firefox 65.0.2 (x86 de) (HKLM\...\Mozilla Firefox 65.0.2 (x86 de)) (Version: 65.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 65.0.2.6995 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
Naviextras Toolbox Prerequesities (HKLM\...\{537575D6-3B96-474C-BD8F-DFF667363DBD}) (Version: 1.0.0 - NNG Llc.)
Nero Burning ROM 10 (HKLM\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.2.11000.12.100 - Nero AG)
Nero Burning ROM 10 (HKLM\...\{FE83F463-7E61-4B18-9FA0-B94B90A0B6B9}) (Version: 10.5.10300 - Nero AG)
Nero BurnRights 10 (HKLM\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.2.10300.0.102 - Nero AG)
Nero Update (HKLM\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0018 - Nero AG)
NetClientOCX Version 6.4.1.0 (HKLM\...\{09E218A5-2C33-4E05-905E-F622440C1F83}_is1) (Version: 6.4.1.0 - longse, Inc.)
NetSurveillance (HKLM\...\NetSurveillance) (Version: - )
Notepad++ (HKLM\...\Notepad++) (Version: 6.7.9.2 - Notepad++ Team)
Opera Stable 58.0.3135.79 (HKLM\...\Opera 58.0.3135.79) (Version: 58.0.3135.79 - Opera Software)
Outils de vérification linguistique 2016 de Microsoft Office*- Français (HKLM\...\{90160000-001F-040C-0000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
PLEOMAX Web Camera (HKLM\...\{07502F61-F772-48D9-BF95-5A2DA1B756AC}) (Version: 4.2.0922.70 - PLEOMAX)
plist Editor Pro 2.1.0 (HKLM\...\plist Editor Pro) (Version: 2.1.0 - VOWSoft, Ltd.)
QPST 2.7 (HKLM\...\{B4FDB1F4-F79D-4A6A-8CBF-CF638CF6BB63}) (Version: 2.7.420 - Qualcomm)
Quamotion iMobileDevice for Windows (HKLM\...\{C6457771-434B-4955-9944-A9BB1452772C}) (Version: 1.1.5539.46562 - Quamotion)
Realterm 2.0.0.70_SignedWrapper (HKLM\...\Realterm) (Version: 2.0.0.70_SignedWrapper - Broadcast Equipment)
Revo Uninstaller 2.0.5 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.5 - VS Revo Group, Ltd.)
Samsung Kies (HKLM\...\{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.16011.2 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.16011.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (HKLM\...\{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16044.2 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16044.2 - Samsung Electronics Co., Ltd.)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.63.0 - Samsung Electronics Co., Ltd.)
SDFormatter (HKLM\...\{179324FF-7B16-4BA8-9836-055CAAEE4F08}) (Version: 4.0.0 - SD Association)
Silicon Laboratories CP210x USB to UART Bridge (Driver Removal) (HKLM\...\SLABCOMM&10C4&EA60) (Version: - Silicon Laboratories)
Silicon Laboratories CP210x VCP Drivers for Windows XP/2003 Server/Vista/7 (HKLM\...\{5199DC5B-D596-4FAA-B464-51E57BCB7872}) (Version: 5.40.29 - Silicon Laboratories, Inc.)
Skype Click to Call (HKLM\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype Version 8.40 (HKLM\...\Skype_is1) (Version: 8.40 - Skype Technologies S.A.)
Smart Switch (HKLM\...\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.18124.4 - Samsung Electronics Co., Ltd.) Hidden
Smart Switch (HKLM\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.18124.4 - Samsung Electronics Co., Ltd.)
Sony Mobile Update Engine (HKLM\...\Update Engine) (Version: 2.17.13.201709081523 - Sony Mobile Communications Inc.)
Sony PC Companion 2.10.303 (HKLM\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.303 - Sony)
Strumenti di correzione di Microsoft Office 2016 - Italiano (HKLM\...\{90160000-001F-0410-0000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
TomTom HOME (HKLM\...\{30E6FC43-C31F-4968-9A06-AA38E3C3CF73}) (Version: 2.10.1 - Ihr Firmenname)
TomTom MyDrive Connect 4.1.5.3181 (HKLM\...\MyDriveConnect) (Version: 4.1.5.3181 - TomTom)
TVCenter (HKLM\...\{B69D41C7-8878-4FD4-B0A1-C3F588C0F39B}) (Version: 6.4.5.933 - PCTV Systems)
Universal Adb Driver (HKLM\...\{C0E08D8D-6076-4117-B644-2AF34F35B757}) (Version: 1.0.4 - ClockworkMod)
Update for Skype for Business 2016 (KB4462114) 32-Bit Edition (HKLM\...\{90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{C8F90D92-DE58-4C46-B39E-B21F758EA66E}) (Version: - Microsoft)
Update for Skype for Business 2016 (KB4462114) 32-Bit Edition (HKLM\...\{90160000-012B-0407-0000-0000000FF1CE}_Office16.PROPLUS_{C8F90D92-DE58-4C46-B39E-B21F758EA66E}) (Version: - Microsoft)
Viber (HKLM\...\{097A0B4C-1568-4735-8C3D-4CB265A115C8}) (Version: 5.4.0.1664 - Viber Media Inc.) Hidden
Viber (HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\{7de2db6a-6f4b-4b45-82b9-57d5d7f1c952}) (Version: 5.4.0.1664 - Viber Media Inc.)
Visual Studio C++ 10.0 Runtime (HKLM\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WhatsApp (HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\WhatsApp) (Version: 0.3.1847 - WhatsApp)
Winamp (HKLM\...\Winamp) (Version: 5.63 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows 10 Update and Privacy Settings (HKLM\...\{8BE893D4-107C-4867-9B71-A3CF2C917C0E}) (Version: 1.0.13.0 - Microsoft Corporation)
Windows 7 USB/DVD Download Tool (HKLM\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Device Recovery Tool 3.11.34101 (HKLM\...\{c4570e47-39e0-450b-a02c-d64965cbf0f0}) (Version: 3.11.34101 - Microsoft)
Windows Driver Package - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/27/2012 7.0.0000.00001) (HKLM\...\450B7CBC371CAEC6A328083977AA7A09E7AE5D29) (Version: 08/27/2012 7.0.0000.00001 - Google, Inc.)
Windows Driver Package - SpreadTrum (sprd_enum) USB (02/11/2012 2.4.0.27) (HKLM\...\3E13462B4D2FE32916015DDA53F5A1DC2BAC9B11) (Version: 02/11/2012 2.4.0.27 - SpreadTrum)
Windows IP Over USB (HKLM\...\{FF0EA481-42DB-A8AE-8356-48C09F7D953D}) (Version: 10.1.10586.15 - Microsoft Corporation)
Windows Mobile-Gerätecenter (HKLM\...\{904CCF62-818D-4675-BC76-D37EB399F917}) (Version: 6.1.6965.0 - Microsoft Corporation)
Windows Mobile-Gerätecenter: Treiberupdate (HKLM\...\{E7044E25-3038-4A76-9064-344AC038043E}) (Version: 6.1.6965.0 - Microsoft Corporation)
Windows-Treiberpaket - DriverCoding (DCCOMBUS) USB (01/11/2012 1.0.1.0) (HKLM\...\78FCD4595A8B18BF01F3375593207912EA704A85) (Version: 01/11/2012 1.0.1.0 - DriverCoding)
Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows-Treiberpaket - Gionee (gnusbnet) Net (04/21/2012 1.0.0000.00000) (HKLM\...\17511B846BE9E9EFA71436DFC880EAD7E4CA1A3A) (Version: 04/21/2012 1.0.0000.00000 - Gionee)
Windows-Treiberpaket - Gionee Communication Equipment Co.,Ltd. (gnusbser) Modem (04/21/2012 1.0.0000.00000) (HKLM\...\625B1BC24FDCB32BB62A4A7EF2EB2A31E4A0DCC7) (Version: 04/21/2012 1.0.0000.00000 - Gionee Communication Equipment Co.,Ltd.)
Windows-Treiberpaket - Gionee Communication Equipment Co.,Ltd. (gnusbser) Ports (04/21/2012 1.0.0000.00000) (HKLM\...\9EAF5C6317C122BCD76E5372013631B6C91D06FC) (Version: 04/21/2012 1.0.0000.00000 - Gionee Communication Equipment Co.,Ltd.)
Windows-Treiberpaket - Gionee Communication Equipment Co.,Ltd. (winusb) AndroidUsbDeviceClass (04/21/2012 1.0.0000.00000) (HKLM\...\0FC9CED990518C1E946B3B95FD59B3B0785AD9B1) (Version: 04/21/2012 1.0.0000.00000 - Gionee Communication Equipment Co.,Ltd.)
Windows-Treiberpaket - Gionee Communication Equipment Co.,Ltd. (WinUSB) AndroidUsbDeviceClass (04/21/2012 1.0.0000.00000) (HKLM\...\1A5F38038762A5BC1BE1542877A474DFFDBF4A49) (Version: 04/21/2012 1.0.0000.00000 - Gionee Communication Equipment Co.,Ltd.)
Windows-Treiberpaket - libusb-win32 (libusb0) libusb-win32 devices (03/01/2015 1.2.6.0) (HKLM\...\4D6A4FCE2980678F71AC013D7A3BB39D141EAA26) (Version: 03/01/2015 1.2.6.0 - libusb-win32)
Windows-Treiberpaket - libusb-win32 WorldCup_Device (01/18/2012 1.2.6.0) (HKLM\...\6C89719A41410334FF3B6B56B79EC975B9153A07) (Version: 01/18/2012 1.2.6.0 - libusb-win32)
Windows-Treiberpaket - Microsoft USBDevice (02/19/2016 1.0.0.0) (HKLM\...\01D4AA89568B59E5941907D403E3B682EE413AB7) (Version: 02/19/2016 1.0.0.0 - Microsoft)
Windows-Treiberpaket - Qualcomm (qcusbnet) Net (01/30/2012 1.0.7.2) (HKLM\...\D89B66FA53594B71ACB68093FD8CE3B2E8959162) (Version: 01/30/2012 1.0.7.2 - Qualcomm)
Windows-Treiberpaket - Qualcomm Incorporated (qcusbser) Modem (01/30/2012 2.0.9.1) (HKLM\...\A4A3BF1EC3B48586178C2C6285019B2D9B0670C4) (Version: 01/30/2012 2.0.9.1 - Qualcomm Incorporated)
Windows-Treiberpaket - Qualcomm Incorporated (qcusbser) Ports (01/30/2012 2.0.9.1) (HKLM\...\5C5E744460BC89BBF2EB89161A4F60936B22A1B5) (Version: 01/30/2012 2.0.9.1 - Qualcomm Incorporated)
Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
WinRAR 5.30 Beta 3 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.30.3 - win.rar GmbH)
WinUsb CoInstallers (HKLM\...\{9755918A-CDF8-4F1E-8453-6359CF1A330A}) (Version: 1.1.12.1526 - Microsoft)
WinUSB Compatible ID Drivers (HKLM\...\{A4A0B236-6046-4CAB-8177-1EAF61112C75}) (Version: 1.1.11.1526 - Microsoft)
WinUSB Drivers ext (HKLM\...\{29BAAF65-09E5-4F52-8D15-2FAF2E23A8DC}) (Version: 1.1.24.1544 - Microsoft)
WorldUnlock Codes Calculator (HKLM\...\WorldUnlock Codes Calculator) (Version: - )
Xperia Companion (HKLM\...\{3FC90BF7-B316-40DF-819C-A06D70E5ED2E}) (Version: 1.4.7.0 - Sony) Hidden
Xperia Companion (HKLM\...\{efee6944-1231-492a-a157-93409130a098}) (Version: 1.4.7.0 - Sony)
Xperia Companion Service (HKLM\...\{D045DF86-7FF9-4CF2-919A-7BD172A43AAC}) (Version: 1.4.7.0 - Sony) Hidden
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-3889012066-4205385009-3576731210-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2015-11-19] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [ANotepad++] -> {00F3C2EC-A6EE-11DE-A03A-EF8F55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2015-04-15] () [Datei ist nicht signiert]
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams.dll [2019-01-15] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files\Avira\Antivirus\shlext.dll [2019-03-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-08-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files\UltraISO\isoshell.dll [2014-01-02] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2015-11-19] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers4: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files\UltraISO\isoshell.dll [2014-01-02] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2015-11-19] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files\Avira\Antivirus\shlext.dll [2019-03-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
ContextMenuHandlers6: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files\UltraISO\isoshell.dll [2014-01-02] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-08-27] (win.rar GmbH -> Alexander Roshal)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {042D0DDF-19C2-4EC7-9012-C09488243D37} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
Task: {0EC6A8C2-7D55-4527-A003-1847924B30FE} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {120A9287-3F22-46EB-999A-0AAACE75F2B8} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe (Apple Inc. -> Apple Inc.)
Task: {48B8F955-B19C-4A5B-AB69-396090933B58} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG
Task: {49192DC9-17A7-4D41-A2EB-1DB344BC51BA} - System32\Tasks\Opera scheduled Autoupdate 1445288686 => C:\Program Files\Opera\launcher.exe (Opera Software AS -> Opera Software)
Task: {4D28FE56-35A8-4A71-B5B2-784E1560CC98} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {6C23E197-6D4A-44D0-81F6-34483FD5EC17} - System32\Tasks\S-1-5-21-3889012066-4205385009-3576731210-1000\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe (Microsoft Windows -> Microsoft Corporation)
Task: {7BB7FF82-BE91-4436-BF85-21DEDD186DD7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {7E88126D-2640-44B0-818C-4A6C4F2BDF1A} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {818044EC-4C73-4FC4-8D0A-F3D690512969} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe (Piriform Software Ltd -> Piriform Software Ltd)
Task: {8ED69613-19AA-4BDE-8356-676E6F9F4B63} - System32\Tasks\Core Temp Autostart bersem => C:\Program Files\Core Temp\Core Temp.exe (ALCPU -> ALCPU)
Task: {C9A63457-C1B2-48AF-AC5E-561F99C9C249} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files\Avira\Antivirus\avgnt.exe (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Verknüpfungen & WMI ========================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\Users\bersem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NetSurveillance\reg.lnk -> C:\Program Files\NetSurveillance\CMS\reg.bat ()
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-11-19 20:03 - 2015-11-19 20:03 - 000247808 _____ () C:\Program Files\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbPc.DLL
2010-11-18 17:08 - 2015-11-19 15:48 - 000049664 _____ () C:\Program Files\7-Zip\7-zip.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\A9951442.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\A9951442.sys => ""="Driver"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2018-01-03 21:25 - 2018-05-13 10:52 - 000000851 ____N C:\WINDOWS\system32\drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\ProgramData\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\Universal Extractor;C:\Program Files\Universal Extractor\bin;C:\Users\bersem\Desktop\PhoenixSuit_V1.09\;C:\adb;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Common Files\Seagate\SnapAPI\;%SYSTEMROOT%\System32\OpenSSH\
HKCU\Environment\\Path -> ;%PhoenixPath%;%USERPROFILE%\AppData\Local\Microsoft\WindowsApps
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\windows\img0.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.
HKLM\...\StartupApproved\StartupFolder: => "Nach Updates suchen.lnk"
HKLM\...\StartupApproved\Run: => "BigDogPath"
HKLM\...\StartupApproved\Run: => "KiesTrayAgent"
HKLM\...\StartupApproved\Run: => "ctfmon"
HKLM\...\StartupApproved\Run: => "MaxMenuMgr"
HKLM\...\StartupApproved\Run: => "AcronisTibMounterMonitor"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run: => "Windows Mobile Device Center"
HKLM\...\StartupApproved\Run: => "BrMfcWnd"
HKLM\...\StartupApproved\Run: => "ControlCenter3"
HKLM\...\StartupApproved\Run: => "Malwarebytes TrayApp"
HKLM\...\StartupApproved\Run: => "IseUI"
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\StartupApproved\Run: => "Viber"
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\StartupApproved\Run: => "RemoTerm.exe"
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\StartupApproved\Run: => "Lync"
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\StartupApproved\Run: => "XperiaCompanionAgent"
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\StartupApproved\Run: => "GarminExpressTrayApp"
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\StartupApproved\Run: => "AirDroid 3"
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\StartupApproved\Run: => "DellSystemDetect"
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\StartupApproved\Run: => "WhatsApp"
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\StartupApproved\Run: => "TomTomHOME.exe"
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\StartupApproved\Run: => "MyDriveConnect.exe"
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\StartupApproved\Run: => "iCloudServices"
HKU\S-1-5-21-3889012066-4205385009-3576731210-1000\...\StartupApproved\Run: => "KiesPDLR.exe"
==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{96ACC7D4-0118-47D8-B5CA-353148BEFAD4}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A4696D98-36A3-46FF-9E70-5BA48BC0155A}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E641D89A-1F80-46C6-A320-27C81BC30CBA}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E7E861AC-5F02-48A7-A3A1-633E77E01F2F}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C06667CE-D489-406D-8852-E9D58D44FBE1}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{12A3AB2B-DA11-434F-B8E6-5112DD12B262}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3C0F1251-D4A7-40A8-A326-2D0F522E3C61}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{721D6738-DC06-44A5-A77D-7ABDCE44AD1E}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{CDE7CFF6-2F18-42CF-B9C1-269EB4C8D760}] => (Allow) C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{8885494F-6B9D-4400-911C-45B15022CB76}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{42CD32AD-AFD7-4D44-8FE6-23545A9B29AF}] => (Allow) C:\Program Files\Opera\58.0.3135.68\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{66C4F343-9045-4F00-A422-51D611FD4AEC}] => (Allow) C:\Program Files\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{98C80423-3953-4AA4-89AA-FD587CABA260}] => (Allow) C:\Program Files\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{9717403B-B921-4943-8655-DF2886688336}] => (Allow) C:\Program Files\Opera\58.0.3135.79\opera.exe (Opera Software AS -> Opera Software)
==================== Wiederherstellungspunkte =========================
18-02-2019 15:03:07 Geplanter Prüfpunkt
28-02-2019 19:56:50 Geplanter Prüfpunkt
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (03/07/2019 02:29:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Avira.ServiceHost.exe, Version: 1.2.129.13789, Zeitstempel: 0x5c63f40d
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x015a38c6
ID des fehlerhaften Prozesses: 0x1e04
Startzeit der fehlerhaften Anwendung: 0x01d4d11efcfedf06
Pfad der fehlerhaften Anwendung: C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: effe01d4-0baf-4345-9261-e4d7c7a224aa
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (03/07/2019 02:10:30 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Das Programm OTL.exe Version 3.2.69.0 hat die Interaktion mit Windows beendet und wurde geschlossen. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1fa0
Startzeit: 01d4d4e673d928ca
Beendigungszeit: 4294967295
Anwendungspfad: C:\Users\bersem\Desktop\OTL.exe
Bericht-ID: e1f3f14b-9705-457e-9d1b-3d67c7839a73
Vollständiger Name des fehlerhaften Pakets:
Relative Anwendungs-ID des fehlerhaften Pakets:
Absturztyp: Top level window is idle
Error: (03/07/2019 02:03:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Das Programm OTL.exe Version 3.2.69.0 hat die Interaktion mit Windows beendet und wurde geschlossen. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 2074
Startzeit: 01d4d4e569145746
Beendigungszeit: 4294967295
Anwendungspfad: C:\Users\bersem\Desktop\OTL.exe
Bericht-ID: ddc0ee02-e73f-4308-b8e5-bb77762ab538
Vollständiger Name des fehlerhaften Pakets:
Relative Anwendungs-ID des fehlerhaften Pakets:
Absturztyp: Top level window is idle
Error: (03/06/2019 08:25:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: CCleaner.exe, Version: 5.50.0.6911, Zeitstempel: 0x5bfebb34
Name des fehlerhaften Moduls: CCleaner.exe, Version: 5.50.0.6911, Zeitstempel: 0x5bfebb34
Ausnahmecode: 0xc0000005
Fehleroffset: 0x004ad57d
ID des fehlerhaften Prozesses: 0xa5c
Startzeit der fehlerhaften Anwendung: 0x01d4d45206ec9147
Pfad der fehlerhaften Anwendung: C:\Program Files\CCleaner\CCleaner.exe
Pfad des fehlerhaften Moduls: C:\Program Files\CCleaner\CCleaner.exe
Berichtskennung: 0afd84eb-ead7-4cca-bd1c-dfa2fde0ed25
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (03/04/2019 09:40:00 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Das Programm LockApp.exe Version 10.0.17763.134 hat die Interaktion mit Windows beendet und wurde geschlossen. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: fa8
Startzeit: 01d4d2614b0d6452
Beendigungszeit: 4294967295
Anwendungspfad: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
Bericht-ID: 2998b643-c426-4113-a3f9-387c8873a0ab
Vollständiger Name des fehlerhaften Pakets: Microsoft.LockApp_10.0.17763.1_neutral__cw5n1h2txyewy
Relative Anwendungs-ID des fehlerhaften Pakets: WindowsDefaultLockScreen
Absturztyp: Quiesce
Error: (03/03/2019 07:37:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 10.0.17763.107, Zeitstempel: 0x0d9046f5
Name des fehlerhaften Moduls: combase.dll, Version: 10.0.17763.253, Zeitstempel: 0xa3f81b2d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000859ea
ID des fehlerhaften Prozesses: 0x1f58
Startzeit der fehlerhaften Anwendung: 0x01d4d198b31759e9
Pfad der fehlerhaften Anwendung: C:\WINDOWS\Explorer.EXE
Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\combase.dll
Berichtskennung: 5543eb54-e426-46e4-ae3a-86a2382fe04f
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (03/02/2019 06:39:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Avira.ServiceHost.exe, Version: 1.2.129.13789, Zeitstempel: 0x5c63f40d
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0115e6be
ID des fehlerhaften Prozesses: 0x16c
Startzeit der fehlerhaften Anwendung: 0x01d4cdf073d28324
Pfad der fehlerhaften Anwendung: C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 3d14626e-1713-42a5-a8ce-a73099b8e982
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (03/02/2019 02:37:37 PM) (Source: SecurityCenter) (EventID: 17) (User: )
Description: Das Sicherheitscenter konnte den Aufrufer nicht überprüfen. Der Fehler %1 ist aufgetreten.
Systemfehler:
=============
Error: (03/07/2019 03:40:51 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: Der Server "{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (03/07/2019 03:18:09 PM) (Source: DCOM) (EventID: 10016) (User: USER-PC)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "USER-PC\bersem" (SID: S-1-5-21-3889012066-4205385009-3576731210-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
und der APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (03/07/2019 03:18:06 PM) (Source: DCOM) (EventID: 10016) (User: USER-PC)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "USER-PC\bersem" (SID: S-1-5-21-3889012066-4205385009-3576731210-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
und der APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (03/07/2019 02:29:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.
Error: (03/07/2019 09:37:39 AM) (Source: DCOM) (EventID: 10016) (User: USER-PC)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "USER-PC\bersem" (SID: S-1-5-21-3889012066-4205385009-3576731210-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
und der APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (03/07/2019 09:37:28 AM) (Source: DCOM) (EventID: 10016) (User: USER-PC)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "USER-PC\bersem" (SID: S-1-5-21-3889012066-4205385009-3576731210-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
und der APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (03/06/2019 07:15:20 PM) (Source: DCOM) (EventID: 10016) (User: USER-PC)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "USER-PC\bersem" (SID: S-1-5-21-3889012066-4205385009-3576731210-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
und der APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (03/06/2019 07:15:07 PM) (Source: DCOM) (EventID: 10016) (User: USER-PC)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "USER-PC\bersem" (SID: S-1-5-21-3889012066-4205385009-3576731210-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
und der APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
==================== Memory info ===========================
Processor: Intel(R) Core(TM)2 CPU 6400 @ 2.13GHz
Prozentuale Nutzung des RAM: 47%
Installierter physikalischer RAM: 3317.61 MB
Verfügbarer physikalischer RAM: 1728.38 MB
Summe virtueller Speicher: 7406.96 MB
Verfügbarer virtueller Speicher: 4840.55 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:152.41 GB) (Free:27.26 GB) NTFS
\\?\Volume{9f7d4d92-62fb-11e1-8e12-806e6f6e6963}\ (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS
\\?\Volume{be08d558-0000-0000-0000-402026000000}\ () (Fixed) (Total:0.44 GB) (Free:0.09 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 153.4 GB) (Disk ID: BE08D558)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=152.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
==================== Ende vom Addition.txt ============================
|
|
07.03.2019, 15:54
| #4 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | trojaner eingefangen? Wäre auch nett, wenn du mal kurz beschreiben kannst was der Anlass ist und wieso überhaupt.
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
07.03.2019, 16:13
| #5 | ||
| | trojaner eingefangen?Zitat:
 Zitat:
). Laut meinem E-Mail Konto hatte hatte ich unbekannte Zugriffe aus das Konto. |
|
07.03.2019, 16:14
| #6 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | trojaner eingefangen? SPAM-Empfang hat rein garnichts mit Malware auf dienem Rechner zu tun. Unbekannte Zugriffe auf dem E-Mail-Konto ebenfalls nichts. Ändere dein Passwort zum E-Mail-Konto und fertig.
__________________ --> trojaner eingefangen? |
|
07.03.2019, 16:16
| #7 | |
| | trojaner eingefangen?Zitat:
LG |
|
07.03.2019, 16:35
| #8 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | trojaner eingefangen? Nochmal: Empfang von SPAM hat nichts mit Malware auf deinem Rechner zu tun, den du nutzt! Begreif es doch bitte, dass dein E-Mail-Konto von jedem Punkt der Welt aus angreif- und bespambar ist, dein Rechner hat rein garnichts damit zu tun. Du nutzt ihn lediglich als verlängerten Arm zu deinem Konto. Wir können natürlich etwaige Junkware entfernen, aber bitte hör auf dir irgendwelche Schädlinge einzubilden nur weil du Spam hast. Zudem solltest du auch wenigstens mal mitteilen ob denn überhaupt was gefunden wurde und wenn ja was, wenn du unebdingt der Meinung sein willst, dass dein Rechner die Pest habe.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
| Themen zu trojaner eingefangen? |
| absturz, adobe, antivirus, browser, error, excel, explorer, fehler, firefox, firewall, flash player, format, google, lockapp.exe, logfile, mozilla, opera, registry, revo uninstaller, rundll, security, sicherheit, software, temp, trojaner, usb, windows |
Linear-Darstellung
