Trojaner-Board - Offen Computer spinnt ab und zu, (Einfrierungen)

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:12-06-2016 01

durchgeführt von Menderes (Administrator) auf MENDERES-TOSH (13-06-2016 15:49:40)

Gestartet von C:\Users\Menderes\Desktop

Geladene Profile: Menderes (Verfügbare Profile: Menderes & Gast)

Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Chrome)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgfwsa.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe

(SlimWare Utilities, Inc.) C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\msiexec.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3935912 2015-05-29] (Synaptics Incorporated)

HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [6570256 2016-05-20] (AVG Technologies CZ, s.r.o.)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [814608 2016-05-18] (Avira Operations GmbH & Co. KG)

HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun

HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun

HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\Policies\Explorer: [NoInternetOpenWith] 0

HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\MountPoints2: F - F:\MMMTest.EXE

HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\MountPoints2: G - G:\MMMTest.EXE

HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\MountPoints2: {39a6744f-69fa-11e1-9dfe-705ab676c7d9} - F:\Startme.exe

HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\MountPoints2: {9a9911f5-2fa5-11e5-8a00-705ab676c7d9} - F:\MMMTest.EXE

HKU\S-1-5-21-3766998740-2209911483-25742500-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Ribbons.scr [241664 2010-11-20] (Microsoft Corporation)

HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 

Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2012-04-05]

ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2012-04-05]

ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

Startup: C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2009-12-04]

ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt

Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

Tcpip\..\Interfaces\{F79B6B3C-48D2-40B0-A446-45C5BC9ADC17}: [DhcpNameServer] 10.0.0.138
 

Internet Explorer:

==================

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 

HKU\S-1-5-21-3766998740-2209911483-25742500-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/

HKU\S-1-5-21-3766998740-2209911483-25742500-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}

SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-3766998740-2209911483-25742500-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-3766998740-2209911483-25742500-1000 -> {62310F47-8A4B-48A9-AD15-E0B06299D48B} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag=tochibade-win7-ie-search-21&index=blended&linkCode=ur2

SearchScopes: HKU\S-1-5-21-3766998740-2209911483-25742500-1000 -> {85A60A59-D3D8-468F-B598-FB4393789EF4} URL = hxxps://www.google.com/search?q={searchTerms}

SearchScopes: HKU\S-1-5-21-3766998740-2209911483-25742500-1000 -> {93812018-24FE-4897-80A7-0F017E4053A3} URL = hxxp://rover.ebay.com/rover/1/707-44556-9400-9/4?satitle={searchTerms}

SearchScopes: HKU\S-1-5-21-3766998740-2209911483-25742500-1000 -> {E88E0043-C9D4-4e33-8555-FEE4F5B63060} URL = hxxp://go.mail.ru/search?q={searchTerms}&utf8in=1&fr=ietb

SearchScopes: HKU\S-1-5-21-3766998740-2209911483-25742500-1000 -> ÛŸÆîZ§’2¹Þpv¨IÍá *X(Ž2s  (ÛÎÀJºÔÓµ±  vË°!×—(ä¼48Ð¸-patm6êo ^Mp` Ëõ÷_i£w˜¾!„Áû †x¢8€ÙjÀÿþ ´Ñ;áa´ [¦†8 º~RÙxœòÜ8'£-) x*ä* URL = 

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-05-26] (Microsoft Corporation)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2016-05-26] (Microsoft Corporation)

BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-05-26] (Microsoft Corporation)

BHO-x32: PDF Architect 4 Helper -> {38279E1A-7019-40C1-B579-E99DFB3312E8} -> C:\Program Files (x86)\PDF Architect 4\creator-ie-helper.dll [2015-10-19] (pdfforge GmbH)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_92\bin\ssv.dll [2016-06-05] (Oracle Corporation)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2016-05-26] (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_92\bin\jp2ssv.dll [2016-06-05] (Oracle Corporation)

Toolbar: HKLM - Kein Name - {A13C2648-91D4-4bf3-BC6D-0079707C4389} -  Keine Datei

Toolbar: HKLM-x32 - PDF Architect 4 Toolbar - {23FD9C33-A9E1-48A1-8404-E5925CF1C8E1} - C:\Program Files (x86)\PDF Architect 4\creator-ie-plugin.dll [2015-10-19] (pdfforge GmbH)

Toolbar: HKU\S-1-5-21-3766998740-2209911483-25742500-1000 -> Kein Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Keine Datei

DPF: HKLM-x32 {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab

DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx

DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-05-26] (Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-05-26] (Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-05-26] (Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-05-26] (Microsoft Corporation)
 

FireFox:

========

FF ProfilePath: C:\Users\Menderes\AppData\Roaming\Mozilla\Firefox\Profiles\s9h1yzss.default

FF NewTab: about:blank

FF DefaultSearchEngine: Google

FF SelectedSearchEngine: Google

FF Homepage: www.google.com

FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)

FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.3.1\\npsitesafety.dll [Keine Datei]

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=11.92.2 -> C:\Program Files (x86)\Java\jre1.8.0_92\bin\dtplugin\npDeployJava1.dll [2016-06-05] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.92.2 -> C:\Program Files (x86)\Java\jre1.8.0_92\bin\plugin2\npjp2.dll [2016-06-05] (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-05-26] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-27] (Adobe Systems Inc.)

FF Plugin-x32: PDF Architect 4 -> C:\Program Files (x86)\PDF Architect 4\np-previewer.dll [2015-10-19] (pdfforge GmbH)

FF Plugin HKU\S-1-5-21-3766998740-2209911483-25742500-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Menderes\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-05-27] (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\Menderes\AppData\Roaming\Mozilla\Firefox\Profiles\s9h1yzss.default\searchplugins\avg-secure-search.xml [2016-06-06]

FF SearchPlugin: C:\Users\Menderes\AppData\Roaming\Mozilla\Firefox\Profiles\s9h1yzss.default\searchplugins\google-lavasoft.xml [2016-04-12]

FF Extension: Avira Browser Safety - C:\Users\Menderes\AppData\Roaming\Mozilla\Firefox\Profiles\s9h1yzss.default\Extensions\abs@avira.com [2016-05-15]

FF Extension: AVG Web TuneUp - C:\Users\Menderes\AppData\Roaming\Mozilla\Firefox\Profiles\s9h1yzss.default\Extensions\avg@toolbar.xpi [2016-06-06]

FF Extension: Adblock Plus - C:\Users\Menderes\AppData\Roaming\Mozilla\Firefox\Profiles\s9h1yzss.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-05-15]

FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension

FF Extension: PDF Architect 4 Creator - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2015-10-28] [ist nicht signiert]
 

Chrome: 

=======

CHR HomePage: Default -> mysearch.avg.com/?rvt=1

CHR StartupUrls: Default -> "hxxps://www.google.com/"

CHR DefaultSearchURL: Default -> hxxps://mysearch.avg.com/search?rvt=1&sap=dsp&q={searchTerms}

CHR DefaultSearchKeyword: Default -> https://mysearch.avg.com

CHR DefaultSuggestURL: Default -> hxxps://toolbar.avg.com/acp?q={searchTerms}&o=1

CHR Profile: C:\Users\Menderes\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Präsentationen) - C:\Users\Menderes\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-05-15]

CHR Extension: (Google Docs) - C:\Users\Menderes\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-05-15]

CHR Extension: (Google Drive) - C:\Users\Menderes\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-15]

CHR Extension: (YouTube) - C:\Users\Menderes\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-15]

CHR Extension: (Adblock Plus) - C:\Users\Menderes\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-06-01]

CHR Extension: (AVG Secure Search) - C:\Users\Menderes\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn [2016-06-07]

CHR Extension: (Google Tabellen) - C:\Users\Menderes\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-05-15]

CHR Extension: (Google Docs Offline) - C:\Users\Menderes\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-16]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Menderes\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-15]

CHR Extension: (Google Mail) - C:\Users\Menderes\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-05-15]

CHR HKLM\...\Chrome\Extension: [nppllibpnmahfaklnpggkibhkapjkeob] - C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.11.42\Exts\Chrome.crx <nicht gefunden>

CHR HKU\S-1-5-21-3766998740-2209911483-25742500-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S4 AbAdminService; C:\Program Files (x86)\ToolbarTerminator\AbAdminService.exe [34568 2015-10-20] (Ascora GmbH)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [970656 2016-05-18] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [467016 2016-05-18] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [467016 2016-05-18] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1435704 2016-05-18] (Avira Operations GmbH & Co. KG)

S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [636312 2016-05-20] (AVG Technologies CZ, s.r.o.)

R2 avgfws; C:\Program Files (x86)\AVG\Av\avgfwsa.exe [1998712 2016-05-20] (AVG Technologies CZ, s.r.o.)

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5164800 2016-05-20] (AVG Technologies CZ, s.r.o.)

R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1080592 2016-05-18] (AVG Technologies CZ, s.r.o.)

R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [705528 2016-05-20] (AVG Technologies CZ, s.r.o.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2945792 2016-05-26] (Microsoft Corporation)

S4 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [136048 2015-09-06] (Dropbox, Inc.)

S4 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [136048 2015-09-06] (Dropbox, Inc.)

S4 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation)

S4 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]

S4 LMS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [262144 2009-09-30] (Intel Corporation) [Datei ist nicht signiert]

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2016-01-29] (Microsoft Corporation)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]

R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [374344 2016-01-29] (Microsoft Corporation)

S3 ose; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [200240 2016-05-25] (Microsoft Corporation) [Datei ist nicht signiert]

S4 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2417376 2015-10-19] (pdfforge GmbH)

S4 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2015-10-19] (pdfforge GmbH)

S4 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2015-10-19] (pdfforge GmbH)

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]

S4 PuranDefrag; C:\Windows\system32\PuranDefragS.exe [292736 2012-08-13] (Puran Software) [Datei ist nicht signiert]

S4 ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [633856 2011-06-08] (Nokia) [Datei ist nicht signiert]

S4 SlimService; C:\Program Files\SlimService\SlimServiceFactory.exe [252096 2016-05-16] (SlimWare Utilities, Inc.)

S4 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-05-21] (DEVGURU Co., LTD.)

R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [237736 2015-05-29] (Synaptics Incorporated)

S2 UNS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2314240 2009-09-30] (Intel Corporation) [Datei ist nicht signiert]

S4 vToolbarUpdater40.3.1; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.1\ToolbarUpdater.exe [1323080 2016-06-05] (AVG Secure Search)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162592 2016-02-16] (AVG Technologies CZ, s.r.o.)

R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [97208 2015-08-29] (AVG Technologies CZ, s.r.o.)

R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [307456 2016-05-18] (AVG Technologies CZ, s.r.o.)

R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [272304 2016-01-26] (AVG Technologies CZ, s.r.o.)

R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [260352 2016-05-02] (AVG Technologies CZ, s.r.o.)

R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)

R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [247040 2016-05-05] (AVG Technologies CZ, s.r.o.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [154816 2016-03-11] (Avira Operations GmbH & Co. KG)

R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [51968 2016-05-02] (AVG Technologies CZ, s.r.o.)

R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [279296 2016-05-17] (AVG Technologies CZ, s.r.o.)

R0 avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [71936 2016-05-05] (AVG Technologies CZ, s.r.o.)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141920 2016-05-18] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2015-07-15] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [79696 2016-05-18] (Avira Operations GmbH & Co. KG)

S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)

R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20160 2015-09-06] (Glarysoft Ltd)

R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-06-05] (REALiX(tm))

R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-11-21] (Intel Corporation)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [289120 2015-11-13] (Microsoft Corporation)

R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133816 2015-11-13] (Microsoft Corporation)

R0 PCTCore; C:\Windows\System32\drivers\PCTCore64.sys [413448 2012-10-22] (PC Tools)

R0 pctDS; C:\Windows\System32\drivers\pctDS64.sys [453896 2012-02-28] (PC Tools)

R0 pctEFA; C:\Windows\System32\drivers\pctEFA64.sys [1096176 2012-02-28] (PC Tools)

R1 PCTSD; C:\Windows\System32\Drivers\PCTSD64.sys [253256 2012-11-01] (PC Tools)

S3 RSUSBSTOR; C:\Windows\SysWOW64\Drivers\RtsUStor.sys [225280 2009-09-22] (Realtek Semiconductor Corp.)

S3 RTL8187Se; C:\Windows\System32\DRIVERS\RTL8187Se.sys [442368 2010-04-01] (Realtek Semiconductor Corporation                           )

R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33960 2015-05-29] (Synaptics Incorporated)

S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16056 2016-06-13] (SlimWare Utilities, Inc.)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)

S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)

S3 whfltr2k; C:\Windows\System32\DRIVERS\whfltr2k.sys [9600 2007-01-26] () [Datei ist nicht signiert]

S1 cahqvmxj; \??\C:\Windows\system32\drivers\cahqvmxj.sys [X]

S1 mmzpfmfi; \??\C:\Windows\system32\drivers\mmzpfmfi.sys [X]

S1 tixnohtu; \??\C:\Windows\system32\drivers\tixnohtu.sys [X]

S1 tjqcfwgw; \??\C:\Windows\system32\drivers\tjqcfwgw.sys [X]

S1 vgycbwda; \??\C:\Windows\system32\drivers\vgycbwda.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-06-13 15:49 - 2016-06-13 15:51 - 00026060 _____ C:\Users\Menderes\Desktop\FRST.txt

2016-06-13 15:48 - 2016-06-13 15:48 - 02385408 _____ (Farbar) C:\Users\Menderes\Desktop\FRST64.exe

2016-06-12 17:14 - 2016-06-12 17:14 - 00116776 _____ C:\Users\Menderes\AppData\Local\GDIPFONTCACHEV1.DAT

2016-06-11 16:00 - 2016-06-11 16:00 - 00453456 _____ C:\Windows\system32\FNTCACHE.DAT

2016-06-11 15:34 - 2016-06-11 15:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in

2016-06-11 15:29 - 2016-06-06 18:58 - 00041704 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe

2016-06-11 15:29 - 2016-06-06 18:50 - 01204224 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2016-06-11 15:29 - 2016-06-03 15:05 - 01413120 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2016-06-11 15:29 - 2016-05-27 15:06 - 00569856 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2016-06-11 15:29 - 2016-05-27 15:06 - 00544256 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2016-06-11 15:29 - 2016-05-27 15:06 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2016-06-11 15:29 - 2016-05-27 15:06 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll

2016-06-11 15:29 - 2016-05-22 15:06 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2016-06-11 14:43 - 2016-06-11 14:44 - 06893008 _____ (Piriform Ltd) C:\Users\Menderes\Downloads\ccsetup518 (1).exe

2016-06-11 14:42 - 2016-06-11 14:43 - 06893008 _____ (Piriform Ltd) C:\Users\Menderes\Downloads\ccsetup518.exe

2016-06-10 01:30 - 2016-06-10 01:30 - 00016964 _____ C:\Users\Menderes\Downloads\uebungen_abschluss_multiaugustinum.zip

2016-06-10 01:26 - 2016-06-10 01:26 - 00051256 _____ C:\Users\Menderes\Downloads\Checkliste_MWR.pdf

2016-06-09 21:56 - 2016-06-09 21:56 - 02668415 _____ C:\Users\Menderes\Downloads\Mathe-Schularbeit.pdf

2016-06-07 22:08 - 2016-06-07 22:08 - 00000000 ____D C:\Users\Menderes\AppData\Local\Artipic

2016-06-07 22:03 - 2016-06-07 22:03 - 01027840 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys

2016-06-07 22:03 - 2016-06-07 22:03 - 00082544 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll

2016-06-07 18:46 - 2016-06-07 18:47 - 02922406 _____ C:\Users\Menderes\Downloads\BW3.pdf

2016-06-07 18:46 - 2016-06-07 18:47 - 02515768 _____ C:\Users\Menderes\Downloads\BW4.pdf

2016-06-07 18:46 - 2016-06-07 18:46 - 00000000 ____D C:\Users\Menderes\AppData\Roaming\Intel Corporation

2016-06-07 18:45 - 2016-06-07 18:45 - 00000000 ____D C:\ProgramData\Intel

2016-06-07 18:43 - 2016-06-07 18:43 - 00000000 ____D C:\Program Files\Intel

2016-06-07 18:41 - 2016-06-07 18:41 - 00000000 ____D C:\Users\Menderes\Intel

2016-06-05 22:58 - 2016-06-05 22:58 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf

2016-06-05 22:58 - 2016-06-05 22:58 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf

2016-06-05 22:53 - 2016-06-05 22:53 - 00000000 ____D C:\Users\Menderes\AppData\Roaming\WinBatch

2016-06-05 22:30 - 2016-06-11 15:16 - 00000000 ____D C:\Users\Menderes\AppData\Local\AVG Web TuneUp

2016-06-05 22:30 - 2016-06-11 15:16 - 00000000 ____D C:\ProgramData\AVG Web TuneUp

2016-06-05 22:30 - 2016-06-05 22:30 - 00000000 ____D C:\Program Files\Common Files\AVG Secure Search

2016-06-05 22:29 - 2016-06-07 22:29 - 00000372 _____ C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - Menderes).job

2016-06-05 22:29 - 2016-06-05 22:29 - 00003040 _____ C:\Windows\System32\Tasks\SlimCleaner Plus (Scheduled Scan - Menderes)

2016-06-05 22:19 - 2016-06-05 22:19 - 00000229 _____ C:\AiOLog.txt

2016-06-05 22:19 - 2016-06-05 22:19 - 00000000 ____D C:\Users\Menderes\AppData\Roaming\Sun

2016-06-05 22:18 - 2016-06-05 22:18 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2016-06-05 22:18 - 2016-06-05 22:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2016-06-05 22:17 - 2016-06-05 22:17 - 00000000 ____D C:\Users\Menderes\AppData\Local\Downloaded Installations

2016-06-05 22:13 - 2016-06-05 22:13 - 01473544 _____ C:\Users\Menderes\Downloads\SlimCleaner - CHIP-Installer.exe

2016-06-05 22:08 - 2016-06-07 22:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3

2016-06-05 22:08 - 2016-06-07 22:02 - 00002890 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (Menderes)

2016-06-05 22:08 - 2016-06-05 22:08 - 00027552 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS

2016-06-05 22:08 - 2016-06-05 22:08 - 00003258 _____ C:\Windows\System32\Tasks\Driver Booster Scheduler

2016-06-05 22:08 - 2016-06-05 22:08 - 00000000 ____D C:\Windows\IObit

2016-06-05 22:08 - 2016-06-05 22:08 - 00000000 ____D C:\Users\Menderes\AppData\Roaming\IObit

2016-06-05 22:08 - 2016-06-05 22:08 - 00000000 ____D C:\ProgramData\IObit

2016-06-05 22:07 - 2016-06-05 22:07 - 00000000 ____D C:\Program Files (x86)\IObit

2016-06-05 22:03 - 2016-06-05 22:03 - 00000000 ____D C:\ProgramData\SlimWare Utilities, Inc

2016-06-05 22:02 - 2016-06-07 18:31 - 00000000 ____D C:\Program Files\SlimCleaner Plus

2016-06-05 22:02 - 2016-06-05 22:02 - 00000000 ____D C:\ProgramData\SlimWare Utilities Inc

2016-06-05 22:02 - 2016-06-05 22:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimCleaner Plus

2016-06-05 22:02 - 2016-06-05 22:02 - 00000000 ____D C:\Program Files\SlimService

2016-06-05 22:01 - 2016-06-13 15:32 - 00002848 _____ C:\Windows\System32\Tasks\SlimDrivers Startup

2016-06-05 22:01 - 2016-06-13 15:32 - 00000416 _____ C:\Windows\Tasks\SlimDrivers Startup.job

2016-06-05 22:01 - 2016-06-13 15:30 - 00016056 _____ (SlimWare Utilities, Inc.) C:\Windows\system32\Drivers\SWDUMon.sys

2016-06-05 22:01 - 2016-06-05 22:32 - 00000000 ____D C:\Users\Menderes\AppData\Local\SlimWare Utilities Inc

2016-06-05 22:01 - 2016-06-05 22:01 - 00000000 ____D C:\Users\Menderes\AppData\Local\Downloaded Installers

2016-06-05 22:00 - 2016-06-05 22:00 - 00981728 _____ (SlimWare Utilities, Inc.) C:\Users\Menderes\Downloads\SlimDrivers231-setup.exe

2016-06-05 22:00 - 2016-06-05 22:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimDrivers

2016-06-05 22:00 - 2016-06-05 22:00 - 00000000 ____D C:\Program Files (x86)\SlimDrivers

2016-06-05 21:56 - 2016-06-05 21:56 - 01473544 _____ C:\Users\Menderes\Downloads\Driver Booster Free - CHIP-Installer.exe

2016-06-05 21:56 - 2016-06-05 21:56 - 01473544 _____ C:\Users\Menderes\Downloads\All in One Runtimes - CHIP-Installer.exe

2016-06-05 21:52 - 2016-06-05 21:52 - 00000000 ____D C:\Users\Menderes\AppData\Roaming\TuneUp Software

2016-06-05 21:52 - 2016-06-05 21:52 - 00000000 ____D C:\Users\Menderes\AppData\Roaming\AVG

2016-06-05 21:52 - 2016-06-05 21:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG

2016-06-05 21:52 - 2016-06-05 21:52 - 00000000 ____D C:\Program Files\Common Files\AV

2016-06-05 21:51 - 2016-06-05 21:51 - 00000000 ___HD C:\$AVG

2016-06-05 21:50 - 2016-06-05 22:20 - 00000000 ____D C:\Program Files (x86)\DriverToolkit

2016-06-05 21:50 - 2016-06-05 21:50 - 00000000 ____D C:\Users\Menderes\AppData\Local\DriverToolkit

2016-06-05 21:48 - 2016-06-13 15:36 - 00000000 ____D C:\ProgramData\MFAData

2016-06-05 21:48 - 2016-06-05 21:48 - 00000000 ____D C:\Users\Menderes\AppData\Local\MFAData

2016-06-05 21:47 - 2016-06-05 21:47 - 00000000 ____D C:\Users\Menderes\AppData\Local\AVG Netherlands BV

2016-06-05 21:47 - 2016-06-05 21:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen

2016-06-05 21:46 - 2016-06-05 21:46 - 01124512 _____ (SlimWare Utilities, Inc.) C:\Users\Menderes\Downloads\AVG_Driver_Updater_Setup_11_1.exe

2016-06-05 21:45 - 2016-06-05 21:46 - 03078064 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Menderes\Downloads\AVG_Protection_Free_1606.exe

2016-06-05 11:45 - 2016-06-05 11:45 - 03135696 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Menderes\Downloads\AVG_PCTuneUp_42916.exe

2016-06-05 11:42 - 2016-06-05 11:42 - 00000000 ____D C:\temp

2016-06-01 20:02 - 2016-06-01 20:02 - 01205508 _____ C:\Users\Menderes\Downloads\Inflation aktuell_Q1-16_final.pdf

2016-05-24 20:45 - 2016-05-24 20:45 - 00002387 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk

2016-05-24 20:45 - 2016-05-24 20:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools

2016-05-24 20:43 - 2016-06-11 14:59 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2016-05-24 20:43 - 2016-05-24 20:43 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform

2016-05-24 20:40 - 2016-05-24 20:40 - 00000000 ____D C:\Program Files\Microsoft Office 15

2016-05-24 20:38 - 2016-05-24 20:38 - 00000000 ____D C:\Users\Menderes\Documents\OneNote-Notizbücher

2016-05-24 20:36 - 2016-06-05 22:20 - 00000000 ____D C:\Program Files (x86)\DLLEscort

2016-05-24 20:36 - 2016-05-24 20:37 - 00000000 ____D C:\ProgramData\dllescort

2016-05-24 20:09 - 2016-04-12 03:23 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2016-05-24 20:09 - 2016-04-12 03:23 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2016-05-24 20:09 - 2016-04-12 03:20 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2016-05-24 20:09 - 2016-04-12 03:20 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2016-05-24 20:09 - 2016-04-12 03:20 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2016-05-24 20:09 - 2016-04-12 03:20 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2016-05-24 20:09 - 2016-04-12 03:20 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2016-05-24 20:09 - 2016-04-12 03:20 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2016-05-24 20:09 - 2016-04-12 03:20 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2016-05-24 20:09 - 2016-04-12 03:20 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2016-05-24 20:09 - 2016-04-12 03:20 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll

2016-05-24 20:09 - 2016-04-12 03:20 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2016-05-24 20:09 - 2016-04-12 03:20 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2016-05-24 20:09 - 2016-04-12 03:20 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2016-05-24 20:09 - 2016-04-12 03:02 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2016-05-24 20:09 - 2016-04-12 03:02 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2016-05-24 20:09 - 2016-04-12 03:02 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2016-05-24 20:09 - 2016-04-12 03:02 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2016-05-24 20:09 - 2016-04-12 03:02 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2016-05-24 20:09 - 2016-04-12 03:02 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2016-05-24 20:09 - 2016-04-12 03:02 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2016-05-24 20:09 - 2016-04-12 03:01 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2016-05-24 20:09 - 2016-04-12 02:43 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2016-05-24 20:09 - 2016-04-12 02:43 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2016-05-24 20:09 - 2016-04-12 02:43 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2016-05-24 20:09 - 2016-04-09 08:58 - 14186496 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2016-05-24 20:09 - 2016-04-09 08:57 - 01867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll

2016-05-24 20:09 - 2016-04-09 08:54 - 12881408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2016-05-24 20:09 - 2016-04-09 08:54 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll

2016-05-24 20:09 - 2016-04-09 07:53 - 03231232 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2016-05-24 20:09 - 2016-04-09 07:44 - 02973184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe

2016-05-24 20:08 - 2016-04-12 03:20 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2016-05-24 20:08 - 2016-04-12 03:20 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2016-05-24 20:08 - 2016-04-12 03:20 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2016-05-24 20:08 - 2016-04-12 03:20 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2016-05-24 20:08 - 2016-04-12 03:20 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2016-05-24 20:08 - 2016-04-12 03:20 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2016-05-24 20:08 - 2016-04-12 03:02 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2016-05-24 20:08 - 2016-04-12 03:02 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll

2016-05-24 20:08 - 2016-04-12 03:02 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2016-05-24 20:08 - 2016-04-12 03:02 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2016-05-24 20:08 - 2016-04-12 03:02 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2016-05-24 20:08 - 2016-04-12 03:01 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2016-05-24 20:08 - 2016-04-12 03:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2016-05-24 20:08 - 2016-04-12 02:50 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2016-05-24 20:08 - 2016-04-12 02:42 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2016-05-24 20:08 - 2016-04-12 02:41 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2016-05-24 20:08 - 2016-04-12 02:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll

2016-05-24 20:07 - 2016-04-14 18:46 - 00114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2016-05-24 20:07 - 2016-04-14 18:42 - 03243520 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2016-05-24 20:07 - 2016-04-14 18:42 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2016-05-24 20:07 - 2016-04-14 18:42 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2016-05-24 20:07 - 2016-04-14 18:42 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2016-05-24 20:07 - 2016-04-14 18:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll

2016-05-24 20:07 - 2016-04-14 17:33 - 02365440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2016-05-24 20:07 - 2016-04-14 17:33 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2016-05-24 20:07 - 2016-04-14 17:33 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll

2016-05-24 20:07 - 2016-04-14 17:33 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll

2016-05-24 20:07 - 2016-04-14 17:19 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe

2016-05-24 20:07 - 2016-04-14 17:11 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe

2016-05-22 15:36 - 2016-05-22 15:36 - 00000000 ____D C:\Users\Menderes\AppData\Roaming\BMDNTCS

2016-05-22 15:36 - 2016-05-22 15:36 - 00000000 ____D C:\ProgramData\BMDNTCS

2016-05-22 11:34 - 2016-05-22 11:46 - 00000684 ____H C:\Users\Menderes\Documents\.picasa.ini

2016-05-20 15:55 - 2016-05-20 15:58 - 179623493 _____ C:\Users\Menderes\Downloads\dropbox.zip

2016-05-20 15:47 - 2016-05-20 15:47 - 00309912 _____ C:\Users\Menderes\Downloads\EGN_20160509_17740056.pdf

2016-05-18 12:13 - 2016-05-18 12:13 - 00307456 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys

2016-05-18 01:54 - 2016-05-18 01:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2016-05-17 21:21 - 2016-04-09 06:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2016-05-17 21:21 - 2016-04-09 05:52 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2016-05-17 19:03 - 2016-04-09 08:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2016-05-17 19:03 - 2016-04-09 08:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2016-05-17 19:03 - 2016-04-09 07:49 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2016-05-17 19:02 - 2016-04-23 19:08 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2016-05-17 19:02 - 2016-04-23 18:24 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2016-05-17 19:02 - 2016-04-23 07:25 - 25816064 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2016-05-17 19:02 - 2016-04-23 07:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2016-05-17 19:02 - 2016-04-23 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2016-05-17 19:02 - 2016-04-23 07:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2016-05-17 19:02 - 2016-04-23 07:00 - 02893312 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2016-05-17 19:02 - 2016-04-23 07:00 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2016-05-17 19:02 - 2016-04-23 07:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2016-05-17 19:02 - 2016-04-23 07:00 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2016-05-17 19:02 - 2016-04-23 07:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2016-05-17 19:02 - 2016-04-23 06:52 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2016-05-17 19:02 - 2016-04-23 06:51 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2016-05-17 19:02 - 2016-04-23 06:48 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2016-05-17 19:02 - 2016-04-23 06:47 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2016-05-17 19:02 - 2016-04-23 06:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2016-05-17 19:02 - 2016-04-23 06:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2016-05-17 19:02 - 2016-04-23 06:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2016-05-17 19:02 - 2016-04-23 06:46 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2016-05-17 19:02 - 2016-04-23 06:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2016-05-17 19:02 - 2016-04-23 06:36 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2016-05-17 19:02 - 2016-04-23 06:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2016-05-17 19:02 - 2016-04-23 06:27 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2016-05-17 19:02 - 2016-04-23 06:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2016-05-17 19:02 - 2016-04-23 06:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2016-05-17 19:02 - 2016-04-23 06:21 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2016-05-17 19:02 - 2016-04-23 06:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2016-05-17 19:02 - 2016-04-23 06:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2016-05-17 19:02 - 2016-04-23 06:11 - 20350464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2016-05-17 19:02 - 2016-04-23 06:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2016-05-17 19:02 - 2016-04-23 06:08 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2016-05-17 19:02 - 2016-04-23 06:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2016-05-17 19:02 - 2016-04-23 06:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2016-05-17 19:02 - 2016-04-23 06:07 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2016-05-17 19:02 - 2016-04-23 06:07 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2016-05-17 19:02 - 2016-04-23 06:07 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2016-05-17 19:02 - 2016-04-23 06:06 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2016-05-17 19:02 - 2016-04-23 06:06 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2016-05-17 19:02 - 2016-04-23 06:05 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2016-05-17 19:02 - 2016-04-23 06:04 - 02285568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2016-05-17 19:02 - 2016-04-23 06:02 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2016-05-17 19:02 - 2016-04-23 06:01 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2016-05-17 19:02 - 2016-04-23 06:00 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2016-05-17 19:02 - 2016-04-23 05:59 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2016-05-17 19:02 - 2016-04-23 05:58 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2016-05-17 19:02 - 2016-04-23 05:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2016-05-17 19:02 - 2016-04-23 05:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2016-05-17 19:02 - 2016-04-23 05:51 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2016-05-17 19:02 - 2016-04-23 05:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2016-05-17 19:02 - 2016-04-23 05:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2016-05-17 19:02 - 2016-04-23 05:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2016-05-17 19:02 - 2016-04-23 05:43 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2016-05-17 19:02 - 2016-04-23 05:41 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2016-05-17 19:02 - 2016-04-23 05:40 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2016-05-17 19:02 - 2016-04-23 05:39 - 01547776 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2016-05-17 19:02 - 2016-04-23 05:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2016-05-17 19:02 - 2016-04-23 05:36 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2016-05-17 19:02 - 2016-04-23 05:33 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2016-05-17 19:02 - 2016-04-23 05:31 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2016-05-17 19:02 - 2016-04-23 05:30 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2016-05-17 19:02 - 2016-04-23 05:30 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2016-05-17 19:02 - 2016-04-23 05:28 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2016-05-17 19:02 - 2016-04-23 05:26 - 13811200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2016-05-17 19:02 - 2016-04-23 05:12 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2016-05-17 19:02 - 2016-04-23 05:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2016-05-17 19:02 - 2016-04-23 05:07 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2016-05-17 19:02 - 2016-04-14 15:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll

2016-05-17 19:02 - 2016-04-14 15:21 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2016-05-17 19:02 - 2016-04-09 09:01 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2016-05-17 19:02 - 2016-04-09 09:01 - 00264936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2016-05-17 19:02 - 2016-04-09 08:57 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2016-05-17 19:02 - 2016-04-09 08:57 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2016-05-17 19:02 - 2016-04-09 08:54 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2016-05-17 19:02 - 2016-04-06 17:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll

2016-05-17 19:01 - 2016-04-09 09:02 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2016-05-17 19:01 - 2016-04-09 09:01 - 05546216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2016-05-17 19:01 - 2016-04-09 09:01 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2016-05-17 19:01 - 2016-04-09 08:59 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2016-05-17 19:01 - 2016-04-09 08:59 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2016-05-17 19:01 - 2016-04-09 08:59 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2016-05-17 19:01 - 2016-04-09 08:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2016-05-17 19:01 - 2016-04-09 08:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2016-05-17 19:01 - 2016-04-09 08:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2016-05-17 19:01 - 2016-04-09 08:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2016-05-17 19:01 - 2016-04-09 08:58 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2016-05-17 19:01 - 2016-04-09 08:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2016-05-17 19:01 - 2016-04-09 08:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2016-05-17 19:01 - 2016-04-09 08:57 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2016-05-17 19:01 - 2016-04-09 08:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2016-05-17 19:01 - 2016-04-09 08:57 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2016-05-17 19:01 - 2016-04-09 08:57 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2016-05-17 19:01 - 2016-04-09 08:57 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2016-05-17 19:01 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2016-05-17 19:01 - 2016-04-09 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2016-05-17 19:01 - 2016-04-09 08:57 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2016-05-17 19:01 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2016-05-17 19:01 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2016-05-17 19:01 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2016-05-17 19:01 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2016-05-17 19:01 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2016-05-17 19:01 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2016-05-17 19:01 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2016-05-17 19:01 - 2016-04-09 08:54 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2016-05-17 19:01 - 2016-04-09 08:54 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll

2016-05-17 19:01 - 2016-04-09 08:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2016-05-17 19:01 - 2016-04-09 08:54 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll

2016-05-17 19:01 - 2016-04-09 08:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2016-05-17 19:01 - 2016-04-09 08:54 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2016-05-17 19:01 - 2016-04-09 08:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2016-05-17 19:01 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2016-05-17 19:01 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2016-05-17 19:01 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2016-05-17 19:01 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2016-05-17 19:01 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2016-05-17 19:01 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2016-05-17 19:01 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2016-05-17 19:01 - 2016-04-09 07:52 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2016-05-17 19:01 - 2016-04-09 07:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2016-05-17 19:01 - 2016-04-09 07:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2016-05-17 19:01 - 2016-04-09 07:48 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2016-05-17 19:01 - 2016-04-09 07:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2016-05-17 19:01 - 2016-04-09 07:43 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2016-05-17 19:01 - 2016-04-09 07:38 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2016-05-17 19:01 - 2016-04-09 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2016-05-17 19:01 - 2016-04-09 07:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2016-05-17 19:00 - 2016-04-09 08:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2016-05-17 19:00 - 2016-04-09 08:57 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:57 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2016-05-17 19:00 - 2016-04-09 08:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 07:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2016-05-17 19:00 - 2016-04-09 07:37 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 07:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 07:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2016-05-17 19:00 - 2016-04-09 07:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2016-05-17 10:50 - 2016-05-17 10:50 - 00279296 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgtdia.sys

2016-05-15 14:08 - 2016-06-10 01:46 - 00002154 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-06-13 15:49 - 2015-02-08 21:53 - 00000000 ____D C:\FRST

2016-06-13 15:44 - 2015-06-02 20:44 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2016-06-13 15:38 - 2009-07-14 06:45 - 00016304 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2016-06-13 15:38 - 2009-07-14 06:45 - 00016304 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2016-06-13 15:30 - 2010-06-24 13:59 - 00065536 _____ C:\Windows\system32\Ikeext.etl

2016-06-13 15:29 - 2016-02-01 22:31 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2016-06-13 15:29 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2016-06-12 17:35 - 2009-07-14 19:58 - 00702630 _____ C:\Windows\system32\perfh007.dat

2016-06-12 17:35 - 2009-07-14 19:58 - 00150996 _____ C:\Windows\system32\perfc007.dat

2016-06-12 17:35 - 2009-07-14 07:13 - 01624178 _____ C:\Windows\system32\PerfStringBackup.INI

2016-06-12 17:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf

2016-06-11 16:36 - 2009-12-04 14:19 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2016-06-11 16:35 - 2014-11-23 16:44 - 03368404 _____ C:\Windows\system32\Drivers\Cat.DB

2016-06-11 15:34 - 2015-04-15 21:21 - 00000000 ____D C:\Windows\system32\appraiser

2016-06-11 15:25 - 2009-12-04 14:48 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office

2016-06-11 15:22 - 2016-04-12 21:26 - 00000000 ____D C:\Program Files (x86)\SmartTools

2016-06-11 15:17 - 2009-12-04 14:22 - 00000000 ____D C:\Program Files\TOSHIBA

2016-06-11 15:13 - 2016-03-28 22:32 - 00000000 ____D C:\Program Files (x86)\AVG

2016-06-11 15:08 - 2016-03-28 22:30 - 00000000 ____D C:\Users\Menderes\AppData\Local\AvgSetupLog

2016-06-11 14:56 - 2009-12-04 14:46 - 00000000 ____D C:\Program Files (x86)\Microsoft Office

2016-06-11 14:45 - 2011-10-05 17:52 - 00000829 _____ C:\Users\Public\Desktop\CCleaner.lnk

2016-06-11 14:38 - 2012-12-29 15:47 - 00000000 ____D C:\Users\Menderes\Desktop\ Handy

2016-06-11 14:37 - 2016-03-12 17:22 - 00000000 ____D C:\Users\Menderes\Desktop\Gülsüm 

2016-06-07 22:08 - 2014-12-08 18:06 - 00000000 ____D C:\ProgramData\ProductData

2016-06-07 22:03 - 2009-12-04 14:20 - 00116304 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll

2016-06-07 18:47 - 2012-08-31 20:01 - 01653598 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2016-06-07 18:45 - 2009-12-04 14:25 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel

2016-06-07 18:41 - 2010-03-04 17:05 - 00000000 ____D C:\Users\Menderes

2016-06-05 22:30 - 2014-08-07 19:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2016-06-05 22:19 - 2015-09-07 21:07 - 00000000 ____D C:\Users\Menderes\.oracle_jre_usage

2016-06-05 22:18 - 2013-05-05 12:15 - 00000000 ____D C:\Users\Public\Documents\Downloaded Installers

2016-06-05 22:17 - 2009-12-04 14:21 - 00000000 ____D C:\Program Files (x86)\Java

2016-06-05 22:10 - 2014-12-08 18:05 - 00000000 ____D C:\Users\Menderes\AppData\LocalLow\IObit

2016-06-05 21:52 - 2015-08-26 16:41 - 00000000 ____D C:\Users\Menderes\AppData\Local\Avg

2016-06-05 21:51 - 2015-08-26 16:40 - 00000000 ____D C:\ProgramData\AVG

2016-06-02 19:56 - 2015-11-01 20:31 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2016-06-02 19:44 - 2011-10-16 16:25 - 00000000 ____D C:\Windows\pss

2016-06-01 22:59 - 2014-12-28 22:47 - 00000000 ___RD C:\Users\Menderes\Documents\Dropbox

2016-05-28 18:09 - 2009-07-14 04:34 - 00000703 _____ C:\Windows\win.ini

2016-05-27 20:39 - 2015-04-06 14:45 - 00000000 ___SD C:\Windows\SysWOW64\GWX

2016-05-27 20:39 - 2015-04-06 14:45 - 00000000 ___SD C:\Windows\system32\GWX

2016-05-24 23:37 - 2015-02-07 18:40 - 00000000 ___RD C:\Users\Menderes\Virtual Machines

2016-05-24 23:37 - 2010-03-04 17:05 - 00000000 ___RD C:\Users\Menderes\Bilder

2016-05-24 20:43 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared

2016-05-22 15:17 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2016-05-20 15:26 - 2012-12-29 15:46 - 00000000 ____D C:\Users\Menderes\Desktop\Menderes 

2016-05-18 01:53 - 2015-07-29 19:21 - 00141920 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2016-05-18 01:53 - 2015-07-29 19:21 - 00079696 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2016-05-17 23:38 - 2014-12-12 19:18 - 00000000 ____D C:\Program Files\Windows Journal

2016-05-17 21:52 - 2013-07-17 20:10 - 00000000 ____D C:\Windows\system32\MRT

2016-05-17 21:39 - 2010-03-19 16:48 - 139319312 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2016-05-17 21:08 - 2015-11-12 23:08 - 00000000 ___HD C:\Users\Menderes\Desktop\.picasaoriginals

2016-05-15 14:05 - 2012-12-29 15:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2011-02-21 19:40 - 2011-02-21 19:40 - 0000000 _____ () C:\Users\Menderes\AppData\Roaming\wklnhst.dat

2015-11-12 22:47 - 2016-03-05 20:16 - 0004608 _____ () C:\Users\Menderes\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2015-11-15 16:48 - 2015-11-15 16:48 - 0003951 _____ () C:\Users\Menderes\AppData\Local\recently-used.xbel

2011-12-18 18:18 - 2015-08-23 21:33 - 0007636 _____ () C:\Users\Menderes\AppData\Local\Resmon.ResmonCfg

2014-11-14 16:27 - 2014-11-14 16:27 - 0000000 _____ () C:\Users\Menderes\AppData\Local\{06823589-88D7-4E3F-929F-9F31B4B0C024}

2015-04-21 13:53 - 2015-04-21 13:53 - 0000000 _____ () C:\Users\Menderes\AppData\Local\{54B97AA3-9788-4736-A88C-F6F7A5136119}

2015-06-24 19:58 - 2015-06-24 19:58 - 0000000 _____ () C:\Users\Menderes\AppData\Local\{D948A916-5A41-452B-A215-266D1905F94D}

2012-12-24 16:16 - 2013-07-24 16:06 - 0000000 _____ () C:\ProgramData\LauncherAccess.dt
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2015-07-29 16:05
 

==================== Ende von FRST.txt ============================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:12-06-2016 01

durchgeführt von Menderes (2016-06-13 15:53:37)

Gestartet von C:\Users\Menderes\Desktop

Windows 7 Home Premium Service Pack 1 (X64) (2010-03-04 15:05:36)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-3766998740-2209911483-25742500-500 - Administrator - Disabled)

Gast (S-1-5-21-3766998740-2209911483-25742500-501 - Limited - Disabled) => C:\Users\Gast

HomeGroupUser$ (S-1-5-21-3766998740-2209911483-25742500-1007 - Limited - Enabled)

Menderes (S-1-5-21-3766998740-2209911483-25742500-1000 - Administrator - Enabled) => C:\Users\Menderes
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AV: Microsoft Security Essentials (Enabled - Up to date) {768124D7-F5F7-6D2F-DDC2-94DFA4017C95}

AV: AVG Internet Security (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}

AS: Microsoft Security Essentials (Enabled - Up to date) {CDE0C533-D3CD-62A1-E772-AFADDF863628}

AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: AVG Internet Security (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}

FW: AVG Internet Security (Enabled) {757AB44A-78C2-7D1A-E37F-CA42A037B368}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.016.20045 - Adobe Systems Incorporated)

Artipic (HKLM-x32\...\{C8A6CFF8-9D80-4C6C-B490-805AD9F2906B}}_is1) (Version: 2.3.3.8 - Artipic AB)

ATI Catalyst Install Manager (HKLM\...\{4044201A-8576-2999-1166-96C5593F3CFF}) (Version: 3.0.825.0 - ATI Technologies, Inc.)

AVG (HKLM\...\AvgZen) (Version: 1.61.2.12974 - AVG Technologies)

AVG (Version: 16.81.7639 - AVG Technologies) Hidden

AVG 2016 (Version: 16.0.4604 - AVG Technologies) Hidden

AVG Protection (HKLM\...\AVG) (Version: 2016.81.7639 - AVG Technologies)

AVG Zen (Version: 1.61.9 - AVG Technologies) Hidden

Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.17.273 - Avira Operations GmbH & Co. KG)

BMD CRW (HKLM-x32\...\{E662F023-ACB2-445A-B7CE-65F487AFBEF5}) (Version: 5.50.1322.2 - BMD Systemhaus)

ccc-core-static (x32 Version: 2009.0908.2225.38429 - Ihr Firmenname) Hidden

CCleaner (HKLM\...\CCleaner) (Version: 5.18 - Piriform)

Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Dropbox (HKLM-x32\...\Dropbox) (Version: 3.10.6 - Dropbox, Inc.)

Druckerdeinstallation für EPSON SX525WD Series (HKLM\...\EPSON SX525WD Series) (Version:  - SEIKO EPSON Corporation)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)

Facebook Video Calling 1.2.0.287 (HKLM-x32\...\{B92C5909-1D37-4C51-8397-A28BB28E5DC3}) (Version: 1.2.287 - Skype Limited)

Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)

FMW 1 (Version: 1.92.4 - AVG Technologies) Hidden

Focus on Modern Business 2 NEU. CD-ROM (HKLM-x32\...\Focus on Modern Business 2 V2. CD-ROM_is1) (Version:  - VERITAS Verlags- und Handelsges.m.b.H. & Co. OG)

Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Free YouTube to MP3 Converter version 3.12.52.1215 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.52.1215 - DVDVideoSoft Ltd.)

GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)

go te.comp-training (HKLM-x32\...\{905BF3AB-9FC8-40F8-8906-1A7C17C1EC48}) (Version: 7.5.5 - te.comp lernsysteme GmbH)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 51.0.2704.84 - Google Inc.)

Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden

HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden

Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.0.1006 - Intel Corporation)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)

Java 8 Update 92 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218092F0}) (Version: 8.0.920.14 - Oracle Corporation)

Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)

Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office Access Runtime (German) 2007 (HKLM-x32\...\{90120000-001C-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0407-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)

Microsoft Office PowerPoint Viewer 2007 (German) (HKLM-x32\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft OneNote Home and Student 2016 - de-de (HKLM\...\OneNoteFreeRetail - de-de) (Version: 16.0.6965.2053 - Microsoft Corporation)

Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.9.218.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Mozilla Firefox 46.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 46.0.1 (x86 de)) (Version: 46.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 46.0.1.5966 - Mozilla)

MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden

MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

MyFreeCodec (HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\MyFreeCodec) (Version:  - )

Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.6925.1016 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (Version: 16.0.6925.1016 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (x32 Version: 16.0.6925.1016 - Microsoft Corporation) Hidden

PC Connectivity Solution (HKLM-x32\...\{C373F7C4-05D2-4047-96D1-6AF30661C6AA}) (Version: 11.4.19.0 - Nokia)

PDF Architect 4 (HKLM-x32\...\PDF Architect 4) (Version: 4.0.26.25466 - pdfforge GmbH)

PDF Architect 4 Create Module (Version: 4.0.9.25450 - pdfforge GmbH) Hidden

PDF Architect 4 Edit Module (Version: 4.0.9.25450 - pdfforge GmbH) Hidden

PDF Architect 4 View Module (Version: 4.0.9.25450 - pdfforge GmbH) Hidden

PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.2.2 - pdfforge)

Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.259 - Google, Inc.)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5964 - Realtek Semiconductor Corp.)

Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30105 - Realtek Semiconductor Corp.)

Realtek WLAN Driver (HKLM-x32\...\{0FB630AB-7BD8-40AE-B223-60397D57C3C9}) (Version: 2.00.0006 - Realtek)

Realtek WLAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4fed-B2B9-173001290E16}) (Version: 2.00.0016 - REALTEK Semiconductor Corp.)

Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.3.13043_14 - Samsung Electronics Co., Ltd.)

Samsung Kies (x32 Version: 2.5.3.13043_14 - Samsung Electronics Co., Ltd.) Hidden

Samsung Mobile phone USB driver Drive Software (HKLM\...\Samsung Mobile phone USB driver Drive) (Version:  - )

Samsung PC Studio 3 (x32 Version: 3.0.0.80601 - Samsung Electronics Co., Ltd.) Hidden

Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.55.0 - Samsung Electronics Co., Ltd.)

SlimCleaner Plus (Version: 2.5.6 - Slimware Utilities Holdings, Inc.) Hidden

SlimDrivers (HKLM-x32\...\{746AB259-6474-4111-8966-1C62F9A6E063}) (Version: 2.3.1 - SlimWare Utilities, Inc.)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.10.0 - Synaptics Incorporated)

TIPP10 Version 2.1.0 (HKLM-x32\...\TIPP10_is1) (Version:  - (c) 2006-2011, Tom Thielicke IT Solutions)

TOSHIBA ConfigFree (HKLM-x32\...\{F3529665-D75E-4D6D-98F0-745C78C68E9B}) (Version: 8.0.25 - TOSHIBA Corporation)

TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.2 for x64 - TOSHIBA Corporation)

TOSHIBA DVD PLAYER (HKLM-x32\...\{6C5F3BDC-0A1B-4436-A696-5939629D5C31}) (Version: 3.01.1.06-A - TOSHIBA Corporation)

TOSHIBA Extended Tiles for Windows Mobility Center (HKLM-x32\...\InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}) (Version:  - )

TOSHIBA Face Recognition (HKLM-x32\...\InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}) (Version: 3.1.3.64 - TOSHIBA Corporation)

TOSHIBA Flash Cards Support Utility (HKLM-x32\...\InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}) (Version: 1.63.0.4C - TOSHIBA CORPORATION)

TOSHIBA Hardware Setup (HKLM-x32\...\InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}) (Version: 1.63.0.16C - TOSHIBA CORPORATION)

TOSHIBA HDD/SSD Alert (HKLM-x32\...\InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.64.6 - TOSHIBA Corporation)

TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.5.6.64 - TOSHIBA Corporation)

TOSHIBA Recovery Media Creator (HKLM\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.0.4 x64 - TOSHIBA Corporation)

TOSHIBA Recovery Media Creator Reminder (HKLM-x32\...\InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}) (Version: 1.00.0019 - TOSHIBA)

TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.1.40 - TOSHIBA)

TOSHIBA Supervisor Password (HKLM-x32\...\InstallShield_{CBD6B23D-41D5-4A46-8019-6208516C9712}) (Version:  - )

TOSHIBA Supervisorkennwort (HKLM-x32\...\InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}) (Version: 1.63.0.7C - TOSHIBA CORPORATION)

TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.2.34.64 - TOSHIBA Corporation)

TOSHIBA Web Camera Application (HKLM-x32\...\{5E6F6CF3-BACC-4144-868C-E14622C658F3}) (Version: 1.1.1.9 - TOSHIBA Corporation)

TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.340 - TuneUp Software) Hidden

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)

Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)

Utility Common Driver (x32 Version: 1.0.50.27C - TOSHIBA) Hidden

Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)

Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

Windows 7 Upgrade Advisor (HKLM-x32\...\{9A4D182C-35C7-4791-8484-4304EBC9101A}) (Version: 2.0.5000.0 - Microsoft Corporation)

WinRAR 5.30 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {05926E39-E616-400C-BD10-01E356D962CD} - System32\Tasks\{796EE8BD-A030-44E2-983F-CAD656EBC288} => Chrome.exe hxxp://ui.skype.com/ui/0/6.3.59.107/de/abandoninstall?page=tsProgressBar

Task: {128FAC2A-2C6A-443D-AF16-3DDB5BA74951} - System32\Tasks\{D59BE138-2A4A-4ACB-B08B-5E39B1693B3E} => pcalua.exe -a "C:\Users\Menderes\Downloads\ToshibaW7TEMPRO (2).exe" -d C:\Users\Menderes\Downloads

Task: {1347CC35-2A01-45DB-82DC-EF8C7222D814} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-02] (Google Inc.)

Task: {1B1A83D4-F9A0-4A7E-AC2B-976D2461F860} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-06-01] (Piriform Ltd)

Task: {1CAC2B43-F0C8-43B9-84E9-0A136B2D96AF} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-05-26] (Microsoft Corporation)

Task: {2B3D68B4-F8E2-4306-801F-EFAEDBC1C1CD} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe

Task: {348D256F-4C49-4D71-80B7-7E666B4AAC10} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)

Task: {43983826-98E0-4CD6-9A0D-29C57FD1CE47} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3766998740-2209911483-25742500-1000Core => C:\Users\Menderes\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-09-16] (Dropbox, Inc.)

Task: {45BB44EB-F545-4BE8-B03C-9D2C5412751C} - System32\Tasks\SlimDrivers Startup => C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe [2015-08-19] (SlimWare Utilities, Inc.)

Task: {524501EC-3706-4201-B667-FFCF15904BBE} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3766998740-2209911483-25742500-1000UA => C:\Users\Menderes\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-09-16] (Dropbox, Inc.)

Task: {543B6274-2874-4C2C-BC65-333A2E1DC54C} - System32\Tasks\{F3BDB922-2971-4971-9CFD-9DEDFC16B18A} => pcalua.exe -a E:\setup.exe -d E:\

Task: {6D98BAEC-9243-4B9C-AB06-CEADAE4A32D7} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-05-26] (Microsoft Corporation)

Task: {7232EECA-4194-43BC-A35F-286A15039C45} - System32\Tasks\{432D2E13-50E9-4E00-ABC6-E0F351D09298} => C:\Program Files (x86)\Samsung\Kies\Kies.exe [2015-07-27] (Samsung)

Task: {791F85E2-0F27-4031-B035-3B99CB5737E4} - System32\Tasks\Driver Booster SkipUAC (Menderes) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe

Task: {821D67BC-BCB8-40EF-9A51-F05523DD24AC} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3766998740-2209911483-25742500-1000UA => C:\Users\Menderes\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-11-17] (Facebook Inc.)

Task: {89701960-2E2A-4BD9-BEA9-40087C80D1A3} - System32\Tasks\GU5SkipUAC => C:\Program Files (x86)\Glary Utilities 5\Integrator.exe

Task: {8BE2B04F-ABED-4C51-8C25-8DBE28E49ED2} - System32\Tasks\{F01E03A8-CAAB-4098-A4DB-82E9CF14C956} => pcalua.exe -a C:\Works\MSWorks\setup.exe -d C:\Works\MSWorks

Task: {8CDC2456-3360-4C2B-9B3D-F489EB294FE0} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-09-06] (Dropbox, Inc.)

Task: {99302F2F-88AD-4B2B-91B8-9BF5E5087F87} - System32\Tasks\{29C83841-E9A0-4D9E-A7FA-D0BE448B01BC} => Chrome.exe 

Task: {9AEFCE3E-D03C-4A0B-A5D2-9C5EA5557162} - System32\Tasks\{13FE9554-82EB-4F4D-B99C-B619A7DC3EF0} => pcalua.exe -a C:\Users\Menderes\Downloads\ToshibaW7TEMPRO.exe -d C:\Users\Menderes\Downloads

Task: {9AF5559E-1549-4147-908C-714E52DCF577} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe

Task: {A6774CB7-E304-4499-AD48-F22715E13EAA} - System32\Tasks\{FBF39A80-CC59-47A0-9DB9-2FBE25644A97} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\setup.exe" -c -runfromtemp -removeonly

Task: {ABAF54C6-6354-45B7-B92E-1DC869F3218E} - System32\Tasks\{D3D393B4-0423-4B92-A3AA-D881500B7B2B} => pcalua.exe -a C:\Users\Menderes\AppData\Local\Temp\7zS3DBD.tmp\MicroInstallerNative.exe -d C:\Users\Menderes\AppData\Local\Temp\7zS3DBD.tmp

Task: {AFB70D6A-DC9B-4302-A8C3-E5B52162DB4F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-02] (Google Inc.)

Task: {B386B2D1-B23E-4EDA-BDFE-A1C4434B423A} - System32\Tasks\{A7674F82-7871-4FA3-82C5-BA3884E9A5F8} => pcalua.exe -a "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller"

Task: {C538136C-7E21-427D-9AE8-72ADA95E6B92} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-03-31] (Oracle Corporation)

Task: {CD721219-5A0F-45DA-AC4E-539C92FD9D5D} - System32\Tasks\{DEA16D09-CC95-467E-B990-4ECDB6A31A1D} => C:\Program Files (x86)\Samsung\Kies\Kies.exe [2015-07-27] (Samsung)

Task: {D63E6DE0-DDE8-4E60-AF48-5D5AC08B938A} - System32\Tasks\{849DAE90-BF62-43F1-BC77-AE1D14195104} => pcalua.exe -a E:\STHIW\stInstall.exe -d C:\Windows\system32 -c -rootPath:"E:" -l:"de"

Task: {D6FB0137-411E-4566-BDB8-45479613A5D9} - System32\Tasks\SlimCleaner Plus (Scheduled Scan - Menderes) => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe [2016-05-16] (Slimware Utilities Holdings, Inc.)

Task: {DDCF8B18-67A2-4117-8A87-91EFC1D457D4} - System32\Tasks\GlaryOneClickOptimizer 5 => C:\Program Files (x86)\Glary Utilities 5\OneClickMaintenance.exe

Task: {E5D2A5FC-63AB-4496-915E-83337A1B0205} - System32\Tasks\{7B61BCB5-4B0A-45E5-92FD-6FD1050E3F00} => C:\Program Files (x86)\Samsung\Kies\Kies.exe [2015-07-27] (Samsung)

Task: {E9B3D6B3-F961-4116-B945-A3AFC1952AF9} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)

Task: {ED5C9600-3A56-46D0-811E-FEA47C1769C1} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3766998740-2209911483-25742500-1000Core => C:\Users\Menderes\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-11-17] (Facebook Inc.)

Task: {EF02783A-D943-49D7-88C1-6FE2336DD951} - System32\Tasks\{18B71029-C464-43A3-91FB-F9BF1BAA2F53} => pcalua.exe -a "C:\Users\Menderes\Downloads\ToshibaW7TEMPRO (1).exe" -d C:\Users\Menderes\Downloads

Task: {F295E181-CDC7-4971-BC2F-62428F8C4BAA} - System32\Tasks\{FD9FDAAB-6296-4070-8516-339C4F831334} => pcalua.exe -a C:\Users\Menderes\AppData\Local\Temp\Temp2_ToshibaTEMPRO.zip\TEMPRO_2.3.exe

Task: {F2FAFA0C-DBF6-4361-93C0-13A842CD8BAA} - System32\Tasks\{D92F5D34-A277-43B6-A4EE-C112E45BE4F0} => C:\Program Files (x86)\Samsung\Kies\Kies.exe [2015-07-27] (Samsung)

Task: {F788BCAD-10E3-4883-91B5-11D202C54B22} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\AVG\AVG PC TuneUp\OneClick.exe

Task: {FB75035D-E26D-420C-AB06-4B23CB11EC2C} - System32\Tasks\{AF1C970B-701A-44C2-BA33-85F94F60D42A} => pcalua.exe -a C:\Users\Menderes\AppData\Local\Temp\Temp1_ToshibaTEMPRO.zip\TEMPRO_2.3.exe
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3766998740-2209911483-25742500-1000Core.job => C:\Users\Menderes\AppData\Local\Dropbox\Update\DropboxUpdate.exe

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3766998740-2209911483-25742500-1000UA.job => C:\Users\Menderes\AppData\Local\Dropbox\Update\DropboxUpdate.exe

Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3766998740-2209911483-25742500-1000Core.job => C:\Users\Menderes\AppData\Local\Facebook\Update\FacebookUpdate.exe

Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3766998740-2209911483-25742500-1000UA.job => C:\Users\Menderes\AppData\Local\Facebook\Update\FacebookUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - Menderes).job => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe

Task: C:\Windows\Tasks\SlimDrivers Startup.job => C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

ShortcutWithArgument: C:\Users\Menderes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Adblock Youtube.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=Default --app-id=ghhpkgfjehgoaiiffffbkjgiklcgaklj

ShortcutWithArgument: C:\Users\Menderes\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 2"

ShortcutWithArgument: C:\Users\Menderes\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1"
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2016-06-09 19:38 - 2014-02-10 13:44 - 04592128 _____ () C:\Users\Menderes\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libglesv2.dll

2016-06-09 19:38 - 2014-02-10 13:44 - 00112128 _____ () C:\Users\Menderes\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libegl.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\Windows:nlsPreferences [386]

AlternateDataStreams: C:\ProgramData\Microsoft:ReWAd1oVyIQTM9sQQSKxT [2016]

AlternateDataStreams: C:\ProgramData\Microsoft:SUPHDoxUMKzcEn8LPWK1Ex [2098]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com

IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com

IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com

IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com

IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com

IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com

IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com

IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com

IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com

IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com

IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com

IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com

IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com

IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com

IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net

IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net

IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info

IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com

IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com

IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
 

Da befinden sich 7865 mehr Seiten.
 

IE trusted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\localhost -> localhost

IE trusted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\webcompanion.com -> hxxp://webcompanion.com

IE restricted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\007guard.com -> install.007guard.com

IE restricted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\008i.com -> 008i.com

IE restricted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\008k.com -> www.008k.com

IE restricted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\00hq.com -> www.00hq.com

IE restricted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\010402.com -> 010402.com

IE restricted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\0190-dialers.com -> 0190-dialers.com

IE restricted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\01i.info -> 01i.info

IE restricted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com

IE restricted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com

IE restricted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\05p.com -> 05p.com

IE restricted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com

IE restricted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com

IE restricted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com

IE restricted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\0calories.net -> 0calories.net

IE restricted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\0cj.net -> 0cj.net

IE restricted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\0scan.com -> www.0scan.com

IE restricted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\1-2005-search.com -> www.1-2005-search.com

IE restricted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com

IE restricted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com

IE restricted site: HKU\S-1-5-21-3766998740-2209911483-25742500-1000\...\1-se.com -> 1-se.com
 

Da befinden sich 11403 mehr Seiten.
 
 

==================== Hosts Inhalt: ==========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 04:34 - 2014-11-23 16:59 - 00450709 ____R C:\Windows\system32\Drivers\etc\hosts
 

127.0.0.1        www.007guard.com

127.0.0.1        007guard.com

127.0.0.1        008i.com

127.0.0.1        www.008k.com

127.0.0.1        008k.com

127.0.0.1        www.00hq.com

127.0.0.1        00hq.com

127.0.0.1        010402.com

127.0.0.1        www.032439.com

127.0.0.1        032439.com

127.0.0.1        www.0scan.com

127.0.0.1        0scan.com

127.0.0.1        1000gratisproben.com

127.0.0.1        www.1000gratisproben.com

127.0.0.1        1001namen.com

127.0.0.1        www.1001namen.com

127.0.0.1        100888290cs.com

127.0.0.1        www.100888290cs.com

127.0.0.1        www.100sexlinks.com

127.0.0.1        100sexlinks.com

127.0.0.1        10sek.com

127.0.0.1        www.10sek.com

127.0.0.1        www.1-2005-search.com

127.0.0.1        1-2005-search.com

127.0.0.1        123fporn.info

127.0.0.1        www.123fporn.info

127.0.0.1        123haustiereundmehr.com

127.0.0.1        www.123haustiereundmehr.com

127.0.0.1        123moviedownload.com

127.0.0.1        www.123moviedownload.com
 

Da befinden sich 15461 zusätzliche Einträge.
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-3766998740-2209911483-25742500-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Menderes\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

HKU\S-1-5-21-3766998740-2209911483-25742500-501\Control Panel\Desktop\\Wallpaper -> C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 10.0.0.138

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

MSCONFIG\Services: AbAdminService => 3

MSCONFIG\Services: AdobeARMservice => 2

MSCONFIG\Services: AdvancedSystemCareService8 => 2

MSCONFIG\Services: appstoreService => 2

MSCONFIG\Services: Avira.ServiceHost => 3

MSCONFIG\Services: BstHdAndroidSvc => 3

MSCONFIG\Services: BstHdLogRotatorSvc => 2

MSCONFIG\Services: BstHdUpdaterSvc => 2

MSCONFIG\Services: bthserv => 3

MSCONFIG\Services: cfWiMAXService => 2

MSCONFIG\Services: ConfigFree Service => 2

MSCONFIG\Services: dbupdate => 3

MSCONFIG\Services: dbupdatem => 3

MSCONFIG\Services: Fax => 3

MSCONFIG\Services: gupdate => 2

MSCONFIG\Services: gupdatem => 3

MSCONFIG\Services: IAStorDataMgrSvc => 2

MSCONFIG\Services: IDriverT => 3

MSCONFIG\Services: IEEtwCollectorService => 3

MSCONFIG\Services: LiveUpdateSvc => 2

MSCONFIG\Services: LMS => 2

MSCONFIG\Services: MBAMService => 2

MSCONFIG\Services: MozillaMaintenance => 3

MSCONFIG\Services: PDF Architect 3 => 3

MSCONFIG\Services: PDF Architect 3 CrashHandler => 3

MSCONFIG\Services: PDF Architect 3 Creator => 2

MSCONFIG\Services: PDF Architect 4 => 3

MSCONFIG\Services: PDF Architect 4 CrashHandler => 3

MSCONFIG\Services: PDF Architect 4 Creator => 2

MSCONFIG\Services: ServiceLayer => 3

MSCONFIG\Services: SlimService => 2

MSCONFIG\Services: Sony PC Companion => 3

MSCONFIG\Services: ss_conn_service => 2

MSCONFIG\Services: TemproMonitoringService => 3

MSCONFIG\Services: TMachInfo => 3

MSCONFIG\Services: TODDSrv => 2

MSCONFIG\Services: TosCoSrv => 2

MSCONFIG\Services: TOSHIBA eco Utility Service => 2

MSCONFIG\Services: TOSHIBA HDD SSD Alert Service => 3

MSCONFIG\Services: TPCHSrv => 3

MSCONFIG\Services: TuneUp.UtilitiesSvc => 2

MSCONFIG\Services: vToolbarUpdater40.3.1 => 2

MSCONFIG\Services: Winmgmt => 2

MSCONFIG\Services: WiseBootAssistant => 2

MSCONFIG\Services: wlidsvc => 2

MSCONFIG\Services: WtuSystemSupport => 2

MSCONFIG\startupfolder: C:^Users^Menderes^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Menderes^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup

MSCONFIG\startupreg: A1Diagnose => C:\Program Files (x86)\A1 Servicecenter\A1 Diagnose\A1Diagnose.exe /auto

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: avgnt => "C:\Program Files (x86)\Avira\Antivirus\avgnt.exe" /min

MSCONFIG\startupreg: AvgUi => "C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe" /lps=fmw

MSCONFIG\startupreg: Avira Systray => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe

MSCONFIG\startupreg: Avira SystrayStartTrigger => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe

MSCONFIG\startupreg: Camera Assistant Software => "C:\Program Files (x86)\Camera Assistant Software for Toshiba\traybar.exe" /start

MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR

MSCONFIG\startupreg: Dropbox => "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup

MSCONFIG\startupreg: EPSON SX525WD Series => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGAE.EXE /FU "C:\Users\Menderes\AppData\Local\Temp\E_S9F3D.tmp" /EF "HKCU"

MSCONFIG\startupreg: EPSON67144C (Epson Stylus SX525WD) => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGAE.EXE /FU "C:\Windows\TEMP\E_S9501.tmp" /EF "HKCU"

MSCONFIG\startupreg: Facebook Update => "C:\Users\Menderes\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver

MSCONFIG\startupreg: GUDelayStartup => "C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe" -delayrun

MSCONFIG\startupreg: HWSetup => "C:\Program Files\TOSHIBA\Utilities\HWSetup.exe" hwSetUP

MSCONFIG\startupreg: IAStorIcon => "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60

MSCONFIG\startupreg: KiesPDLR.exe => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run

MSCONFIG\startupreg: KiesPreload => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload

MSCONFIG\startupreg: SlimCleaner Plus => "C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe" /minimize /boot

MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

MSCONFIG\startupreg: TWebCamera => "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun

MSCONFIG\startupreg: vProt => "C:\Program Files (x86)\AVG Web TuneUp\vprot.exe"

MSCONFIG\startupreg: Windows Mobile-based device management => %WINDIR%\WindowsMobile\wmdcBase.exe
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [TCP Query User{E7FA6F0C-1570-4BB4-9515-D9B5E4308EFD}C:\program files (x86)\java\jre6\bin\java.exe] => (Allow) C:\program files (x86)\java\jre6\bin\java.exe

FirewallRules: [UDP Query User{0952B50B-FB72-4980-9B7F-26250905D342}C:\program files (x86)\java\jre6\bin\java.exe] => (Allow) C:\program files (x86)\java\jre6\bin\java.exe

FirewallRules: [TCP Query User{C6CE1B1D-2E34-4F44-B04C-721057903D91}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe

FirewallRules: [UDP Query User{FB8CAC57-065B-4DA7-8701-7AA5FD5B7024}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe

FirewallRules: [{0104EEAC-F36E-4029-923D-8617CD36D75F}] => (Allow) C:\Windows\SysWOW64\msiexec.exe

FirewallRules: [{93B5849B-8EB1-4CAE-8404-F92D9798D5AC}] => (Allow) C:\Windows\SysWOW64\msiexec.exe

FirewallRules: [{339363EA-B686-4C7B-B8F9-BCFEBD9E1E21}] => (Allow) C:\Users\Menderes\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe

FirewallRules: [{9D73588D-FF28-473F-B851-CA86D6CA7A57}] => (Allow) E:\STHIW\stInstall.exe

FirewallRules: [{CE05DB2B-2560-4B5F-BBB0-8575F3E5B18B}] => (Allow) E:\STHIW\stInstall.exe

FirewallRules: [{681E32F0-AECA-4E46-B25A-CFD7B8DCA9A0}] => (Allow) E:\STHIW\stInstall.exe

FirewallRules: [{05C31381-1A96-4B66-A4D6-175A3DECC8B3}] => (Allow) E:\STHIW\stInstall.exe

FirewallRules: [{0C9D523F-625D-4EA3-9814-CAE07F30F7B3}] => (Allow) LPort=2869

FirewallRules: [{FB2C4A6A-69F8-4B43-82A6-886EFB110B6F}] => (Allow) LPort=1900

FirewallRules: [{1470DB0E-B0F5-467B-A520-B26DBD1F9F02}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Servicecenter\Start.exe

FirewallRules: [{35BA9A9E-FBC4-4651-9F8D-F30442D52E2E}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Servicecenter\Start.exe

FirewallRules: [{8762F6C8-406C-4717-93E4-EEEA14181267}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Breitband\A1Breitband.exe

FirewallRules: [{F7F54752-8309-4D9A-B557-91BB9589169B}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Breitband\A1Breitband.exe

FirewallRules: [{A24D31D7-EE83-42E2-8B51-787EB7F2AAA1}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Modemwechsel\A1Modemwechsel.exe

FirewallRules: [{09A5C46E-1A7D-4659-AAA3-B658EDC7C928}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Modemwechsel\A1Modemwechsel.exe

FirewallRules: [{51D19D2C-D6E4-489B-9F9B-E92FE2D7E888}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Diagnose\A1Diagnose.exe

FirewallRules: [{28BC56E0-BC9C-40E0-AB50-5887E19C7E7C}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Diagnose\A1Diagnose.exe

FirewallRules: [{E8CD2936-9435-4AEA-A484-744B86933BF5}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Diagnose\A1Modemkonfigurator.exe

FirewallRules: [{D3890AC6-42A4-4091-AD59-B2729227F9EC}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Diagnose\A1Modemkonfigurator.exe

FirewallRules: [{1CE22956-1880-4AD6-950A-45046F7E87C2}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Diagnose\A1WLANAssistent.exe

FirewallRules: [{C0AD2A1A-D32A-4DBD-9529-15C0FFF32C8D}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Diagnose\A1WLANAssistent.exe

FirewallRules: [{49D161D5-4603-4485-B43E-B84096C31EDD}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Diagnose\A1CMDTool.exe

FirewallRules: [{66C3BE10-EAD9-41E2-B721-239D8B8ABCF4}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Diagnose\A1CMDTool.exe

FirewallRules: [{CB3B7D38-F7F8-4CF1-BA84-8E538987DBC4}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Diagnose\A1Diagnose.exe

FirewallRules: [{5ADF0C2C-CC77-4679-B64A-CAFC0FF0BEA1}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Diagnose\A1Diagnose.exe

FirewallRules: [{CF36D18E-45D4-4747-BC0A-C16F6ED6AF64}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Bandbreiten-Optimierer\A1_Bandbreiten_Optimierer.exe

FirewallRules: [{9E894013-7562-45F0-9FF6-56E8B297FF1E}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Bandbreiten-Optimierer\A1_Bandbreiten_Optimierer.exe

FirewallRules: [{33848DB3-7AFD-471F-B6B7-EA4C1322EF76}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Diagnose\A1CMDTool.exe

FirewallRules: [{42A39701-BF01-43FB-BBFB-983B97962A8A}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Diagnose\A1CMDTool.exe

FirewallRules: [{286DECF0-B514-4546-ACD9-E5239ED3CED8}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 WLAN Optimierer\A1WLANOptimierer.exe

FirewallRules: [{8BA643E3-8256-4EA2-9F97-EA3CBEF4ADE7}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 WLAN Optimierer\A1WLANOptimierer.exe

FirewallRules: [{E5E3E670-1890-4DE6-B782-6D3614133A33}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{93EDD256-FD2A-4709-B715-E03EB4C54EE5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [VirtualPC-In-UDP-1] => (Allow) %SystemRoot%\System32\vpc.exe

FirewallRules: [VirtualPC-In-UDP-2] => (Allow) %SystemRoot%\System32\vpc.exe

FirewallRules: [VirtualPC-In-TCP-1] => (Allow) %SystemRoot%\System32\vpc.exe

FirewallRules: [{3EB4827C-5EDA-441E-A5F9-9018E8E57D1D}] => (Allow) C:\Windows\SysWOW64\muzapp.exe

FirewallRules: [{E84618CD-54E0-4D8F-958D-711DD83A563D}] => (Allow) C:\Windows\SysWOW64\muzapp.exe

FirewallRules: [{A4DEF9AB-5D53-4FEC-8370-F829FA643214}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

FirewallRules: [{9BF129AB-FC5C-43AB-8436-D19EC5D9FDF0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{1C2CF060-F225-45CD-9127-4DB452D5387B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{0449F38D-62E5-44EF-9331-1B5BCCA3FAC9}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe

FirewallRules: [{B0E57CE4-B199-4D7B-AF37-E191194C1DD1}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe

FirewallRules: [{EC07B716-7650-4254-95AA-97923808F5B3}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe

FirewallRules: [{CA23A1A0-E21B-4BE9-BCBF-5A533E07ECB7}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe

FirewallRules: [{53DEC2E2-0F13-4E3B-B285-95D208DA84F1}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe

FirewallRules: [{90685138-D075-4BD9-A2A6-68778879E0BB}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe

FirewallRules: [{842DF0D9-A99F-48C4-916C-6FEC7015DF97}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe

FirewallRules: [{9A8A26E2-D0B4-4B5C-AC4D-7DE7667DD538}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe

FirewallRules: [{B69B7769-2C02-42D2-8E8D-A7E232B0D14E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 

==================== Wiederherstellungspunkte =========================
 

07-06-2016 18:41:59 IIF_MSI

07-06-2016 22:02:29 Revo Uninstaller's restore point - SlimCleaner

07-06-2016 22:02:59 Removed SlimCleaner

07-06-2016 22:07:30 Revo Uninstaller's restore point - Driver Booster 3.4

09-06-2016 19:23:22 Windows Update

11-06-2016 15:07:53 Revo Uninstaller's restore point - AVG PC TuneUp

11-06-2016 15:13:46 Revo Uninstaller's restore point - AVG Web TuneUp

11-06-2016 15:16:52 Revo Uninstaller's restore point - Toshiba Assist

11-06-2016 15:17:21 Entfernt Toshiba Assist

11-06-2016 15:18:57 Revo Uninstaller's restore point - Microsoft Office Live Add-in 1.5

11-06-2016 15:19:23 Microsoft Office Live Add-in 1.5 wird entfernt

11-06-2016 15:20:16 Revo Uninstaller's restore point - SmartTools Office DDE-Fix

11-06-2016 15:22:58 Revo Uninstaller's restore point - Microsoft Office Suite Activation Assistant

11-06-2016 15:23:23 Removed Microsoft Office Suite Activation Assistant.

11-06-2016 15:29:40 Windows Update

11-06-2016 16:35:41 Entfernt Camera Assistant Software for Toshiba

11-06-2016 16:35:58 Windows-Sicherung

13-06-2016 15:41:14 Windows Update
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 

Name: Microsoft-6zu4-Adapter

Description: Microsoft-6zu4-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
 

Name: Microsoft-ISATAP-Adapter #5

Description: Microsoft-ISATAP-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
 

Name: Microsoft-ISATAP-Adapter #3

Description: Microsoft-ISATAP-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
 

Name: Microsoft-ISATAP-Adapter #6

Description: Microsoft-ISATAP-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
 

Name: Microsoft-Teredo-Tunneling-Adapter

Description: Microsoft-Teredo-Tunneling-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (06/11/2016 03:29:41 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 

Details:

AddWin32ServiceFiles: Unable to back up image of service WtuSystemSupport since QueryServiceConfig API failed
 

System Error:

Das System kann die angegebene Datei nicht finden.

.
 

Error: (06/11/2016 03:23:38 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 

Details:

AddWin32ServiceFiles: Unable to back up image of service WtuSystemSupport since QueryServiceConfig API failed
 

System Error:

Das System kann die angegebene Datei nicht finden.

.
 

Error: (06/11/2016 03:22:59 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 

Details:

AddWin32ServiceFiles: Unable to back up image of service WtuSystemSupport since QueryServiceConfig API failed
 

System Error:

Das System kann die angegebene Datei nicht finden.

.
 

Error: (06/11/2016 03:20:17 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 

Details:

AddWin32ServiceFiles: Unable to back up image of service WtuSystemSupport since QueryServiceConfig API failed
 

System Error:

Das System kann die angegebene Datei nicht finden.

.
 

Error: (06/11/2016 03:19:32 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 

Details:

AddWin32ServiceFiles: Unable to back up image of service WtuSystemSupport since QueryServiceConfig API failed
 

System Error:

Das System kann die angegebene Datei nicht finden.

.
 

Error: (06/11/2016 03:18:58 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 

Details:

AddWin32ServiceFiles: Unable to back up image of service WtuSystemSupport since QueryServiceConfig API failed
 

System Error:

Das System kann die angegebene Datei nicht finden.

.
 

Error: (06/11/2016 03:17:26 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 

Details:

AddWin32ServiceFiles: Unable to back up image of service WtuSystemSupport since QueryServiceConfig API failed
 

System Error:

Das System kann die angegebene Datei nicht finden.

.
 

Error: (06/11/2016 03:16:54 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 

Details:

AddWin32ServiceFiles: Unable to back up image of service WtuSystemSupport since QueryServiceConfig API failed
 

System Error:

Das System kann die angegebene Datei nicht finden.

.
 
 

Systemfehler:

=============

Error: (06/13/2016 03:34:16 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Intel(R) Management & Security Application User Notification Service" ist vom Dienst "Intel(R) Management and Security Application Local Management Service" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1058
 

Error: (06/13/2016 03:32:19 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%-2140993535
 

Error: (06/13/2016 03:32:19 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 

%%-2140993535
 

Error: (06/13/2016 03:32:19 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%-2140993535
 

Error: (06/13/2016 03:32:19 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 

%%-2140993535
 

Error: (06/13/2016 03:32:19 PM) (Source: PNRPSvc) (EventID: 102) (User: )

Description: 0x80630801
 

Error: (06/13/2016 03:32:19 PM) (Source: PNRPSvc) (EventID: 102) (User: )

Description: 0x80630801
 

Error: (06/13/2016 03:32:15 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 

%%-2140993535
 

Error: (06/13/2016 03:32:15 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%-2140993535
 

Error: (06/13/2016 03:32:14 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%-2140993535
 
 

CodeIntegrity:

===================================

  Date: 2015-09-06 22:55:26.159

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\$RECYCLE.BIN\S-1-5-21-3766998740-2209911483-25742500-1000\$R1M0HDE.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-09-06 22:55:26.097

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\$RECYCLE.BIN\S-1-5-21-3766998740-2209911483-25742500-1000\$R1M0HDE.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-09-06 22:55:26.050

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\$RECYCLE.BIN\S-1-5-21-3766998740-2209911483-25742500-1000\$R0HJGU4.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-09-06 22:55:26.035

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\$RECYCLE.BIN\S-1-5-21-3766998740-2209911483-25742500-1000\$R1M0HDE.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-09-06 22:55:25.957

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\$RECYCLE.BIN\S-1-5-21-3766998740-2209911483-25742500-1000\$R0HJGU4.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-09-06 22:55:25.957

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\$RECYCLE.BIN\S-1-5-21-3766998740-2209911483-25742500-1000\$R1M0HDE.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-09-06 22:55:25.894

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\$RECYCLE.BIN\S-1-5-21-3766998740-2209911483-25742500-1000\$R0HJGU4.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-09-06 22:55:25.894

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\$RECYCLE.BIN\S-1-5-21-3766998740-2209911483-25742500-1000\$R1M0HDE.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-09-06 22:55:25.847

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\$RECYCLE.BIN\S-1-5-21-3766998740-2209911483-25742500-1000\$R0HJGU4.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-09-06 22:55:25.832

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\$RECYCLE.BIN\S-1-5-21-3766998740-2209911483-25742500-1000\$R1M0HDE.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz

Prozentuale Nutzung des RAM: 55%

Installierter physikalischer RAM: 6005.61 MB

Verfügbarer physikalischer RAM: 2680.07 MB

Summe virtueller Speicher: 12009.39 MB

Verfügbarer virtueller Speicher: 8414.58 MB
 

==================== Laufwerke ================================
 

Drive c: (WINDOWS) (Fixed) (Total:149.04 GB) (Free:70.57 GB) NTFS

Drive d: (Data) (Fixed) (Total:148.65 GB) (Free:39.81 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: E95727BD)

Partition 1: (Active) - (Size=400 MB) - (Type=27)

Partition 2: (Not Active) - (Size=149 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=148.7 GB) - (Type=07 NTFS)
 

==================== Ende von Addition.txt ============================

Hallo Jürgen,
der erste Schritt wurde erledigt, ich hoffe, ich habe alles richtig gemacht. Wenn du danach noch etwas brauchst einfach melden. ;)