| Solitaire | 09.08.2015 17:21 |
Goodgame Empire lässt sich nicht entfernen
Seit ein paar Tagen starten Chrome oder Firefox selbständig mit den Seiten von
hxxp://lp.bigfarm.goodgamestudios.com
Alle Versuche, das zu ändern sind bislang gescheitert, weder finde ich ein ICON, das ich löschen könnte, noch einen Eintag im Programmverzeichnis.
Mein Betriebssystem ist WIN 7 64Bit
Ich bitte freundlichst um Hilfestellung.
Ich habe Farbar Recovery Scan Tool FRST64 laufen lassen und poste hier das Ergebnis vom Editor: Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:08-08-2015 01
durchgeführt von Marquardt (2015-08-09 17:47:40)
Gestartet von C:\Users\Marquardt\Downloads
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-3509466961-1735761056-3003741893-500 - Administrator - Disabled)
Gast (S-1-5-21-3509466961-1735761056-3003741893-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3509466961-1735761056-3003741893-1002 - Limited - Enabled)
JMQ (S-1-5-21-3509466961-1735761056-3003741893-1004 - Limited - Enabled)
Marquardt (S-1-5-21-3509466961-1735761056-3003741893-1000 - Administrator - Enabled) => C:\Users\Marquardt
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Disabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB}
FW: McAfee Firewall (Enabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 18.0.0.180 - Adobe Systems Incorporated)
Adobe Bridge CC (64 Bit) (HKLM-x32\...\{359F8007-6486-429C-A8C5-D67F6897C88C}) (Version: 6.1.1 - Adobe Systems Incorporated)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.2.0.129 - Adobe Systems Incorporated)
Adobe Extension Manager CC (HKLM-x32\...\{244FD30F-63F1-49B9-9D98-1150FF4FFCB1}) (Version: 7.3.2 - Adobe Systems Incorporated)
Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Lightroom (HKLM-x32\...\{8048A5DF-8A70-5BE1-954B-E0FDE1BD0D0D}) (Version: 6.1.1 - Adobe Systems Incorporated)
Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0 - Adobe Systems Incorporated)
Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 3.2 64-bit (HKLM\...\{A94AABAE-52F0-48C4-9F94-A4CA4B423576}) (Version: 3.2.1 - Adobe)
Adobe Photoshop Lightroom 5.6 64-bit (HKLM\...\{D19E99C2-6D9D-4075-B446-B4387EAF70A5}) (Version: 5.6.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.8.158 - Adobe Systems, Inc.)
Adobe Touch App Plugins (HKLM-x32\...\{1EC083EE-5B76-4A2A-B95A-CAF460AA29D6}) (Version: 1.0 - Adobe Systems Incorporated)
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.1 - Sereby Corporation)
AllShare Framework DMS (HKLM\...\{C5850BE4-67AA-4CFB-894B-27F1172E42E0}) (Version: 1.3.14 - Samsung)
AMD Catalyst Install Manager (HKLM\...\{5AE0838D-19B1-5D12-5FE8-E6503B2C8716}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
ArcSoft Panorama Maker 5 (HKLM-x32\...\{31B620F7-A6E7-4F91-AF10-6EC9DB2EA564}) (Version: 5.0.9.46 - ArcSoft)
Ashampoo Burning Studio 10 10.0.7 (HKLM-x32\...\Ashampoo Burning Studio 10_is1) (Version: 10.0.7 - ashampoo GmbH & Co. KG)
Ashampoo Burning Studio 2010 Advanced (HKLM-x32\...\Ashampoo Burning Studio 2010 Advanced_is1) (Version: 9.2.4 - ashampoo GmbH & Co. KG)
Ashampoo Burning Studio 2012 v10.0.15 (HKLM-x32\...\Ashampoo Burning Studio 2012_is1) (Version: 10.0.15 - Ashampoo GmbH & Co. KG)
Ashampoo Undeleter v.1.10 (HKLM-x32\...\Ashampoo Undeleter_is1) (Version: 1.1.0 - Ashampoo GmbH & Co. KG)
ATI AVIVO64 Codecs (Version: 11.6.0.10707 - ATI Technologies Inc.) Hidden
Avanquest update (HKLM-x32\...\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}) (Version: 1.28 - Avanquest Software)
AVM FRITZ!Box Dokumentation (HKLM-x32\...\AVMFBox) (Version: - AVM Berlin)
AVM FRITZ!Box Druckeranschluss (HKLM-x32\...\AVMFBoxPrinter) (Version: - AVM Berlin)
BenVista PhotoZoom Pro 4.1.4 (HKU\S-1-5-21-3509466961-1735761056-3003741893-1000\...\PhotoZoom Pro 4) (Version: 4.1.4 - BenVista Ltd.)
Call Graph (HKLM-x32\...\Call Graph) (Version: - Sedna Wireless Pvt. Ltd.)
CameraHelperMsi (x32 Version: 13.25.1010.0 - Logitech) Hidden
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: - )
Canon IJ Network Scan Utility (HKLM-x32\...\Canon_IJ_Network_Scan_UTILITY) (Version: - )
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: - )
Canon MP Navigator EX 3.0 (HKLM-x32\...\MP Navigator EX 3.0) (Version: - )
Canon MP990 series Benutzerregistrierung (HKLM-x32\...\Canon MP990 series Benutzerregistrierung) (Version: - )
Canon MP990 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP990_series) (Version: - )
Canon Utilities My Printer (HKLM-x32\...\CanonMyPrinter) (Version: - )
Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 5.08 - Piriform)
CDRWIN 9 Basic (HKLM-x32\...\{E46C4D1B-39D0-4A9F-0001-6529DDC11226}) (Version: 9.0.11.0800 - Engelmann Media GmbH)
Color Efex Pro 3.0 Complete (HKLM-x32\...\Color Efex Pro 3.0 Complete Stand-Alone) (Version: 3.1.1.0 - Nik Software, Inc.)
CrystalDiskInfo 6.0.4 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.0.4 - Crystal Dew World)
Cut Out 3.0 pro (64bits) (HKLM\...\Cut Out pro(64bits)_is1) (Version: - Franzis.de)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2515 - CyberLink Corp.)
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.)
CyberLink PowerDVD Copy (HKLM-x32\...\InstallShield_{E3D04529-6EDB-11D8-A372-0050BAE317E1}) (Version: 1.5.1306 - CyberLink Corp.)
Dfx (HKLM\...\Tiffen-Dfx 3.0) (Version: 3.0 - Tiffen)
DownVision (HKLM-x32\...\DownVision_is1) (Version: 1.0 - DownVision) <==== ACHTUNG
Dropbox (HKU\S-1-5-21-3509466961-1735761056-3003741893-1000\...\Dropbox) (Version: 3.8.5 - Dropbox, Inc.)
DxO Optics Pro 9 (HKLM\...\{16ECAF16-C68E-4EE1-B9CD-8773D0F199AC}) (Version: 9.5.0 - DxO Labs)
DxO Optics Pro 9 Plug-in für Adobe Lightroom (HKLM-x32\...\{57817091-BC9F-4C72-A0CE-17C6D6DE45AB}) (Version: 1.0.20 - DxO Labs)
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
Exif-Viewer 2.51 (HKLM-x32\...\Exif-Viewer) (Version: 2.51 - Ralf Bibinger)
Facebook Messenger 2.1.4814.0 (HKLM-x32\...\{7204BDEE-1A48-4D95-A964-44A9250B439E}) (Version: 2.1.4814.0 - Facebook)
FILEminimizer Pictures (HKLM-x32\...\FILEminimizer Pictures_is1) (Version: - balesio AG)
Files Suite v1.2 (HKLM-x32\...\Files Suite_is1) (Version: - ASCOMP Software GmbH)
FileZilla Client 3.11.0.2 (HKLM-x32\...\FileZilla Client) (Version: 3.11.0.2 - Tim Kosse)
FinePrint (HKLM\...\FinePrint) (Version: 6.15 - FinePrint Software, LLC)
Free Countdown Timer 3.1.0 (HKLM-x32\...\{404245D0-E836-4737-9C12-D4D0034540F5}_is1) (Version: 3.1 - Comfort Software Group)
Free YouTube Download version 3.2.46.923 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.46.923 - DVDVideoSoft Ltd.)
Freecom GREEN BUTTON 1.68 (HKLM-x32\...\Freecom GREEN BUTTON_is1) (Version: - Freecom)
Freecom Hard Drive Eraser 1.08 (HKLM-x32\...\Freecom Hard Drive Eraser_is1) (Version: - Freecom)
Freecom Hard Drive Formatter 1.42 (HKLM-x32\...\Freecom Hard Drive Formatter_is1) (Version: - Freecom)
Freecom Hard Drive Info 1.05 (HKLM-x32\...\Freecom Hard Drive Info_is1) (Version: - Freecom)
Freecom Product Update 1.06 (HKLM-x32\...\Freecom Product Update_is1) (Version: - Freecom)
GetFLV 9.1.2.7 (HKLM-x32\...\GetFLV_is1) (Version: - GetFLV, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 44.0.2403.130 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Talk Plugin (HKLM-x32\...\{CA3DD97D-1FD7-37A7-BD5C-FC4430C8B8E6}) (Version: 5.41.2.0 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6710.2136 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden
GPL Ghostscript 8.71 (HKLM\...\GPL Ghostscript 8.71) (Version: - )
Imagenomic Portraiture 2.3 Plug-in (build 2308) (HKLM\...\ImagenomicPortraiturePlugin) (Version: - )
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.5.5.1003 - Intel Corporation)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 4.3.0.118 - IObit)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan)
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Logitech Vid HD (HKLM-x32\...\Logitech Vid) (Version: 7.2 (7240) - Logitech Inc..)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.0 - Logitech Inc.)
LWS VideoEffects (Version: 13.25.1005.0 - Logitech) Hidden
Mac Blu-ray Player (HKLM-x32\...\Mac Blu-ray Player) (Version: 1.9.5.0699 - MacGo)
MAGIX Screenshare (HKLM-x32\...\MAGIX_{C730B021-96D7-4F63-B52E-27F9A8155BE1}) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Screenshare (x32 Version: 4.3.6.1987 - MAGIX AG) Hidden
MAGIX Speed burnR (MSI) (HKLM-x32\...\MAGIX_{C7411D97-EF5E-46B2-8B49-E408A344DF82}) (Version: 7.0.2.6 - MAGIX AG)
MAGIX Speed burnR (MSI) (x32 Version: 7.0.2.6 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
McAfee SecurityCenter (HKLM-x32\...\MSC) (Version: 14.0.1076 - McAfee, Inc.)
McAfee Virtual Technician (HKLM-x32\...\McAfee Virtual Technician) (Version: 7.6.0.202 - McAfee, Inc.)
Medion Home Cinema (HKLM-x32\...\InstallShield_{AB770FDE-8087-4C98-9A85-BD64262C104C}) (Version: 6.0.0000 - CyberLink Corp.)
Medion Home Cinema (x32 Version: 6.0.0000 - CyberLink Corp.) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Image Composite Editor (HKLM\...\{B821CDAA-34DE-46FD-87C9-E6EE7158DB5D}) (Version: 1.4.4 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Outlook Personal Folders Backup (HKLM-x32\...\{C63E7C60-25EB-11D3-8EDA-00A0C911E8E5}) (Version: 1.10.0.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [DEU] (HKLM-x32\...\{BAC80EF3-E106-4AEA-8C57-F217F9BC7358}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Core Components (x64) ENU (HKLM\...\{8CCBEC22-D2DB-4DC9-A58A-E1A1F3A38C8A}) (Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Provider Services (x64) ENU (HKLM\...\{03AC245F-4C64-425C-89CF-7783C1D3AB2C}) (Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM-x32\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM-x32\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package (HKLM-x32\...\Microsoft Visual J# 2.0 Redistributable Package) (Version: - Microsoft Corporation)
Mozilla Firefox 39.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 39.0.3 (x86 de)) (Version: 39.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.1.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
MyFreeCodec (HKU\S-1-5-21-3509466961-1735761056-3003741893-1000\...\MyFreeCodec) (Version: - )
MyKeyFinder (HKLM-x32\...\MyKeyFinder_is1) (Version: 2012 - Abelssoft)
NAVIGON Fresh 3.4.1 (HKLM-x32\...\NAVIGON Fresh) (Version: 3.4.1 - NAVIGON)
NAVIGON Sync 2.0.0 (HKLM-x32\...\NAVIGON Sync) (Version: 2.0.0 - NAVIGON)
Nero BackItUp 12 Essentials (HKLM-x32\...\{0E3368AC-FB29-4C5E-938E-FA11C12D035E}) (Version: 12.0.01200 - Nero AG)
Nero Prerequisite Installer 2.0 (HKLM-x32\...\{0DBC021C-95D9-435A-A4B0-E6515AFD1A71}) (Version: 12.0.01000 - Nero AG)
Nik Collection (HKLM-x32\...\Nik Collection) (Version: 1.2.11 - Google)
NirSoft BlueScreenView (HKLM-x32\...\NirSoft BlueScreenView) (Version: - )
NTI Shadow for ReadyNAS (HKLM-x32\...\{019D7B6B-1123-40E5-AD82-73DC6FE78B30}) (Version: 3.7.9.73 - NewTech Infosystems)
Nuance PDF Converter Professional 7 (HKLM\...\{FFAE98FC-4E1A-45BB-ADED-081160A2CBD7}) (Version: 7.20.6187 - Nuance Communications, Inc.)
O&O DiskRecovery (HKLM-x32\...\{53480880-18E0-4097-A460-F22DD3AC6D70}) (Version: 4.0.1231 - O&O Software GmbH)
OGA Notifier 2.0.0048.0 (x32 Version: 2.0.0048.0 - Microsoft Corporation) Hidden
Olympus Digital Wave Player (HKLM-x32\...\{FB91E774-867B-4567-ACE7-8144EF036068}) (Version: - )
Orbit Downloader (HKLM-x32\...\Orbit_is1) (Version: - www.orbitdownloader.com)
Paragon Festplatten Manager 10 - Drive Backup (HKLM-x32\...\{F8013DD1-574B-4921-A473-88A2F7A34D16}) (Version: 90.00.0003 - Paragon Software)
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PHOTO Evolution PRO (HKLM-x32\...\{4DBEC42D-E6F8-4BC1-A2BD-12D2A6D3F3F3}_is1) (Version: - Franzis Verlag)
PhotoME (HKLM-x32\...\PhotoME_is1) (Version: 0.79R17 - Jens Duttke)
PhotoScape (HKLM-x32\...\PhotoScape) (Version: - )
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
ProtectDisc Helper Driver 10 (HKLM-x32\...\ProtectDisc Driver 10) (Version: 10.0.0.3 - )
QNAP Qfinder (HKLM-x32\...\QNAP_FINDER) (Version: 4.1.0.1113 - QNAP Systems, Inc.)
RAIDar 4.1.3 (HKLM-x32\...\RAIDar 4.1.3) (Version: - Netgear Inc.)
RealDownloader (x32 Version: 1.3.4 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM-x32\...\RealPlayer 16.0) (Version: 16.0.4 - RealNetworks)
Realtek Ethernet Controller Driver For Windows Vista and Later (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5995 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.43 - Piriform)
Remote PC Agent (HKLM-x32\...\{82730AAC-04BA-4684-A63F-286FB9847C15}) (Version: 5.00.000 - RSUPPORT)
Saal Design Software (HKLM-x32\...\SaalDesignSoftware) (Version: 3.9 - Saal Digital Fotoservice GmbH)
Saal Design Software (x32 Version: 3.9 - Saal Digital Fotoservice GmbH) Hidden
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14013.45 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.14013.45 - Samsung Electronics Co., Ltd.) Hidden
Samsung Link 1.6.0.1307200054 (HKLM\...\8474-7877-9059-0204) (Version: 1.6.0.1307200054 - Copyright 2013 SAMSUNG)
Samsung Story Album Viewer (HKLM-x32\...\InstallShield_{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.)
Samsung Story Album Viewer (x32 Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.)
Scansoft PDF Professional (x32 Version: - ) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Silver Efex Pro (HKLM-x32\...\Silver Efex Pro for Stand-Alone) (Version: 1.0.0.7 - Nik Software, Inc.)
SILVER projects professional (64-Bit) (HKLM\...\SILVER_PROJECTS_1_3_28B15F1D_is1) (Version: 1.13 - Franzis Verlag GmbH)
SimpleScreenshot 1.30 (HKLM-x32\...\SimpleScreenshot) (Version: - )
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.7 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.7.102 - Skype Technologies S.A.)
SmartTools Publishing • Outlook Backup (HKLM-x32\...\SmartToolsBackupv7.9) (Version: v7.9 - SmartTools Publishing)
SmartTools Publishing • Outlook E-Mail-AutoBackup (HKLM-x32\...\SmartToolsE-Mail-AutoBackupv1.50) (Version: v1.50 - SmartTools Publishing)
SmartTools Publishing • Outlook PST Toolbox (HKLM-x32\...\SmartToolsPST Toolboxv2.00) (Version: v2.00 - SmartTools Publishing)
SmartTools Publishing • Outlook Security Manager (HKLM-x32\...\SmartToolsSecurity Managerv2.00) (Version: v2.00 - SmartTools Publishing)
SmartTools Publishing • Outlook Sicherheitspaket 2014 (HKLM-x32\...\SmartToolsSicherheitspaket 2014v1.10) (Version: v1.10 - SmartTools Publishing)
Spotify (HKU\S-1-5-21-3509466961-1735761056-3003741893-1000\...\Spotify) (Version: 1.0.5.186.ga9c24d6a - Spotify AB)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.1.19 - Safer-Networking Ltd.)
StarMoney (x32 Version: 2.0 - StarFinanz) Hidden
Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
SyncToy 2.1 (x64) (HKLM\...\{88DAAF05-5A72-46D2-A7C5-C3759697E943}) (Version: 2.1.0 - Microsoft)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.40798 - TeamViewer)
Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)
Topaz ReMask 3 (64-bit) (Version: 3.2.1 - Topaz Labs) Hidden
Topaz ReMask 3 (x32 Version: 3.2.1 - Topaz Labs) Hidden
TreeSize Professional 5.3.4 (HKLM-x32\...\TreeSize Professional_is1) (Version: 5.3.4 - JAM Software)
TrekStor Windows98 SE driver (HKLM-x32\...\TrekStor Windows98 SE driver_is1) (Version: - My Company, Inc.)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.354 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.354 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.354 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 10.0.2011.48 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.2160.11 - TuneUp Software) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
Versandhelfer (HKLM-x32\...\dpdhl.versandhelfer) (Version: 1.4 - Deutsche Post AG)
Versandhelfer (x32 Version: 1.4 - Deutsche Post AG) Hidden
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: - Elaborate Bytes)
Visual C++ 2008 x64 Runtime - v9.0.30729.5026 (HKLM-x32\...\{0FB0306C-11D8-35F2-9AC9-121FA753F9AD}.vc_x64runtime_30729_5026) (Version: 9.0.30729.5026 - Microsoft Corporation)
Visual C++ 2008 x86 Runtime - v9.0.30729.5026 (HKLM-x32\...\{E04ACCBC-DF36-364E-87E8-6C24BB981AB8}.vc_x86runtime_30729_5026) (Version: 9.0.30729.5026 - Microsoft Corporation)
Viveza 2 (HKLM-x32\...\Viveza 2) (Version: 2.0.0.6 - Nik Software, Inc.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WEB.DE Club SmartFax (HKLM-x32\...\WEB.DE Club SmartFax) (Version: 2.00.235 - 1&1 Mail & Media GmbH)
WEB.DE Desktop Icons (HKLM-x32\...\1&1 Mail & Media GmbH 1und1DesktopIconsInstaller) (Version: 3.0.3.0 - 1&1 Mail & Media GmbH)
WEB.DE MailCheck für Internet Explorer (HKLM-x32\...\1&1 Mail & Media GmbH Toolbar IE8) (Version: 2.6.3.1 - 1&1 Mail & Media GmbH)
WEB.DE MailCheck für Mozilla Firefox (HKLM-x32\...\1&1 Mail & Media GmbH Toolbar FF) (Version: 2.10.1.1735 - 1&1 Mail & Media GmbH)
WEB.DE Online-Speicher 1.11.4174.0 (HKU\S-1-5-21-3509466961-1735761056-3003741893-1000\...\WEB.DE Application {sync-000021}) (Version: 1.11.4174.0 - 1&1 Mail & Media GmbH)
WEB.DE SmartDrive Manager (HKLM-x32\...\WEB.DE SmartDrive Manager) (Version: 2.0.613 - WEB.DE GmbH)
WEB.DE Softwareaktualisierung (HKLM-x32\...\1&1 Mail & Media GmbH 1und1Softwareaktualisierung) (Version: 3.0.3.0 - 1&1 Mail & Media GmbH)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live ID-Anmelde-Assistent (HKLM\...\{B0EFB716-085B-4564-8060-212E41F5CE50}) (Version: 6.500.3146.0 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows-Treiberpaket - OLYMPUS IMAGING CORP. (VNUSB) VNUSB (09/29/2009 2.0.0.0) (HKLM\...\75BD84FDFF77342C2A347F729669CBD84CE11B04) (Version: 09/29/2009 2.0.0.0 - OLYMPUS IMAGING CORP.)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Your Uninstaller! 7 (HKLM-x32\...\YU2010_is1) (Version: 7.3.2011.2 - URSoft, Inc.)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-3509466961-1735761056-3003741893-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Marquardt\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3509466961-1735761056-3003741893-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Marquardt\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-3509466961-1735761056-3003741893-1000_Classes\CLSID\{37447A9D-C7AD-DFFD-60FF-F2F04BC65D8A}\InprocServer32 -> kein dateipfad
CustomCLSID: HKU\S-1-5-21-3509466961-1735761056-3003741893-1000_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Marquardt\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3509466961-1735761056-3003741893-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Marquardt\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3509466961-1735761056-3003741893-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Marquardt\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3509466961-1735761056-3003741893-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marquardt\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3509466961-1735761056-3003741893-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marquardt\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3509466961-1735761056-3003741893-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marquardt\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3509466961-1735761056-3003741893-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marquardt\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3509466961-1735761056-3003741893-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marquardt\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3509466961-1735761056-3003741893-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marquardt\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3509466961-1735761056-3003741893-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marquardt\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3509466961-1735761056-3003741893-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marquardt\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3509466961-1735761056-3003741893-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Marquardt\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
==================== Wiederherstellungspunkte =========================
01-08-2015 19:01:33 Windows-Sicherung
06-08-2015 19:13:43 Windows Update
07-08-2015 16:09:46 Wiederherstellungsvorgang
07-08-2015 17:34:18 Configured Microsoft Office Enterprise 2007
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-11-01 13:02 - 2009-09-26 16:50 - 00002177 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 adobeereg.com
127.0.0.1 hxxp://www.adobeereg.com
127.0.0.1 activate.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 192.150.18.108
127.0.0.1 activate.adobe.com:443
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 adobeereg.com
127.0.0.1 www.adobeereg.com
127.0.0.1 activate.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 192.150.18.108
127.0.0.1 adobeereg.com
127.0.0.1 www.adobeereg.com
127.0.0.1 activate.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 192.150.18.108
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
Da befinden sich 7 zusätzliche Einträge.
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {009257B6-CCD7-460E-8DAA-25F60BA6B17E} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe <==== ACHTUNG
Task: {037F9339-F9EA-45AF-945A-16C685F331F5} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2013-05-16] (Safer-Networking Ltd.)
Task: {070744B4-0134-4AE3-AB75-66A72AA42AFB} - System32\Tasks\iSCSIAgentAutoStartup => C:\Program Files (x86)\QNAP\Qfinder\iSCSIAgent.exe [2013-11-13] ()
Task: {0878294C-91F0-4C3F-AEFB-F27E75C087AF} - System32\Tasks\AdobeAAMUpdater-1.0-Marquardt-PC-Marquardt => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-07-22] (Adobe Systems Incorporated)
Task: {136FCDDD-E517-4FAA-BC54-096CF4ABCA78} - \Advanced-System Protector_startup -> Keine Datei <==== ACHTUNG
Task: {14017541-4326-41E5-887B-B3930CB32746} - System32\Tasks\1und1 Konfiguration => C:\ProgramData\1und1InternetExplorerAddon\ConfigTask.exe [2011-04-19] (1und1 Mail und Media GmbH)
Task: {16D7B762-122A-4B16-8F04-A4A3F667F897} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-30] (Google Inc.)
Task: {17219559-6A62-4A65-99CD-BA72FF50DCD8} - System32\Tasks\{CCF65AAE-D576-4D6B-9BEA-8AF9334C0792} => pcalua.exe -a "C:\Users\Marquardt\Downloads\HiJackThis204 (1).exe" -d C:\Users\Marquardt\Downloads
Task: {183FB72D-80CC-4775-8738-EF1862408D23} - System32\Tasks\Express FilesUpdate => C:\Program Files (x86)\ExpressFiles\EFUpdater.exe <==== ACHTUNG
Task: {20D9EE79-759A-4F4C-9E52-522DC82F313B} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
Task: {27FFB048-7AD9-4B7D-83E9-F00E5D9F1D23} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2013-05-16] (Safer-Networking Ltd.)
Task: {3A783ADE-5F2E-4582-9284-676624B12472} - System32\Tasks\{7E9AB331-E1E2-4C63-9EC9-950F6DB70306} => pcalua.exe -a C:\Users\Marquardt\Downloads\irfanview_plugins_432_setup.exe -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {3BFD404B-2DE6-4C32-8D16-DEFA9EDD6D8A} - System32\Tasks\{90AE67D9-5C61-4FC6-A53B-7EC8DD583242} => pcalua.exe -a C:\Users\Marquardt\Downloads\irfanview_plugins_430_setup.exe -d C:\Users\Marquardt\Downloads
Task: {41BDC968-7C69-45C6-9D3F-12682619ECC4} - System32\Tasks\{8874CFBD-AEFF-4023-BB1A-20594C1C8920} => C:\Users\Marquardt\Downloads\iview430_setup.exe
Task: {555B6809-630B-4BC1-AED7-FD3671699CB7} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3509466961-1735761056-3003741893-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {59BB5819-A1B3-412E-AD35-F58CCE28AFF2} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2013-05-16] (Safer-Networking Ltd.)
Task: {5AE3D99A-D4A2-485E-BDB0-A95A83B78A57} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3509466961-1735761056-3003741893-1000Core => C:\Users\Marquardt\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {71A9CA96-71CB-42AD-BE9B-580E5FE3AE58} - System32\Tasks\{08967483-F718-47C8-8673-FE424095D177} => pcalua.exe -a C:\Users\Marquardt\Downloads\HiJackThis204.exe -d C:\Users\Marquardt\Downloads
Task: {71CDFEC6-29CD-405D-94C3-277F139AFF28} - System32\Tasks\Microsoft\Office Genuine Advantage\OGALogon => C:\Windows\system32\OGAExec.exe
Task: {73FC009A-CF5F-42CE-84E1-2A6A6A330C3B} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3509466961-1735761056-3003741893-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2014-08-12] (RealNetworks, Inc.)
Task: {7B6EAF1E-4315-45D7-A2F0-7711D8C460D4} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2015-06-25] (TuneUp Software)
Task: {87F85DF2-8167-486D-82EE-043DA9CDA105} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3509466961-1735761056-3003741893-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2014-08-12] (RealNetworks, Inc.)
Task: {8C04B52D-1CA1-4C1A-AB4C-50FA957DB366} - System32\Tasks\{382B6BC8-5F7D-4638-B9A2-A51BF4AD37FF} => C:\Program Files (x86)\Microsoft Office\Office14\OIS.EXE
Task: {90FD06D3-64FF-4042-875F-0BB752DAD81F} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3509466961-1735761056-3003741893-1000UA => C:\Users\Marquardt\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-05-27] (Dropbox, Inc.)
Task: {96F53737-03CA-465E-93E4-E29173D9E6E4} - \ASP -> Keine Datei <==== ACHTUNG
Task: {9ADDD690-121A-41EA-B303-981B77485869} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-06-08] (Oracle Corporation)
Task: {A042B2EC-7D46-404D-BA00-9D9A16ADFF12} - System32\Tasks\Registration 1und1 Task => C:\Program Files (x86)\1und1Softwareaktualisierung\cdsupdclient.exe [2015-01-12] (1&1 Mail & Media GmbH)
Task: {A3E8971F-9144-4AEC-8767-82DFDD3622F0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-15] (Adobe Systems Incorporated)
Task: {AF27951D-8E80-427F-8FE0-235232112862} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3509466961-1735761056-3003741893-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {B01ED2E0-0DED-47B9-80B6-6B584221DA8E} - System32\Tasks\Real Player-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Real\RealPlayer\update\RealOneMessageCenter.exe [2014-10-30] (RealNetworks, Inc.)
Task: {B0BFB78F-349D-48EC-93FF-5A0B4B8B126D} - System32\Tasks\{02376F7B-4695-4943-81DF-D5DB16CD9DAF} => C:\Users\Marquardt\Downloads\iview430_setup.exe
Task: {B3F3C3DD-D6DF-4F3F-B7CA-B8BC28268397} - System32\Tasks\Google Updater and Installer => C:\Users\Marquardt\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {B4501F76-E1D2-4349-87E5-5816A56B1A29} - System32\Tasks\ArcSoft Connect Daemon => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-10-27] (ArcSoft Inc.)
Task: {B507EACC-23B8-4F28-B10D-C0ECDE6D50E5} - System32\Tasks\{853DE03E-9E4F-4907-BC72-77C43C33D8AA} => pcalua.exe -a C:\Users\Marquardt\Downloads\javascr.exe -d C:\Users\Marquardt\Downloads
Task: {C35B8020-5D26-4AAB-8431-A8929742016E} - System32\Tasks\{893B287D-6129-412B-922E-5E8FBD9210EF} => pcalua.exe -a C:\Users\MARQUA~1\AppData\Local\Temp\{6CEA2863-7747-45C5-AE05-446AEF81E8D6}\setup.exe -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {C367DD04-10B4-419E-8CF0-0036FBA3C277} - System32\Tasks\{5F80AC51-DD87-47FE-A403-C88D4133A7AD} => pcalua.exe -a "C:\Program Files (x86)\ICQ6Toolbar\ICQUnToolbar.exe" -d "C:\Program Files (x86)\ICQ6Toolbar"
Task: {C9B03D65-64E8-4998-81E4-1D231D60A49E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-07-17] (Piriform Ltd)
Task: {CAD66149-ED46-4C10-BFAC-22E72F22B230} - System32\Tasks\{1CF79AE0-4617-48BF-9AD6-D85722F41AF9} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2015-07-18] (Skype Technologies S.A.)
Task: {CAE724A7-1F07-4B40-AC42-D84A24446EB4} - System32\Tasks\{C0931F4B-8C9B-44B8-A123-4CFBB4C87188} => pcalua.exe -a C:\Users\Marquardt\Downloads\Exif-Viewer-2.51D-Setup.exe -d C:\Users\Marquardt\Downloads
Task: {CCD5FE54-48B6-4229-A31C-0D52F0EE1392} - System32\Tasks\{CF13FB4C-54C1-409E-BAC5-776AA6C5F235} => pcalua.exe -a C:\Users\Marquardt\Downloads\setup_kadmos_irfanview_de.exe -d C:\Users\Marquardt\Downloads
Task: {CDA64884-F79C-4933-8493-DE583C5888A6} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3509466961-1735761056-3003741893-1000UA => C:\Users\Marquardt\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {CEBF35E7-4A0B-4218-A451-ED643B6E93C6} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3509466961-1735761056-3003741893-1000Core => C:\Users\Marquardt\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-05-27] (Dropbox, Inc.)
Task: {D2768960-E07C-4E0E-86B2-7DEF3C163980} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3509466961-1735761056-3003741893-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {D36893C7-105F-46EE-8880-58119780CBF7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-30] (Google Inc.)
Task: {DA9C3416-1F07-487D-9DE5-C18646791206} - System32\Tasks\{DD8C1EB0-3214-437C-AB71-D9605AB1625E} => pcalua.exe -a C:\Users\Marquardt\Desktop\OOMediaRecovery_4_de.exe -d C:\Users\Marquardt\Desktop
Task: {EFB2F4DF-8FAE-4BA1-A06A-49E8AF143DBC} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3509466961-1735761056-3003741893-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {F05A64DD-333D-40D1-8946-3BCD8FD296C6} - \Desk 365 RunAsStdUser -> Keine Datei <==== ACHTUNG
Task: {F0AA7FF0-A8B0-48A4-BB5F-C1A237F933F4} - System32\Tasks\Uninstaller_SkipUac_Marquardt => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-04-26] (IObit)
Task: {FCBB5F6F-DC34-4BEF-811F-95BE07F193F4} - System32\Tasks\{553AEE21-7751-4454-A786-26A8E7BADF3A} => C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe [2013-10-07] (Google)
Task: {FFBF5FAD-3A7E-4F87-97B4-F6283F066450} - System32\Tasks\{626F436C-B915-4EBB-8B20-6BCF5C5D4D6C} => pcalua.exe -a "C:\Users\Marquardt\AppData\Local\Temp\Rar$EX02.411\FocalPoint 2.0.9b.exe"
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3509466961-1735761056-3003741893-1000Core.job => C:\Users\Marquardt\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3509466961-1735761056-3003741893-1000UA.job => C:\Users\Marquardt\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3509466961-1735761056-3003741893-1000Core.job => C:\Users\Marquardt\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3509466961-1735761056-3003741893-1000UA.job => C:\Users\Marquardt\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2014-12-26 15:50 - 2015-03-30 09:02 - 00020240 _____ () C:\Windows\system32\spool\PRTPROCS\x64\TeamViewer_PrintProcessor.dll
2014-08-12 12:34 - 2014-08-12 12:34 - 00039056 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
2015-07-22 01:02 - 2015-07-22 01:02 - 00803488 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2015-06-02 17:18 - 2015-06-02 17:18 - 00043480 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2015-07-17 19:34 - 2015-07-17 19:34 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2015-06-25 07:53 - 2015-06-25 07:53 - 00699704 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll
2015-07-22 01:02 - 2015-07-22 01:02 - 31535264 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
2015-08-07 15:53 - 2015-07-31 08:46 - 01763144 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.130\libglesv2.dll
2015-08-07 15:53 - 2015-07-31 08:46 - 00093000 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.130\libegl.dll
2015-08-07 15:53 - 2015-07-31 08:47 - 28541768 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.130\PepperFlash\pepflashplayer.dll
2011-06-10 16:09 - 2008-05-26 10:52 - 00217088 _____ () C:\Program Files (x86)\NewTech Infosystems\NTI Shadow for ReadyNAS\NinjaDLL.DLL
2015-08-09 16:44 - 2015-08-09 16:44 - 00071168 _____ () c:\Users\Marquardt\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmptemuyi.dll
2015-06-18 11:06 - 2015-07-17 02:31 - 00012800 _____ () C:\Users\Marquardt\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll
2015-04-02 09:11 - 2015-07-17 02:31 - 00779776 _____ () C:\Users\Marquardt\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-07-21 07:27 - 2015-07-17 02:31 - 00056320 _____ () C:\Users\Marquardt\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-04-02 09:11 - 2015-07-17 02:31 - 00012288 _____ () C:\Users\Marquardt\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll
2013-07-06 19:09 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-07-06 19:09 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2013-07-06 19:09 - 2013-05-16 10:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2010-03-18 13:16 - 2009-12-09 18:55 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2015-06-02 17:18 - 2015-06-02 17:18 - 00039384 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2015-07-16 18:39 - 2015-07-16 18:39 - 00124416 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\fs-ext\build\Release\fs-ext.node
2015-07-16 18:39 - 2015-07-16 18:39 - 00121856 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-imslib\node_modules\ref\build\Release\binding.node
2015-07-16 18:39 - 2015-07-16 18:39 - 00122880 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-imslib\node_modules\ffi\build\Release\ffi_bindings.node
2015-07-16 18:39 - 2015-07-16 18:39 - 00188416 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
2015-07-16 18:39 - 2015-07-16 18:39 - 00085504 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ws\build\Release\bufferutil.node
2015-07-16 18:39 - 2015-07-16 18:39 - 00086016 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ws\build\Release\validation.node
2015-07-16 18:39 - 2015-07-16 18:39 - 00081408 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\idle-gc\build\Release\idle-gc.node
2013-04-19 17:29 - 2013-04-19 17:29 - 01113600 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\DMSManager.dll
2013-04-19 16:37 - 2013-04-19 16:37 - 00704000 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\ContentDirectoryPresenter.dll
2013-04-19 16:39 - 2013-04-19 16:39 - 00107008 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\DCMCDP.dll
2013-04-19 16:38 - 2013-04-19 16:38 - 00101376 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\FolderCDP.dll
2013-04-19 17:29 - 2013-04-19 17:29 - 00077312 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\MetadataFramework.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00520234 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\sqlite3.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00450560 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\MoodExtractor.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 05717504 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\DCMImgExtractor.dll
2013-04-12 08:58 - 2013-04-12 08:58 - 00028672 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\AutoChaptering.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00147456 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\libexpat.dll
2013-04-12 08:58 - 2013-04-12 08:58 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\VideoThumb.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 04671488 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\avcodec-52.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00070656 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\avutil-50.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00686080 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\avformat-52.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00152064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\swscale-0.dll
2013-04-19 17:29 - 2013-04-19 17:29 - 00028160 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\AudioExtractor.dll
2013-04-19 17:29 - 2013-04-19 17:29 - 00064000 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\ID3Driver.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00366592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\tag.dll
2013-04-12 08:58 - 2013-04-12 08:58 - 00289792 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\libThumbnail.dll
2013-04-19 16:58 - 2013-04-19 16:58 - 00023040 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\RichInfoDriver.dll
2013-04-19 16:58 - 2013-04-19 16:58 - 00017920 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\VideoExtractor.dll
2013-04-19 16:58 - 2013-04-19 16:58 - 00117248 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\ThumbnailMaker.dll
2013-04-12 08:59 - 2013-04-12 08:59 - 01033216 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\ImageMagickWrapper.dll
2013-04-19 16:58 - 2013-04-19 16:58 - 00133632 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\VideoMetadataDriver.dll
2013-04-19 16:58 - 2013-04-19 16:58 - 00290816 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\libKeyFrame.dll
2013-04-19 16:58 - 2013-04-19 16:58 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\SECMetaDriver.dll
2013-04-19 16:58 - 2013-04-19 16:58 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\ImageExtractor.dll
2013-04-12 08:58 - 2013-04-12 08:58 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\photoDriver.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00399826 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\libexif-12.dll.dll
2013-04-19 16:58 - 2013-04-19 16:58 - 00013824 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\TextExtractor.dll
2013-04-19 16:39 - 2013-04-19 16:39 - 00032768 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\Autobackup.dll
2013-04-19 16:38 - 2013-04-19 16:38 - 00055808 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\RosettaAllShare.dll
2013-04-15 18:52 - 2013-04-15 18:52 - 00227840 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\boost_serialization-vc90-mt-1_47.dll
2013-04-15 18:53 - 2013-04-15 18:53 - 00038912 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\boost_date_time-vc90-mt-1_47.dll
2013-04-15 18:52 - 2013-04-15 18:52 - 00012800 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\boost_system-vc90-mt-1_47.dll
2013-04-15 18:53 - 2013-04-15 18:53 - 00046592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\boost_thread-vc90-mt-1_47.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00044032 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\us.dll
2015-07-15 11:48 - 2015-07-15 11:48 - 17448624 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll
2009-02-26 13:46 - 2009-02-26 13:46 - 00064344 _____ () C:\Program Files (x86)\Microsoft Office\Office12\ADDINS\ColleagueImport.dll
2011-10-17 08:39 - 2014-01-12 08:19 - 00526464 _____ () C:\Program Files (x86)\SmartTools\Outlook E-Mail-AutoBackup\adxloader.dll
2011-06-22 11:46 - 2011-06-22 11:46 - 00434016 _____ () C:\Program Files (x86)\Microsoft Office\Office12\ADDINS\UmOutlookAddin.dll
2013-09-04 05:18 - 2011-05-07 03:53 - 00190836 _____ () C:\Program Files (x86)\SmartTools\Outlook E-Mail-AutoBackup\STP_FuncLib.dll
2013-07-10 18:07 - 2013-07-10 18:07 - 00756888 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Windows:nlsPreferences
AlternateDataStreams: C:\ProgramData\Temp:0574215C
AlternateDataStreams: C:\ProgramData\Temp:1CE11B51
AlternateDataStreams: C:\ProgramData\Temp:C5760A8B
AlternateDataStreams: C:\ProgramData\Temp:D95ACC7D
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Service"
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer trusted/restricted ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
Da befinden sich 7869 mehr eingeschränkte Seiten.
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3509466961-1735761056-3003741893-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Marquardt\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{43F5C469-4C13-4144-89AD-AEFA9B95279A}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\wlcsdk.exe
FirewallRules: [{FE1F85E5-F73F-4A30-8DEB-0AD65A4669EA}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [TCP Query User{26D18BA1-853A-4C25-B686-B9B6D0C8DA58}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [UDP Query User{3D1B5C41-0349-445D-944E-60F926313DAE}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [TCP Query User{209249FB-E08D-4142-BB7C-659642926C4B}C:\program files (x86)\orbitdownloader\orbitnet.exe] => (Allow) C:\program files (x86)\orbitdownloader\orbitnet.exe
FirewallRules: [UDP Query User{F5B0F22E-CEAF-49BE-A748-0471CADA8D3E}C:\program files (x86)\orbitdownloader\orbitnet.exe] => (Allow) C:\program files (x86)\orbitdownloader\orbitnet.exe
FirewallRules: [{5B0D4123-A2C5-428A-AE19-725E84F3CB51}] => (Block) C:\program files (x86)\orbitdownloader\orbitnet.exe
FirewallRules: [{E90ABF7D-ECD0-4B7F-9AD8-15CEB9C772B2}] => (Block) C:\program files (x86)\orbitdownloader\orbitnet.exe
FirewallRules: [{F568B1B9-2E9C-442B-9361-9C37E7F26010}] => (Allow) LPort=8946
FirewallRules: [{F7AFC586-E269-41D4-B31C-2C0C80166334}] => (Allow) LPort=8946
FirewallRules: [{73CF87E8-694E-4ED9-9D28-876D038CAC38}] => (Allow) C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
FirewallRules: [{5BA4B3C7-E1D6-4037-AADF-AE2EA57FDA45}] => (Allow) C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
FirewallRules: [{A61489FA-BC76-4827-AF3E-036F52B217FD}] => (Allow) C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
FirewallRules: [{C67EA9B0-28C6-41D7-BE17-F42E40849F84}] => (Allow) C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
FirewallRules: [{6491A146-4B93-47D9-99E0-67C8C2F78FD5}] => (Allow) C:\Users\Marquardt\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{B4E23AD4-140D-40E6-995B-A61835079997}] => (Allow) C:\Users\Marquardt\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{C324BCB8-4DB5-49EC-8E51-26CF6B075EFB}] => (Allow) C:\Program Files (x86)\Easy Downloads\easydownloads.exe
FirewallRules: [{462DB422-CED2-451B-BB03-E96A79BD80CF}] => (Allow) C:\Program Files (x86)\Easy Downloads\easydownloads.exe
FirewallRules: [TCP Query User{18990DF2-950D-411B-BC9E-6560505F2E5F}C:\users\marquardt\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\marquardt\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{E3B98285-18A1-47BF-8FF7-1FAD1B83DFFE}C:\users\marquardt\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\marquardt\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{3DAA11D4-C6EC-4F00-8C72-9B6C91F83594}] => (Allow) LPort=49163
FirewallRules: [{2C94DF47-9429-4AE1-9DE4-6B28D3A0D770}] => (Allow) LPort=5000
FirewallRules: [{2763A6D8-10C0-4281-A416-CC6F0AF8CF5D}] => (Allow) C:\Users\Marquardt\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{16644F1D-E1A7-41C0-A69A-309505E07442}] => (Allow) C:\Users\Marquardt\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{F85A306D-BBEC-470D-8F18-D03FDF84F649}] => (Allow) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
FirewallRules: [{FB4B42FD-C863-4C35-9522-86BBFE7629F0}] => (Allow) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
FirewallRules: [{A29D3727-67F6-4527-A797-262CD8565360}] => (Allow) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
FirewallRules: [{132EEE33-1EDD-4967-826E-0C9B465E4F04}] => (Allow) C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe
FirewallRules: [{9FB17FE3-7654-4D9C-8966-B85292D6A9DE}] => (Allow) C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe
FirewallRules: [{A9613272-ABE1-4914-A076-E5B3F6935D1F}] => (Allow) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
FirewallRules: [{7FFD5430-DAFE-4D19-9FA1-7E1C77A17CCB}] => (Allow) C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\AllShareFrameworkDMS.exe
FirewallRules: [{0DD4C632-9601-4E1D-9573-C1A5E1B11A36}] => (Allow) C:\Program Files\Samsung\AllShare Framework DMS\1.3.14\AllShareFrameworkDMS.exe
FirewallRules: [{D1D022A5-274D-46B5-AB12-EEADC39FC8BB}] => (Allow) LPort=8743
FirewallRules: [{75E5E26F-F0BA-4BA2-B41D-FD0BEC3617CB}] => (Allow) LPort=8643
FirewallRules: [{1EF441F2-210E-43EE-8677-C1EB061EEA77}] => (Allow) LPort=7676
FirewallRules: [{C93335BF-4861-4D0C-8992-0725935F7BA5}] => (Allow) LPort=7679
FirewallRules: [{B3578D72-3E20-4A52-90BF-83AC99CFE7D3}] => (Allow) LPort=24234
FirewallRules: [{2E83B408-FB8A-4866-87E3-DA90D5EED109}] => (Allow) LPort=7900
FirewallRules: [{B65DB2F0-6BF9-4C01-AF95-0280D9F1609D}] => (Allow) LPort=1900
FirewallRules: [{DA52DB79-0F20-4D9E-A8C7-D3F9288954F2}] => (Allow) C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{D6350721-F175-4171-AB88-09F7ECEBE89A}] => (Allow) C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{BE06CFB0-B2A5-4164-B2BA-0ACB6D98A2EE}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{6D9AA394-3D27-4F28-B58D-0819C3021E28}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{92957A33-D7DD-4A4D-8DC7-A90AC53E9389}] => (Allow) E:\fsetup.exe
FirewallRules: [{FD43A268-47BF-46C2-904C-5C59C55E1812}] => (Allow) E:\fsetup.exe
FirewallRules: [TCP Query User{BB009370-0A72-41C8-BE67-7E0545FA3416}C:\program files (x86)\netgear readynas\raidar.exe] => (Allow) C:\program files (x86)\netgear readynas\raidar.exe
FirewallRules: [UDP Query User{9469E0A6-2D83-427B-B674-29EDC62D1BFD}C:\program files (x86)\netgear readynas\raidar.exe] => (Allow) C:\program files (x86)\netgear readynas\raidar.exe
FirewallRules: [{505AB468-A51B-4E8B-9C89-10CC83463C38}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{71D38D7C-8494-4B14-878D-26F5729B0982}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{3058C58C-7622-41FB-8965-BE212FC96C4A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3AF10118-24E5-4055-89C5-1E726E106778}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{D264CD77-0AD3-495D-AF5E-29B2347C0F44}C:\users\marquardt\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\marquardt\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{88258D96-EDC3-45A2-B13B-C0425349EDD8}C:\users\marquardt\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\marquardt\appdata\roaming\spotify\spotify.exe
FirewallRules: [{C0FC002F-C2CC-466D-BC63-0405F66F5341}] => (Block) C:\users\marquardt\appdata\roaming\spotify\spotify.exe
FirewallRules: [{B30558B8-634E-4ABC-8191-D733411CE5B1}] => (Block) C:\users\marquardt\appdata\roaming\spotify\spotify.exe
FirewallRules: [{59670536-1063-43D3-AF0D-CDE5FC56F895}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{EC6BC13B-3961-44BE-9E1F-86845A9FFDF5}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{2B606C8A-F91E-45C9-8256-F4598FF15A43}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{D0A986EE-EA6E-4DF0-B621-0445C21AB4D9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{2F9F0EAD-4BBE-42D7-9DC4-B82ED7F334C1}] => (Allow) C:\Users\Marquardt\AppData\Roaming\McAfee\Supportability\MVTLogs\ProductDetection64.exe
FirewallRules: [{7D9DCDCC-9D89-4964-8978-148902A9AC17}] => (Allow) C:\Users\Marquardt\AppData\Roaming\McAfee\Supportability\MVTLogs\ProductDetection64.exe
FirewallRules: [TCP Query User{94BB6437-B00B-4A87-BAF4-ED3ABFF6950A}C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe] => (Allow) C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe
FirewallRules: [UDP Query User{00EB996A-1118-43A6-A4EF-4AC20840FFDD}C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe] => (Allow) C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe
FirewallRules: [{92C7D4AB-56A1-48E4-AEF6-14E4751343CE}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Orbitdownloader\orbitdm.exe] => Enabled:Orbit
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Orbitdownloader\orbitnet.exe] => Enabled:Orbit
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Call Graph\CallGraph.exe] => Enabled:Call Graph
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot-S&D 2 Tray Icon
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Samsung\Remote PC\rsautoup_.exe] => Enabled:RSupport AutoUpdate
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (08/09/2015 05:45:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rsautoup_.exe, Version: 3.1.6.1, Zeitstempel: 0x4eeb154e
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeaf722
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000d193
ID des fehlerhaften Prozesses: 0x1af4
Startzeit der fehlerhaften Anwendung: 0xrsautoup_.exe0
Pfad der fehlerhaften Anwendung: rsautoup_.exe1
Pfad des fehlerhaften Moduls: rsautoup_.exe2
Berichtskennung: rsautoup_.exe3
Error: (08/09/2015 04:45:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rsautoup_.exe, Version: 3.1.6.1, Zeitstempel: 0x4eeb154e
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeaf722
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000d193
ID des fehlerhaften Prozesses: 0x1624
Startzeit der fehlerhaften Anwendung: 0xrsautoup_.exe0
Pfad der fehlerhaften Anwendung: rsautoup_.exe1
Pfad des fehlerhaften Moduls: rsautoup_.exe2
Berichtskennung: rsautoup_.exe3
Error: (08/09/2015 04:14:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: mswsock.dll, Version: 6.1.7601.18254, Zeitstempel: 0x522be0b3
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000012c9
ID des fehlerhaften Prozesses: 0xa60
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3
Error: (08/09/2015 04:13:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 39.0.3.5696, Zeitstempel: 0x55c33d81
Name des fehlerhaften Moduls: mozalloc.dll, Version: 39.0.3.5696, Zeitstempel: 0x55c32c73
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001aa1
ID des fehlerhaften Prozesses: 0x1810
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3
Error: (08/09/2015 04:04:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rsautoup_.exe, Version: 3.1.6.1, Zeitstempel: 0x4eeb154e
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeaf722
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000d193
ID des fehlerhaften Prozesses: 0x4cc
Startzeit der fehlerhaften Anwendung: 0xrsautoup_.exe0
Pfad der fehlerhaften Anwendung: rsautoup_.exe1
Pfad des fehlerhaften Moduls: rsautoup_.exe2
Berichtskennung: rsautoup_.exe3
Error: (08/09/2015 03:37:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rsautoup_.exe, Version: 3.1.6.1, Zeitstempel: 0x4eeb154e
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeaf722
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000d193
ID des fehlerhaften Prozesses: 0x2250
Startzeit der fehlerhaften Anwendung: 0xrsautoup_.exe0
Pfad der fehlerhaften Anwendung: rsautoup_.exe1
Pfad des fehlerhaften Moduls: rsautoup_.exe2
Berichtskennung: rsautoup_.exe3
Error: (08/09/2015 02:37:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rsautoup_.exe, Version: 3.1.6.1, Zeitstempel: 0x4eeb154e
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeaf722
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000d193
ID des fehlerhaften Prozesses: 0x2068
Startzeit der fehlerhaften Anwendung: 0xrsautoup_.exe0
Pfad der fehlerhaften Anwendung: rsautoup_.exe1
Pfad des fehlerhaften Moduls: rsautoup_.exe2
Berichtskennung: rsautoup_.exe3
Error: (08/09/2015 01:37:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rsautoup_.exe, Version: 3.1.6.1, Zeitstempel: 0x4eeb154e
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeaf722
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000d193
ID des fehlerhaften Prozesses: 0x1e20
Startzeit der fehlerhaften Anwendung: 0xrsautoup_.exe0
Pfad der fehlerhaften Anwendung: rsautoup_.exe1
Pfad des fehlerhaften Moduls: rsautoup_.exe2
Berichtskennung: rsautoup_.exe3
Error: (08/09/2015 12:37:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rsautoup_.exe, Version: 3.1.6.1, Zeitstempel: 0x4eeb154e
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeaf722
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000d193
ID des fehlerhaften Prozesses: 0x78c
Startzeit der fehlerhaften Anwendung: 0xrsautoup_.exe0
Pfad der fehlerhaften Anwendung: rsautoup_.exe1
Pfad des fehlerhaften Moduls: rsautoup_.exe2
Berichtskennung: rsautoup_.exe3
Error: (08/09/2015 11:37:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rsautoup_.exe, Version: 3.1.6.1, Zeitstempel: 0x4eeb154e
Name des fehlerhaften Moduls: msvcrt.dll, Version: 7.0.7601.17744, Zeitstempel: 0x4eeaf722
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000d193
ID des fehlerhaften Prozesses: 0x2224
Startzeit der fehlerhaften Anwendung: 0xrsautoup_.exe0
Pfad der fehlerhaften Anwendung: rsautoup_.exe1
Pfad des fehlerhaften Moduls: rsautoup_.exe2
Berichtskennung: rsautoup_.exe3
Systemfehler:
=============
Error: (08/09/2015 05:51:00 PM) (Source: atapi) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort1 gefunden.
Error: (08/09/2015 05:48:58 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst WSearch erreicht.
Error: (08/09/2015 05:03:51 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80240020 fehlgeschlagen: Upgrade auf Windows 10 Home
Error: (08/09/2015 05:01:00 PM) (Source: atapi) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort1 gefunden.
Error: (08/09/2015 04:52:21 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {209500FC-6B45-4693-8871-6296C4843751}
Error: (08/09/2015 04:51:51 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "McAfee Home Network" wurde nicht richtig gestartet.
Error: (08/09/2015 04:51:33 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst mcpltsvc erreicht.
Error: (08/09/2015 04:51:33 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {20966775-18A4-4299-B8E3-772C336B52A7}
Error: (08/09/2015 04:50:32 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst mcpltsvc erreicht.
Error: (08/09/2015 04:50:32 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {26608B46-476A-4BF1-9CC6-AFEA28EBBC17}
Microsoft Office:
=========================
Error: (05/08/2015 10:51:51 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 360 seconds with 0 seconds of active time. This session ended with a crash.
Error: (05/08/2015 10:45:10 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 148 seconds with 120 seconds of active time. This session ended with a crash.
Error: (05/08/2015 10:42:33 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 694 seconds with 360 seconds of active time. This session ended with a crash.
Error: (04/13/2015 06:38:19 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 5 seconds with 0 seconds of active time. This session ended with a crash.
Error: (07/16/2014 07:40:09 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 153 seconds with 60 seconds of active time. This session ended with a crash.
Error: (04/07/2014 06:36:39 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 40 seconds with 0 seconds of active time. This session ended with a crash.
Error: (04/07/2014 06:35:47 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1284 seconds with 240 seconds of active time. This session ended with a crash.
Error: (02/25/2014 12:16:04 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 10 seconds with 0 seconds of active time. This session ended with a crash.
Error: (02/19/2014 09:26:07 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 175 seconds with 120 seconds of active time. This session ended with a crash.
Error: (01/28/2014 11:35:23 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 14 seconds with 0 seconds of active time. This session ended with a crash.
CodeIntegrity:
===================================
Date: 2015-08-01 21:37:01.286
Description: Die Integrität der Datei "\Device\HarddiskVolume2\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_10.0.10074.1_none_47662a2706182d6f\wermgr.exe" kann nicht geprüft werden, da das Signaturzertifikat gesperrt wurde. Erkundigen Sie sich beim Herausgeber, ob eine neue signierte Version des Kernelmoduls verfügbar ist.
Date: 2015-08-01 21:37:01.281
Description: Die Integrität der Datei "\Device\HarddiskVolume2\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_10.0.10074.1_none_47662a2706182d6f\wermgr.exe" kann nicht geprüft werden, da das Signaturzertifikat gesperrt wurde. Erkundigen Sie sich beim Herausgeber, ob eine neue signierte Version des Kernelmoduls verfügbar ist.
Date: 2015-08-01 21:37:01.277
Description: Die Integrität der Datei "\Device\HarddiskVolume2\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_10.0.10074.1_none_47662a2706182d6f\wermgr.exe" kann nicht geprüft werden, da das Signaturzertifikat gesperrt wurde. Erkundigen Sie sich beim Herausgeber, ob eine neue signierte Version des Kernelmoduls verfügbar ist.
Date: 2015-08-01 21:37:01.272
Description: Die Integrität der Datei "\Device\HarddiskVolume2\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_10.0.10074.1_none_47662a2706182d6f\wermgr.exe" kann nicht geprüft werden, da das Signaturzertifikat gesperrt wurde. Erkundigen Sie sich beim Herausgeber, ob eine neue signierte Version des Kernelmoduls verfügbar ist.
Date: 2015-08-01 21:37:01.188
Description: Die Integrität der Datei "\Device\HarddiskVolume2\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\amd64_microsoft-windows-errorreportingcore_31bf3856ad364e35_10.0.10074.1_none_a384c5aabe759ea5\wermgr.exe" kann nicht geprüft werden, da das Signaturzertifikat gesperrt wurde. Erkundigen Sie sich beim Herausgeber, ob eine neue signierte Version des Kernelmoduls verfügbar ist.
Date: 2015-08-01 21:37:01.183
Description: Die Integrität der Datei "\Device\HarddiskVolume2\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\amd64_microsoft-windows-errorreportingcore_31bf3856ad364e35_10.0.10074.1_none_a384c5aabe759ea5\wermgr.exe" kann nicht geprüft werden, da das Signaturzertifikat gesperrt wurde. Erkundigen Sie sich beim Herausgeber, ob eine neue signierte Version des Kernelmoduls verfügbar ist.
Date: 2015-08-01 21:37:01.178
Description: Die Integrität der Datei "\Device\HarddiskVolume2\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\amd64_microsoft-windows-errorreportingcore_31bf3856ad364e35_10.0.10074.1_none_a384c5aabe759ea5\wermgr.exe" kann nicht geprüft werden, da das Signaturzertifikat gesperrt wurde. Erkundigen Sie sich beim Herausgeber, ob eine neue signierte Version des Kernelmoduls verfügbar ist.
Date: 2015-08-01 21:37:01.172
Description: Die Integrität der Datei "\Device\HarddiskVolume2\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\amd64_microsoft-windows-errorreportingcore_31bf3856ad364e35_10.0.10074.1_none_a384c5aabe759ea5\wermgr.exe" kann nicht geprüft werden, da das Signaturzertifikat gesperrt wurde. Erkundigen Sie sich beim Herausgeber, ob eine neue signierte Version des Kernelmoduls verfügbar ist.
Date: 2015-08-01 21:37:01.131
Description: Die Integrität der Datei "\Device\HarddiskVolume2\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\amd64_microsoft-windows-errorreportingfaults_31bf3856ad364e35_10.0.10074.1_none_f3153036f55ab3f5\werfault.exe" kann nicht geprüft werden, da das Signaturzertifikat gesperrt wurde. Erkundigen Sie sich beim Herausgeber, ob eine neue signierte Version des Kernelmoduls verfügbar ist.
Date: 2015-08-01 21:37:01.126
Description: Die Integrität der Datei "\Device\HarddiskVolume2\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\amd64_microsoft-windows-errorreportingfaults_31bf3856ad364e35_10.0.10074.1_none_f3153036f55ab3f5\werfault.exe" kann nicht geprüft werden, da das Signaturzertifikat gesperrt wurde. Erkundigen Sie sich beim Herausgeber, ob eine neue signierte Version des Kernelmoduls verfügbar ist.
==================== Speicherinformationen ===========================
Processor: Intel(R) Core(TM) i7 CPU 860 @ 2.80GHz
Percentage of memory in use: 31%
Total physical RAM: 16375.11 MB
Available physical RAM: 11145.17 MB
Total Virtual: 32748.43 MB
Available Virtual: 26852.51 MB
==================== Drives ================================
Drive c: (Boot) (Fixed) (Total:905.41 GB) (Free:658.02 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: (Recover) (Fixed) (Total:25 GB) (Free:15.86 GB) NTFS
Drive e: (Reparaturdatenträger Windows 7 H) (CDROM) (Total:0.16 GB) (Free:0 GB) UDF
Drive f: (DATA Ablage Wechselplatte) (Fixed) (Total:931.51 GB) (Free:638.15 GB) NTFS
Drive m: () (Fixed) (Total:2794.39 GB) (Free:1288.99 GB) NTFS
Drive p: (Ablage Foto Solitaire NEU) (Fixed) (Total:3725.9 GB) (Free:1740.46 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 58ACC3C8)
Partition 1: (Not Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=905.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=25 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F42BAB32)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 3726 GB) (Disk ID: 00000000)
Partition: GPT Partition Type.
========================================================
Disk: 3 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 99DFB974)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)
========================================================
Disk: 4 (Size: 2794.5 GB) (Disk ID: 6F16F085)
Partition: GPT Partition Type.
==================== Ende von log ============================
|
Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
SecurityCheck und:
dann auf 
und dann auf 
. 
WARNUNG an die MITLESER: 
